last executing test programs: 2.856585506s ago: executing program 1 (id=920): r0 = socket(0x2, 0x80805, 0x0) sendmmsg(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x84, 0x1}], 0x10}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) (async) unshare(0x22020600) (async) unshare(0x2a020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x7, 0x0, 0x0, 0x10}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x94) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x1010, r2, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) (async) bind$rxrpc(r0, &(0x7f00000000c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x24) 2.652568891s ago: executing program 1 (id=926): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0x0, 0x8, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x788b1fda, 0x2}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6_vti0\x00', r4, 0x2f, 0x3, 0x58, 0x9, 0x0, @local, @dev={0xfe, 0x80, '\x00', 0x24}, 0x4001, 0x40, 0x9, 0x1000}}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0x44003}, 0x40000000) r9 = socket$rds(0x15, 0x5, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r10, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000}]}) write$ppp(r10, &(0x7f00000001c0)="38d5", 0x2) ioctl$FIONCLEX(r2, 0x5450) getsockopt(r9, 0x5, 0xd2b, &(0x7f0000000280)=""/72, &(0x7f0000000000)=0x48) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000540)={'ip6erspan0\x00'}) 1.7002194s ago: executing program 2 (id=947): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0x2, 0xbb, 0xbb, 0x0, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r2, 0x405, 0x70bd27, 0x8, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac05]}]]}, 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0x80c4) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x40890) r4 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1.557998485s ago: executing program 1 (id=948): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x3}}, 0x26) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x8}]}, 0x140}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000000c0)={0x1, 0x8, 0x10001, 0xc, 0x3}, 0x14) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0xa}}]}, 0x90}}, 0x0) 1.528194345s ago: executing program 2 (id=950): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@dellink={0x44, 0x10, 0xc07, 0x0, 0x25dfdbfb, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}]}, 0x44}}, 0x0) 1.343727004s ago: executing program 1 (id=953): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) r2 = gettid() socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 1.244466624s ago: executing program 2 (id=954): socket$key(0xf, 0x3, 0x2) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r2) (async) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8b20, &(0x7f0000000000)={'virt_wifi0\x00'}) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020f0000100000000000000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000000000000000000000000000000000000000000000000000000fc020000000000000000000000000000030006000000000002000000e0000001"], 0x80}}, 0x0) (async) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020f0000100000000000000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000000000000000000000000000000000000000000000000000000fc020000000000000000000000000000030006000000000002000000e0000001"], 0x80}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r5 = accept$alg(r4, 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000001100)=0x9) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000500)=0x1e) (async) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000500)=0x1e) sendmmsg$alg(r5, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8dfec6af2ae8080b56c53c12b8431d17955ae1ec78709eee9acf825fdb672651f7eafb44b576930aff4b6a86ced3e4392cfe57a2c11b97e93f38debd6dc69f3a50d5742daa7081df08bd8118dcd6d9d18830c7d79d8", 0xfffffe9f}, {&(0x7f00000000c0)="23ade41881a1e7ca07379924e2cb53138ec1e2ac415947eb6c7f56119ff98596d7469564e6d7c49134d1d57bf4cf20e6ba85156f3c5aa55a181146316537eceea0fff85f05333feea12645495ffa", 0x4e}, {&(0x7f0000000140)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a23", 0x34}, {&(0x7f0000000180)="fe6abb1be48e556b473cabd427d746ca7d9bbf4f24ec7659b1c254940281f0a248dfc8c103fad1369a53e3402210b77170735064ceae5fcf381d21cc8960440e0a459705262c4c53065f369fe8e63bc7650112b91fdccaceff93fd8cdab5a479b9614318eebc5a609b633b114fe330c840cc077cd6a6f6ca2bca0cc48c06177e0bc3b7fe6320e9f2e5a824d74aa3cccac383bacd0a126a58fa999675ad5c41c171807570ac0501332c2794950f4633a074325e58cd43d58340513dbc10eaaf4ff3c4b8d98621267d8b1abdbf01d7de9a86c2d4373dd907da5a", 0xd9}, {&(0x7f0000000280)="1b1eb47967b88f89e960c59413baaf1384ad9c758abf845c5714a919ca02735c5514fa78f9f084d72227c1d3f6607ce5a2183a169535d0b2bb594ecb92b8df361bca805ac5595a389d39a58a35c0ff662c2c83431c0c2e2ece5ca6a104d1d45c1c15ca4d75cab6b1bb923cac1c51270bf577cf4c79ba54a6c45a345cc13208fa430c1e54548e5a9c5cf45337451511abc0a7d3539ac22191025d", 0x9a}], 0x5}], 0x1, 0x4814) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0x48}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x4f}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24044040}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0x48}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x4f}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24044040}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x2, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x2, &(0x7f0000000040)=0x9, 0x4) 1.223703935s ago: executing program 4 (id=955): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x20000400) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x3c, 0x0, &(0x7f0000000080)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (rerun: 64) ioctl$FICLONE(r4, 0x40049409, r3) (async) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000000)={0x1d, 0x0, '\x00', [@pad1]}, 0x10) (async) write(r0, &(0x7f0000000040)="1300000032001f00030300f9002304000a04d6", 0x13) 1.063628573s ago: executing program 0 (id=956): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'macvtap0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r2, @ANYBLOB="14000100ff05000000000000dfce0000000000010800080002"], 0x34}}, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4048800) 1.061620115s ago: executing program 4 (id=957): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'veth1_to_hsr\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0xffffffffffffff8d}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0xa, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x87, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x6d, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r7, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x13, &(0x7f0000000080)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x44}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0xb}, @ldst={0x0, 0x3, 0x6, 0x1, 0x8, 0xfffffffffffffff8}], &(0x7f0000000140)='syzkaller\x00', 0x1, 0xe8, &(0x7f0000000280)=""/232, 0x40f00, 0x22, '\x00', r5, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xa, 0x0, 0x4}, 0x10, r6, r7, 0x6, 0x0, &(0x7f0000000740)=[{0x2, 0x4, 0x10}, {0x4, 0x2, 0x4, 0x1}, {0x0, 0x4, 0xd, 0x9}, {0x5, 0x1, 0x10, 0xb}, {0x0, 0x2, 0x6, 0xc}, {0x1, 0x1, 0x3}], 0x10, 0x5}, 0x94) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd000411001400000000006eec00be00442f0100000000000000000000ffff7f000001ff020000000000000000000000000001"], 0x7a) 904.853547ms ago: executing program 1 (id=958): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) poll(&(0x7f0000000280)=[{r2}], 0x1, 0x200000) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="05a300000000ffffffff0d00000008000300", @ANYRES32=r1], 0x1c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="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", @ANYRESHEX], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xfd9b}, 0x48) close(r4) 903.519987ms ago: executing program 2 (id=959): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000014000280050009000200"], 0x44}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1, 0x4, 0x8, 0x201}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001940)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000, r2}, 0x38) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000004c0)={r5, 0x3, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newaddrlabel={0x30, 0x48, 0x200, 0x4, 0x25dfdbfc, {0xa, 0x0, 0x10, 0x0, r5, 0x3}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 748.578263ms ago: executing program 4 (id=961): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x50801}, 0x4042040) 744.020011ms ago: executing program 3 (id=962): r0 = accept(0xffffffffffffffff, &(0x7f00000003c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000440)=0x80) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000480), &(0x7f00000015c0)=0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7b}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x1060, 0x0, 0x5, 0x101, 0x0, 0x0, {0xa}, [{{0x254, 0x1, {{0x0, 0x8}, 0xf9, 0xf8, 0x3, 0x0, 0x12, 'syz0\x00', "d02b0a980dd5b173437cd8beca2661daa4134e7405434b50bc33f7622e03523c", "9def9f5efa47d5866b4b595d31af3456bc3711d6242c31638ccfb48dd40dce6e", [{0x2, 0x8001, {0x3, 0x7fffffff}}, {0x8, 0x5, {0x1, 0x7}}, {0x9, 0x3, {0x1, 0x3ff}}, {0x7, 0xffff, {0x1, 0xc}}, {0x4, 0x100, {0x0, 0x4}}, {0x3, 0x2}, {0x2, 0x0, {0x3, 0x5}}, {0x9, 0x2, {0x3, 0xa0000000}}, {0x2, 0xd08c, {0x1, 0x231}}, {0x9, 0xfff3, {0x3, 0x40100}}, {0xb, 0x2, {0x2, 0x6}}, {0x9, 0x200, {0x3, 0x3}}, {0x10, 0x5, {0x3, 0x1}}, {0x2, 0x8a1b, {0x2, 0x6}}, {0xa99, 0x4, {0x2, 0x80000000}}, {0xd7, 0x9, {0x2, 0x200}}, {0x4, 0x3, {0x1, 0x24000}}, {0x8, 0x5, {0x1}}, {0xcf90, 0x6, {0x2, 0x2}}, {0x1, 0x9, {0x2, 0xe}}, {0x9, 0x6, {0x1, 0x1}}, {0x7d, 0xfeff, {0x3, 0x2}}, {0x101, 0x5, {0x3, 0x9}}, {0x873f, 0x5, {0x2, 0xffffffff}}, {0x5, 0xff71, {0x2, 0xb}}, {0x101, 0x7e2, {0x3, 0x4}}, {0x7, 0x9, {0x1}}, {0xff, 0x6f26, {0x0, 0x687}}, {0x4, 0x1, {0x0, 0x2}}, {0x9, 0x8, {0x1, 0x98264f5f}}, {0x7717, 0xd, {0x0, 0xfffffffd}}, {0x5, 0x4, {0x3, 0x4}}, {0x2, 0x5, {0x2, 0x6}}, {0x1000, 0x6, {0x3, 0x4}}, {0xf08f, 0xa, {0x2, 0x6}}, {0x3ff, 0x800, {0x2, 0x6}}, {0x9, 0x7, {0x1, 0x3}}, {0x1, 0xe49f, {0x0, 0x80000001}}, {0xc8, 0x6, {0x1, 0x5}}, {0xf2, 0xc10d, {0x3, 0x6}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0x7, 0x7, 0xfffd, 0x6, 0x2, 'syz0\x00', "d7db2ac1f0822ee49630d38ea81b4d488efcc653dee3c20148e2fa506effd972", "7d54f59919e44ac6dd44c14a3b37e7b79d176813d5e31291f3b8564ae011db66", [{0x10b1, 0x83, {0x0, 0xf}}, {0x0, 0x2, {0x0, 0x1}}, {0x0, 0xfff, {0x3, 0xfffffffb}}, {0x6, 0x0, {0x2, 0x81}}, {0x7ff, 0xf, {0x0, 0x81}}, {0xff, 0x0, {0x1, 0xb3f}}, {0x0, 0x9, {0x3, 0x5}}, {0x7, 0x3, {0x2, 0x1000}}, {0x200, 0x285, {0x1, 0x6}}, {0x1, 0x6, {0x1, 0xfffffffa}}, {0x9, 0x9, {0x1, 0x401}}, {0x5, 0x854, {0x0, 0x9}}, {0x6, 0x27, {0x1, 0x9}}, {0x81, 0x4, {0xc992a53ec86bdf9f, 0x3}}, {0x7, 0x9}, {0x4, 0x0, {0x1, 0x9}}, {0x5, 0xaa49, {0x0, 0x3}}, {0x4, 0x87d, {0x1}}, {0x200, 0xe, {0x2, 0xe9}}, {0x7ff, 0xfff7, {0x1, 0x3}}, {0x1, 0x0, {0x1, 0x5}}, {0xf5, 0x200, {0x1, 0x7}}, {0x8, 0x81, {0x3, 0x7}}, {0x7, 0x3ff, {0x3, 0x80000001}}, {0x80, 0xe, {0x1, 0xa13}}, {0x7, 0x910, {0x1, 0x10000}}, {0xfffc, 0xa, {0x0, 0x800}}, {0x4, 0x200, {0x3, 0x5}}, {0x4, 0xfff, {0x56ce35c8d8c0140b, 0x331}}, {0xc2, 0x9, {0x2, 0xe445}}, {0x7, 0x5, {0x0, 0x6}}, {0x0, 0x4f, {0x3, 0x4b96}}, {0x7, 0x6, {0x0, 0xf}}, {0x1, 0x6, {0x2, 0x8}}, {0x31, 0x7, {0x1, 0x3}}, {0x6, 0x1, {0x0, 0x5}}, {0x0, 0x0, {0x2}}, {0x401, 0x9fcd, {0x1, 0x2}}, {0x0, 0x5, {0x3, 0x9}}, {0x6, 0x3, {0x0, 0x1}}]}}}, {{0x254, 0x1, {{0x2, 0x3ff}, 0x6, 0x6, 0x8, 0x6, 0x14, 'syz1\x00', "f529aa3ab0f950b65fd3f3bdf7451b306fa816ca5ad95a0010dca8d67707c321", "636f27a5f293e7476aa7104b36887dfb04d16e133406caa520a84a71836a7ca6", [{0x9, 0x5, {0x0, 0x7}}, {0xff, 0x0, {0x3, 0x2}}, {0x2, 0x81, {0x0, 0x9}}, {0x7fff, 0x3, {0x1, 0x80}}, {0x8227, 0x8e, {0x3, 0x2}}, {0x1, 0x8000, {0x3, 0x5}}, {0x4, 0x8, {0xc0c2d44fca731353, 0x6}}, {0x1, 0x7fff, {0x0, 0xfffff801}}, {0x8, 0x0, {0x0, 0x5}}, {0x4, 0x10, {0x3, 0x9}}, {0xa, 0x101, {0x3, 0x5}}, {0xfffc, 0x1ff, {0x3, 0xffc0000}}, {0x4, 0x9, {0x1, 0xffffff6a}}, {0xcb, 0x1, {0x1, 0x6}}, {0x4e, 0x0, {0x1, 0x8}}, {0x2, 0x8, {0x2, 0x4}}, {0x8, 0xe2a6, {0x3, 0xe1}}, {0x3, 0x89e5, {0x1, 0xe}}, {0x9, 0x5, {0x1, 0xc3c7}}, {0x93, 0x7b5f, {0x2, 0x68}}, {0x4, 0x2, {0x1, 0x6}}, {0xc0, 0x0, {0x2, 0x2}}, {0xfff7, 0xfff, {0x3, 0xd}}, {0xf, 0x9, {0x3, 0x20d}}, {0x8, 0x1, {0x1, 0x4}}, {0x6, 0x9, {0x0, 0x9}}, {0x2, 0x8, {0x2}}, {0xc, 0x9, {0x1, 0xffff0001}}, {0x1, 0x8, {0x0, 0x40}}, {0x2, 0x6, {0x1, 0x3}}, {0xc, 0xc, {0x1, 0x2e1}}, {0x80, 0x5, {0x0, 0x1}}, {0x10, 0x2, {0x2}}, {0x264, 0x400, {0x1}}, {0x0, 0x7, {0x1}}, {0x40, 0xc, {0x2, 0x9}}, {0x6, 0x800, {0x3, 0xcc}}, {0x7, 0x7, {0x3, 0x8f}}, {0x0, 0xfffd, {0x3, 0x9}}, {0x10, 0x9, {0x2, 0x6}}]}}}, {{0x254, 0x1, {{0x2, 0x40}, 0x1, 0x3, 0x12, 0x7fff, 0x24, 'syz1\x00', "5a14f2fe9f2d9002f1f5d7d0b0edebad4ffbee130d55caa7f70c0a5c131617fa", "76234de85223b0047bb0dc639afe425c65f8313c4a579ff5647262ac53c97761", [{0x0, 0x7ee3, {0x2, 0x7fffffff}}, {0x7, 0xfff8, {0x1, 0x9}}, {0x7, 0x0, {0x2, 0x5}}, {0x5, 0x2, {0x1, 0x75f2}}, {0x8a0, 0x6, {0x1, 0x6}}, {0x9, 0xf801, {0x2, 0x953}}, {0x9a8, 0x3ff, {0x2, 0xfff}}, {0xcad6, 0x7ff, {0x1, 0x7f}}, {0xc41a, 0xb9, {0x2}}, {0x40, 0x1d, {0x3, 0x60}}, {0x67f, 0x8001, {0x0, 0xd25}}, {0x7, 0x5, {0x0, 0x9}}, {0xb00, 0x4193, {0x0, 0x7f}}, {0xffff, 0x4, {0x1, 0xfffffff8}}, {0xf01a, 0x675f, {0x2, 0xc2ab}}, {0x5, 0xe2a8, {0x3, 0x2}}, {0x7, 0x6, {0x0, 0x4}}, {0xb, 0x3, {0x1, 0x3}}, {0x62, 0x514, {0x1, 0x4}}, {0x4, 0x4, {0x1, 0x282}}, {0xffff, 0x401, {0x3, 0x637}}, {0x5, 0x0, {0x0, 0x4}}, {0x8000, 0x6, {0x3, 0x666}}, {0x80, 0x9267, {0x1, 0x4}}, {0x7, 0x8, {0x2, 0x80000001}}, {0x3, 0x5}, {0x5, 0xc, {0x0, 0x3e9}}, {0x2, 0x4, {0x1, 0xeb}}, {0x3, 0x1, {0x1, 0x9}}, {0x0, 0x2, {0x3}}, {0x9b, 0x4b, {0x1, 0x8}}, {0x101, 0x81, {0x2, 0xa99}}, {0xa, 0x2, {0x1, 0x5}}, {0xc000, 0x3cc6, {0x0, 0x6}}, {0x0, 0xa7c}, {0x8, 0x8, {0x3, 0x8000}}, {0x0, 0x0, {0x1, 0x40}}, {0x3ff, 0x5, {0x3, 0x4}}, {0xd, 0x1, {0x3, 0x109}}, {0x7, 0x5, {0x2, 0x81}}]}}}, {{0x254, 0x1, {{0x2, 0xb98f}, 0x1, 0xc, 0x7, 0xd9f0, 0xd, 'syz1\x00', "e1ffed47b2c2f9114c313c2e6c107b84696cc204ca81a14e5f7aa078ec05957b", "373b02c63a4684e02e375641bbbbc082b4968c7dae5692739d6f6b1f21d3dacb", [{0x4, 0x7, {0x0, 0x7f}}, {0x6, 0x7, {0x0, 0xa66c}}, {0xfff, 0x7fff, {0x1}}, {0x3, 0x400, {0x1, 0x68910792}}, {0x3ff, 0x2, {0x1, 0x33}}, {0x7, 0x5, {0x1, 0x1}}, {0x7, 0xfffe, {0x1, 0x4a5d64d1}}, {0x0, 0x5, {0x0, 0x7}}, {0x8, 0x6711, {0x1, 0x1}}, {0x0, 0x6, {0x2, 0x6}}, {0x101, 0x2, {0x1}}, {0xab, 0x5, {0x104d38d85c8f0b65, 0x6}}, {0x4, 0x8001, {0x0, 0x10}}, {0x3, 0x9, {0x2, 0xfffffff7}}, {0xd70, 0x3, {0x1}}, {0x6, 0x9, {0x3, 0x4}}, {0x9, 0xfffc, {0x3, 0x9}}, {0x8, 0x6, {0x2, 0x3ff}}, {0x1, 0x6, {0x1, 0x8000}}, {0x9, 0x6, {0x1, 0x8}}, {0x8, 0xb, {0x2, 0x80000000}}, {0x9, 0x2, {0x1, 0xb}}, {0x6, 0x6, {0x2, 0x2}}, {0x0, 0x8000, {0x0, 0x80}}, {0x6, 0xc, {0x1}}, {0x400, 0x5f, {0x1, 0xfffffff9}}, {0x2, 0x81, {0x3, 0xa4000000}}, {0xffff, 0x6, {0x0, 0x44}}, {0x2, 0x4, {0x2, 0xffffffd8}}, {0x1, 0x4, {0x3, 0x2}}, {0x7, 0x775, {0x3, 0x7}}, {0x6, 0xcf5d, {0x0, 0x6}}, {0x6, 0xc7e, {0x1, 0x7}}, {0x8001, 0x74cd, {0x0, 0x1}}, {0xd2, 0xb, {0x2, 0x2}}, {0x5, 0x7, {0x3, 0x3}}, {0xb1, 0x1, {0x1, 0x8001}}, {0x8, 0x7, {0x3, 0x5}}, {0x0, 0x8375, {0x1}}, {0x7, 0x3, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x2, 0xf}, 0xb0, 0x3, 0x9, 0xfbb4, 0x7, 'syz0\x00', "e0e0e935cb7573e275e1d878daebbcc680a3fe1da14ca08b839014f26b09630e", "63c365518437c1fabe4207a50449e5602018353d23c9c2c417f7151ae31da960", [{0x6, 0x4, {0x1, 0x9}}, {0x7f, 0x518, {0x0, 0xb653}}, {0x2, 0xfff, {0x3, 0x400}}, {0xd, 0x8, {0x0, 0xe}}, {0x5, 0x7, {0x0, 0x7e5}}, {0x6, 0x3, {0x1, 0x4}}, {0x8, 0xa90, {0x0, 0x3}}, {0x739d, 0x2, {0x2, 0x9}}, {0x5f6a, 0x3, {0x2, 0xe}}, {0x5, 0x9, {0x0, 0xfffffffb}}, {0x4, 0x4, {0x0, 0x381}}, {0x180, 0xfc00, {0x2, 0x1}}, {0xff, 0x3, {0x0, 0x702}}, {0x6, 0x0, {0x0, 0x40}}, {0xffff, 0xff, {0x2, 0x2000000}}, {0xd836, 0x1000, {0x1, 0x9}}, {0x0, 0x1, {0x2, 0xc}}, {0x6, 0x8, {0x3, 0x3a}}, {0x800, 0xa93a, {0x0, 0x5}}, {0x50, 0xc12, {0x1, 0x3}}, {0x7, 0x1, {0x0, 0x8000}}, {0x770, 0x0, {0x2, 0x400}}, {0x3000, 0x9, {0x0, 0x9}}, {0x5, 0x400, {0x2, 0x4}}, {0xf, 0x7, {0x0, 0x3}}, {0x3, 0x4, {0x3, 0x9}}, {0x8, 0x101, {0x0, 0xd24}}, {0xe, 0x1, {0x1, 0x7}}, {0x0, 0xb, {0x1}}, {0x1, 0x4, {0x1, 0x6}}, {0x6, 0x8, {0x1, 0x954b}}, {0x4, 0x81, {0x1, 0x5}}, {0xff90, 0x2, {0x3, 0x4c}}, {0x7, 0x8, {0x2, 0x1}}, {0x8, 0xb, {0x3, 0x7}}, {0x1, 0x3, {0x0, 0x1ff}}, {0x8, 0x64a, {0x0, 0x6c}}, {0x4, 0x7ff, {0x2, 0x5}}, {0xffff, 0xfff7, {0x1, 0x8}}, {0x8, 0x1, {0x2}}]}}}, {{0x254, 0x1, {{0x3}, 0x9, 0x2, 0x2, 0x3, 0xb, 'syz1\x00', "232b2ffbea8d4c02be6300f38e4ccbf4565f4cc3e50da16132670ddf4749df4f", "a3eb300ce06e8c26bff514270596a6d88e1e9974db9f543dd23677a475891f9d", [{0xb, 0x9, {0x2, 0x16}}, {0x6f5, 0x8, {0x3, 0x8}}, {0xfff8, 0x7, {0x1, 0x1}}, {0x4d5c, 0x3, {0x0, 0x6}}, {0x5b5c, 0x7, {0x0, 0x2}}, {0xcca, 0x3, {0x1, 0x5}}, {0x7, 0x5, {0x0, 0x4}}, {0x9, 0x4, {0x2, 0x4}}, {0x0, 0x1, {0x3, 0x8}}, {0xd, 0x7, {0x0, 0x3}}, {0x40, 0x7, {0x3, 0x3}}, {0x200, 0xa, {0x0, 0x2}}, {0x3, 0x1, {0x2, 0x5}}, {0x9, 0x9, {0x0, 0x6}}, {0x7, 0x3, {0x3, 0xe71}}, {0x9, 0x4, {0x3, 0x8}}, {0xa, 0x8, {0x3, 0x8}}, {0x0, 0x1, {0x0, 0xc}}, {0x2, 0x823d, {0x1, 0x8}}, {0x4, 0x6, {0x3}}, {0x8, 0x9, {0x1}}, {0xb7, 0x0, {0x1}}, {0x8, 0x100, {0x2, 0x3}}, {0x400, 0x0, {0x3, 0x3}}, {0x8, 0x1ff, {0x3, 0x9}}, {0x3, 0x9688, {0x1, 0x5}}, {0x8001, 0x1, {0x2}}, {0x7, 0x8001, {0x1, 0x5}}, {0x40, 0x24e, {0x5, 0x5}}, {0xfff8, 0x8, {0x0, 0x8}}, {0x249e, 0xece9, {0x0, 0xea1}}, {0x1, 0x0, {0x0, 0x4}}, {0x5, 0x4, {0x3, 0x3}}, {0x3, 0x6, {0x1, 0x4}}, {0x8, 0x8, {0x0, 0x1}}, {0x1080, 0x9, {0x2, 0x2}}, {0x6, 0x4, {0x3, 0x7}}, {0x1, 0xc54e, {0x2, 0x2}}, {0x8ce3, 0x7f, {0x1, 0x1000}}, {0xde9, 0x101, {0x2, 0xf}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b703000000000000850000005100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010f000000000000000003000000080004"], 0x1c}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x18}}, 0x80) 624.691164ms ago: executing program 0 (id=963): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x6, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0701000009090c040500feff"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11}, 0x90) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000480)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x4b, 0x820a, 0x5, 0x10001, 0x0}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0xe}, &(0x7f0000000100)=0x8) socket$isdn_base(0x22, 0x3, 0x0) (async) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x6, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0701000009090c040500feff"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11}, 0x90) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000480)) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x4b, 0x820a, 0x5, 0x10001}, &(0x7f0000000040)=0x10) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0xe}, &(0x7f0000000100)=0x8) (async) 623.864185ms ago: executing program 2 (id=964): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000055002f03000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="000000ce0f"], 0x38}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r2 = socket(0x10, 0x2, 0x6) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f00000001c0)={0x6, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @remote}]}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000001940)=""/4102, 0x1006}, {&(0x7f0000000040)=""/74, 0x4a}, {&(0x7f00000004c0)=""/6, 0x6}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x8}, 0x5}], 0x4, 0x20, 0x0) listen(r1, 0x6) 619.083427ms ago: executing program 4 (id=965): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, &(0x7f0000000180)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) 564.917174ms ago: executing program 3 (id=966): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000bc0)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x110, 0x220, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @broadcast}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @remote, @remote}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @remote, @remote}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000380)={0x0, &(0x7f0000000500)}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x58}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xa0, 0x1, 0x3, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFQA_CT={0x8c, 0xb, 0x0, 0x1, [@CTA_TUPLE_MASTER={0x88, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x20}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010100}}}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8081}, 0x20008105) setsockopt$sock_attach_bpf(r2, 0x84, 0x7b, 0x0, 0x0) socketpair(0x23, 0x1, 0x8, &(0x7f00000000c0)) socketpair(0x11, 0x6, 0x7b1beeeb, &(0x7f0000000700)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff, 0xfffffffe}, 0x1b) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c00028018000200080000000a0001"], 0x48}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) 537.355858ms ago: executing program 2 (id=967): unshare(0x2c060000) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x10d00, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) listen(r2, 0x3ff) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) 480.59278ms ago: executing program 0 (id=968): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x148, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3f00}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xbbe}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xb}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5d51}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xf4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x4a2a1475b880ff68}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xe6fd1a94}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000001}, 0x840) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4d, 0xfffffff9, 0x6, 0x7, 0x7f, 0xb2, 0x7, 0xf9, 0x68, 0x6, [0x3, 0x9, 0xffff7fff, 0x4, 0x8, 0x80, 0x8000]}}) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0xb8, r2, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_SOCK={0x98, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xb8}}, 0x0) 477.731637ms ago: executing program 4 (id=969): ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)) (async, rerun: 64) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async, rerun: 32) r4 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r4, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async, rerun: 64) r7 = accept4(r4, 0x0, 0x0, 0x0) (rerun: 64) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) recvmmsg$unix(r7, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000008c0)=""/89, 0x59}, {&(0x7f0000000200)=""/252, 0xfc}], 0x2}}], 0x2, 0x10000, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xff80, 0xf}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) (rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r9 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x58, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r10, {0x3, 0xfff3}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x20, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}]}]}}]}, 0x58}}, 0x200400d4) 374.602384ms ago: executing program 0 (id=970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'vlan0\x00', 0x400}) close(r0) 363.790253ms ago: executing program 3 (id=971): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd4, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) splice(r0, &(0x7f00000001c0)=0x794df38f, r0, &(0x7f00000002c0)=0x80, 0xfffffffffffffb65, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd1, 0x0, 0x4) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='freezer.state\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1c, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4e}, [@ldst={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, 0x0}}], 0x1, 0x48000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x294, 0x30, 0x300, 0x71bd23, 0x25dfdbff, {}, [{0x280, 0x1, [@m_bpf={0x2c, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x178, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x14a, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0xd8, 0xd, 0x0, 0x0, {{0xb}, {0xac, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2b08}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0xfffffffd, 0x4, 0x3, 0x4}, 0xb}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xa, 0x3d5, 0x1, 0x101, 0x3ff}, 0x9}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xd06a, 0x3, 0x5, 0x0, 0x986}, 0xe}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000280)={0xa, 0x0, 0xb6, @empty, 0x0, 0x2}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000300)={@loopback, @local, 0x0, 0x8, [@dev={0xac, 0x14, 0x14, 0x3c}, @loopback, @private=0xa010100, @remote, @dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010100, @remote, @multicast2]}, 0x30) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffffffd}]}}]}, 0x38}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffff8}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000540)=0x40, 0x8) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x9, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5, 0x15, 0x8}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) 220.780668ms ago: executing program 3 (id=972): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0x2, 0xbb, 0xbb, 0x0, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r2, 0x405, 0x70bd27, 0x8, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac05]}]]}, 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0x80c4) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x40890) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 210.117516ms ago: executing program 3 (id=973): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x30, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3ff, 0x1b}}}}, [@NL80211_ATTR_PID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x48090) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES16=r4, @ANYBLOB="010000000000fddbdf25010041000c00050025000000000000000c0002000000000000000000100007800c"], 0x3c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="b601000000000000bd110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03bf3a48dfe3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f631cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc36b3d7c734a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9d74aa222038994dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b223ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bf050c719661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebe646302bf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc02846ac5791278f18c6759e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb5d5505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6ddeb67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff82794203da18db6fcf89715c2d338f78d8b9220171b41f528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef0000000000000000000037fcffffffffffffff8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03d0e119c963a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac038e9e17136e7c698f73faaabb3d00000000000080014573789425c4c32da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767cd755783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a47464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f916b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf07000000eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac80574fa3ea312997ab81bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d40837dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b86670000000000000000b27a2616c03cdf6c009447a652bca9b325e73c0737d5b717945e4fe7a169c5e2c54fc71a4104aa7cf0f5d30e2fcd9503650edbd8a5971a9a1fde5e5df37469ae204a6e899eacc1e63034cbabc5604739881cb82604bed3e53696a0606b26b879ef232a1a038291389593d1575cb79aa8284cf01a7e1a456acab9d8d608ad69d4c4b56492af7004e7ed9d47c5db3d76a00bea7c804f3a3638408bc1636f1009b7f185f51606918eaa0ab6bef11ae3d300"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 202.137276ms ago: executing program 0 (id=974): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r2}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESHEX=r2], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r3, 0x0, 0x1}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x94}]}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYRES32=r4, @ANYRES32=r12, @ANYBLOB="000000000021010024001280110001006272696467655f736c617665000000000c00058008002200", @ANYRES8=0x0, @ANYBLOB="a91227d6db4445154e8cbd"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$inet(r7, &(0x7f0000000640)={&(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, &(0x7f0000000240)=[{&(0x7f00000002c0)="0152e4b159c15a4f66af6ff687832e490ff4bd8ce775f57279f28143c7f4770e38cc302d39484923df79a2ccda7a07bba3201b548426e338ad7d24d37535954e895e4b4c69f46f8096280b80f1f178c8f2ceeedd9bf6eb3d4a24f9", 0x5b}, {&(0x7f0000000340)="31f336e4fd4226bc69ce0a61ecdb2856e45668ec8bb26e17eeaf44d042933c7e6d29f25de11b01aaaaaff679449ef925832b099ed54b8b1603a936d9d64e9e3e744ab9589996050cda1ac67fbfaf5001f991d1177aff3ae3d362d3e00417dd9b88f23dc8e2abaa2d28ca10c5fc924fc4329529c3cce7b79de5aad0623b3ee469a10a9def209559337b28ba6a940e0edb24f9748f2489cff5e363975534d5395ac7494bcca1bc6bde4d78b0b830a5c2aebc96dd2c04d130491be1e6d0c956ee525bcff41bf8f96f8aafe05136f357f12f3aa967c08e8f719dd51ee0eff102eb9a338a8c634bdcbdd7e603d948f0fc3adbf1ee128d", 0xf4}, {&(0x7f0000000140)="103a501dbff8103109eac9a7e350ba4c21fd71872a9127ef98a5befa8225092957e6052e4d152bab09d87b4c7ae467acfdda9a17bdb2b9d41e0f2c21fff2dc", 0x3f}, {&(0x7f0000000440)="b74f089c9cc7e3d65cc1d6fee7239b78437cd5384438d76fda5c155d57b2f370a86774e403c520a74c93b0a269cab764b897909fd4020ad18a680ba38e73075f5c243b9196d7803697f5d47bd6655b2748334d77101fb6aa59a346f690d80860b65a0f1876891ae70cd4bb4bf4badde00c3497f8b127bcc11e21f8fc33a664c2d145ca24af1863ed046a3c8f39d17c21a7798037f0d0da4e30d805dc001369bef2e6", 0xa2}], 0x4, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x62}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3554}}], 0xa8}, 0x4048086) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 84.665671ms ago: executing program 4 (id=975): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', r1, 0x2f, 0x0, 0xf1, 0x9, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8000, 0x8000, 0x0, 0xffffffff}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@delqdisc={0x12c, 0x25, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xa, 0x1}, {0xfff2, 0xb}, {0x5, 0x70f23829c0faad02}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfff}, @TCA_STAB={0xa0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xe9, 0x4, 0x8a, 0x1, 0x3, 0x101, 0x6}}, {0x10, 0x2, [0x0, 0x1, 0x9, 0x0, 0x0, 0x5]}}, {{0x1c, 0x1, {0xca, 0x1b, 0x40, 0x3, 0x1, 0xb47, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x5]}}, {{0x1c, 0x1, {0x4, 0x14, 0x1ff, 0x6, 0x0, 0x9, 0x47, 0x1}}, {0x6, 0x2, [0x400]}}, {{0x1c, 0x1, {0x0, 0x6, 0x0, 0x9, 0x2, 0x7, 0xed5, 0x3}}, {0xa, 0x2, [0x9e4, 0xff, 0x34e]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x0, 0x3, 0x2, 0x7, 0x0, 0x3}}, {0xa, 0x2, [0x4, 0x7fff, 0xffff]}}, {{0x1c, 0x1, {0x6, 0x10, 0x0, 0xf, 0x1, 0x5, 0x3, 0x1}}, {0x6, 0x2, [0x1]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x12c}}, 0x24000041) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) 83.387936ms ago: executing program 3 (id=976): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0x2b, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x5, 0x14, 0x0, &(0x7f0000000000)='%', 0x0, 0x7fffffff, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) ppoll(&(0x7f0000000180)=[{r4}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x30, r5, 0x1, 0x70bd2a, 0x40000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x1}}}}, 0x30}}, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={{0x14}, [], {0x14}}, 0x28}}, 0x81) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x24048062) 54.093248ms ago: executing program 0 (id=977): syz_emit_ethernet(0xbc, &(0x7f00000000c0)={@local, @random="0074d47f4800", @void, {@ipv6={0x86dd, @tipc_packet={0x6, 0x6, "191c62", 0x86, 0x6, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x32}, {[@fragment={0x3c, 0x0, 0x40, 0x1, 0x0, 0x14, 0x68}, @srh={0x0, 0x6, 0x4, 0x3, 0x5, 0x8, 0x0, [@private1, @remote, @dev={0xfe, 0x80, '\x00', 0x2a}]}, @dstopts={0x3c, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0xb}, @jumbo={0xc2, 0x4, 0x2}]}], @payload_named={{{{{0x2e, 0x0, 0x1, 0x0, 0x0, 0xa, 0x0, 0x2, 0xfffd, 0x0, 0x1, 0x6, 0x3, 0x2, 0x40, 0xfffa, 0x1, 0x4e21, 0x4e23}, 0x4, 0x1}, 0x0, 0x3}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000580)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x6c}}, 0x0) 0s ago: executing program 1 (id=978): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x9, 0x0, 0x0, 0x7, 0x100, {0x15, 0x4, 0x0, 0x4, 0x11d, 0x64, 0x8, 0xf3, 0x89, 0x1, @private=0xa010101, @rand_addr=0x64010102, {[@ssrr={0x89, 0x13, 0xdc, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x2c}]}, @lsrr={0x83, 0xf, 0xed, [@multicast2, @loopback, @broadcast]}, @generic={0x89, 0x12, "900000000000000000f734886a6644eb"}, @end, @noop, @generic={0x83, 0x7, "0b70e9494b"}]}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newtclass={0x2c, 0x28, 0x800, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x7, 0xffe0}, {0xffe6, 0x10}, {0x0, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x7}}]}, 0x2c}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001fc0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.46' (ED25519) to the list of known hosts. [ 66.749500][ T5836] cgroup: Unknown subsys name 'net' [ 66.839861][ T5836] cgroup: Unknown subsys name 'cpuset' [ 66.848568][ T5836] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.185033][ T5836] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.344874][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.351365][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.708957][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.734038][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.744403][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.755224][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.774022][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.818304][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.826393][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.842429][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.850920][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.898003][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.906545][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.915211][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.922429][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.930186][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.931121][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.944722][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.945621][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.961045][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.968901][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.969117][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.024870][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.041749][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.051241][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.060085][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.069253][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.486164][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 72.676119][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 72.801896][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.811728][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.821908][ T5846] bridge_slave_0: entered allmulticast mode [ 72.829291][ T5846] bridge_slave_0: entered promiscuous mode [ 72.859780][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 72.871291][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.878749][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.886088][ T5846] bridge_slave_1: entered allmulticast mode [ 72.893032][ T5846] bridge_slave_1: entered promiscuous mode [ 72.910585][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 72.948613][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 73.032653][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.095444][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.115815][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.123089][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.130916][ T5850] bridge_slave_0: entered allmulticast mode [ 73.138310][ T5850] bridge_slave_0: entered promiscuous mode [ 73.171952][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.179275][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.186680][ T5850] bridge_slave_1: entered allmulticast mode [ 73.193641][ T5850] bridge_slave_1: entered promiscuous mode [ 73.269121][ T5846] team0: Port device team_slave_0 added [ 73.310960][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.318381][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.325853][ T5857] bridge_slave_0: entered allmulticast mode [ 73.332847][ T5857] bridge_slave_0: entered promiscuous mode [ 73.341965][ T5846] team0: Port device team_slave_1 added [ 73.365293][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.372455][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.380300][ T5853] bridge_slave_0: entered allmulticast mode [ 73.387487][ T5853] bridge_slave_0: entered promiscuous mode [ 73.396110][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.403249][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.410630][ T5853] bridge_slave_1: entered allmulticast mode [ 73.418497][ T5853] bridge_slave_1: entered promiscuous mode [ 73.428191][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.437851][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.445029][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.452156][ T5857] bridge_slave_1: entered allmulticast mode [ 73.459527][ T5857] bridge_slave_1: entered promiscuous mode [ 73.478841][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.486184][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.493332][ T5862] bridge_slave_0: entered allmulticast mode [ 73.500638][ T5862] bridge_slave_0: entered promiscuous mode [ 73.524438][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.555599][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.562814][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.570492][ T5862] bridge_slave_1: entered allmulticast mode [ 73.577756][ T5862] bridge_slave_1: entered promiscuous mode [ 73.613258][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.665142][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.672127][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.698484][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.725768][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.750538][ T5850] team0: Port device team_slave_0 added [ 73.760961][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.772525][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.782687][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.790272][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.816520][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.825194][ T5856] Bluetooth: hci0: command tx timeout [ 73.838703][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.850593][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.873405][ T5850] team0: Port device team_slave_1 added [ 73.911995][ T5857] team0: Port device team_slave_0 added [ 73.931889][ T5853] team0: Port device team_slave_0 added [ 73.967370][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.976677][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.003174][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.016786][ T5857] team0: Port device team_slave_1 added [ 74.036082][ T5853] team0: Port device team_slave_1 added [ 74.043934][ T5856] Bluetooth: hci1: command tx timeout [ 74.049757][ T5168] Bluetooth: hci3: command tx timeout [ 74.049950][ T5862] team0: Port device team_slave_0 added [ 74.055443][ T5854] Bluetooth: hci2: command tx timeout [ 74.078487][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.086223][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.112225][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.134224][ T5854] Bluetooth: hci4: command tx timeout [ 74.148567][ T5862] team0: Port device team_slave_1 added [ 74.227353][ T5846] hsr_slave_0: entered promiscuous mode [ 74.233695][ T5846] hsr_slave_1: entered promiscuous mode [ 74.255835][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.262816][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.289689][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.303509][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.310758][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.336767][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.348272][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.355517][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.381485][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.393192][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.400465][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.426461][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.439084][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.446127][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.472236][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.516005][ T5850] hsr_slave_0: entered promiscuous mode [ 74.522490][ T5850] hsr_slave_1: entered promiscuous mode [ 74.528800][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.537047][ T5850] Cannot create hsr debugfs directory [ 74.543302][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.550545][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.576658][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.768938][ T5857] hsr_slave_0: entered promiscuous mode [ 74.775888][ T5857] hsr_slave_1: entered promiscuous mode [ 74.782121][ T5857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.790488][ T5857] Cannot create hsr debugfs directory [ 74.801051][ T5853] hsr_slave_0: entered promiscuous mode [ 74.808247][ T5853] hsr_slave_1: entered promiscuous mode [ 74.814505][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.822066][ T5853] Cannot create hsr debugfs directory [ 74.877706][ T5862] hsr_slave_0: entered promiscuous mode [ 74.884806][ T5862] hsr_slave_1: entered promiscuous mode [ 74.890834][ T5862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.898646][ T5862] Cannot create hsr debugfs directory [ 75.335147][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.347771][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.359479][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.370279][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.439321][ T5850] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.455738][ T5850] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.479425][ T5850] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.491082][ T5850] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.553534][ T5853] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.566639][ T5853] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.585382][ T5853] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.608593][ T5853] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.675510][ T5857] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.692198][ T5857] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.718773][ T5857] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.734699][ T5857] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.871152][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.884134][ T5854] Bluetooth: hci0: command tx timeout [ 75.890226][ T5862] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.902116][ T5862] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.928150][ T5862] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.938143][ T5862] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.982470][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.016820][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.024125][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.054691][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.061852][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.100086][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.120105][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.126825][ T5854] Bluetooth: hci1: command tx timeout [ 76.134595][ T5854] Bluetooth: hci2: command tx timeout [ 76.134778][ T5856] Bluetooth: hci3: command tx timeout [ 76.184743][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.204240][ T5856] Bluetooth: hci4: command tx timeout [ 76.222868][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.239215][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.246422][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.281089][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.302428][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.312684][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.319829][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.333559][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.340753][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.363297][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.370503][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.425885][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.432986][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.470115][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.477355][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.646242][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.681053][ T5857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.748968][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.845887][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.853096][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.885439][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.892627][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.038860][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.093400][ T5862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.172994][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.223694][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.283603][ T5846] veth0_vlan: entered promiscuous mode [ 77.332268][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.401145][ T5846] veth1_vlan: entered promiscuous mode [ 77.443598][ T5850] veth0_vlan: entered promiscuous mode [ 77.512285][ T5850] veth1_vlan: entered promiscuous mode [ 77.530777][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.543111][ T5846] veth0_macvtap: entered promiscuous mode [ 77.572239][ T5846] veth1_macvtap: entered promiscuous mode [ 77.630980][ T5857] veth0_vlan: entered promiscuous mode [ 77.663394][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.697291][ T5857] veth1_vlan: entered promiscuous mode [ 77.736438][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.748305][ T5850] veth0_macvtap: entered promiscuous mode [ 77.768295][ T5850] veth1_macvtap: entered promiscuous mode [ 77.778927][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.788259][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.797049][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.812224][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.835567][ T5862] veth0_vlan: entered promiscuous mode [ 77.864867][ T5853] veth0_vlan: entered promiscuous mode [ 77.873121][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.906440][ T5862] veth1_vlan: entered promiscuous mode [ 77.919785][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.933078][ T5853] veth1_vlan: entered promiscuous mode [ 77.969398][ T5850] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.978573][ T5856] Bluetooth: hci0: command tx timeout [ 77.984823][ T5850] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.993547][ T5850] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.002500][ T5850] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.021340][ T5857] veth0_macvtap: entered promiscuous mode [ 78.080889][ T5857] veth1_macvtap: entered promiscuous mode [ 78.112196][ T5862] veth0_macvtap: entered promiscuous mode [ 78.123670][ T3506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.123704][ T5862] veth1_macvtap: entered promiscuous mode [ 78.151515][ T3506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.155632][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.200290][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.208513][ T5856] Bluetooth: hci3: command tx timeout [ 78.214414][ T5856] Bluetooth: hci2: command tx timeout [ 78.215388][ T5854] Bluetooth: hci1: command tx timeout [ 78.230568][ T5853] veth0_macvtap: entered promiscuous mode [ 78.272696][ T5853] veth1_macvtap: entered promiscuous mode [ 78.283370][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.293631][ T5854] Bluetooth: hci4: command tx timeout [ 78.303866][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.317995][ T5857] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.326987][ T5857] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.335974][ T5857] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.345055][ T5857] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.378599][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.412889][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.437440][ T3506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.456277][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.468062][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.470398][ T3506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.498743][ T5862] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.509609][ T5862] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.522580][ T5862] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.532654][ T5862] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.562716][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.636187][ T5853] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.661837][ T5853] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.663541][ T5963] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1'. [ 78.671488][ T5853] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.689347][ T5853] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.745457][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.753385][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.872173][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.895326][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.982319][ T3506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.005030][ T3506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.071383][ T3580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.079665][ T3580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.258875][ T3506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.273575][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.292515][ T3506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.303111][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.387645][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.435801][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.538672][ T5978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.947524][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'. [ 80.007943][ T5993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.046294][ T5854] Bluetooth: hci0: command tx timeout [ 80.078437][ T5995] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.092321][ T6004] netlink: 'syz.0.13': attribute type 39 has an invalid length. [ 80.101597][ T5998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.113409][ T5996] netlink: 'syz.1.11': attribute type 3 has an invalid length. [ 80.127228][ T6000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12'. [ 80.167626][ T5995] netlink: 'syz.4.5': attribute type 21 has an invalid length. [ 80.196022][ T5993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.224861][ T6005] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5'. [ 80.244636][ T5993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.284649][ T5854] Bluetooth: hci1: command tx timeout [ 80.290793][ T5856] Bluetooth: hci3: command tx timeout [ 80.290804][ T5168] Bluetooth: hci2: command tx timeout [ 80.363975][ T5854] Bluetooth: hci4: command tx timeout [ 80.494332][ T6011] xt_TPROXY: Can be used only with -p tcp or -p udp [ 80.561133][ T6014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17'. [ 80.599614][ T6014] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17'. [ 80.659320][ T5928] IPVS: starting estimator thread 0... [ 80.720980][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17'. [ 80.743315][ T6014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17'. [ 80.765167][ T6021] IPVS: using max 28 ests per chain, 67200 per kthread [ 81.046837][ T6027] netlink: 'syz.3.22': attribute type 10 has an invalid length. [ 81.159082][ T6027] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 81.270012][ T6046] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 81.293307][ T6046] netlink: 'syz.0.27': attribute type 28 has an invalid length. [ 81.324751][ T6046] netlink: 'syz.0.27': attribute type 3 has an invalid length. [ 81.354921][ T6046] netlink: 132 bytes leftover after parsing attributes in process `syz.0.27'. [ 81.384091][ T6050] netlink: 'syz.2.26': attribute type 12 has an invalid length. [ 81.563629][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'. [ 81.582656][ T6061] netlink: 'syz.4.31': attribute type 1 has an invalid length. [ 81.652372][ T6061] gretap1: entered promiscuous mode [ 81.667185][ T6059] syz.1.29 uses obsolete (PF_INET,SOCK_PACKET) [ 81.827873][ T6070] netlink: 'syz.0.33': attribute type 16 has an invalid length. [ 81.845034][ T6070] netlink: 'syz.0.33': attribute type 3 has an invalid length. [ 82.050869][ T6081] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 82.077069][ T6083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.136457][ T6084] warning: `syz.4.36' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.669297][ T6105] Zero length message leads to an empty skb [ 82.800157][ T6109] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 83.037235][ T6126] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.169138][ T6118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 83.481771][ T6147] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 83.887606][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 84.183018][ T6183] netem: incorrect ge model size [ 84.196003][ T6183] netem: change failed [ 84.309369][ T6187] __nla_validate_parse: 12 callbacks suppressed [ 84.309387][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.70'. [ 84.326564][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'. [ 84.340184][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.70'. [ 84.351144][ T6189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.69'. [ 84.540239][ T6199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.582709][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.72'. [ 84.599433][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.72'. [ 84.952135][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.76'. [ 85.211829][ T6220] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 85.242041][ T5900] IPVS: starting estimator thread 0... [ 85.407475][ T6222] IPVS: using max 25 ests per chain, 60000 per kthread [ 85.650261][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.82'. [ 85.766229][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.88'. [ 85.799381][ T6256] netlink: 96 bytes leftover after parsing attributes in process `syz.0.89'. [ 85.893070][ T6256] vlan1: entered allmulticast mode [ 85.900810][ T6256] gretap0: entered allmulticast mode [ 86.053178][ T6277] validate_nla: 6 callbacks suppressed [ 86.053197][ T6277] netlink: 'syz.2.95': attribute type 18 has an invalid length. [ 86.061736][ T6266] bridge_slave_1: left allmulticast mode [ 86.073201][ T6266] bridge_slave_1: left promiscuous mode [ 86.082954][ T6266] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.109838][ T6266] bridge_slave_0: left allmulticast mode [ 86.123110][ T6266] bridge_slave_0: left promiscuous mode [ 86.129230][ T6266] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.265776][ T6291] netlink: 'syz.4.99': attribute type 1 has an invalid length. [ 86.465786][ T6297] netlink: 'syz.2.100': attribute type 1 has an invalid length. [ 86.490154][ T6296] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 86.494083][ T6297] netlink: 'syz.2.100': attribute type 2 has an invalid length. [ 86.598850][ T6304] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 86.614443][ T6304] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 86.693430][ T980] cfg80211: failed to load regulatory.db [ 86.960401][ T6329] netlink: 'syz.1.114': attribute type 83 has an invalid length. [ 87.241786][ T6348] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 87.645038][ T6380] netem: change failed [ 87.852344][ T6394] gtp0: entered promiscuous mode [ 87.873817][ T6394] gtp0: entered allmulticast mode [ 88.078068][ T6399] delete_channel: no stack [ 88.420516][ T6406] x_tables: duplicate underflow at hook 2 [ 88.513054][ T6413] tipc: Can't bind to reserved service type 2 [ 88.586947][ T6420] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 88.669467][ T1211] IPVS: starting estimator thread 0... [ 88.676375][ T6424] netlink: 'syz.0.140': attribute type 2 has an invalid length. [ 88.774976][ T6434] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 88.787202][ T6427] IPVS: using max 29 ests per chain, 69600 per kthread [ 88.900535][ T6442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.909047][ T6442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.925200][ T6442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.946764][ T6442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.006837][ T6444] tipc: Started in network mode [ 89.011965][ T6444] tipc: Node identity ee7b846ca266, cluster identity 4711 [ 89.020929][ T6444] tipc: Enabled bearer , priority 0 [ 89.028920][ T6439] syzkaller0: entered promiscuous mode [ 89.035883][ T6439] syzkaller0: entered allmulticast mode [ 89.059031][ T6439] tipc: Resetting bearer [ 89.104330][ T6439] tipc: Resetting bearer [ 89.144328][ T6439] tipc: Disabling bearer [ 89.163043][ T6454] netlink: 'syz.4.152': attribute type 10 has an invalid length. [ 89.203184][ T6454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.214037][ T6454] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 89.223158][ T6454] netlink: 'syz.4.152': attribute type 10 has an invalid length. [ 89.234562][ T6454] batadv0: entered promiscuous mode [ 89.240471][ T6454] batadv0: entered allmulticast mode [ 89.281246][ T6454] bond0: (slave batadv0): Releasing backup interface [ 89.297074][ T6454] bridge0: port 3(batadv0) entered blocking state [ 89.303853][ T6454] bridge0: port 3(batadv0) entered disabled state [ 89.350387][ T6464] __nla_validate_parse: 15 callbacks suppressed [ 89.350404][ T6464] netlink: 165 bytes leftover after parsing attributes in process `syz.2.155'. [ 89.376162][ T6464] netlink: 'syz.2.155': attribute type 10 has an invalid length. [ 89.377867][ T1139] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 89.393347][ T1139] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 89.467758][ T6472] netlink: 'syz.1.158': attribute type 4 has an invalid length. [ 89.481321][ T6464] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 90.012325][ T6483] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 90.019135][ T6483] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 90.103170][ T6492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.163'. [ 90.231272][ T6498] netlink: 224 bytes leftover after parsing attributes in process `syz.1.166'. [ 90.376795][ T6506] bond1: entered promiscuous mode [ 90.381967][ T6506] bond1: entered allmulticast mode [ 90.387579][ T6506] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.439313][ T6506] Bluetooth: MGMT ver 1.23 [ 90.572792][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'. [ 90.583655][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'. [ 90.597595][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'. [ 90.762209][ T6533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.968224][ T6529] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 91.167670][ C0] Illegal XDP return value 16128 on prog (id 35) dev team0, expect packet loss! [ 91.297687][ T6560] netlink: 9 bytes leftover after parsing attributes in process `syz.1.188'. [ 91.327446][ T6560] gretap0: entered promiscuous mode [ 91.449191][ T6566] validate_nla: 1 callbacks suppressed [ 91.449208][ T6566] netlink: 'syz.3.189': attribute type 1 has an invalid length. [ 91.483844][ T6566] netlink: 224 bytes leftover after parsing attributes in process `syz.3.189'. [ 91.524262][ T6569] netlink: 5 bytes leftover after parsing attributes in process `syz.1.188'. [ 91.535968][ T6566] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 91.558084][ T6569] 0ªX¹¦D: renamed from gretap0 [ 91.611157][ T6569] 0ªX¹¦D: left promiscuous mode [ 91.620573][ T6569] 0ªX¹¦D: entered allmulticast mode [ 91.630708][ T6569] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 91.663366][ T6578] netlink: 16 bytes leftover after parsing attributes in process `syz.0.193'. [ 92.376061][ T6641] Bluetooth: MGMT ver 1.23 [ 92.929463][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.945330][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.967676][ T6663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.209314][ T6676] xt_CT: No such helper "netbios-ns" [ 93.322038][ T6686] IPVS: wrr: UDP 224.0.0.2:20004 - no destination available [ 93.420893][ T6694] netlink: 'syz.4.228': attribute type 1 has an invalid length. [ 93.618422][ T6704] netlink: 'syz.4.231': attribute type 39 has an invalid length. [ 93.887577][ T6716] syzkaller0: entered promiscuous mode [ 93.893103][ T6716] syzkaller0: entered allmulticast mode [ 93.906836][ T6716] tipc: Started in network mode [ 93.915241][ T6716] tipc: Node identity 2673453eae29, cluster identity 4711 [ 93.934964][ T6716] tipc: Enabled bearer , priority 0 [ 93.977425][ T6715] tipc: Resetting bearer [ 94.021718][ T6715] tipc: Disabling bearer [ 94.211491][ T6737] trusted_key: syz.4.239 sent an empty control message without MSG_MORE. [ 94.556711][ T6763] netlink: 'syz.2.248': attribute type 10 has an invalid length. [ 94.726940][ T6773] __nla_validate_parse: 10 callbacks suppressed [ 94.731795][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.250'. [ 94.759496][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.250'. [ 94.964884][ T6785] netlink: 96 bytes leftover after parsing attributes in process `syz.1.254'. [ 95.064442][ T6790] netlink: 'syz.4.257': attribute type 2 has an invalid length. [ 95.072127][ T6790] netlink: 119 bytes leftover after parsing attributes in process `syz.4.257'. [ 95.101578][ T6787] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 95.226660][ T6799] netlink: 'syz.0.259': attribute type 8 has an invalid length. [ 95.343299][ T6807] netlink: 'syz.0.263': attribute type 4 has an invalid length. [ 95.897661][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.268'. [ 96.174829][ T6839] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 96.224009][ T6839] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€ [ 96.326563][ T6854] tipc: Started in network mode [ 96.337822][ T6854] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 96.355245][ T6854] tipc: Enabled bearer , priority 10 [ 96.429088][ T6857] batadv0: entered allmulticast mode [ 96.485712][ T6859] netlink: 36 bytes leftover after parsing attributes in process `syz.0.278'. [ 96.526453][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'. [ 96.537246][ T6859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.278'. [ 96.678533][ T6861] netlink: 'syz.2.279': attribute type 10 has an invalid length. [ 96.693426][ T6863] openvswitch: netlink: Message has 199 unknown bytes. [ 96.711689][ T6861] netlink: 40 bytes leftover after parsing attributes in process `syz.2.279'. [ 96.723515][ T6863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.779208][ T6861] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 96.830135][ T6861] team0: Failed to send options change via netlink (err -105) [ 96.853831][ T6861] team0: Port device geneve0 added [ 97.010384][ T6876] netlink: 'syz.2.283': attribute type 12 has an invalid length. [ 97.041901][ T6876] netlink: 132 bytes leftover after parsing attributes in process `syz.2.283'. [ 97.112488][ T5900] IPVS: starting estimator thread 0... [ 97.223839][ T6884] IPVS: using max 31 ests per chain, 74400 per kthread [ 97.450850][ T6903] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 97.476444][ T980] tipc: Node number set to 10136234 [ 97.768925][ T6930] sctp: [Deprecated]: syz.4.302 (pid 6930) Use of int in max_burst socket option. [ 97.768925][ T6930] Use struct sctp_assoc_value instead [ 97.951807][ T6942] gretap0: entered promiscuous mode [ 98.120151][ T6959] netlink: 'syz.4.308': attribute type 11 has an invalid length. [ 98.171199][ T6961] 0ªX¹¦D: renamed from gretap0 [ 98.192881][ T6961] 0ªX¹¦D: left promiscuous mode [ 98.221985][ T6961] 0ªX¹¦D: entered allmulticast mode [ 98.237025][ T6961] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 98.331377][ T6971] netlink: 'syz.2.310': attribute type 4 has an invalid length. [ 98.558962][ T6988] netlink: 'syz.2.314': attribute type 1 has an invalid length. [ 98.845701][ T7005] bond0: entered promiscuous mode [ 98.858201][ T7005] bond_slave_0: entered promiscuous mode [ 98.868223][ T7005] bond_slave_1: entered promiscuous mode [ 98.874530][ T7005] bond0: entered allmulticast mode [ 98.879929][ T7005] bond_slave_0: entered allmulticast mode [ 98.886382][ T7005] bond_slave_1: entered allmulticast mode [ 98.971468][ T7013] netlink: 'syz.3.324': attribute type 21 has an invalid length. [ 98.992025][ T7013] netlink: 'syz.3.324': attribute type 6 has an invalid length. [ 99.747637][ T7067] netlink: 'syz.4.341': attribute type 11 has an invalid length. [ 99.891631][ T7080] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 99.894347][ T7081] netlink: 'syz.0.346': attribute type 11 has an invalid length. [ 99.933620][ T7081] netlink: 'syz.0.346': attribute type 4 has an invalid length. [ 99.936003][ T7085] openvswitch: netlink: Tunnel attr 4 has unexpected len 16 expected 1 [ 99.941789][ T7081] __nla_validate_parse: 13 callbacks suppressed [ 99.941801][ T7081] netlink: 224 bytes leftover after parsing attributes in process `syz.0.346'. [ 100.123336][ T7098] netlink: 'syz.3.352': attribute type 1 has an invalid length. [ 100.133445][ T7098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.140759][ T7099] ieee802154 phy0 wpan0: encryption failed: -22 [ 100.154095][ T7101] netlink: 20 bytes leftover after parsing attributes in process `syz.2.350'. [ 100.157353][ T7098] netlink: 'syz.3.352': attribute type 7 has an invalid length. [ 100.250544][ T7098] : entered promiscuous mode [ 100.271309][ T7106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.350'. [ 100.282505][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.352'. [ 100.443895][ T7115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.356'. [ 100.518809][ T7122] netlink: 20 bytes leftover after parsing attributes in process `syz.0.358'. [ 100.653463][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.362'. [ 100.920590][ T7146] netlink: 40 bytes leftover after parsing attributes in process `syz.2.365'. [ 101.073517][ T7160] dvmrp0: entered allmulticast mode [ 101.128660][ T7164] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 101.129940][ T7167] netlink: 'syz.2.371': attribute type 6 has an invalid length. [ 101.151678][ T7167] syz_tun: entered allmulticast mode [ 101.282038][ T7165] syz_tun: left allmulticast mode [ 101.362934][ T7177] netlink: 60 bytes leftover after parsing attributes in process `syz.1.375'. [ 101.496305][ T7186] netlink: 132 bytes leftover after parsing attributes in process `syz.2.379'. [ 101.622509][ T7198] batman_adv: batadv0: Adding interface: team0 [ 101.633209][ T7198] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.661407][ T7198] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 101.691143][ T7207] bond0: entered allmulticast mode [ 101.697273][ T7207] bond_slave_0: entered allmulticast mode [ 101.703027][ T7207] bond_slave_1: entered allmulticast mode [ 101.712068][ T7207] dummy0: entered allmulticast mode [ 101.725348][ T7209] nbd: socks must be embedded in a SOCK_ITEM attr [ 102.033947][ T7230] : renamed from hsr0 (while UP) [ 102.069146][ T7232] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 102.207953][ T7241] netlink: 'syz.4.393': attribute type 11 has an invalid length. [ 102.218749][ T7242] netlink: 'syz.4.393': attribute type 11 has an invalid length. [ 102.818880][ T7286] 8021q: adding VLAN 0 to HW filter on device bond3 [ 102.872491][ T7290] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 103.090235][ T7302] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 103.321845][ T7319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.336627][ T7317] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 103.359402][ T7319] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 103.718345][ T7349] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 103.728412][ T7348] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 104.021288][ T7371] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 104.089359][ T7373] validate_nla: 2 callbacks suppressed [ 104.089375][ T7373] netlink: 'syz.2.436': attribute type 1 has an invalid length. [ 105.875602][ T7433] __nla_validate_parse: 16 callbacks suppressed [ 105.875620][ T7433] netlink: 24 bytes leftover after parsing attributes in process `syz.1.455'. [ 105.928760][ T7440] netlink: 36 bytes leftover after parsing attributes in process `syz.1.455'. [ 106.228534][ T7456] netlink: 596 bytes leftover after parsing attributes in process `syz.1.461'. [ 106.240134][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.460'. [ 106.320405][ T7455] macvtap1: entered promiscuous mode [ 106.330238][ T7464] netlink: 5 bytes leftover after parsing attributes in process `syz.0.462'. [ 106.333844][ T7455] vlan0: entered promiscuous mode [ 106.339653][ T7464] netlink: 24 bytes leftover after parsing attributes in process `syz.0.462'. [ 106.348922][ T7455] macvtap1: entered allmulticast mode [ 106.359706][ T7455] vlan0: entered allmulticast mode [ 106.365073][ T7455] veth0_vlan: entered allmulticast mode [ 106.386400][ T7460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.463'. [ 106.514097][ T7472] ieee802154 phy0 wpan0: encryption failed: -22 [ 106.691636][ T7490] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 106.700409][ T7492] netlink: 'syz.0.474': attribute type 10 has an invalid length. [ 106.712340][ T7491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.805448][ T7504] ip6gre2: entered promiscuous mode [ 106.832888][ T7505] xfrm1: entered allmulticast mode [ 106.909232][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.478'. [ 107.787550][ T7549] netlink: 'syz.4.491': attribute type 4 has an invalid length. [ 107.810108][ T7549] netlink: 152 bytes leftover after parsing attributes in process `syz.4.491'. [ 107.857158][ T7549] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 108.018004][ T7561] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 108.110397][ T7566] netlink: 40 bytes leftover after parsing attributes in process `syz.1.496'. [ 108.365984][ T5854] Bluetooth: hci4: command 0x0405 tx timeout [ 108.557575][ T7592] netlink: 'syz.2.501': attribute type 64 has an invalid length. [ 108.558686][ T7595] openvswitch: netlink: IP tunnel dst address not specified [ 108.573100][ T7594] openvswitch: netlink: IP tunnel dst address not specified [ 108.806942][ T7615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.868145][ T30] audit: type=1804 audit(1752125377.294:2): pid=7620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.509" name="/newroot/117/cgroup.controllers" dev="tmpfs" ino=622 res=1 errno=0 [ 108.937040][ T30] audit: type=1800 audit(1752125377.314:3): pid=7620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.509" name="cgroup.controllers" dev="tmpfs" ino=622 res=0 errno=0 [ 109.047637][ T30] audit: type=1800 audit(1752125377.474:4): pid=7630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.514" name="memory.events" dev="tmpfs" ino=548 res=0 errno=0 [ 109.108396][ T7631] netlink: 'syz.0.511': attribute type 10 has an invalid length. [ 109.128297][ T30] audit: type=1804 audit(1752125377.494:5): pid=7630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.514" name="/newroot/104/memory.events" dev="tmpfs" ino=548 res=1 errno=0 [ 109.189344][ T7638] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 109.217501][ T7631] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.252878][ T7631] bridge_slave_1: left allmulticast mode [ 109.260566][ T7631] bridge_slave_1: left promiscuous mode [ 109.269632][ T7631] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.297445][ T7631] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 109.711502][ T7669] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 109.837994][ T7681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.880566][ T7669] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 110.711552][ T7732] netlink: 'syz.3.540': attribute type 11 has an invalid length. [ 110.751713][ T7732] netlink: 'syz.3.540': attribute type 11 has an invalid length. [ 111.287991][ T7753] sctp: [Deprecated]: syz.1.551 (pid 7753) Use of int in maxseg socket option. [ 111.287991][ T7753] Use struct sctp_assoc_value instead [ 111.429962][ T7759] __nla_validate_parse: 11 callbacks suppressed [ 111.429979][ T7759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.552'. [ 111.773022][ T7775] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.780984][ T7775] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.831344][ T7779] can: request_module (can-proto-5) failed. [ 111.948566][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.564'. [ 111.958714][ T7792] netlink: 'syz.3.562': attribute type 1 has an invalid length. [ 111.968036][ T7791] netlink: 224 bytes leftover after parsing attributes in process `syz.0.564'. [ 111.980648][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.564'. [ 111.991751][ T7791] netlink: 'syz.0.564': attribute type 11 has an invalid length. [ 111.999591][ T7791] netlink: 224 bytes leftover after parsing attributes in process `syz.0.564'. [ 112.039315][ T7775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.089232][ T7775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.297250][ T7775] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.323833][ T7775] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.333020][ T7775] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.346326][ T7775] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.483247][ T7811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'. [ 112.535699][ T7792] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 112.545507][ T7793] gretap0: entered promiscuous mode [ 112.614839][ T7809] : renamed from hsr0 (while UP) [ 112.700258][ T7775] syz.1.559 (7775) used greatest stack depth: 19992 bytes left [ 112.861826][ T7820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.948460][ T7820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.016921][ T7820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.074266][ T7820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.365986][ T7862] netlink: 40 bytes leftover after parsing attributes in process `syz.2.581'. [ 113.610083][ T7877] netlink: 28 bytes leftover after parsing attributes in process `syz.0.585'. [ 113.699346][ T7882] tls_set_device_offload_rx: netdev not found [ 113.750465][ T7887] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 114.425829][ T7922] netlink: 'syz.4.597': attribute type 1 has an invalid length. [ 114.448939][ T7922] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 114.557448][ T7936] netlink: 'syz.0.600': attribute type 1 has an invalid length. [ 114.770012][ T7950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.604'. [ 114.923551][ T7961] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 115.264769][ T7988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.614'. [ 115.320090][ T7988] netlink: 'syz.3.614': attribute type 10 has an invalid length. [ 115.368976][ T7988] veth1_vlan: entered allmulticast mode [ 115.467067][ T7988] team0: Device veth1_vlan failed to register rx_handler [ 116.250516][ T8044] netlink: 'syz.2.631': attribute type 4 has an invalid length. [ 116.400366][ T8051] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.535752][ T8059] __nla_validate_parse: 4 callbacks suppressed [ 116.535771][ T8059] netlink: 136 bytes leftover after parsing attributes in process `syz.2.637'. [ 116.558673][ T8059] openvswitch: netlink: Flow key attr not present in new flow. [ 116.615944][ T8064] netlink: 56 bytes leftover after parsing attributes in process `syz.3.639'. [ 116.698695][ T8067] xt_TCPMSS: Only works on TCP SYN packets [ 116.970866][ T8090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.648'. [ 117.023383][ T8090] team1: entered promiscuous mode [ 117.030535][ T8090] team1: entered allmulticast mode [ 117.202076][ T8111] netlink: 'syz.1.654': attribute type 10 has an invalid length. [ 117.218605][ T8111] veth1_macvtap: left promiscuous mode [ 117.229959][ T8111] team0: Device veth1_macvtap failed to register rx_handler [ 117.303172][ T8111] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 117.320145][ T8111] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 117.330461][ T8111] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 117.384336][ T8118] nbd0: detected capacity change from 0 to 63 [ 117.402517][ T5854] block nbd0: Receive control failed (result -32) [ 117.556432][ T8130] netlink: 168 bytes leftover after parsing attributes in process `syz.0.660'. [ 117.605784][ T8130] netlink: 168 bytes leftover after parsing attributes in process `syz.0.660'. [ 117.632603][ T8133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.661'. [ 117.719114][ T8138] netlink: 68 bytes leftover after parsing attributes in process `syz.0.663'. [ 117.750954][ T8141] netlink: 'syz.2.664': attribute type 83 has an invalid length. [ 117.767028][ T8142] netlink: 'syz.2.664': attribute type 83 has an invalid length. [ 117.783537][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.663'. [ 117.840252][ T8145] netlink: 'syz.3.665': attribute type 6 has an invalid length. [ 118.107467][ T8156] netlink: 44 bytes leftover after parsing attributes in process `syz.3.668'. [ 118.170812][ T8167] netlink: 128 bytes leftover after parsing attributes in process `syz.4.672'. [ 118.480089][ T8185] tipc: Enabled bearer , priority 0 [ 118.498847][ T8185] syzkaller0: entered promiscuous mode [ 118.513191][ T8185] syzkaller0: entered allmulticast mode [ 118.648736][ T8193] 8021q: adding VLAN 0 to HW filter on device bond4 [ 118.697905][ T8193] bond4: entered promiscuous mode [ 118.703391][ T8193] bond4: entered allmulticast mode [ 118.712330][ T8193] bond0: (slave bond4): Enslaving as an active interface with an up link [ 118.942667][ T8215] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 118.989442][ T8182] tipc: Resetting bearer [ 119.028297][ T8182] tipc: Disabling bearer [ 119.307512][ T8239] bridge: RTM_NEWNEIGH with invalid ether address [ 119.466099][ T8251] policy can only be matched on NF_INET_PRE_ROUTING [ 119.466119][ T8251] unable to load match [ 119.689803][ T8261] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 120.329546][ T8298] netlink: 'syz.3.718': attribute type 5 has an invalid length. [ 120.355627][ T8298] tc_dump_action: action bad kind [ 120.746959][ T8309] xt_CT: No such helper "netbios-ns" [ 121.070423][ T8338] pim6reg527: entered allmulticast mode [ 121.381648][ T8365] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 121.416653][ T8370] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 121.645818][ T8384] tipc: Enabling of bearer rejected, failed to enable media [ 121.855945][ T8394] block nbd1: Unsupported socket: shutdown callout must be supported. [ 121.907360][ T8394] __nla_validate_parse: 13 callbacks suppressed [ 121.907380][ T8394] netlink: 16 bytes leftover after parsing attributes in process `syz.4.750'. [ 121.941320][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.751'. [ 121.970848][ T8393] netlink: 204 bytes leftover after parsing attributes in process `syz.3.749'. [ 122.141753][ T8411] smc: net device erspan0 applied user defined pnetid SYZ0 [ 122.215256][ T8411] netlink: 32 bytes leftover after parsing attributes in process `syz.4.753'. [ 122.248558][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.753'. [ 122.359120][ T8426] netlink: 24 bytes leftover after parsing attributes in process `syz.0.757'. [ 122.387823][ T8426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.757'. [ 122.503473][ T8432] netlink: 'syz.2.759': attribute type 32 has an invalid length. [ 122.522006][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.759'. [ 122.542858][ T8432] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 122.581712][ T8439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.762'. [ 122.667318][ T8443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.748959][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.765'. [ 122.799261][ T8457] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒžóúz [ 122.823253][ T8459] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.338575][ T8497] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 123.614210][ T8524] netlink: 'syz.1.790': attribute type 1 has an invalid length. [ 123.677828][ T8524] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.740356][ T8530] gretap1: entered promiscuous mode [ 123.773837][ T8530] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 123.838457][ T8542] x_tables: duplicate underflow at hook 4 [ 123.969909][ T8547] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.979331][ T8550] Dead loop on virtual device ip6_vti0, fix it urgently! [ 124.008944][ T8554] netlink: 'syz.1.801': attribute type 11 has an invalid length. [ 124.085202][ T8547] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.142530][ T8559] veth3: entered allmulticast mode [ 124.163603][ T8547] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.241183][ T8547] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.588395][ T8547] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.630115][ T8585] openvswitch: netlink: Actions may not be safe on all matching packets [ 125.648558][ T8547] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.720086][ T8547] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.750006][ T8547] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.788881][ T8596] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 125.890052][ T8601] netlink: 'syz.3.816': attribute type 10 has an invalid length. [ 126.352776][ T8636] netlink: 'syz.3.825': attribute type 1 has an invalid length. [ 126.545290][ T8655] netlink: 'syz.3.828': attribute type 5 has an invalid length. [ 126.708659][ T8658] netlink: 'syz.3.830': attribute type 1 has an invalid length. [ 126.721392][ T8658] netlink: 'syz.3.830': attribute type 2 has an invalid length. [ 126.898606][ T8674] netlink: 'syz.3.834': attribute type 10 has an invalid length. [ 126.938201][ T8674] team0: Port device geneve0 added [ 127.155300][ T8689] __nla_validate_parse: 22 callbacks suppressed [ 127.155317][ T8689] netlink: 844 bytes leftover after parsing attributes in process `syz.2.840'. [ 127.206812][ T8689] openvswitch: netlink: Flow key attr not present in new flow. [ 127.227091][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.842'. [ 127.410184][ T8704] xt_TPROXY: Can be used only with -p tcp or -p udp [ 127.524300][ T8715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.847'. [ 127.936079][ T8740] netlink: 'syz.2.857': attribute type 1 has an invalid length. [ 128.006810][ T8740] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.063399][ T8750] gretap1: entered promiscuous mode [ 128.068560][ T8749] netlink: 32 bytes leftover after parsing attributes in process `syz.1.858'. [ 128.072632][ T8750] bond2: (slave gretap1): making interface the new active one [ 128.092314][ T8750] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 128.126788][ T8740] macvlan4: entered promiscuous mode [ 128.132369][ T8740] macvlan4: entered allmulticast mode [ 128.139286][ T8740] bond2: entered promiscuous mode [ 128.145472][ T8740] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 128.153892][ T8740] bond2: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 128.158828][ T8752] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 128.171639][ T8740] bond2: left promiscuous mode [ 128.312512][ T8759] net veth1_virt_wifi .: renamed from virt_wifi0 [ 128.652973][ T8781] netlink: 'syz.1.865': attribute type 2 has an invalid length. [ 128.672545][ T8781] Timeout policy `syz0' can only be used by L3 protocol number 1536 [ 128.709707][ T8783] netlink: 44 bytes leftover after parsing attributes in process `syz.3.866'. [ 128.718945][ T8783] netlink: 43 bytes leftover after parsing attributes in process `syz.3.866'. [ 128.734748][ T8783] netlink: 'syz.3.866': attribute type 5 has an invalid length. [ 128.742423][ T8783] netlink: 43 bytes leftover after parsing attributes in process `syz.3.866'. [ 128.780640][ T8787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.867'. [ 128.815877][ T8787] netlink: 'syz.0.867': attribute type 10 has an invalid length. [ 128.826082][ T8787] veth1_vlan: entered allmulticast mode [ 128.860829][ T8787] team0: Device veth1_vlan failed to register rx_handler [ 128.984774][ T8795] netlink: 28 bytes leftover after parsing attributes in process `syz.1.869'. [ 129.006106][ T8794] pim6reg: entered allmulticast mode [ 129.012174][ T8793] pim6reg: left allmulticast mode [ 129.035157][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.869'. [ 129.070300][ T8795] syz_tun: entered promiscuous mode [ 129.077391][ T8795] syz_tun: left promiscuous mode [ 129.208141][ T8810] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 129.266244][ T8817] xt_cgroup: path and classid specified [ 129.916839][ T8860] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 129.946857][ T8860] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 129.955478][ T8860] gretap2: entered promiscuous mode [ 129.961058][ T8860] gretap2: entered allmulticast mode [ 130.189048][ T8878] bridge4: port 1(ip6gretap1) entered blocking state [ 130.208018][ T8878] bridge4: port 1(ip6gretap1) entered disabled state [ 130.228028][ T8878] ip6gretap1: entered allmulticast mode [ 130.240469][ T8878] ip6gretap1: entered promiscuous mode [ 130.631933][ T8910] tipc: Enabling of bearer rejected, failed to enable media [ 130.650527][ T8914] unsupported nlmsg_type 40 [ 130.781260][ T8927] x_tables: duplicate entry at hook 3 [ 131.546523][ T8943] xt_CT: No such helper "syz0" [ 131.682650][ T8952] validate_nla: 2 callbacks suppressed [ 131.682667][ T8952] netlink: 'syz.3.922': attribute type 18 has an invalid length. [ 131.711072][ T8952] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.719777][ T8952] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.728081][ T8952] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.736505][ T8952] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.804414][ T8964] netlink: 'syz.2.921': attribute type 1 has an invalid length. [ 132.101142][ T8982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.119251][ T8986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.405658][ T9007] netlink: 'syz.2.939': attribute type 10 has an invalid length. [ 132.418634][ T9007] __nla_validate_parse: 14 callbacks suppressed [ 132.418648][ T9007] netlink: 40 bytes leftover after parsing attributes in process `syz.2.939'. [ 132.771284][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.822756][ T9026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.944'. [ 132.854890][ T9028] syzkaller0: entered promiscuous mode [ 132.868231][ T9031] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 132.877929][ T9033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.944'. [ 132.877956][ T9028] syzkaller0: entered allmulticast mode [ 133.084940][ T9042] netlink: 'syz.4.949': attribute type 1 has an invalid length. [ 133.165931][ T9042] 8021q: adding VLAN 0 to HW filter on device bond5 [ 133.205541][ T9043] bond5: (slave gretap1): making interface the new active one [ 133.236567][ T9043] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 133.269791][ T9052] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 133.282739][ T9043] syz.4.949 (9043) used greatest stack depth: 19592 bytes left [ 133.292214][ T9052] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 133.326318][ T9049] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 133.507856][ T9058] veth0_virt_wifi: renamed from vlan0 [ 133.540619][ T9071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.957'. [ 133.622663][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.959'. [ 133.713511][ T9085] veth0: entered promiscuous mode [ 133.765469][ T9073] veth0: left promiscuous mode [ 134.029490][ T9102] x_tables: duplicate underflow at hook 1 [ 134.123430][ T9102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.966'. [ 134.589775][ T9138] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000035: 0000 [#1] SMP KASAN PTI [ 134.601714][ T9138] KASAN: null-ptr-deref in range [0x00000000000001a8-0x00000000000001af] [ 134.610152][ T9138] CPU: 1 UID: 0 PID: 9138 Comm: syz.1.978 Not tainted 6.16.0-rc4-syzkaller-00140-g3aaea88f7dd1 #0 PREEMPT(full) [ 134.622052][ T9138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.632131][ T9138] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 134.637547][ T9138] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 8d 5e 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 aa 62 3e f8 85 [ 134.657175][ T9138] RSP: 0018:ffffc9001b1b7090 EFLAGS: 00010206 [ 134.663267][ T9138] RAX: ffffffff89820013 RBX: 00000000000001a8 RCX: 0000000000080000 [ 134.671334][ T9138] RDX: ffffc90005202000 RSI: 00000000000002f5 RDI: 00000000000002f6 [ 134.679304][ T9138] RBP: dffffc0000000000 R08: ffff888035660000 R09: 0000000000000002 [ 134.687269][ T9138] R10: 00000000ffffffff R11: ffffffff8981fff0 R12: dffffc0000000000 [ 134.695228][ T9138] R13: 0000000000000035 R14: 0000000000000000 R15: ffff88805264c000 [ 134.703186][ T9138] FS: 00007fedf1ad76c0(0000) GS:ffff888125d1d000(0000) knlGS:0000000000000000 [ 134.712102][ T9138] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.718669][ T9138] CR2: 0000200000001fc0 CR3: 0000000035aac000 CR4: 00000000003526f0 [ 134.726628][ T9138] Call Trace: [ 134.729903][ T9138] [ 134.732826][ T9138] qdisc_tree_reduce_backlog+0x299/0x480 [ 134.738446][ T9138] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 134.744157][ T9138] pie_change+0x96d/0xca0 [ 134.748477][ T9138] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 134.754362][ T9138] ? lockdep_hardirqs_on+0x9c/0x150 [ 134.759547][ T9138] ? __pfx_pie_change+0x10/0x10 [ 134.764382][ T9138] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 134.770266][ T9138] ? timer_init_key+0x171/0x2d0 [ 134.775119][ T9138] ? __pfx_pie_init+0x10/0x10 [ 134.779788][ T9138] pie_init+0x2a3/0x3f0 [ 134.783946][ T9138] qdisc_create+0x7a9/0xea0 [ 134.788445][ T9138] tc_modify_qdisc+0x1426/0x2010 [ 134.793373][ T9138] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 134.798660][ T9138] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 134.803947][ T9138] rtnetlink_rcv_msg+0x77c/0xb70 [ 134.808879][ T9138] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 134.813982][ T9138] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 134.819436][ T9138] netlink_rcv_skb+0x205/0x470 [ 134.824197][ T9138] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 134.829646][ T9138] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 134.834932][ T9138] ? netlink_deliver_tap+0x2e/0x1b0 [ 134.840121][ T9138] ? netlink_deliver_tap+0x2e/0x1b0 [ 134.845309][ T9138] netlink_unicast+0x759/0x8e0 [ 134.850083][ T9138] netlink_sendmsg+0x805/0xb30 [ 134.854849][ T9138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.860123][ T9138] ? aa_sock_msg_perm+0x94/0x160 [ 134.865060][ T9138] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 134.870341][ T9138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.875625][ T9138] __sock_sendmsg+0x219/0x270 [ 134.880294][ T9138] ____sys_sendmsg+0x505/0x830 [ 134.885062][ T9138] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.890342][ T9138] ? import_iovec+0x74/0xa0 [ 134.894840][ T9138] ___sys_sendmsg+0x21f/0x2a0 [ 134.899507][ T9138] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.904707][ T9138] ? __fget_files+0x2a/0x420 [ 134.909289][ T9138] ? __fget_files+0x3a0/0x420 [ 134.913963][ T9138] __x64_sys_sendmsg+0x19b/0x260 [ 134.918894][ T9138] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 134.924347][ T9138] ? rcu_is_watching+0x15/0xb0 [ 134.929101][ T9138] ? do_syscall_64+0xbe/0x3b0 [ 134.933765][ T9138] do_syscall_64+0xfa/0x3b0 [ 134.938255][ T9138] ? lockdep_hardirqs_on+0x9c/0x150 [ 134.943438][ T9138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.949505][ T9138] ? clear_bhb_loop+0x60/0xb0 [ 134.954178][ T9138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.960057][ T9138] RIP: 0033:0x7fedf0b8e929 [ 134.964473][ T9138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.984069][ T9138] RSP: 002b:00007fedf1ad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.992479][ T9138] RAX: ffffffffffffffda RBX: 00007fedf0db5fa0 RCX: 00007fedf0b8e929 [ 135.000440][ T9138] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003 [ 135.008395][ T9138] RBP: 00007fedf0c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 135.016356][ T9138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.024315][ T9138] R13: 0000000000000000 R14: 00007fedf0db5fa0 R15: 00007ffd03fe6788 [ 135.032279][ T9138] [ 135.035286][ T9138] Modules linked in: [ 135.039307][ T9138] ---[ end trace 0000000000000000 ]--- [ 135.044810][ T9138] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 135.050192][ T9138] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 8d 5e 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 aa 62 3e f8 85 [ 135.069914][ T9138] RSP: 0018:ffffc9001b1b7090 EFLAGS: 00010206 [ 135.076012][ T9138] RAX: ffffffff89820013 RBX: 00000000000001a8 RCX: 0000000000080000 [ 135.084013][ T9138] RDX: ffffc90005202000 RSI: 00000000000002f5 RDI: 00000000000002f6 [ 135.091988][ T9138] RBP: dffffc0000000000 R08: ffff888035660000 R09: 0000000000000002 [ 135.099993][ T9138] R10: 00000000ffffffff R11: ffffffff8981fff0 R12: dffffc0000000000 [ 135.107996][ T9138] R13: 0000000000000035 R14: 0000000000000000 R15: ffff88805264c000 [ 135.116090][ T9138] FS: 00007fedf1ad76c0(0000) GS:ffff888125d1d000(0000) knlGS:0000000000000000 [ 135.125050][ T9138] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.131660][ T9138] CR2: 0000200000001fc0 CR3: 0000000035aac000 CR4: 00000000003526f0 [ 135.139675][ T9138] Kernel panic - not syncing: Fatal exception in interrupt [ 135.147104][ T9138] Kernel Offset: disabled [ 135.151423][ T9138] Rebooting in 86400 seconds..