last executing test programs: 5m6.860039158s ago: executing program 0 (id=459): r0 = socket$kcm(0x29, 0x2, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x8, &(0x7f00000000c0)="e0", 0x1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r2, @ANYBLOB="4800000000000000240012800b0001006272696467650000140002800800080088a80000060027", @ANYBLOB="de2896479332d4b25c9a6d337f674687393a0426a7a17359b1052ad8f364f63a16f9aa0b30e1e544cbc6ac3a1994e4bd5dd8c9"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x855) 5m6.706141404s ago: executing program 0 (id=462): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0xc0, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000240)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x1, @rand_addr=' \x01\x00', @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0xff, @mcast2, @mcast2, [@fragment={0x2f, 0x0, 0xf, 0x0, 0x0, 0x0, 0x65}, @hopopts={0x2e}]}}}}}}}, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f000000adc0), &(0x7f000000ae00)=0x4) 5m6.35720728s ago: executing program 0 (id=465): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000003840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100008f6c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f81cffffb702000008000000b7030000020000008500000004000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737903000000000008000440000000000900010073797a30000000000800034000000005140000001100010000000000000000000000000a746e7405ba0639589799887950cc41242011be60a4dd2954fed7818019f936b6b8c3756a94453ad1bb2276fe01aaf5014f9cf42bbb7e3c7201f837c1361aa91348632fe149"], 0x64}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r1}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1a, &(0x7f0000000280)=""/180, &(0x7f0000000340)=0xb4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1000}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r4, 0x100, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8000}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4804}, 0x11) 5m6.089591887s ago: executing program 0 (id=469): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r1, 0x201, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x11, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x44811}, 0x8000) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x51, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) 5m5.927763016s ago: executing program 0 (id=472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r4, 0x500cb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x14}]}}}]}, 0x3c}}, 0x0) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="640900000105010200000000000000000a0000109e0201"], 0x964}, 0x1, 0x0, 0x0, 0x4000}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r4, 0x500cb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x14}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="640900000105010200000000000000000a0000109e0201"], 0x964}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async) 5m5.600240916s ago: executing program 0 (id=475): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x20, 0x0, 0xc, 0xc, 0x2, [@fwd={0xd}]}}, 0x0, 0x26}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xef, 0x0, 0x79, 0x1, 0x2, 0xffff8001}, {0xb, 0x2, 0x0, 0x8, 0x4, 0x7f}, 0x9, 0x10001, 0xf44}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xd457dc44c41be09a}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x51}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x6}}, 0x14}}, 0x0) 4m50.499976951s ago: executing program 32 (id=475): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x20, 0x0, 0xc, 0xc, 0x2, [@fwd={0xd}]}}, 0x0, 0x26}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xef, 0x0, 0x79, 0x1, 0x2, 0xffff8001}, {0xb, 0x2, 0x0, 0x8, 0x4, 0x7f}, 0x9, 0x10001, 0xf44}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xd457dc44c41be09a}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x51}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x6}}, 0x14}}, 0x0) 2m32.526747249s ago: executing program 4 (id=1699): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'macvlan1\x00', 0x400}) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x0, 0x5, 0x3f}, 0x2c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20142}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x7}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2400c090}, 0x24048044) r4 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="089f7e94", @ANYRES16=r6, @ANYBLOB="01002dbd7000ffdbdf25030000001c000180060005004e23000008000300ac1414aa0600010002000000"], 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x40) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fddbdf25040000000c00078008009537bea100005c0004803400078008000200ff000000080004000700000008000400b30000000800040004000000080002001f00000008000200020000000900010073797a31000000000900010073797a30000000000900010073797a3100000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4010091}, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r8, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) writev(r8, &(0x7f0000005a80)=[{&(0x7f0000000440)="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", 0xbc1}], 0x1) r9 = socket$inet_sctp(0x2, 0x5, 0x84) write$tun(r0, &(0x7f0000001040)={@void, @void, @ipv6=@icmpv6={0x0, 0x6, "b81d52", 0x1d7, 0x3a, 0x1, @local, @empty, {[@srh={0x0, 0x6, 0x4, 0x3, 0x6, 0x60, 0xc2ce, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @local]}, @dstopts={0xa7, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}, @pad1]}, @hopopts={0x0, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @generic={0xc9, 0x1c, "657b425ac91e1faa7576bf8211719eab30b7c6c75be5dff62b07b49a"}]}, @srh={0x89, 0x2, 0x4, 0x1, 0x8, 0x0, 0x9, [@remote]}, @fragment={0x33, 0x0, 0x8, 0x1, 0x0, 0x3, 0x64}], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x19, 0x1b, "fb3a17f0b2c0393ab5546ac7654f37294cb9173214352a00791bb28fafedbffe1c08843139fc18ad99b24e4706ecab44955072b8c52999c9de590e5a95b7da2b2437625f52c7bf210ddcdf13b3da48318745bcd8e8c23cbb70a6452a7b028a94a4efb3e0a7009ad7be8cd9420933b65a75f17b31e318032b08c7290ed255f2d9c247e285b4c1755a02a8195f56b8a7f4045093297e64ae82d058146c47300c776f62e25c6f5a54e8d2ca321e37ae4a36188931e91e7fadf2dbb2101496a3122cafc1d656b99ca05b5be0fbc1e7a4e38b12c3f715980f981a9e062734"}, {0x3, 0x8, "86b54530879b13ee8f4fd90b528df5871f15bc3a0d6c0f210eaf8a08744884836b9a2696bcc19b11a995213f7c30e8cd4b642725b6a1f19084f3ba5c8f8e1c6e6c6f3f"}, {0x1e, 0x2, "3d19469e09291a33e837ff0b2b2d3215107f"}]}}}}, 0x1ff) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e24, 0x3, 'lc\x00', 0x39ffc08b9a63492e, 0x8, 0x77}, {@private=0xa010102, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r10 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r10, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x4}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0xd4}}], 0x30}, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @empty}, 0x80ad}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000f5dfe4)={0xa, 0x4c20, 0x0, @empty}, 0x1c) 2m32.214959843s ago: executing program 4 (id=1704): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r0, &(0x7f0000001240)=[{{&(0x7f0000000080)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)=""/150, 0x96}, {&(0x7f0000000200)=""/32, 0x20}, {&(0x7f0000000240)=""/155, 0x9b}, {&(0x7f0000000300)=""/151, 0x97}, {&(0x7f00000003c0)=""/10, 0xa}], 0x5, &(0x7f0000000480)=""/250, 0xfa}, 0xfffffff8}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/16, 0x10}, {&(0x7f00000005c0)=""/243, 0xf3}], 0x2, &(0x7f0000000700)=""/231, 0xe7}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000800)}, 0x1}, {{&(0x7f0000000840)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000008c0)=""/198, 0xc6}], 0x1, &(0x7f0000000a00)=""/159, 0x9f}, 0x7}, {{&(0x7f0000000ac0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000b40)=""/237, 0xed}, {&(0x7f0000000c40)=""/123, 0x7b}, {&(0x7f0000000cc0)=""/135, 0x87}, {&(0x7f0000000d80)=""/200, 0xc8}, {&(0x7f0000000e80)=""/110, 0x6e}], 0x5, &(0x7f0000000f80)=""/68, 0x44}, 0x5}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001000)=""/39, 0x27}, {&(0x7f0000001040)=""/165, 0xa5}], 0x2, &(0x7f0000001140)=""/251, 0xfb}, 0x3}], 0x6, 0x20, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x90000018}) poll(&(0x7f0000000100)=[{r1, 0x2000}], 0x1, 0x8) 2m32.081615273s ago: executing program 4 (id=1706): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x6, &(0x7f0000000740)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0xe, 0x0, &(0x7f0000000140)="410c49bc3c388e38d0da5a20564e", 0x0, 0x1008, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0xfffffffc, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0x0, 0x0, 0xfe, 0x2, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_GATEWAY={0x8, 0x5, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400a044}, 0x20004090) 2m31.935851848s ago: executing program 4 (id=1708): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'veth0_to_hsr\x00', &(0x7f0000000100)=@ethtool_gstrings}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000240)='rlimit', 0x6902, &(0x7f0000000340)={@_ha_fsid, {0x0, 0xd, 0x401, 0x6}}, 0xc, &(0x7f0000000380), &(0x7f00000003c0)=0x7}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r3, 0x1, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB="380000001800000000000000", @ANYRES32=r4, @ANYBLOB="5ff7efd855aab2670c0f6556fa278e09d4876392d7f2cf2b4af8a9e863a9bb0a952ac55cdca756635883dc1fd0e67c9eed3d90b2151688e0f3034f82ca0028a2c7678e73ec0bb4ec9fa6f8e7c8025045e45bc3afa311b5572e3970c20926ae7fb870", @ANYRES64=r5], 0x6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="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", @ANYRES32, @ANYRES64=r5], 0x20) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={0x1, &(0x7f0000000480)="2f076b5128b884a3f0aedcda52be555a159a8e2d50807f32f3cac5a4ff54efc102a6ac6f40f1e697a37bca3557c5e3eaba302c4d401ef311f0bec6ca"}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="f80700000000000000000000cce425820000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001180)={{r8}, &(0x7f00000010c0), &(0x7f00000002c0)=r7}, 0x20) unshare(0x40000080) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=@newqdisc={0x130, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0x1, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}, @TCA_STAB={0xa0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf5, 0x4, 0xfff8, 0x7, 0x1, 0x7, 0x3, 0x2}}, {0x8, 0x2, [0x8, 0x3]}}, {{0x1c, 0x1, {0x4, 0x7a, 0x1000, 0x5, 0x0, 0x0, 0x80000000, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x1, 0x8, 0x6, 0x4, 0x1, 0x800, 0x5, 0x7}}, {0x12, 0x2, [0x7, 0x0, 0x7, 0x2, 0xe0, 0x2, 0xb]}}, {{0x1c, 0x1, {0x1, 0x6, 0x101, 0xff, 0x0, 0x9, 0xffffff80, 0x1}}, {0x6, 0x2, [0x6]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x2c, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x401}, @TCA_PIE_LIMIT={0x8, 0x2, 0x10}, @TCA_PIE_ECN={0x8, 0x6, 0x1}, @TCA_PIE_BETA={0x8, 0x5, 0x3}, @TCA_PIE_TARGET={0x8, 0x1, 0x1}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_RATE={0x6, 0x5, {0x3, 0x5}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x130}}, 0x4c850) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xc, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x7f}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x2}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041804}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7e2909a5}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x90, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x77}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc32}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x20b}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}]}], {0x14}}, 0x114}}, 0x0) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800003000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$XFS_IOC_FSCOUNTS(r6, 0x80205871, &(0x7f0000000040)) r13 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x23, 0x0, 0x0) write$cgroup_subtree(r13, &(0x7f00000000c0)={[{0x2d, 'rlimit'}]}, 0x8) 2m29.786092871s ago: executing program 4 (id=1722): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xd}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x841}, 0x1000) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000000680)={{r5, &(0x7f0000000180)='ecb-serpent-avx\x00', 0x2000, &(0x7f0000000400)={@_ha_fsid={[0x6, 0x4]}, {0x9, 0x2, 0x6ac, 0xa3}}, 0x6, &(0x7f0000000440), &(0x7f0000000480)=0x1000}, 0x2, &(0x7f0000000640)=[{0x3, 0x101, &(0x7f00000004c0)='\x00', &(0x7f0000000500)="83dbfbc6ecac5b6f019e0f7700dd9e57a9a5a58aebccfcd0cc3a828841cca4ffbe23f66c15141d", 0x27, 0x10}, {0x3, 0x755, &(0x7f0000000540)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', &(0x7f0000000580)="c32861777e2a9c2dee0e62a0c9be9f7be75c16d63f5fe50f084a6e9e8ffe5e73b978e768cb3b4beabb12728ef3fcd2f4fd3bf5322c71e47332db1e5e76527a68b22059e54f4ab2d27357d5885c6e2cddd3a734a2bac0cea9f4eb6c143306506bf7d8755e422fec1e5b7178a5a78c7259ded0896d80588097a96b12bea30e1564c7c29e101bf8c8f8ce5baf9e7eb3434894d916ea0c0aab7deda7631a38a68c11d01e", 0xa2, 0xa}]}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r7, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x66}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40000) bind$alg(r5, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xabbd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x1f) sendto$inet6(r4, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000e80)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r4, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000140)={0x7, 0x7, 0x4, 0x101, 0x80, 0x9, 0x2, 0x8}, 0x20) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000100)=@req3={0x6, 0x200, 0x3b, 0x100, 0xa12b, 0x4, 0x8243}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000200)={{{@in=@loopback, @in6=@dev}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000000300)=0xe8) r10 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, {0x5, 0xa}, {0xd}, {0x4, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x200, 0x400a, 0x0, 0xfffffffd, 0x80}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x4, 0x8, 0x407, 0x2, 0x8, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x68, 0x10, 0x1, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r1, 0x20000, 0x28000}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r1}]}}}]}, 0x68}}, 0x0) 2m29.543525069s ago: executing program 4 (id=1724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a3000000000b4000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d24001280200001800e000100636f6e6e6c696d69740000000c00028008000140000000010c0009800800014000008f"], 0xfc}, 0x1, 0x0, 0x0, 0x4840}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x0) 2m14.333669384s ago: executing program 33 (id=1724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a3000000000b4000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d24001280200001800e000100636f6e6e6c696d69740000000c00028008000140000000010c0009800800014000008f"], 0xfc}, 0x1, 0x0, 0x0, 0x4840}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x0) 4.105536456s ago: executing program 2 (id=2275): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x80c}, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000980)="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", 0x1c2}, {&(0x7f0000000380)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88cf1b612298d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e519e8", 0xa7}, {&(0x7f0000000440)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f0000003b80)="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", 0xbcb}, {&(0x7f0000002380)="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", 0x134}], 0x5}}], 0x1, 0x4000001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r4, &(0x7f0000000240)="09485aa428", 0x5, 0x100400c1, &(0x7f0000000200)={0x11, 0x8100, r5, 0x1, 0x87, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0xe158, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a58000000030a0fdb00000000000000000a00200508000b40000000040900010073797a310000000014000480080002403cb140bb08000140000000011c0008800c00024000000000000000050c00029c8fa655c3140000001100010000000000000000000100000a"], 0x80}, 0x1, 0x0, 0x0, 0x24004052}, 0x24000840) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00000000000000000000000000000000008c914ee9b1456c37be4793fcfcd2677ca9583acc6f785c425fa48a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r8 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xf}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) 3.413911665s ago: executing program 3 (id=2279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) socket$netlink(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a000111"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x1, &(0x7f0000000540)) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/27, 0x1b}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES64=r3, @ANYRES64=r3], 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x6e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0xa2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e640000000800", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4040) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000007060108000000000000000000000000050001000600"], 0x1c}}, 0x0) recvmmsg(r7, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0xa, 0x8, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r8}, 0x38) 3.272391805s ago: executing program 2 (id=2281): syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @random="6cf6566994c6", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xa0}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000f75ff"], 0x0, 0x46}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) syz_genetlink_get_family_id$fou(&(0x7f0000000440), r2) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r3, 0x2, 0x70bd25, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000031) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000001640)="e494e7770b377da4c129a1", 0xb}, {0x0}], 0x2) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000042014b15f50200280012800b000100ec7036477265037ca37a123f8e8a780002000000"], 0x48}, 0x1, 0x0, 0x0, 0x2400c090}, 0x24048044) 3.001373622s ago: executing program 6 (id=2284): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) close(0x3) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000280)=""/73}, 0x20) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="4c0000001200ff095cab150099a283ff04b8008000f0ffff000000060040150024001d001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab14e39ba9bf6c4387ea1b", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) 2.951495272s ago: executing program 2 (id=2285): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_emit_ethernet(0xd4, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaa7dbb0180c200000188f7"], 0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000300), 0x4) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000180), &(0x7f00000001c0)=0x28) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002f00130027bdf000000000000400000008000c"], 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) 2.807203443s ago: executing program 6 (id=2287): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async, rerun: 64) r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@private2, 0x0}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@getqdisc={0x34, 0x26, 0x400, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x2, 0x6}, {0x4, 0x8}, {0xffe0, 0x4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r2, 0x0) (async) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x9c7ab000) (rerun: 32) preadv(r3, &(0x7f0000000400)=[{&(0x7f0000000300)=""/185, 0xb9}], 0x1, 0xb, 0x9) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.721273997s ago: executing program 1 (id=2288): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000)={0x1, 0xfff9, 0xf800, 0xffff}, 0x8) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000a40)={0x50, r2, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x50}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) 2.611452656s ago: executing program 6 (id=2289): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="63eced8e46aa7ce5a833c9f7b942", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) unshare(0xa020480) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000540)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4000000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffe0}, {0x6, 0x6}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "8100400000000000000000002f00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) 2.483431566s ago: executing program 1 (id=2290): r0 = socket$kcm(0x29, 0x7, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000000)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @private=0xa010100}, {0x2, 0x4e23, @multicast2}, 0x2a0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='macsec0\x00', 0x0, 0xec36, 0x4}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x4, 0x9, 0x9}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0x0, 0x2}, 0x6) r3 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r3, &(0x7f0000000180)=""/255, 0xff, 0x2020, &(0x7f0000000280)={0x2, 0x0, @initdev}, 0x10) sendmmsg(r1, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)="07d9e30c3101931be46d4cde5cedc9926cd9d20a47852f9dc986ef2a11", 0x1d}, {&(0x7f0000000300)="ab2f535d54f615e12f40c6dc0a9a4b92cd2e6e98099384a3bb8a64b490780dca47b3bafa92a5a05d933327cfaf76d2effa4cd8866784852f774416d8b794a068dd7c308b8f9b9570ed1ad424dc5dd652b5d6db93ceb5b2e70ac16c4cb12c8b64bb73fd7d5d89f10d604394c06b4c391f27271e9b1e122d19b39c750abc916c67d6779b74a57b2764ce24ea46fd74b303257bed59db5070aa7f08478ae96c1177fdb4543549222a7ca3446ad417eaa81b84d7e168ea964d", 0xb7}, {&(0x7f00000003c0)="33bd6cd811c977c5965fcd31d1f5719d4d8a86ad47cb286f710d63cfda998f545d18478ec5167c076bc8913a0db41d03b2eb6fdf644d204b93bca6b48743059edcce78020307a89dcdcc349736771603f3051437f2e01c0610f8a29a1df0f1d54e6c3e9081df50467dc3702e667817456779954e9959a1b51202b763aaa70c57a04502c5fbb7c54c4a57ef849f444d4a9d83776712c08a0da07d6dc0ee783488f2cf8ff00ac989449b46c26ada927ba44ca59ff42772b3ed3e3a9bbed770a8ca3b9edc3ee2fc3d104b5a3898cd35fa76eb16", 0xd2}, {&(0x7f00000004c0)="0111d4fafb1a25d0d8405916dedfa04e84582d19990076ea3d62d857807bcd156ffc0db36494f935fec1a29a69a78eb73e05f72e44c91f706771bf3bdd", 0x3d}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="5e339f77f39790c07feb7bbc8cdb9ea8b642c0010ef5900ec8075504cbbe245e0f7ab3e7b9e9fbdd006bb0913cb1381d21a8b40f659a93de7202e8b6558fe8b1b735759c0ef04d7a52cc04a89709df6c2af8b3dc9eda7d27b54bb4a6518e524638df3fc84c48f544e6b007f5add42389866cc11d1190295e31a8871471df6c1bb4c2666f4a414afeb2b4f514ca1fa47124e9c5de5c1fb3aa16bcdfea347f71c19c86c6b4590512bef8", 0xa9}, {&(0x7f00000015c0)="f1bd3a21b0eee377d34dcd38a91e7faa7aa2a8a59a4c3f753cfbfb4af40d0c37ff1ccadf6ffd4a472c5477dfa8b650553bffdae368f0c7c694bc100deb87a1bc9eb5e40395af31e2c282592e3cdeab", 0x4f}], 0x7, &(0x7f00000016c0)=[{0x58, 0x10d, 0x6, "fc7e76c2602282c31146467229c778cc3d724e2468dfbb1f7115b4d163120b4a5f0b3df75286d889c5e77dacc2e36f7fd1a98368593464af8badc091b9b04bf64a15ea4cd0f8"}, {0xc0, 0x113, 0x7f, "75b89d4bc251b4736e66cbd713e263ebc0f67d4c3c630da9aad7fa862800e173c440d3fffcef8903d0da941a9b05043d30fcad3b682d07cd643258b46daaa5c796beb2e99f217dbf5ebe0f027e2a37b7f84e08b2855ec07d79368cd4610abf4f7d0a95358160b5d78cf03537643dd38d65495c68e175d16abe1f91e542ce89067e5b3d4f814856919a00b61d449b4b260c1c6eee242026b93c03eae1bdd110dff18de8ea6aaa83548d7667"}, {0x30, 0xff, 0x9d6, "714e8972e723fba3e49c13c3560284a4b8bbfcf25bced44e41fd"}, {0x68, 0x1, 0x0, "096a879afff8541d0fd526f757875058633546ee6dd9fb8ff2057e84fc24239422beb125286ee2eea2f952ab62aa5fa7a109897a6801943cf4799474757c5c5be5dce9b8f08bb5a2ab4bdec19064c0f664"}, {0x28, 0xff, 0xf, "367427f90d07ecf4868c96ed1f627d697323"}, {0x68, 0x10b, 0x2, "c91a319bfc988c2a3476eb5e4adc5af9bd3eff45c67f811847bbc7452adeb9be07cc76f49e805f9595e65aa2d729c983963737da0960dbe3f5837f1b497ae1c0a6321c6ff71f69c75b582a11419be0b0c0a6ec6d9509"}, {0x20, 0x3a, 0x2, "1b9966cb61c435f3ee732c17"}, {0xd0, 0x10c, 0x8, "dc3107dae3b9dda3c500ceece51074d1038525a37dfd39ff83a870876ba9555ff4f129579eae3821a58457da1a0aa9869f14f1647180b20d153c6e032cfbf3db1f3d28e7889064b1b340991d8c71d874de7cd79ed1e0505c668f4946d98e68a644e727b043128d2b70325b6e53472f7535d3effa5f3655bba9cb57cfcbe7bf1d4423f239c57e27b4f90a19458054ad442d6cec630d798ae30a3d899766d4ab6e8d1f36e2dc9618be0766e9d7404ca882fabb8007182adaa8480a9c5189"}, {0xa8, 0x10e, 0x2, "f68b639b6a33bdce8689bc1a3dcd331a033e6590da7ef99e94ff12507819f4213e703d2023f96a6a086006727bc417cc84c1f2255701982872c67bd97673f0898ae8972ba421938d5446e3b06317333b26f9569acea203540f1d2a9141126c2159253ce573724d672670d4e2b6408819e2a5f911ce41d54eff330d22f6d0e312d25230adbc8c9fe317d7c221c5fb4ce767"}, {0xe8, 0x118, 0x3, "feedfb08042766358b2b98d22edfe61f0460216351678ae2beabaa65bc2440c9f5ee285b392dc77cf2600a7ecf694b601cb3202107a46dc3a528f6b6cda7d5edf7496e03777fb305f4c2b988584610c2977e42649dc9f74d9736b0d1ee8cc181f92448f83f861cd3c5b1b1296c87c89de3e600b05908cd0f8dd9ed8efd342c48055e89e31e6f018d720b23d20aea719b5574eede7d7083e6a27b82b2c3274b9d597dd6d35038e7c3d7602ebe59211eb09f3c741fc120723404fc7782d7c5fef9ddf9f3e15815c691ee0ccaaf68473bd3ddf21ce200"}], 0x4c0}}], 0x1, 0x4004) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000001bc0)=0x1, &(0x7f0000001c00)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x50, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_PEER_ADDR6={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @multicast2}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_VERSION={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000804}, 0x800c000) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r6, &(0x7f0000001dc0)={0x2, 0x0, @private=0xa010101, 0x4}, 0x10) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x420000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x1c, 0x0, 0xb, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_COMPAT_NAME={0x8, 0x1, 'gtp\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0xefebbd3f96d5790e}, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000001f00)={'tunl0\x00', 0x1}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001f80), r4) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000002080)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x5c, r7, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5cc7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffff7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0xc1) r8 = socket$inet(0x2, 0x5, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000020c0)='macvlan0\x00', 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f00000021c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x28, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002240), r4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000003480)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003440)={&(0x7f00000022c0)={0x116c, r9, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "cbd53241ba"}, @NL80211_ATTR_FILS_ERP_RRK={0x3b, 0xfc, "36bd70a45cc7c85f288aa7179397f1240a1f41c04f808b2e85edbf97b06cb15ea7118f4262236c71122e24900976a5d62904277ad86142"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_FILS_ERP_RRK={0xfb, 0xfc, "8847a6a6c9c1c9904f7d776901f1fdfae37bd4f223689110e82a68f0bf9c00579fd0539cfb5d6acca6fc986c4afdc2a9b0d881ca6052ed82808685fdac2214456739221de5067ea4d4f4ea6ad27f261880e12dec020ab42844c1a50811ca8e8eee9053616656306a6d2017ab5ee342ef101f4e94762bbf758c588c0751f7b25a0af74c095a88b3372b49ddc2f9423c964a77c4e5d12f279a14e46aac727322a20f8efe3593bd3f353c1af725f98a5472571b140a36ce0c02b6d3420d94059807cdeb1c393c1b9afc8ae955565d7d691be04204c78ee144bdeb2c4d9e598e85240c14e62b98d99c55fd8d8948423dea373f9b6f95f73014"}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}]]}, 0x116c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) bind$l2tp6(r8, &(0x7f00000034c0)={0xa, 0x0, 0xf99809f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x3}, 0x20) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000003500)=0x80000001, 0x4) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000003680)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003640)={&(0x7f00000035c0)={0x64, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x8}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x570}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_RX_USECS={0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0xf}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xdf78}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x8001}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0xffff}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x40) 2.426330466s ago: executing program 3 (id=2291): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x35f, @private1, 0xfffffffe}], 0x1c) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) unshare(0x2c020400) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0x86, @rand_addr=0x64010102, 0x4e20, 0x1, 'nq\x00', 0x1d, 0x2, 0x40}, {@loopback, 0x4e23, 0x2000, 0xc24, 0x9}}, 0x44) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r2, 0xaa0f4000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r7, 0xe6905000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10012, r1, 0x0) 2.37068675s ago: executing program 2 (id=2293): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0xfa2, @private2={0xfc, 0x2, '\x00', 0xfd}, 0x2}]}, &(0x7f0000000080)=0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x7, 0xea, 0x800d, 0x1, 0x3, 0x0, 0x7f, 0x5, r2}, &(0x7f00000001c0)=0x20) r4 = socket$inet(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003880)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "448ab78bce"}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x24040840) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000f0a9c8085000000040000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r6}, 0xc) listen(r4, 0x8) listen(r0, 0xfffffffd) r7 = socket$inet(0xa, 0x801, 0x84) r8 = socket$inet(0xa, 0x801, 0x84) listen(r8, 0x8) listen(r7, 0x1) r9 = socket$netlink(0x10, 0x3, 0x4) listen(r3, 0x8200002) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r9) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 2.190500888s ago: executing program 6 (id=2294): syz_emit_ethernet(0x46, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYBLOB="5180095e90780002"], 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES64=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)}], 0x1}}], 0x1, 0x20000044) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffc, 0x0, 0xd4}, 0x9c) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) socket$packet(0x11, 0x0, 0x300) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000030a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000dfffffffffffffff00000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000601000000004400050000000000000000000000ffffffffffff000000003c"], 0xfc}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r7, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c76436ffffff8800135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) 2.099472807s ago: executing program 3 (id=2295): syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @random="6cf6566994c6", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xa0}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000f75ff"], 0x0, 0x46}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) syz_genetlink_get_family_id$fou(&(0x7f0000000440), r2) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r3, 0x2, 0x70bd25, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000031) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000001640)="e494e7770b377da4c129a1", 0xb}, {0x0}], 0x2) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000042014b15f50200280012800b000100ec7036477265037ca37a123f8e8a780002000000"], 0x48}, 0x1, 0x0, 0x0, 0x2400c090}, 0x24048044) 1.958744679s ago: executing program 6 (id=2296): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800910a0000000000e1ffffffffffffffcf0000", @ANYRES64=r0, @ANYRES16=0x0], 0x48}}, 0x2000800) (async) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002300)=""/3, 0x3}, {0x0}], 0x2}, 0x7}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x2f, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0xd, 0x0, @opaque="bc3defe1e0"}}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0xa15f, @loopback}, 0x1c) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x23, 0x8, 0x0, 0x400, 0x0, 0x7e, 0xe7, 0x0, 0x87, 0x0, 0x80000, 0x0, 0x1, 0x8, 0x0, 0x82000045, [0x2, 0x9]}}) 1.75958018s ago: executing program 5 (id=2297): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, 0x46, 0x107, 0x70bd28, 0x2, {0x1, 0x7c}, [@nested={0x7, 0x4, 0x0, 0x1, [@generic='6dy']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) epoll_create1(0x80000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000100100000000000200050000000002000000"], 0x48) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r3, r4, 0x7, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r3}, 0x16) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000480)=@ethtool_eeprom={0x4f, 0xcd, 0x7}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r9, &(0x7f00000002c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0xfffffffe) 1.735807241s ago: executing program 3 (id=2298): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r2, 0x25, 0x0, @void}, 0xf) syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4, @multicast1}}, 0x80, &(0x7f0000000140)=[{0x0}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) close(0x3) r6 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r6, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000000080)=""/244, 0xf4}, {&(0x7f0000000180)=""/22, 0x16}, {&(0x7f00000001c0)}, {&(0x7f0000000200)=""/94, 0x5e}, {&(0x7f00000002c0)=""/167, 0xa7}, {&(0x7f0000000380)=""/148, 0x94}, {&(0x7f0000000440)=""/113, 0x71}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x9, &(0x7f0000001700)=[@cswp={0x58, 0x114, 0x7, {{0x9c1, 0x6}, &(0x7f0000001580)=0x80000001, &(0x7f00000015c0), 0x8, 0xfffffffffffffff8, 0x80, 0x5, 0x22, 0x7}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001600)=""/154, 0x9a}, &(0x7f00000016c0), 0x40}}], 0x88}, 0xc884) r7 = accept4$bt_l2cap(r6, &(0x7f00000001c0), &(0x7f0000001800)=0xe, 0x80000) connect$bt_l2cap(r7, &(0x7f0000001840)={0x1f, 0x81, @any, 0x0, 0x2}, 0xe) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x80800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r10, 0x8993, &(0x7f00000009c0)={'gre0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x700, 0x1, 0xfffffffc, 0x0, {{0x6, 0x4, 0x0, 0x1, 0x18, 0x63, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x4, 0x4e, 0x0, 0x4}]}}}}}) getsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000001880)={@multicast1, @empty}, &(0x7f00000018c0)=0xc) r11 = accept$unix(r9, &(0x7f0000001900), &(0x7f0000001980)=0x6e) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f00000019c0)={'wg1\x00'}) 1.346916297s ago: executing program 1 (id=2299): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.301735573s ago: executing program 1 (id=2300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4900000}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x24c, r2, 0x510, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x90, 0x3, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x7b, 0x1, "4b3ad6b9d1906e33c1ddce4f6c329d0b420ad23ada213cea7e1e55aae579d5d161b4073d2d7bc63bff8ca7fc0e8feede0223736068969499a9a8861de6b91a394506527be81fa5e5c63872d3e3043e90e740664cded0023ac4f3002d28f170be7119f472e35c313ba82e031656995b78c87f95157e0347"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xffffffff}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xa4, 0x3, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x9c, 0x1, "e2de98293106b653dc6ed49a974a05ae478dfe855c8d6a00b8981ff36b9fcfa93f566cec567c00888e87bd7c757554caa2b3af12ea293e8500d94a7a44c22a9d8d17de8d67890ce9eed03601ae1f2abd7c28a38ea1278a7890276d19ead5a59726dc1d90b327864e067ad37970f431295436c84f0670098c2922af571c37242b03515257e51f67c091459cd1c5d4a3801955cf9fdbe3ee57"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xd4, 0x3, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xca, 0x2, "ccbaf09357f86de4e3a550363f3e41e3bac2c556ac63f5813a6b9ca586f2db49e4dd5a46a54f0903dca89e6155513775957781bbca33cc2ddf9ced6d66f7e1221d4f4645b4171b47547f7c497860c83ed1780928f01d39de3e627103f77c1de350171166174fe62e88f36e8a4b806aad6378b9b19252e222918d5afefdccece1c7b44e0155e0bb869e69794f78328a3da07ce5aa4e833dd1670c525cdf62b7bb9423bffc51807daaf888eb884c10c8ac99844297655fe78b498c5d39970b87b74efc026cc492"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) close(r3) (async) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x64, r1, 0x1, 0x170bd25, 0x25dfdbfc, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x448c9}, 0x4004810) 1.142114427s ago: executing program 2 (id=2301): r0 = socket$tipc(0x1e, 0x2, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xffffffd9}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}]}, 0x80}, 0x1, 0x7}, 0x0) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x22000042, 0x1, 0x2}, 0x10) (async) sendmsg$tipc(r0, &(0x7f00000006c0)={&(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x10000000}}, 0x10, 0x0}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x7, &(0x7f0000000100)=0x40001fc, 0x4) (async) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x52, 0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005e00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006c00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)={0x14, 0x2f, 0x301, 0xa70bd1d, 0x25dfdbfa, {0x6}}, 0x14}}, 0x0) 1.046476798s ago: executing program 6 (id=2302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) socket$netlink(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a000111"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x1, &(0x7f0000000540)) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/27, 0x1b}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES64=r3, @ANYRES64=r3], 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x6e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0xa2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e640000000800", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4040) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000007060108000000000000000000000000050001000600"], 0x1c}}, 0x0) recvmmsg(r7, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0xa, 0x8, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r8}, 0x38) 1.04450307s ago: executing program 5 (id=2303): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) pipe(&(0x7f0000000040)) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4d6, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x9d, 0x0, &(0x7f0000000700)="10d70e73c1be2f1f4b333e43298296c6240a834e9879c51c09c1b867016602859490813e9ddc6a367066a9ddc563e66a33c231ee091f303ed87cedb714c30c15a2b08e7727f4c6737769b2e5187ccc2dd5152cc394ce7beb4dd23c561c0de7f139a8d15a5904d33e32b6d3f87d29f1afad8d101fc1600e0853a7b7f7864e4de971ed4fcaca26c1b751871aff7878bd3f23853ce2c6175f5c71b36a1d1d", 0x0, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xe) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000010003904000000140000000000000010", @ANYRES32=r8, @ANYBLOB="01980600000000001800128008000100677265000c00028008000700ac14"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r5, &(0x7f00000001c0)="11eb", 0x2, 0x24044801, &(0x7f0000000200)={0x11, 0x8100, r8, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 1.043887746s ago: executing program 3 (id=2304): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="63eced8e46aa7ce5a833c9f7b942", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) unshare(0xa020480) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000540)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4000000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffe0}, {0x6, 0x6}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "8100400000000000000000002f00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) 1.019020121s ago: executing program 1 (id=2305): r0 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfc}}, 0x0, 0x81, 0x0, 0x0, 0x41100, 0x61, '\x00', 0x0, @cgroup_sock_addr=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r1}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x3, 0x6, @remote}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0x1d) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000f05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9}, 0x94) close(0x4) socket$inet6_udp(0xa, 0x2, 0x0) connect$rxrpc(r10, &(0x7f0000000640)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000040)=0x1001a1, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x1, 0xfff1}, {0x2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x3604c8a4}, 0x840) 690.941931ms ago: executing program 5 (id=2306): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) r1 = socket(0x15, 0x5, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) (async) close(r2) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff35, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES64=r1, @ANYRESDEC=r2, @ANYRES64=r0], 0xc0}, 0x1, 0x0, 0x0, 0x4c095}, 0x44105) connect$unix(r1, &(0x7f00000003c0)=@abs={0xa}, 0x6e) (async) getsockname$llc(r1, 0x0, &(0x7f0000000040)) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 389.165538ms ago: executing program 1 (id=2307): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x80c}, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000980)="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", 0x1c2}, {&(0x7f0000000380)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88cf1b612298d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e519e8", 0xa7}, {&(0x7f0000000440)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f0000003b80)="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", 0xbcb}, {&(0x7f0000002380)="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", 0x134}], 0x5}}], 0x1, 0x4000001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r4, &(0x7f0000000240)="09485aa428", 0x5, 0x100400c1, &(0x7f0000000200)={0x11, 0x8100, r5, 0x1, 0x87, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0xe158, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a58000000030a0fdb00000000000000000a00200508000b40000000040900010073797a310000000014000480080002403cb140bb08000140000000011c0008800c00024000000000000000050c00029c8fa655c3140000001100010000000000000000000100000a"], 0x80}, 0x1, 0x0, 0x0, 0x24004052}, 0x24000840) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00000000000000000000000000000000008c914ee9b1456c37be4793fcfcd2677ca9583acc6f785c425fa48a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r8 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xf}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) 385.363721ms ago: executing program 5 (id=2317): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff85000000ae000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000001b705000008000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000400)={&(0x7f0000000300)=[{0xffff, 0x1, 0x0, {0xffff, 0x5, 0x9f2a0db5da3b42ae}}, {0x6, 0x0, 0x0, {0xf, 0x7, 0x1}}, {0x400, 0x0, 0x0, {0x9, 0x6, 0x1}}, {0x8001, 0x2, 0x0, {0x2, 0x8}}, {0x0, 0x1, 0x0, {0x6, 0x80000001}}, {0x8, 0x2, 0x0, {0xb, 0x0, 0x2}}, {0x10, 0x1, 0x0, {0xc4, 0x10}}], 0x7, 0x20, 0x0, 0xc0000000000}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="1159dd153db1"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00082cbd7000ffdbdf257a00000008000300", @ANYRES32=r5, @ANYBLOB="0c000c000000070084362a010100000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40041}, 0x10010) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000000101040000000000090000000000002400018014000180480001"], 0x38}}, 0x0) r7 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) setsockopt$inet_int(r7, 0x0, 0x14, &(0x7f0000000180)=0x5533bf16, 0x4) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0081202000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000000c0)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 365.50631ms ago: executing program 3 (id=2308): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) write$nci(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="60060202"], 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800ff207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) 231.790403ms ago: executing program 2 (id=2309): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0xb56cea99d7d0f667]}}, 0x0, 0x34}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x34, r2, 0x701, 0x70bd2c, 0x0, {0x45}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000021}, 0xd0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)='>', 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="00ff0f17dda02d824f306323746f25ebe6833cf1c8d25a3fbe6fce6ba07b9981d95bc04d2da823d51ed3b3006df34e6dac57f89316b57f2566266d94fe26e991bc326d01f0387974ad781dc4e4c4e1c64fe3185af16d6f2f3d1f77b38ef47aaf4886a8"], 0x18, 0x20000805}, 0x24000880) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x48}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040001}, 0x40000) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001580)=@newsa={0xf8, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x1, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) 128.637111ms ago: executing program 5 (id=2310): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x87, &(0x7f0000000480)=""/135, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe92}, 0x21) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0xf, 0x6a, 0x6}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x140f, 0x100, 0x70bd26, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0xe9d847491694e52a}, 0x40090) 0s ago: executing program 5 (id=2311): socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x12) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'pim6reg\x00', 0x2310}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'pim6reg\x00', 0x2310}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', r2, 0x29, 0x4, 0x3, 0x80000001, 0x2e, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @empty, 0x20, 0x8, 0xfd, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', r3, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @loopback, @mcast2={0xff, 0x5}, 0x700, 0x8000, 0x0, 0x4}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuset.effective_mems\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x840000000002, 0x3, 0x100) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) close(0x3) (async) close(0x3) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) (async) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) (async) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) preadv(r8, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0) sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYBLOB="20000000240007012ebd7000fbdbdf25027c00000c63d45d50792e5256000000"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) (async) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYBLOB="20000000240007012ebd7000fbdbdf25027c00000c63d45d50792e5256000000"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) write$cgroup_subtree(r4, &(0x7f0000000240)=ANY=[], 0x32600) (async) write$cgroup_subtree(r4, &(0x7f0000000240)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) kernel console output (not intermixed with test programs): se struct sctp_assoc_value instead [ 167.539875][ T8591] tipc: Started in network mode [ 167.561501][ T8591] tipc: Node identity 2ad86dc90278, cluster identity 4711 [ 167.577539][ T8591] tipc: Enabled bearer , priority 0 [ 167.597823][ T8591] tipc: Resetting bearer [ 167.981171][ T8623] tipc: Enabling of bearer rejected, failed to enable media [ 168.263579][ T8588] tipc: Disabling bearer [ 168.426868][ T29] audit: type=1804 audit(1784497818.098:4): pid=8643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.703" name="/newroot/10/cgroup.controllers" dev="tmpfs" ino=69 res=1 errno=0 [ 168.472348][ T29] audit: type=1800 audit(1784497818.118:5): pid=8643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.703" name="cgroup.controllers" dev="tmpfs" ino=69 res=0 errno=0 [ 168.495642][ T29] audit: type=1800 audit(1784497818.118:6): pid=8643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.703" name="cgroup.controllers" dev="tmpfs" ino=69 res=0 errno=0 [ 169.240158][ T8672] dvmrp0: entered allmulticast mode [ 169.315974][ T29] audit: type=1804 audit(1784497818.978:7): pid=8675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.713" name="/newroot/156/cgroup.controllers" dev="tmpfs" ino=819 res=1 errno=0 [ 169.371614][ T29] audit: type=1800 audit(1784497818.978:8): pid=8675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.713" name="cgroup.controllers" dev="tmpfs" ino=819 res=0 errno=0 [ 169.456982][ T8670] lo speed is unknown, defaulting to 1000 [ 169.483311][ T8670] lo speed is unknown, defaulting to 1000 [ 169.784780][ T8684] __nla_validate_parse: 9 callbacks suppressed [ 169.784797][ T8684] netlink: 36 bytes leftover after parsing attributes in process `syz.3.716'. [ 169.999004][ T8689] netlink: 64 bytes leftover after parsing attributes in process `syz.1.717'. [ 170.049269][ T8692] Bluetooth: MGMT ver 1.23 [ 170.054513][ T8692] Bluetooth: hci1: expected 8706 bytes, got 2 bytes [ 170.085938][ T8689] netlink: 'syz.1.717': attribute type 1 has an invalid length. [ 170.254524][ T8708] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.281005][ T8692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.718'. [ 170.390535][ T8713] netlink: 20 bytes leftover after parsing attributes in process `syz.5.722'. [ 170.428580][ T8711] 8021q: adding VLAN 0 to HW filter on device bond7 [ 170.462193][ T8711] bond7 (unregistering): Released all slaves [ 170.772597][ T8724] lo speed is unknown, defaulting to 1000 [ 170.780705][ T8724] lo speed is unknown, defaulting to 1000 [ 171.297713][ T8738] dvmrp0: entered allmulticast mode [ 171.671495][ T8755] netlink: 11 bytes leftover after parsing attributes in process `syz.5.731'. [ 173.024179][ T8703] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 173.203535][ T8777] xt_hashlimit: size too large, truncated to 1048576 [ 173.275767][ T8778] xt_hashlimit: size too large, truncated to 1048576 [ 173.291428][ T8778] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 173.921853][ T8783] syzkaller0: entered promiscuous mode [ 173.938080][ T8783] syzkaller0: entered allmulticast mode [ 174.302175][ T8802] netlink: 24 bytes leftover after parsing attributes in process `syz.4.739'. [ 174.517808][ T8817] netlink: 256 bytes leftover after parsing attributes in process `syz.5.741'. [ 174.540714][ T8817] netlink: 32 bytes leftover after parsing attributes in process `syz.5.741'. [ 174.582166][ T8817] netlink: 'syz.5.741': attribute type 1 has an invalid length. [ 176.247718][ T8875] syzkaller1: entered promiscuous mode [ 176.263224][ T8875] syzkaller1: entered allmulticast mode [ 176.418445][ T8878] smbdirect: ib_dev[syz2] removed [ 176.605121][ T8892] openvswitch: netlink: Duplicate or invalid key (type 0). [ 176.642570][ T8892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.671514][ T8895] team0: Port device bridge_slave_0 removed [ 176.719498][ T8895] bridge_slave_1: left allmulticast mode [ 176.725645][ T8895] bridge_slave_1: left promiscuous mode [ 176.731610][ T8895] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.750028][ T8895] bond0: (slave bond_slave_0): Releasing backup interface [ 176.757933][ T8901] netlink: 64 bytes leftover after parsing attributes in process `syz.1.769'. [ 176.779515][ T8895] team0: Port device team_slave_0 removed [ 176.816680][ T8895] team0: Port device team_slave_1 removed [ 176.845584][ T8895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.893567][ T8895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.948180][ T8909] netlink: 48 bytes leftover after parsing attributes in process `syz.2.770'. [ 176.951793][ T8895] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 176.991384][ T8903] team0: Port device xfrm0 added [ 177.067458][ T8913] bond4: entered promiscuous mode [ 177.072692][ T8913] bond4: entered allmulticast mode [ 177.079080][ T8913] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.112685][ T8916] syzkaller0: entered promiscuous mode [ 177.135486][ T8916] syzkaller0: entered allmulticast mode [ 177.375833][ T8933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.775'. [ 177.388211][ T8931] netlink: 'syz.2.774': attribute type 33 has an invalid length. [ 177.574751][ T8937] netlink: 12 bytes leftover after parsing attributes in process `syz.5.776'. [ 177.687148][ T8944] pim6reg: entered allmulticast mode [ 177.725440][ T8944] pim6reg: left allmulticast mode [ 177.969144][ T8956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.131162][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.5.784'. [ 178.215191][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.783'. [ 178.222609][ T8931] infiniband syz2: set active [ 178.260570][ T8931] infiniband syz2: added ipvlan0 [ 178.304440][ T8964] netlink: 'syz.3.783': attribute type 21 has an invalid length. [ 178.405624][ T8931] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 178.462582][ T8968] lo speed is unknown, defaulting to 1000 [ 178.516767][ T8931] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 178.559613][ T8983] netlink: 28 bytes leftover after parsing attributes in process `syz.4.787'. [ 178.588071][ T8931] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 178.621595][ T8983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.787'. [ 178.729311][ T8931] RDS/IB: syz2: added [ 178.745649][ T8931] smc: adding ib device syz2 with port count 1 [ 178.770268][ T8931] smc: ib device syz2 port 1 has no pnetid [ 179.210250][ T9002] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 179.274616][ T9005] batman_adv: batadv0: Adding interface: gretap3 [ 179.295666][ T9005] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.325252][ T9005] batman_adv: batadv0: Interface activated: gretap3 [ 179.554611][ T9017] lo speed is unknown, defaulting to 1000 [ 179.758060][ T9027] team0: Port device xfrm0 removed [ 179.773577][ T9027] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 179.965694][ T9037] netlink: 24 bytes leftover after parsing attributes in process `syz.5.795'. [ 180.085650][ T9027] team0: Port device xfrm0 added [ 180.109507][ T9037] netlink: 4 bytes leftover after parsing attributes in process `syz.5.795'. [ 180.318849][ T9044] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 180.431931][ T9047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.247369][ T9076] syzkaller0: entered promiscuous mode [ 182.259067][ T9076] syzkaller0: entered allmulticast mode [ 182.307939][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.5.802'. [ 182.389177][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.5.802'. [ 182.629231][ T9082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.804'. [ 182.641385][ T9083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.804'. [ 182.652589][ T9085] openvswitch: netlink: Missing valid actions attribute. [ 182.661488][ T9085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.760327][ T9085] block nbd0: server does not support multiple connections per device. [ 182.924181][ T9085] block nbd0: shutting down sockets [ 183.069213][ T9106] netlink: 20 bytes leftover after parsing attributes in process `syz.4.806'. [ 184.522808][ T9141] tipc: Started in network mode [ 184.535270][ T9141] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 184.546516][ T9141] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 184.568213][ T9141] tipc: Enabled bearer , priority 10 [ 184.613330][ T9157] netlink: 'syz.4.818': attribute type 21 has an invalid length. [ 185.190962][ T29] audit: type=1804 audit(1784497834.848:9): pid=9173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.824" name="/newroot/167/cgroup.controllers" dev="tmpfs" ino=880 res=1 errno=0 [ 185.254025][ T29] audit: type=1800 audit(1784497834.848:10): pid=9173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.824" name="cgroup.controllers" dev="tmpfs" ino=880 res=0 errno=0 [ 185.360690][ T9193] 8021q: VLANs not supported on vxcan1 [ 185.624855][ T9211] bond5: option tlb_dynamic_lb: invalid value (128) [ 185.635895][ T9211] bond5 (unregistering): Released all slaves [ 185.742567][ T9212] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 185.785718][ T9212] batman_adv: batadv0: Adding interface: gretap4 [ 185.802794][ T9212] batman_adv: batadv0: The MTU of interface gretap4 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.852735][ T9212] batman_adv: batadv0: Interface activated: gretap4 [ 185.871947][ T7785] tipc: Node number set to 1 [ 186.092742][ T9235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.838'. [ 186.120011][ T9235] netlink: 20 bytes leftover after parsing attributes in process `syz.3.838'. [ 186.610520][ T9249] lo speed is unknown, defaulting to 1000 [ 186.740814][ T9268] netlink: 'syz.5.846': attribute type 1 has an invalid length. [ 186.910440][ T9268] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.933137][ T9271] netlink: 196 bytes leftover after parsing attributes in process `syz.5.846'. [ 186.968709][ T9274] netlink: 64 bytes leftover after parsing attributes in process `syz.5.846'. [ 186.985860][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.847'. [ 187.058050][ T9277] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 187.547947][ T29] audit: type=1804 audit(1784497837.218:11): pid=9293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.853" name="/newroot/185/cgroup.controllers" dev="tmpfs" ino=973 res=1 errno=0 [ 187.591965][ T9289] netlink: 'syz.5.852': attribute type 11 has an invalid length. [ 187.611115][ T29] audit: type=1800 audit(1784497837.238:12): pid=9293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.853" name="cgroup.controllers" dev="tmpfs" ino=973 res=0 errno=0 [ 187.648776][ T9289] netlink: 'syz.5.852': attribute type 11 has an invalid length. [ 187.901156][ T9298] A link change request failed with some changes committed already. Interface 0 may have been left with an inconsistent configuration, please check. [ 188.064662][ T9312] IPVS: Error connecting to the multicast addr [ 188.265611][ T9324] __nla_validate_parse: 1 callbacks suppressed [ 188.265628][ T9324] netlink: 28 bytes leftover after parsing attributes in process `syz.3.858'. [ 188.450377][ T9330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.861'. [ 188.499170][ T9333] netlink: 4 bytes leftover after parsing attributes in process `syz.5.862'. [ 188.524043][ T9317] lo speed is unknown, defaulting to 1000 [ 188.623801][ T9339] netlink: 4 bytes leftover after parsing attributes in process `syz.5.863'. [ 188.637655][ T9339] netlink: 'syz.5.863': attribute type 2 has an invalid length. [ 188.884963][ T9344] bond2: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 188.930203][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.5.866'. [ 188.944430][ T9344] bond2 (unregistering): Released all slaves [ 189.238322][ T9360] netlink: 'syz.4.868': attribute type 4 has an invalid length. [ 189.292647][ T9361] netlink: 'syz.4.868': attribute type 4 has an invalid length. [ 189.379461][ T9364] ip6tnl1: entered promiscuous mode [ 189.423457][ T7785] lo speed is unknown, defaulting to 1000 [ 189.430870][ T7785] syz1: Port: 1 Link ACTIVE [ 189.464473][ T7785] lo speed is unknown, defaulting to 1000 [ 189.593129][ T9368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.870'. [ 189.601152][ T9325] lo speed is unknown, defaulting to 1000 [ 189.716376][ T9368] bond7: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 189.752891][ T9368] bond7 (unregistering): Released all slaves [ 189.800595][ T9377] netlink: 'syz.4.872': attribute type 5 has an invalid length. [ 189.824434][ T9378] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 189.965368][ T9382] netlink: 14 bytes leftover after parsing attributes in process `syz.5.874'. [ 190.031928][ T9382] team0 (unregistering): Port device team_slave_0 removed [ 190.083053][ T9382] team0 (unregistering): Port device team_slave_1 removed [ 190.133608][ T9393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.877'. [ 190.168557][ T9393] netlink: 24 bytes leftover after parsing attributes in process `syz.3.877'. [ 190.179515][ T9393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.877'. [ 190.687608][ T9408] bond4: option ad_select: invalid value (34) [ 190.705573][ T9408] bond4 (unregistering): Released all slaves [ 190.721557][ T9420] netlink: 'syz.2.885': attribute type 4 has an invalid length. [ 190.752684][ T9418] ipip0: entered promiscuous mode [ 190.757877][ T9418] ipip0: entered allmulticast mode [ 190.774010][ T9413] netlink: 'syz.2.885': attribute type 4 has an invalid length. [ 191.294169][ T9433] batman_adv: batadv0: Interface deactivated: gretap3 [ 191.315230][ T9433] batman_adv: batadv0: Removing interface: gretap3 [ 191.335965][ T9433] batman_adv: batadv0: Interface deactivated: gretap4 [ 191.351344][ T9433] batman_adv: batadv0: Removing interface: gretap4 [ 191.540974][ T9427] lo speed is unknown, defaulting to 1000 [ 191.653781][ T9451] raw_sendmsg: syz.2.891 forgot to set AF_INET. Fix it! [ 191.957714][ T9466] tipc: Enabling of bearer rejected, failed to enable media [ 193.192217][ T9500] pim6reg1: entered promiscuous mode [ 193.198501][ T9500] pim6reg1: entered allmulticast mode [ 193.211503][ T9500] 8021q: VLANs not supported on team0 [ 193.406539][ T9502] 8021q: adding VLAN 0 to HW filter on device bond5 [ 193.485951][ T9502] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 194.130246][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.142315][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.528244][ T5621] Bluetooth: hci0: command tx timeout [ 194.720740][ T9566] sctp: [Deprecated]: syz.5.913 (pid 9566) Use of struct sctp_assoc_value in delayed_ack socket option. [ 194.720740][ T9566] Use struct sctp_sack_info instead [ 194.985485][ T9578] syz.5.915: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 195.032071][ T9578] CPU: 1 UID: 0 PID: 9578 Comm: syz.5.915 Not tainted syzkaller #0 PREEMPT(full) [ 195.032097][ T9578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 195.032108][ T9578] Call Trace: [ 195.032115][ T9578] [ 195.032123][ T9578] dump_stack_lvl+0xe8/0x150 [ 195.032156][ T9578] warn_alloc+0x24c/0x270 [ 195.032181][ T9578] ? stack_depot_save_flags+0x33/0x800 [ 195.032206][ T9578] ? __pfx_warn_alloc+0x10/0x10 [ 195.032231][ T9578] ? kasan_save_track+0x3e/0x80 [ 195.032260][ T9578] ? __kasan_kmalloc+0x93/0xb0 [ 195.032284][ T9578] ? xsk_setsockopt+0x52a/0x960 [ 195.032310][ T9578] ? do_sock_setsockopt+0x17c/0x1b0 [ 195.032335][ T9578] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 195.032360][ T9578] ? do_syscall_64+0x174/0x580 [ 195.032385][ T9578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.032413][ T9578] __vmalloc_node_range_noprof+0x12c/0x1730 [ 195.032464][ T9578] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 195.032490][ T9578] ? __kasan_kmalloc+0x93/0xb0 [ 195.032515][ T9578] ? __kmalloc_cache_noprof+0x32d/0x660 [ 195.032539][ T9578] ? __kmalloc_cache_noprof+0x150/0x660 [ 195.032565][ T9578] vmalloc_user_noprof+0xad/0xe0 [ 195.032587][ T9578] ? xskq_create+0xbf/0x170 [ 195.032612][ T9578] xskq_create+0xbf/0x170 [ 195.032640][ T9578] xsk_init_queue+0x8a/0xe0 [ 195.032667][ T9578] xsk_setsockopt+0x52a/0x960 [ 195.032689][ T9578] ? __fget_files+0x2a/0x420 [ 195.032714][ T9578] ? __pfx_xsk_setsockopt+0x10/0x10 [ 195.032738][ T9578] ? __pfx_aa_sk_perm+0x10/0x10 [ 195.032769][ T9578] ? aa_sock_opt_perm+0xff/0x1a0 [ 195.032790][ T9578] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 195.032808][ T9578] ? __pfx_xsk_setsockopt+0x10/0x10 [ 195.032833][ T9578] do_sock_setsockopt+0x17c/0x1b0 [ 195.032863][ T9578] __x64_sys_setsockopt+0x13d/0x1b0 [ 195.032892][ T9578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.032913][ T9578] do_syscall_64+0x174/0x580 [ 195.032938][ T9578] ? trace_irq_disable+0x3b/0x140 [ 195.032961][ T9578] ? clear_bhb_loop+0x40/0x90 [ 195.032984][ T9578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.033002][ T9578] RIP: 0033:0x7f5df2b9de99 [ 195.033020][ T9578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.033035][ T9578] RSP: 002b:00007f5df3b0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 195.033060][ T9578] RAX: ffffffffffffffda RBX: 00007f5df2e26090 RCX: 00007f5df2b9de99 [ 195.033073][ T9578] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 195.033084][ T9578] RBP: 00007f5df2c33eaf R08: 0000000000000004 R09: 0000000000000000 [ 195.033095][ T9578] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.033106][ T9578] R13: 00007f5df2e26128 R14: 00007f5df2e26090 R15: 00007ffd09145588 [ 195.033137][ T9578] [ 195.033165][ T9578] Mem-Info: [ 195.354690][ T9578] active_anon:9059 inactive_anon:0 isolated_anon:0 [ 195.354690][ T9578] active_file:0 inactive_file:43148 isolated_file:0 [ 195.354690][ T9578] unevictable:768 dirty:148 writeback:0 [ 195.354690][ T9578] slab_reclaimable:11089 slab_unreclaimable:164024 [ 195.354690][ T9578] mapped:37338 shmem:4163 pagetables:1553 [ 195.354690][ T9578] sec_pagetables:0 bounce:0 [ 195.354690][ T9578] kernel_misc_reclaimable:0 [ 195.354690][ T9578] free:1242066 free_pcp:13411 free_cma:0 [ 195.411601][ T9578] Node 0 active_anon:36236kB inactive_anon:0kB active_file:0kB inactive_file:172388kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:149352kB dirty:588kB writeback:0kB shmem:15116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13884kB pagetables:5772kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 195.501737][ T9578] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 195.536555][ T9578] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 195.603094][ T9578] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 195.644284][ T9578] Node 0 DMA32 free:1009956kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35936kB inactive_anon:0kB active_file:0kB inactive_file:172388kB unevictable:1536kB writepending:588kB zspages:0kB present:3129332kB managed:2548764kB mlocked:0kB bounce:0kB free_pcp:54240kB local_pcp:32304kB free_cma:0kB [ 195.703676][ T9578] lowmem_reserve[]: 0 0 0 0 0 [ 195.711670][ T9602] __nla_validate_parse: 3 callbacks suppressed [ 195.711687][ T9602] netlink: 52 bytes leftover after parsing attributes in process `syz.2.918'. [ 195.746452][ T9578] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:268kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 195.785617][ T9602] netlink: 20 bytes leftover after parsing attributes in process `syz.2.918'. [ 195.824447][ T9578] lowmem_reserve[]: 0 0 0 0 0 [ 195.834380][ T9602] netlink: 32 bytes leftover after parsing attributes in process `syz.2.918'. [ 195.852268][ T9578] Node 1 Normal free:3944344kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 195.903632][ T9578] lowmem_reserve[]: 0 0 0 0 0 [ 195.911538][ T9578] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 195.925321][ T9578] Node 0 DMA32: 139*4kB (UME) 74*8kB (UME) 877*16kB (UM) 600*32kB (UME) 111*64kB (UM) 346*128kB (UME) 266*256kB (UME) 182*512kB (UM) 110*1024kB (UME) 10*2048kB (UME) 155*4096kB (UM) = 1015052kB [ 195.964688][ T9578] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 196.015237][ T9578] Node 1 Normal: 0*4kB 7*8kB (UM) 8*16kB (UM) 13*32kB (UM) 3*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 962*4096kB (UM) = 3944344kB [ 196.053661][ T9578] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 196.073949][ T9578] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 196.106597][ T9578] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 196.131958][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.922'. [ 196.134076][ T9578] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 196.150921][ T9578] 47307 total pagecache pages [ 196.155645][ T9578] 0 pages in swap cache [ 196.176316][ T9578] Free swap = 124996kB [ 196.180606][ T9578] Total swap = 124996kB [ 196.186283][ T9578] 2097051 pages RAM [ 196.198263][ T9578] 0 pages HighMem/MovableOnly [ 196.207868][ T9578] 428178 pages reserved [ 196.216240][ T9578] 0 pages cma reserved [ 196.491682][ T3373] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.506587][ T3373] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.617390][ T3373] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.694129][ T35] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.815329][ T9662] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20001 [ 196.861074][ T9665] batadv0: entered promiscuous mode [ 196.871630][ T9665] macvlan3: entered promiscuous mode [ 196.877752][ T9665] macvlan3: entered allmulticast mode [ 196.883362][ T9665] batadv0: entered allmulticast mode [ 196.896111][ T9665] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 196.904188][ T9665] batadv0: left allmulticast mode [ 196.910542][ T9665] batadv0: left promiscuous mode [ 197.065759][ T9655] lo speed is unknown, defaulting to 1000 [ 197.239828][ T9671] syzkaller0: entered promiscuous mode [ 197.245511][ T9671] syzkaller0: entered allmulticast mode [ 199.174442][ T9709] netlink: 20 bytes leftover after parsing attributes in process `syz.2.942'. [ 199.200923][ T9708] netlink: 20 bytes leftover after parsing attributes in process `syz.2.942'. [ 199.529603][ T9701] lo speed is unknown, defaulting to 1000 [ 199.965599][ T9746] netlink: 'syz.4.948': attribute type 1 has an invalid length. [ 200.154349][ T9746] 8021q: adding VLAN 0 to HW filter on device bond4 [ 200.481647][ T9767] netlink: 60 bytes leftover after parsing attributes in process `syz.3.951'. [ 200.572355][ T9746] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 200.700369][ T9771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.713787][ T9771] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.727515][ T9771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.779038][ T9771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.816648][ T9771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.845464][ T9771] veth1_vlan: left promiscuous mode [ 200.852871][ T9771] veth1_vlan: entered promiscuous mode [ 200.868360][ T9771] veth1_macvtap: left promiscuous mode [ 200.875921][ T9771] veth0_macvtap: left promiscuous mode [ 200.887458][ T9771] veth0_macvtap: entered promiscuous mode [ 200.894686][ T9771] veth1_macvtap: entered promiscuous mode [ 200.909258][ T9771] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 200.919413][ T9771] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 200.928642][ T9771] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 200.939718][ T9771] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 200.953316][ T9771] geneve0: entered promiscuous mode [ 200.974216][ T9771] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.983551][ T9771] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.001466][ T9771] 8021q: adding VLAN 0 to HW filter on device bond3 [ 201.013796][ T9771] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 201.025349][ T9771] 8021q: adding VLAN 0 to HW filter on device bond4 [ 201.041149][ T9771] 8021q: adding VLAN 0 to HW filter on device bond6 [ 201.053855][ T9755] lo speed is unknown, defaulting to 1000 [ 201.069025][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.076273][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.107839][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.115025][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.335206][ T5627] Bluetooth: hci2: command 0x0406 tx timeout [ 201.335231][ T5637] Bluetooth: hci4: command 0x0406 tx timeout [ 201.335263][ T5637] Bluetooth: hci0: command 0x0406 tx timeout [ 201.342261][ T5640] Bluetooth: hci1: command 0x0406 tx timeout [ 201.574458][ T9802] netlink: 16 bytes leftover after parsing attributes in process `syz.3.960'. [ 201.876619][ T9810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.963'. [ 202.915881][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.972'. [ 203.050377][ T9843] tipc: Started in network mode [ 203.064440][ T9843] tipc: Node identity 6e420b2068a4, cluster identity 4711 [ 203.076427][ T9843] tipc: Enabled bearer , priority 0 [ 203.229587][ T9839] syzkaller0: entered promiscuous mode [ 203.235589][ T9839] syzkaller0: entered allmulticast mode [ 203.253963][ T9853] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 203.479896][ T9839] tipc: Resetting bearer [ 204.196727][ T7186] tipc: Node number set to 115739424 [ 204.278818][ T9861] netlink: 24 bytes leftover after parsing attributes in process `syz.2.975'. [ 204.613526][ T9875] netlink: 'syz.4.978': attribute type 2 has an invalid length. [ 204.623142][ T9875] netlink: 'syz.4.978': attribute type 5 has an invalid length. [ 205.804043][ T9837] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 205.852614][ T9835] tipc: Resetting bearer [ 205.950759][ T9835] tipc: Disabling bearer [ 206.006102][ T9899] netlink: 'syz.4.985': attribute type 3 has an invalid length. [ 206.127338][ T9903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.986'. [ 206.192899][ T9910] netlink: 'syz.1.988': attribute type 30 has an invalid length. [ 206.235938][ T9904] tipc: Invalid UDP bearer configuration [ 206.235985][ T9904] tipc: Enabling of bearer rejected, failed to enable media [ 206.250683][ T9900] lo speed is unknown, defaulting to 1000 [ 206.439096][ T9919] netlink: 'syz.4.990': attribute type 2 has an invalid length. [ 206.447099][ T9919] netlink: 132 bytes leftover after parsing attributes in process `syz.4.990'. [ 206.469072][ T9919] netlink: 32 bytes leftover after parsing attributes in process `syz.4.990'. [ 206.554144][ T9924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.989'. [ 206.564439][ T9923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.991'. [ 206.583386][ T9921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.989'. [ 206.911166][ T9944] netlink: 20 bytes leftover after parsing attributes in process `syz.3.995'. [ 207.120611][ T9957] block nbd0: not configured, cannot reconfigure [ 207.390073][ T9961] netlink: 'syz.5.999': attribute type 15 has an invalid length. [ 207.546067][ T9975] netlink: 'syz.4.1003': attribute type 32 has an invalid length. [ 207.605500][ T9978] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1004'. [ 207.621030][ T9977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1002'. [ 207.716824][ T9981] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20001 [ 207.819836][ T9986] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1005'. [ 207.910121][ T9989] syzkaller1: entered allmulticast mode [ 208.218791][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1010'. [ 208.278091][T10006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1011'. [ 208.521396][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1010'. [ 208.669981][T10006] 8021q: adding VLAN 0 to HW filter on device bond7 [ 208.759558][T10031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1016'. [ 208.821148][T10031] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1016'. [ 209.017821][T10040] block nbd0: server does not support multiple connections per device. [ 209.033106][T10040] block nbd0: shutting down sockets [ 209.285973][T10036] 8021q: adding VLAN 0 to HW filter on device bond2 [ 209.295232][T10036] bridge0: port 3(bond2) entered blocking state [ 209.321354][T10036] bridge0: port 3(bond2) entered disabled state [ 209.352323][T10036] bond2: entered allmulticast mode [ 209.391197][T10036] bond2: entered promiscuous mode [ 209.407180][T10036] bridge0: port 3(bond2) entered blocking state [ 209.414394][T10036] bridge0: port 3(bond2) entered forwarding state [ 209.646088][ T3373] bridge0: port 3(bond2) entered disabled state [ 209.929838][T10044] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 209.943300][T10044] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 210.003388][T10052] lo speed is unknown, defaulting to 1000 [ 210.102933][T10044] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 210.136557][T10044] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 210.290303][T10044] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 210.321021][T10044] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 210.430485][T10044] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 210.453233][T10044] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 210.553479][T10044] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 210.569624][T10044] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 211.301448][T10044] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 211.332786][T10044] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 211.533782][T10136] netlink: 'syz.3.1041': attribute type 2 has an invalid length. [ 211.562246][T10136] nbd: must specify at least one socket [ 211.590647][T10136] xt_cluster: node mask cannot exceed total number of nodes [ 212.247743][T10153] nbd3: detected capacity change from 0 to 63 [ 212.275589][T10155] block nbd3: NBD_DISCONNECT [ 212.307260][T10155] block nbd3: Disconnected due to user request. [ 212.371194][T10155] block nbd3: shutting down sockets [ 212.418177][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 212.427651][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 212.438710][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 212.447886][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 212.455642][ C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 212.464795][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 212.472571][ C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 212.481692][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 212.490871][ T1717] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 212.500445][ T1717] Buffer I/O error on dev nbd3, logical block 0, async page read [ 212.510655][ T1717] Buffer I/O error on dev nbd3, logical block 1, async page read [ 212.519581][ T1717] Buffer I/O error on dev nbd3, logical block 2, async page read [ 212.527911][ T1717] Buffer I/O error on dev nbd3, logical block 3, async page read [ 212.539495][ T1717] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 212.549112][ T1717] Buffer I/O error on dev nbd3, logical block 0, async page read [ 212.557065][ T1717] Buffer I/O error on dev nbd3, logical block 1, async page read [ 212.565460][ T1717] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 212.581855][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 212.597258][ T25] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 212.608829][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 212.624145][T10153] __nla_validate_parse: 6 callbacks suppressed [ 212.624161][T10153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1044'. [ 212.646520][ T5635] ldm_validate_partition_table(): Disk read failed. [ 212.688702][ T5635] Dev nbd3: unable to read RDB block 0 [ 212.720932][ T5635] nbd3: unable to read partition table [ 212.737240][T10172] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1047'. [ 212.767761][T10174] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1046'. [ 212.809980][ T5635] ldm_validate_partition_table(): Disk read failed. [ 212.859235][ T5635] Dev nbd3: unable to read RDB block 0 [ 212.895980][ T5635] nbd3: unable to read partition table [ 213.347922][T10187] netlink: 'syz.4.1049': attribute type 15 has an invalid length. [ 213.764104][T10213] Bluetooth: MGMT ver 1.23 [ 213.805344][T10216] netlink: 'syz.3.1056': attribute type 15 has an invalid length. [ 213.840697][T10216] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1056'. [ 213.915972][T10204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.939504][T10204] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.999691][T10204] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 214.018580][T10204] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.045464][T10204] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 214.081997][ T3349] bond4: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 214.125982][ T3349] bond4: (slave veth0_to_bond): making interface the new active one [ 214.144754][ T3349] bond4: active interface up! [ 214.191908][T10225] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1057'. [ 214.555970][T10237] 8021q: VLANs not supported on tunl0 [ 214.798216][T10254] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1063'. [ 215.195187][T10265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1066'. [ 215.211940][T10270] lo speed is unknown, defaulting to 1000 [ 215.257426][T10277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1068'. [ 215.280749][T10265] netlink: 'syz.1.1066': attribute type 10 has an invalid length. [ 215.308417][T10278] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1068'. [ 215.327079][T10265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1066'. [ 216.118882][T10276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.747633][T10276] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 216.958892][T10265] geneve3: entered promiscuous mode [ 216.964158][T10265] geneve3: entered allmulticast mode [ 217.017728][ T5814] syz2: Port: 1 Link DOWN [ 217.019202][ T3349] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.060319][ T3349] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.098938][ T3349] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.180938][ T3349] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.544516][T10335] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 217.687187][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888052f3fc00: rx timeout, send abort [ 217.920781][T10363] syz2: rxe_newlink: already configured on ipvlan0 [ 217.943838][T10359] __nla_validate_parse: 87 callbacks suppressed [ 217.943856][T10359] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1083'. [ 217.985229][T10356] syzkaller0: entered promiscuous mode [ 217.991822][T10356] syzkaller0: entered allmulticast mode [ 218.187652][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888051e77000: rx timeout, send abort [ 218.197364][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888052f3fc00: abort rx timeout. Force session deactivation [ 218.314045][T10373] xt_CT: You must specify a L4 protocol and not use inversions on it [ 218.401241][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1086'. [ 218.444298][T10379] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1086'. [ 218.505753][T10376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1085'. [ 218.619508][T10381] netlink: 'syz.5.1087': attribute type 1 has an invalid length. [ 218.634156][T10385] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1088'. [ 218.660863][T10381] netlink: 'syz.5.1087': attribute type 8 has an invalid length. [ 218.695975][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888051e77000: abort rx timeout. Force session deactivation [ 218.911113][T10402] tipc: Enabled bearer , priority 0 [ 218.970080][T10402] syzkaller0: entered promiscuous mode [ 219.016359][T10402] syzkaller0: entered allmulticast mode [ 219.078329][T10402] tipc: Resetting bearer [ 219.200427][T10410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1093'. [ 219.541714][T10430] xt_hashlimit: max too large, truncated to 1048576 [ 219.661140][T10396] tipc: Resetting bearer [ 219.768833][T10396] tipc: Disabling bearer [ 219.970525][T10445] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1101'. [ 219.998873][T10445] tipc: Enabled bearer , priority 10 [ 220.180749][T10451] syzkaller0: entered promiscuous mode [ 220.196317][T10451] syzkaller0: entered allmulticast mode [ 220.218813][T10451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.234293][T10458] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1105'. [ 220.255353][T10458] netlink: 'syz.5.1105': attribute type 4 has an invalid length. [ 220.311529][T10460] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1105'. [ 220.386008][T10462] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1106'. [ 220.990797][T10479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.549821][T10494] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 221.624645][T10494] bond6: (slave lo): Enslaving as an active interface with an up link [ 221.663101][T10494] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 222.043330][T10516] Cannot find del_set index 1 as target [ 222.253771][T10523] x_tables: duplicate underflow at hook 2 [ 223.070997][T10575] 8021q: adding VLAN 0 to HW filter on device bond8 [ 223.124143][T10593] __nla_validate_parse: 5 callbacks suppressed [ 223.124163][T10593] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1131'. [ 223.272458][T10578] 8021q: adding VLAN 0 to HW filter on device bond9 [ 223.341481][T10578] bond8: (slave bond9): Enslaving as an active interface with an up link [ 223.368736][T10580] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 223.403904][T10594] tipc: Enabled bearer , priority 0 [ 223.793269][T10601] veth1_to_hsr: left promiscuous mode [ 223.816868][T10601] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 223.872801][T10606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1133'. [ 223.973543][T10589] syzkaller0: entered promiscuous mode [ 223.987432][T10589] syzkaller0: entered allmulticast mode [ 224.004470][T10589] tipc: Resetting bearer [ 224.129410][T10570] tipc: Resetting bearer [ 224.146911][T10615] bond0: entered promiscuous mode [ 224.157055][T10615] bond_slave_0: entered promiscuous mode [ 224.176781][T10615] bond0: entered allmulticast mode [ 224.183177][T10619] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1137'. [ 224.192198][T10615] bond_slave_0: entered allmulticast mode [ 224.193194][T10615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.225880][T10584] tipc: Resetting bearer [ 224.429043][T10624] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1138'. [ 225.938612][T10584] tipc: Disabling bearer [ 226.055755][T10633] netlink: 'syz.1.1140': attribute type 4 has an invalid length. [ 226.074162][T10633] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1140'. [ 226.100035][T10633] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 226.161876][T10639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1141'. [ 226.220762][T10639] hsr_slave_1 (unregistering): left promiscuous mode [ 226.238696][T10633] syzkaller0: entered promiscuous mode [ 226.244319][T10633] syzkaller0: entered allmulticast mode [ 226.255428][T10642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1144'. [ 226.488929][T10654] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 226.508076][T10654] syzkaller1: linktype set to 825 [ 227.050668][T10691] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 227.060500][T10692] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 227.134082][T10697] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1156'. [ 227.156854][T10698] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1156'. [ 227.182683][T10697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1156'. [ 227.225892][T10701] vlan2: entered promiscuous mode [ 227.236190][T10701] bridge0: entered promiscuous mode [ 227.265944][T10695] netlink: 'syz.1.1154': attribute type 10 has an invalid length. [ 227.321505][T10703] netlink: 'syz.1.1154': attribute type 1 has an invalid length. [ 227.337711][T10703] netlink: 'syz.1.1154': attribute type 2 has an invalid length. [ 231.121698][T10757] __nla_validate_parse: 2 callbacks suppressed [ 231.121716][T10757] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1170'. [ 231.140085][T10757] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1170'. [ 231.665454][T10801] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1181'. [ 232.411098][T10822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1186'. [ 232.656581][T10827] nbd0: detected capacity change from 0 to 3 [ 232.671049][ T5621] block nbd0: Receive control failed (result -32) [ 232.691740][ T25] block nbd0: Dead connection, failed to find a fallback [ 232.699347][ T25] block nbd0: shutting down sockets [ 232.705975][ T25] blk_print_req_error: 61 callbacks suppressed [ 232.705990][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.721630][ T25] buffer_io_error: 138 callbacks suppressed [ 232.721645][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 232.735866][ T5638] Buffer I/O error on dev nbd0, logical block 1, async page read [ 232.754545][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.764111][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 232.772355][ T5638] Buffer I/O error on dev nbd0, logical block 1, async page read [ 232.781647][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.791224][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 232.801187][ T5638] Buffer I/O error on dev nbd0, logical block 1, async page read [ 232.809844][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.819345][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 232.827315][ T5638] Buffer I/O error on dev nbd0, logical block 1, async page read [ 232.835604][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.845187][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 232.854440][ T5638] Buffer I/O error on dev nbd0, logical block 1, async page read [ 232.862330][ T5638] ldm_validate_partition_table(): Disk read failed. [ 232.875943][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.885694][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.895223][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.904657][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.918006][ T5638] Dev nbd0: unable to read RDB block 0 [ 232.927824][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.937883][ T5638] nbd0: unable to read partition table [ 232.948495][ T5638] nbd0: partition table beyond EOD, truncated [ 232.958818][T10836] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1192'. [ 232.976352][T10841] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1191'. [ 232.991984][ T5638] ldm_validate_partition_table(): Disk read failed. [ 232.996314][T10836] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 233.015006][ T5638] Dev nbd0: unable to read RDB block 0 [ 233.031522][ T5638] nbd0: unable to read partition table [ 233.059636][ T5638] nbd0: partition table beyond EOD, truncated [ 233.353531][T10860] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 233.367660][T10859] syzkaller0: entered promiscuous mode [ 233.390569][T10859] syzkaller0: entered allmulticast mode [ 233.444054][T10866] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1200'. [ 233.476857][T10869] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 233.496395][T10866] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1200'. [ 233.846650][T10885] bond0: (slave bond_slave_1): Releasing backup interface [ 233.996987][T10892] netlink: 'syz.5.1207': attribute type 1 has an invalid length. [ 234.016519][T10895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1208'. [ 234.076723][T10899] siw: device registration error -23 [ 234.083319][T10892] 8021q: adding VLAN 0 to HW filter on device bond3 [ 234.114079][T10901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1210'. [ 234.141231][T10899] tipc: Enabling of bearer rejected, failed to enable media [ 234.157335][T10895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.933867][T10938] netlink: 'syz.3.1220': attribute type 30 has an invalid length. [ 234.954352][T10939] x_tables: duplicate underflow at hook 2 [ 234.997198][T10942] Cannot find del_set index 1 as target [ 235.020630][T10942] xt_hashlimit: size too large, truncated to 1048576 [ 235.066978][T10947] xt_hashlimit: size too large, truncated to 1048576 [ 235.113763][T10947] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 235.122844][T10938] bond10: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 235.193910][T10938] bond10 (unregistering): Released all slaves [ 235.682258][T10970] syzkaller1: entered promiscuous mode [ 235.704436][T10970] syzkaller1: entered allmulticast mode [ 236.165297][T10996] __nla_validate_parse: 5 callbacks suppressed [ 236.165316][T10996] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1239'. [ 236.204784][T10996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1239'. [ 236.304076][T11002] netlink: 1120 bytes leftover after parsing attributes in process `syz.3.1241'. [ 236.321575][T11002] syzkaller0: entered promiscuous mode [ 236.327586][T11002] syzkaller0: entered allmulticast mode [ 236.559887][T11018] sctp: [Deprecated]: syz.1.1246 (pid 11018) Use of int in max_burst socket option. [ 236.559887][T11018] Use struct sctp_assoc_value instead [ 236.923974][T11028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1251'. [ 236.950016][T11028] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1251'. [ 236.974829][T11033] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1252'. [ 237.002284][T11033] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1252'. [ 237.141996][T11030] lo speed is unknown, defaulting to 1000 [ 237.357327][T11049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1256'. [ 237.734573][T11068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1259'. [ 238.135544][ T5621] block nbd1: Receive control failed (result -1) [ 238.232372][T11080] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1262'. [ 238.292464][T11080] bond0: entered promiscuous mode [ 238.300152][T11080] bond_slave_0: entered promiscuous mode [ 238.307667][T11080] bond_slave_1: entered promiscuous mode [ 238.473670][T11091] syzkaller0: entered promiscuous mode [ 238.477312][T11095] netlink: 'syz.3.1267': attribute type 1 has an invalid length. [ 238.480636][T11091] syzkaller0: entered allmulticast mode [ 238.533358][T11095] 8021q: adding VLAN 0 to HW filter on device bond10 [ 238.615858][T11095] vlan2: entered allmulticast mode [ 238.624245][T11095] bond10: entered allmulticast mode [ 238.819021][T11100] bond10: (slave geneve3): making interface the new active one [ 238.823124][T11108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.879759][T11100] geneve3: entered allmulticast mode [ 238.962674][T11100] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 239.003785][T11108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.841578][T11143] sctp: [Deprecated]: syz.5.1280 (pid 11143) Use of int in max_burst socket option. [ 239.841578][T11143] Use struct sctp_assoc_value instead [ 240.106599][T11153] syzkaller0: entered promiscuous mode [ 240.129398][T11153] syzkaller0: entered allmulticast mode [ 240.915096][T11200] netlink: 'syz.5.1296': attribute type 13 has an invalid length. [ 240.931838][T11203] netlink: 'syz.5.1296': attribute type 13 has an invalid length. [ 240.973258][T11207] syzkaller0: entered promiscuous mode [ 240.992786][T11207] syzkaller0: entered allmulticast mode [ 241.592881][T11244] __nla_validate_parse: 7 callbacks suppressed [ 241.592898][T11244] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1307'. [ 241.708729][T11239] lo speed is unknown, defaulting to 1000 [ 241.769585][T11249] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1308'. [ 242.220210][T11269] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1312'. [ 242.254973][T11269] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1312'. [ 242.288029][T11268] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1312'. [ 242.305477][T11268] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1312'. [ 242.329818][T11269] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1312'. [ 242.349298][T11269] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1312'. [ 242.497767][ T29] audit: type=1107 audit(1784497892.158:13): pid=11276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 242.563291][T11240] dvmrp0: entered allmulticast mode [ 243.238665][T11308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1323'. [ 243.268277][T11311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1319'. [ 243.701745][T11331] netlink: 'syz.4.1329': attribute type 2 has an invalid length. [ 243.722389][T11331] netlink: 'syz.4.1329': attribute type 2 has an invalid length. [ 243.777207][T11338] IPVS: length: 24 != 16106127384 [ 244.028729][ T29] audit: type=1804 audit(1784497893.698:14): pid=11352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1335" name="/newroot/278/cgroup.controllers" dev="tmpfs" ino=1446 res=1 errno=0 [ 244.051742][ T29] audit: type=1800 audit(1784497893.698:15): pid=11352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1335" name="cgroup.controllers" dev="tmpfs" ino=1446 res=0 errno=0 [ 244.194665][T11356] netlink: 'syz.1.1337': attribute type 2 has an invalid length. [ 244.411615][T11360] pimreg1: renamed from bridge0 (while UP) [ 244.439131][T11360] pimreg1: entered allmulticast mode [ 244.444810][T11360] A link change request failed with some changes committed already. Interface pimreg1 may have been left with an inconsistent configuration, please check. [ 245.656561][T11407] 8021q: adding VLAN 0 to HW filter on device bond4 [ 246.060557][T11420] 8021q: adding VLAN 0 to HW filter on device bond5 [ 246.143893][T11432] xt_l2tp: wrong L2TP version: 0 [ 246.199754][T11436] pim6reg: entered allmulticast mode [ 246.512869][T11458] netlink: 'syz.3.1364': attribute type 2 has an invalid length. [ 246.563697][T11458] : entered promiscuous mode [ 246.701540][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a6c3000: rx timeout, send abort [ 246.729121][T11465] tipc: Enabled bearer , priority 0 [ 246.748494][T11465] veth0_to_team: entered allmulticast mode [ 246.775743][T11467] tipc: Resetting bearer [ 246.838790][T11464] tipc: Disabling bearer [ 246.996003][T11471] __nla_validate_parse: 11 callbacks suppressed [ 246.996020][T11471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1367'. [ 247.028148][T11471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1367'. [ 247.074526][T11473] lo speed is unknown, defaulting to 1000 [ 247.201670][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a6c2400: rx timeout, send abort [ 247.211949][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a6c3000: abort rx timeout. Force session deactivation [ 247.224823][T11479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1368'. [ 247.402496][T11490] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1372'. [ 247.510400][T11490] vlan3: entered promiscuous mode [ 247.512963][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1373'. [ 247.537908][T11490] bond0: entered promiscuous mode [ 247.560561][T11490] bond_slave_0: entered promiscuous mode [ 247.582531][T11490] bond_slave_1: entered promiscuous mode [ 247.600579][T11494] macvlan3: entered allmulticast mode [ 247.616227][T11494] erspan0: entered allmulticast mode [ 247.709967][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a6c2400: abort rx timeout. Force session deactivation [ 247.743336][T11506] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1374'. [ 247.761863][T11501] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1374'. [ 247.762504][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1376'. [ 247.771672][T11506] syzkaller0: entered promiscuous mode [ 247.787634][T11506] syzkaller0: entered allmulticast mode [ 247.971387][T11514] netlink: 'syz.5.1378': attribute type 1 has an invalid length. [ 247.979497][T11514] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1378'. [ 248.046738][T11514] netlink: 'syz.5.1378': attribute type 1 has an invalid length. [ 248.064802][T11514] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1378'. [ 248.216013][T11525] netlink: 'syz.2.1380': attribute type 4 has an invalid length. [ 248.380405][T11531] syzkaller1: entered allmulticast mode [ 249.188339][T11570] netlink: 'syz.2.1392': attribute type 2 has an invalid length. [ 249.474608][T11584] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 249.550569][ T5621] block nbd2: Receive control failed (result -32) [ 249.684129][T11593] syzkaller0: entered promiscuous mode [ 249.696232][T11593] syzkaller0: entered allmulticast mode [ 250.536296][T11612] pimreg1: port 2(bridge_slave_1) entered disabled state [ 250.543860][T11612] pimreg1: port 1(bridge_slave_0) entered disabled state [ 250.776080][T11645] openvswitch: netlink: Missing key (keys=40, expected=100) [ 250.797204][T11612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.811394][T11612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.850251][T11612] veth0_vlan: left promiscuous mode [ 250.906645][T11612] geneve0: left promiscuous mode [ 251.057887][T11651] netlink: 'syz.5.1411': attribute type 10 has an invalid length. [ 251.101642][T10562] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.141399][T10562] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.263910][ T1111] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.288988][ T1111] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.165350][T11695] atomic_op ffff888068972198 conn xmit_atomic 0000000000000000 [ 252.306342][T11700] __nla_validate_parse: 39 callbacks suppressed [ 252.306380][T11700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1421'. [ 252.545509][T11711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1423'. [ 252.600299][T11700] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 252.695498][T11718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1423'. [ 252.742668][T11711] 8021q: adding VLAN 0 to HW filter on device bond7 [ 252.902914][T11723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1425'. [ 252.919206][T11714] 8021q: adding VLAN 0 to HW filter on device bond8 [ 252.938309][T11714] bond7: (slave bond8): Enslaving as an active interface with an up link [ 252.967418][T11728] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1425'. [ 254.790500][T11773] netlink: 'syz.3.1431': attribute type 7 has an invalid length. [ 255.576679][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.583179][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.152937][T11718] bond7 (unregistering): (slave bond8): Releasing backup interface [ 256.163810][T11718] bond7 (unregistering): Released all slaves [ 256.348828][T11789] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1435'. [ 256.500597][T11794] bridge4: entered allmulticast mode [ 256.524414][T11803] bridge5: entered allmulticast mode [ 256.532162][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1441'. [ 256.533226][T11800] IPVS: persistence engine module ip_vs_pe_ not found [ 256.542700][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1441'. [ 256.756387][T11816] netlink: 'syz.5.1445': attribute type 3 has an invalid length. [ 256.840300][T11824] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1445'. [ 256.989118][T11827] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.894935][T11872] syzkaller0: entered promiscuous mode [ 257.909493][T11872] syzkaller0: entered allmulticast mode [ 258.143243][T11890] netlink: 207236 bytes leftover after parsing attributes in process `syz.2.1464'. [ 260.057220][T11908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1467'. [ 260.076447][T11908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1467'. [ 260.213644][T11919] netlink: 'syz.3.1471': attribute type 1 has an invalid length. [ 260.244101][T11919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.417040][T11920] netlink: 'syz.4.1472': attribute type 2 has an invalid length. [ 260.457878][T11920] netlink: 'syz.4.1472': attribute type 2 has an invalid length. [ 260.468650][T11942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1472'. [ 260.674212][T11947] syzkaller0: entered promiscuous mode [ 260.689884][T11947] syzkaller0: entered allmulticast mode [ 260.704664][T11949] syzkaller0: entered promiscuous mode [ 260.711160][T11949] syzkaller0: entered allmulticast mode [ 260.925769][T11963] batman_adv: batadv0: Adding interface: vlan2 [ 260.938601][T11963] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.982527][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.000412][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.015984][T11963] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 261.142423][T11971] netlink: 336 bytes leftover after parsing attributes in process `syz.1.1485'. [ 261.162730][T11971] netlink: 336 bytes leftover after parsing attributes in process `syz.1.1485'. [ 261.415559][T11976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1486'. [ 261.524647][T11968] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1484'. [ 261.658242][T11984] xt_TCPMSS: Only works on TCP SYN packets [ 261.690023][T11984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1489'. [ 261.721166][T11986] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1488'. [ 261.813799][T11992] xt_policy: neither incoming nor outgoing policy selected [ 262.631326][T12040] netlink: 'syz.1.1504': attribute type 1 has an invalid length. [ 262.995707][T12053] ip6gre1: entered promiscuous mode [ 263.015485][T12053] ip6gre1: entered allmulticast mode [ 263.182574][T12065] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.231654][ T1111] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.249325][T12066] netlink: 'syz.3.1513': attribute type 1 has an invalid length. [ 263.249425][T12067] netlink: 'syz.3.1513': attribute type 1 has an invalid length. [ 263.379136][T12073] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 263.413360][T12076] netlink: 'syz.5.1515': attribute type 4 has an invalid length. [ 263.426626][T12076] __nla_validate_parse: 2 callbacks suppressed [ 263.426642][T12076] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1515'. [ 263.436766][T12066] 8021q: adding VLAN 0 to HW filter on device bond11 [ 263.711341][T12090] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.280395][T12124] lo speed is unknown, defaulting to 1000 [ 264.549036][T12130] syzkaller1: entered promiscuous mode [ 264.574716][T12130] syzkaller1: entered allmulticast mode [ 264.981083][ T5283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 265.264860][T12159] syzkaller0: entered promiscuous mode [ 265.284960][T12159] syzkaller0: entered allmulticast mode [ 267.471443][T12198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1543'. [ 267.507022][T12198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1543'. [ 267.569867][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.607369][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.619118][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.631789][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.882981][T12218] bond0: (slave ip6tnl0): refused to change device type [ 267.975540][T12218] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1550'. [ 268.157221][T12214] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.266717][T12226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1553'. [ 268.461841][T12214] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.723920][T12214] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.736612][T12243] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1558'. [ 268.767935][T12245] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1557'. [ 268.782528][T12247] netlink: 'syz.4.1559': attribute type 1 has an invalid length. [ 268.822304][T12247] bond6: entered promiscuous mode [ 268.828810][T12247] 8021q: adding VLAN 0 to HW filter on device bond6 [ 268.954133][T12214] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.965042][T12256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1560'. [ 269.068972][T12263] macvtap1: entered allmulticast mode [ 269.122027][T12259] macvtap2: entered allmulticast mode [ 269.157105][T12256] bond7: (slave vti0): refused to change device type [ 269.180144][T12267] tc_dump_action: action bad kind [ 269.451981][T10562] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.485395][T12281] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1567'. [ 269.515506][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.526502][T12286] netlink: 'syz.1.1569': attribute type 6 has an invalid length. [ 269.542628][T12291] tipc: Enabled bearer , priority 0 [ 269.682538][T12291] syzkaller0: entered promiscuous mode [ 269.688386][T12291] syzkaller0: entered allmulticast mode [ 269.695323][T12291] tipc: Resetting bearer [ 269.702064][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.710928][T12297] bridge_slave_0: entered promiscuous mode [ 269.746044][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.860050][T12305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1571'. [ 269.890986][T12305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1571'. [ 269.935352][T12307] tun0: tun_chr_ioctl cmd 1074025681 [ 269.950716][T12307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.159662][T12316] lo speed is unknown, defaulting to 1000 [ 270.248029][T12282] tipc: Resetting bearer [ 270.299046][T12322] x_tables: duplicate underflow at hook 2 [ 270.356953][T12324] netlink: 'syz.2.1578': attribute type 2 has an invalid length. [ 270.418798][T12326] netlink: 'syz.1.1576': attribute type 1 has an invalid length. [ 270.442266][T12326] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1576'. [ 270.465411][T12326] netlink: 'syz.1.1576': attribute type 1 has an invalid length. [ 270.477822][T12328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1579'. [ 270.488492][T12326] netlink: 29 bytes leftover after parsing attributes in process `syz.1.1576'. [ 270.551087][T12332] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1580'. [ 272.880807][T12282] tipc: Disabling bearer [ 272.889462][ T9] tipc: Node number set to 3552338749 [ 272.899599][T12357] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 272.920214][T12357] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 272.936958][T12357] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 273.131190][T12377] bridge_slave_1: left promiscuous mode [ 273.173656][T12377] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.214689][T12377] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.637638][T12389] syzkaller0: entered promiscuous mode [ 273.653045][T12389] syzkaller0: entered allmulticast mode [ 274.088977][T12408] __nla_validate_parse: 2 callbacks suppressed [ 274.088994][T12408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1593'. [ 274.181642][T12415] netlink: 'syz.1.1596': attribute type 40 has an invalid length. [ 274.219157][T12415] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1596'. [ 274.574352][T12437] netlink: 'syz.2.1600': attribute type 1 has an invalid length. [ 276.454545][T12436] kthread_run failed with err -4 [ 276.460534][T12437] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 276.508950][T12451] lo speed is unknown, defaulting to 1000 [ 276.676076][T12464] netlink: 'syz.3.1606': attribute type 8 has an invalid length. [ 276.684977][T12464] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1606'. [ 276.757853][T12469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1607'. [ 276.794294][T12469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1607'. [ 276.840509][T12466] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1606'. [ 277.064779][T12481] netlink: 'syz.2.1609': attribute type 111 has an invalid length. [ 277.127032][T12484] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1610'. [ 277.202903][T12491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1612'. [ 277.220546][T12491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1612'. [ 277.360536][T12495] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1614'. [ 277.396092][T12497] netlink: 'syz.2.1615': attribute type 1 has an invalid length. [ 277.523989][T12502] netlink: 'syz.3.1617': attribute type 1 has an invalid length. [ 277.603460][T12502] 8021q: adding VLAN 0 to HW filter on device bond12 [ 277.692615][T12505] bond12: (slave veth5): Enslaving as an active interface with a down link [ 277.757552][T12502] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 277.776635][T12502] bond12: (slave batadv1): making interface the new active one [ 277.800759][T12502] batadv1: entered promiscuous mode [ 277.818971][T12502] bond12: (slave batadv1): Enslaving as an active interface with an up link [ 277.905552][T12505] bond12 (unregistering): (slave veth5): Releasing active interface [ 277.924343][T12505] bond12 (unregistering): (slave batadv1): Releasing active interface [ 277.939887][T12505] bond12 (unregistering): Released all slaves [ 277.998797][T12508] erspan0: entered promiscuous mode [ 278.027510][T12518] No such timeout policy "syz1" [ 278.034932][T12518] netlink: zone id is out of range [ 278.042390][T12508] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.051652][T12518] netlink: zone id is out of range [ 278.068768][T12518] netlink: zone id is out of range [ 278.098125][T12508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.128461][T12518] netlink: zone id is out of range [ 278.141887][T12518] netlink: zone id is out of range [ 278.144529][T12528] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20001 [ 278.160923][T12518] netlink: zone id is out of range [ 278.174599][T12518] netlink: zone id is out of range [ 278.180905][T12518] netlink: zone id is out of range [ 278.186110][T12518] netlink: zone id is out of range [ 278.198437][T12518] netlink: zone id is out of range [ 278.274645][T12530] netlink: 'syz.3.1623': attribute type 21 has an invalid length. [ 278.309828][T12514] lo speed is unknown, defaulting to 1000 [ 278.309901][T12530] netlink: 'syz.3.1623': attribute type 5 has an invalid length. [ 278.498485][T12537] netlink: 'syz.3.1625': attribute type 3 has an invalid length. [ 278.569798][ T7782] IPVS: starting estimator thread 0... [ 278.689217][T12544] IPVS: using max 34 ests per chain, 81600 per kthread [ 278.819367][T12554] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 279.367250][T12575] __nla_validate_parse: 4 callbacks suppressed [ 279.367268][T12575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1635'. [ 279.395300][T12575] hsr_slave_1 (unregistering): left promiscuous mode [ 279.416954][T12577] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1636'. [ 279.433328][T12577] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1636'. [ 279.468551][T12578] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1636'. [ 279.514034][T12580] fb: renamed from bridge0 (while UP) [ 279.615301][T12585] xt_CT: You must specify a L4 protocol and not use inversions on it [ 280.412713][T12615] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1643'. [ 280.425084][T12619] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1644'. [ 280.445406][T12615] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1643'. [ 280.486634][T12615] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1643'. [ 280.507444][T12615] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1643'. [ 280.545497][T12615] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1643'. [ 280.584072][T12621] sctp: [Deprecated]: syz.1.1645 (pid 12621) Use of int in max_burst socket option deprecated. [ 280.584072][T12621] Use struct sctp_assoc_value instead [ 281.151631][T12632] siw: device registration error -23 [ 282.833668][T12599] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 283.194048][T12665] sctp: [Deprecated]: syz.1.1656 (pid 12665) Use of int in max_burst socket option deprecated. [ 283.194048][T12665] Use struct sctp_assoc_value instead [ 283.210404][T12664] sctp: [Deprecated]: syz.1.1656 (pid 12664) Use of int in max_burst socket option deprecated. [ 283.210404][T12664] Use struct sctp_assoc_value instead [ 283.384768][T12679] syzkaller1: entered promiscuous mode [ 283.392236][T12679] syzkaller1: entered allmulticast mode [ 285.365345][T12694] __nla_validate_parse: 147 callbacks suppressed [ 285.365364][T12694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1664'. [ 286.008029][T12651] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 286.158673][T12701] x_tables: ip_tables: osf match: only valid for protocol 6 [ 286.180241][T12702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1665'. [ 286.249094][ T5834] IPVS: starting estimator thread 0... [ 286.261906][T12702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1665'. [ 286.262617][T12707] netlink: 'syz.2.1667': attribute type 21 has an invalid length. [ 286.331547][T12707] IPv6: NLM_F_CREATE should be specified when creating new route [ 286.355862][T12707] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 286.363171][T12707] IPv6: NLM_F_CREATE should be set when creating new route [ 286.370528][T12707] IPv6: NLM_F_CREATE should be set when creating new route [ 286.377816][T12707] IPv6: NLM_F_CREATE should be set when creating new route [ 286.416310][T12705] IPVS: using max 29 ests per chain, 69600 per kthread [ 286.481751][T12719] netlink: 'syz.1.1672': attribute type 1 has an invalid length. [ 286.600431][T12723] block nbd4: not configured, cannot reconfigure [ 286.672530][T12719] veth9: entered allmulticast mode [ 286.697254][T12725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1672'. [ 286.714006][T12719] bond3: (slave veth9): Enslaving as an active interface with a down link [ 286.774490][T12724] bond3: (slave veth0_to_bond): making interface the new active one [ 286.788083][T12724] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 286.820578][T12725] bond3: entered allmulticast mode [ 286.844766][T12725] veth0_to_bond: entered allmulticast mode [ 286.900723][T12719] macvlan3: entered promiscuous mode [ 286.906064][T12719] macvlan3: entered allmulticast mode [ 286.915498][T12719] bond3: entered promiscuous mode [ 286.923974][T12719] veth0_to_bond: entered promiscuous mode [ 286.934178][T12719] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 286.942956][T12719] bond3: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 286.963695][T12719] bond3: left promiscuous mode [ 286.971876][T12719] veth0_to_bond: left promiscuous mode [ 287.502674][T12747] syzkaller0: entered promiscuous mode [ 287.519644][T12747] syzkaller0: entered allmulticast mode [ 287.707321][ T29] audit: type=1800 audit(1784497937.368:16): pid=12731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1673" name="memory.events" dev="tmpfs" ino=1064 res=0 errno=0 [ 287.895492][T12777] netlink: 'syz.2.1681': attribute type 4 has an invalid length. [ 287.904164][T12777] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1681'. [ 289.523512][T12777] net_ratelimit: 13 callbacks suppressed [ 289.523530][T12777] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 289.802396][T12802] netlink: 'syz.3.1691': attribute type 15 has an invalid length. [ 289.848356][T12803] IPv6: sit1: Disabled Multicast RS [ 290.091904][T12822] IPVS: set_ctl: invalid protocol: 2612 111.99.101.115:29541 [ 290.108428][T12823] netlink: 'syz.3.1697': attribute type 1 has an invalid length. [ 290.131862][T12825] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 290.133050][T12823] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1697'. [ 290.148373][T12823] netlink: 'syz.3.1697': attribute type 2 has an invalid length. [ 290.158331][T12823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1697'. [ 290.168723][T12829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1701'. [ 290.190178][T12828] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1701'. [ 290.211796][T12829] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1701'. [ 290.588969][T12849] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1708'. [ 290.684668][T12849] bond0 (unregistering): Released all slaves [ 290.689512][T12855] netlink: 'syz.1.1710': attribute type 1 has an invalid length. [ 290.745158][T12859] netlink: 'syz.5.1711': attribute type 30 has an invalid length. [ 290.798816][T12862] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1711'. [ 290.815065][T12862] netlink: 'syz.5.1711': attribute type 10 has an invalid length. [ 290.830203][T12864] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1710'. [ 290.859764][T12862] netlink: 'syz.5.1711': attribute type 8 has an invalid length. [ 290.931181][T12865] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1711'. [ 290.939290][T12864] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1710'. [ 290.966358][T12862] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1711'. [ 291.050971][T12859] bond6: option arp_missed_max: invalid value (0) [ 291.057807][T12859] bond6: option arp_missed_max: allowed values 1 - 255 [ 291.068863][T12859] bond6 (unregistering): Released all slaves [ 291.147604][T12860] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 291.165464][T12860] bond5 (unregistering): Released all slaves [ 291.212455][T12857] lo speed is unknown, defaulting to 1000 [ 291.249534][T12862] geneve2: entered promiscuous mode [ 291.271476][T12862] geneve2: entered allmulticast mode [ 291.309597][T12855] bridge1: entered promiscuous mode [ 291.347142][T12855] bond4: (slave bridge1): making interface the new active one [ 291.379648][T12855] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 291.461933][T12877] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1713'. [ 291.578096][T12877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.630952][T12877] bond_slave_0: left promiscuous mode [ 291.654826][T12877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.698438][T12877] bond_slave_1: left promiscuous mode [ 291.715183][T12877] bond0 (unregistering): Released all slaves [ 291.758761][T12882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1715'. [ 291.817745][T12886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1716'. [ 291.889847][T12886] vlan3: entered promiscuous mode [ 291.899404][T12886] bridge0: entered promiscuous mode [ 291.978680][T12886] erspan0: left allmulticast mode [ 292.198744][T12886] veth0_to_team: left allmulticast mode [ 292.230832][T12886] tipc: Resetting bearer [ 292.250911][T12886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.268344][T12886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.371131][T12886] batman_adv: batadv0: Interface deactivated: macvlan2 [ 292.379385][T12886] batadv_slave_1: left allmulticast mode [ 292.385213][T12886] macvlan2: left allmulticast mode [ 292.401095][T12886] geneve3: left promiscuous mode [ 292.406093][T12886] geneve3: left allmulticast mode [ 292.417307][T12886] bond3: left allmulticast mode [ 292.422258][T12886] veth0_to_bond: left allmulticast mode [ 292.428350][T12886] veth9: left allmulticast mode [ 292.434669][T12886] bridge1: left promiscuous mode [ 292.445162][T12886] vlan3: left promiscuous mode [ 292.450441][T12886] bridge0: left promiscuous mode [ 292.479780][T10562] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.501602][T10562] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.565571][T10562] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.765516][T12906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.801006][T12910] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1721'. [ 292.886695][ T5814] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 292.926383][ T5621] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 293.071447][ T5621] block nbd3: Wrong magic (0x3e000000) [ 293.146677][ T5814] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 294.539174][T12956] xt_hashlimit: max too large, truncated to 1048576 [ 294.569630][T12956] No such timeout policy "syz1" [ 294.997462][T12983] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 295.009785][T12984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.033131][T12979] lo speed is unknown, defaulting to 1000 [ 295.221835][ T29] audit: type=1804 audit(1784497944.888:17): pid=12996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1748" name="/newroot/353/cgroup.controllers" dev="tmpfs" ino=1840 res=1 errno=0 [ 295.263726][ T29] audit: type=1800 audit(1784497944.888:18): pid=12996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1748" name="cgroup.controllers" dev="tmpfs" ino=1840 res=0 errno=0 [ 295.656704][T13011] __nla_validate_parse: 10 callbacks suppressed [ 295.656723][T13011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1751'. [ 295.849371][T13014] bridge_slave_1: left allmulticast mode [ 295.858418][T13014] bridge_slave_1: left promiscuous mode [ 295.864243][T13016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1754'. [ 295.864345][T13014] pimreg1: port 2(bridge_slave_1) entered disabled state [ 295.889067][T13014] bridge_slave_0: left allmulticast mode [ 295.896772][T13014] bridge_slave_0: left promiscuous mode [ 295.902672][T13014] pimreg1: port 1(bridge_slave_0) entered disabled state [ 296.146967][T13026] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1756'. [ 296.157538][T13024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1757'. [ 296.197534][T13022] syz_tun: entered promiscuous mode [ 296.285417][T13031] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1759'. [ 296.921912][T13036] bridge3: entered promiscuous mode [ 296.927836][T13036] bridge3: entered allmulticast mode [ 296.947001][T13021] syz_tun: left promiscuous mode [ 297.049318][T13040] netlink: 'syz.1.1761': attribute type 58 has an invalid length. [ 297.235292][T13046] netlink: 'syz.1.1764': attribute type 11 has an invalid length. [ 297.359964][T13046] erspan0: left promiscuous mode [ 297.389214][T13065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1767'. [ 297.402907][T13065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1767'. [ 297.443440][T13046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.451881][T13046] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.470035][T13066] netlink: 'syz.2.1767': attribute type 3 has an invalid length. [ 297.470366][T13046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.514682][T13071] nftables ruleset with unbound chain [ 297.535727][T13046] tipc: Resetting bearer [ 297.550578][T13046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.576105][T13046] batadv_slave_1: left promiscuous mode [ 297.583679][T13046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.598622][T13046] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 297.619245][T13046] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 297.648904][T13046] veth1_vlan: left promiscuous mode [ 297.663063][T13046] veth0_vlan: left promiscuous mode [ 297.671997][T13046] veth0_vlan: entered promiscuous mode [ 297.680097][T13046] veth1_vlan: entered promiscuous mode [ 297.693149][T13046] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 297.701237][T13046] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 297.709448][T13046] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 297.732392][T13046] batadv_slave_1: entered promiscuous mode [ 297.738892][T13046] batman_adv: batadv0: Interface activated: macvlan2 [ 297.747274][T13046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 297.754686][T13046] erspan0: entered promiscuous mode [ 297.767662][T13046] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 297.781956][T13046] 8021q: adding VLAN 0 to HW filter on device bond2 [ 297.799573][T13046] batman_adv: batadv0: Interface activated: vlan2 [ 297.808325][T13046] 8021q: adding VLAN 0 to HW filter on device bond3 [ 297.824796][T13046] 8021q: adding VLAN 0 to HW filter on device bond4 [ 297.878494][T13085] netlink: 'syz.5.1772': attribute type 1 has an invalid length. [ 297.941070][T13086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1772'. [ 297.970447][T13086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1772'. [ 298.071987][ T152] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.081983][ T152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.091085][ T152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.175378][T13085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.271178][ T152] bond3: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 298.310849][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 298.352695][ T5814] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 298.366586][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 298.416719][ T5834] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 298.460825][T13110] lo speed is unknown, defaulting to 1000 [ 298.829212][T13126] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1784'. [ 298.980122][T13128] netlink: 'syz.1.1785': attribute type 1 has an invalid length. [ 299.298164][T13149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.328618][ T5834] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 300.467984][T13200] xt_TCPMSS: Only works on TCP SYN packets [ 301.065378][ T5638] udevd[5638]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 301.149759][T13222] __nla_validate_parse: 10 callbacks suppressed [ 301.149777][T13222] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1807'. [ 301.188870][T13222] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1807'. [ 301.220931][T13222] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.270797][T13226] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1809'. [ 301.909666][T13254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1818'. [ 301.915427][T13255] syzkaller0: entered promiscuous mode [ 301.924235][T13255] syzkaller0: entered allmulticast mode [ 301.960274][T13254] bond11: entered promiscuous mode [ 301.965411][T13254] bond11: entered allmulticast mode [ 301.972659][T13255] netlink: 'syz.3.1817': attribute type 3 has an invalid length. [ 301.982847][T13255] netlink: 'syz.3.1817': attribute type 15 has an invalid length. [ 302.008001][T13254] tipc: Enabled bearer , priority 0 [ 302.107091][T13254] syzkaller0: entered promiscuous mode [ 302.122358][T13254] syzkaller0: entered allmulticast mode [ 302.133265][T13254] tipc: Resetting bearer [ 302.169174][T13252] tipc: Resetting bearer [ 302.356716][T13268] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1821'. [ 302.772370][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 303.998452][T13252] tipc: Disabling bearer [ 304.007865][T13268] bond0: ARP target 0.0.0.2 is already present [ 304.014189][T13268] bond0: option arp_ip_target: invalid value (33554432) [ 304.021611][ T5834] tipc: Node number set to 681602505 [ 304.092798][T13274] xt_CT: You must specify a L4 protocol and not use inversions on it [ 304.185649][T13280] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1825'. [ 304.216782][T13280] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1825'. [ 304.245299][T13282] x_tables: duplicate underflow at hook 1 [ 304.279742][T13286] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1827'. [ 304.352855][T13298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1828'. [ 304.563046][T13311] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1829'. [ 304.587625][T13306] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 304.828957][T13324] gre2: entered promiscuous mode [ 304.847382][T13324] gre2: entered allmulticast mode [ 305.543970][T13353] x_tables: duplicate underflow at hook 3 [ 306.326933][T13387] __nla_validate_parse: 9 callbacks suppressed [ 306.326950][T13387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1855'. [ 306.376587][T13387] lo speed is unknown, defaulting to 1000 [ 306.402258][T13391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1855'. [ 306.863709][T13391] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1855'. [ 306.897440][T13407] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 306.941658][T13407] team0: Port device batadv2 added [ 307.013108][T13410] tipc: Enabled bearer , priority 0 [ 307.239222][T13412] netlink: 65051 bytes leftover after parsing attributes in process `syz.5.1863'. [ 307.279214][T13409] tipc: Disabling bearer [ 307.457497][T13420] IPv6: NLM_F_CREATE should be specified when creating new route [ 307.699821][T13427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1865'. [ 307.843622][T13431] batman_adv: batadv0: Adding interface: dummy0 [ 307.850189][T13431] batman_adv: batadv0: The MTU of interface dummy0 is too small (5376) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 5408 would solve the problem. [ 307.876692][T13431] batman_adv: batadv0: Interface activated: dummy0 [ 308.226642][T13440] bridge0: port 4(syz_tun) entered blocking state [ 308.256402][T13440] bridge0: port 4(syz_tun) entered disabled state [ 308.276977][T13440] syz_tun: entered allmulticast mode [ 308.328849][T13440] syz_tun: entered promiscuous mode [ 308.359118][T13440] bridge0: port 4(syz_tun) entered blocking state [ 308.367150][T13440] bridge0: port 4(syz_tun) entered forwarding state [ 308.383693][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 308.416536][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 308.425856][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 308.468592][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 308.476614][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 308.687421][T13463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1872'. [ 308.709689][T13463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1872'. [ 308.860364][T13463] tipc: Enabled bearer , priority 0 [ 308.940866][T13480] batadv_slave_0: entered promiscuous mode [ 308.982288][T13485] sctp: [Deprecated]: syz.2.1875 (pid 13485) Use of struct sctp_assoc_value in delayed_ack socket option. [ 308.982288][T13485] Use struct sctp_sack_info instead [ 309.011095][T13481] batadv_slave_0: left promiscuous mode [ 309.065098][T13488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1877'. [ 309.102314][T13455] lo speed is unknown, defaulting to 1000 [ 309.345574][T13501] syzkaller0: entered promiscuous mode [ 309.366702][T13501] syzkaller0: entered allmulticast mode [ 309.483191][T13460] tipc: Disabling bearer [ 309.607446][ T7782] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 309.903862][T13515] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1882'. [ 310.045069][T13528] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1885'. [ 310.084147][T13531] bond0: (slave ip6tnl0): refused to change device type [ 310.106676][ T7782] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 310.115152][T13532] bond0: (slave ip6tnl0): refused to change device type [ 310.526630][ T50] Bluetooth: hci6: command tx timeout [ 310.606575][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 311.038460][T13573] veth7: entered allmulticast mode [ 311.053787][T13573] bond6: (slave veth7): Enslaving as an active interface with an up link [ 311.064341][T13582] netlink: 'syz.2.1895': attribute type 4 has an invalid length. [ 311.080059][T13575] netlink: 'syz.2.1895': attribute type 4 has an invalid length. [ 311.194847][T13567] bond6 (unregistering): (slave veth7): Releasing backup interface [ 311.209173][T13567] bond6 (unregistering): Released all slaves [ 311.248062][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 311.265509][T13593] netlink: 'syz.2.1899': attribute type 6 has an invalid length. [ 311.273788][T13593] netlink: 'syz.2.1899': attribute type 6 has an invalid length. [ 311.281731][T13589] gretap0: entered promiscuous mode [ 311.358813][T13596] netlink: 'syz.1.1900': attribute type 4 has an invalid length. [ 311.407512][T13455] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.437459][T13455] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.457445][T13455] bridge_slave_0: entered allmulticast mode [ 311.486872][T13455] bridge_slave_0: entered promiscuous mode [ 311.533303][T13455] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.551760][T13455] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.580599][T13455] bridge_slave_1: entered allmulticast mode [ 311.600317][T13455] bridge_slave_1: entered promiscuous mode [ 311.879214][T13455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.967890][T13455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.048617][T13624] __nla_validate_parse: 10 callbacks suppressed [ 312.048635][T13624] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1906'. [ 312.140183][T13624] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 312.188750][T13455] team0: Port device team_slave_0 added [ 312.228364][T13629] netlink: 'syz.2.1907': attribute type 11 has an invalid length. [ 312.257557][T13629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1907'. [ 312.262355][T13455] team0: Port device team_slave_1 added [ 312.291398][T13639] netlink: 'syz.2.1907': attribute type 11 has an invalid length. [ 312.318250][T13631] syzkaller1: entered promiscuous mode [ 312.323929][T13639] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1907'. [ 312.333768][T13631] syzkaller1: entered allmulticast mode [ 312.410174][T13643] netlink: 'syz.1.1910': attribute type 1 has an invalid length. [ 312.512305][T13643] bond6: entered promiscuous mode [ 312.523209][T13643] 8021q: adding VLAN 0 to HW filter on device bond6 [ 312.537724][T13455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.548099][T13455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.575872][T13455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.589680][T13455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.599696][T13455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.626391][ T50] Bluetooth: hci6: command tx timeout [ 312.628418][T13455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.634674][T13649] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1910'. [ 312.687665][T13643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1910'. [ 312.887236][T13455] hsr_slave_0: entered promiscuous mode [ 312.909579][T13455] hsr_slave_1: entered promiscuous mode [ 313.375828][T13455] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 313.386747][T13455] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 313.396544][T13455] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 313.406814][T13455] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 313.415586][T13455] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 313.428196][T13455] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 313.437767][T13455] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 313.449807][T13455] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 313.550947][T13455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.577849][T13455] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.594441][T10556] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.603550][T10556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.622885][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.630082][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.102327][T13455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.381294][T13455] veth0_vlan: entered promiscuous mode [ 314.396057][T13455] veth1_vlan: entered promiscuous mode [ 314.439115][T13455] veth0_macvtap: entered promiscuous mode [ 314.455225][T13455] veth1_macvtap: entered promiscuous mode [ 314.479892][T13455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.495200][T13455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.513897][ T57] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.523181][ T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.535780][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.548445][T10556] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.674804][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.685847][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.701946][ T50] Bluetooth: hci6: command tx timeout [ 314.728493][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.737561][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.777396][ T50] Bluetooth: hci6: command tx timeout [ 317.011265][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.017741][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.832198][T13689] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 327.246434][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 329.167692][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 354.988353][T13696] netlink: 'syz.2.1917': attribute type 1 has an invalid length. [ 354.998047][T13696] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1917'. [ 355.066542][T13707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1918'. [ 355.087970][T13707] 8021q: VLANs not supported on vxcan0 [ 355.099037][T13712] bridge0: port 1(macvlan0) entered blocking state [ 355.116866][T13712] bridge0: port 1(macvlan0) entered disabled state [ 355.124442][T13712] macvlan0: entered allmulticast mode [ 355.131421][T13712] veth1_vlan: entered allmulticast mode [ 355.143661][T13712] macvlan0: entered promiscuous mode [ 355.158721][T13713] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1916'. [ 355.163130][T13712] bridge0: port 1(macvlan0) entered blocking state [ 355.177073][T13712] bridge0: port 1(macvlan0) entered forwarding state [ 355.459148][T13723] netlink: 'syz.6.1922': attribute type 1 has an invalid length. [ 355.560069][T13723] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1922'. [ 355.614199][T13729] netlink: 'syz.6.1922': attribute type 1 has an invalid length. [ 355.639013][T13729] netlink: 'syz.6.1922': attribute type 2 has an invalid length. [ 355.768514][T13731] bond6: Removing last arp target with arp_interval on [ 355.901270][T13738] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 355.929962][T13740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1927'. [ 356.016769][T13741] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1928'. [ 356.146169][T13748] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 356.219047][T13755] netlink: 'syz.2.1931': attribute type 21 has an invalid length. [ 356.247711][T13755] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1931'. [ 356.280067][T13755] netlink: 'syz.2.1931': attribute type 4 has an invalid length. [ 356.292165][T13755] netlink: 'syz.2.1931': attribute type 5 has an invalid length. [ 356.326906][T13755] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1931'. [ 356.545539][T13761] syzkaller0: entered promiscuous mode [ 356.569620][T13761] syzkaller0: entered allmulticast mode [ 356.611951][T13768] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1934'. [ 356.869494][T13780] geneve4: entered promiscuous mode [ 356.887253][T10556] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.910357][T10556] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.935393][T13778] xt_hashlimit: size too large, truncated to 1048576 [ 356.954784][T10556] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.964003][T13780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1937'. [ 356.993460][T10556] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.244280][T13794] veth0: entered promiscuous mode [ 357.697646][T13804] netlink: 'syz.3.1947': attribute type 12 has an invalid length. [ 357.755408][T13805] tipc: Started in network mode [ 357.772729][T13805] tipc: Node identity , cluster identity 4711 [ 357.787951][T13805] tipc: Failed to obtain node identity [ 357.799870][T13805] tipc: Enabling of bearer rejected, failed to enable media [ 358.733287][T13828] lo speed is unknown, defaulting to 1000 [ 359.697138][T13871] netlink: 'syz.6.1962': attribute type 5 has an invalid length. [ 359.776037][T13867] vlan4: entered allmulticast mode [ 359.806049][T13867] bond0: entered allmulticast mode [ 359.839630][T13867] bond_slave_0: entered allmulticast mode [ 359.939478][T13871] ip6erspan0: entered allmulticast mode [ 360.819978][T13895] openvswitch: netlink: Duplicate or invalid key (type 0). [ 360.869067][T13895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.337328][T13908] vlan0: entered promiscuous mode [ 361.414676][T13910] netlink: 'syz.1.1975': attribute type 6 has an invalid length. [ 361.740276][T13917] netlink: 'syz.1.1977': attribute type 32 has an invalid length. [ 362.009081][T13918] ±ÿ: renamed from lo [ 362.447333][ T5814] hid-generic 0005:0C45:0007.0001: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 362.878383][T13936] __nla_validate_parse: 4 callbacks suppressed [ 362.878428][T13936] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1981'. [ 363.332840][T13957] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1985'. [ 363.512057][T13957] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1985'. [ 363.531590][T13957] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1985'. [ 363.619465][T13957] netlink: 8864 bytes leftover after parsing attributes in process `syz.6.1985'. [ 364.395620][T13994] x_tables: duplicate underflow at hook 3 [ 364.473372][T14000] netlink: 'syz.1.1997': attribute type 11 has an invalid length. [ 364.580658][T14002] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1999'. [ 364.596556][T14000] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1997'. [ 364.678960][T13997] netlink: 'syz.5.1998': attribute type 1 has an invalid length. [ 364.715995][T13997] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1998'. [ 364.780998][T14012] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1999'. [ 365.014701][T14020] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2001'. [ 365.362876][T14027] netlink: 'syz.1.2004': attribute type 1 has an invalid length. [ 365.372315][T14024] tipc: Enabled bearer , priority 0 [ 365.383739][T14027] netlink: 'syz.1.2004': attribute type 6 has an invalid length. [ 365.399027][T14024] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 365.407809][T14027] netlink: 'syz.1.2004': attribute type 3 has an invalid length. [ 365.569601][T14023] tipc: Disabling bearer [ 365.647210][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 365.723152][T14036] netlink: 'syz.6.2005': attribute type 13 has an invalid length. [ 365.804041][T14037] netlink: 'syz.6.2005': attribute type 12 has an invalid length. [ 365.823349][T14037] netlink: 'syz.6.2005': attribute type 29 has an invalid length. [ 366.426681][T14061] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 367.003915][T14083] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 368.094446][T14124] __nla_validate_parse: 10 callbacks suppressed [ 368.094461][T14124] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2027'. [ 368.206403][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 368.569010][T14100] syzkaller1: entered promiscuous mode [ 368.579205][T14100] syzkaller1: entered allmulticast mode [ 369.203514][T14157] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 369.334246][T14156] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2031'. [ 369.820743][T14176] lo speed is unknown, defaulting to 1000 [ 369.869372][T14185] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2037'. [ 369.913555][T14185] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 370.019122][T14193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2039'. [ 370.821992][T14214] ieee802154 phy0 wpan0: encryption failed: -22 [ 370.968148][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 371.180071][T14229] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2050'. [ 371.257343][T14231] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2051'. [ 371.276245][T14232] syzkaller1: entered promiscuous mode [ 371.282748][T14232] syzkaller1: entered allmulticast mode [ 371.760744][T14245] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2055'. [ 371.935156][T14256] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2057'. [ 371.959236][T14255] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2055'. [ 371.969635][T14258] validate_nla: 3 callbacks suppressed [ 371.969651][T14258] netlink: 'syz.2.2058': attribute type 1 has an invalid length. [ 372.019413][T14259] bond2: (slave veth0_to_bond): Releasing active interface [ 372.132135][T14266] xt_hashlimit: overflow, rate too high: 0 [ 372.337227][T14258] 8021q: adding VLAN 0 to HW filter on device bond12 [ 372.726028][T14288] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 372.772650][T14298] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2065'. [ 373.270497][T14311] tipc: Enabling of bearer rejected, failed to enable media [ 373.668925][T14310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2071'. [ 374.276375][T14340] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2077'. [ 374.336464][T14340] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2077'. [ 374.379996][T14345] netlink: 'syz.2.2079': attribute type 4 has an invalid length. [ 374.434909][T14348] netlink: 'syz.2.2079': attribute type 4 has an invalid length. [ 374.973385][T14362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2084'. [ 375.063714][T14362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2084'. [ 375.127193][T14363] netlink: 'syz.1.2084': attribute type 3 has an invalid length. [ 375.208041][T14365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2085'. [ 375.578812][T14360] No such timeout policy "syz1" [ 375.595297][T14360] netlink: zone id is out of range [ 375.616493][T14360] netlink: zone id is out of range [ 375.633401][T14360] netlink: zone id is out of range [ 375.668910][T14360] netlink: zone id is out of range [ 375.693517][T14360] netlink: zone id is out of range [ 375.719719][T14360] netlink: zone id is out of range [ 375.719986][T14377] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2082'. [ 375.763245][T14360] netlink: zone id is out of range [ 375.786585][T14360] netlink: zone id is out of range [ 375.897593][T14360] netlink: zone id is out of range [ 375.914470][T14360] netlink: zone id is out of range [ 376.204056][T14395] sctp: [Deprecated]: syz.1.2093 (pid 14395) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.204056][T14395] Use struct sctp_sack_info instead [ 376.415078][T14405] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2096'. [ 376.717948][T14418] netlink: 'syz.1.2100': attribute type 2 has an invalid length. [ 376.796649][T14418] tipc: Enabled bearer , priority 0 [ 376.860178][T14422] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2101'. [ 376.932629][T14422] bond0: (slave bond_slave_1): Releasing backup interface [ 376.955789][T14422] bond_slave_1: left promiscuous mode [ 376.975714][T14417] tipc: Disabling bearer [ 377.304808][T14428] xt_ipcomp: unknown flags 1D [ 377.323613][T14444] netlink: 228 bytes leftover after parsing attributes in process `syz.6.2106'. [ 377.423540][T14450] netlink: 'syz.6.2106': attribute type 13 has an invalid length. [ 377.450997][T14450] netlink: 'syz.6.2106': attribute type 17 has an invalid length. [ 377.559185][T14444] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.566962][T14444] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.670618][T14444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.692531][T14444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.998942][T14458] netlink: 'syz.3.2109': attribute type 13 has an invalid length. [ 378.139987][T14450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.162647][T14450] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.195360][T14450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.272270][T14450] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.281071][T14450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.299604][T14450] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.309383][T14450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.357689][T14450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.375513][T14450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.438724][T14450] veth1_vlan: left promiscuous mode [ 378.451302][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.463599][T14450] vlan0: left promiscuous mode [ 378.497193][T14450] veth1_vlan: entered promiscuous mode [ 378.524619][T14450] veth1_macvtap: left promiscuous mode [ 378.548305][T14450] veth0_macvtap: left promiscuous mode [ 378.557609][T14450] veth0_macvtap: entered promiscuous mode [ 378.574839][T14450] veth1_macvtap: entered promiscuous mode [ 378.593018][T14450] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 378.613914][T14450] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 378.645901][T14450] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 378.663619][T14450] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 378.694358][T14450] ip6erspan0: left allmulticast mode [ 378.904123][T14458] syz_tun: refused to change device tx_queue_len [ 379.338177][T14487] syzkaller0: entered promiscuous mode [ 379.361584][T14487] syzkaller0: entered allmulticast mode [ 379.611677][T14498] __nla_validate_parse: 2 callbacks suppressed [ 379.611696][T14498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2121'. [ 379.665072][T14498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2121'. [ 380.358169][T14540] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2130'. [ 380.412226][T14542] syz_tun: entered allmulticast mode [ 380.455745][T14539] syz_tun: left allmulticast mode [ 380.759525][ T29] audit: type=1800 audit(1784498030.428:19): pid=14554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2133" name="memory.events" dev="tmpfs" ino=2297 res=0 errno=0 [ 381.132696][T14572] syzkaller1: entered allmulticast mode [ 381.442504][T14591] tipc: Enabling of bearer rejected, failed to enable media [ 381.485153][T14604] hsr0: entered allmulticast mode [ 381.500157][T14604] hsr_slave_0: entered allmulticast mode [ 381.511227][T14604] hsr_slave_1: entered allmulticast mode [ 381.528445][T14602] hsr0: left allmulticast mode [ 381.544179][T14602] hsr_slave_0: left allmulticast mode [ 381.568854][T14602] hsr_slave_1: left allmulticast mode [ 381.983844][T14622] net_ratelimit: 15 callbacks suppressed [ 381.983863][T14622] netlink: zone id is out of range [ 382.010132][T14622] netlink: zone id is out of range [ 382.020551][T14621] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2153'. [ 382.021853][T14622] netlink: zone id is out of range [ 382.079781][T14622] netlink: zone id is out of range [ 382.094022][T14622] netlink: zone id is out of range [ 382.105651][T14622] netlink: zone id is out of range [ 382.118668][T14622] netlink: zone id is out of range [ 382.130712][T14622] netlink: zone id is out of range [ 382.146112][T14622] netlink: zone id is out of range [ 382.160384][T14622] netlink: zone id is out of range [ 382.515430][T14628] gre0: entered promiscuous mode [ 382.535813][T14628] gre0: entered allmulticast mode [ 382.734221][T14635] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 382.761625][T14635] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 383.136848][T14649] syzkaller0: entered promiscuous mode [ 383.165932][T14649] syzkaller0: entered allmulticast mode [ 383.489933][T14670] netlink: 'syz.2.2166': attribute type 1 has an invalid length. [ 384.354892][T14686] netlink: 'syz.3.2170': attribute type 1 has an invalid length. [ 386.720181][T14672] bond13: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 386.739777][T14671] bridge_slave_0: left allmulticast mode [ 386.746673][T14671] bridge_slave_0: left promiscuous mode [ 386.753471][T14671] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.784467][T14671] bridge_slave_1: left allmulticast mode [ 386.806238][T14671] bridge_slave_1: left promiscuous mode [ 386.813385][T14671] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.834455][T14671] bond0: (slave bond_slave_0): Releasing backup interface [ 386.845782][T14671] bond0: (slave bond_slave_1): Releasing backup interface [ 386.862402][T14671] team0: Port device team_slave_0 removed [ 386.873426][T14671] team0: Port device team_slave_1 removed [ 386.880195][T14671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.887936][T14671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.896927][T14671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.904348][T14671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.930341][T14673] team0: Port device xfrm0 added [ 386.942200][T14675] macvlan7: entered promiscuous mode [ 386.948824][T14675] macvlan7: entered allmulticast mode [ 386.955835][T14675] bond13: entered promiscuous mode [ 386.962418][T14675] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 386.971190][T14675] bond13: left promiscuous mode [ 387.007024][T14686] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 387.559600][T14722] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2178'. [ 387.580798][T14722] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2178'. [ 388.175182][T14730] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2180'. [ 388.715439][T14747] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2185'. [ 388.834885][T14750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2187'. [ 388.871329][T14750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2187'. [ 389.163911][T14761] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2191'. [ 389.277613][T14769] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 389.360697][T14774] syzkaller0: entered promiscuous mode [ 389.366422][T14774] syzkaller0: entered allmulticast mode [ 389.395575][T14772] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.2192'. [ 389.807698][T14788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2196'. [ 390.320763][T14813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2203'. [ 390.590724][T14820] net_ratelimit: 374 callbacks suppressed [ 390.590743][T14820] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 390.811115][T14830] syzkaller0: entered promiscuous mode [ 390.828525][T14830] syzkaller0: entered allmulticast mode [ 390.941788][T14830] tipc: Enabled bearer , priority 0 [ 391.224695][T14830] tipc: Resetting bearer [ 391.280413][T14830] tipc: Disabling bearer [ 393.231251][T14921] __nla_validate_parse: 7 callbacks suppressed [ 393.231268][T14921] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2232'. [ 394.819107][T14884] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 395.063692][T14936] netlink: 'syz.2.2234': attribute type 21 has an invalid length. [ 395.175116][T14934] lo speed is unknown, defaulting to 1000 [ 395.202397][T14929] Cannot find set identified by id 0 to match [ 395.232126][T14946] erspan0: entered allmulticast mode [ 395.345203][T14948] nbd: must specify an index to disconnect [ 395.546412][T14958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2242'. [ 395.751117][T14962] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 396.242989][T14985] netlink: 19552 bytes leftover after parsing attributes in process `syz.2.2250'. [ 396.852239][T14997] netlink: zone id is out of range [ 397.015217][T14985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.043821][T14985] batman_adv: batadv0: Removing interface: ip6gretap1 [ 397.060802][T14985] batman_adv: batadv0: Interface deactivated: dummy0 [ 397.068459][T14985] batman_adv: batadv0: Removing interface: dummy0 [ 398.583780][T15044] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2261'. [ 398.954425][T15049] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2263'. [ 398.978146][T15050] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 399.343325][T15059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2266'. [ 399.364810][T15059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2266'. [ 438.175039][T15084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2271'. [ 438.786964][T15099] syzkaller0: entered promiscuous mode [ 438.798307][T15099] syzkaller0: entered allmulticast mode [ 439.415911][T15113] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2281'. [ 439.887650][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 439.895963][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 439.908830][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.599239][T15155] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2295'. [ 441.573708][T15184] veth0: entered promiscuous mode [ 441.997895][T15182] veth0: left promiscuous mode [ 442.334842][T15208] netlink: 'syz.3.2308': attribute type 21 has an invalid length. [ 442.353070][T15208] netlink: 'syz.3.2308': attribute type 6 has an invalid length. [ 442.381404][T15208] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2308'. [ 442.448619][ T30] INFO: task syz.4.1724:12914 blocked for more than 143 seconds. [ 442.472760][ T30] Not tainted syzkaller #0 [ 442.490893][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 442.502385][ T30] task:syz.4.1724 state:D stack:25296 pid:12914 tgid:12912 ppid:5622 task_flags:0x400140 flags:0x00080002 [ 442.516089][ T30] Call Trace: [ 442.520119][ T30] [ 442.523759][ T30] __schedule+0x17d9/0x56c0 [ 442.529885][ T30] ? __lock_acquire+0x683/0x2cf0 [ 442.535916][ T30] ? __lock_acquire+0x683/0x2cf0 [ 442.542139][ T30] ? __pfx___schedule+0x10/0x10 [ 442.548433][ T30] ? schedule+0x90/0x2b0 [ 442.553462][ T30] schedule+0x164/0x2b0 [ 442.564591][ T30] schedule_preempt_disabled+0x13/0x30 [ 442.576313][ T30] __mutex_lock+0x7bf/0x1550 [ 442.585947][ T30] ? __mutex_lock+0x5d4/0x1550 [ 442.596209][ T30] ? nfsd_nl_listener_set_doit+0x135/0x1750 [ 442.606230][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 442.617020][ T30] ? __asan_memset+0x22/0x50 [ 442.626296][ T30] ? __nla_validate_parse+0x2429/0x2d50 [ 442.636244][ T30] nfsd_nl_listener_set_doit+0x135/0x1750 [ 442.643632][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 442.645078][T15215] netlink: 'syz.5.2311': attribute type 37 has an invalid length. [ 442.650743][ T30] ? rcu_is_watching+0x15/0xb0 [ 442.663350][ T30] ? trace_kmalloc+0x2a/0xf0 [ 442.668690][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 442.675640][ T30] ? __nla_parse+0x40/0x60 [ 442.681994][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 442.697229][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 442.705664][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 442.713188][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 442.720700][ T30] ? bpf_lsm_capable+0x9/0x20 [ 442.726008][ T30] ? security_capable+0x7e/0x2c0 [ 442.732781][ T30] genl_rcv_msg+0x614/0x7a0 [ 442.738813][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 442.744588][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 442.752385][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 442.759135][ T30] netlink_rcv_skb+0x226/0x4a0 [ 442.764539][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 442.771455][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 442.778043][ T30] ? down_read+0x2be/0x330 [ 442.783179][ T30] genl_rcv+0x28/0x40 [ 442.788340][ T30] netlink_unicast+0x7bb/0x940 [ 442.793869][ T30] netlink_sendmsg+0x813/0xb40 [ 442.800168][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.806847][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 442.812395][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.818610][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 442.823927][ T30] ____sys_sendmsg+0x54e/0x850 [ 442.829486][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 442.835120][ T30] ? import_iovec+0x73/0xa0 [ 442.840133][ T30] ___sys_sendmsg+0x2a5/0x360 [ 442.845175][ T30] ? __lock_acquire+0x683/0x2cf0 [ 442.850720][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 442.856727][ T30] ? futex_wait+0x2a2/0x390 [ 442.861576][ T30] ? __fget_files+0x2a/0x420 [ 442.866797][ T30] ? __fget_files+0x3a2/0x420 [ 442.871764][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 442.877259][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 442.883136][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.889953][ T30] do_syscall_64+0x174/0x580 [ 442.894838][ T30] ? trace_irq_disable+0x3b/0x140 [ 442.900472][ T30] ? clear_bhb_loop+0x40/0x90 [ 442.905475][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.911998][ T30] RIP: 0033:0x7f6f8679de99 [ 442.917220][ T30] RSP: 002b:00007f6f849f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.926530][ T30] RAX: ffffffffffffffda RBX: 00007f6f86a25fa0 RCX: 00007f6f8679de99 [ 442.935273][ T30] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000004 [ 442.944172][ T30] RBP: 00007f6f86833eaf R08: 0000000000000000 R09: 0000000000000000 [ 442.953050][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.961658][ T30] R13: 00007f6f86a26038 R14: 00007f6f86a25fa0 R15: 00007ffd381f7b08 [ 442.970299][ T30] [ 442.973835][ T30] [ 442.973835][ T30] Showing all locks held in the system: [ 442.985078][ T30] 1 lock held by khungtaskd/30: [ 442.993208][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 443.007497][ T30] 2 locks held by getty/5377: [ 443.012768][ T30] #0: ffff888035fd80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 443.023807][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 443.035087][ T30] 2 locks held by syz.0.475/7677: [ 443.041171][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 443.055462][ T30] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 443.067387][ T30] 2 locks held by syz.4.1724/12914: [ 443.072936][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 443.081982][ T30] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 443.095249][ T30] 3 locks held by syz.1.2307/15195: [ 443.101150][ T30] #0: ffff8880769db600 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 443.112056][ T30] #1: ffff88807a0b6260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_release+0x7b7/0xd30 [ 443.122543][ T30] #2: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 443.134445][ T30] 1 lock held by syz.3.2308/15197: [ 443.140037][ T30] #0: ffff88807a3d8140 (&dev->mutex){....}-{4:4}, at: nfc_unregister_rfkill+0x63/0x280 [ 443.150517][ T30] 4 locks held by syz.3.2308/15200: [ 443.155975][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 443.165376][ T30] #1: ffffffff9009c9e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 443.175076][ T30] #2: ffff88807a3d8140 (&dev->mutex){....}-{4:4}, at: nfc_dev_up+0x3c/0x350 [ 443.184639][ T30] #3: ffff8880725c8348 (&ndev->req_lock){+.+.}-{4:4}, at: nci_dev_up+0xa3/0xdc0 [ 443.194667][ T30] 2 locks held by syz.2.2309/15205: [ 443.200423][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 443.209222][ T30] #1: ffffffff9009c9e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 443.219207][ T30] [ 443.221762][ T30] ============================================= [ 443.221762][ T30] [ 443.237141][ T30] NMI backtrace for cpu 1 [ 443.237167][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 443.237188][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 443.237198][ T30] Call Trace: [ 443.237205][ T30] [ 443.237214][ T30] dump_stack_lvl+0xe8/0x150 [ 443.237245][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 443.237268][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 443.237296][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 443.237323][ T30] sys_info+0x135/0x170 [ 443.237341][ T30] watchdog+0xfd7/0x1030 [ 443.237372][ T30] ? watchdog+0x1c7/0x1030 [ 443.237400][ T30] kthread+0x388/0x470 [ 443.237427][ T30] ? __pfx_watchdog+0x10/0x10 [ 443.237447][ T30] ? __pfx_kthread+0x10/0x10 [ 443.237473][ T30] ret_from_fork+0x514/0xb70 [ 443.237500][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 443.237527][ T30] ? __switch_to+0xc89/0x1420 [ 443.237552][ T30] ? __pfx_kthread+0x10/0x10 [ 443.237576][ T30] ret_from_fork_asm+0x1a/0x30 [ 443.237609][ T30] [ 443.237689][ T30] Sending NMI from CPU 1 to CPUs 0: [ 443.358508][ C0] NMI backtrace for cpu 0 [ 443.358526][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 443.358545][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 443.358556][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 443.358586][ C0] Code: ac 80 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 7a 1a 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 443.358603][ C0] RSP: 0018:ffffffff8e807de0 EFLAGS: 00000246 [ 443.358618][ C0] RAX: 00000000001bfbcf RBX: ffffffff819ab450 RCX: 0000000080000001 [ 443.358632][ C0] RDX: 0000000000000001 RSI: ffffffff8e22ba06 RDI: ffffffff8c4bd380 [ 443.358644][ C0] RBP: ffffffff8e807eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 443.358658][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 443.358671][ C0] R13: 1ffffffff1d11de8 R14: 1ffffffff1d00fc4 R15: dffffc0000000000 [ 443.358690][ C0] FS: 0000000000000000(0000) GS:ffff888124f5e000(0000) knlGS:0000000000000000 [ 443.358705][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 443.358717][ C0] CR2: 00007f568bded2f8 CR3: 0000000074778000 CR4: 00000000003526f0 [ 443.358732][ C0] Call Trace: [ 443.358739][ C0] [ 443.358745][ C0] default_idle+0x9/0x20 [ 443.358762][ C0] default_idle_call+0x72/0xb0 [ 443.358780][ C0] do_idle+0x2e0/0x540 [ 443.358804][ C0] ? __pfx_do_idle+0x10/0x10 [ 443.358832][ C0] cpu_startup_entry+0x43/0x60 [ 443.358855][ C0] rest_init+0x2de/0x300 [ 443.358874][ C0] start_kernel+0x392/0x3e0 [ 443.358906][ C0] x86_64_start_reservations+0x24/0x30 [ 443.358927][ C0] x86_64_start_kernel+0x137/0x1b0 [ 443.358944][ C0] common_startup_64+0x13e/0x157 [ 443.358974][ C0] [ 443.547114][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 443.553952][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 443.563055][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 443.573097][ T30] Call Trace: [ 443.576372][ T30] [ 443.579303][ T30] vpanic+0x56c/0xa60 [ 443.583278][ T30] ? __pfx___schedule+0x10/0x10 [ 443.588116][ T30] ? __pfx_vpanic+0x10/0x10 [ 443.592610][ T30] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 443.598756][ T30] panic+0xc5/0xd0 [ 443.602466][ T30] ? __pfx_panic+0x10/0x10 [ 443.606872][ T30] ? preempt_schedule_common+0x82/0xd0 [ 443.612325][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 443.617711][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 443.623853][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 443.629996][ T30] watchdog+0x1030/0x1030 [ 443.634334][ T30] ? watchdog+0x1c7/0x1030 [ 443.638745][ T30] kthread+0x388/0x470 [ 443.642834][ T30] ? __pfx_watchdog+0x10/0x10 [ 443.647513][ T30] ? __pfx_kthread+0x10/0x10 [ 443.652103][ T30] ret_from_fork+0x514/0xb70 [ 443.656690][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 443.661799][ T30] ? __switch_to+0xc89/0x1420 [ 443.666468][ T30] ? __pfx_kthread+0x10/0x10 [ 443.671052][ T30] ret_from_fork_asm+0x1a/0x30 [ 443.675816][ T30] [ 443.678968][ T30] Kernel Offset: disabled [ 443.683280][ T30] Rebooting in 86400 seconds..