last executing test programs: 4m21.127331301s ago: executing program 4 (id=4976): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(r2, 0x84, 0x4, 0xfffffffffffffffe, &(0x7f0000000040)) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x1, 0x30, 0xfffffffffffffff8, 0x7}, &(0x7f0000000100)=0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [{{0x254, 0x1, {{0x2, 0xa1d}, 0xfd, 0x3f, 0x48, 0x7, 0x20, 'syz1\x00', "fb32603418d1311860be59b3c9d130a1db735cfc79038f76aba47fbb46f33b6c", "e6e0c30d769f71bd6d1c7ac8dc62da86a42743e722041e2c584ce0570817c04c", [{0x2, 0x2, {0x2, 0x6}}, {0x3, 0x4, {0x3, 0x6}}, {0x2, 0x1000, {0x1, 0x10}}, {0x7, 0x2, {0x1, 0x4}}, {0x8, 0x4, {0x0, 0x80002}}, {0x101, 0xf51, {0x2, 0x3}}, {0x40, 0x4502, {0x3, 0x1}}, {0xe, 0x5, {0x3, 0xfe}}, {0x5, 0x1, {0x3, 0x5}}, {0x6, 0x23bb, {0x2, 0x1}}, {0x0, 0x1829, {0x0, 0x3}}, {0xf59b, 0xce, {0x1, 0x4000489}}, {0x1, 0x4, {0x0, 0x5ad}}, {0xffff, 0x101, {0x2, 0x3}}, {0x0, 0x6, {0x1, 0x8}}, {0xfffd, 0x0, {0x1, 0xa}}, {0x797, 0xc, {0x0, 0xbdc4}}, {0x2, 0xb, {0x5e475e5ee8fc8797, 0xa03}}, {0x101, 0x1, {0x0, 0x7}}, {0x81, 0x80, {0x1, 0x16397}}, {0xb, 0x1, {0x2, 0x120000}}, {0x6, 0x3, {0x3, 0xb}}, {0x8, 0xe, {0x1, 0x9}}, {0x0, 0x81, {0x1, 0x80000000}}, {0x3, 0x74, {0x2, 0x4}}, {0x0, 0xf, {0x1, 0xfff}}, {0x3, 0x8, {0x3, 0x2}}, {0x9, 0x2, {0x2, 0x3}}, {0x6, 0xff01}, {0x2, 0x1000, {0x0, 0x9}}, {0x2, 0xff, {0x0, 0x4bd9}}, {0x280, 0x9a24, {0x3, 0xf2}}, {0x8, 0x9, {0x1, 0x7f}}, {0x100, 0x2, {0x2, 0x10001}}, {0xe, 0x7, {0x2}}, {0x4000, 0x9, {0x1, 0x4}}, {0xfb68, 0x198f, {0x0, 0x4}}, {0x100, 0x1, {0x3, 0x3}}, {0x82df, 0x1, {0x2, 0x5}}, {0x1, 0xadf, {0x1ea6d549037cf73c, 0x1}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x64000001}, 0x24008000) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0x154, 0x1a, 0x633, 0x70bd25, 0x25dfdbff, {{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0xa1}, 0x0, 0x0, 0x4e23, 0x8001, 0x0, 0x0, 0x0, 0x3c}, {@in=@rand_addr=0x64010100, 0x0, 0x32}, @in=@empty, {0x323, 0x1, 0x7, 0xfffffffffffffffd, 0xc, 0x92be, 0x9, 0x5}, {0x0, 0x40000, 0x4, 0xffffffffffffffff}, {0xfffffffb, 0x3, 0xca09}, 0x70bd25, 0x3502, 0xa, 0x1, 0x0, 0x9}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e1e, 0xfffc, @in6=@mcast2}}]}, 0x154}, 0x1, 0x0, 0x0, 0x44000840}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000180)={r7, 0x7}, &(0x7f00000001c0)=0x8) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000080)=[{{0x1, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x2, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x2}}, {{0x1, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}], 0x20) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x40, r3, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4m20.82149277s ago: executing program 4 (id=4982): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x1000002, 0x28011, r0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x808010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r1, 0x80e, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x10001, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) r2 = socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000100040000000000091931007b115b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x16) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r7, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r8, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000e70c00000008000500", @ANYRES64=r6], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x4004892, &(0x7f00000001c0)={0x11, 0x1, r8, 0x1, 0x8, 0x6, @remote}, 0x14) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000c40)={0x9, &(0x7f0000000700)=[{}, {@fixed}, {}, {@none}, {}, {@none}, {@fixed}, {}, {@none}]}) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@newae={0x40, 0x1e, 0x200, 0x70bd27, 0x25dfdbfb, {{@in=@rand_addr=0x64010100, 0x4d4, 0xa, 0x33}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3, 0x3506}}, 0x40}}, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x2000) 4m20.583379591s ago: executing program 4 (id=4985): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) 4m20.255601774s ago: executing program 4 (id=4987): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000200)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r1}, 0x10, &(0x7f00000003c0)={&(0x7f0000000280)=@canfd={{0x2, 0x1, 0x1}, 0xfe, 0x1, 0x0, 0x0, "c49bc517a6bdb5a8c574326b3d1a2cd328971128f016c3926cf5c07e97913f4927acf5c385672f9e15f9f096c4a8a50682532ce2971dca06656d719f72acb5a4"}, 0x48}, 0x2, 0x0, 0x0, 0x1}, 0x10044009) unshare(0x400) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x80, 0x0, 0x0, 0x0, {[@eol, @mss={0x2, 0x4, 0x5e9}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x1}]}}}}}}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x104}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r5, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000008c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000900)=[0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x85, &(0x7f0000000980)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0xa2, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x2, 0x22, &(0x7f0000000680)=ANY=[@ANYBLOB="180000008900000000000000feffffff8520000005000000851000000700000018000000007d0000000000000100000018000000ff0700000000000008000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000852000000500000018420000ffffffff000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000f7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f00000007c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x60, '\x00', r4, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x4, 0x1, 0x9, 0xb}, 0x10, r6, 0xffffffffffffffff, 0x6, &(0x7f0000000bc0)=[r2], &(0x7f0000000c00)=[{0x3, 0x1, 0x7, 0xc}, {0x1, 0x3, 0x6, 0x6}, {0x0, 0x2, 0xc, 0x8}, {0x2, 0x2, 0x3, 0xa}, {0x0, 0x2, 0x7, 0xc}, {0x1, 0x1, 0x5, 0xa}], 0x10, 0xa}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r2, r2, r2, r2, 0xffffffffffffffff, r2], 0x0, 0x10, 0xfffffffe}, 0x94) 4m20.183935013s ago: executing program 4 (id=4989): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000001c0), 0x8) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x13}, @map_fd={0x18, 0x9, 0x1, 0x0, r2}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendfile(r3, r4, 0x0, 0xffffffff000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r6, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) write$cgroup_pressure(r7, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0xc0, 0x0, 0x709, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20009815}, 0x4000080) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001240)=ANY=[@ANYBLOB="84000000180001002cbd7000ffdbdf251d0107000c000b00040000a00300008015000100030000a006000000bac45f9ce14233bd0000000008000900", @ANYRES32, @ANYBLOB="0c000b00000000e0020000a015000200010000a0070300007f15f0386605000b0200000008000a00", @ANYRES32, @ANYBLOB='\b\x00', @ANYBLOB="08000500fe0601de0800"], 0x84}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 4m19.184989579s ago: executing program 4 (id=5001): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) (async) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) bind$llc(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) socket(0x1, 0x6, 0x0) (async) socket(0x1, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000003c40)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x14, 0x1, {{0x0, 0x0, 0x20000001}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2000, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000000000000010080030900010073797a300000000008000240000000012c000000030a010100000000e4000000010002000900010073797a30000000000900030073797a320a05000000000000000000010000050c00024000"], 0xa8}}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 4m8.015898974s ago: executing program 0 (id=5121): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x402610}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)={0x198, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10002}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x198}}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x1f) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0xff82, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r4, r5, 0x25, 0x19, @val=@target_btf_id=r6}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000100085001e006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, &(0x7f0000000000)={0x0, 0x2, 0x3}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 4m7.712444552s ago: executing program 0 (id=5125): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="a5010000100001000000590000000000ac1e0101000000000000000000000000fc0200000000000000000000000000000000ecdf000000030000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000640100fe00000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000004000fcffffffffffffff0000000000000000000000000000000000000000000000000100000000000000000000800000000002000000000000001000000000000000020000000000000000000000020001734c000000000000004c001400686d61632873686132353629000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000480002006362632873657270656e742900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040002004e244e23000064010100"/344], 0x1a0}}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="a5010000100001000000590000000000ac1e0101000000000000000000000000fc0200000000000000000000000000000000ecdf000000030000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000640100fe00000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000004000fcffffffffffffff0000000000000000000000000000000000000000000000000100000000000000000000800000000002000000000000001000000000000000020000000000000000000000020001734c000000000000004c001400686d61632873686132353629000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000480002006362632873657270656e742900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040002004e244e23000064010100"/344], 0x1a0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000e00)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000e00)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4800}, 0x20010) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4800}, 0x20010) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) close(0x3) (async) close(0x3) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r9 = socket$packet(0x11, 0x2, 0x300) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800feff", @ANYRES32, @ANYBLOB="08000500", @ANYRES32=r9], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000305000000000407000000000000", @ANYRES32=0x0, @ANYBLOB="00000006100000140003000b00010062726964b1676500000400028008da2d005b838eda9f9a077b2dfa19fe8cbf145c477d67a16ba502af7e7c5362b055b8ac81a142345d4501308764446de3a02fad7e90ef5d6c7522d9c82fa55ac0b3f48d8847d9af814234a898fbd80e8abdafe0fc755580733f98b6fa846c07d2ff68ce29a17db226f3cd5d34124214d8730754f43328cac78d07b2f7b292b41fad137498a29c4e7139dbaea86aeb6cae71c16c9ed8b2ef7c77a0f90a52ffb8ec25d7fb6a249534c2cfdbaa7c646357237fefa5b5620322594ab50566", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000305000000000407000000000000", @ANYRES32=0x0, @ANYBLOB="00000006100000140003000b00010062726964b1676500000400028008da2d005b838eda9f9a077b2dfa19fe8cbf145c477d67a16ba502af7e7c5362b055b8ac81a142345d4501308764446de3a02fad7e90ef5d6c7522d9c82fa55ac0b3f48d8847d9af814234a898fbd80e8abdafe0fc755580733f98b6fa846c07d2ff68ce29a17db226f3cd5d34124214d8730754f43328cac78d07b2f7b292b41fad137498a29c4e7139dbaea86aeb6cae71c16c9ed8b2ef7c77a0f90a52ffb8ec25d7fb6a249534c2cfdbaa7c646357237fefa5b5620322594ab50566", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 4m4.863708554s ago: executing program 0 (id=5127): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x7c, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, '1\x00', 0x46, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9]}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x48, 0x1, 0x1, 0x0, 0x4, 0x9}, 0x1, {0x89a0}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r7, 0x211, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r12, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4079, 0xfef}, {&(0x7f00000002c0)=""/74, 0x4a}], 0x4}, 0x5d}], 0x26, 0x10022, 0x0) 4m4.481326856s ago: executing program 0 (id=5131): socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x400000000010, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd700000000040020000000800", @ANYRES32=r8, @ANYBLOB="0c009900d308000079000000080026006c0900000800a08d1d4a2a390800270002"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000009400004803c0001800b00010065787468647200002c000280080004400000000308000740000000170800064000000001050002000000000008000340000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a78eac8887d526e3f741f3c53ddfe0c72a08ab305688c72c8a66585e91246f477447f0260a47784c0d4778013adea82572b2245127b99a36277358258cfaa551bb559210c318fe05ea7a1e19fdada48019f2266e6d2867f8e43d4ab8bd88bf3d6325ec1074a951b2c419eda31f24f805797dd928719f6477daff67fb78755ac50a75ee2f43d3e289306755fa303894aefadffeade22"], 0x94}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000042104020008001b000000000038001a8004002d8030000a80050008"], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 4m3.888061042s ago: executing program 32 (id=5001): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) (async) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) bind$llc(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) socket(0x1, 0x6, 0x0) (async) socket(0x1, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000003c40)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x14, 0x1, {{0x0, 0x0, 0x20000001}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2000, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000000000000010080030900010073797a300000000008000240000000012c000000030a010100000000e4000000010002000900010073797a30000000000900030073797a320a05000000000000000000010000050c00024000"], 0xa8}}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 4m2.917929956s ago: executing program 0 (id=5137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="5000000007060300000000000000000001000009080006400000000208000640000000089f0046409d7f0000001005000100070000000900020073797a3000000800064000000002"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async) r1 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x80, "0e577e79e96f6369099828c441a6ca34f8ce777143396408bda9a0d2384ccc14c94ecdaafe9cd009470a391966aa14c8901f8a0a89937993f4ae58e57e3aaaab2cc9284f0e26a7b58a68664d2f2778bc74c47bb1b08a19e0f235725455486fe21e8484d46d6cf835d898a2c4a5c86bf8a4f4eb7063b1e9451d78893f960d69c2"}, &(0x7f0000000080)=0x88) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc004000202080003000300000007000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) (async) close(0x3) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000580)={r2, 0xec, "0f5efaacd0d12878f2659e749babba7d41e443975068a8178cd07aa09a9753f5e4a3c56672587b74e32d5b5fbf6ba2722bec7bcf22286464f872f2ee202284493c4021100739ac60f91da2345778cd1bdbe2d988b6e6ae1a67b0ff2197fda56d55b50a198331561220b7805108684e433e54bb839adce44669b37fc583eca8acf610c7cdd57666ac3c01f2a6a62dfb50e8a6785b6a57e3614fd9904e21c0c26a0027bebe458001fb746fa5b07eeff2cf7a914dab742e5b31f8e6a2c4ce7595fd420f2e53b802a1fd96ba89fc8d56e42d1266c3c0609f878c889dd7fcde33b07909908730606100f79630269a"}, &(0x7f0000000180)=0xf4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)=@newtaction={0x2b10, 0x1d, 0x1, 0x70bd28, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0x554, 0x1, [@m_ct={0x124, 0x1c, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "9bffbdd2b5197c91d596a3a467d5ace3"}, @TCA_CT_ACTION={0x6, 0x3, 0xd}, @TCA_CT_LABELS={0x14, 0x7, "f36efd3ee3be5d9328ebf23a1a521054"}, @TCA_CT_ZONE={0x6, 0x4, 0x2}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}, @TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x639c}]}, {0xab, 0x6, "245e56625b445ee4c3c36a7bf23e0eff622043d20b033cdcc1cb52030e26de79c963673358fa7a3a8de9840e246b5a97d4c5d738c4ab57eed6132a93840896a0c8580fa8329e3128a3a19f6dd0e01b816c8f3f893ab53a96ecfe12884c2158750a0ecd454ad3ab0822a7266a35202cf17c9ce23f8c17efdc2d6866a28c710a3ff6a5ecb254be7b2c80ba57c27e991a826b257f42738c3d8e03488c9ef21a690ba81a7680692dbd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mirred={0xf4, 0x1e, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5f, 0x94d7, 0x20000000, 0x3, 0x1}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa8, 0x7, 0x1, 0x1200000, 0xc7}, 0x5}}]}, {0x88, 0x6, "813ed8324dae73c2afaa2da5055dac06e266378ea980fae5f61f99af4324605c19652451c6ff45b211944286ccd1d80a42e479c48142ff18f4f7dbbd40beec99fd8822b725a1de561f1cb78e338152877367577b6be7b1d86cb52893f3d4bd773326f1e68e00cf04b29ccb25a8aea79a06aa70a708da6c5923d34fa39e31f9be0ea34df8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbedit={0xfc, 0x1c, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0x2}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0x2}}]}, {0xaf, 0x6, "8b8a21bd3fcc79c6ef6792f3beebbb845ad8079da8cba533092cdfd87b80205d2a4eb1e54d6dcfe7cabab6ebcc295b1ac30dfa9de112fcd52ae7299784c079837b583887baf5d697d1d1843d623e71853e11adc7680949760b0206166a68581ce743a4576e4465024c54aeedf576c550c325cb7b672772ed6b31e6574850cdc22f4f29dd5715a6cd2115e649d7e02f9afab1534c2b2c04cc1a084ff8b6ed677be299e80f9222306319d30a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x15c, 0x19, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "3e7a806a67f88dd145fbd09bde3f9118"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}, @TCA_CT_MARK={0x8, 0x5, 0x6}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @multicast1}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_ACTION={0x6, 0x3, 0x21}]}, {0xd6, 0x6, "4580a83a91e00f1a61646696f10ea5e79240075a91fb77f4c5a0287687c20f245344504a3bd1c8e254ab215d58a15cded8b5e0a18d590d787f492ccf20eec0258a22bc4e5048fe8f31569fc133670ad9302ccda913ff37e77a2595cc774b1838c9be80df7642293420fdf0c4e9f18171ffaffb32f69a406365e16eb3d19ef21391dd2fb2e8bde1b1dc066edf7022056d0895fc7a4dd0c366b53064d9d3648f5f694f49105985ba5787698ab73dfc4e7df58335a60f5be23a30d4b109ed2700d2aa74af218844d351b0a4949f6ecdd7fd9fbc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0xe0, 0x15, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xc7}]}, {0xaa, 0x6, "3878d14969f223acc7192aaf1461c10fab4315dd8ec35554f44bd35042b9fe950ebe29fcd6c6f385222125e74cbf33509cc37165fb6660aa204aee60d84ccd98a10b4319799ffae3dc9e25868bee1df5a55987e76c20f9d4c98c226bf75f74b0bc8938035ace7bb0ef16d48896ba76bfd43e208171084707cb6e2ae4bed3a4087ef9354c992c623920216b712cc5d0f2627e5b4d3d729b3ecedca25244054ae7a7ba1c0b3fa8"}, {0xc}, {0xc}}}]}, {0x1150, 0x1, [@m_police={0x114c, 0xb, 0x0, 0x0, {{0xb}, {0x10f4, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x8, 0x8, 0x7, 0x153bdec3, {0xd, 0x3, 0x4, 0x9, 0x4, 0x81}, {0x5, 0x0, 0x0, 0x1, 0xe, 0x401}, 0x3ff, 0x1, 0x4}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0xfa, 0x8, 0x2, 0x3, 0x2, 0x1000, 0x40, 0x7e100d8c, 0x8, 0x1, 0x3, 0xa, 0x3db, 0x7f, 0x4, 0x4, 0x8, 0x200, 0x0, 0x7, 0x9, 0xfffffff9, 0x223bf837, 0x0, 0x1000, 0x1000, 0x45b, 0xc5, 0x8, 0x23, 0x80, 0x0, 0x9, 0x1, 0x800, 0x9, 0x10000, 0x4, 0x6, 0x8, 0x6, 0x9, 0x80000000, 0x1, 0xa, 0x101, 0x800, 0x6, 0x7, 0xaa, 0x5, 0x800, 0x7, 0x3, 0xc54f, 0x7, 0x5, 0xffff, 0xb, 0x3, 0x3d, 0x3, 0x8, 0xfffffffb, 0x3, 0xfe000000, 0x3, 0x101, 0x8, 0x6, 0x400, 0x6, 0xe, 0x8000, 0x7, 0xfffffa78, 0x14, 0x97, 0x2, 0xfffffffc, 0x5, 0xa91, 0x7, 0x7, 0x8, 0x2, 0x7, 0xa6e9, 0x8, 0x3ff, 0x0, 0x4, 0x9, 0xf2bd, 0x1, 0xffffffff, 0x4, 0xc, 0x2, 0x4, 0xc, 0x5, 0x3e95, 0x4, 0x2, 0x3, 0x81, 0x7, 0x4f2f, 0x5, 0xfffffffa, 0xb3e0, 0x9, 0xff, 0x3b0, 0xc, 0x5, 0x3, 0x7ff, 0x7f, 0x0, 0x23, 0xfffffffd, 0x10, 0x8, 0x7, 0xffff, 0xd, 0x3a4fc4e6, 0x669e4ec2, 0x4, 0x255, 0x9, 0x4a, 0x5, 0xc, 0x283587ab, 0x80, 0xfff, 0x4, 0x0, 0x5, 0x80000000, 0x6, 0xa8a, 0x8, 0x200, 0xfe, 0x7, 0x1, 0x1, 0x8, 0x4, 0x0, 0x9, 0xffff66f2, 0x7fffffff, 0xfffff69b, 0x39ec, 0x3, 0xffff, 0x7, 0x2, 0x9, 0x2e, 0x6, 0x6, 0x9, 0x80, 0x85, 0x1cbd800, 0xffffffff, 0x1, 0x1, 0x3, 0x40, 0xd9f8, 0xffffff00, 0x4, 0x6, 0x12a00000, 0x6, 0x6, 0x4213, 0x0, 0x80000001, 0xfffff000, 0x1, 0x4, 0x5, 0x3, 0x3ff, 0xf6, 0x7, 0x97, 0x7, 0x2, 0x6, 0x8000, 0x0, 0x3, 0x4, 0x0, 0x4, 0x5, 0x7f, 0x40, 0x9, 0x401, 0x5, 0x1, 0xb, 0x112, 0x7, 0xf, 0xda, 0x90a, 0x9, 0x9, 0x6, 0x3, 0x3, 0x301, 0x10000, 0x900, 0x641, 0xc00, 0x10, 0x0, 0x8, 0x8, 0x8, 0x6, 0xffffffff, 0xf91, 0x3b, 0x7fff, 0x7ff, 0x7, 0x5, 0x0, 0xb, 0x10001, 0x9, 0x2, 0x5, 0x8, 0x80000001, 0x3, 0x4, 0x5, 0x3, 0x7, 0x8001, 0x7, 0xcbe]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3ff, 0x2, 0x6, 0x29a5, 0xfff, 0xfffffffc, 0x9, 0x7fff, 0xffe000, 0x7fff, 0x2, 0x8000, 0x10, 0xffff974c, 0x1ff, 0xf, 0x5, 0x800, 0x81, 0x180000, 0x4, 0x4, 0x3, 0x1, 0x9, 0x9, 0xd, 0x7, 0x6, 0xffffffcf, 0x9, 0x7f5f, 0x522, 0x3, 0x8, 0x401, 0x0, 0xf, 0x5, 0x9, 0x7, 0x0, 0x89, 0x2, 0x1, 0x69ee, 0x6, 0x7, 0xb7, 0x10000, 0x1, 0x7582, 0x9, 0x6, 0x101, 0xc26d, 0x8, 0x7, 0x6, 0x9, 0xff, 0x3, 0x3, 0x5, 0x7ea, 0x9, 0x4, 0x1, 0x3ff, 0x1, 0x101, 0x0, 0x5, 0x4, 0xfcb6, 0x5, 0x6, 0x1, 0x80000000, 0x9, 0x7, 0x4, 0xc, 0x6, 0x10001, 0x6, 0x8, 0xf, 0x9, 0xd5, 0x9, 0xffffffff, 0xd68, 0x5, 0x97, 0x2, 0x7, 0x6, 0x4, 0x1, 0x7, 0x3, 0xc, 0x7fffffff, 0x200, 0xcfd, 0x5, 0x4, 0x5, 0x5, 0x4, 0x7ff, 0x9, 0x8, 0xc5, 0x76f8, 0xf9, 0x3, 0x3, 0x62, 0x8000, 0x3, 0x0, 0x7, 0x401, 0x4, 0xa, 0x1, 0x4, 0x80, 0x7, 0x6, 0x28000, 0x2a, 0x10, 0x7, 0x5, 0x0, 0x2, 0x3, 0x6, 0x1, 0xdd2, 0x7fffffff, 0x7f, 0x8000, 0x9, 0x6, 0x8, 0x1, 0x99e, 0x7, 0xc4d2, 0x530, 0x0, 0x9, 0x9, 0x7, 0x2, 0x32b, 0x60, 0x6f25, 0x9, 0x1000, 0x6, 0x5, 0x6, 0x8, 0x10001, 0x8, 0x4, 0x7, 0x6, 0xc5c3, 0x10, 0x1, 0x2, 0xc5, 0x7, 0xe00, 0x81, 0xc0c, 0xf18c, 0x8, 0x3, 0xc0f6, 0x2, 0x3, 0x8, 0x8, 0x7, 0x5, 0xd644, 0x1ff, 0xe15, 0x8, 0x5, 0x6, 0x768, 0x3, 0x5, 0x0, 0x5, 0xe, 0xb, 0x6, 0xffffffff, 0x2, 0x7cd6, 0x8, 0x1, 0xffff8000, 0x2, 0xa, 0x7, 0xfffffff9, 0x8d, 0x5, 0x5, 0x3, 0x401, 0x200, 0x800, 0x3, 0x10000, 0x8, 0x6, 0x21, 0x7f, 0x5, 0x6, 0x7, 0x0, 0x4, 0x1, 0x1570, 0x6, 0x8, 0xc3, 0x8, 0x80000000, 0x2, 0x0, 0x4, 0x4, 0x68d714a2, 0x72ae, 0x7c, 0x9a, 0x8, 0x0, 0xa9, 0xffffffff, 0x52]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x10000000, 0x2, 0x7, 0x0, {0x7, 0x1, 0x100, 0x6, 0xf666}, {0x6, 0x1, 0x800, 0x0, 0x0, 0x8e32}, 0x4, 0x81, 0xfff}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x81}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffa}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7a1}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x8, 0xb0c, 0x8, 0x0, 0x1ff, 0x7, 0x9, 0xffffffff, 0x5, 0xc, 0x9d, 0x1, 0x6, 0x3, 0x7, 0x7, 0x2, 0xaa5, 0xfffffffb, 0x2706, 0x100, 0x1, 0x1db, 0xffff, 0x3, 0x4010, 0xb7a0, 0x1ff, 0x4, 0xe, 0x401, 0x3, 0x0, 0xff, 0x2, 0x6, 0x59, 0x8, 0x3, 0x93b9, 0xe, 0x4, 0x10, 0x4, 0x100, 0x2, 0x8b3, 0x1, 0xfffffffe, 0xa, 0x1, 0xfffffff8, 0x1, 0xfffffff7, 0x6, 0xc, 0x7, 0x0, 0x9, 0x4, 0x7f, 0xffffffe2, 0x8001, 0x3456, 0x1ff, 0x3, 0x8, 0x3, 0xfff, 0x8, 0x8, 0x101, 0x9, 0x2, 0x4, 0x8, 0x0, 0xffffffff, 0x8, 0x5, 0x1, 0x3, 0x1000, 0x1, 0x7, 0x101, 0x10001, 0x4e8000, 0x1, 0x1, 0xc96d, 0x81, 0x43, 0x9c, 0x8, 0x800, 0x2c0, 0x275f, 0x10001, 0x7, 0xffffffff, 0x9, 0x4, 0xff, 0x0, 0x3, 0x0, 0xfff, 0x9642, 0x81, 0x5, 0x1db4, 0xffff, 0xc326, 0xb, 0xf, 0x40, 0x3, 0x6, 0x401, 0x100, 0x401, 0x8, 0x4, 0x1, 0x4, 0x8000, 0x6, 0xfffffffa, 0x398, 0x4, 0x1, 0x100, 0x2, 0xb, 0x1, 0x5, 0x7, 0x0, 0xffff0000, 0x5, 0x200, 0x5, 0x8001, 0x9, 0x2, 0x6, 0x8, 0x0, 0x5, 0xf586, 0x1, 0x6, 0xd8, 0x3, 0x1, 0xdcc6, 0x7, 0x57, 0xf, 0x0, 0x6, 0x100, 0x50b, 0x4, 0xa5e3, 0x10, 0x2, 0xe555, 0x2, 0x2, 0x0, 0x8, 0x6, 0xffff, 0x3, 0xc, 0x1, 0xfd13, 0x6cb6, 0x3, 0x3, 0xe48a, 0x0, 0x3, 0x7, 0x0, 0xffffffff, 0xfffffff8, 0xb, 0x6, 0x7, 0x0, 0x7fff, 0x3, 0x6, 0x0, 0x7, 0xa, 0x0, 0x2, 0x4, 0x7, 0x1, 0xd8, 0x401, 0x8, 0x9, 0x497, 0x6, 0x6, 0x2, 0x0, 0xb53, 0x5, 0x9259, 0x4, 0x9, 0xeee, 0x1, 0x4, 0x401, 0xa3, 0x7, 0xc888, 0x6, 0x7fff, 0x0, 0x5, 0x9, 0x7, 0x400, 0x7, 0xc, 0x1ff, 0x2, 0x5, 0x9, 0x40, 0x44c0, 0x400, 0x8, 0x6, 0x1, 0x4c4, 0x2, 0x9, 0xb, 0x5, 0x9, 0x2, 0x4, 0x5, 0x9, 0xffff]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x1, 0x6, 0x4, 0xd3a8, 0x7, 0x3, 0x4, 0x9, 0x0, 0x9a, 0xffff, 0xa3, 0x200, 0x6, 0x5, 0x7, 0x2, 0xfffffffd, 0x7, 0x69ea, 0x3ff, 0x7, 0x0, 0x6, 0x7, 0x3, 0x1e, 0x3, 0xad, 0x0, 0xedb, 0x1, 0x8000, 0x1, 0x9, 0x0, 0x6, 0x80000001, 0x5, 0x8f77, 0x8a, 0xfffffffc, 0x7, 0x8001, 0x6, 0x7, 0x1, 0xce78, 0x8, 0x2, 0x8ab1, 0x6, 0x0, 0x6c58000, 0x80000001, 0xf1, 0x2, 0xf, 0x961, 0x6, 0x7fffffff, 0xe, 0x794e4d91, 0x7fffffff, 0x0, 0x8, 0x0, 0x4, 0x8, 0x9, 0x10000, 0xfffffff9, 0x7, 0x9, 0x0, 0x6, 0x800, 0x400, 0xf218, 0x10001, 0x6d15e0cc, 0x4, 0x4, 0x5, 0x70, 0x2, 0x47, 0xb7, 0x1, 0x6, 0x8, 0x7fffffff, 0x8, 0x9, 0x7, 0x7, 0x4, 0xffffffff, 0x5, 0xff, 0xffff, 0x2, 0x7, 0x5, 0x401, 0x12, 0xffff, 0x5, 0x7f, 0x0, 0xd1ba, 0x7ff, 0x412, 0x4, 0x3, 0x4e4b, 0x34, 0x7, 0x0, 0xbe, 0x8, 0x8, 0xb, 0x2b78, 0x7, 0x9, 0xc, 0x8, 0x7, 0xbc, 0x6, 0x1, 0xc, 0x400, 0x5, 0x0, 0x80000001, 0x97c5, 0x80000000, 0x3768, 0x442, 0x8, 0xc, 0x2, 0x7f, 0x6, 0x5, 0x7ff, 0x0, 0x4, 0xca, 0x7, 0x9e5b, 0x6, 0x5, 0x200, 0x9, 0x6, 0x4, 0x10001, 0x4, 0x8001, 0x7ff, 0x8, 0x1, 0xcb, 0x0, 0x0, 0xf, 0x5, 0x1, 0x1, 0x4740, 0x6, 0x3, 0xaefb, 0x2, 0x2cef, 0x1, 0x9, 0xb8c8, 0x200, 0x3, 0x1, 0x9, 0x3, 0x1, 0x8, 0x7, 0x3, 0x0, 0x0, 0x41, 0x0, 0x7, 0x2, 0x5, 0x3, 0x7, 0x4ae4, 0x8000, 0x1, 0x3, 0x382, 0x5cf, 0x100, 0x5b, 0x4, 0x8001, 0x1, 0x32a, 0x5, 0x3, 0x1, 0x101, 0x5, 0x0, 0xf586, 0xff, 0x3, 0x2, 0x3, 0x800, 0x10, 0x6, 0x9, 0xffffffff, 0x80000000, 0x7, 0x1, 0xe, 0x200, 0x4, 0x1, 0x7, 0x80, 0xa4, 0x9, 0x66c, 0x1, 0x2, 0x5, 0x0, 0x6, 0x7, 0x100, 0x3ff, 0x3, 0x8, 0x81, 0x6, 0x1, 0x1, 0x992, 0xa]}]]}, {0x2f, 0x6, "528ad930266a7f4d658c4bf012ea4b64a02997d834f8849ddfb7193f4b8fc72b272dbac31254b533d19825"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0x238, 0x1, [@m_vlan={0x30, 0xb, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_simple={0x13c, 0x15, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x15082f4c, 0x4, 0x7, 0x1, 0x1371}}, @TCA_DEF_DATA={0xc, 0x3, '::+${,(\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x7, 0x3, 0x3a, 0x400}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0xcb, 0x6, "f2b6c17fe2aed2bda76d2fa5695eb1569fa6a24baaf79ada4df489c8ea7cb5e1f03d51d853efcda04be2a0c102daad8335a997400ba5a1546d17906cb3024fe41e938a1a059e0f1dac617322fcb9a05a1736ce2ced88330fd134e8c0ae7fb1f617b9d0429c6aa98add7b7571a5dd169b65b5d1647e20924e3d35d98942c3e467d7144179a27ed35cf09e7523318c4d823ddab977b8d29d6049684ccca63838e68eac76a0889c39f771a152d6895c430fbb63fac430b3a841afaa386bd8d6ba7e674c97df1fab26"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0xc8, 0x13, 0x0, 0x0, {{0xb}, {0x68, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, ']:^\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x7fff, 0x8, 0x4b, 0x28000}}, @TCA_DEF_DATA={0x12, 0x3, 'memory.events\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7ff, 0x9c, 0x10000000, 0x0, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x8, 0xffffffffffffffff, 0xe, 0x6}}]}, {0x35, 0x6, "437d451c32af55f5ee7ea50c49d9d59b39456ceaa4caaf59796563934c5417999ba9ad6609c5c6d8bd33f2d414481eff5e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x11ec, 0x1, [@m_mirred={0x110, 0x19, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000001, 0x1, 0x8, 0xc, 0x10}, 0x4}}]}, {0xc3, 0x6, "0e35dd7bda0207c9407fb4b5b081d974e2b984ac50c031d632aa13f6063560506a14a169ed9567eb52be8058f0e4cb109d1f879889e8ea69c8ea3bd316a12f88b4ad18fabce7670d4632bb3fa9b0c2d376105ee4261e26a5ab24319ece4b1815241365fed4c4eca93da5b6d96e9456990b004fa0d78f40a7e7f75d0b44d0867790451e1d710ad216959c39352c25c4b20518e3733a3055ef8db4a236362cdefd3c4a06a18c5b653fd7c71d0995fe9f172164ec8ef1413ce8a22e155e3d0728"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0x10d8, 0x6, 0x0, 0x0, {{0x7}, {0x1058, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x81}, @TCA_IPT_TARG={0x102a, 0x6, {0x8c, 'raw\x00', 0x8, 0x7, "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"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x81}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x5a, 0x6, "4128e1d4ac3f22c3c9aa4b75cfc74866cbb4560d327e1cdc69773d79e57da7a39036b76fd5018b5d3f0f575271c8516385a42901c7c54d8baeeb8ab9039aa4e53b41ca9adafd227a2f5a71abe8dc98ecb6696d12e469"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x2b10}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f0000000500)=""/16, 0x0, 0x10, 0x1}, 0x28) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c000c801400"], 0x68}, 0x1, 0x0, 0x0, 0x20008080}, 0x24040800) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, r9, 0xa3406000) setsockopt$inet_tcp_int(r8, 0x6, 0x9, &(0x7f0000000140)=0xfb78, 0x4) 4m2.552557325s ago: executing program 0 (id=5141): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) bind$llc(r3, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) socket(0x1, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r3, 0x40086e81, &(0x7f0000000100)=0x30) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="05000000010000", 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) recvmmsg(r5, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000740)=""/147, 0x93}, {&(0x7f00000008c0)=""/237, 0xed}, {&(0x7f00000009c0)=""/73, 0x49}, {&(0x7f0000000a40)=""/227, 0xe3}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000040)=""/128, 0x80}, {&(0x7f00000000c0)=""/19, 0x13}], 0x8}, 0xfffffffd}], 0x1, 0x2000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000000000000010080030900010073797a300000000008000240000000012c000000030a010100000000e4000000010002000900010073797a30000000000900030073797a320a05000000000000000000010000050c00024000"], 0xa8}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r6, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 3m47.378211648s ago: executing program 33 (id=5141): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) bind$llc(r3, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) socket(0x1, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r3, 0x40086e81, &(0x7f0000000100)=0x30) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="05000000010000", 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) recvmmsg(r5, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000740)=""/147, 0x93}, {&(0x7f00000008c0)=""/237, 0xed}, {&(0x7f00000009c0)=""/73, 0x49}, {&(0x7f0000000a40)=""/227, 0xe3}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000040)=""/128, 0x80}, {&(0x7f00000000c0)=""/19, 0x13}], 0x8}, 0xfffffffd}], 0x1, 0x2000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000000000000010080030900010073797a300000000008000240000000012c000000030a010100000000e4000000010002000900010073797a30000000000900030073797a320a05000000000000000000010000050c00024000"], 0xa8}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r6, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 4.302381994s ago: executing program 6 (id=6759): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x6536d5ef40a93735}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x8}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x74, 0x0, 0x1000, 0x1d007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xffffffffffffffff}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000012c0)=ANY=[@ANYBLOB="28acb8356f000100000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="0c0002800800e900", @ANYRES32, @ANYBLOB="04000180"], 0x28}], 0x1, 0x0, 0x0, 0x4040}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x6536d5ef40a93735}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x8}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x74, 0x0, 0x1000, 0x1d007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xffffffffffffffff}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000012c0)=ANY=[@ANYBLOB="28acb8356f000100000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="0c0002800800e900", @ANYRES32, @ANYBLOB="04000180"], 0x28}], 0x1, 0x0, 0x0, 0x4040}, 0x0) (async) 3.980507403s ago: executing program 6 (id=6761): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="ac009f3e573c54eb6d0000", @ANYRES16=r1, @ANYBLOB="0702000000000000000001000000840008803c00078008000600ce0000000800050030f8433308000500fda9a47d080006004100000008000600f0000000020006000300000008000600b40000001c00078008000500ef12443c000005002e164530080006005d00000014000780080005006db6d1210800050025590b6d1400078008000600870000000800050025bb6a230400048008000100030000000800020001000000"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.919181824s ago: executing program 6 (id=6763): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x2e, 0x0, 0x0]}}, 0x0, 0x51, 0x0, 0x1, 0x2}, 0x28) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x160, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x270, 0x3a8, 0x3a8, 0x270, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0xffffffff, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xff000000], 'vlan1\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x87, 0x0, 0x0, 0x4}, 0x0, 0x118, 0x160, 0x700, {}, [@common=@inet=@length={{0x28}, {0x401, 0x6}}, @common=@unspec=@limit={{0x48}, {0x9, 0x9000000}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@inet=@socket1={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x5, 0x5, 0x1, 0x8, 0xffff, 0x6, 0x6]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000001a40)={0x0, r0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001bc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001b40), &(0x7f0000001b80)}, 0x20) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000001d00)={0xffffffffffffffff, &(0x7f0000001c00)='socket\x00', 0x20040, &(0x7f0000001c40)={@_ha_fsid={[0x6, 0x80000000]}, {0x30, 0x6, 0x9, 0x1}}, 0x2, &(0x7f0000001c80)={@_ha_fsid}, &(0x7f0000001cc0)=0xff}) listen(0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r5, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x20, 0x30, &(0x7f0000001d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2000}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x243}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xb}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fd}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) write(r8, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) splice(r6, 0x0, r7, 0x0, 0x6, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000900d48fd6ee000e07000000010000000a0000000000000203000000000000000500000d00000000060000000300000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x1, 0x38}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r9, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) write$cgroup_devices(r7, &(0x7f00000000c0)=ANY=[], 0x6) 2.703760109s ago: executing program 1 (id=6776): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000540)={&(0x7f0000000200), 0xc, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="dc9e0000", @ANYBLOB="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", @ANYRES64=r2], 0xdc}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028005002d00200000001ef540574773755e5e48dc7edb27394d97ad76e9d5a0bfc624177363d041a1d277a0385d27eae1b70fb6"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000000080)) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4c854}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000f702010100000000000000000500ab930800044000005932280002800600034000010000060003400005000004000180080001000a010100"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_LEAVE_OCB(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000978e6a2ae5e62d0e93f7fc62c2f5ca2abfe782ef25bc05ce18fa07bdd256c69512ebc0", @ANYRES16=r6, @ANYBLOB="040026bd7000fddbdf256d000000"], 0x14}}, 0x20008894) bind$inet(r7, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24}, 0x24}}, 0x0) recvmmsg(r9, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000800)=""/21, 0x15}], 0x2}}], 0x2, 0x0, 0x0) sendto$inet(r7, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x13a0}, 0x1, 0x0, 0x0, 0x20000045}, 0xc000) 2.267702254s ago: executing program 3 (id=6783): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000800000000000000000000711033000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x58, &(0x7f0000000040)}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)=@generic={&(0x7f0000000580)='./file0\x00', 0x0, 0x8}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)='%-5lx \x00'}, 0x20) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@o_path={&(0x7f0000000700)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1c, 0x9, 0x40, 0xa, 0x2000, r1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x1, &(0x7f00000000c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000300)='syzkaller\x00', 0x401, 0x80, &(0x7f0000000480)=""/128, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, r2, 0x8, &(0x7f0000000500)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x4, 0xffffffff, 0xc9}, 0x10, 0xffffffffffffffff, r3, 0x2, &(0x7f0000000880)=[r1, r1, r4, r5, r6, r1, r7, r8, r1], &(0x7f00000008c0)=[{0x3, 0x4, 0xc, 0xa}, {0x2, 0x4, 0x7, 0x2}], 0x10, 0x9}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'erspan0\x00', &(0x7f00000009c0)={'sit0\x00', 0x0, 0x80, 0x7, 0x0, 0x0, {{0x25, 0x4, 0x0, 0x32, 0x94, 0x64, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @private=0xa010100, {[@lsrr={0x83, 0xb, 0x1d, [@local, @local]}, @end, @cipso={0x86, 0x31, 0x3, [{0x5, 0xc, "6ac006799cf336de5a28"}, {0x0, 0x2}, {0x2, 0xb, "96120a306721b17182"}, {0x2, 0x12, "ad6e62230000000020000003428742c8"}]}, @timestamp={0x44, 0x20, 0xd3, 0x0, 0x3, [0xf27, 0x4, 0xff, 0x0, 0x6, 0x80000001, 0x2]}, @generic={0x86, 0xd, "06453abe682c26da50e0b0"}, @lsrr={0x83, 0x13, 0x46, [@multicast2, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000380)={0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x3, '\x00', r9, r10, 0x4, 0x1, 0x1}, 0x50) 2.221423746s ago: executing program 3 (id=6784): socket$inet_icmp(0x2, 0x2, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000180)={0x0, 'bridge0\x00', {0x4}, 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x29}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4004}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) readv(r4, &(0x7f0000000380)=[{&(0x7f00000014c0)=""/4118, 0x1016}], 0x1) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$nl_route_sched(r5, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=@newqdisc={0x17c, 0x24, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffff}, {0xfffb, 0x3}, {0xffff, 0x3}}, [@TCA_RATE={0x6, 0x5, {0xc9}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3ff}, @TCA_STAB={0x148, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x9, 0x0, 0xa02, 0x0, 0x2d0, 0x5, 0x9}}, {0x16, 0x2, [0x2, 0x1ff, 0x8000, 0x7, 0x5, 0xffff, 0x48b8, 0xfbff, 0x5]}}, {{0x1c, 0x1, {0x7, 0x4, 0x1, 0x7, 0x1, 0x2, 0x8, 0x2}}, {0x8, 0x2, [0x0, 0x6]}}, {{0x1c, 0x1, {0xaa, 0x4, 0x9, 0x2, 0x0, 0x1, 0xffffffff, 0x6}}, {0x10, 0x2, [0x7, 0x245, 0x3, 0x0, 0x1ff, 0x4214]}}, {{0x1c, 0x1, {0xa, 0x7, 0xe, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x1d9, 0x258, 0x8903, 0x4, 0xfff]}}, {{0x1c, 0x1, {0x3c, 0xa8, 0xe, 0x4, 0x1, 0x3, 0x3, 0x2}}, {0x8, 0x2, [0xa4, 0x4]}}, {{0x1c, 0x1, {0x2, 0xd, 0xa0, 0x7, 0x1, 0xfff, 0x3, 0x2}}, {0x8, 0x2, [0x7fff, 0x8]}}, {{0x1c, 0x1, {0x2, 0x4, 0x8, 0x2, 0x2, 0x2, 0x4, 0x2}}, {0x8, 0x2, [0x1ff, 0x2]}}, {{0x1c, 0x1, {0x8, 0x1, 0x2, 0x3, 0x2, 0xb, 0x3d98, 0x4}}, {0xc, 0x2, [0xae, 0x8, 0x2, 0x0]}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20000054}, 0x20000000) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r2, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) r10 = socket(0x2a, 0x2, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x2070bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r11, {0x6, 0x10}, {}, {0x8, 0xffe0}}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00'], 0xfe33) gettid() 2.18925639s ago: executing program 2 (id=6785): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xd, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000063060000bca30000000000002403000020fef6ff720af0fff8ffffff71a4f0ff000000001f030000000000002e100200000000002604f8ffffff000014010000630000001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000093bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98dde20358d1148272abd23da767f8c549ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb46ffffffffffffff7f1569b33d21dae356e5c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d22891202d0f5ad94b081fcd507acc9b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb9439901fb39f1d78aa60ead1883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10880fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1b9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa2000000000000000906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000fbff00ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554b15dca5f77a08a83431a87881fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f783e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bcb0addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43737a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab7493c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a44434600e64a6a274000000000088b3e63a000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e727bf10d6335332f45b8e87383930f1a4724434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc946acfb3d1a56e9ec13ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdce1f7ffffffffffffcf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b338a59c0c0247bc9412e19204caaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af11210200000000000000484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea170ab651a039d7102923e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b187ab8e0d179e6ad0dc758975e9cf77f703e742b77521149d8fdeae4b92d5edc232ca356fb86784b865adda7c921dc475276837b2619922de4d96850172602fac7d165e32419a622bdef7c91385c87c30b8a144d9b01784a8060670455f76b207517f66cf32fa0772975e0963b7373dba424beadf60d5bd08ea73e2b5620a5754455006934679b10e596821e2bd380d472c9096ca4c55d6106d0b88e38f6c54abc952c81617a06f93465241070fea3d9fc786e2625572ff2068ff84361b3883cc2c8b9a0a2f70119db13b47c924c73216bb12d1e68a03a08aa682ede113691db07b50f5e6fde6252f1520c"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff1c, 0x10, &(0x7f00000000c0), 0xfffffffffffffeb3}, 0x48) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x3}, 0x80, 0x0}, 0x20000810) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x21, 0x1, 0x81) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 1.640152097s ago: executing program 5 (id=6789): r0 = socket(0xa, 0x3, 0x87) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) socket$inet6_sctp(0xa, 0x0, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf28, 0x0, 0xf, 0xfffffffffffffee3, 0x0, 0x0, 0x2, 0x0, 0x80}, 0xfffffd86) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @remote}, 0x80, r2}) socket(0xa, 0x3, 0x87) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00'}) (async) socket$inet6_sctp(0xa, 0x0, 0x84) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf28, 0x0, 0xf, 0xfffffffffffffee3, 0x0, 0x0, 0x2, 0x0, 0x80}, 0xfffffd86) (async) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @remote}, 0x80, r2}) (async) 1.591478893s ago: executing program 3 (id=6790): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) (async) r0 = socket(0x2, 0x80805, 0x0) (async) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10) sendmmsg$inet(r1, &(0x7f0000000540)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)="01", 0x1}], 0x1}}], 0x1, 0xc000) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'erspan0\x00', 0x0}) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r4, 0x89a3, &(0x7f0000000200)='bridge0\x00') (async) r6 = socket$inet(0x2, 0x80001, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a000040000000000000000005001600001b000008001700", @ANYRES64], 0x2c}, 0x1, 0x0, 0x0, 0x20004894}, 0x20000080) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES64=r3, @ANYBLOB="05042fbd7000ffdbdf250100000008000100", @ANYRES32=r9], 0x5c}, 0x1, 0x0, 0x0, 0x4000401}, 0x400e8c0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000003c0)={r10, 0x0, 0x20}, 0xc) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x0, &(0x7f00000001c0)}, 0x10) 1.524442594s ago: executing program 2 (id=6791): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x25, &(0x7f00000002c0), 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x6a342, 0x0) write$tun(r2, &(0x7f0000000300)={@val={0x0, 0x8906}, @val={0x0, 0x80, 0x200, 0x3, 0x4, 0x1ff}, @mpls={[{0x0, 0x0, 0x1}, {0x15d, 0x0, 0x1}, {0x2, 0x0, 0x1}], @ipv4=@generic={{0x1b, 0x4, 0x0, 0x8, 0x16a, 0x64, 0x0, 0x8, 0x2e, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x34}, {[@cipso={0x86, 0x3b, 0x1, [{0x0, 0x11, "96838f73a3529f4ec941b56c776909"}, {0x2, 0xb, "97e6933ac905e197aa"}, {0x1, 0x11, "bb1b0f588c6a1c6723f213cf047b3b"}, {0x4, 0x8, "2032bac38eba"}]}, @timestamp_addr={0x44, 0x4, 0xb2, 0x1, 0x5}, @timestamp={0x44, 0xc, 0x86, 0x0, 0x6, [0x4000000, 0x32d]}, @timestamp_prespec={0x44, 0xc, 0x82, 0x3, 0x1, [{@broadcast, 0x3}]}]}}, "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"}}}, 0x184) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000100)={0x60, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @private1, 0x18d}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x60}}, 0x810) 1.475878608s ago: executing program 1 (id=6792): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x49, 0x0, &(0x7f0000000580)) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="3f0bafc2d20453cb82fcb9dbfa0915fabf893e99e5edc278b388d1d4b8770312d74d89dac57a8be006ab4074e934f57d635c05c6b9d1b126e976a7dc074e2b6a3c34e164870afbbb211d57f3d882a2291ffc9adce2a041446dfd032b938f556342dc9c0188a43b94760b1e63d2d9ee87f4e1533ae5fb4a049846b28ebb3e5e78f00640c6c3a344216fbea97cf945c3e011fed20deff7f3cb25c0548dfc2d1217634922d4adc46509d0a2139853beabf83ba7c626f111ecb5", @ANYRES8=r0], 0x50) r2 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x4e23, @broadcast}, 0x10, &(0x7f0000001080), 0x0, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3b, 0xc9000000}}, @ip_tos_u8={{0x11, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @loopback}}}], 0x50}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a30000000004c000000030a010200000000000000000a0000000900010073797a30000000000900030073797a31000000000a000700736f757465000000140004800800014000000000080002"], 0x94}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000346945718464a5c3e3a8bcf54edd6d5200"/36, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000850000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000e8ff0000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r6 = socket$pppoe(0x18, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x40) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01070000000000100000670000000800c30000"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x17, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000380)={0x0, @aes256, 0x0, @desc4}) r11 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1f0}}, 0x0) sendmmsg(r6, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 1.3415593s ago: executing program 3 (id=6793): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a02"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000a00000300000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000001"], 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FIOCLEX(r2, 0x5451) (async, rerun: 64) close(0x3) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112bd000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) 1.328273406s ago: executing program 5 (id=6794): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007d0800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x31}, 0x94) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/49, 0x31}, {&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000180)}], 0x3) 1.318594693s ago: executing program 2 (id=6795): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000500000000000000000000001801000020207025000000000e0000000000000000000000bfa100000000000007010000f8ffffffb702000005000000b70300000010000085000000720000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r2 = socket(0x2, 0x80802, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4000004, &(0x7f0000000380)={0xa, 0x4e20, 0x5, @empty, 0x101}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005f40), r6) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="19022bbd7000fedbdf0921000000050020000000000009001f00000cc119ea"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4080) r8 = socket(0x1e, 0x4, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0xf0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) connect$netlink(r0, &(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000}, 0xc) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000080), &(0x7f0000000180)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r8, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@ifindex=r9, r3, 0xe, 0x10, 0x0, @void, @value=r4}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000001680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001640)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a00000000000000000000070000090900010073797a30000000000c000b400000000000000005100011800b00010074617267657400001c000000020a06010000000000000000020000020800024000000001140000001100010000800000000000000100000a"], 0x80}}, 0x2400800c) 1.129955313s ago: executing program 3 (id=6796): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b45c33a47d3a158da980000000000000bea6f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f00000002c0)=[@assoc={0x0, 0x117, 0x4, 0x5e}], 0xa}], 0x1, 0x4008880) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0xf0ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) 1.129738718s ago: executing program 5 (id=6797): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000480)={@multicast, @random="0100000000c9", @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "d82b06", 0x8, 0x0, 0x0, @private2, @mcast2, {[@hopopts={0x29}]}}}}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) (async) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000840)={0x0, 0xfffffebb, &(0x7f0000000280), 0x48}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200fffe2400048020000180070001006374000014000280080002400000000d08000440000000060900010073797a30000000000900020073797a3200"], 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1.064083635s ago: executing program 1 (id=6798): setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000000)=0x20, 0x4) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x80000) sendfile(r0, r1, &(0x7f0000000140)=0x80000001, 0x401) (async) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = socket(0x2, 0x1, 0x8) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000880}, 0xc, &(0x7f00000007c0)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0xa8, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x68, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'syz_tun\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0x29, 0x7, 0x1, 0x0, "a460233af6153dd297d102bad339bb2a256fd4f04ca532c3ecfec668c8c184e429825a7030"}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xdada}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8914}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8906}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xdada}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELCHAIN={0x68, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELTABLE={0x13c, 0x2, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xdf, 0x6, "7962b91e80b99bc6197051c3c474e59561b0e9b95b05ae5d3b3e34b0ab5615f96539b91981c8218936315f07036440f97516b1a3c879126a656e30308ef8bdc04103a2ef1567fb507303f279ed0ec8ab8f4701eeb1f59aa063581be35dc7573e4d3ecd0867795732015ee36373a44c87f813f434af11d56d992cfc2bd5f59049707e8b46e414bc7c0df9e0087d99d7cdfb13a26a6e661f1e1de8b9366e852bd58eb2452e16d7f3a08abf23e51cdf247b6cf909297b61867bc62705e7716626ce46504ce2ae738cd5e83beb5f59f1d7aaf5120f6fd8162824c68af1"}]}, @NFT_MSG_NEWFLOWTABLE={0x294, 0x16, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0xfc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x36e8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'macvlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xbba1}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'xfrm0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0xd844afa3171b64a0}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x158, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'lo\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5d0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) (async) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000840)=0x5, &(0x7f0000000880)=0x2) (async) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f00000008c0)={r5, 0x7, 0xfb7, 0x8}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r4, 0x5000940e, &(0x7f0000000900)={{r7}, "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"}) (async) close(r6) (async) ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, &(0x7f0000001900)={0x14, 0x89, 0x1061, 0xff}) (async) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001940)) ioctl$OCFS2_IOC_MOVE_EXT(r2, 0x40406f06, &(0x7f0000001980)={0x6, 0x3, 0x3, 0x7ff, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_netfilter(r4, &(0x7f0000001e40)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0xa1000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001a00)={0x3c8, 0x12, 0x1, 0x801, 0x70bd27, 0x25dfdbfe, {0x5, 0x0, 0xa}, [@nested={0xa5, 0x82, 0x0, 0x1, [@generic="da24211353015cda8f6b16f7080188b4a4bd3d22a4bdf3a6286ba9fb150391c43a7903674d5244eb8b68717d45646c07ee7739058b7d60138a0184457a8f6a3076e61604dc18302872d1bb1aad1809c21707295782cffd21ecc6573fb3889aa8a600fbdd1ff6e95d2610f3bc53b816d32aba3921427341edeca5d6e2c095a2f5fecf8a9027ecdaa1da7cd932875dd729e2e8eaf9a939028229d6bcf1c9", @nested={0x4, 0x5f}]}, @typed={0xf0, 0x36, 0x0, 0x0, @binary="a50eb377a670e36e44d9247ad56d761b966984d73f95aaf9a8e2cbae9e496b10fbeba82bfee4495eeb1abd6ac365cd0dd9253855836fa4ab816b02a3ea51751bb45e70ca7252eee0db83ac98ca2f224071a66bc4a0fc17a1f4e1d32ca5f5bbd75ca1e6551d5e66f40b977a6d9622decb89515da0ae98c30699c2f72df5c13ea68b4590d49f2486ffe1b3d4904a0888850b3b970c693149f1ac21bcdc75a3bbd034b3ee9e4cd5203ff4d21d0be3b0dabfc47f161c972676cf6ce8c67fa151b408088526c29aa24d80d9d4e50381108bf48b90907e1f9925a6946bcf72298217d7c96e00b0d8699e26acc75136"}, @generic="bac769c2c037f8b0ad38a4973176d9509c8519a92621545639adee3212d32265463866c6b04e63e35926a6afec1988e483319865017a3d024debcf33d26ae84b3dc9b8f4b3a126478a99818ddafeba1bff1c96588ecf368ed9db01d52a1ad18ad61ee3b0686473964cef38861e5d9f7bc2185dbb2df50461c9ae8b454ab8074f79f5ba4b58f452e58bd364a00b61292868f85d99fe945a2837229d33006a4f130bd4d9e5f11324aef61554988bcb718fd871308b449df309fb4c478b9bc3d1bd68935c89f7c4fde77946768dabefc2554451969b8ec421b0d451e813", @generic="748d143ad3a8d9fd3ae7700406560583f5c10765359d02bec4934144e59dc5efd23118b801c121f5a9e93efc9fe5cc38c48561c7659fdf2de20dd3499853842ef024c73f52cb689595432553c515d368c55a4408f156d73a3e8434a37fe27377600e6619835faab33f8477c28c", @typed={0xc, 0x80, 0x0, 0x0, @u64=0x134}, @generic="9a8c811a501b2e93f8ac98c1d02884027d8fc61fad3d9811225dafa2b4c6235301ae07b4d5d8d01067f8f75646a4af7a78d904aa430e104f4e3832aee487627dec67014480005dcc2174134fb4c9c0dd7d26c8c5cd97d046c14577d9fc72dc54796d482c387ec635a1410263f765b81285f1c27e035c78550f68545835411ff6f2e959a2278618ddc91326b95a3ffd492c39c0d3898cd2cb31788d8c61411b012b39ae274a237ba009e5ffb5d279de707eedd841b5f313b4cceed65ea94c4fe11d883e340b"]}, 0x3c8}, 0x1, 0x0, 0x0, 0x20040010}, 0x10) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000001e80)={'geneve0\x00', 0x9910}) (async) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000001ec0)=""/223, &(0x7f0000001fc0)=0xdf) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000002000)=0x1020018, 0x4) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000002080), r7) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000002180)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x5c, r8, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000002200), r3) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x1c, r9, 0x4, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x603f7856340ab3f8) (async) socket(0x3, 0x3, 0xfffffff9) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000002300)=0xffffffffffffffff, 0x12) (async) accept4$unix(r0, &(0x7f0000002340), &(0x7f00000023c0)=0x6e, 0x800) 994.550259ms ago: executing program 5 (id=6799): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x8}, {0x4}}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x30, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8884}, 0x24000840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000180)={{0x2b, @remote, 0x4e21, 0x2, 'none\x00', 0x20, 0x4d2, 0x30}, {@multicast2, 0x4e22, 0x2, 0x6, 0xd3, 0x2}}, 0x44) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) 933.927894ms ago: executing program 2 (id=6800): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffffffbfffff8000, 0x8) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x4c02}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r5, 0x1) readv(0xffffffffffffffff, &(0x7f0000000080)=[{0x0, 0x500}, {&(0x7f0000000980)=""/4096, 0x734}], 0x2) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1000000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8, 0x1000000}, 0x10) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000180)=0x4412, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000cb18000000000000000000000200000a80000000060a010400000000000000000a0004050900010073797a310000000054000480500001800a000100696e6e6572000000400002800800044000000012"], 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) socket$nl_route(0x10, 0x3, 0x0) 875.907337ms ago: executing program 1 (id=6801): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x81000000) socket$kcm(0x10, 0x2, 0x0) (async) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e00000011008188040f80acbc000000000000f1000a000f000000028002002d1fb664ad3f48b9e0a8c300000000000000000000e2", 0x35}], 0x1}, 0x8c1) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000344000480400001800e000100627974656f726465720000002c00028008000140000000130800024000000000080004400000009b080003400000000108000540000000020900010073797a30000000000900020073797a32"], 0x98}}, 0x44800) 794.47606ms ago: executing program 6 (id=6802): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000003c0)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000340)={'bridge_slave_1\x00', 0x1}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100ffffffff00004000010000000500070000000000080009000000001014002000000073a92cd3d6d76a3af15e880000000000000000ffff0000001108000a000000000014001f00000000000000000000000000000000000600020000"], 0x64}, 0x1, 0x620b}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01"], 0x3c}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r11, &(0x7f0000000040), 0x0}, 0x20) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32, @ANYBLOB="000014000a000100aaaaaaaeaaaa000008000f00010000003e11859a3351e595fc6522303ecd2fe041"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 770.879876ms ago: executing program 1 (id=6803): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) (async) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0xb, 0x40, 0x0, 0x6, 0x2, 0x0, 0x4, 0x16}, &(0x7f0000000280)={0xd5, 0xcde1, 0x8, 0x0, 0x1, 0x1, 0x9, 0x5}, &(0x7f00000002c0)={0x4, 0xffffffffffffffff, 0x7fffffffffffffff, 0xffffffffffffffff, 0xf82, 0x1, 0x6, 0x1}, &(0x7f0000000300)={0x0, 0x989680}, &(0x7f0000000380)={&(0x7f0000000340)={[0x4]}, 0x8}) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x7, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x9d2, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0x1, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0x1000, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x7, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x9d2, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0x1, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0x1000, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) socket(0x400000000010, 0x3, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000006080)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xf, 0xf}, {}, {0xffff, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmmsg(0xffffffffffffffff, &(0x7f0000006600)=[{{0x0, 0x0, &(0x7f0000000140)}}, {{0x0, 0x0, &(0x7f00000065c0)}}], 0x2, 0x804) sendmsg$key(0xffffffffffffffff, 0x0, 0x4) (async) sendmsg$key(0xffffffffffffffff, 0x0, 0x4) r9 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x0, 0x0, 0x9}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) 655.834297ms ago: executing program 5 (id=6804): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async, rerun: 32) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xe0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) (async) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) sendmsg$NFT_BATCH(r6, 0x0, 0x40) (async) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r8 = socket(0x10, 0x803, 0x4) (rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) unshare(0xa020480) r10 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r10, 0x114, 0x6, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000001cb80)=@delchain={0x48, 0x2c, 0xf31, 0x80, 0x2000, {0x0, 0x0, 0x0, r9, {0xa}, {0xfff1, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0xffff}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008844}, 0x40000) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000001840)=0x4) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 362.770952ms ago: executing program 6 (id=6805): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000100)={0x60, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @private1, 0x18d}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x60}}, 0x810) 331.92016ms ago: executing program 5 (id=6806): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0x20}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42814}, 0x40084) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fffffff300000000ffffff80e500020000000000e500fcff00000000850000000200000095000000000000005b5e2e900bdddabda4ea282a7fd8ef1515eccd8e7b28a7f068db7bb69a67826fa4641b74ca4cf93d8bc9d059dce77ebee4728b55aa275624a4234b4f63"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 272.282663ms ago: executing program 2 (id=6807): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711217000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0a0000000000000000000006040098"], &(0x7f0000000f40)=""/4088, 0x3e, 0xff8, 0x1}, 0x28) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) recvmmsg(r2, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2102, &(0x7f00000042c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000008c0)={&(0x7f0000000000)="aaf3ca977d97", 0x0, 0x0, 0x0, 0xffff, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20000400) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448c9, 0x0) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x3e, &(0x7f0000000040)="d84f", 0x2) sendto$inet6(r8, &(0x7f0000000800)="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", 0x5a3, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x9, @mcast2}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r10, 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xbdef}], 0x300, 0x0, 0x4a}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) getpid() 266.658462ms ago: executing program 1 (id=6808): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x18) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='highspeed', 0x9) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000440)={0x0, 0x1, 0x0, 0x2, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, 0x0, 0x0, 0x10, 0x0, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000076c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0xfffe) sendto$inet(r2, &(0x7f0000000000)='<', 0xfffffffffffffe8a, 0x805, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet6(r2, &(0x7f0000000600)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000480)="ede32a13cb9f6f394810425b62821f816e440b91a2b5da11075c7b15d3f7245eb33de5b9d9aa8bbee2181576b788e604cfc3cc3a48e7e54f00482970b4dcad976e7531b0faa505f60b484b99caf2542c07fc553fdfb804d7463e19a67fd7ee055aa3855d53cf145afa57e52789b79bbbd6fc8002ae36d5e0dee044472cd977cea9df1f37958f67d20eef7540fd4c8dfc293d9bc88fb311c9ff0005fd9de04c32d87a7ccec7acc12dcdca", 0xaa}], 0x1, &(0x7f0000000580)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @dontfrag={{0x14, 0x29, 0x3e, 0x401}}, @dontfrag={{0x14}}], 0x48}}], 0x1, 0x1) writev(r6, &(0x7f0000000000)=[{0x0, 0x5d}, {&(0x7f0000000040)="ace4e81540a04f1171b08a13bb1b8f122d19fe2e8185b5334072d1c24e0a427f5af12595d503b031bba60e0a5a21d0e3d3be77ed1a7b7a96056d42a7f5cc1b699be0db7ea9c1df5bbaa50dcabcb4df1db4359515e8c93264845161f1c4cdb90eb8613809a21cd714660b3ac128de6498687740ad9acd6a5530fa7cfede1a16e1dedb81add6deb9ea88f2f4b0876eefe252990fd7316550d4a0b899db327717a5e0ffd6d2c96c7ae76d9b0f6c11", 0xad}], 0x2) 187.767022ms ago: executing program 6 (id=6809): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200087ad, &(0x7f0000e68000)={0x2, 0x4e20, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x700, 0x40, 0x7, 0x1, {{0x14, 0x4, 0x1, 0x35, 0x50, 0x64, 0x0, 0x9, 0x29, 0x0, @empty, @private=0xa010100, {[@cipso={0x86, 0x17, 0x3, [{0x7, 0x8, "8331c24af919"}, {0x2, 0x9, "3ddc4ccf2d7388"}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x10, 0x1, [{0x1, 0x6, "953503e7"}, {0x5, 0x4, "54a1"}]}, @noop, @cipso={0x86, 0xe, 0x2, [{0x5, 0x8, "3e4b672ce92c"}]}]}}}}}) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001600010a000000000000000a00750147f9599e9dced1e1b473babbe1d0f9d02499a638547f9dae1c5ab59f8b40d45754416e41282f8e086f45db62f9b473ebda0e5703a3"], 0x14}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis256-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) close(0x3) socketpair(0x26, 0x800, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet_sctp(0x2, 0x5, 0x84) close(r10) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d9d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b19773c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xdb}, {&(0x7f0000000840)="e8ab7eacd5f34db52559525720c42cad1a855f059cf9483a3211cee28a2aa1dd6d54b3613614be12ce2ff09231e36ffde9ddbf7adc041749add40efe3be9188e0f219d47ed3477eae85684a1fe6b9b11348fd19e5db06b9fab50a5233adbe8503f3354f8e87092d88beb483ed6336e43b7f4a9c56c80b918cd354a156e38b4a9b0e3ebd12de33210b242248d161881e8d0587c78da840fbcd94a968bee71881073187f98d8aa724596717d29f89da7d764a83844f83f7ab584f34c10f6edee85a938ebb4a9b35f58d96413c5", 0xcc}], 0x2, &(0x7f0000000740)=ANY=[@ANYRES16=r6, @ANYRES64=r8, @ANYRES16=r1, @ANYRESOCT=r11], 0x20, 0x6044}, 0x6) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000040)={r12, 0x40}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000100)={0xb, 0x5, 0x9068, 0x80, 0x101}, 0x14) 155.44697ms ago: executing program 3 (id=6810): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001600)={0x48, r2, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0xb00, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x4048080) 0s ago: executing program 2 (id=6811): r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x3, 0xfffffffd, 0x14, @mcast1, @mcast2={0xff, 0x3}, 0x8, 0xba08}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[], 0x5c}}, 0x20084884) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c}}], 0x20}, 0x12061) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}}) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x3}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0x8000}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x5, 0xfff3}}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0xc040) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="b40000000109010800000000000000000a0000090900010073797a3100000000080005400000001c08000540000000060900010073797a30000000000c00048008", @ANYRESDEC=r10], 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x880) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) kernel console output (not intermixed with test programs): 8 R14: 00007fa996a15fa0 R15: 00007ffc6e574c08 [ 691.205291][T26738] [ 691.210770][T26736] tipc: Enabled bearer , priority 0 [ 691.238690][T26738] syz.2.5626: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 691.483032][T26734] tipc: Resetting bearer [ 691.495034][T26738] ,cpuset=/,mems_allowed=0-1 [ 691.521160][T26738] CPU: 0 UID: 0 PID: 26738 Comm: syz.2.5626 Not tainted syzkaller #0 PREEMPT(full) [ 691.521178][T26738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 691.521188][T26738] Call Trace: [ 691.521194][T26738] [ 691.521200][T26738] dump_stack_lvl+0xe8/0x150 [ 691.521222][T26738] warn_alloc+0x249/0x340 [ 691.521247][T26738] ? __pfx_warn_alloc+0x10/0x10 [ 691.521267][T26738] ? __get_vm_area_node+0x13f/0x300 [ 691.521288][T26738] ? __get_vm_area_node+0x2b5/0x300 [ 691.521310][T26738] __vmalloc_node_range_noprof+0x38f/0x1750 [ 691.521331][T26738] ? __lock_acquire+0x6b5/0x2cf0 [ 691.521365][T26738] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 691.521383][T26738] ? __lock_acquire+0x6b5/0x2cf0 [ 691.521400][T26738] ? _parse_integer_limit+0x1ae/0x1f0 [ 691.521425][T26738] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 691.521447][T26738] __vmalloc_noprof+0xd2/0x120 [ 691.521465][T26738] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 691.521480][T26738] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 691.521497][T26738] bpf_prog_alloc+0x3c/0x1a0 [ 691.521511][T26738] bpf_prog_load+0x779/0x1a10 [ 691.521532][T26738] ? __pfx_bpf_prog_load+0x10/0x10 [ 691.521546][T26738] ? __might_fault+0xaf/0x130 [ 691.521573][T26738] ? bpf_lsm_bpf+0x9/0x20 [ 691.521585][T26738] ? security_bpf+0x7e/0x2d0 [ 691.521605][T26738] __sys_bpf+0x618/0x950 [ 691.521626][T26738] ? __pfx___sys_bpf+0x10/0x10 [ 691.521656][T26738] ? ksys_write+0x242/0x270 [ 691.521677][T26738] ? __pfx_ksys_write+0x10/0x10 [ 691.521699][T26738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.521714][T26738] __x64_sys_bpf+0x7c/0x90 [ 691.521733][T26738] do_syscall_64+0x174/0x580 [ 691.521749][T26738] ? trace_irq_disable+0x3b/0x140 [ 691.521770][T26738] ? clear_bhb_loop+0x40/0x90 [ 691.521787][T26738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.521802][T26738] RIP: 0033:0x7fa99679ce59 [ 691.521818][T26738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.521830][T26738] RSP: 002b:00007fa99762c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 691.521845][T26738] RAX: ffffffffffffffda RBX: 00007fa996a15fa0 RCX: 00007fa99679ce59 [ 691.521854][T26738] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005 [ 691.521863][T26738] RBP: 00007fa99762c090 R08: 0000000000000000 R09: 0000000000000000 [ 691.521871][T26738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.521879][T26738] R13: 00007fa996a16038 R14: 00007fa996a15fa0 R15: 00007ffc6e574c08 [ 691.521901][T26738] [ 691.521907][T26738] Mem-Info: [ 691.779546][T26738] active_anon:8955 inactive_anon:0 isolated_anon:0 [ 691.779546][T26738] active_file:3463 inactive_file:40511 isolated_file:0 [ 691.779546][T26738] unevictable:768 dirty:244 writeback:0 [ 691.779546][T26738] slab_reclaimable:13158 slab_unreclaimable:193364 [ 691.779546][T26738] mapped:31958 shmem:1302 pagetables:3629 [ 691.779546][T26738] sec_pagetables:0 bounce:0 [ 691.779546][T26738] kernel_misc_reclaimable:0 [ 691.779546][T26738] free:1199920 free_pcp:25641 free_cma:0 [ 691.830796][T26738] Node 0 active_anon:35848kB inactive_anon:0kB active_file:13852kB inactive_file:161840kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:91060kB dirty:1040kB writeback:0kB shmem:3672kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16072kB pagetables:14256kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 691.866542][T26734] tipc: Disabling bearer [ 691.873340][T26738] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36864kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 691.916659][T26738] Node 0 DMA free:11248kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 692.003635][T26738] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 692.010991][T26756] sctp: [Deprecated]: syz.1.5631 (pid 26756) Use of int in max_burst socket option. [ 692.010991][T26756] Use struct sctp_assoc_value instead [ 692.025692][T26738] Node 0 DMA32 free:1221036kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35648kB inactive_anon:0kB active_file:13852kB inactive_file:161840kB unevictable:1536kB writepending:1040kB zspages:0kB present:3129332kB managed:2552552kB mlocked:0kB bounce:0kB free_pcp:38668kB local_pcp:18840kB free_cma:0kB [ 692.025758][T26738] lowmem_reserve[]: 0 0 0 0 0 [ 692.025798][T26738] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 692.025849][T26738] lowmem_reserve[]: 0 0 0 0 0 [ 692.025889][T26738] Node 1 Normal free:3581496kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:57736kB local_pcp:27712kB free_cma:0kB [ 692.025950][T26738] lowmem_reserve[]: 0 0 0 0 0 [ 692.025990][T26738] Node 0 DMA: 0*4kB 2*8kB (U) 2*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11248kB [ 692.026151][T26738] Node 0 DMA32: 9661*4kB (UM) 7024*8kB (UME) 3818*16kB (UM) 502*32kB (UME) 632*64kB (UME) 998*128kB (UME) 739*256kB (UME) 345*512kB (UME) 269*1024kB (UM) 117*2048kB (UM) 0*4096kB = 1221076kB [ 692.026312][T26738] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 692.026432][T26738] Node 1 Normal: 12*4kB (U) 19*8kB (UM) 21*16kB (UM) 13*32kB (UM) 12*64kB (UM) 11*128kB (UM) 8*256kB (UM) 5*512kB (UM) 4*1024kB (UM) 3*2048kB (U) 870*4096kB (UM) = 3581496kB [ 692.248132][T26738] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 692.253467][T26752] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 692.272886][T26738] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 692.305027][T26738] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 692.332771][T26738] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 692.377779][T26738] 45272 total pagecache pages [ 692.405984][T26738] 0 pages in swap cache [ 692.426699][T26738] Free swap = 124996kB [ 692.443525][T26738] Total swap = 124996kB [ 692.459218][T26738] 2097051 pages RAM [ 692.470697][T26738] 0 pages HighMem/MovableOnly [ 692.490078][T26738] 427130 pages reserved [ 692.500026][T26738] 0 pages cma reserved [ 692.707419][T26784] netlink: 'syz.6.5640': attribute type 1 has an invalid length. [ 692.720470][T26784] __nla_validate_parse: 4 callbacks suppressed [ 692.720488][T26784] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5640'. [ 693.029240][T26787] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.036952][T26787] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.120782][T26787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 693.129941][T26798] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5643'. [ 693.147098][T26787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 693.534166][T26811] lo speed is unknown, defaulting to 1000 [ 693.572255][T26817] netlink: 'syz.1.5650': attribute type 7 has an invalid length. [ 694.111841][T26842] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5661'. [ 694.125588][T26842] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5661'. [ 694.144803][T26842] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5661'. [ 694.163666][T26840] net_ratelimit: 1 callbacks suppressed [ 694.163681][T26840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 694.197669][T26844] netlink: 'syz.5.5663': attribute type 1 has an invalid length. [ 694.229149][T18127] block nbd1: Receive control failed (result -32) [ 694.338619][T26847] bond3: (slave bridge1): making interface the new active one [ 694.384512][T26847] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 694.422418][T26856] netlink: 'syz.6.5665': attribute type 3 has an invalid length. [ 694.445196][T26856] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5665'. [ 694.543749][T26861] nft_compat: unsupported protocol 0 [ 694.581288][T26813] lo speed is unknown, defaulting to 1000 [ 694.593805][T26858] netlink: 'syz.3.5666': attribute type 12 has an invalid length. [ 694.866917][T26857] block nbd3: server does not support multiple connections per device. [ 694.925978][T26857] block nbd3: shutting down sockets [ 694.960115][T26871] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5670'. [ 695.014242][T26873] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5671'. [ 695.459937][T26887] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5674'. [ 695.487409][T26883] syzkaller0: entered promiscuous mode [ 695.493212][T26883] syzkaller0: entered allmulticast mode [ 695.508752][T26883] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5674'. [ 695.854282][T26895] netlink: 'syz.3.5679': attribute type 13 has an invalid length. [ 695.879182][ T35] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.202531][T26896] mac80211_hwsim hwsim54 syzkaller0: Caught tx_queue_len zero misconfig [ 696.222766][ T35] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.232947][ T6805] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.263389][T26900] bond10: Removing last ns target with arp_interval on [ 696.925617][T18127] Bluetooth: hci5: command 0x0405 tx timeout [ 698.713744][ T6805] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 698.723134][T26909] __nla_validate_parse: 7 callbacks suppressed [ 698.723150][T26909] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5682'. [ 698.757953][T26905] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5682'. [ 698.957475][T26922] xt_CT: You must specify a L4 protocol and not use inversions on it [ 698.981692][T26920] sctp: [Deprecated]: syz.5.5686 (pid 26920) Use of int in max_burst socket option. [ 698.981692][T26920] Use struct sctp_assoc_value instead [ 699.309591][T26935] syzkaller1: entered promiscuous mode [ 699.330438][T26935] syzkaller1: entered allmulticast mode [ 699.487716][T26951] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5691'. [ 699.618692][T26959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5694'. [ 699.647699][T26964] syzkaller0: entered promiscuous mode [ 699.653363][T26964] syzkaller0: entered allmulticast mode [ 699.692335][T26965] ipip0: entered promiscuous mode [ 699.704142][T26965] ipip0: entered allmulticast mode [ 702.849678][T26985] netlink: 'syz.5.5699': attribute type 13 has an invalid length. [ 702.882958][T26992] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5703'. [ 702.896714][T26986] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5699'. [ 703.041975][T27008] tun0: tun_chr_ioctl cmd 1074025672 [ 703.059518][T27008] tun0: ignored: set checksum disabled [ 703.074816][T27001] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5703'. [ 703.100910][T27008] netlink: 'syz.1.5706': attribute type 1 has an invalid length. [ 703.134952][T27008] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5706'. [ 703.135090][T27001] nbd: device at index 64 is going down [ 703.310499][T24606] udevd[24606]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 703.380845][T27015] batman_adv: batadv0: Adding interface: dummy0 [ 703.388190][T27015] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 703.417742][T27015] batman_adv: batadv0: Interface activated: dummy0 [ 703.443362][T27015] batadv0: mtu less than device minimum [ 703.460080][T27015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 703.471879][T27015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 703.483746][T27015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 703.497181][T27015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 703.508618][T27015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 703.520422][T27015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 703.532176][T27015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 703.543854][T27015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 703.555026][T27015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 703.732792][T27035] netlink: 'syz.5.5713': attribute type 27 has an invalid length. [ 704.011901][T27046] netlink: 'syz.6.5717': attribute type 1 has an invalid length. [ 704.035247][T27046] netlink: 'syz.6.5717': attribute type 2 has an invalid length. [ 704.181086][T27061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5720'. [ 704.703186][T27089] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5730'. [ 704.769972][T27089] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5730'. [ 704.813058][T27090] tipc: Enabled bearer , priority 0 [ 704.901377][T27089] tipc: Disabling bearer [ 705.003700][T27104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5731'. [ 705.443730][T27120] netlink: 280 bytes leftover after parsing attributes in process `syz.5.5739'. [ 705.521477][T27130] netlink: 'syz.5.5742': attribute type 1 has an invalid length. [ 705.534297][T27132] netlink: 'syz.6.5740': attribute type 10 has an invalid length. [ 705.579166][T27130] bond4: entered promiscuous mode [ 705.594095][T27130] 8021q: adding VLAN 0 to HW filter on device bond4 [ 705.605101][T27132] batman_adv: batadv0: Interface deactivated: dummy0 [ 705.632139][T27132] batman_adv: batadv0: Removing interface: dummy0 [ 705.685339][T27132] team0: Port device dummy0 added [ 705.809476][T27150] lo speed is unknown, defaulting to 1000 [ 705.818328][T27150] lo speed is unknown, defaulting to 1000 [ 705.826493][T27150] lo speed is unknown, defaulting to 1000 [ 705.833164][T27150] smbdirect: ib_dev[sy2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 705.848035][T27150] smbdirect: ib_dev[sy2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 705.866449][T27150] smbdirect: ib_dev[sy2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 705.892508][T27150] infiniband sy2: RDMA CMA: cma_listen_on_dev, error -98 [ 705.933577][T27150] lo speed is unknown, defaulting to 1000 [ 705.941249][T27150] lo speed is unknown, defaulting to 1000 [ 705.951240][T27150] lo speed is unknown, defaulting to 1000 [ 705.961651][T27150] lo speed is unknown, defaulting to 1000 [ 705.970995][T27150] lo speed is unknown, defaulting to 1000 [ 705.979095][T27150] lo speed is unknown, defaulting to 1000 [ 705.989469][T27150] lo speed is unknown, defaulting to 1000 [ 705.997461][T27150] lo speed is unknown, defaulting to 1000 [ 706.265742][T27178] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5752'. [ 706.296796][T27178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5752'. [ 706.411741][T27191] netlink: 'syz.6.5757': attribute type 1 has an invalid length. [ 706.526877][T27191] 8021q: adding VLAN 0 to HW filter on device bond3 [ 706.565690][T27192] bond3: (slave syz_tun): Enslaving as a backup interface with an up link [ 707.041255][T27226] netlink: 'syz.5.5770': attribute type 8 has an invalid length. [ 707.198967][T27238] batadv0: entered promiscuous mode [ 707.548088][T27266] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5782'. [ 707.651258][T27272] netlink: 280 bytes leftover after parsing attributes in process `syz.3.5783'. [ 707.832084][T27274] veth3: entered allmulticast mode [ 707.851669][T27274] bond4: (slave veth3): Enslaving as an active interface with an up link [ 707.904365][T27280] bond4 (unregistering): (slave veth3): Releasing backup interface [ 707.916345][T27280] bond4 (unregistering): Released all slaves [ 708.049704][T27290] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5789'. [ 708.452856][T27326] erspan0: left promiscuous mode [ 708.492232][T27326] ipvlan0: left allmulticast mode [ 708.505381][T27326] veth0_vlan: left allmulticast mode [ 708.518717][T27326] geneve1: left promiscuous mode [ 708.534552][T27326] bond5: left promiscuous mode [ 708.552349][T27326] geneve3: left promiscuous mode [ 708.583747][T27326] gretap2: left promiscuous mode [ 708.601808][T27326] mac80211_hwsim hwsim54 syzkaller0: left promiscuous mode [ 708.619342][T27326] mac80211_hwsim hwsim54 syzkaller0: left allmulticast mode [ 708.677115][T27326] bond10: left promiscuous mode [ 708.684839][T27326] bridge4: left promiscuous mode [ 708.714046][T27326] bond11: left promiscuous mode [ 708.722585][T27326] vti0: left promiscuous mode [ 708.764150][T27326] bond12: left promiscuous mode [ 708.775693][T27326] bond12: left allmulticast mode [ 708.797148][T27326] macsec1: left promiscuous mode [ 708.853450][ T8180] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.871874][ T8180] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.911400][ T8180] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.946975][ T8180] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.004643][ T8180] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.021931][ T8180] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.034611][T27355] net_ratelimit: 16 callbacks suppressed [ 709.034628][T27355] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 709.212931][T27360] lo: Caught tx_queue_len zero misconfig [ 709.218878][T27360] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 709.289440][T27361] lo: Caught tx_queue_len zero misconfig [ 709.452501][T27376] netlink: 'syz.1.5814': attribute type 16 has an invalid length. [ 709.508000][T27376] netlink: 'syz.1.5814': attribute type 17 has an invalid length. [ 709.724513][T27376] A link change request failed with some changes committed already. Interface may have been left with an inconsistent configuration, please check. [ 709.964679][T27405] __nla_validate_parse: 2 callbacks suppressed [ 709.964697][T27405] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5826'. [ 709.985482][T27406] netlink: 'syz.6.5825': attribute type 1 has an invalid length. [ 710.005973][T27405] netlink: 'syz.3.5826': attribute type 1 has an invalid length. [ 710.072942][T27406] 8021q: adding VLAN 0 to HW filter on device bond4 [ 710.591314][T27430] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5833'. [ 710.647972][T27430] netlink: 'syz.2.5833': attribute type 1 has an invalid length. [ 710.744801][T18127] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 710.771262][T18127] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 710.772425][T27430] 8021q: adding VLAN 0 to HW filter on device bond6 [ 710.783844][T18127] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 710.798567][T18127] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 710.806883][T18127] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 711.046255][T27437] bond6: (slave veth5): Enslaving as an active interface with a down link [ 711.441832][ T8175] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.644061][T27472] netlink: 'syz.2.5841': attribute type 6 has an invalid length. [ 712.267663][T27476] lo speed is unknown, defaulting to 1000 [ 712.432279][T27497] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5843'. [ 712.647527][T27503] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5846'. [ 712.731051][ T6805] netdevsim netdevsim3 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.823738][ T6805] netdevsim netdevsim3 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.898993][ T6805] netdevsim netdevsim3 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.935174][T18127] Bluetooth: hci4: command tx timeout [ 712.959939][T27436] lo speed is unknown, defaulting to 1000 [ 712.959972][ T8180] netdevsim netdevsim3 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.344652][ T8175] bond11 (unregistering): (slave vti0): Releasing backup interface [ 713.555710][ T8175] bond6 (unregistering): (slave gretap3): Releasing backup interface [ 713.817968][ T8175] bond2 (unregistering): (slave geneve2): Releasing active interface [ 713.931293][ T8175] bond10 (unregistering): (slave bridge4): Releasing backup interface [ 713.987189][ T8175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 713.997374][ T8175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 714.011093][ T8175] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 714.021516][ T8175] bond0 (unregistering): Released all slaves [ 714.032121][ T8175] bond1 (unregistering): Released all slaves [ 714.050893][ T8175] bond2 (unregistering): Released all slaves [ 714.065816][ T8175] bond3 (unregistering): (slave bond4): Releasing backup interface [ 714.074529][ T8175] bond3 (unregistering): Released all slaves [ 714.094294][ T8175] bond4 (unregistering): Released all slaves [ 714.108246][ T8175] bond5 (unregistering): Released all slaves [ 714.124720][ T8175] bond6 (unregistering): (slave bond7): Releasing backup interface [ 714.137486][ T8175] bond6 (unregistering): Released all slaves [ 714.157103][ T8175] bond7 (unregistering): Released all slaves [ 714.170797][ T8175] bond8 (unregistering): Released all slaves [ 714.183914][ T8175] bond9 (unregistering): Released all slaves [ 714.198683][ T8175] bond10 (unregistering): Released all slaves [ 714.215178][ T8175] bond11 (unregistering): Released all slaves [ 714.240955][ T8175] bond12 (unregistering): Released all slaves [ 714.254342][ T8175] bond13 (unregistering): Released all slaves [ 714.271070][T27476] lo speed is unknown, defaulting to 1000 [ 714.633040][ T8175] : left promiscuous mode [ 714.997785][T18127] Bluetooth: hci4: command tx timeout [ 715.127586][T27436] lo speed is unknown, defaulting to 1000 [ 715.162984][ T8175] tipc: Disabling bearer [ 715.269473][T27554] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5859'. [ 715.602546][ T8175] tipc: Left network mode [ 715.661059][T27570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5863'. [ 715.694595][T27568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5862'. [ 715.695251][T27570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5863'. [ 715.729475][T27568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5862'. [ 715.768798][T27570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5863'. [ 715.864194][ T8175] IPVS: stopping backup sync thread 23031 ... [ 716.211050][ T5296] 8021q: adding VLAN 0 to HW filter on device eth5 [ 716.825969][T27600] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5869'. [ 716.924036][T27602] pim6reg: entered allmulticast mode [ 717.002761][T27602] pim6reg: left allmulticast mode [ 717.085587][T18127] Bluetooth: hci4: command tx timeout [ 717.538242][T27637] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5878'. [ 717.743253][T27647] ip6tnl0: Caught tx_queue_len zero misconfig [ 717.810843][ T5296] 8021q: adding VLAN 0 to HW filter on device eth6 [ 718.103379][T27436] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.114094][T27436] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.123290][T27436] bridge_slave_0: entered allmulticast mode [ 718.141527][T27436] bridge_slave_0: entered promiscuous mode [ 718.166584][T27436] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.180637][T27436] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.197268][T27436] bridge_slave_1: entered allmulticast mode [ 718.218159][T27436] bridge_slave_1: entered promiscuous mode [ 718.408605][T27436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.434517][T27665] netlink: 'syz.2.5884': attribute type 1 has an invalid length. [ 718.457614][T27436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.464266][T27665] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5884'. [ 718.652623][ T8175] hsr_slave_0: left promiscuous mode [ 718.659730][ T8175] hsr_slave_1: left promiscuous mode [ 719.082522][T27701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5888'. [ 719.163451][ T8175] team0 (unregistering): Port device team_slave_1 removed [ 719.170744][T18127] Bluetooth: hci4: command tx timeout [ 719.183918][ T8175] team0 (unregistering): Port device team_slave_0 removed [ 719.274044][T27436] team0: Port device team_slave_0 added [ 719.283061][T27436] team0: Port device team_slave_1 added [ 719.310973][ T5296] 8021q: adding VLAN 0 to HW filter on device eth7 [ 719.414473][T27436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.438723][T27436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.500200][T27436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.513623][T27436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.522267][T27436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.525987][T27705] netlink: 'syz.2.5890': attribute type 1 has an invalid length. [ 719.551441][T27436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 719.587687][T27707] netlink: 'syz.1.5891': attribute type 2 has an invalid length. [ 719.644195][T27705] 8021q: adding VLAN 0 to HW filter on device bond7 [ 719.700780][T27705] netlink: 'syz.2.5890': attribute type 10 has an invalid length. [ 719.718560][T27705] dummy0: entered promiscuous mode [ 719.783227][T27716] netlink: 'syz.6.5892': attribute type 1 has an invalid length. [ 719.836338][ T8175] IPVS: stop unused estimator thread 0... [ 719.845626][T27436] hsr_slave_0: entered promiscuous mode [ 719.860095][T27436] hsr_slave_1: entered promiscuous mode [ 719.877072][T27436] debugfs: 'hsr0' already exists in 'hsr' [ 719.882851][T27436] Cannot create hsr debugfs directory [ 720.374152][T27436] netdevsim netdevsim3 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.626926][T27757] __nla_validate_parse: 5 callbacks suppressed [ 720.626945][T27757] netlink: 200 bytes leftover after parsing attributes in process `syz.1.5899'. [ 720.657432][T27436] netdevsim netdevsim3 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.881528][T27436] netdevsim netdevsim3 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.926442][T27776] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 720.949172][T27776] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 720.974037][T27776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5904'. [ 721.065766][T27784] netlink: 'syz.6.5905': attribute type 1 has an invalid length. [ 721.119464][T27436] netdevsim netdevsim3 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.137300][T27788] netlink: 'syz.1.5906': attribute type 1 has an invalid length. [ 721.190162][T27791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5906'. [ 721.249395][T27797] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5907'. [ 721.277915][T27788] 8021q: adding VLAN 0 to HW filter on device bond11 [ 721.296565][T27791] bond11: entered allmulticast mode [ 721.403361][T27797] dummy0: left promiscuous mode [ 721.414531][T27797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.531406][T27797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.568056][T27797] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 721.596411][T27797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 721.610345][T27797] hsr0: left promiscuous mode [ 721.627829][T27797] veth1_vlan: left promiscuous mode [ 721.633814][T27797] veth0_vlan: left promiscuous mode [ 721.657008][T27797] veth0_vlan: entered promiscuous mode [ 721.667719][T27797] veth1_vlan: entered promiscuous mode [ 721.688154][T27797] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 721.729944][T27799] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.5907'. [ 721.749350][T27817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5909'. [ 721.884696][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.891926][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.022711][ T8175] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.035717][ T8175] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.080777][ T8747] syz2: Port: 1 Link ACTIVE [ 722.122934][ T8175] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.141697][ T8175] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.304989][ T1152] batman_adv: batadv1: IGMP Querier appeared [ 722.498803][T27861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 722.899436][T27436] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 722.922102][T27436] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 722.942135][T27436] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 722.972278][T27436] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 723.003094][T27436] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 723.063328][T27436] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 723.081619][T27436] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 723.120079][T27436] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 723.130643][T27885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5920'. [ 723.358957][T27897] netlink: 'syz.2.5923': attribute type 1 has an invalid length. [ 723.418465][T27902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5923'. [ 723.497152][T27897] 8021q: adding VLAN 0 to HW filter on device bond8 [ 723.578812][T27902] vlan3: entered allmulticast mode [ 723.597510][T27902] veth0_to_bond: entered allmulticast mode [ 723.632560][T27905] syzkaller0: entered promiscuous mode [ 723.646496][T27905] syzkaller0: entered allmulticast mode [ 723.910717][T27917] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) ! [ 724.004277][T27924] IPv6: Can't replace route, no match found [ 724.010484][T27436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.067418][T27436] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.114019][ T3345] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.121200][ T3345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.176769][ T3345] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.183936][ T3345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.357573][T27950] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.5932'. [ 724.378134][ T1152] batman_adv: batadv1: MLD Querier appeared [ 724.380229][T27945] netlink: 'syz.5.5931': attribute type 1 has an invalid length. [ 724.394331][T27950] netlink: ct family unspecified [ 724.720574][T27965] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5936'. [ 724.823607][T27965] 8021q: adding VLAN 0 to HW filter on device bond7 [ 724.992986][T27972] bond7: (slave veth5): Enslaving as an active interface with an up link [ 725.138278][T27985] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 725.191794][T27985] bond9 (unregistering): Released all slaves [ 725.752954][T28019] __nla_validate_parse: 4 callbacks suppressed [ 725.752972][T28019] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5941'. [ 725.930915][T27436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.118864][T27436] veth0_vlan: entered promiscuous mode [ 726.138493][T27436] veth1_vlan: entered promiscuous mode [ 726.183570][T27436] veth0_macvtap: entered promiscuous mode [ 726.211276][T27436] veth1_macvtap: entered promiscuous mode [ 726.260013][T27436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 726.297988][T27436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.324490][ T8175] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.335783][ T8175] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.350065][ T8175] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.361250][ T8175] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.849946][T28064] xt_CT: You must specify a L4 protocol and not use inversions on it [ 726.902296][ T8175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.928217][ T8175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.975627][T28057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5951'. [ 726.977762][T28066] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5954'. [ 727.002691][ T8175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.018845][ T8175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.019032][T28069] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5955'. [ 727.096603][T28069] netlink: 92 bytes leftover after parsing attributes in process `syz.5.5955'. [ 727.366369][T28096] netlink: 'syz.3.5964': attribute type 83 has an invalid length. [ 727.377086][T28096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5964'. [ 727.382955][T28099] syzkaller1: entered promiscuous mode [ 727.388449][T28096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5964'. [ 727.402940][T28099] syzkaller1: entered allmulticast mode [ 727.755662][T28118] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.959627][T28118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 728.095819][T26712] syz2: Port: 1 Link DOWN [ 728.102237][ T6805] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.112378][ T6805] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.137513][ T6805] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.146895][ T6805] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.305957][T28124] lo speed is unknown, defaulting to 1000 [ 728.308162][T28146] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5976'. [ 728.332916][T28140] syzkaller0: create flow: hash 1484918879 index 2 [ 728.355593][T28146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 728.382415][T28142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5975'. [ 728.527700][T28162] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5980'. [ 728.721999][T28170] netlink: 'syz.2.5978': attribute type 1 has an invalid length. [ 728.775812][T28173] netlink: 'syz.3.5982': attribute type 21 has an invalid length. [ 728.788770][T28139] syzkaller0: delete flow: hash 1484918879 index 2 [ 728.866501][T28170] bond12: entered promiscuous mode [ 728.873604][T28170] 8021q: adding VLAN 0 to HW filter on device bond12 [ 729.397525][T28188] netlink: 'syz.2.5985': attribute type 1 has an invalid length. [ 731.438473][T28171] mac80211_hwsim hwsim81 syzkaller0: left promiscuous mode [ 731.446332][T28171] mac80211_hwsim hwsim81 syzkaller0: left allmulticast mode [ 731.455405][T28124] lo speed is unknown, defaulting to 1000 [ 731.462588][T28185] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 731.463084][T28186] netlink: 15672 bytes leftover after parsing attributes in process `syz.2.5985'. [ 731.488237][T28186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5985'. [ 731.498104][T28186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5985'. [ 731.520574][T28188] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 731.707205][T28197] netlink: set zone limit has 4 unknown bytes [ 732.264218][T28244] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5991'. [ 732.340105][T28244] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5991'. [ 732.573545][T28261] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5994'. [ 732.678327][T28265] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5994'. [ 732.792223][T28271] netlink: 'syz.1.5998': attribute type 1 has an invalid length. [ 733.108086][T28271] bond12: entered promiscuous mode [ 733.126836][T28271] 8021q: adding VLAN 0 to HW filter on device bond12 [ 733.224315][T28296] netlink: 'syz.5.6004': attribute type 1 has an invalid length. [ 733.247319][T28296] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6004'. [ 733.293848][T28274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5998'. [ 733.317575][T28274] bond12: entered allmulticast mode [ 733.363486][T28274] bond12: (slave bridge9): making interface the new active one [ 733.391085][T28274] bridge9: entered promiscuous mode [ 733.407151][T28274] bridge9: entered allmulticast mode [ 733.433536][T28274] bond12: (slave bridge9): Enslaving as an active interface with an up link [ 733.459853][T28302] netlink: 'syz.2.6005': attribute type 4 has an invalid length. [ 733.508320][T28302] netlink: 'syz.2.6005': attribute type 4 has an invalid length. [ 733.579359][T28311] sctp: [Deprecated]: syz.6.6009 (pid 28311) Use of int in max_burst socket option. [ 733.579359][T28311] Use struct sctp_assoc_value instead [ 733.649928][T28311] netlink: 'syz.6.6009': attribute type 1 has an invalid length. [ 733.670365][T28311] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6009'. [ 733.854995][T28312] lo speed is unknown, defaulting to 1000 [ 734.314699][T28333] 8021q: adding VLAN 0 to HW filter on device bond13 [ 734.471562][T26514] IPVS: starting estimator thread 0... [ 734.550803][T28353] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.576154][T28354] IPVS: using max 29 ests per chain, 69600 per kthread [ 734.618896][T28353] bridge_slave_0 (unregistering): left allmulticast mode [ 734.640059][T28353] bridge_slave_0 (unregistering): left promiscuous mode [ 734.657512][T28353] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.914270][T28312] lo speed is unknown, defaulting to 1000 [ 737.335306][T28347] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 737.346310][T28356] netlink: 'syz.3.6019': attribute type 1 has an invalid length. [ 737.357054][T28356] __nla_validate_parse: 3 callbacks suppressed [ 737.357072][T28356] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6019'. [ 737.513277][T28398] sctp: [Deprecated]: syz.6.6029 (pid 28398) Use of int in max_burst socket option. [ 737.513277][T28398] Use struct sctp_assoc_value instead [ 737.630706][T28408] netlink: 'syz.3.6032': attribute type 21 has an invalid length. [ 737.691535][T28413] netlink: 'syz.3.6032': attribute type 21 has an invalid length. [ 737.741053][T28408] netlink: 'syz.3.6032': attribute type 21 has an invalid length. [ 737.741327][T28413] netlink: 'syz.3.6032': attribute type 21 has an invalid length. [ 737.749267][ T3345] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.775415][ T3345] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.784820][T28420] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6033'. [ 737.825858][ T3345] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.836997][ T3345] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.849022][T28424] tipc: Enabled bearer , priority 2 [ 738.121923][T28433] netlink: 'syz.5.6039': attribute type 10 has an invalid length. [ 738.148319][T28433] team0 (unregistering): Port device team_slave_0 removed [ 738.175903][T28433] team0 (unregistering): Port device team_slave_1 removed [ 738.238157][T28437] team0: Port device dummy0 removed [ 738.264343][T28439] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6042'. [ 738.553974][T28457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 738.597049][T28458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 738.756392][T28466] netlink: 'syz.5.6050': attribute type 1 has an invalid length. [ 738.868245][T28471] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6051'. [ 738.890340][T28466] 8021q: adding VLAN 0 to HW filter on device bond5 [ 738.935327][T28471] pim6reg: entered allmulticast mode [ 738.964977][T24595] tipc: Node number set to 2671613399 [ 739.375390][T28490] netlink: 'syz.6.6057': attribute type 30 has an invalid length. [ 739.436813][T28493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6058'. [ 739.484444][T28490] bond8: option arp_missed_max: invalid value (0) [ 739.491414][T28490] bond8: option arp_missed_max: allowed values 1 - 255 [ 739.500129][T28490] bond8 (unregistering): Released all slaves [ 739.608058][T28493] bridge0: port 2(veth0_virt_wifi) entered blocking state [ 739.630830][T28493] bridge0: port 2(veth0_virt_wifi) entered disabled state [ 739.661790][T28493] veth0_virt_wifi: entered allmulticast mode [ 739.692356][T28493] veth0_virt_wifi: entered promiscuous mode [ 739.718790][T28493] bridge0: port 2(veth0_virt_wifi) entered blocking state [ 739.726114][T28493] bridge0: port 2(veth0_virt_wifi) entered forwarding state [ 739.757265][T28505] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6062'. [ 739.783641][T28505] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6062'. [ 756.609578][T28535] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 756.618398][T28535] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 756.805951][T28545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 774.275533][T28555] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 774.299645][T28555] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 774.313761][T28555] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 774.331386][T28560] pimreg: entered allmulticast mode [ 774.356509][T28561] netlink: 180 bytes leftover after parsing attributes in process `syz.3.6075'. [ 774.440647][T28568] gtp0: entered promiscuous mode [ 774.447105][T28568] gtp0: entered allmulticast mode [ 774.455911][T28568] `: Device gtp0 is of different type [ 774.853602][T28603] lo speed is unknown, defaulting to 1000 [ 775.013853][T28613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6091'. [ 775.411353][T28603] lo speed is unknown, defaulting to 1000 [ 776.021477][T28635] ip6gre1: entered promiscuous mode [ 776.032304][T28635] ip6gre1: entered allmulticast mode [ 776.097609][T28237] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 776.112220][T28237] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 776.126330][T26518] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 776.325302][T26518] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 776.342873][T28622] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 776.615364][T26521] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 776.651749][T28651] nbd: must specify an index to disconnect [ 777.635819][T18127] Bluetooth: hci1: command 0x0406 tx timeout [ 777.987468][T28694] netlink: 203004 bytes leftover after parsing attributes in process `syz.1.6106'. [ 778.017550][T28694] openvswitch: netlink: Key type 14083 is out of range max 32 [ 778.065384][T28694] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 778.106653][T28694] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 778.228223][T28696] lo speed is unknown, defaulting to 1000 [ 778.249051][T28705] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 778.252111][T28703] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6110'. [ 778.817983][T28716] lo speed is unknown, defaulting to 1000 [ 779.099033][T28727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6116'. [ 779.230883][T28727] vlan0: entered promiscuous mode [ 779.246200][T28727] geneve1: entered promiscuous mode [ 779.269876][T28727] vlan0: entered allmulticast mode [ 779.289511][T28727] geneve1: entered allmulticast mode [ 779.355973][T28696] lo speed is unknown, defaulting to 1000 [ 780.094462][T28753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6122'. [ 780.120247][T28716] lo speed is unknown, defaulting to 1000 [ 780.169857][T28755] netlink: 'syz.5.6123': attribute type 1 has an invalid length. [ 780.292679][T28755] 8021q: adding VLAN 0 to HW filter on device bond6 [ 780.349035][T28753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6122'. [ 780.371260][T28753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6122'. [ 780.435108][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 780.819447][T28788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6132'. [ 780.851888][T28788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6132'. [ 781.119455][T28794] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6133'. [ 781.426770][T28809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6135'. [ 781.443710][T28811] xt_addrtype: ipv6 does not support BROADCAST matching [ 781.464540][T28811] netlink: 'syz.5.6138': attribute type 11 has an invalid length. [ 781.517240][T28804] lo speed is unknown, defaulting to 1000 [ 781.522592][T28811] syzkaller1: entered promiscuous mode [ 781.540605][T28811] syzkaller1: entered allmulticast mode [ 781.929464][T17603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 781.939773][T17603] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 781.954475][T17603] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 781.963962][T17603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 781.975745][T17603] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 782.063831][T28820] netlink: 'syz.6.6141': attribute type 3 has an invalid length. [ 782.423487][T28842] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 782.462624][T28842] netlink: 'syz.5.6145': attribute type 10 has an invalid length. [ 782.485623][T28842] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6145'. [ 782.501935][T28842] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6145'. [ 782.512479][T28842] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6145'. [ 782.808663][T28816] lo speed is unknown, defaulting to 1000 [ 783.004310][T28804] lo speed is unknown, defaulting to 1000 [ 783.360732][T28871] syzkaller1: entered promiscuous mode [ 783.380672][T28871] syzkaller1: entered allmulticast mode [ 783.842393][T28816] lo speed is unknown, defaulting to 1000 [ 784.043099][T17603] Bluetooth: hci2: command tx timeout [ 784.611760][T28930] Cannot find del_set index 4 as target [ 784.902868][T28816] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.911039][T28816] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.923573][T28816] bridge_slave_0: entered allmulticast mode [ 784.933742][T28816] bridge_slave_0: entered promiscuous mode [ 784.959473][T28816] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.967851][T28816] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.988287][T28816] bridge_slave_1: entered allmulticast mode [ 785.007302][T28816] bridge_slave_1: entered promiscuous mode [ 785.114004][T28816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.137628][T28816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.235675][T28816] team0: Port device team_slave_0 added [ 785.244704][T28816] team0: Port device team_slave_1 added [ 785.292497][T28816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.299683][T28816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.328440][T28816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.350226][T28816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.371658][T28816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.401683][T28816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 785.413387][T28969] batadv_slave_1: entered promiscuous mode [ 785.449708][T28970] __nla_validate_parse: 12 callbacks suppressed [ 785.449725][T28970] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6174'. [ 785.609725][T28816] hsr_slave_0: entered promiscuous mode [ 785.627526][T28816] hsr_slave_1: entered promiscuous mode [ 785.634085][T28816] debugfs: 'hsr0' already exists in 'hsr' [ 785.643572][T28816] Cannot create hsr debugfs directory [ 785.649495][T28961] batadv_slave_1: left promiscuous mode [ 785.957848][T28816] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.026687][T28997] xt_l2tp: missing protocol rule (udp|l2tpip) [ 786.115915][T17603] Bluetooth: hci2: command tx timeout [ 786.119672][T29006] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6180'. [ 786.142362][T28816] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.162197][T28999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6181'. [ 786.183119][T29005] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 786.411797][T28816] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.462931][T29015] netlink: 'syz.3.6184': attribute type 1 has an invalid length. [ 786.490302][T29015] netlink: 'syz.3.6184': attribute type 3 has an invalid length. [ 786.505374][T29015] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6184'. [ 786.560439][T28816] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.693344][T29026] sctp: [Deprecated]: syz.6.6185 (pid 29026) Use of int in max_burst socket option deprecated. [ 786.693344][T29026] Use struct sctp_assoc_value instead [ 787.009312][T29034] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6187'. [ 787.110060][T28816] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 787.116835][T29042] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6189'. [ 787.152672][T28816] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 787.197153][T28816] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 787.217573][T28816] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 787.294384][T28816] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 787.318275][T28816] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 787.338937][T29053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6192'. [ 787.402791][T29048] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 787.427152][T29048] bond1 (unregistering): Released all slaves [ 787.505283][T28816] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 787.574451][T28816] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 787.784063][T29085] openvswitch: netlink: Message has 4 unknown bytes. [ 787.820564][T29085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 787.947925][T28816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.012816][T28816] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.066251][T28237] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.073452][T28237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.152271][T28237] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.159452][T28237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.195318][T17603] Bluetooth: hci2: command tx timeout [ 788.755021][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 788.769979][T29132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 789.671432][T28816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 789.848287][T28816] veth0_vlan: entered promiscuous mode [ 789.910650][T28816] veth1_vlan: entered promiscuous mode [ 790.007970][T28816] veth0_macvtap: entered promiscuous mode [ 790.025457][T29192] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 790.069553][T28816] veth1_macvtap: entered promiscuous mode [ 790.078936][T29205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6211'. [ 790.120497][T29192] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6211'. [ 790.179823][T28816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 790.249450][T28816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 790.275132][T17603] Bluetooth: hci2: command tx timeout [ 790.310103][ T1152] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.363113][ T1152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.384910][ T1152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.426811][ T1152] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.632127][T10717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.661664][T10717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.713145][ T8180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.731849][ T8180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.858025][T29224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6218'. [ 790.895399][T17603] block nbd3: Receive control failed (result -32) [ 791.015282][T29241] tipc: Failed to obtain node identity [ 791.038260][T29241] tipc: Enabling of bearer rejected, failed to enable media [ 791.114242][T29247] netlink: 'syz.3.6225': attribute type 10 has an invalid length. [ 791.141483][T29246] netlink: 'syz.5.6226': attribute type 4 has an invalid length. [ 791.196770][T29247] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 791.248616][T29247] team0 (unregistering): Port device team_slave_0 removed [ 791.294751][T29247] team0 (unregistering): Failed to send options change via netlink (err -105) [ 791.337895][T29247] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 791.356531][T29247] team0 (unregistering): Port device team_slave_1 removed [ 791.431307][T18127] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 791.450776][T18127] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 791.462549][T18127] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 791.494183][T18127] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 791.516023][T18127] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 792.007578][T29278] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 792.253506][T29280] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 792.266295][T29280] CPU: 0 UID: 0 PID: 29280 Comm: syz.5.6232 Not tainted syzkaller #0 PREEMPT(full) [ 792.266347][T29280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 792.266374][T29280] Call Trace: [ 792.266383][T29280] [ 792.266393][T29280] dump_stack_lvl+0xe8/0x150 [ 792.266427][T29280] sysfs_warn_dup+0x8e/0xa0 [ 792.266459][T29280] sysfs_do_create_link_sd+0xc0/0x110 [ 792.266490][T29280] device_add_class_symlinks+0x1cf/0x240 [ 792.266530][T29280] device_add+0x475/0xbb0 [ 792.266565][T29280] wiphy_register+0x1fb1/0x2fe0 [ 792.266606][T29280] ? __pfx_wiphy_register+0x10/0x10 [ 792.266627][T29280] ? __pfx_netdev_run_todo+0x10/0x10 [ 792.266656][T29280] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 792.266692][T29280] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 792.266731][T29280] ieee80211_register_hw+0x3c53/0x4910 [ 792.266768][T29280] ? ieee80211_register_hw+0x1981/0x4910 [ 792.266821][T29280] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 792.266848][T29280] ? __asan_memset+0x22/0x50 [ 792.266876][T29280] ? __hrtimer_setup+0x1b7/0x260 [ 792.266903][T29280] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 792.266932][T29280] mac80211_hwsim_new_radio+0x3306/0x57b0 [ 792.266988][T29280] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 792.267016][T29280] ? __asan_memcpy+0x40/0x70 [ 792.267048][T29280] hwsim_new_radio_nl+0xd96/0xfa0 [ 792.267088][T29280] genl_family_rcv_msg_doit+0x22a/0x330 [ 792.267127][T29280] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 792.267180][T29280] ? bpf_lsm_capable+0x9/0x20 [ 792.267201][T29280] ? security_capable+0x7e/0x2c0 [ 792.267241][T29280] genl_rcv_msg+0x61c/0x7a0 [ 792.267279][T29280] ? __pfx_genl_rcv_msg+0x10/0x10 [ 792.267310][T29280] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 792.267348][T29280] netlink_rcv_skb+0x232/0x4b0 [ 792.267374][T29280] ? __pfx_genl_rcv_msg+0x10/0x10 [ 792.267407][T29280] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 792.267450][T29280] ? down_read+0x270/0x2e0 [ 792.267475][T29280] ? genl_rcv+0xd/0x40 [ 792.267507][T29280] genl_rcv+0x28/0x40 [ 792.267535][T29280] netlink_unicast+0x75c/0x8e0 [ 792.267571][T29280] netlink_sendmsg+0x813/0xb40 [ 792.267605][T29280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 792.267636][T29280] ? aa_sock_msg_perm+0xf1/0x1b0 [ 792.267670][T29280] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 792.267703][T29280] ____sys_sendmsg+0x972/0x9f0 [ 792.267729][T29280] ? __might_fault+0xaf/0x130 [ 792.267765][T29280] ? __pfx_____sys_sendmsg+0x10/0x10 [ 792.267801][T29280] ? import_iovec+0x73/0xa0 [ 792.267832][T29280] ___sys_sendmsg+0x2a5/0x360 [ 792.267857][T29280] ? __lock_acquire+0x6b5/0x2cf0 [ 792.267886][T29280] ? __pfx____sys_sendmsg+0x10/0x10 [ 792.267919][T29280] ? futex_wake+0x4ac/0x580 [ 792.267977][T29280] ? __fget_files+0x2a/0x420 [ 792.268003][T29280] ? __fget_files+0x3a0/0x420 [ 792.268042][T29280] __x64_sys_sendmsg+0x1bd/0x2a0 [ 792.268071][T29280] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 792.268106][T29280] ? rcu_is_watching+0x15/0xb0 [ 792.268148][T29280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.268174][T29280] do_syscall_64+0x174/0x580 [ 792.268197][T29280] ? trace_irq_disable+0x3b/0x140 [ 792.268230][T29280] ? clear_bhb_loop+0x40/0x90 [ 792.268255][T29280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.268277][T29280] RIP: 0033:0x7f008719ce59 [ 792.268297][T29280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.268316][T29280] RSP: 002b:00007f00880a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 792.268339][T29280] RAX: ffffffffffffffda RBX: 00007f0087415fa0 RCX: 00007f008719ce59 [ 792.268354][T29280] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000b [ 792.268366][T29280] RBP: 00007f0087232d6f R08: 0000000000000000 R09: 0000000000000000 [ 792.268380][T29280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 792.268392][T29280] R13: 00007f0087416038 R14: 00007f0087415fa0 R15: 00007ffe90679558 [ 792.268424][T29280] [ 792.480537][T29262] lo speed is unknown, defaulting to 1000 [ 792.804070][T29301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6234'. [ 792.825033][T29301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6234'. [ 793.009229][T29321] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6238'. [ 793.299266][T29327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6240'. [ 793.386213][T29331] bond0: entered promiscuous mode [ 793.398863][T29331] bond_slave_0: entered promiscuous mode [ 793.408783][T29331] bond_slave_1: entered promiscuous mode [ 793.449597][T29331] batadv0: entered promiscuous mode [ 793.455926][T29331] debugfs: 'hsr1' already exists in 'hsr' [ 793.461695][T29331] Cannot create hsr debugfs directory [ 793.623757][T29342] netlink: 'syz.1.6244': attribute type 10 has an invalid length. [ 793.637151][T17603] Bluetooth: hci1: command tx timeout [ 795.716421][T17603] Bluetooth: hci1: command tx timeout [ 795.972212][T29342] team0 (unregistering): Port device team_slave_0 removed [ 795.991647][T29342] team0 (unregistering): Port device team_slave_1 removed [ 796.012629][T29262] lo speed is unknown, defaulting to 1000 [ 796.177498][ T1152] netdevsim netdevsim2 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.199932][ T1152] netdevsim netdevsim2 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.299339][ T3360] netdevsim netdevsim2 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.328320][T29369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6251'. [ 796.408954][T29373] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6252'. [ 796.440482][ T1152] netdevsim netdevsim2 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.444309][T29373] netlink: 80 bytes leftover after parsing attributes in process `syz.6.6252'. [ 796.480306][T29375] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 796.571286][ T35] batadv1: left allmulticast mode [ 796.597048][ T35] batadv1: left promiscuous mode [ 796.625557][ T35] bridge0: port 3(batadv1) entered disabled state [ 796.626697][T29387] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6251'. [ 796.701613][ T35] bridge_slave_1: left allmulticast mode [ 796.732126][ T35] bridge_slave_1: left promiscuous mode [ 796.762189][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.900039][ T35] dvmrp0: left allmulticast mode [ 797.797174][T17603] Bluetooth: hci1: command tx timeout [ 797.859463][ T35] bond2 (unregistering): (slave geneve2): Releasing active interface [ 798.178887][ T35] bond1 (unregistering): Released all slaves [ 798.213233][ T35] bond2 (unregistering): Released all slaves [ 798.241153][ T35] bond0 (unregistering): Released all slaves [ 798.265778][ T35] bond3 (unregistering): Released all slaves [ 798.293142][ T35] bond4 (unregistering): Released all slaves [ 798.314690][ T35] bond5 (unregistering): Released all slaves [ 798.330477][ T35] bond6 (unregistering): (slave veth5): Releasing active interface [ 798.339657][ T35] bond6 (unregistering): Released all slaves [ 798.360625][ T35] bond7 (unregistering): Released all slaves [ 798.381386][ T35] bond8 (unregistering): Released all slaves [ 798.400303][ T35] bond9 (unregistering): Released all slaves [ 798.419698][ T35] bond10 (unregistering): Released all slaves [ 798.433845][ T35] bond11 (unregistering): Released all slaves [ 798.455334][ T35] bond12 (unregistering): Released all slaves [ 798.510262][ T5296] 8021q: adding VLAN 0 to HW filter on device eth5 [ 798.765792][ T35] tipc: Left network mode [ 798.788282][T29465] netlink: 5560 bytes leftover after parsing attributes in process `syz.5.6266'. [ 798.828551][T29465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6266'. [ 799.718798][T29509] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6271'. [ 799.798054][T29508] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6273'. [ 799.819464][T29509] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6271'. [ 799.856327][T29262] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.869327][T29503] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6271'. [ 799.881079][T17603] Bluetooth: hci1: command tx timeout [ 799.891590][T29262] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.911974][T29262] bridge_slave_0: entered allmulticast mode [ 799.928641][T29262] bridge_slave_0: entered promiscuous mode [ 799.959415][T29262] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.970251][T29262] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.979179][T29262] bridge_slave_1: entered allmulticast mode [ 799.996884][T29262] bridge_slave_1: entered promiscuous mode [ 800.104135][T29262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.209665][ T5296] 8021q: adding VLAN 0 to HW filter on device eth6 [ 800.248068][T29262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.356875][T29262] team0: Port device team_slave_0 added [ 800.382317][T29262] team0: Port device team_slave_1 added [ 800.392570][T17603] block nbd0: Receive control failed (result -107) [ 800.397191][T29539] block nbd0: reconnected socket [ 800.435093][T17603] Bluetooth: hci3: command 0x0405 tx timeout [ 800.583802][T29262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.632217][T29262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.722927][T29262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.769829][T29262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.781852][T29262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.844910][T29262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.141437][T29262] hsr_slave_0: entered promiscuous mode [ 801.189082][T29262] hsr_slave_1: entered promiscuous mode [ 801.221765][T29262] debugfs: 'hsr0' already exists in 'hsr' [ 801.248870][T29262] Cannot create hsr debugfs directory [ 801.270701][T29567] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 801.353542][T29567] syzkaller0: entered promiscuous mode [ 801.378082][T29567] syzkaller0: entered allmulticast mode [ 801.865016][ T35] hsr_slave_0: left promiscuous mode [ 801.888513][ T35] hsr_slave_1: left promiscuous mode [ 801.908067][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.952203][T29589] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6287'. [ 802.112128][T29535] infiniband syz1: set active [ 802.139996][T29535] infiniband syz1: added bond0 [ 802.165640][T29535] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 802.178498][T29535] infiniband syz1: Couldn't open port 1 [ 802.194476][T29535] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 802.229374][T29535] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 802.248600][T29535] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 802.304594][T29535] RDS/IB: syz1: added [ 802.310101][T29535] smc: adding ib device syz1 with port count 1 [ 802.317038][T29535] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 802.723640][T29580] tipc: Enabling of bearer rejected, failed to enable media [ 802.740809][ T5296] 8021q: adding VLAN 0 to HW filter on device eth7 [ 802.761003][T29602] tipc: Resetting bearer [ 802.923842][T26522] lo speed is unknown, defaulting to 1000 [ 803.121650][T29617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.226951][T29615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.246446][T29622] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6293'. [ 803.490695][T29262] netdevsim netdevsim2 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.574437][T29665] tipc: Enabled bearer , priority 0 [ 804.592583][T29668] syzkaller0: entered promiscuous mode [ 804.612624][T29668] syzkaller0: entered allmulticast mode [ 804.646890][T29668] tipc: Resetting bearer [ 804.691703][T29668] tipc: Disabling bearer [ 804.755213][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 805.372663][T28241] smc: removing ib device syz2 [ 805.478253][T28241] smbdirect: ib_dev[syz2] removed [ 805.524389][T29688] netlink: 'syz.5.6302': attribute type 1 has an invalid length. [ 805.802659][T29262] netdevsim netdevsim2 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.121113][T29262] netdevsim netdevsim2 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.647601][T29720] syzkaller0: entered promiscuous mode [ 806.671153][T29720] syzkaller0: entered allmulticast mode [ 806.818029][T29262] netdevsim netdevsim2 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.971403][T29756] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6316'. [ 810.418155][T29753] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.425804][T29753] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.522624][T29753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 810.542804][T29753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 810.664398][T29786] bridge0: port 3(batadv1) entered blocking state [ 810.688286][T29786] bridge0: port 3(batadv1) entered disabled state [ 810.727868][T29786] batadv1: entered allmulticast mode [ 810.759687][T29786] batadv1: entered promiscuous mode [ 810.805551][ T8180] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.829581][ T8180] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.873729][T29803] openvswitch: netlink: IP tunnel dst address not specified [ 810.911948][ T8180] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.971997][ T8180] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.158681][T10716] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 811.168541][T10716] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 811.237326][ T35] IPVS: stop unused estimator thread 0... [ 811.321119][T29815] bond1: entered allmulticast mode [ 811.374643][T29824] macvlan2: entered promiscuous mode [ 811.394655][T29824] macvlan2: entered allmulticast mode [ 811.444037][T29824] bond1: (slave macvlan2): Opening slave failed [ 811.539561][T29833] netlink: 'syz.6.6331': attribute type 30 has an invalid length. [ 811.732436][T29262] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 811.799936][T29836] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 811.840984][T29845] netlink: 'syz.6.6333': attribute type 1 has an invalid length. [ 811.853521][T29845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 812.190823][T29849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6335'. [ 812.427865][T29262] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 812.452350][T29262] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 812.483027][T29262] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 812.528870][T29834] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6330'. [ 812.584205][T29262] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 812.623657][T29262] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 812.661330][T29262] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 812.729765][T29262] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 812.964398][T29854] syzkaller0: entered promiscuous mode [ 812.986788][T29854] syzkaller0: entered allmulticast mode [ 813.716168][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 813.769829][T29905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6341'. [ 816.094754][T29920] mac80211_hwsim hwsim81 syzkaller0: entered promiscuous mode [ 816.102386][T29920] mac80211_hwsim hwsim81 syzkaller0: entered allmulticast mode [ 816.128118][T29922] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6342'. [ 816.675678][T29951] tipc: Enabling of bearer rejected, failed to enable media [ 816.706996][ T1152] netdevsim netdevsim0 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.878008][T28241] netdevsim netdevsim0 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.006040][T10716] netdevsim netdevsim0 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.030503][T10716] netdevsim netdevsim0 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.112066][ T35] batadv1: left allmulticast mode [ 817.123312][ T35] batadv1: left promiscuous mode [ 817.133197][ T35] bridge0: port 3(batadv1) entered disabled state [ 817.159490][ T35] bridge_slave_1: left allmulticast mode [ 817.166786][ T35] bridge_slave_1: left promiscuous mode [ 817.189841][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.216315][ T35] bridge_slave_0: left allmulticast mode [ 817.222168][ T35] bridge_slave_0: left promiscuous mode [ 817.228466][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.680234][ T35] bond0 (unregistering): Released all slaves [ 817.698398][ T35] bond1 (unregistering): Released all slaves [ 817.714074][ T35] bond2 (unregistering): Released all slaves [ 817.731243][ T35] bond3 (unregistering): Released all slaves [ 817.745076][ T35] bond4 (unregistering): Released all slaves [ 817.759552][ T35] bond5 (unregistering): Released all slaves [ 817.936701][ T35] bond5 (unregistering): (slave gretap1): Releasing active interface [ 818.130499][ T35] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 818.171088][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 818.181310][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 818.190950][ T35] bond0 (unregistering): Released all slaves [ 818.202497][ T35] bond1 (unregistering): Released all slaves [ 818.218925][ T35] bond2 (unregistering): Released all slaves [ 818.240564][ T35] bond3 (unregistering): Released all slaves [ 818.259536][ T35] bond4 (unregistering): Released all slaves [ 818.273841][ T35] bond5 (unregistering): Released all slaves [ 818.289307][ T35] bond6 (unregistering): Released all slaves [ 818.314437][T29262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.338517][T29988] syzkaller1: entered promiscuous mode [ 818.355593][T29988] syzkaller1: entered allmulticast mode [ 818.395766][T30000] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 818.474329][T29262] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.546271][T30005] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 818.594500][T30009] netlink: 'syz.5.6362': attribute type 1 has an invalid length. [ 818.672617][T30009] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 818.673182][ T35] : left promiscuous mode [ 818.841328][ T8180] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.848548][ T8180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.925074][ T35] hmac(sha2: left promiscuous mode [ 819.056460][ T8180] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.063629][ T8180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.151273][ T35] tipc: Disabling bearer [ 819.186572][ T35] tipc: Left network mode [ 819.235707][ T35] tipc: Left network mode [ 820.040781][T30064] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6373'. [ 820.144589][T30064] netlink: 'syz.1.6373': attribute type 1 has an invalid length. [ 820.244651][T30067] netlink: 'syz.1.6373': attribute type 3 has an invalid length. [ 820.317766][T30067] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6373'. [ 820.495406][T30087] netlink: 'syz.3.6377': attribute type 1 has an invalid length. [ 820.529167][T30088] netlink: 'syz.3.6377': attribute type 1 has an invalid length. [ 820.542491][T30076] 8021q: adding VLAN 0 to HW filter on device bond2 [ 820.553150][T30087] netlink: 'syz.3.6377': attribute type 2 has an invalid length. [ 820.576120][T30076] bond1: (slave bond2): making interface the new active one [ 820.585271][T30088] netlink: 'syz.3.6377': attribute type 2 has an invalid length. [ 820.609321][T30076] bond1: (slave bond2): Enslaving as an active interface with an up link [ 820.855394][T30109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 820.915603][T17603] Bluetooth: hci5: command 0x0405 tx timeout [ 821.480297][T29262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 821.520618][ T35] batman_adv: batadv0: Removing interface: macvtap1 [ 821.709770][T30145] netlink: 'syz.3.6386': attribute type 1 has an invalid length. [ 821.741878][T30147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6386'. [ 821.756407][T30149] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6388'. [ 821.765604][T30145] netlink: 'syz.3.6386': attribute type 1 has an invalid length. [ 821.773511][T30145] netlink: 264 bytes leftover after parsing attributes in process `syz.3.6386'. [ 821.784452][T30149] netlink: 'syz.5.6388': attribute type 30 has an invalid length. [ 821.808785][T30145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6386'. [ 821.917486][T29262] veth0_vlan: entered promiscuous mode [ 821.942382][T29262] veth1_vlan: entered promiscuous mode [ 822.039330][T30160] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6391'. [ 822.114663][T30163] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6390'. [ 822.747531][T30184] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 823.331548][T28241] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.347960][T28241] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.368480][T28241] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.378319][T28241] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.429443][ T35] hsr_slave_0: left promiscuous mode [ 823.443480][ T35] hsr_slave_1: left promiscuous mode [ 823.451143][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.459612][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 823.499317][T30204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 824.108244][ T35] dummy0 (unregistering): left allmulticast mode [ 824.220382][ T35] pim6reg (unregistering): left allmulticast mode [ 824.833720][ T3360] smc: removing ib device syz0 [ 824.868859][T28241] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 824.870635][ T3360] smbdirect: ib_dev[syz0] removed [ 824.885061][T28241] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.908691][T28241] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 824.933952][T28241] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.966636][T30208] lo: entered allmulticast mode [ 824.971901][T30208] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 825.209689][T29262] veth0_macvtap: entered promiscuous mode [ 825.253133][T29262] veth1_macvtap: entered promiscuous mode [ 825.281263][T30242] FAULT_INJECTION: forcing a failure. [ 825.281263][T30242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 825.310025][T30242] CPU: 1 UID: 0 PID: 30242 Comm: syz.6.6402 Not tainted syzkaller #0 PREEMPT(full) [ 825.310049][T30242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 825.310060][T30242] Call Trace: [ 825.310068][T30242] [ 825.310076][T30242] dump_stack_lvl+0xe8/0x150 [ 825.310102][T30242] should_fail_ex+0x412/0x560 [ 825.310127][T30242] _copy_from_user+0x2d/0xb0 [ 825.310149][T30242] ___sys_sendmsg+0x1c6/0x360 [ 825.310171][T30242] ? __lock_acquire+0x6b5/0x2cf0 [ 825.310194][T30242] ? __pfx____sys_sendmsg+0x10/0x10 [ 825.310223][T30242] ? kstrtouint+0x6e/0xe0 [ 825.310269][T30242] ? __fget_files+0x2a/0x420 [ 825.310291][T30242] ? __fget_files+0x3a0/0x420 [ 825.310321][T30242] __sys_sendmmsg+0x27c/0x4e0 [ 825.310346][T30242] ? __pfx___sys_sendmmsg+0x10/0x10 [ 825.310365][T30242] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 825.310408][T30242] ? ksys_write+0x242/0x270 [ 825.310435][T30242] ? __pfx_ksys_write+0x10/0x10 [ 825.310466][T30242] __x64_sys_sendmmsg+0xa0/0xc0 [ 825.310487][T30242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.310506][T30242] do_syscall_64+0x174/0x580 [ 825.310525][T30242] ? trace_irq_disable+0x3b/0x140 [ 825.310551][T30242] ? clear_bhb_loop+0x40/0x90 [ 825.310574][T30242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.310592][T30242] RIP: 0033:0x7f9598f9ce59 [ 825.310611][T30242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 825.310627][T30242] RSP: 002b:00007f9599d74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 825.310647][T30242] RAX: ffffffffffffffda RBX: 00007f9599215fa0 RCX: 00007f9598f9ce59 [ 825.310661][T30242] RDX: 0000000000000003 RSI: 0000200000001980 RDI: 0000000000000004 [ 825.310674][T30242] RBP: 00007f9599d74090 R08: 0000000000000000 R09: 0000000000000000 [ 825.310686][T30242] R10: 000000002400cc40 R11: 0000000000000246 R12: 0000000000000001 [ 825.310698][T30242] R13: 00007f9599216038 R14: 00007f9599215fa0 R15: 00007ffd6e46beb8 [ 825.310728][T30242] [ 825.358196][T29262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 825.544947][T29262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 825.663279][T30243] bond0: Device is already in use. [ 825.691966][ T6806] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.698950][T30251] validate_nla: 3 callbacks suppressed [ 825.698968][T30251] netlink: 'syz.3.6401': attribute type 1 has an invalid length. [ 825.711384][ T6806] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.739553][ T6806] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.779585][ T6806] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.218976][T10716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.250010][T10716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.503169][T28241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.537644][T28241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.762815][T30276] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 827.073230][T30294] netlink: 'syz.2.6224': attribute type 12 has an invalid length. [ 827.102773][T30294] netlink: 'syz.2.6224': attribute type 29 has an invalid length. [ 827.121531][T30294] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6224'. [ 827.180211][T30294] netlink: 'syz.2.6224': attribute type 1 has an invalid length. [ 827.239020][T30294] netlink: 'syz.2.6224': attribute type 2 has an invalid length. [ 827.551271][ T5296] 8021q: adding VLAN 0 to HW filter on device eth5 [ 827.853184][T30330] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6413'. [ 828.185016][T30346] Bluetooth: MGMT ver 1.23 [ 828.222306][T30345] nbd: illegal input index -1 [ 828.290112][T30349] veth0_macvtap: Caught tx_queue_len zero misconfig [ 828.465583][T30370] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6421'. [ 828.474757][T30368] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6422'. [ 828.532953][T30370] netlink: 35 bytes leftover after parsing attributes in process `syz.2.6421'. [ 828.672195][T30379] netlink: 'syz.1.6425': attribute type 1 has an invalid length. [ 829.488467][T30394] bond3: (slave gretap1): making interface the new active one [ 829.546538][T30394] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 829.765133][T30400] macvlan2: entered promiscuous mode [ 829.781183][T30400] macvlan2: entered allmulticast mode [ 829.789579][T30400] bond3: entered promiscuous mode [ 829.806777][T30400] gretap1: entered promiscuous mode [ 829.822278][T30400] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 829.836805][T30400] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 829.836868][T30416] openvswitch: netlink: EtherType 50a is less than min 600 [ 829.857458][T30400] bond3: left promiscuous mode [ 829.864875][T30400] gretap1: left promiscuous mode [ 829.871920][T30419] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 829.900872][ T5296] 8021q: adding VLAN 0 to HW filter on device eth6 [ 829.930502][T30416] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6430'. [ 830.169423][T30437] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6435'. [ 830.207668][T30440] Bluetooth: MGMT ver 1.23 [ 830.226849][T30437] ip6gre1: entered promiscuous mode [ 830.247068][T30437] ip6gre1: entered allmulticast mode [ 830.401618][ T35] IPVS: stop unused estimator thread 0... [ 830.418055][T30453] netlink: 'syz.5.6439': attribute type 10 has an invalid length. [ 830.427999][ T35] IPVS: stop unused estimator thread 0... [ 830.469433][T30452] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.6438'. [ 830.933962][T11343] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 830.946706][ T29] audit: type=1800 audit(1780651259.217:23): pid=30443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6436" name="memory.events" dev="tmpfs" ino=497 res=0 errno=0 [ 830.951242][T11343] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 830.978123][T26514] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 831.048117][T30486] sctp: [Deprecated]: syz.6.6446 (pid 30486) Use of int in max_burst socket option. [ 831.048117][T30486] Use struct sctp_assoc_value instead [ 831.150619][T30489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6447'. [ 831.202310][T30493] netlink: 'syz.2.6449': attribute type 1 has an invalid length. [ 831.211026][T26514] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 831.435272][T26514] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 831.875502][ T5296] 8021q: adding VLAN 0 to HW filter on device eth7 [ 832.406541][T30546] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6460'. [ 832.525638][ T29] audit: type=1800 audit(1780651260.787:24): pid=30555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6462" name=20 dev="tmpfs" ino=1573 res=0 errno=0 [ 832.608538][T30546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6460'. [ 833.123679][T30592] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 833.131693][T30592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 833.150487][T30595] netlink: 'syz.5.6472': attribute type 1 has an invalid length. [ 833.160006][T30592] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20000 [ 833.386765][T30586] bond4: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 833.552860][T30586] bond4 (unregistering): Released all slaves [ 833.798601][T30595] bond9: entered promiscuous mode [ 833.824370][T30595] 8021q: adding VLAN 0 to HW filter on device bond9 [ 833.853415][ T5296] 8021q: adding VLAN 0 to HW filter on device eth8 [ 834.288697][T30612] bond2: option packets_per_slave: invalid value (1048582) [ 834.311915][T30612] bond2: option packets_per_slave: allowed values 0 - 65535 [ 834.339545][T30612] bond2 (unregistering): Released all slaves [ 834.582763][T30632] lo speed is unknown, defaulting to 1000 [ 834.702974][T30653] netlink: 'syz.1.6486': attribute type 1 has an invalid length. [ 834.711055][T30653] netlink: 'syz.1.6486': attribute type 3 has an invalid length. [ 834.730984][T30653] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6486'. [ 834.919578][T30660] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 834.947687][T30660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6488'. [ 834.970840][T30660] unsupported nla_type 216 [ 834.991125][T30660] netlink: zone id is out of range [ 835.011933][T30660] netlink: zone id is out of range [ 835.030454][T30660] netlink: zone id is out of range [ 835.051138][T30660] netlink: zone id is out of range [ 835.083636][T30660] netlink: zone id is out of range [ 835.097521][T30660] netlink: zone id is out of range [ 835.108642][T30660] netlink: zone id is out of range [ 835.120830][T30660] netlink: zone id is out of range [ 835.155133][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 835.201864][T30674] netlink: 'syz.6.6490': attribute type 2 has an invalid length. [ 835.223815][T30674] netlink: 'syz.6.6490': attribute type 2 has an invalid length. [ 835.251683][T30670] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6490'. [ 835.789806][T30691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6494'. [ 835.914186][T30696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6494'. [ 836.115390][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 836.302470][T30708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6497'. [ 836.322046][T30708] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6497'. [ 836.455973][T30715] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6499'. [ 836.771115][T30714] syzkaller0: entered promiscuous mode [ 836.784309][T30714] syzkaller0: entered allmulticast mode [ 839.506902][T30793] __nla_validate_parse: 1 callbacks suppressed [ 839.506921][T30793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6507'. [ 840.847724][T30799] netlink: 'syz.6.6509': attribute type 11 has an invalid length. [ 840.877678][T30793] team0: Port device team_slave_0 removed [ 840.887192][T30802] xt_TCPMSS: Only works on TCP SYN packets [ 840.967447][ T29] audit: type=1800 audit(1780651269.237:25): pid=30802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6510" name="memory.events" dev="tmpfs" ino=558 res=0 errno=0 [ 841.141690][T30809] netlink: 'syz.6.6513': attribute type 13 has an invalid length. [ 841.174356][T30809] netlink: 'syz.6.6513': attribute type 17 has an invalid length. [ 841.348928][T30809] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.412321][T30809] batadv0: left promiscuous mode [ 841.432984][T30809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.542144][T30834] netlink: 'syz.2.6519': attribute type 1 has an invalid length. [ 841.552508][T30834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6519'. [ 841.611875][T30809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.639801][T30809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 841.680665][T30809] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 841.695641][T30809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 841.786482][T18127] block nbd5: Receive control failed (result -32) [ 841.803210][T30809] veth1_vlan: left promiscuous mode [ 841.841711][T30809] veth0_vlan: left promiscuous mode [ 841.864629][T30809] veth0_vlan: entered promiscuous mode [ 841.899057][T30809] veth1_vlan: entered promiscuous mode [ 841.927011][T30809] veth1_macvtap: left promiscuous mode [ 841.943937][T30809] veth0_macvtap: left promiscuous mode [ 841.956760][T30809] veth0_macvtap: entered promiscuous mode [ 841.994520][T30809] veth1_macvtap: entered promiscuous mode [ 842.012075][T30809] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 842.034574][T30809] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 842.069291][T30809] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 842.103957][T30809] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 842.145510][T30809] mac80211_hwsim hwsim81 syzkaller0: left promiscuous mode [ 842.163541][T30809] mac80211_hwsim hwsim81 syzkaller0: left allmulticast mode [ 842.211121][T30809] 8021q: adding VLAN 0 to HW filter on device bond1 [ 842.254228][T30809] 8021q: adding VLAN 0 to HW filter on device bond2 [ 842.299835][T30809] gre1: left allmulticast mode [ 842.334357][T30809] 8021q: adding VLAN 0 to HW filter on device bond3 [ 842.364247][T30809] veth3: left allmulticast mode [ 842.376640][T30871] net_ratelimit: 15 callbacks suppressed [ 842.376662][T30871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 842.392843][T30809] 8021q: adding VLAN 0 to HW filter on device bond4 [ 842.410558][T30809] 8021q: adding VLAN 0 to HW filter on device bond5 [ 842.436755][T30809] 8021q: adding VLAN 0 to HW filter on device bond6 [ 842.448416][T30809] 8021q: adding VLAN 0 to HW filter on device bond7 [ 842.521887][T30809] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 842.529891][T30879] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6526'. [ 842.540664][T30879] netlink: 'syz.2.6526': attribute type 7 has an invalid length. [ 842.547162][T30809] 8021q: adding VLAN 0 to HW filter on device bond8 [ 842.567528][T30879] netlink: 'syz.2.6526': attribute type 8 has an invalid length. [ 842.596644][T11343] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.603849][T11343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.611780][ T6806] bond1: (slave bridge0): link status up again after 0 ms [ 842.638873][T30879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6526'. [ 842.657763][ T35] bond1: (slave bridge0): link status up again after 0 ms [ 842.660631][T11343] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.674005][T11343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 842.688354][ T6806] bond1: (slave bridge0): link status up again after 0 ms [ 842.715174][ T6806] bond1: (slave bridge0): link status up again after 0 ms [ 842.746014][ T6806] bond1: (slave bridge0): link status up again after 0 ms [ 842.778036][ T6806] bond1: (slave bridge0): link status up again after 0 ms [ 842.795551][T10720] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 842.806392][ T6806] bond1: (slave bridge0): link status up again after 0 ms [ 842.814577][T10720] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.840040][T10720] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 842.857994][ T6805] bond1: (slave bridge0): link status up again after 0 ms [ 842.859595][T10720] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.897175][ T6805] bond1: (slave bridge0): link status up again after 0 ms [ 842.942422][T10720] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 842.951544][T10720] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.961754][T10720] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 842.985253][T10720] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.075529][T30896] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6531'. [ 843.117452][T30896] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6531'. [ 843.130886][T30896] netlink: 560 bytes leftover after parsing attributes in process `syz.5.6531'. [ 843.142890][T30896] netlink: 964 bytes leftover after parsing attributes in process `syz.5.6531'. [ 843.154974][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 843.175012][T30896] netlink: 560 bytes leftover after parsing attributes in process `syz.5.6531'. [ 843.202326][T30900] : entered promiscuous mode [ 843.212960][T30900] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6532'. [ 845.778985][T30885] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 845.921755][T30915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6536'. [ 845.963761][T30915] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6536'. [ 846.004254][T30915] ip6gre1: entered promiscuous mode [ 846.087963][T30915] ip6gre1: entered allmulticast mode [ 846.591189][T30937] lo speed is unknown, defaulting to 1000 [ 846.604089][T30955] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6547'. [ 846.656107][T30955] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6547'. [ 846.738320][T30964] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6550'. [ 846.893851][T30968] debugfs: '1^!Y [ 846.893851][T30968] 3UH5rBn\' already exists in 'ieee80211' [ 846.990467][T30967] sysfs: cannot create duplicate filename '/class/ieee80211/1^!Y [ 846.990467][T30967] 3UH5rBn\' [ 847.009128][T30967] CPU: 1 UID: 0 PID: 30967 Comm: syz.3.6551 Not tainted syzkaller #0 PREEMPT(full) [ 847.009153][T30967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 847.009164][T30967] Call Trace: [ 847.009172][T30967] [ 847.009180][T30967] dump_stack_lvl+0xe8/0x150 [ 847.009206][T30967] sysfs_warn_dup+0x8e/0xa0 [ 847.009230][T30967] sysfs_do_create_link_sd+0xc0/0x110 [ 847.009254][T30967] device_add_class_symlinks+0x1cf/0x240 [ 847.009287][T30967] device_add+0x475/0xbb0 [ 847.009318][T30967] wiphy_register+0x1fb1/0x2fe0 [ 847.009355][T30967] ? __pfx_wiphy_register+0x10/0x10 [ 847.009377][T30967] ? __pfx_netdev_run_todo+0x10/0x10 [ 847.009400][T30967] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 847.009430][T30967] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 847.009464][T30967] ieee80211_register_hw+0x3c53/0x4910 [ 847.009498][T30967] ? ieee80211_register_hw+0x1981/0x4910 [ 847.009549][T30967] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 847.009574][T30967] ? __asan_memset+0x22/0x50 [ 847.009598][T30967] ? __hrtimer_setup+0x1b7/0x260 [ 847.009621][T30967] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 847.009646][T30967] mac80211_hwsim_new_radio+0x3306/0x57b0 [ 847.009699][T30967] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 847.009724][T30967] ? __asan_memcpy+0x40/0x70 [ 847.009753][T30967] hwsim_new_radio_nl+0xd96/0xfa0 [ 847.009797][T30967] genl_family_rcv_msg_doit+0x22a/0x330 [ 847.009831][T30967] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 847.009868][T30967] ? bpf_lsm_capable+0x9/0x20 [ 847.009885][T30967] ? security_capable+0x7e/0x2c0 [ 847.009915][T30967] genl_rcv_msg+0x61c/0x7a0 [ 847.009945][T30967] ? __pfx_genl_rcv_msg+0x10/0x10 [ 847.009969][T30967] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 847.009989][T30967] ? __pfx_ref_tracker_free+0x10/0x10 [ 847.010105][T30967] netlink_rcv_skb+0x232/0x4b0 [ 847.010128][T30967] ? __pfx_genl_rcv_msg+0x10/0x10 [ 847.010155][T30967] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 847.010192][T30967] ? down_read+0x270/0x2e0 [ 847.010212][T30967] ? genl_rcv+0xd/0x40 [ 847.010237][T30967] genl_rcv+0x28/0x40 [ 847.010259][T30967] netlink_unicast+0x75c/0x8e0 [ 847.010290][T30967] netlink_sendmsg+0x813/0xb40 [ 847.010322][T30967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 847.010349][T30967] ? aa_sock_msg_perm+0xf1/0x1b0 [ 847.010377][T30967] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 847.010406][T30967] ____sys_sendmsg+0x972/0x9f0 [ 847.010427][T30967] ? __might_fault+0xaf/0x130 [ 847.010458][T30967] ? __pfx_____sys_sendmsg+0x10/0x10 [ 847.010490][T30967] ? import_iovec+0x73/0xa0 [ 847.010517][T30967] ___sys_sendmsg+0x2a5/0x360 [ 847.010537][T30967] ? __lock_acquire+0x6b5/0x2cf0 [ 847.010562][T30967] ? __pfx____sys_sendmsg+0x10/0x10 [ 847.010592][T30967] ? futex_wake+0x4ac/0x580 [ 847.010644][T30967] ? __fget_files+0x2a/0x420 [ 847.010666][T30967] ? __fget_files+0x3a0/0x420 [ 847.010700][T30967] __x64_sys_sendmsg+0x1bd/0x2a0 [ 847.010725][T30967] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 847.010756][T30967] ? rcu_is_watching+0x15/0xb0 [ 847.010795][T30967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.010816][T30967] do_syscall_64+0x174/0x580 [ 847.010836][T30967] ? trace_irq_disable+0x3b/0x140 [ 847.010862][T30967] ? clear_bhb_loop+0x40/0x90 [ 847.010886][T30967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.010904][T30967] RIP: 0033:0x7f7e4dd9ce59 [ 847.010923][T30967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.010939][T30967] RSP: 002b:00007f7e4ec0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 847.010959][T30967] RAX: ffffffffffffffda RBX: 00007f7e4e015fa0 RCX: 00007f7e4dd9ce59 [ 847.010973][T30967] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 847.010985][T30967] RBP: 00007f7e4de32d6f R08: 0000000000000000 R09: 0000000000000000 [ 847.010997][T30967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 847.011008][T30967] R13: 00007f7e4e016038 R14: 00007f7e4e015fa0 R15: 00007fff21eb22f8 [ 847.011040][T30967] [ 847.422535][ T3360] net_ratelimit: 40 callbacks suppressed [ 847.422554][ T3360] bond1: (slave bridge0): failed to get link speed/duplex [ 847.541136][T30979] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6555'. [ 847.550293][ T3360] bond1: (slave bridge0): failed to get link speed/duplex [ 847.644193][T30987] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6557'. [ 847.664499][T30988] sctp: [Deprecated]: syz.5.6554 (pid 30988) Use of int in max_burst socket option. [ 847.664499][T30988] Use struct sctp_assoc_value instead [ 847.690401][T30987] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6557'. [ 847.694991][ T1152] bond1: (slave bridge0): failed to get link speed/duplex [ 847.756977][T30984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6556'. [ 847.815030][ T6805] bond1: (slave bridge0): failed to get link speed/duplex [ 847.826351][T30984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6556'. [ 847.926356][T30993] pim6reg: entered allmulticast mode [ 848.014470][T30993] pim6reg: left allmulticast mode [ 848.095981][ T6805] bond1: (slave bridge0): failed to get link speed/duplex [ 848.256127][T10720] bond1: (slave bridge0): failed to get link speed/duplex [ 848.271599][T31010] tipc: Enabling of bearer rejected, failed to enable media [ 848.375069][ T6805] bond1: (slave bridge0): failed to get link speed/duplex [ 848.506959][ T6805] bond1: (slave bridge0): failed to get link speed/duplex [ 848.715117][T11343] bond1: (slave bridge0): failed to get link speed/duplex [ 848.757879][T26522] page_pool_release_retry() stalled pool shutdown: id 262, 1 inflight 60 sec [ 848.835815][T10720] bond1: (slave bridge0): failed to get link speed/duplex [ 848.982407][T31038] lo speed is unknown, defaulting to 1000 [ 849.007803][T31058] netlink: 'syz.1.6577': attribute type 13 has an invalid length. [ 849.022742][T31059] sctp: [Deprecated]: syz.5.6576 (pid 31059) Use of int in max_burst socket option. [ 849.022742][T31059] Use struct sctp_assoc_value instead [ 849.579352][T31086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 849.744606][T31086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 849.928872][T31092] batadv_slave_1: entered promiscuous mode [ 850.253150][T31111] SET target dimension over the limit! [ 850.442372][T31115] 8021q: adding VLAN 0 to HW filter on device bond9 [ 850.482755][T31090] batadv_slave_1: left promiscuous mode [ 850.544089][T31122] netlink: 'syz.5.6593': attribute type 11 has an invalid length. [ 851.001487][T31140] __nla_validate_parse: 14 callbacks suppressed [ 851.001507][T31140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6599'. [ 851.042312][T31140] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 851.061951][T31140] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 851.081551][T31140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6599'. [ 851.103877][T31141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6599'. [ 851.419931][T31155] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6605'. [ 851.444274][T31155] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6605'. [ 851.464948][T31155] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6605'. [ 851.519131][T31159] vlan2: entered allmulticast mode [ 851.532245][T31159] bond0: entered allmulticast mode [ 851.538258][T31159] bond_slave_0: entered allmulticast mode [ 851.544298][T31159] bond_slave_1: entered allmulticast mode [ 851.638896][T18127] Bluetooth: hci4: command 0x0406 tx timeout [ 851.662322][T31164] netlink: 248 bytes leftover after parsing attributes in process `syz.3.6608'. [ 851.748175][T31170] wg2 speed is unknown, defaulting to 1000 [ 851.800443][T31173] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6611'. [ 851.812331][T31170] wg2 speed is unknown, defaulting to 1000 [ 851.830236][T31170] wg2 speed is unknown, defaulting to 1000 [ 851.838163][T31173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6611'. [ 851.858720][T31175] netlink: 100 bytes leftover after parsing attributes in process `syz.6.6612'. [ 852.484914][T10720] net_ratelimit: 27 callbacks suppressed [ 852.484935][T10720] bond1: (slave bridge0): failed to get link speed/duplex [ 852.520177][T31170] infiniband syz0: set active [ 852.532330][T24599] wg2 speed is unknown, defaulting to 1000 [ 852.541773][T31170] infiniband syz0: added wg2 [ 852.635404][T31170] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 852.660363][ T6805] bond1: (slave bridge0): failed to get link speed/duplex [ 852.727388][T31170] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 852.807201][T10720] bond1: (slave bridge0): failed to get link speed/duplex [ 852.875082][T31170] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 852.926246][ T6805] bond1: (slave bridge0): failed to get link speed/duplex [ 852.986069][T31170] RDS/IB: syz0: added [ 853.018807][T31170] smc: adding ib device syz0 with port count 1 [ 853.036139][T31170] smc: ib device syz0 port 1 has pnetid SY (user defined) [ 853.055143][T10720] bond1: (slave bridge0): failed to get link speed/duplex [ 853.063930][T31170] wg2 speed is unknown, defaulting to 1000 [ 853.075334][T26514] wg2 speed is unknown, defaulting to 1000 [ 853.165231][T10720] bond1: (slave bridge0): failed to get link speed/duplex [ 853.285250][T10720] bond1: (slave bridge0): failed to get link speed/duplex [ 853.425874][T11343] bond1: (slave bridge0): failed to get link speed/duplex [ 853.545284][ T6805] bond1: (slave bridge0): failed to get link speed/duplex [ 853.676491][T10720] bond1: (slave bridge0): failed to get link speed/duplex [ 853.702137][T31170] wg2 speed is unknown, defaulting to 1000 [ 853.828699][T31227] tipc: Enabled bearer , priority 0 [ 854.413238][T31170] wg2 speed is unknown, defaulting to 1000 [ 854.414667][T31249] mac80211_hwsim hwsim81 syzkaller0: entered promiscuous mode [ 854.454310][T31249] mac80211_hwsim hwsim81 syzkaller0: entered allmulticast mode [ 854.538360][T31254] bridge_slave_1: left allmulticast mode [ 854.591329][T31254] bridge_slave_1: left promiscuous mode [ 854.615178][T31254] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.749458][T31260] xt_hashlimit: size too large, truncated to 1048576 [ 854.965111][ T8748] tipc: Node number set to 4278255617 [ 855.077139][T31268] bond4: entered allmulticast mode [ 855.129233][T31268] syz_tun (unregistering): left promiscuous mode [ 855.160355][T31170] wg2 speed is unknown, defaulting to 1000 [ 855.768363][T31170] wg2 speed is unknown, defaulting to 1000 [ 856.518938][T31323] __nla_validate_parse: 7 callbacks suppressed [ 856.518956][T31323] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6642'. [ 856.537465][T31323] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6642'. [ 856.552903][T31325] netlink: 'syz.3.6645': attribute type 1 has an invalid length. [ 856.667556][T31325] 8021q: adding VLAN 0 to HW filter on device bond2 [ 856.694743][T31170] wg2 speed is unknown, defaulting to 1000 [ 856.774365][ T29] audit: type=1107 audit(1780651285.037:26): pid=31330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 856.799839][T31332] bond2: (slave geneve2): making interface the new active one [ 856.831663][T31332] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 857.243520][T31356] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 857.249539][T31170] wg2 speed is unknown, defaulting to 1000 [ 857.597124][ T6806] net_ratelimit: 24 callbacks suppressed [ 857.597141][ T6806] bond1: (slave bridge0): failed to get link speed/duplex [ 857.746673][ T6806] bond1: (slave bridge0): failed to get link speed/duplex [ 857.778673][T31378] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6655'. [ 857.832241][T31389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6655'. [ 858.030137][T31378] 8021q: adding VLAN 0 to HW filter on device bond10 [ 858.045038][T31396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6662'. [ 858.063075][T31401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6660'. [ 858.095493][T31401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6660'. [ 858.191024][T31409] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6664'. [ 858.264897][T11343] bond1: (slave bridge0): failed to get link speed/duplex [ 858.385125][T11343] bond1: (slave bridge0): failed to get link speed/duplex [ 858.481853][T31427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6670'. [ 858.525510][ T6806] bond1: (slave bridge0): failed to get link speed/duplex [ 858.684927][T11343] bond1: (slave bridge0): failed to get link speed/duplex [ 858.875643][T11343] bond1: (slave bridge0): failed to get link speed/duplex [ 858.988146][T31458] x_tables: duplicate underflow at hook 1 [ 859.009746][T31458] pim6reg1: entered promiscuous mode [ 859.028905][T31458] pim6reg1: entered allmulticast mode [ 859.131464][T31466] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 859.145918][T31466] bond3 (unregistering): Released all slaves [ 859.155016][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 859.268725][T31473] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 859.297236][T31468] lo speed is unknown, defaulting to 1000 [ 859.307317][T10720] bond1: (slave bridge0): failed to get link speed/duplex [ 859.427061][ T1152] bond1: (slave bridge0): failed to get link speed/duplex [ 859.492223][T31483] bridge3: entered promiscuous mode [ 859.512273][T31483] bridge3: entered allmulticast mode [ 859.540515][T31483] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6691'. [ 859.569532][T10720] bond1: (slave bridge0): failed to get link speed/duplex [ 859.606429][T31487] lo speed is unknown, defaulting to 1000 [ 859.891572][T31509] netlink: 'syz.1.6696': attribute type 1 has an invalid length. [ 859.917368][T31510] netlink: 'syz.6.6695': attribute type 1 has an invalid length. [ 859.954710][T31510] netlink: 'syz.6.6695': attribute type 1 has an invalid length. [ 860.018301][T31468] wg2 speed is unknown, defaulting to 1000 [ 860.924539][T31487] wg2 speed is unknown, defaulting to 1000 [ 861.716599][T31569] __nla_validate_parse: 2 callbacks suppressed [ 861.716618][T31569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6706'. [ 861.832726][T31569] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 862.383344][T31596] netlink: 'syz.1.6711': attribute type 4 has an invalid length. [ 862.410960][T31593] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6710'. [ 862.604989][T31601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6712'. [ 862.841509][T31601] 8021q: adding VLAN 0 to HW filter on device bond4 [ 862.866305][ T1152] net_ratelimit: 19 callbacks suppressed [ 862.866326][ T1152] bond1: (slave bridge0): failed to get link speed/duplex [ 863.008399][ T6805] bond1: (slave bridge0): failed to get link speed/duplex [ 863.095701][T31616] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6717'. [ 863.136559][ T1152] bond1: (slave bridge0): failed to get link speed/duplex [ 863.196033][T31616] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 863.291623][T31616] bond1 (unregistering): Released all slaves [ 863.410762][ T6805] bond1: (slave bridge0): failed to get link speed/duplex [ 863.559229][ T1152] bond1: (slave bridge0): failed to get link speed/duplex [ 863.699533][T11343] bond1: (slave bridge0): failed to get link speed/duplex [ 863.732454][T31658] lo speed is unknown, defaulting to 1000 [ 863.835000][ T35] bond1: (slave bridge0): failed to get link speed/duplex [ 863.870215][T31663] netlink: 260 bytes leftover after parsing attributes in process `syz.2.6730'. [ 863.945249][ T35] bond1: (slave bridge0): failed to get link speed/duplex [ 864.074967][ T35] bond1: (slave bridge0): failed to get link speed/duplex [ 864.185367][ T35] bond1: (slave bridge0): failed to get link speed/duplex [ 864.516455][T31658] wg2 speed is unknown, defaulting to 1000 [ 864.829695][T31680] tipc: Enabling of bearer rejected, failed to enable media [ 865.600690][T31700] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6744'. [ 865.629775][T31700] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6744'. [ 865.906560][T31709] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6746'. [ 865.985878][T31711] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6747'. [ 866.412530][T31719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6749'. [ 866.461732][T31719] netlink: 'syz.2.6749': attribute type 1 has an invalid length. [ 866.720602][T31735] netlink: 'syz.6.6755': attribute type 1 has an invalid length. [ 866.760261][T31736] bond3: (slave syz_tun): Removing an active aggregator [ 866.780158][T31736] bond3: (slave syz_tun): Releasing backup interface [ 866.819721][T31735] 8021q: adding VLAN 0 to HW filter on device bond10 [ 866.860754][T31739] __nla_validate_parse: 3 callbacks suppressed [ 866.860775][T31739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6754'. [ 867.072243][T31744] netlink: 'syz.2.6757': attribute type 1 has an invalid length. [ 867.103324][T31744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6757'. [ 867.272550][T31750] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 867.322395][T31750] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 867.379051][T31758] netlink: 'syz.2.6760': attribute type 30 has an invalid length. [ 867.579701][T31764] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6762'. [ 867.603740][T31765] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 867.658925][T31768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6764'. [ 867.663987][T31770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6764'. [ 867.882603][ T6806] net_ratelimit: 28 callbacks suppressed [ 867.882623][ T6806] bond1: (slave bridge0): failed to get link speed/duplex [ 867.960152][T31786] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6768'. [ 867.976156][T31789] tipc: Resetting bearer [ 867.988541][T31789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.999278][T31789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 868.028114][T31793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 868.060143][T31793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 868.061440][T31789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 868.081603][T31789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 868.095475][T31789] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 868.106087][T31789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 868.127254][T31789] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 868.137294][T31789] veth1_vlan: left promiscuous mode [ 868.144041][T31789] veth0_vlan: left promiscuous mode [ 868.151157][T31789] veth0_vlan: entered promiscuous mode [ 868.159970][T31789] veth1_vlan: entered promiscuous mode [ 868.171708][T31789] veth1_macvtap: left promiscuous mode [ 868.179114][T31789] veth0_macvtap: left promiscuous mode [ 868.186361][T31789] veth0_macvtap: entered promiscuous mode [ 868.193460][T31789] veth1_macvtap: entered promiscuous mode [ 868.204435][T31789] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 868.213805][T31789] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 868.222429][T31789] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 868.231258][T31789] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 868.241333][T31789] 8021q: adding VLAN 0 to HW filter on device bond1 [ 868.251455][T31789] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 868.262567][T31789] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network [ 868.276023][T31789] 8021q: adding VLAN 0 to HW filter on device bond2 [ 868.286179][T31789] 8021q: adding VLAN 0 to HW filter on device bond3 [ 868.303108][T31789] 8021q: adding VLAN 0 to HW filter on device bond7 [ 868.311737][T31789] bridge0: port 3(batadv1) entered blocking state [ 868.318296][T31789] bridge0: port 3(batadv1) entered forwarding state [ 868.326386][T31789] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 868.334316][T31789] 8021q: adding VLAN 0 to HW filter on device bond8 [ 868.346783][T24595] lo speed is unknown, defaulting to 1000 [ 868.357573][ T6806] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.364752][ T6806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.373701][T24595] sy2: Port: 1 Link ACTIVE [ 868.381214][ T6806] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.388411][ T6806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.432367][ T35] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 868.445067][T11343] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.459732][T11343] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.469364][T11343] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.484863][T11343] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.502486][T11343] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.516830][T11343] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.532612][T11343] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.541570][T11343] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.565361][ T35] bond1: (slave bridge0): failed to get link speed/duplex [ 868.676331][ T35] bond1: (slave bridge0): failed to get link speed/duplex [ 868.845728][ T35] bond1: (slave bridge0): failed to get link speed/duplex [ 868.859587][T31827] syzkaller0: entered promiscuous mode [ 868.865322][T31827] syzkaller0: entered allmulticast mode [ 868.872670][T31826] tipc: Started in network mode [ 868.878081][T31826] tipc: Node identity c27195e43b46, cluster identity 4711 [ 868.886087][T31826] tipc: Enabled bearer , priority 0 [ 868.929921][T31826] tipc: Resetting bearer [ 868.960269][T31826] tipc: Disabling bearer [ 869.047750][T31821] tipc: Resetting bearer [ 869.105916][ T6805] bond1: (slave bridge0): failed to get link speed/duplex [ 869.369228][T31845] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.376947][T31845] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.474730][T31852] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6787'. [ 869.476015][T31843] smc: net device wlan0 erased user defined pnetid SYZ0 [ 869.487986][T31852] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6787'. [ 869.500429][T31852] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6787'. [ 869.508835][T31843] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 869.525385][T31843] smc: ib device syz0 ibport 1 erased user defined pnetid SY [ 869.587243][T31845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 869.608959][T31856] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6788'. [ 869.610018][T31845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 869.706753][T11343] bond1: (slave bridge0): failed to get link speed/duplex [ 869.722664][T24595] wg2 speed is unknown, defaulting to 1000 [ 869.729926][T24595] syz0: Port: 1 Link DOWN [ 869.730689][ T1152] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.745370][ T1152] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.754496][ T1152] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.802193][T24595] wg2 speed is unknown, defaulting to 1000 [ 869.809458][ T1152] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.886042][ T1152] bond1: (slave bridge0): failed to get link speed/duplex [ 869.965298][T31869] tipc: Enabling of bearer rejected, failed to enable media [ 870.017597][T11343] bond1: (slave bridge0): failed to get link speed/duplex [ 870.166704][ T3360] bond1: (slave bridge0): failed to get link speed/duplex [ 870.295100][T11343] bond1: (slave bridge0): failed to get link speed/duplex [ 870.584052][T31915] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 870.701899][T31927] netlink: 'syz.6.6802': attribute type 1 has an invalid length. [ 870.888002][T31932] tipc: Resetting bearer [ 871.150479][T31949] tipc: Enabling of bearer rejected, failed to enable media [ 871.558543][T31967] [ 871.560916][T31967] ====================================================== [ 871.567965][T31967] WARNING: possible circular locking dependency detected [ 871.575136][T31967] syzkaller #0 Not tainted [ 871.579568][T31967] ------------------------------------------------------ [ 871.586649][T31967] syz.3.6810/31967 is trying to acquire lock: [ 871.592722][T31967] ffff888027958ed8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 871.602311][T31967] [ 871.602311][T31967] but task is already holding lock: [ 871.609673][T31967] ffff8880279589b0 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 871.619910][T31967] [ 871.619910][T31967] which lock already depends on the new lock. [ 871.619910][T31967] [ 871.630309][T31967] [ 871.630309][T31967] the existing dependency chain (in reverse order) is: [ 871.639310][T31967] [ 871.639310][T31967] -> #6 (&q->q_usage_counter(io)#55){++++}-{0:0}: [ 871.648010][T31967] blk_alloc_queue+0x546/0x680 [ 871.653325][T31967] __blk_mq_alloc_disk+0x197/0x390 [ 871.658975][T31967] nbd_dev_add+0x499/0xb50 [ 871.663964][T31967] nbd_init+0x168/0x1f0 [ 871.668731][T31967] do_one_initcall+0x250/0x870 [ 871.674130][T31967] do_initcall_level+0x104/0x190 [ 871.679634][T31967] do_initcalls+0x59/0xa0 [ 871.684474][T31967] kernel_init_freeable+0x2a6/0x3e0 [ 871.690186][T31967] kernel_init+0x1d/0x1d0 [ 871.695044][T31967] ret_from_fork+0x514/0xb70 [ 871.700181][T31967] ret_from_fork_asm+0x1a/0x30 [ 871.705457][T31967] [ 871.705457][T31967] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 871.712661][T31967] fs_reclaim_acquire+0x71/0x100 [ 871.718125][T31967] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 871.724462][T31967] __alloc_skb+0x1d0/0x7d0 [ 871.729392][T31967] __ip6_append_data+0x2d3c/0x3f60 [ 871.735124][T31967] ip6_append_data+0x10f/0x280 [ 871.740397][T31967] rawv6_sendmsg+0x12d3/0x18e0 [ 871.745731][T31967] ____sys_sendmsg+0x80a/0x9f0 [ 871.751000][T31967] ___sys_sendmsg+0x2a5/0x360 [ 871.756179][T31967] __x64_sys_sendmsg+0x1bd/0x2a0 [ 871.761627][T31967] do_syscall_64+0x174/0x580 [ 871.766723][T31967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.773123][T31967] [ 871.773123][T31967] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 871.780843][T31967] lock_sock_nested+0x41/0x100 [ 871.786142][T31967] inet_shutdown+0x6a/0x390 [ 871.791262][T31967] nbd_mark_nsock_dead+0x2e9/0x560 [ 871.796902][T31967] recv_work+0x1c2e/0x1d40 [ 871.801827][T31967] process_scheduled_works+0xb5d/0x1860 [ 871.807926][T31967] worker_thread+0xa53/0xfc0 [ 871.813047][T31967] kthread+0x389/0x470 [ 871.817634][T31967] ret_from_fork+0x514/0xb70 [ 871.822743][T31967] ret_from_fork_asm+0x1a/0x30 [ 871.828031][T31967] [ 871.828031][T31967] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 871.835674][T31967] __mutex_lock+0x1a3/0x1550 [ 871.840785][T31967] nbd_queue_rq+0x37b/0x1100 [ 871.845893][T31967] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 871.851968][T31967] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 871.858909][T31967] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 871.865412][T31967] blk_mq_run_hw_queue+0x348/0x4f0 [ 871.871052][T31967] blk_mq_dispatch_list+0xd16/0xe10 [ 871.876782][T31967] blk_mq_flush_plug_list+0x48d/0x570 [ 871.882679][T31967] __blk_flush_plug+0x3ed/0x4d0 [ 871.888070][T31967] __submit_bio+0x28d/0x580 [ 871.893099][T31967] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 871.899247][T31967] block_read_full_folio+0x599/0x830 [ 871.905052][T31967] filemap_read_folio+0x137/0x3b0 [ 871.910598][T31967] do_read_cache_folio+0x358/0x590 [ 871.916230][T31967] read_part_sector+0xb6/0x2b0 [ 871.921578][T31967] adfspart_check_ICS+0xb1/0x960 [ 871.927025][T31967] bdev_disk_changed+0x817/0x1770 [ 871.932575][T31967] blkdev_get_whole+0x380/0x510 [ 871.938000][T31967] bdev_open+0x31e/0xd30 [ 871.942764][T31967] blkdev_open+0x470/0x610 [ 871.947717][T31967] do_dentry_open+0x822/0x13a0 [ 871.952995][T31967] vfs_open+0x3b/0x340 [ 871.957594][T31967] path_openat+0x2e08/0x3860 [ 871.962700][T31967] do_file_open+0x23e/0x4a0 [ 871.967718][T31967] do_sys_openat2+0x113/0x200 [ 871.972913][T31967] __x64_sys_openat+0x138/0x170 [ 871.978274][T31967] do_syscall_64+0x174/0x580 [ 871.983372][T31967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.989778][T31967] [ 871.989778][T31967] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 871.996975][T31967] __mutex_lock+0x1a3/0x1550 [ 872.002074][T31967] nbd_queue_rq+0xc6/0x1100 [ 872.007086][T31967] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 872.013139][T31967] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 872.019983][T31967] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 872.026470][T31967] blk_mq_run_hw_queue+0x348/0x4f0 [ 872.032084][T31967] blk_mq_dispatch_list+0xd16/0xe10 [ 872.037801][T31967] blk_mq_flush_plug_list+0x48d/0x570 [ 872.043702][T31967] __blk_flush_plug+0x3ed/0x4d0 [ 872.049071][T31967] __submit_bio+0x28d/0x580 [ 872.054094][T31967] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 872.060242][T31967] block_read_full_folio+0x599/0x830 [ 872.066044][T31967] filemap_read_folio+0x137/0x3b0 [ 872.071585][T31967] do_read_cache_folio+0x358/0x590 [ 872.077207][T31967] read_part_sector+0xb6/0x2b0 [ 872.082479][T31967] adfspart_check_ICS+0xb1/0x960 [ 872.087926][T31967] bdev_disk_changed+0x817/0x1770 [ 872.093457][T31967] blkdev_get_whole+0x380/0x510 [ 872.098814][T31967] bdev_open+0x31e/0xd30 [ 872.103566][T31967] blkdev_open+0x470/0x610 [ 872.108491][T31967] do_dentry_open+0x822/0x13a0 [ 872.113766][T31967] vfs_open+0x3b/0x340 [ 872.118339][T31967] path_openat+0x2e08/0x3860 [ 872.123439][T31967] do_file_open+0x23e/0x4a0 [ 872.128462][T31967] do_sys_openat2+0x113/0x200 [ 872.133667][T31967] __x64_sys_openat+0x138/0x170 [ 872.139039][T31967] do_syscall_64+0x174/0x580 [ 872.144155][T31967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.150558][T31967] [ 872.150558][T31967] -> #1 (set->srcu){.+.+}-{0:0}: [ 872.157672][T31967] __synchronize_srcu+0xca/0x300 [ 872.163120][T31967] elevator_switch+0x1e8/0x7a0 [ 872.168392][T31967] elevator_change+0x2cc/0x450 [ 872.173666][T31967] elevator_set_default+0x36c/0x430 [ 872.179368][T31967] blk_register_queue+0x3e9/0x4e0 [ 872.184900][T31967] __add_disk+0x677/0xd50 [ 872.189740][T31967] add_disk_fwnode+0xfb/0x480 [ 872.194926][T31967] nbd_dev_add+0x72c/0xb50 [ 872.199856][T31967] nbd_init+0x168/0x1f0 [ 872.204519][T31967] do_one_initcall+0x250/0x870 [ 872.209789][T31967] do_initcall_level+0x104/0x190 [ 872.215234][T31967] do_initcalls+0x59/0xa0 [ 872.220066][T31967] kernel_init_freeable+0x2a6/0x3e0 [ 872.225770][T31967] kernel_init+0x1d/0x1d0 [ 872.230607][T31967] ret_from_fork+0x514/0xb70 [ 872.235701][T31967] ret_from_fork_asm+0x1a/0x30 [ 872.240971][T31967] [ 872.240971][T31967] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 872.248775][T31967] __lock_acquire+0x15a5/0x2cf0 [ 872.254129][T31967] lock_acquire+0x106/0x350 [ 872.259225][T31967] __mutex_lock+0x1a3/0x1550 [ 872.264319][T31967] elevator_change+0x1b3/0x450 [ 872.269590][T31967] elevator_set_none+0xb5/0x140 [ 872.274955][T31967] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 872.281277][T31967] nbd_start_device+0x17f/0xb10 [ 872.286638][T31967] nbd_genl_connect+0x165b/0x1cf0 [ 872.292170][T31967] genl_family_rcv_msg_doit+0x22a/0x330 [ 872.298226][T31967] genl_rcv_msg+0x61c/0x7a0 [ 872.303237][T31967] netlink_rcv_skb+0x232/0x4b0 [ 872.308505][T31967] genl_rcv+0x28/0x40 [ 872.312997][T31967] netlink_unicast+0x75c/0x8e0 [ 872.318266][T31967] netlink_sendmsg+0x813/0xb40 [ 872.323538][T31967] ____sys_sendmsg+0x972/0x9f0 [ 872.328820][T31967] ___sys_sendmsg+0x2a5/0x360 [ 872.334003][T31967] __x64_sys_sendmsg+0x1bd/0x2a0 [ 872.339444][T31967] do_syscall_64+0x174/0x580 [ 872.344539][T31967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.350938][T31967] [ 872.350938][T31967] other info that might help us debug this: [ 872.350938][T31967] [ 872.361147][T31967] Chain exists of: [ 872.361147][T31967] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#55 [ 872.361147][T31967] [ 872.374873][T31967] Possible unsafe locking scenario: [ 872.374873][T31967] [ 872.382382][T31967] CPU0 CPU1 [ 872.387762][T31967] ---- ---- [ 872.393140][T31967] lock(&q->q_usage_counter(io)#55); [ 872.398509][T31967] lock(fs_reclaim); [ 872.404993][T31967] lock(&q->q_usage_counter(io)#55); [ 872.412884][T31967] lock(&q->elevator_lock); [ 872.417479][T31967] [ 872.417479][T31967] *** DEADLOCK *** [ 872.417479][T31967] [ 872.425676][T31967] 6 locks held by syz.3.6810/31967: [ 872.430857][T31967] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 872.439087][T31967] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 872.448050][T31967] #2: ffff888027bdc9c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60 [ 872.459440][T31967] #3: ffff888027bdc8d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60 [ 872.470398][T31967] #4: ffff8880279589b0 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 872.481021][T31967] #5: ffff8880279589e8 (&q->q_usage_counter(queue)#39){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 872.491892][T31967] [ 872.491892][T31967] stack backtrace: [ 872.497763][T31967] CPU: 0 UID: 0 PID: 31967 Comm: syz.3.6810 Not tainted syzkaller #0 PREEMPT(full) [ 872.497783][T31967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 872.497793][T31967] Call Trace: [ 872.497800][T31967] [ 872.497808][T31967] dump_stack_lvl+0xe8/0x150 [ 872.497827][T31967] print_circular_bug+0x2e1/0x300 [ 872.497849][T31967] check_noncircular+0x12e/0x150 [ 872.497871][T31967] __lock_acquire+0x15a5/0x2cf0 [ 872.497889][T31967] ? ktime_get+0x45/0x220 [ 872.497918][T31967] ? elevator_change+0x1b3/0x450 [ 872.497935][T31967] lock_acquire+0x106/0x350 [ 872.497950][T31967] ? elevator_change+0x1b3/0x450 [ 872.497972][T31967] __mutex_lock+0x1a3/0x1550 [ 872.497991][T31967] ? elevator_change+0x1b3/0x450 [ 872.498010][T31967] ? rcu_is_watching+0x15/0xb0 [ 872.498029][T31967] ? work_grab_pending+0x3d1/0x990 [ 872.498046][T31967] ? elevator_change+0x1b3/0x450 [ 872.498064][T31967] ? __pfx___mutex_lock+0x10/0x10 [ 872.498080][T31967] ? enable_work+0x17f/0x230 [ 872.498097][T31967] ? lockdep_hardirqs_on+0x7a/0x110 [ 872.498116][T31967] ? __cancel_work_sync+0xf7/0x110 [ 872.498134][T31967] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 872.498156][T31967] elevator_change+0x1b3/0x450 [ 872.498175][T31967] elevator_set_none+0xb5/0x140 [ 872.498193][T31967] ? __pfx_elevator_set_none+0x10/0x10 [ 872.498212][T31967] ? xa_load+0x1db/0x210 [ 872.498231][T31967] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 872.498258][T31967] ? kernfs_add_one+0x477/0x5c0 [ 872.498280][T31967] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 872.498305][T31967] ? sysfs_add_file_mode_ns+0x259/0x300 [ 872.498325][T31967] nbd_start_device+0x17f/0xb10 [ 872.498350][T31967] ? device_create_file+0xf4/0x1b0 [ 872.498374][T31967] nbd_genl_connect+0x165b/0x1cf0 [ 872.498395][T31967] ? __pfx___nla_validate_parse+0x10/0x10 [ 872.498423][T31967] ? __pfx_nbd_genl_connect+0x10/0x10 [ 872.498446][T31967] ? rcu_is_watching+0x15/0xb0 [ 872.498464][T31967] ? trace_kmalloc+0x2a/0xf0 [ 872.498487][T31967] ? __nla_parse+0x40/0x60 [ 872.498505][T31967] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 872.498529][T31967] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 872.498554][T31967] genl_family_rcv_msg_doit+0x22a/0x330 [ 872.498579][T31967] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 872.498605][T31967] ? __lock_acquire+0x6b5/0x2cf0 [ 872.498624][T31967] genl_rcv_msg+0x61c/0x7a0 [ 872.498647][T31967] ? __pfx_genl_rcv_msg+0x10/0x10 [ 872.498667][T31967] ? __pfx_nbd_genl_connect+0x10/0x10 [ 872.498693][T31967] netlink_rcv_skb+0x232/0x4b0 [ 872.498710][T31967] ? __pfx_genl_rcv_msg+0x10/0x10 [ 872.498732][T31967] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 872.498754][T31967] ? down_read+0x270/0x2e0 [ 872.498771][T31967] ? genl_rcv+0xd/0x40 [ 872.498792][T31967] genl_rcv+0x28/0x40 [ 872.498811][T31967] netlink_unicast+0x75c/0x8e0 [ 872.498830][T31967] netlink_sendmsg+0x813/0xb40 [ 872.498851][T31967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 872.498870][T31967] ? aa_sock_msg_perm+0xf1/0x1b0 [ 872.498893][T31967] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 872.498916][T31967] ____sys_sendmsg+0x972/0x9f0 [ 872.498934][T31967] ? __might_fault+0xaf/0x130 [ 872.498956][T31967] ? __pfx_____sys_sendmsg+0x10/0x10 [ 872.498976][T31967] ? import_iovec+0x73/0xa0 [ 872.498995][T31967] ___sys_sendmsg+0x2a5/0x360 [ 872.499012][T31967] ? __lock_acquire+0x6b5/0x2cf0 [ 872.499029][T31967] ? __pfx____sys_sendmsg+0x10/0x10 [ 872.499048][T31967] ? futex_wake+0x4ac/0x580 [ 872.499079][T31967] ? __fget_files+0x2a/0x420 [ 872.499097][T31967] ? __fget_files+0x3a0/0x420 [ 872.499118][T31967] __x64_sys_sendmsg+0x1bd/0x2a0 [ 872.499136][T31967] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 872.499157][T31967] ? rcu_is_watching+0x15/0xb0 [ 872.499178][T31967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.499193][T31967] do_syscall_64+0x174/0x580 [ 872.499209][T31967] ? trace_irq_disable+0x3b/0x140 [ 872.499231][T31967] ? clear_bhb_loop+0x40/0x90 [ 872.499248][T31967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.499264][T31967] RIP: 0033:0x7f7e4dd9ce59 [ 872.499278][T31967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.499292][T31967] RSP: 002b:00007f7e4ec0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 872.499309][T31967] RAX: ffffffffffffffda RBX: 00007f7e4e015fa0 RCX: 00007f7e4dd9ce59 [ 872.499320][T31967] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 0000000000000006 [ 872.499331][T31967] RBP: 00007f7e4de32d6f R08: 0000000000000000 R09: 0000000000000000 [ 872.499341][T31967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 872.499351][T31967] R13: 00007f7e4e016038 R14: 00007f7e4e015fa0 R15: 00007fff21eb22f8 [ 872.499369][T31967] [ 872.854970][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 873.044885][T11343] net_ratelimit: 16 callbacks suppressed [ 873.044906][T11343] bond1: (slave bridge0): failed to get link speed/duplex [ 873.073730][T17603] block nbd6: Receive control failed (result -32) [ 873.073742][T18127] block nbd6: Receive control failed (result -32) [ 873.175005][T11343] bond1: (slave bridge0): failed to get link speed/duplex [ 873.286430][ T35] bond1: (slave bridge0): failed to get link speed/duplex [ 873.395085][ T35] bond1: (slave bridge0): failed to get link speed/duplex [ 873.505633][ T35] bond1: (slave bridge0): failed to get link speed/duplex [ 873.615050][ T1152] bond1: (slave bridge0): failed to get link speed/duplex [ 873.726895][ T1152] bond1: (slave bridge0): failed to get link speed/duplex [ 873.835098][ T6806] bond1: (slave bridge0): failed to get link speed/duplex [ 873.946678][ T1152] bond1: (slave bridge0): failed to get link speed/duplex [ 874.055548][ T6806] bond1: (slave bridge0): failed to get link speed/duplex [ 878.114997][T10720] net_ratelimit: 35 callbacks suppressed [ 878.116457][T10720] bond1: (slave bridge0): failed to get link speed/duplex [ 878.234994][T10720] bond1: (slave bridge0): failed to get link speed/duplex [ 878.344921][T11343] bond1: (slave bridge0): failed to get link speed/duplex [ 878.454902][T11343] bond1: (slave bridge0): failed to get link speed/duplex [ 878.564912][ T1152] bond1: (slave bridge0): failed to get link speed/duplex [ 878.675147][T11343] bond1: (slave bridge0): failed to get link speed/duplex [ 878.784928][ T35] bond1: (slave bridge0): failed to get link speed/duplex [ 878.894876][T11343] bond1: (slave bridge0): failed to get link speed/duplex [ 879.005044][ T35] bond1: (slave bridge0): failed to get link speed/duplex [ 879.114894][ T1152] bond1: (slave bridge0): failed to get link speed/duplex