last executing test programs: 2m54.563194552s ago: executing program 0 (id=2880): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073597a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c00014000000000000000002c0001800a0001006c696d69740000001c0002800c00024000000000100000000c0001"], 0x110}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 2m54.35536061s ago: executing program 0 (id=2883): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@multicast, @remote, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@mpls_mc={0x8848, {[{0x8}, {0x9, 0x0, 0x1}, {0x7}, {0x2}, {0x8}], @generic="aabc0dfe9f340d44fc4f2c34fd726bf24a6e3bda562e2e57252e8228208b92b345f4619ed6ca3aa5"}}}}, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r4) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r5, &(0x7f0000000840)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000290b95aa75305181ead8dfc5ba6bb6131ec53ec327c428527e76dd274ce854fffd60ffb18d6bcc81e2d49dd145cb7fd26b454941ad768e7a1c3211be694e7d4b77d8d9569ea47a6eb60f1777e3531d54c893d32a6a3546b59f", @ANYRES16=r6, @ANYBLOB="00012abd7000fedbdf251b00000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20040044) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r4) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000940)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r4, &(0x7f0000000a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r8, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000010) r10 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NFC_CMD_VENDOR(r4, &(0x7f0000000640)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)={0xd4, r10, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xa}, @NFC_ATTR_VENDOR_DATA={0xad, 0x1f, "e63ee82c086911bee5f19058b789ac70ade303a149992e6d0b807d5e03a6eae1e8911779e3c3923e37443ebef15073bfe12e327f1252d15764f1920b5f4175f196f1d8408ad74969306ddb81fdc88ad1b3fa5db335499c255d4cfa014524e2c798fa60b9ac037291e7dd9de5cc4db40c3c796ed87645dc2bec1daa625150d6e54338d429943fd83f45a97033f058223153689369b19cd5e411d5691719dbc5f67c1bef87a41dc4d807"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x91}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r12 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_IPSEC_POLICY(r12, 0x29, 0x48, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@in=@broadcast}, 0x0, @in6=@private0}}, 0xe8) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x2c, r11, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r14}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4a}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r16 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r16, 0x8915, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r12, 0x8933, &(0x7f0000000040)={'wg0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x84, 0x10, 0xffffff1f, 0xfffffffd, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e21}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @empty}]}}}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x84}, 0x1, 0x0, 0x0, 0x20004005}, 0x4000) 2m54.226127965s ago: executing program 0 (id=2886): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x3, [0x720c, 0x2, 0x101]}, &(0x7f0000000080)=0xa) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'veth0\x00', {'veth1_to_hsr\x00'}, 0x4}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x94, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e23, 0x9, @empty}, @in6={0xa, 0x4e23, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, @in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={r2, 0x44}, 0x8) 2m53.73737726s ago: executing program 0 (id=2894): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000080)=0x4100, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000001600000000000000791018002bd6460595000000000000008f093a67647fa001107b7ad4a228a15258793b68460a581cfc702950b14695d72fde6c7b979dbd7191a976993641f753be4ab6c0be3abb8cfa9cb429a9ff222d166984bc7b4289ad9e046d005b10ded9ea9a20d9f15d206f7425562f00db4ec3346b5e443e51e83ac69e35e1d7d892ef356b602fa7"], &(0x7f0000000100)='syzkaller\x00'}, 0x80) 2m53.673080432s ago: executing program 0 (id=2896): bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(0x0, r4) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000010140)={0x14, r5, 0x1}, 0x14}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="14003500647536402b27aa072017102cb4c06d6d793000"/32], 0x3c}}, 0x0) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0xffcd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) (async) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000000)={'wg1\x00', 0xfffffffe}) 2m53.452941741s ago: executing program 0 (id=2897): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) r1 = socket(0x2000000015, 0x80005, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'batadv0\x00', 0x5766}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000090000009500000047cc0000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000200000000000000b13f87d9f3ca16b3ebe2fb8bfe810494f5f3df08f4b38ecba70008d652c68b9c74f8e27845fb6016e0db94190094f4fee71de5a5e085e1e031189f2c842a43e4d95a09acba814ac9b60b18b60f7a423ffbdd930bc77ac10000"], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)={r4}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f00000005c0), &(0x7f0000000700)=0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYBLOB="65d14ab5b6bc1fa40aa667", @ANYRES8=r7], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000240), &(0x7f00000006c0)=r3}, 0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r13 = socket(0x2b, 0x80801, 0x1) ioctl$sock_inet6_tcp_SIOCATMARK(r13, 0x5411, &(0x7f0000000040)) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x409, 0x400, 0x8001, 0x1c, 0x3, 0x19, 0x4}}]}}]}, 0x148}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001000100027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="02005bf10200f7dc4380", @ANYRES32=r5, @ANYBLOB="08001b00d000000008001b00ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x4040044) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r9, r5, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x16, &(0x7f0000000300)={@random="c8e14ef231b8", @local, @val={@val={0x88a8, 0x6}, {0x8100, 0x4, 0x1, 0x4}}, {@mpls_mc}}, 0x0) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r15, 0x0, 0xf69}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m38.273467266s ago: executing program 32 (id=2897): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) r1 = socket(0x2000000015, 0x80005, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'batadv0\x00', 0x5766}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000090000009500000047cc0000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000200000000000000b13f87d9f3ca16b3ebe2fb8bfe810494f5f3df08f4b38ecba70008d652c68b9c74f8e27845fb6016e0db94190094f4fee71de5a5e085e1e031189f2c842a43e4d95a09acba814ac9b60b18b60f7a423ffbdd930bc77ac10000"], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)={r4}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f00000005c0), &(0x7f0000000700)=0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYBLOB="65d14ab5b6bc1fa40aa667", @ANYRES8=r7], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000240), &(0x7f00000006c0)=r3}, 0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r13 = socket(0x2b, 0x80801, 0x1) ioctl$sock_inet6_tcp_SIOCATMARK(r13, 0x5411, &(0x7f0000000040)) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x409, 0x400, 0x8001, 0x1c, 0x3, 0x19, 0x4}}]}}]}, 0x148}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001000100027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="02005bf10200f7dc4380", @ANYRES32=r5, @ANYBLOB="08001b00d000000008001b00ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x4040044) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r9, r5, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x16, &(0x7f0000000300)={@random="c8e14ef231b8", @local, @val={@val={0x88a8, 0x6}, {0x8100, 0x4, 0x1, 0x4}}, {@mpls_mc}}, 0x0) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r15, 0x0, 0xf69}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m25.663655646s ago: executing program 2 (id=3169): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000000000000000c000180060006008848"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m25.478388715s ago: executing program 2 (id=3173): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000300), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, 0x0, &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x1a0, 0x14, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_OBJ_USERDATA={0xf9, 0x8, "570765e7fc978ba7bc71f4483935d68e82c14168b214a221524e8f400deb48907646c7186627373c9202754bb2b5761340c631282343b9e09d77cd59bf446103213079bdcaf823350fa91291340471bc4c18263e31cf60502c37245afcb688b637fe839a693efdd9fa1396fd20548229e917cb0ab828cbc08f28ca4f3df5767129052fa7d091db49cedd5c6942fc55985c0f134a5376aee4f7ac26307dbe394ca76251ba4a25517ea7309a4014dfc9f5254b62889fb64caebd8a03c118a01fe683c02da57fe77ab13f05dfebc33c28fc8d3c2a14b98cffc6ec1c8145c99748ea2471d5bfc88a92bf7320d039570813f29e6e565a6c"}, @NFTA_OBJ_USERDATA={0x81, 0x8, "f0765f886ec6b726784831942ab12ee15142165e316ea028fe2b1743a03f3934bb0503343ede9cbeaaaa30bd6514b95cb8df40b7b59edd29b1b37fe317a755e0c59e5e635b08aecdff000e0376f41b064539ed987be02f66118345176101cc884f8b01dc99311a333c064d5251a3c9728e58998d042ac0950ea2287980"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x38, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xfffffffffffffd6a}}, 0x0) 2m25.3009016s ago: executing program 2 (id=3176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18920000000000000000000000000000711079000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 2m25.073659653s ago: executing program 2 (id=3180): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x20) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000001340), &(0x7f00000001c0)=0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xe1, '\x00', 0x0, r0, 0x1, 0x5}, 0x48) 2m24.90630852s ago: executing program 2 (id=3184): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000fff8000002000005580004802c000180090001006d657461000000001c00028008000240000000090800014000000008080001400000001028000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x850}, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}}, 0x4) (async) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x6, 0x25, &(0x7f0000000040), 0x4) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001a00010000000000000000000a00000900000000000000000c0009"], 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) socketpair(0x23, 0x5, 0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r6, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x7c}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x1f}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x11}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x5b}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xc6}]}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24080}, 0x4000080) (async) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 2m24.598464101s ago: executing program 2 (id=3189): syz_emit_ethernet(0x86, &(0x7f0000000980)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x84, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @local, {[@timestamp_addr={0x44, 0x1c, 0xfc, 0x1, 0x0, [{@rand_addr, 0x4e210000}, {@remote, 0x2}, {@local, 0x3ff}]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@broadcast}]}]}}}}}}}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x5, 0x2}}, 0x14}}, 0x0) (async, rerun: 32) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x50) (rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r1}, 0x4) (async) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_slab\x00', 0x2, 0x0) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000000080)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="ad73364256", 0x5) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) (rerun: 32) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r5, @ANYBLOB="01002dbd7000fbdbdf250100000014000200776731000000000000000000000000007400088070000080"], 0x9c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000010) r6 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)={0x88, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x58d2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048000) (async, rerun: 32) recvmsg$qrtr(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/31, 0x1f}, {&(0x7f0000000500)=""/101, 0x65}], 0x2, 0x0, 0x0, 0x42}, 0x1c, 0x12080) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x1, 0x2, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x90) 2m9.535810805s ago: executing program 33 (id=3189): syz_emit_ethernet(0x86, &(0x7f0000000980)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x84, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @local, {[@timestamp_addr={0x44, 0x1c, 0xfc, 0x1, 0x0, [{@rand_addr, 0x4e210000}, {@remote, 0x2}, {@local, 0x3ff}]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@broadcast}]}]}}}}}}}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x5, 0x2}}, 0x14}}, 0x0) (async, rerun: 32) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x50) (rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r1}, 0x4) (async) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_slab\x00', 0x2, 0x0) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000000080)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="ad73364256", 0x5) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) (rerun: 32) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r5, @ANYBLOB="01002dbd7000fbdbdf250100000014000200776731000000000000000000000000007400088070000080"], 0x9c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000010) r6 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)={0x88, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x58d2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048000) (async, rerun: 32) recvmsg$qrtr(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/31, 0x1f}, {&(0x7f0000000500)=""/101, 0x65}], 0x2, 0x0, 0x0, 0x42}, 0x1c, 0x12080) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x1, 0x2, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x90) 2m3.705034754s ago: executing program 4 (id=3344): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'nicvf0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_newnexthop={0x68, 0x68, 0x200, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x2, 0x0, 0x30}, [@NHA_RES_GROUP={0x24, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfff}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x80}, @NHA_RES_GROUP_BUCKETS={0x6}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x5}]}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @NHA_BLACKHOLE={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40089}, 0x24040800) 2m3.248905439s ago: executing program 4 (id=3348): epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xcb) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e25, 0x80080, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x100}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000d1f7024ae38f1e89414557ef74baddefb8f6958c37b7c7763f8eda71e8733b3f8d96f008f0e04ce4c05299dd9b7e1b5422ae56658856075731171dfb5bc93b6ee24ca461a256d3761ca40eba59696e580212cf74360248ce622819bd582d4d50b21e9f5e00fb14a6cfb1acf7c9a231f8980317d17ecff057c02906aac5734181170fc070484b3ddcaa7a1da844223af69ce485d638e3aff24297bf0571662a8a6993b9e0d291cb5f3c42c06c980a9ee284da805c34dce5e96f26b88249851e5d1d6af246dadbee33012f499ddb8db0c2621de25ed409a1d359e0c89d9d90cac77a357ba498f899cf4af4", @ANYRES16=r3, @ANYBLOB="010029bd7000ffdbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00010000000c008f0000000000000009000c0090000100000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000680)=[{&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/4096, 0x1000}], 0x2, 0x27}}], 0x48}, 0x0) r4 = socket$inet(0x2, 0x4, 0xa) getsockname$inet(r4, &(0x7f0000000100)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10) 2m2.756814916s ago: executing program 4 (id=3353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000001a40)={0x2, 'erspan0\x00'}, 0x18) r2 = socket(0x400000000010, 0x3, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) (async) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x9}, {}, {0xfff1, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa}}]}}]}, 0x44}}, 0x20000000) 2m2.438010333s ago: executing program 4 (id=3355): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0820fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000100)={0x14, r3, 0xba87317d461c07c9, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0) 2m1.96088614s ago: executing program 4 (id=3356): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x800, r1}, 0x38) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0xfff1, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084484) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x66}]}, &(0x7f0000000240)='GPL\x00', 0x4}, 0x94) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000080), &(0x7f00000001c0)=0x10) sendto$ax25(r2, &(0x7f0000000280)="7d6e52fd119271f2eaf2390f542b77b23e609a401baf1ee51e48adf2816e4e6e85cbaa1c2a8eb88e44657585d4af9426020d2d50caea3413bb31b3b78b7ee7cd5bcc017e003c12c42875010320587bef30957e71bd5805d5df80dd79d4d4a72658808c68d8cd5decd6c5901115baef3ef2718ed5e7d0aaf1e5acb6f82fe8ef38ddfc07bf261cb8116f77c1d34142d45f65110dc9", 0x94, 0x48880, &(0x7f0000000340)={{0x3, @default}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) 2m1.496297273s ago: executing program 4 (id=3362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000100)="27050200340f14000600002fb96dbcf706060000170008005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b0000000001004057000000060000400000000080", 0x48}, {&(0x7f0000001280)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f807ee4636aad1b45472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a1800bf2354b33cdff83033de518580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292e24a9952f18ec3d8b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13b80d4237120e32932ca4e2b50bad0a35496d36a191d91f03b477b9587bc0ba489932e34f819fa1524ebad53a3d94b46c6aeff4f42fa067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca135623731e4701f35bd4e7c936a8ee27010000002328a5aba1161b05889b045696721c79bff0547efe051f3c5de77fdd3c77afd41a1a7747a982b7efb0d6bac7d3ad1f9b7c3a5a1448b35696f03bca1c875e346edc55b7a271c3e5f3c0df72c8e4d7cccfa2e9b598f0ae06efbc1a5d5bd91aed6b32deccf7755cef50fab72633c802533b9d94f17f9be978f2514c47671575ee528fbdddc6194328e605e4d10e293756d20eb8a545f2bfe48df5d1d98a270458392a0a57647dcb8ee005e78877a072d12d0429b9b9957a695c3289b4a59469691115e6ba204181708b9d1ae47418ed594b8128f20c100f5485a84e60d73ab818da73fab78caf42afd1f89cdb29dfdd6676c55ea00d35321bc4878170c62b056b4e03ae556ac804026cabcbc8e79e7a18f2f56442cd650aa2bc88f62ebb65bfafd3e5b4c62ac2e720ff0fdf03c46889df55ff91058319c953f90cd6e7f7b15d56a58ff6128357510c4c618aa25434881d58c39092969ba1f7c444465f16d1f2561991e357bda928f2a50422f774f318fb41169a0d0324a8efd19b940a17c28cda06b750cd02155dbdbd1dc695e190a997ae8f4bb8766983d8db8678a78ae8f044b868549e9c60f7ce25a36300ce07f304e75d285e914b3aec703969df969b81bcd3732736dd99fcab1944c751f8ef4c34cbb86d5f27ef9982be245949d5579b540750d1eac428b0cd2541295b577573b27e9ecac3934987e85b44bc85e6e307cf6f5683bf1c817369d556a368bc5560a1737aa2bec3cac4689e04fbe851ed4b6c1a355950522f8918af3855fe97ec285da15a20e8119483e7419fa2b0639d5add10b396a8033ec2b98d9a9fca3fc4202d0a6bcfa55798eacafa4c8efafb73a2ab89bb58b0c20364a6ad9c233dfb1bdbb87b8f91e3ab9790e876f906107183419aa7480e327388c01dc5f2d5bcb8a7565cddc4e1275741116416b66bf3adf9e7e31c3fc518740446ed2a394e7699baf9408c62b4c0e7a11dec8f4a67e78a3f00bedae9f55f36c52a1fd4ee3a8be7285f9ca898ee63d3718a7c4603bcb9a24537b34a41a6c0eee4cc609b014d3f4fb928aa7e3fa7a4f97dcef5c0e526b650284ffeda82f603ed9ea1eb6627d29d8bcd6c7e6fe128b1c4463b2cfe50c0ff9a46090635dde4b4d4a984e5a91f7486856cd2bf85088fa4d27b219628be8cdba7004d00985a73fb5b0b4b0f96844e73a8ff7884bdee1a0d6e62decfeebfb56351c135e6580fd61ea806ee5592fe4ffba5c73b8a4a04d44aa52645320cb73fe0c5f14a971d3b3f64c85f5ebaab5e1a061f5186050230286331048e43368e45cfc88e8f4d0d3b1b86b64d5394bc68c2b754389b3c18a45c1edb0496dd88cb3113bbdf1a0f127eb8cd52caf8da95b83d0decad3775b2f2e43776d0d32d447cdd0b267b32775e3473f51a233f8c91a4c07ad669da1844f3d9554f399d43ca1eda29c5c761b3936f845f0c4d1c090000004b5ab3291e06cd86de6116fc3236a11343d6f4ad02199717054ac15b0d0000000000007bd4bea33c0ca36e2c4209026849de21c1da1057f353cc824947d75119e4501b98cb9e621d0644e3f4a75353093557afcee7da41ad368fe1cbb426922772b9b262a861fbce9ae86d6e8c5a8de6a1e8f03456c0a354277a2f3ff46a62b6d6cdee4febf23e2350f94b47a05a4d0e7da37a2e97b899d92ca1f3bd1cded5588593e8bb99b9dce0731fa1174de14b63be2bf7e424f870551f213fab437aac092c2e9798959fa3616465e2b36fd49cc9af902d47debec02558c036ed991f1a3895b37cd70f3c405cca362c885542fd976e73be4cf7580a0c4d5a9527c77c189573e3be07ed15472f6b012939abb5be9f3e8a5b720307fb2dbca48b35d121702cfb6b3690559b08fbeb77d53d37582d7f44fe269ac51665632bf070cfc7445741b70306cb3f19b7fbecd19a78092dfd086a0da019734d95660ba4e5ce5bcf25f09403c32e3ec902f3717cca0eca25e791c2b8c2b8988645afa2446d5218abce136c0dbbafb95e4f4727a29cc567b3f73d5dbc1aeee746653a7f5c445add24a9c1b67d1bfeec85d2a6478e80c3acdb9439aa46c8cf14a98ffa89790ef7a94b3146088566812e28ccbafb466772b7fbb98dcf1e792eb6d0de0829c3c49c5ecdeea3e80017324a0fe724565c4e7a242764e9012442cae44b57c7121889c044be05b5eca70efb649bb528e751f072af93ae2c5053fdce196cce158136f904cf64f2cb8becc2d024f5ec32a38d78b87a4dfe7c53769dadef890efd160eb662cedb18a756aed83edfb9efbbb3648eb399e61f80077e64b95eae9d17083aed05cfc2e148621e36be1f41d373c721a11804fce269c688b0c647d6e1083e336d1f7f90a7a080a83397773cc351531070af5c1a1418f28dce95c01052a314a9ebe39cb9cddb8e7855e58c4a636b7f6250ecad312ede18664c03d92e330935295a35ea3e0306f25ca971300f782ae2f6e79a513732d22ef9b9bc41d17df3352a855cdd19b18f5abd6e6420f4f42f01750a64f6acdb6b46622fafebe3e913c64a1a6a59f980e97deae0dc83c12ccae6b430d7a28f21c3e0e38b32f3d5f1d44927fc34ed5c9ddb5be8eb936dbdcd327b63ea69d86c2da15cb834a18ee51a44f2da7b11d79486942fd04eade92fe5d93342970ca4cc73861b15facf97e9c53c15488c5630b17b9364c58652cfa6de0918327498ba8d6120d3be9139c51a6e9017525772397529ddd4fd1905614fd1cc7f1370a577ad10ec9ea742f9aedc9fee42c3df38f4b35ccb1cf8590eaf770b3f74af21f5119ac238e82e92c83321b06f106530abbbd321c3e1dc948accdc21a586ff37253ad1d0c5bfb51541f876be1b6e4f490046204b9edfe9a9721b9019a495d1efed10d4570f4c75ac56aa862f738b46cfe8899f6d92e862611b35be8931a2460dc646ed332b3046baf48613bbb543f4abda22d3d62a484665ba5bbf8fec1bb199b430a6e96cfad417a1644cc5f7f640004836c60f15a174eb7eb1750a71a141549f393c7d88b8729a33f841f7f8f2bd03dccaaa825f2e29105f6b4c11ac8e06bb3be9dfdecce66294a0be9dbc5f40123644fcac59ed0c968eb62fb14d111e900ad1c038f17d5471ab088f704de7db35753f818f55669a76e621b29d975253d177791e1434644a81b2b8bc4c8e147961b4f1b7f3e225571fecb10906957791b27d35a89e3ce84c91a2dc60aee460d8f41eb7b5e171516ef34d8c7dbbc8122cdeffa51b5a393d2cae7f69826d342d4d81b58ca7ddb0e688a15b39a00ef1aed5db337d1ab87e86f835663a4968c8bf5afd7cf80549f42588d9b8ea04ff3d9eac2b8ffd1155a504230103a68bd8b3c416a10d76cee236442a68393896587bc66c01a5f7f411325578d023d7619a89d0bcbbacae99b925fb72994e1ef4240cddad2294a56bec6d6243b95b04345c215bd48a3aa89786ba39b40101015d8bd038c32a7b0eb02a4eb5a640371d9b4af540eb99a1e26547cc214da21e9538754a802972411a0bf416707b95457d0b77daac9bdf27a82b9aa7992ad1d3815f9a56a746eefa6f7e1913b6e3e859b2cc7797adcae825b7aad17c11e66597042c327a6473489a9664c5ce0ff8b1ecfb691daa0bd50c17f4597826553686bc2e6f52585ffdfae76e26691699141a698e5b517e02130587ee503c7b5f638cbf32166b0d4ebe9222b6c9d50fb3db9d1ab060c31aabeef52cd51e5cf485eecc741e37a47c4996068f1d4b25f182b9d7bee4bec5cb070d3cea2f9762a41bb8d9ec5896ebcb2b17ca82f29bcce456412d8ed531afda50d259fcb7794216b6a9a873b6c3c4493c0c6d3e6a4f81f3b40dcc745a4e2383c678c472b1d5bf3ff02992bfe893a5bc96824039da1ee3cf8593e7d616d62f6e3c3e2c4e0cc58d5445998cf5b1c91c2468b2571b118709668efbbe72911f1bfa96b97c32f71cd7071f4c729e88631a89b53dd4bae6ef9c4ed082916e267479195599e9871b26b92c6885ded29f990070fddc4d8535088ddc70d6e83f797b6fa2260a92602eb90800000001cb7394f0c90fb5913b2f8d8d24c8f1056920e1facbe643dd49d8983b277da7282a986c28d5468aed9a4730579a20346d35f78b6bd2cacb4b9237fbfb0b7a2314105ff3b074a0e340b904e715e99c501e1435c15eaa262893c2883c90f26d2ff91792d46e4d867b62570e0c1e4739b8ac4fff8f778960de1ae40d4c85c51e1c47040bb2caeaf0c71dbb67c30715b8c14d6921831d7678522eeed29444df421ee206ca3be20d1b5fd2d2baf832f097fef590290eea77f8f3ed00b39841421b61f1c0d01def54bec0348be2216a8dad60838f3ad3595a744edeb6202dbcbd9c73a126a79cbefa43c7db0493103c2aa8fecb5cde1773ad0cdd03f5b0cfb02706420be6fccad116e9140501df48cdbf725611b398eb2b9e93f8da49e601099e0b2e880a95525b5f3f2edd74ae9d664ab61634ab53a1e2f3bf56add0a7f09c16853814b03a4212b9a0119420948da26bb171b288a66a2f0a4063754c2910512aa1cead69b94b498b5d4c44ce0a4aaa7855ee1a3b7ca738756a00a435062ccb86a40cc01f666d372f323e087ef5db2bc2d17ed1f72db14c52ca6723ce92ada6ff0c4f498d42d4218a9f799a216facb7377a1532e0755b894bfc0ee99a4072ac54ee5727846631574f348bf650e7d54b0ef3a1b5cc8233e660a2f10800001f6c23e08ff0ddb488b95504fc42508449b8fdd70afb387016e8c9206482c334f37d26fa3bdb6063f8147db9363e22c4b43b89ba0f68d06641fc1eb74fec0be4f59a17b274e0db67b2c0398250da219c9caf7e0f6cb1f828b6f89a67c8cfd0fe0132bd94261410f8d8d7eb819bc783b8e66a000000001e429b71ccc22f7f4c216001375c7a816719e29abc98652b6752923132256cb5f0470223e2c6bf77", 0xf02}], 0x2}, 0x8010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r2, 0x0, 0x3}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0xa, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3e}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) sendto$packet(r4, &(0x7f0000000500)="6dc76a5603ef0913761dced484d840718fa307076ac8d477ab848ef84e8efa336751af94543bf4d0993fc07d89c00b361c9052e680ecb9fd3741d904176bae8fec2b8b264c99b66ee313c13448ca1844f2ec7b7e4480ea709a8eb099295ab1a5459cfc47db8c50748c247487ff1dc3fce1bfad49d6e582ad6e65234fcad24c54e8ffd929e91f134e59268ae670309c8d90add8e09e4717ab3ee8d56260eabbddf6fb4e77b70cd0e673acff9830c2d8a91f98a64fadb7cb6e0859884624e1777736dd9fc5b6b8fd51dcf4841acbbb8b9d2f084746a1c7ed04a152528625e3dd71", 0xe0, 0x4000044, 0x0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000440)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r5, 0x0, 0xb, &(0x7f0000000040)=""/202, &(0x7f0000000400)=0xca) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) close(r0) 1m46.412679653s ago: executing program 34 (id=3362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000100)="27050200340f14000600002fb96dbcf706060000170008005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b0000000001004057000000060000400000000080", 0x48}, {&(0x7f0000001280)="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", 0xf02}], 0x2}, 0x8010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r2, 0x0, 0x3}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0xa, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3e}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) sendto$packet(r4, &(0x7f0000000500)="6dc76a5603ef0913761dced484d840718fa307076ac8d477ab848ef84e8efa336751af94543bf4d0993fc07d89c00b361c9052e680ecb9fd3741d904176bae8fec2b8b264c99b66ee313c13448ca1844f2ec7b7e4480ea709a8eb099295ab1a5459cfc47db8c50748c247487ff1dc3fce1bfad49d6e582ad6e65234fcad24c54e8ffd929e91f134e59268ae670309c8d90add8e09e4717ab3ee8d56260eabbddf6fb4e77b70cd0e673acff9830c2d8a91f98a64fadb7cb6e0859884624e1777736dd9fc5b6b8fd51dcf4841acbbb8b9d2f084746a1c7ed04a152528625e3dd71", 0xe0, 0x4000044, 0x0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000440)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r5, 0x0, 0xb, &(0x7f0000000040)=""/202, &(0x7f0000000400)=0xca) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) close(r0) 1m27.465932652s ago: executing program 5 (id=3749): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet(0x10, 0x3, 0x0) (async) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) (async) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0xb4}}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) preadv(r5, &(0x7f0000001200)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0, 0x0) socket$inet(0x2, 0x4, 0x1) (async) socket$inet(0x2, 0x4, 0x1) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x3, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, [@sadb_key={0x12, 0x8, 0x438, 0x0, "45ce2da34e8b174ab0a75a2a9dd3346e8d4d210aed43312688e05565e7b42a870604b55907b7d9f5cc440a9461ae68370c0bbcf5149af3682dcbc74f89e9b0787d764ffa8a37ebd0a7e367bdbea738b3b79284c36dc342aebcfeec094805402a912ca6471c4cd604307fdd628ee60c85d749598ac313fecd1e4ec6e8dd1995db3286855f34db39"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0xe0}, 0x1, 0x7}, 0x0) 1m27.07616634s ago: executing program 5 (id=3753): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket(0x400000000010, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000c000000ba0301000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000eb3a00000000e70000000000001a0000000000000000000000e708cda7c4f1489b7e6dee982d8416f930f6d3ce7c9d445ebb96bfa8b0aaf03aa5a5c8d052b2d1219f9bbd48e67efdb526db24af140239feea625b07a1c1f787dcc6f2175860318d8d8d4c71ccc2d91c38f50863e7807a59cb6d2cb3c600166316f8b34bfa01a442e108e778c3162d67136a29f8bd657cb8ef3535085847bc8eae3f95c2693eddf64db1916aa0d14979c523c632e6d1fd5b37dab4d373982c16718900000000000000e7ffffff000000"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m26.887941212s ago: executing program 5 (id=3757): syz_emit_ethernet(0x6c, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500005e00000200002f907800000000e00000012480810000020010000700077f1a10000800000086dd080088be00000000100060000100000000000000080022ebfffffffc2000000002006041d0aa02b28205567efe4f200800000000"], 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) 1m26.632949253s ago: executing program 5 (id=3762): sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000", @ANYRES16, @ANYBLOB="a90d0100000000000000ef11f3c90ed7000005000000bdb26ec500001247c807662b5203fd5b7eae7a0b9e47a35e1b0cb39d6dcf134f21139356778f"], 0x14}}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1a0}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5, @ANYBLOB="0a0001"], 0x48}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}}, 0x0, 0x1, 0xcd5, 0x0, 0x300, 0x0, 0xec}, 0x9c) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) getpeername(r6, &(0x7f0000000280)=@l2, &(0x7f0000000300)=0x80) setsockopt$inet6_int(r6, 0x29, 0x13, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001c00)={0x0, @in, 0x0, 0x0, 0xffffffff}, &(0x7f0000001cc0)=0x9c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@getqdisc={0x44, 0x26, 0x10, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x7, 0x1}, {0xe, 0xb}, {0x8, 0xe}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x44804}, 0x50) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb2636037f00000000", @ANYRES32=r9, @ANYBLOB="020000000000800080001200080001007674693674000200600004"], 0xa0}}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) ioctl$PPPIOCGFLAGS(r8, 0x8004745a, &(0x7f0000000080)) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r11, 0x84, 0x20, 0x0, &(0x7f0000001040)) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0x7fffdffff000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) 1m25.973946496s ago: executing program 5 (id=3767): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000ff000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000880)={{r2}, "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"}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'virt_wifi0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001b00)}}, 0x10) 1m25.588988875s ago: executing program 5 (id=3769): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x4, 0x8}, 0x48) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r2, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) close(0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xf1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x4}]}, 0x34}}, 0x0) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000100100000c"], 0x28, 0xe000}, 0x5}], 0x1, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='xprt_reserve\x00', r5, 0x0, 0xfb2}, 0x60) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m21.788032487s ago: executing program 7 (id=3815): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f0000000000)=0xf3, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r4, 0x917, 0x70bd28, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r5}]}, 0x3c}, 0x1, 0x620b}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x609, 0x0, 0x25dfdbff}, 0x20}}, 0x0) unshare(0x26020480) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x4, 0x10001, 0x9}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c0001e003000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r10], 0xb4}}, 0x0) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0xb2, &(0x7f0000000400)=""/178, 0x41000, 0x52, '\x00', r10, 0x25, r9, 0x8, &(0x7f00000004c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x6, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000540)=[{0x5, 0x3, 0x2, 0x4}, {0x5, 0x1, 0x4, 0x5}, {0x0, 0x3, 0xf, 0x8}, {0x2, 0x1, 0xa, 0xa}], 0x10, 0x6}, 0x94) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x50, r14, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @dev}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}]}, 0x50}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="00000000a06643e8e9b964353019a6bfade5b6a86ddfe749c12ee6fd258fd11a612591cac4933dc9b01cad8411a7a89ac7994b23d61c9ca2d6f6f23dbe126c3e", @ANYRES16=r12, @ANYBLOB="10002cbd7000fedbdf250600000005000500000000000600020001000000050021000100000006001b004e2200000800090000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000044}, 0x24000080) 1m21.595652838s ago: executing program 7 (id=3816): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x1, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'gre0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0x2}}]}]}]}, 0x48}}, 0x24040800) 1m21.376798158s ago: executing program 7 (id=3818): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x67}], 0x1}, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x15, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcff2000000000000034e58085000000a0000000850000009e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x100b, &(0x7f0000001680)=""/4107}, 0x90) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x17, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040815}, 0x20000000) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000000)={r6, @in={{0x2, 0x0, @empty}}}, 0x90) 1m21.176959076s ago: executing program 7 (id=3821): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="40020100e69313543c4cc340779752d3e2b916090168729f69b790ea16bc4a224240f1f00061c44d55259f72f79b", @ANYRES16=r2, @ANYBLOB="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"], 0x240}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000ec0)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x60}}, 0x1c}}, 0x0) 1m21.140301341s ago: executing program 7 (id=3822): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x14}, 0x1, 0x0, 0x0, 0x10004080}, 0x24008900) 1m20.904933248s ago: executing program 7 (id=3824): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='cachefiles_rename\x00', r1, 0x0, 0xb9b}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x170, 0x1a, 0x633, 0x0, 0x0, {{@in=@private=0xa010101, @in=@broadcast, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0x20}, {@in=@multicast2, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x0, 0x0, 0x0, 0x4000}, {}, {}, 0x70bd29, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@private=0xa010101}}, @encap={0x1c, 0x4, {0x1, 0x4e21}}]}, 0x170}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r3, 0x0, 0xb9b}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m10.455589358s ago: executing program 35 (id=3769): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x4, 0x8}, 0x48) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r2, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) close(0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xf1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x4}]}, 0x34}}, 0x0) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000100100000c"], 0x28, 0xe000}, 0x5}], 0x1, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='xprt_reserve\x00', r5, 0x0, 0xfb2}, 0x60) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m5.787223267s ago: executing program 36 (id=3824): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='cachefiles_rename\x00', r1, 0x0, 0xb9b}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x170, 0x1a, 0x633, 0x0, 0x0, {{@in=@private=0xa010101, @in=@broadcast, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0x20}, {@in=@multicast2, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x0, 0x0, 0x0, 0x4000}, {}, {}, 0x70bd29, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@private=0xa010101}}, @encap={0x1c, 0x4, {0x1, 0x4e21}}]}, 0x170}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r3, 0x0, 0xb9b}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 9.039164751s ago: executing program 3 (id=4677): syz_emit_ethernet(0x83, &(0x7f0000000000)=ANY=[], 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000001c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0xb, @ipv4={'\x00', '\xff\xff', @local}, 0x9}}, 0x24) syz_emit_ethernet(0x83, &(0x7f0000000000)=ANY=[], 0x0) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) bind$rxrpc(r0, &(0x7f00000001c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0xb, @ipv4={'\x00', '\xff\xff', @local}, 0x9}}, 0x24) (async) 8.820059917s ago: executing program 3 (id=4680): r0 = socket(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x7d, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r1, &(0x7f0000001d00), &(0x7f0000001d40)=@tcp6=r0}, 0x20) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x48010) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c000300000000000200000000000000d09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$sock_ifreq(r3, 0x8971, &(0x7f0000000300)={'team_slave_0\x00', @ifru_ivalue=0x3ff}) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r7, 0x107, 0x6, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xffffff27, &(0x7f0000000180)=[{&(0x7f00000001c0)="e0000af1c9629caf451680499f49eeda6618f3a4a6203363daf5d0056d7109db8e6b0fdbbb053078eece4db3756ce7089497e895766dd37fc590c2712bb150342e507093555519a477db3de58d56622aaae581e6a662da82bef6e6"}, {&(0x7f0000000000)="699131f9843352ef5eb4c3dacea0c1f359d2ab0d3d577f91140ac85fd43be78183a25ba75e871511345d36366bb1d05a"}], 0x3}, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) recvfrom$phonet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x3c, r10, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22000092}, 0x10) r11 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r11, &(0x7f0000000080)={&(0x7f0000000000)=@hci={0x1f, 0x5865, 0x31}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)="b8b28225ea772f0daee8c7c98100", 0xe}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x9) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 8.23794464s ago: executing program 3 (id=4684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt(r2, 0x5, 0x81, &(0x7f0000000540)=""/4096, &(0x7f0000000100)=0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1c, 0x1, 0x8, 0x7, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x3, 0x3}, 0x50) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004) sendto$packet(r3, &(0x7f0000000300)="31144fabdb8f", 0x6, 0x40, &(0x7f0000000200)={0x11, 0x8100, r6, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 8.001905038s ago: executing program 3 (id=4689): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000240)=""/21, &(0x7f0000000280)=0x15) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1}}]}}]}, 0x48}}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x1000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) 7.419401899s ago: executing program 3 (id=4693): unshare(0x26020480) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 7.192971438s ago: executing program 3 (id=4695): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x7f}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3d100000101d0ff025bd7000fadbdb2500040000", @ANYRES32=r3, @ANYBLOB="51ea0000897807001c00128009000100626f6e64000000000c0002800500010003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x842}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x4c}}, 0x4044080) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r4, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r9, 0x0, 0x7f}, 0x18) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x3}, 0x20) 2.548868359s ago: executing program 8 (id=4755): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x44}, 0x10011, 0x2, 0x2, 0x5, 0xc}, 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000500)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x990d, 0x1, 0x0, 0x2, 0xff, 0xa}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c01000017000100000000000000000000000000000000000000ffffac1e00010000000000000000e0000002000000000000000000000000fe8000000000000000000000000000002001000000000000000000000000000200"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000002001000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000230bd506000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000008d8300000000000000000000440008"], 0x16c}}, 0x0) ioctl(r1, 0x8b32, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002740)=""/4090, 0xffa}, {&(0x7f0000000300)=""/130, 0x82}], 0x2}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/96, 0x60}, {&(0x7f0000000700)=""/99, 0x63}, {&(0x7f0000001740)=""/4080, 0xff0}, {&(0x7f0000004740)=""/4083, 0xff3}], 0x4}, 0x8}], 0x3, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="01000000000007ca1e638c5773e608000300", @ANYRES32=r6], 0x80}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000006c0)={r7, 0x4, 0x29, 0xffffffffffffffa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="c63cd0b7567149f7cd47af801d37648ceed09934876d81b9e8d93cc31fd50474fb9a7a3ba746ebf687d7e981903729ac9c2a477fb3b5a9c8d9e63f205ba6d53b0624d0327026f4cffe2745e5897aaec34e08db440da489d83c273c1da82560e3f3112f1e9014c1a23acaf9b5fa9ddd9338348db2d31d3b8f114e90eeb4bb4dba00c9f5683369baa66641ad5bc8606798209837856c8d95adc3ca32352cc20297fd2c17e72565c2956a65d0941c5fa12beb4c18c5fdd65abc586b56a39c1686a635a8b1445cb29ef108f51ff53abe08afd5b1781210d782d35966", @ANYRES16=r3, @ANYBLOB="000426bd7000fcdbdf255c00000008000300", @ANYRES32=r6, @ANYBLOB="0c009900fbffffff0200000008006b000a00000008006b00c201000008006b003700000008006b001400000008006b001400000008006b000a00000008006b006e000000"], 0x60}, 0x1, 0x0, 0x0, 0x43f106fc8db3f670}, 0x24044014) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069105a000000000004000000020000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 2.506870658s ago: executing program 9 (id=4756): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000025c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000300)={'veth0\x00', &(0x7f0000000440)=@ethtool_eeprom={0x48, 0x6bf, 0x8}}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x19) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0131218010ff"}) 2.369009872s ago: executing program 8 (id=4758): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c, 0x0, '\x00', [@ra={0x5, 0x2, 0x6}]}, @dstopts={0x62}], @echo_reply}}}}}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) (async) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c, 0x0, '\x00', [@ra={0x5, 0x2, 0x6}]}, @dstopts={0x62}], @echo_reply}}}}}, 0x0) (async) 2.161184522s ago: executing program 9 (id=4760): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000180), 0x4) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x7830c3240c0dc35e, 0x0, 0x0, 0x0, 0x0, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x3}, 0x90) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) bind$802154_raw(r2, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xfffe}}, 0x14) recvmmsg(r1, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000140)=""/4090, 0xffa}, {&(0x7f0000001640)=""/206, 0xce}, {&(0x7f0000001240)=""/249, 0xf9}, {&(0x7f0000001340)=""/240, 0xf0}, {&(0x7f0000001140)=""/112, 0x70}, {&(0x7f00000014c0)=""/140, 0x8c}], 0x8, &(0x7f00000000c0)=""/46, 0x2e, 0xe88}, 0x8}], 0x1, 0x10122, 0x0) 2.004856407s ago: executing program 8 (id=4762): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=@deltaction={0x14, 0x31, 0x0, 0x70bd25, 0x25dfdbfd}, 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e23}]}}]}, 0x4c}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r3, 0x104, 0x6, &(0x7f00000000c0), 0x4) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.987592228s ago: executing program 1 (id=4763): r0 = socket(0x29, 0x4, 0x3) listen(r0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x7, 0x5, 0x8}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000080)=""/233, 0x32, 0xe9, 0x1}, 0x28) 1.827194707s ago: executing program 6 (id=4764): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) r2 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000080)='syz0\x00', 0x1ff) r4 = openat$cgroup(r3, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000180), 0x2, 0x0) sendfile(r2, r5, 0x0, 0x7) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0xffffffff) 1.826870867s ago: executing program 8 (id=4765): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a000005", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e048d5f1e8b9acf9"], 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@setlink={0x48, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x40b, 0x0, 0x0, 0x74}]}}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x48}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r3}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2f00020b, 0x809, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a000005", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e048d5f1e8b9acf9"], 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@setlink={0x48, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x40b, 0x0, 0x0, 0x74}]}}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x48}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r3}, 0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2f00020b, 0x809, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) (async) 1.826042035s ago: executing program 1 (id=4766): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r4, @ANYBLOB="0a0034000202020202020000040008010400cc0004001e010600660010000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x47) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000280)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@private}}, &(0x7f00000003c0)=0x38) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_route_sched(r5, &(0x7f0000004040)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004000)={&(0x7f0000003fc0)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x6, 0x7ff1}, {0xffe0, 0xfff1}, {0x5, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4042001}, 0x40040a4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r13 = socket$rds(0x15, 0x5, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r15, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r16}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) r17 = socket(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x5c, r11, 0x1, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r12}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400}, 0x4040014) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r19 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r19, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r19, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r19, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="89acf46036887c74", 0x8}, {&(0x7f0000000380)}], 0x2}, 0x8c0) 1.764891014s ago: executing program 6 (id=4767): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0xfffffe19}], 0x1}}], 0x1, 0x4040040) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x200}, 0x8) close(r0) 1.723881279s ago: executing program 8 (id=4768): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sys_enter\x00', r0, 0x0, 0x6}, 0x18) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$tipc2(0x0, r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000b01000000020000000000001202000000020000000000000e030000000000000000002100"], 0x0, 0x54}, 0x20) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "208271b57326d2cd06c77f7141082f8bc18164a8cde63d55c42552f43f2cb0126f46de26c849626f8f1e92ec1693d6580135c73acfe420c078830b68732dd35588582d1623a87e1c705a6260fccb8a9723b1299a305b1fe6d1858aad80f29d43bc45d44ee93b8a1cd5a2f7bd1c8d4711330bd8e17da2ca0f428712c1f913fd0526a82497ee4888b2695491dabe3af483ec6c939b9ab1893cada806b245f320eeb8005c6a6b520e65a4449408ae841b548e6e309f3b9ad5fbd764d7338052495f89a82be087b692eb11f5b9153d0a3f22b5586c2078662e25d9ab57d339904f6e824fc2b705ac50cde174f48bb04e934ea306e91be9343d09e05192691250e303"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x1d, 0x17, 0x9}}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.697051157s ago: executing program 6 (id=4769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101}, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x94, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7a}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xca}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xb804}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x94}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000940), r0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000001c0)=0x4, 0x4) 1.501042415s ago: executing program 1 (id=4770): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_MTU={0x8, 0x4, 0x7}, @IFLA_GROUP={0x8, 0x1b, 0x1}]}, 0x30}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) recvfrom$ax25(r1, &(0x7f0000000100)=""/87, 0x57, 0xeb59d7796265ba1a, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {0x0, 0x0, 0x0, 0x745}, {}, {}, {}, {0xfffd}]}) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) (async) sendmsg$nl_route_sched(r1, 0x0, 0x44080) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(0x3) sendmsg$NFT_BATCH(r3, 0x0, 0x40) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000010101020000000000000000020000000c001980"], 0x20}}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$inet6_udp_int(r5, 0x11, 0xb, &(0x7f0000000100)=0x200, 0x4) (async) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0xfffb, 0xd3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000940), 0xfffe, r6}, 0x38) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="1a64829bf8f72508a80cd8d857b57faf39ee3f9eea1eee8a57ed874438f5d4c1071331ca143e3e50586a06bc83689f2a60f917d4a74431cca878e35f69c9cc01bd35", 0x42}], 0x1, 0x0, 0x168}}], 0x1, 0x0) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), r1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) 1.493867556s ago: executing program 6 (id=4771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000003080101000000000000000000000000050003001100000006000240004000002c0004"], 0x50}}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002", 0x29}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket(0x10, 0x803, 0x0) (rerun: 64) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xc) (async) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async, rerun: 64) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async, rerun: 64) r8 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r7, &(0x7f0000000680)={@val={0x3, 0x800}, @val={0x0, 0x0, 0x0, 0x4, 0x14}, @llc={@llc={0xcbbae01082d0cc60, 0xe, '-r', "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"}}}, 0x155) (async) r9 = epoll_create1(0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r10, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x1409, 0x100, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x50}, 0x20000000) (async) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x16, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10004, 0x0, 0x0, 0x0, 0xf80880b8}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x6}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x405}]}, &(0x7f0000000880)='GPL\x00', 0x1, 0xac, &(0x7f00000008c0)=""/172, 0x41000, 0x20, '\x00', r4, 0x25, r8, 0x8, &(0x7f0000000400)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000009c0)={0x1, 0x20000d, 0x4, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000a00)=[0x1, 0x1], &(0x7f0000000a40)=[{0x4, 0x5, 0x0, 0x1}, {0x4, 0x1, 0x4, 0x2}, {0x0, 0x2, 0x9, 0xb}, {0x4, 0x3, 0xc, 0x7}], 0x10, 0x3}, 0x94) (async, rerun: 64) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)={0x1b, 0x0, 0x0, 0xa013, 0x0, 0x1, 0x1d, '\x00', 0x0, r9, 0x1, 0x2, 0x2}, 0x50) (rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c40)={{r7, 0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)='%pS \x00'}, 0x20) (async, rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000c80), &(0x7f0000000cc0)='%pB \x00'}, 0x20) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1a, 0x9, &(0x7f0000000340)=ANY=[@ANYBLOB="1811e600", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000"], &(0x7f00000003c0)='GPL\x00', 0x3800000, 0x0, 0x0, 0x0, 0x50, '\x00', r6, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x1, 0x0, 0xfff, 0xe929}, 0x10, 0xffffffffffffffff, r12, 0x3, &(0x7f0000000d40)=[r13, r14, r15], &(0x7f0000000d80)=[{0x5, 0x5, 0xb, 0x6}, {0x0, 0x4, 0x10, 0x5}, {0x3, 0x3, 0xe, 0x1}], 0x10, 0xfffffedd}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=@mpls_getroute={0x60, 0x1a, 0x2, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x34, 0x1, 0x0, 0x4, 0xfd, 0x5, 0x2000}, [@RTA_VIA={0x14, 0x12, {0x25, "406e38c5a9b8f625b50070caf2ed"}}, @RTA_OIF={0x8, 0x4, r11}, @RTA_VIA={0x14, 0x12, {0x1, "4dd07facac8272b811ad12781b1d"}}, @RTA_MULTIPATH={0xc, 0x9, {0x1c85, 0x0, 0x2, r6}}, @RTA_OIF={0x8, 0x4, r6}]}, 0x60}}, 0x800) 1.409963815s ago: executing program 6 (id=4772): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) 1.340834982s ago: executing program 1 (id=4773): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000280)={0x0, "4efa618e47a46802dbea78bb723d6cda"}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001280)={0x0, 0x6, {0x9, @usage=0x9, 0x0, 0x8000000000000000, 0x2, 0x7, 0x1, 0x56, 0x10, @struct={0x6222a2c7, 0x200}, 0x7, 0x101, [0x8, 0x0, 0x1000, 0xb, 0xfffffffffffffffd, 0x6]}, {0xfffffffffffff45c, @struct={0x1, 0x1}, 0x0, 0x0, 0xf72, 0x3, 0x5, 0x5, 0x401, @struct={0x3ff, 0x3}, 0xf8f6, 0x4, [0x6, 0x100, 0x5, 0xffffffff, 0x5, 0x8]}, {0x8, @struct={0xe20, 0x10001}, 0x0, 0x4, 0x6, 0x5, 0x99, 0x8, 0x20, @struct={0x800, 0x9}, 0xac, 0x0, [0x28, 0x5, 0x3, 0x3, 0x5, 0xb19c]}, {0x6, 0x7, 0x4}}) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async, rerun: 64) recvmmsg(r4, 0x0, 0x0, 0x40000000, 0x0) (rerun: 64) r5 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x8090}, 0x0) (async, rerun: 64) setsockopt$sock_int(r3, 0x1, 0x4, &(0x7f0000000000), 0x4) (async, rerun: 64) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001680)={0x21, 0x3, {0x800, @usage=0x10001, r1, 0x3, 0x3ff, 0x8d93, 0x1, 0x3516, 0x400, @struct={0x2, 0x8}, 0x7ff4b60f, 0x6, [0xb, 0x9, 0x8, 0x3, 0x77c4, 0xdc]}, {0x7, @usage=0x5, r2, 0x200, 0x1, 0x9, 0x3, 0x1, 0x426, @usage=0x7, 0x9, 0xfc89, [0x9, 0x9, 0x37, 0x88, 0x100000000, 0x6]}, {0x6eda, @usage=0xfffffffffffffffb, 0x0, 0x1, 0x9, 0x7, 0x3ff, 0xffffffffffffffff, 0x6, @struct={0x3ff, 0x1000}, 0x80, 0x1, [0x472e, 0x400, 0x4, 0x4, 0x8, 0x9]}, {0x8000, 0x3, 0xda}}) (async, rerun: 32) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (rerun: 32) ioctl$F2FS_IOC_GET_FEATURES(r7, 0x8004f50c, &(0x7f0000000000)) (async) syz_emit_ethernet(0x5e, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x9, 0x0, 0x0, {[@sack={0x5, 0x12, [0x2, 0x7f, 0x7, 0x2378a1ee]}]}}}}}}}}, 0x0) 1.276425063s ago: executing program 6 (id=4774): r0 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x5, 0x2}}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@deltaction={0x24, 0x32, 0x533, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x203, 0xfffffffc, 0x9}}], 0x20, 0x20000000}], 0x1, 0x0) 1.180358893s ago: executing program 9 (id=4775): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x34, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b0}]}]}]}, 0x34}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x8, 0x10, 0x6d, 0x4}, &(0x7f0000000300)=0x18) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000007c0)={r5, 0x1, 0x2, 0xf7e, 0xf1d, 0x9, 0x200, 0x4, {r6, @in6={{0xa, 0x4e24, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}, 0x80, 0x9, 0x401, 0x9, 0x6}}, &(0x7f0000000400)=0xb0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) recvmmsg(r3, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000540)=""/143, 0x8f}, {&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000600)=""/200, 0xc8}, {&(0x7f0000001f00)=""/4078, 0xfee}], 0x4}, 0xc}], 0x1, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1f, &(0x7f0000000000)=""/10, &(0x7f0000000100)=0xa) 1.060494689s ago: executing program 1 (id=4776): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@get={0x128, 0x13, 0x400, 0x70bd26, 0x25dfdbfb, {{'morus640-sse2\x00'}, '\x00', '\x00', 0x2600, 0x400}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0xeffffffc}, {0x8, 0x1, 0xfffffbfa}, {0x8, 0x1, 0xf}, {0x8}, {0x8, 0x1, 0x8000}, {0x8}, {0x8, 0x1, 0x82a7}, {0x8, 0x1, 0x7}]}, 0x128}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r1, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x4040040) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x200}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@acquire={0x128, 0x17, 0x685, 0x0, 0x0, {{@in=@loopback}, @in=@dev, {@in6=@mcast2, @in=@broadcast}, {{@in=@dev, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1a0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}}}}, 0x128}}, 0x0) r5 = socket(0x14, 0x2, 0x4) ioctl$SIOCX25GDTEFACILITIES(r5, 0x61e2, &(0x7f00000000c0)) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff080004400000008108000840000000032000018006"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00158018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x70, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0x4c, 0x1, 0x0, 0x1, [@nested={0x48, 0x10, 0x0, 0x1, [@nested={0x42, 0x8, 0x0, 0x1, [@generic="a831985351cb3d4a57729361f10318be72cb433d11a9b4781da90ad1a200b17485433caa6c97072c59b89aaa3987b4bfce08fe13e090413b9606330beb13"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x70}, 0x1, 0x0, 0x0, 0x48001}, 0x4008094) close(r1) 1.014219483s ago: executing program 9 (id=4777): sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="5ef79b3fa0bf41d33620904120615b6230bd91258337bb9a8842a8251e7f95c1c324709fc1fa44ea701ec5dddd6153ac1e09a48ee7fa536922467d7dfcce92301a79e290d289a018835e88b799264296"], 0x34}}, 0x0) r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000000)=@id, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)={0x54, r1, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xb92}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x203}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000805}, 0x4000) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080), &(0x7f0000000100)=0x8) (async) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0018000000000000008b0000008b0000000900008004000000000000080500000003000000000000010000000069002b040700000000000010100000000f0000000400000f030000000400000007000000ff01000002000000f7ffffff0c000000020000000f0000000500000003000000f700000040000000a24ebf000000000000000300000000010000000400000003000000030000000000000c050000000000305f300061000000"], &(0x7f0000000500)=""/165, 0xad, 0xa5, 0x1, 0x8}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @generic={0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, r4}, 0x94) 923.877578ms ago: executing program 9 (id=4778): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x1, &(0x7f00000022c0)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x1) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f4070009040080fffffffe280000000000000800040001000000", 0x24) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000001c0), &(0x7f0000000200)=0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) 800.85433ms ago: executing program 9 (id=4779): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002200f2ff090001007770616e3100"], 0x20}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r2) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008810}, 0x400c800) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xea8, 0x30, 0x25, 0x0, 0x0, {}, [{0xe94, 0x1, [@m_pedit={0xe90, 0x1, 0x0, 0x0, {{0xa}, {0xe64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{0x0, 0x0, 0x1}, {}, {0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xea8}}, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team0\x00'}) (async, rerun: 32) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x304}, "76131e58a256d4af", "4448076cc60af592e807e038c4797041", "8076e30e", "f79d7fbbf3985dbb"}, 0x28) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000200)=ANY=[], 0x14) sendmsg$sock(r5, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@mark={{0x14, 0x1, 0x24, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x30}, 0x440a0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000040)={0x6, 'ipvlan0\x00', {0x9}, 0xe0}) 762.531352ms ago: executing program 8 (id=4780): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085000000d000000095"], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000001580)="e0856497d56cf0f21a0000000010", 0x0, 0x20000700, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000001c0), &(0x7f0000000000)=""/7, 0x2}, 0x20) syz_emit_ethernet(0x56, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700000000000000ff0200000080000000000000000000013c000000000000000502000600000062000000000000008100907800"/86], 0x0) r3 = socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010003704f8ffffff00000015139703090000010000", @ANYRES32=0x0, @ANYBLOB="44500000001002001c0012800b00010067726574617000000c000280060010004e240000"], 0x3c}}, 0x48000) 0s ago: executing program 1 (id=4781): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d200100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96}, 0x42) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f000012a000/0x1000)=nil, 0x1000, 0x80000c, 0x28012, r4, 0x80089000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f00000007c0)=""/53, &(0x7f0000000900)=0x35) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r4, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x3f, 0x3f, &(0x7f0000000200)="4e85eb684d13fc15e70a00575a95fc3b76d12db8581802e3935975b156d36ed0d725ccb2d6efd3fbe44e03109b71f9b35efd987301456f3cc40fd0408c33cf", &(0x7f0000000280)=""/63, 0x3, 0x0, 0x24, 0x14, &(0x7f00000002c0)="82d6c8b25dc249c4e9c1109c91e558444a84663b0466d6fb571f383096b9e612747433e7", &(0x7f0000000600)="1a60bc8922abb2a53dc31dfa0ca359d4665cc79c", 0x2, 0x0, 0x5}, 0x50) mmap(&(0x7f000040b000/0x2000)=nil, 0x2000, 0xa, 0x12, r3, 0x0) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="7faa0b6ab5b4559ad1373b3d394e0ec54ce42d1d102114f7a86b2f79f9b78b1b50e9ff0533fbd4def90ac2262f6af5415c3d44c390666636ba532ccfd7c7f101d1110e17ee32a2b9e9d1023537a00f00d28b5fc0b0fc0a5d", 0x58}, {&(0x7f0000000380)="0c58f47a9c5c90a5a451ad584265bd2dc9fc07e43312e2553850e627794d97a1b5b18b9cf9e0fadcf418826b4199170a52595525f3089abb06c45b30bc6d86c55275f885f7c11af4910a31a9a697acf9715ac600ad3f1fe6ff462e9f2105c5119967258a47892baabe7b4c8a9d4bb55c7185f0380c23f9ef15ba43a0876da2ae0f09915135fc5027749be3c23602a7024eb6e42ebd876b635e2979383f88f69f29e238b91aa7b846dbe7954dee3bac6b09655f2078e39833f33323b39d4ac86e572a3ea6da8d411b4e1ab4d50307f175cff9fca8034351380764eddfcdccf06d146ca4e3e0bae965e453511af9", 0xed}, {&(0x7f0000000480)="071b7a7b3a43985be71b5fe226c25b3ab236aaf0dfe2b2306a1fd83ba10f286bcc9d81223b82d094b789e34fba269be1319ba4fc0705c1d5d59e2f1ca82b4f6069a5b71401655c45b5452b2a485d8651819bb2d2b1635d490f98fccd9c6ebb440089406a92d5452db244be7bf7c55559b165e9e5f17b3dd7f07ac8575caf420fc92b0f550294709e3b69eb95cc875e60644b395d1be50fe941456f6080fc7fdbd232987a17572a303c1cf961578faee62094fa853d199620a24f7a2343d182a14e6904fcf7e61fe1b4c97cd3e991", 0xce}], 0x3, 0x1) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000780)={0x0, r0}, 0x8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xb, 0x19}, {0x1, 0xfff1}, {0x3, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000000)) kernel console output (not intermixed with test programs): , priority 10 [ 383.952290][T16502] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 383.959903][ T5878] Bluetooth: hci3: command tx timeout [ 384.037663][T16502] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 384.095472][T16502] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 384.126588][T16502] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 384.167084][T16433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.336918][T16774] geneve6: entered promiscuous mode [ 384.342173][T16774] geneve6: entered allmulticast mode [ 384.363370][ T49] netdevsim netdevsim2 eth0: set [1, 3] type 2 family 0 port 19999 - 0 [ 384.375917][ T49] netdevsim netdevsim2 eth1: set [1, 3] type 2 family 0 port 19999 - 0 [ 384.400829][ T49] netdevsim netdevsim2 eth2: set [1, 3] type 2 family 0 port 19999 - 0 [ 384.427347][T11008] IPVS: stop unused estimator thread 0... [ 384.429554][T16433] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.471475][ T49] netdevsim netdevsim2 eth3: set [1, 3] type 2 family 0 port 19999 - 0 [ 384.535163][T10997] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.539944][T16782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.542467][T10997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.583990][ T8048] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.591229][ T8048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.917893][T16502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.974884][T16502] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.984657][T16793] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3136'. [ 385.027486][T11008] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.034738][T11008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.035830][ T24] tipc: Node number set to 1896720198 [ 385.099987][T10997] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.107238][T10997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.174692][T16800] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3139'. [ 385.214881][T16802] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3139'. [ 385.242677][T16502] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 385.470332][T16815] netlink: 'syz.4.3141': attribute type 1 has an invalid length. [ 385.499092][T16818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3142'. [ 385.530729][T16815] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 385.572613][T16820] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3143'. [ 385.590856][T16820] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3143'. [ 385.659554][T16433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.840262][T16433] veth0_vlan: entered promiscuous mode [ 385.879157][T16433] veth1_vlan: entered promiscuous mode [ 385.961551][T16433] veth0_macvtap: entered promiscuous mode [ 386.004960][T16433] veth1_macvtap: entered promiscuous mode [ 386.142524][T16433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.223351][T16502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.253286][T16433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.327498][T11001] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.359109][T11001] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.380179][ T8048] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.460701][ T8048] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.481100][T16846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3149'. [ 386.494235][T16846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3149'. [ 386.690781][ T8048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.740326][ T8048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.758103][T16852] sch_fq: defrate 0 ignored. [ 386.847941][ T8048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.876407][ T8048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.099732][T16865] RDS: rds_bind could not find a transport for 400:0:12df:ffff:f30:0:ffff:ffff, load rds_tcp or rds_rdma? [ 387.379940][T16502] veth0_vlan: entered promiscuous mode [ 387.424652][T16502] veth1_vlan: entered promiscuous mode [ 387.605336][T16502] veth0_macvtap: entered promiscuous mode [ 387.657165][T16502] veth1_macvtap: entered promiscuous mode [ 387.749723][T16502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.803521][T16502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.862371][T11001] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.894350][T11001] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.912264][T11001] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.967864][T11001] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.137557][T16917] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 388.213540][T11008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.274658][T11008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.382204][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.414595][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.422638][T16928] tipc: Enabling of bearer rejected, already enabled [ 388.466419][T16928] __nla_validate_parse: 6 callbacks suppressed [ 388.466438][T16928] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3178'. [ 388.728175][T16936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3181'. [ 389.026733][T16954] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3186'. [ 389.048177][T16957] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20002 [ 389.134263][T16959] syzkaller0: entered promiscuous mode [ 389.140388][T16959] syzkaller0: entered allmulticast mode [ 389.211561][T16959] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3187'. [ 389.522003][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 389.547709][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 389.560052][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 389.570380][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 389.580333][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 389.599021][T16974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3191'. [ 389.603777][T16977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3192'. [ 389.758496][ T8048] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.782928][ T8048] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 389.799403][ T8048] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 389.847779][T16970] batadv0 speed is unknown, defaulting to 1000 [ 389.907779][ T8048] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.928963][T16989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3193'. [ 389.945712][ T8048] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 389.973876][ T8048] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 390.124314][ T8048] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.144630][ T8048] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 390.155273][ T8048] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 390.223967][ T8048] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.249394][ T8048] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 390.275049][ T8048] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 390.418182][T16996] batadv0 speed is unknown, defaulting to 1000 [ 390.623366][ T24] IPVS: starting estimator thread 0... [ 390.746608][T17004] IPVS: using max 25 ests per chain, 60000 per kthread [ 390.825226][ T8048] tipc: Resetting bearer [ 390.996337][T17011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3200'. [ 391.014006][T17011] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3200'. [ 391.321458][ T8048] tipc: Disabling bearer [ 391.343118][ T8048] bond4 (unregistering): (slave gretap1): Releasing active interface [ 391.427305][ T8048] bond7 (unregistering): (slave geneve3): Releasing active interface [ 391.635991][ T5878] Bluetooth: hci6: command tx timeout [ 392.204195][ T8048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.214623][ T8048] bond_slave_0: left allmulticast mode [ 392.223547][ T8048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.233955][ T8048] bond_slave_1: left allmulticast mode [ 392.240829][ T8048] bond0 (unregistering): Released all slaves [ 392.355039][ T8048] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 392.363617][ T8048] wireguard0: left promiscuous mode [ 392.373637][ T8048] bond1 (unregistering): Released all slaves [ 392.389581][ T8048] bond2 (unregistering): Released all slaves [ 392.505117][ T8048] bond3 (unregistering): Released all slaves [ 392.528898][ T8048] bond4 (unregistering): Released all slaves [ 392.543951][ T8048] bond5 (unregistering): Released all slaves [ 392.564360][ T8048] bond6 (unregistering): Released all slaves [ 392.695587][ T8048] bond7 (unregistering): Released all slaves [ 392.818920][ T8048] bond8 (unregistering): (slave bond9): Releasing backup interface [ 392.827211][ T8048] bond9 (unregistering): left promiscuous mode [ 392.834044][ T8048] bond9 (unregistering): left allmulticast mode [ 392.842005][ T8048] bond8 (unregistering): Released all slaves [ 392.956711][ T8048] bond9 (unregistering): Released all slaves [ 393.076259][ T8048] bond10 (unregistering): Released all slaves [ 393.092848][T17007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3199'. [ 393.380115][ T8048] : left promiscuous mode [ 393.569106][ T8048] tipc: Disabling bearer [ 393.614343][ T8048] tipc: Left network mode [ 393.651181][T17023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.719036][ T5878] Bluetooth: hci6: command tx timeout [ 393.924939][T16970] chnl_net:caif_netlink_parms(): no params data found [ 394.431295][T16970] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.456027][T16970] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.463363][T16970] bridge_slave_0: entered allmulticast mode [ 394.506971][T16970] bridge_slave_0: entered promiscuous mode [ 394.524781][T17036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3206'. [ 394.524819][T16970] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.560269][T17036] netlink: 'syz.1.3206': attribute type 9 has an invalid length. [ 394.585817][T16970] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.593220][T16970] bridge_slave_1: entered allmulticast mode [ 394.600107][T17036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3206'. [ 394.678546][T16970] bridge_slave_1: entered promiscuous mode [ 394.702505][T17036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3206'. [ 394.721865][T17036] netlink: 'syz.1.3206': attribute type 9 has an invalid length. [ 394.753359][T17036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3206'. [ 394.869744][T17039] tipc: MTU too low for tipc bearer [ 394.949288][T17041] team_slave_0: entered promiscuous mode [ 394.955290][T17041] team_slave_1: entered promiscuous mode [ 394.965684][T17041] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 395.004462][T17041] team0: Device macvtap1 is already an upper device of the team interface [ 395.050250][T17041] team_slave_0: left promiscuous mode [ 395.055921][T17041] team_slave_1: left promiscuous mode [ 395.244074][T16970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.267540][T16970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.340274][T17044] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3208'. [ 395.378506][ T8048] hsr_slave_0: left promiscuous mode [ 395.385092][ T8048] hsr_slave_1: left promiscuous mode [ 395.395930][ T8048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.403544][ T8048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.413885][ T8048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.430388][ T8048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.471048][ T8048] veth0_macvtap: left promiscuous mode [ 395.477283][ T8048] veth1_vlan: left promiscuous mode [ 395.482888][ T8048] veth0_vlan: left promiscuous mode [ 395.501524][T17045] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3208'. [ 395.795681][ T5878] Bluetooth: hci6: command tx timeout [ 395.913346][ T49] smc: removing ib device syz2 [ 396.214169][ T8048] team0 (unregistering): Port device team_slave_1 removed [ 396.254806][ T8048] team0 (unregistering): Port device team_slave_0 removed [ 396.514483][ T36] smc: removing ib device syz0 [ 396.602661][ T10] batadv0 speed is unknown, defaulting to 1000 [ 396.611412][ T10] syz0: Port: 1 Link DOWN [ 396.631574][T16970] team0: Port device team_slave_0 added [ 396.653461][ T5981] batadv0 speed is unknown, defaulting to 1000 [ 396.658395][T16970] team0: Port device team_slave_1 added [ 396.812392][T16970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.840597][T16970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.906320][T16970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.952543][T17049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3209'. [ 396.965381][T16970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.986906][T16970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.026704][T16970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.329561][T17055] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3211'. [ 397.340682][T17055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3211'. [ 397.352149][T17055] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3211'. [ 397.417703][T16970] hsr_slave_0: entered promiscuous mode [ 397.424786][T16970] hsr_slave_1: entered promiscuous mode [ 397.485369][T16970] debugfs: 'hsr0' already exists in 'hsr' [ 397.494022][T17058] netlink: 'syz.1.3212': attribute type 21 has an invalid length. [ 397.502311][T16970] Cannot create hsr debugfs directory [ 397.861163][T17068] netlink: 'syz.5.3215': attribute type 1 has an invalid length. [ 397.886306][ T5878] Bluetooth: hci6: command tx timeout [ 398.234723][T17083] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20003 [ 398.697317][T10999] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.853328][T17098] netem: change failed [ 399.239776][T17113] tipc: Enabling of bearer rejected, media not registered [ 399.337281][T16970] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 399.488815][T16970] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 399.704913][T16970] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 399.758032][T16970] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 399.850729][T17138] __nla_validate_parse: 8 callbacks suppressed [ 399.850749][T17138] netlink: 212264 bytes leftover after parsing attributes in process `syz.5.3237'. [ 400.055043][T16970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.072357][T17147] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3240'. [ 400.120949][T16970] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.161406][T10999] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.168641][T10999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.213467][T10999] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.220683][T10999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.827748][T16970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.972442][T17187] netlink: 'syz.3.3251': attribute type 1 has an invalid length. [ 400.991720][T17187] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3251'. [ 401.168031][T17195] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3253'. [ 401.192071][T17195] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3253'. [ 401.382788][T17204] netlink: 'syz.5.3255': attribute type 1 has an invalid length. [ 401.395039][T17204] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3255'. [ 401.484589][T16970] veth0_vlan: entered promiscuous mode [ 401.582351][T16970] veth1_vlan: entered promiscuous mode [ 401.668887][T16970] veth0_macvtap: entered promiscuous mode [ 401.682387][T16970] veth1_macvtap: entered promiscuous mode [ 401.764151][T16970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.783621][T16970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.828727][T11005] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.848089][T11005] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.865285][T17227] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 401.921153][T11005] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.964636][T11005] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.106824][T17220] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.223780][T17220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.241645][T17220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.415741][T10999] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.431021][T10999] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.464942][T10999] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.492311][T10999] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.584012][T17242] netlink: 'syz.5.3268': attribute type 7 has an invalid length. [ 402.603661][T17242] netlink: 'syz.5.3268': attribute type 8 has an invalid length. [ 402.613220][T11005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.623356][T17245] netlink: 'syz.1.3267': attribute type 1 has an invalid length. [ 402.634942][T11005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.692212][T17245] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 402.724838][T10997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.753842][T10997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.764595][T17257] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3270'. [ 402.915455][T17264] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3182'. [ 403.461061][T17288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3281'. [ 403.683357][T17301] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3284'. [ 405.066073][T17342] netem: change failed [ 405.264550][T17346] netlink: 'syz.1.3299': attribute type 1 has an invalid length. [ 405.288380][T17346] __nla_validate_parse: 3 callbacks suppressed [ 405.288402][T17346] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3299'. [ 405.305283][T17348] tipc: Started in network mode [ 405.324905][T17348] tipc: Node identity 563eb6caf2e, cluster identity 4711 [ 405.333059][T17348] tipc: Enabled bearer , priority 0 [ 405.376080][T17348] syzkaller0: entered promiscuous mode [ 405.397093][T17348] syzkaller0: entered allmulticast mode [ 405.421080][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 405.428287][T17348] tipc: Resetting bearer [ 405.440710][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 405.452203][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 405.454622][T17347] tipc: Resetting bearer [ 405.489614][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 405.503614][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 405.587345][T17347] tipc: Disabling bearer [ 405.931487][T17361] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3304'. [ 405.960278][T17361] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3304'. [ 405.999823][T17361] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3304'. [ 406.226505][T17368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3306'. [ 406.235430][T17368] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3306'. [ 406.280184][T17350] chnl_net:caif_netlink_parms(): no params data found [ 406.325286][T17371] netlink: 'syz.1.3307': attribute type 10 has an invalid length. [ 406.365681][T17371] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3307'. [ 406.446644][T17371] team0: Port device geneve0 added [ 406.472971][T17375] netlink: 'syz.4.3308': attribute type 3 has an invalid length. [ 406.897383][T17350] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.904664][T17350] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.948796][T17350] bridge_slave_0: entered allmulticast mode [ 406.961730][T17350] bridge_slave_0: entered promiscuous mode [ 406.999428][T17350] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.020520][T17350] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.066755][T17350] bridge_slave_1: entered allmulticast mode [ 407.074966][T17350] bridge_slave_1: entered promiscuous mode [ 407.124030][T17392] sch_tbf: burst 4398 is lower than device lo mtu (65499) ! [ 407.164393][T17391] netlink: 11 bytes leftover after parsing attributes in process `syz.5.3313'. [ 407.172044][T17389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3312'. [ 407.183807][T17391] netlink: 11 bytes leftover after parsing attributes in process `syz.5.3313'. [ 407.254448][T17350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.293909][T17350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.556115][T17404] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.557205][ T5878] Bluetooth: hci4: command tx timeout [ 407.594966][T17404] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 407.711129][T17350] team0: Port device team_slave_0 added [ 407.774588][T17350] team0: Port device team_slave_1 added [ 407.951195][T17350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.984454][T17350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.077762][T17350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.100399][T17350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.108208][T17426] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 408.147854][T17350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.181932][T17350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.478149][T17350] hsr_slave_0: entered promiscuous mode [ 408.485074][T17350] hsr_slave_1: entered promiscuous mode [ 408.500801][T17350] debugfs: 'hsr0' already exists in 'hsr' [ 408.516478][T17350] Cannot create hsr debugfs directory [ 408.580352][T17444] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 408.944196][T17451] netlink: 'syz.3.3333': attribute type 10 has an invalid length. [ 409.276479][T17350] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 409.325901][T17350] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 409.390497][T17350] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 409.430029][T17350] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 409.636147][ T5878] Bluetooth: hci4: command tx timeout [ 409.862211][T17350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.949488][T17350] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.992066][T11005] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.999316][T11005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.041287][T17496] netlink: 'syz.1.3345': attribute type 2 has an invalid length. [ 410.058960][T17496] nbd: must specify a device to reconfigure [ 410.081075][T10999] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.088386][T10999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.224719][T17501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.720071][T17522] __nla_validate_parse: 6 callbacks suppressed [ 410.720090][T17522] netlink: 277 bytes leftover after parsing attributes in process `syz.5.3351'. [ 410.779273][T17522] netlink: 277 bytes leftover after parsing attributes in process `syz.5.3351'. [ 410.791302][T17350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.858373][T17519] netlink: 277 bytes leftover after parsing attributes in process `syz.5.3351'. [ 410.970979][T17542] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 411.156927][T17552] bridge0: port 3(syz_tun) entered blocking state [ 411.197820][T17552] bridge0: port 3(syz_tun) entered disabled state [ 411.204519][T17552] syz_tun: entered allmulticast mode [ 411.235387][T17552] syz_tun: entered promiscuous mode [ 411.247203][T17555] netlink: 'syz.4.3355': attribute type 5 has an invalid length. [ 411.250272][T17552] bridge0: port 3(syz_tun) entered blocking state [ 411.261628][T17552] bridge0: port 3(syz_tun) entered forwarding state [ 411.419881][T17350] veth0_vlan: entered promiscuous mode [ 411.432526][T17350] veth1_vlan: entered promiscuous mode [ 411.472190][T17350] veth0_macvtap: entered promiscuous mode [ 411.486690][T17350] veth1_macvtap: entered promiscuous mode [ 411.510562][T17350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.563863][T17350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.645832][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.654612][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.706398][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.715348][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.725851][ T5878] Bluetooth: hci4: command tx timeout [ 411.799017][T17564] netlink: 'syz.5.3357': attribute type 1 has an invalid length. [ 411.817163][T17564] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3357'. [ 411.860899][T17566] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3359'. [ 412.051854][T10997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.077888][T10997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.178213][T17578] nbd: couldn't find a device at index -373156329 [ 412.194758][T10997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.214798][T10997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.365312][T17589] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3365'. [ 412.378473][T17589] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3365'. [ 412.394898][T17589] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3365'. [ 412.584081][T17596] syz.5.3367: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 412.606889][T17596] CPU: 0 UID: 0 PID: 17596 Comm: syz.5.3367 Not tainted syzkaller #0 PREEMPT(full) [ 412.606920][T17596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 412.606932][T17596] Call Trace: [ 412.606940][T17596] [ 412.606949][T17596] dump_stack_lvl+0x189/0x250 [ 412.606979][T17596] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 412.607010][T17596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.607034][T17596] ? __pfx__printk+0x10/0x10 [ 412.607064][T17596] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 412.607088][T17596] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 412.607121][T17596] warn_alloc+0x214/0x310 [ 412.607152][T17596] ? stack_depot_save_flags+0x40/0x860 [ 412.607183][T17596] ? __pfx_warn_alloc+0x10/0x10 [ 412.607232][T17596] ? kasan_save_track+0x4f/0x80 [ 412.607257][T17596] ? xskq_create+0x56/0x170 [ 412.607283][T17596] ? xsk_init_queue+0xb0/0x110 [ 412.607306][T17596] ? xsk_setsockopt+0x4dc/0x8d0 [ 412.607330][T17596] ? do_sock_setsockopt+0x179/0x1b0 [ 412.607348][T17596] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 412.607365][T17596] ? do_syscall_64+0xfa/0x3b0 [ 412.607381][T17596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.607411][T17596] __vmalloc_node_range_noprof+0x125/0x12f0 [ 412.607478][T17596] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 412.607516][T17596] ? __kasan_kmalloc+0x93/0xb0 [ 412.607547][T17596] vmalloc_user_noprof+0xad/0xf0 [ 412.607575][T17596] ? xskq_create+0xbf/0x170 [ 412.607603][T17596] xskq_create+0xbf/0x170 [ 412.607635][T17596] xsk_init_queue+0xb0/0x110 [ 412.607665][T17596] xsk_setsockopt+0x4dc/0x8d0 [ 412.607695][T17596] ? __pfx_xsk_setsockopt+0x10/0x10 [ 412.607721][T17596] ? __pfx_aa_sk_perm+0x10/0x10 [ 412.607755][T17596] ? aa_sock_opt_perm+0xff/0x1b0 [ 412.607778][T17596] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 412.607799][T17596] ? __pfx_xsk_setsockopt+0x10/0x10 [ 412.607826][T17596] do_sock_setsockopt+0x179/0x1b0 [ 412.607854][T17596] __x64_sys_setsockopt+0x13f/0x1b0 [ 412.607882][T17596] do_syscall_64+0xfa/0x3b0 [ 412.607898][T17596] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.607925][T17596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.607943][T17596] ? clear_bhb_loop+0x60/0xb0 [ 412.607969][T17596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.607988][T17596] RIP: 0033:0x7fce7198ebe9 [ 412.608007][T17596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.608024][T17596] RSP: 002b:00007fce72871038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 412.608046][T17596] RAX: ffffffffffffffda RBX: 00007fce71bc5fa0 RCX: 00007fce7198ebe9 [ 412.608060][T17596] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 412.608072][T17596] RBP: 00007fce71a11e19 R08: 0000000000000004 R09: 0000000000000000 [ 412.608084][T17596] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.608097][T17596] R13: 00007fce71bc6038 R14: 00007fce71bc5fa0 R15: 00007ffd03b4a478 [ 412.608132][T17596] [ 412.608140][T17596] Mem-Info: [ 412.633160][T17597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3366'. [ 412.640246][T17596] active_anon:5883 inactive_anon:0 isolated_anon:0 [ 412.640246][T17596] active_file:2568 inactive_file:39960 isolated_file:0 [ 412.640246][T17596] unevictable:768 dirty:38 writeback:0 [ 412.640246][T17596] slab_reclaimable:12793 slab_unreclaimable:117263 [ 412.640246][T17596] mapped:39086 shmem:1359 pagetables:1092 [ 412.640246][T17596] sec_pagetables:0 bounce:0 [ 412.640246][T17596] kernel_misc_reclaimable:0 [ 412.640246][T17596] free:1271854 free_pcp:26469 free_cma:0 [ 412.729451][T17600] netlink: 'syz.6.3368': attribute type 10 has an invalid length. [ 412.730688][T17596] Node 0 active_anon:23432kB inactive_anon:0kB active_file:10272kB inactive_file:159640kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:156344kB dirty:152kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14140kB pagetables:4216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 412.788872][T17602] Bluetooth: MGMT ver 1.23 [ 412.844209][T17600] batman_adv: batadv0: Adding interface: team0 [ 412.871711][T17596] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 412.892803][T17600] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.900705][T17596] Node 0 [ 413.089371][T17600] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 413.097191][T17596] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 413.172197][T17596] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 413.201984][T17596] Node 0 DMA32 free:1187200kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23432kB inactive_anon:0kB active_file:10272kB inactive_file:158072kB unevictable:1536kB writepending:168kB present:3129332kB managed:2557452kB mlocked:0kB bounce:0kB free_pcp:83140kB local_pcp:23996kB free_cma:0kB [ 413.245129][T17596] lowmem_reserve[]: 0 0 1 1 1 [ 413.260603][T17596] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 413.315026][T17596] lowmem_reserve[]: 0 0 0 0 0 [ 413.320276][T17596] Node 1 Normal free:3891176kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16228kB local_pcp:7040kB free_cma:0kB [ 413.366208][T17596] lowmem_reserve[]: 0 0 0 0 0 [ 413.371083][T17596] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 413.384511][T17596] Node 0 DMA32: 2017*4kB (UME) 572*8kB (UME) 281*16kB (UME) 173*32kB (UME) 212*64kB (UM) 141*128kB (UM) 93*256kB (UME) 45*512kB (UME) 15*1024kB (UME) 5*2048kB (UM) 259*4096kB (M) = 1187604kB [ 413.423962][T17596] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 413.443438][T17596] Node 1 Normal: 3*4kB (ME) 6*8kB (UME) 6*16kB (ME) 166*32kB (UME) 47*64kB (UME) 6*128kB (UME) 4*256kB (ME) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3891228kB [ 413.467470][T17596] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 413.484502][T17596] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 413.513959][T17596] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 413.532765][T17596] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 413.544058][T17596] 43885 total pagecache pages [ 413.553992][T17596] 0 pages in swap cache [ 413.562193][T17596] Free swap = 124996kB [ 413.571660][T17596] Total swap = 124996kB [ 413.578841][T17596] 2097051 pages RAM [ 413.582683][T17596] 0 pages HighMem/MovableOnly [ 413.594010][T17596] 425662 pages reserved [ 413.603204][T17596] 0 pages cma reserved [ 413.798077][ T51] Bluetooth: hci4: command tx timeout [ 414.916179][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 414.922440][ T5878] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 415.108739][T17693] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3396'. [ 416.200057][T17756] pim6reg1: entered promiscuous mode [ 416.202740][T17755] __nla_validate_parse: 1 callbacks suppressed [ 416.202756][T17755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3413'. [ 416.206525][T17756] pim6reg1: entered allmulticast mode [ 416.248319][T17754] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3415'. [ 416.308368][T17760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3413'. [ 416.317431][T17760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3413'. [ 416.343122][T17760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3413'. [ 416.761587][T17777] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3420'. [ 416.781632][T17778] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3420'. [ 417.199702][T17791] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.3424'. [ 417.396343][T17799] erspan0: entered allmulticast mode [ 417.632730][T17812] netlink: 'syz.1.3429': attribute type 27 has an invalid length. [ 417.864125][T17820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3432'. [ 418.497548][T17835] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3437'. [ 418.513818][T17822] netlink: 'syz.1.3430': attribute type 13 has an invalid length. [ 418.525898][T17822] netlink: 'syz.1.3430': attribute type 17 has an invalid length. [ 418.741306][T17822] erspan0: left allmulticast mode [ 418.931726][T17822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 418.971433][T17849] tipc: Started in network mode [ 418.976789][T17849] tipc: Node identity 6e3f96bc94af, cluster identity 4711 [ 418.984434][T17849] tipc: Enabled bearer , priority 0 [ 419.003275][T17846] syzkaller0: entered promiscuous mode [ 419.015707][T17846] syzkaller0: entered allmulticast mode [ 419.027997][T17846] sch_tbf: peakrate 7 is lower than or equals to rate 12952709541866543467 ! [ 419.072043][T17846] tipc: Resetting bearer [ 419.109129][T17845] tipc: Resetting bearer [ 419.146484][T17845] tipc: Disabling bearer [ 421.394521][T17914] __nla_validate_parse: 6 callbacks suppressed [ 421.394545][T17914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3462'. [ 422.364624][T17937] veth0_to_bridge: entered promiscuous mode [ 422.517727][T17786] Set syz1 is full, maxelem 65536 reached [ 422.624621][T17944] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3471'. [ 422.647006][T17946] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3472'. [ 422.735445][T17949] tipc: Started in network mode [ 422.741289][T17949] tipc: Node identity 6e786d04d3e8, cluster identity 4711 [ 422.749314][T17949] tipc: Enabled bearer , priority 0 [ 422.765293][T17950] tipc: Enabling of bearer rejected, already enabled [ 422.776309][T17948] syzkaller0: entered promiscuous mode [ 422.782117][T17948] syzkaller0: entered allmulticast mode [ 422.803372][T17952] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3474'. [ 422.824659][T17948] tipc: Resetting bearer [ 422.840568][T17947] tipc: Resetting bearer [ 422.862891][T17947] tipc: Disabling bearer [ 422.954669][T17956] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3476'. [ 422.977349][T17958] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3477'. [ 423.002586][T17958] syzkaller0: entered promiscuous mode [ 423.015051][T17958] syzkaller0: entered allmulticast mode [ 423.141007][T17933] veth0_to_bridge: left promiscuous mode [ 423.236876][T17965] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3480'. [ 423.308896][T17969] gtp0: entered promiscuous mode [ 423.324670][T17969] gtp0: entered allmulticast mode [ 423.394444][T17976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3484'. [ 423.690864][T17999] netlink: 'syz.6.3490': attribute type 21 has an invalid length. [ 423.705312][T17999] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3490'. [ 423.734546][T17999] netlink: 'syz.6.3490': attribute type 2 has an invalid length. [ 423.746777][T17999] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3490'. [ 423.752629][T18002] syzkaller1: entered promiscuous mode [ 423.768125][T18002] syzkaller1: entered allmulticast mode [ 424.338940][T18032] netlink: 'syz.6.3500': attribute type 3 has an invalid length. [ 424.460912][T18036] veth0_to_team: entered promiscuous mode [ 424.512275][T18036] veth0_to_team: entered allmulticast mode [ 424.562393][T18045] netlink: 'syz.1.3504': attribute type 10 has an invalid length. [ 424.599054][T18045] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 424.822801][T18059] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 424.977727][T18066] batman_adv: batadv0: Adding interface: wlan1 [ 424.984170][T18066] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.012806][T18066] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 425.040709][T18066] netlink: 'syz.6.3509': attribute type 1 has an invalid length. [ 425.172498][T18068] veth3: entered promiscuous mode [ 425.265159][T18073] gretap1: entered allmulticast mode [ 425.563971][T18095] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 425.619851][T18094] netlink: 'syz.5.3519': attribute type 11 has an invalid length. [ 425.635930][T18094] netlink: 'syz.5.3519': attribute type 11 has an invalid length. [ 425.721574][T18097] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 425.852650][T18110] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 426.346453][T18131] syzkaller0: entered promiscuous mode [ 426.352064][T18131] syzkaller0: entered allmulticast mode [ 426.362135][T18131] tipc: Started in network mode [ 426.367770][T18131] tipc: Node identity 46b7ae2d445a, cluster identity 4711 [ 426.375924][T18131] tipc: Enabled bearer , priority 0 [ 426.388081][T18131] netlink: 'syz.1.3531': attribute type 29 has an invalid length. [ 426.396873][T18131] netlink: 'syz.1.3531': attribute type 29 has an invalid length. [ 426.414503][T18131] __nla_validate_parse: 8 callbacks suppressed [ 426.414524][T18131] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3531'. [ 426.443122][T18131] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 426.553365][T18133] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.560927][T18133] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.660150][T18133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.675427][T18133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.822157][T18140] tipc: Resetting bearer [ 426.859818][T18130] tipc: Resetting bearer [ 426.901126][T18130] tipc: Disabling bearer [ 426.964969][ T12] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.988436][T10997] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.002417][T18150] netlink: 'syz.5.3536': attribute type 1 has an invalid length. [ 427.010362][T18150] netlink: 184 bytes leftover after parsing attributes in process `syz.5.3536'. [ 427.020308][T18150] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3536'. [ 427.040267][T10997] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.050478][T10997] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.241672][T18158] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3539'. [ 427.421208][T18165] netlink: 'syz.5.3543': attribute type 1 has an invalid length. [ 427.489277][T18174] netlink: 'syz.3.3546': attribute type 2 has an invalid length. [ 427.665645][ T5877] IPVS: starting estimator thread 0... [ 427.766586][T18179] IPVS: using max 27 ests per chain, 64800 per kthread [ 427.815727][T18184] tipc: Started in network mode [ 427.856419][T18184] tipc: Node identity ac1414aa, cluster identity 4711 [ 427.865059][T18184] tipc: Enabled bearer , priority 10 [ 427.964287][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 428.152096][T18194] syzkaller0: create flow: hash 3784071754 index 1 [ 428.311938][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 428.329302][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 428.345100][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 428.353842][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 428.364698][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 428.468031][T18193] syzkaller0: delete flow: hash 3784071754 index 1 [ 428.980338][ T5913] tipc: Node number set to 2886997162 [ 429.148353][T18216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3555'. [ 430.446803][ T51] Bluetooth: hci7: command tx timeout [ 430.520129][T10997] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 430.799699][T18229] netlink: 'syz.5.3559': attribute type 2 has an invalid length. [ 430.807869][T18229] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3559'. [ 430.814355][T18230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3556'. [ 430.835780][T18225] netlink: 'syz.1.3557': attribute type 1 has an invalid length. [ 430.904613][T18223] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3556'. [ 430.984304][T18237] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3560'. [ 430.995031][T18237] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3560'. [ 431.005693][T18237] netlink: 'syz.5.3560': attribute type 16 has an invalid length. [ 431.013653][T18237] netlink: 'syz.5.3560': attribute type 17 has an invalid length. [ 431.094801][T18200] chnl_net:caif_netlink_parms(): no params data found [ 431.198219][T18237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 431.434158][T18243] bond2: entered allmulticast mode [ 431.443332][T18243] 8021q: adding VLAN 0 to HW filter on device bond2 [ 431.453735][T18243] bridge0: port 3(bond2) entered blocking state [ 431.460831][T18243] bridge0: port 3(bond2) entered disabled state [ 431.471592][T18243] bond2: entered promiscuous mode [ 431.488610][T18249] team0: Device ip6gre1 is of different type [ 431.569375][T18235] netdevsim netdevsim6 : renamed from netdevsim0 [ 431.788302][T18262] netlink: 'syz.3.3567': attribute type 10 has an invalid length. [ 431.809831][T18200] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.844954][T18200] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.873251][T18200] bridge_slave_0: entered allmulticast mode [ 431.900247][T18200] bridge_slave_0: entered promiscuous mode [ 431.908140][T18269] netlink: 'syz.1.3568': attribute type 1 has an invalid length. [ 431.922763][T18262] bridge_slave_1: left allmulticast mode [ 431.929073][T18262] bridge_slave_1: left promiscuous mode [ 431.950894][T18262] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.974157][T18262] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 431.992352][T18200] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.010870][T18200] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.026243][T18200] bridge_slave_1: entered allmulticast mode [ 432.043804][T18200] bridge_slave_1: entered promiscuous mode [ 432.192891][T18281] __nla_validate_parse: 2 callbacks suppressed [ 432.192910][T18281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3571'. [ 432.200855][T18200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.221338][T18279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3571'. [ 432.234199][T18200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.392752][T18281] bond2: left promiscuous mode [ 432.398844][T18281] bridge0: port 3(bond2) entered disabled state [ 432.411167][T18286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3574'. [ 432.423816][T18281] bridge_slave_0: left allmulticast mode [ 432.432228][T18281] bridge_slave_0: left promiscuous mode [ 432.449645][T18281] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.463224][T18290] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 432.517769][ T51] Bluetooth: hci7: command tx timeout [ 432.541246][T18200] team0: Port device team_slave_0 added [ 432.551927][T18286] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.661720][T18286] bridge_slave_1 (unregistering): left allmulticast mode [ 432.672690][T18286] bridge_slave_1 (unregistering): left promiscuous mode [ 432.680301][T18286] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.820984][T18200] team0: Port device team_slave_1 added [ 432.837167][T18302] netlink: 'syz.3.3578': attribute type 29 has an invalid length. [ 432.845879][T18303] netlink: 'syz.3.3578': attribute type 29 has an invalid length. [ 432.880882][T18300] bridge0: entered promiscuous mode [ 432.887395][T18300] bridge0: entered allmulticast mode [ 432.925177][T18200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.933169][T18200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.960925][T18300] netlink: 500 bytes leftover after parsing attributes in process `syz.3.3578'. [ 432.961240][T18300] unsupported nla_type 58 [ 432.983100][T18200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.000933][T18200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.009791][T18200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.036463][T18200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.101119][T18200] hsr_slave_0: entered promiscuous mode [ 433.108126][T18200] hsr_slave_1: entered promiscuous mode [ 433.114431][T18200] debugfs: 'hsr0' already exists in 'hsr' [ 433.122344][T18200] Cannot create hsr debugfs directory [ 433.357863][T18306] netlink: 'syz.1.3579': attribute type 11 has an invalid length. [ 433.366640][T18306] netlink: 'syz.1.3579': attribute type 11 has an invalid length. [ 433.374718][T18306] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3579'. [ 433.428422][T18200] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 433.492457][T18200] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 433.518156][T18200] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 433.546674][T18200] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 433.703390][T18326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3583'. [ 433.723076][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 433.753722][T18326] netlink: 'syz.5.3583': attribute type 1 has an invalid length. [ 433.775827][T18326] netlink: 'syz.5.3583': attribute type 2 has an invalid length. [ 434.129325][T18200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.143595][T18338] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3586'. [ 434.209492][T18200] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.264511][T11001] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.271762][T11001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.352705][T11001] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.359946][T11001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.403170][T18347] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3590'. [ 434.506360][T18200] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 434.529018][T18200] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 434.607480][ T51] Bluetooth: hci7: command tx timeout [ 434.807986][T18364] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3594'. [ 435.082811][T18379] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3598'. [ 435.245208][T18379] hsr_slave_1 (unregistering): left promiscuous mode [ 435.334921][T18383] bond0: (slave syz_tun): Releasing backup interface [ 435.409568][T18200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.287088][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 436.400872][T18437] netlink: 'syz.1.3614': attribute type 4 has an invalid length. [ 436.495456][T18200] veth0_vlan: entered promiscuous mode [ 436.559506][T18447] netlink: 'syz.5.3616': attribute type 5 has an invalid length. [ 436.574858][T18200] veth1_vlan: entered promiscuous mode [ 436.676182][ T51] Bluetooth: hci7: command tx timeout [ 436.726891][T18200] veth0_macvtap: entered promiscuous mode [ 436.779283][T18455] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 436.814038][T18200] veth1_macvtap: entered promiscuous mode [ 436.899119][T18200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.927054][T18465] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 437.089332][T18200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.131934][T18471] tipc: Enabled bearer , priority 0 [ 437.256083][T18472] syzkaller0: entered promiscuous mode [ 437.261701][T18472] syzkaller0: entered allmulticast mode [ 437.289685][T18471] __nla_validate_parse: 2 callbacks suppressed [ 437.289705][T18471] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3624'. [ 437.318618][ T3584] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.333232][T18471] NCSI netlink: No device for ifindex 16845312 [ 437.352162][ T3584] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.409146][ T3584] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.433227][T18471] tipc: Resetting bearer [ 437.463129][T10999] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.517826][T18470] tipc: Resetting bearer [ 437.573366][T18470] tipc: Disabling bearer [ 437.573749][T18492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3630'. [ 437.633288][T18489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3630'. [ 437.759508][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.782732][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.874064][T11001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.895762][T11001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.981558][T18505] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3634'. [ 438.149130][T18514] netlink: zone id is out of range [ 438.154329][T18514] netlink: zone id is out of range [ 438.168267][T18514] netlink: zone id is out of range [ 438.173910][T18514] netlink: del zone limit has 4 unknown bytes [ 438.259231][T18518] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3636'. [ 438.727935][T18545] bond1: entered promiscuous mode [ 438.733216][T18545] bond1: entered allmulticast mode [ 438.742110][T18545] 8021q: adding VLAN 0 to HW filter on device bond1 [ 438.881141][T18539] netlink: 108 bytes leftover after parsing attributes in process `syz.7.3645'. [ 438.935958][T18539] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3645'. [ 439.421221][T18582] netlink: 'syz.3.3656': attribute type 21 has an invalid length. [ 439.450314][T18582] netlink: 'syz.3.3656': attribute type 6 has an invalid length. [ 439.474139][T18582] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3656'. [ 439.494541][T10999] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 439.559032][T18587] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 439.709909][T18594] netlink: 'syz.3.3659': attribute type 1 has an invalid length. [ 439.736892][T18594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3659'. [ 439.975139][T18608] netlink: 'syz.7.3664': attribute type 16 has an invalid length. [ 439.995723][T18608] netlink: 'syz.7.3664': attribute type 17 has an invalid length. [ 440.025148][T18612] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.3665'. [ 440.047552][T18612] netlink: zone id is out of range [ 440.052771][T18612] netlink: get zone limit has 8 unknown bytes [ 440.079967][T18608] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 440.173672][T18613] vlan2: entered allmulticast mode [ 440.196346][T18613] hsr0: entered allmulticast mode [ 440.201437][T18613] hsr_slave_0: entered allmulticast mode [ 440.236300][T18613] hsr_slave_1: entered allmulticast mode [ 440.464856][T18632] unknown channel width for channel at 909000KHz? [ 440.824751][T18650] bridge0: port 3(syz_tun) entered disabled state [ 440.869956][T18651] netlink: 'syz.7.3675': attribute type 2 has an invalid length. [ 440.887813][T18650] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.986990][T18654] netlink: 'syz.5.3677': attribute type 16 has an invalid length. [ 440.994864][T18654] netlink: 'syz.5.3677': attribute type 17 has an invalid length. [ 441.014165][T18650] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.192295][T18654] bridge0: port 3(syz_tun) entered blocking state [ 441.198994][T18654] bridge0: port 3(syz_tun) entered forwarding state [ 441.219009][T18654] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 441.917834][T18705] netlink: 'syz.1.3690': attribute type 11 has an invalid length. [ 442.044805][ T3584] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 442.182840][T18722] validate_nla: 2 callbacks suppressed [ 442.182860][T18722] netlink: 'syz.3.3695': attribute type 2 has an invalid length. [ 442.313957][T18729] __nla_validate_parse: 11 callbacks suppressed [ 442.313978][T18729] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3697'. [ 442.419936][T18729] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.472353][T18729] bridge_slave_1 (unregistering): left allmulticast mode [ 442.480097][T18729] bridge_slave_1 (unregistering): left promiscuous mode [ 442.487429][T18729] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.556204][T18744] syzkaller0: entered promiscuous mode [ 442.562577][T18744] syzkaller0: entered allmulticast mode [ 442.717045][T18755] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3704'. [ 443.130721][T18778] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3710'. [ 443.160750][T18778] bridge_slave_1: left allmulticast mode [ 443.177411][T18778] bridge_slave_1: left promiscuous mode [ 443.193731][T18778] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.244455][T18778] bridge_slave_0: left allmulticast mode [ 443.292718][T18778] bridge_slave_0: left promiscuous mode [ 443.317742][T18778] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.353073][T18787] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3712'. [ 443.365294][T18787] netlink: 'syz.3.3712': attribute type 7 has an invalid length. [ 443.387532][T18787] netlink: 'syz.3.3712': attribute type 8 has an invalid length. [ 443.406967][T18787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3712'. [ 443.453175][T18785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3711'. [ 443.472249][T18785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.663486][T18785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.697613][T18805] netlink: 'syz.7.3715': attribute type 1 has an invalid length. [ 443.737639][T18797] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 444.098346][T18811] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3719'. [ 444.140201][T18811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.337903][T18811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.838578][T18837] netlink: 'syz.3.3728': attribute type 33 has an invalid length. [ 444.869776][T18837] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3728'. [ 444.882167][T18839] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3729'. [ 444.923935][T18842] netlink: 'syz.5.3730': attribute type 1 has an invalid length. [ 444.925922][T18837] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3728'. [ 445.242056][ T3584] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 445.311110][T18849] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 445.811271][T18883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 445.863856][T18891] tunl0: entered promiscuous mode [ 445.878928][ T5877] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 445.888517][T18891] netlink: 'syz.5.3744': attribute type 3 has an invalid length. [ 445.932063][T18879] vlan2: entered allmulticast mode [ 445.945984][T18879] bridge0: entered allmulticast mode [ 446.246806][T18910] netlink: 'syz.1.3750': attribute type 23 has an invalid length. [ 446.453839][T18914] nbd: must specify a device to reconfigure [ 447.139742][T18946] bridge_slave_0: left allmulticast mode [ 447.151531][T18946] bridge_slave_0: left promiscuous mode [ 447.161031][T18946] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.169131][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 447.193913][T18946] bond0: (slave bond_slave_0): Releasing backup interface [ 447.212986][T18946] bond0: (slave bond_slave_1): Releasing backup interface [ 447.248298][T18946] team0: Port device team_slave_0 removed [ 447.271807][T18946] team0: Port device team_slave_1 removed [ 447.279701][T18946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.287363][T18946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.361912][T18946] team0: Port device geneve0 removed [ 447.460508][T18952] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 447.565391][T18951] 8021q: adding VLAN 0 to HW filter on device bond1 [ 447.620012][T18954] vlan3: entered allmulticast mode [ 447.625278][T18954] bond1: entered allmulticast mode [ 448.294229][T18983] __nla_validate_parse: 14 callbacks suppressed [ 448.294249][T18983] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3772'. [ 448.347767][T18982] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3772'. [ 448.896559][T19011] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3782'. [ 449.164353][T19023] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3786'. [ 449.249046][T19023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.300242][T19023] bond0: (slave rose0): Enslaving as an active interface with an up link [ 449.726702][T10997] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.727293][T19043] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3793'. [ 449.757555][T10997] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.760622][T19043] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3793'. [ 449.778301][ T13] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.787312][ T13] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.809492][T19043] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3793'. [ 449.827519][T19041] IPv6: sit1: Disabled Multicast RS [ 449.846899][T19041] sit1: entered allmulticast mode [ 449.903214][T19043] tipc: Started in network mode [ 449.908471][T19043] tipc: Node identity ac14140f, cluster identity 4711 [ 449.916147][T19043] tipc: New replicast peer: 255.255.255.255 [ 449.923368][T19043] tipc: Enabled bearer , priority 10 [ 450.071182][T19048] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 450.250451][ T30] audit: type=1107 audit(1756660907.281:5): pid=19050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›4u' [ 450.999794][T10997] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 451.012075][T19080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3806'. [ 451.034769][T19081] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3807'. [ 451.054454][ T7184] tipc: Node number set to 2886997007 [ 451.111250][T19081] netlink: 'syz.7.3807': attribute type 3 has an invalid length. [ 451.227485][T19093] netlink: 'syz.6.3809': attribute type 1 has an invalid length. [ 451.373792][T19096] 8021q: adding VLAN 0 to HW filter on device bond4 [ 451.383384][T19096] bond3: (slave bond4): making interface the new active one [ 451.391861][T19096] bond3: (slave bond4): Enslaving as an active interface with an up link [ 451.401528][T19093] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3809'. [ 451.437537][T19100] syzkaller1: entered promiscuous mode [ 451.458438][T19100] syzkaller1: entered allmulticast mode [ 451.494348][T19100] netlink: 'syz.7.3811': attribute type 10 has an invalid length. [ 451.549200][T19100] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.597366][T19100] bond0: (slave team0): Enslaving as an active interface with an up link [ 451.847298][T19111] vlan3: entered allmulticast mode [ 451.859263][T19111] mac80211_hwsim hwsim46 wlan0: entered allmulticast mode [ 452.038245][T19117] gre0: entered promiscuous mode [ 452.276738][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 452.355921][ T5878] Bluetooth: hci7: command 0x0405 tx timeout [ 452.674531][T19138] netlink: 'syz.7.3824': attribute type 32 has an invalid length. [ 452.811665][T19144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.916993][ T7184] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 453.473815][T19156] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 453.485183][T19156] team0: Device macvtap1 is already an upper device of the team interface [ 453.875337][T19168] __nla_validate_parse: 4 callbacks suppressed [ 453.875357][T19168] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3832'. [ 453.923068][T19168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3832'. [ 453.941767][T19168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3832'. [ 453.978375][T19168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3832'. [ 453.993906][T19168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3832'. [ 454.164263][T19170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3833'. [ 454.174826][T19170] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3833'. [ 454.196801][T19170] geneve2: entered promiscuous mode [ 454.210898][T19170] geneve2: entered allmulticast mode [ 454.238846][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.248016][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.259372][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.277831][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.717139][T19185] macsec1: entered promiscuous mode [ 454.722547][T19185] macsec1: entered allmulticast mode [ 454.847533][T19188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3836'. [ 455.187981][T19205] netlink: 'syz.6.3842': attribute type 2 has an invalid length. [ 455.976433][T19228] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3848'. [ 456.535202][T19249] netlink: 'syz.3.3855': attribute type 1 has an invalid length. [ 456.612580][T19249] bond3: (slave gretap1): making interface the new active one [ 456.621959][T19249] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 456.664549][T19253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 456.757201][T11001] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 457.373901][T19282] openvswitch: netlink: Flow actions attr not present in new flow. [ 458.041002][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 458.142511][T19290] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3869'. [ 458.561543][T19303] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 458.599479][T19302] netlink: 'syz.1.3871': attribute type 16 has an invalid length. [ 458.607974][T19302] netlink: 'syz.1.3871': attribute type 17 has an invalid length. [ 458.653915][T19302] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 458.854812][T19310] IPVS: set_ctl: invalid protocol: 60 172.30.1.2:20001 [ 459.326215][T19327] syzkaller1: entered promiscuous mode [ 459.331951][T19327] syzkaller1: entered allmulticast mode [ 460.163380][T19343] batman_adv: batadv0: Removing interface: team0 [ 460.175841][T19343] bond0: (slave bond_slave_0): Releasing backup interface [ 460.188794][T19343] bond0: (slave bond_slave_1): Releasing backup interface [ 460.224810][T19343] team0: Port device team_slave_0 removed [ 460.251724][T19343] team0: Port device team_slave_1 removed [ 460.272059][T19343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.293343][T19343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.309879][T19343] batman_adv: batadv0: Removing interface: wlan1 [ 460.333007][T19343] bond3: (slave bond4): Releasing backup interface [ 460.387613][T19346] netlink: 'syz.1.3886': attribute type 1 has an invalid length. [ 460.656761][T19363] __nla_validate_parse: 1 callbacks suppressed [ 460.656782][T19363] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3889'. [ 460.718188][T19363] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3889'. [ 461.127567][T19384] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3895'. [ 461.289479][ T30] audit: type=1800 audit(1756660918.321:6): pid=19390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3897" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=670 res=0 errno=0 [ 461.454191][T19394] sit0: entered promiscuous mode [ 461.471034][T19394] netlink: 'syz.1.3900': attribute type 1 has an invalid length. [ 461.489641][T19394] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3900'. [ 461.861546][T19410] netlink: 'syz.6.3904': attribute type 10 has an invalid length. [ 461.877089][T19410] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3904'. [ 461.884147][T19411] sit1: entered promiscuous mode [ 461.905827][T19411] sit1: entered allmulticast mode [ 461.918716][T19410] team0: Port device geneve0 added [ 461.925008][ T49] netdevsim netdevsim6 : set [1, 0] type 2 family 0 port 6081 - 0 [ 461.949909][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.962080][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.971947][T19414] unknown channel width for channel at 909000KHz? [ 461.979261][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.355019][T19431] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3912'. [ 462.523523][T10997] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 462.738238][T19441] team0 (unregistering): Port device team_slave_0 removed [ 462.747077][T19441] team0 (unregistering): Port device team_slave_1 removed [ 462.833066][T19453] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 463.036340][T19466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3921'. [ 463.465801][T19487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3925'. [ 463.533446][T19487] netlink: 'syz.3.3925': attribute type 10 has an invalid length. [ 463.581568][T19490] netlink: 'syz.6.3927': attribute type 4 has an invalid length. [ 463.721588][T19495] netlink: 'syz.3.3929': attribute type 2 has an invalid length. [ 463.726268][ T5878] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 463.739537][ T5878] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 463.742246][T19495] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3929'. [ 463.747969][ T5878] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 463.764579][T19495] nbd: must specify a device to reconfigure [ 463.772806][ T5878] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 463.782737][ T5878] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 463.804349][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 464.002078][T19510] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3932'. [ 464.420002][T19494] chnl_net:caif_netlink_parms(): no params data found [ 464.655423][T19538] netlink: 'syz.3.3937': attribute type 11 has an invalid length. [ 464.663530][T19538] netlink: 'syz.3.3937': attribute type 11 has an invalid length. [ 464.807916][T19494] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.828561][T19494] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.866060][T19494] bridge_slave_0: entered allmulticast mode [ 464.887358][T19494] bridge_slave_0: entered promiscuous mode [ 464.943300][T19494] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.963709][T19494] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.971449][T19494] bridge_slave_1: entered allmulticast mode [ 464.981429][T19494] bridge_slave_1: entered promiscuous mode [ 464.995192][T19553] netlink: 'syz.6.3940': attribute type 11 has an invalid length. [ 465.138625][T19494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.180547][T19494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.344462][T19494] team0: Port device team_slave_0 added [ 465.362591][T19571] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 465.388718][T19494] team0: Port device team_slave_1 added [ 465.510522][T19494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.525590][T19494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.557866][T19494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.571260][T19494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.578513][T19494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.615738][T19494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.661040][T19576] netlink: zone id is out of range [ 465.667594][T19576] netlink: zone id is out of range [ 465.673034][T19576] netlink: zone id is out of range [ 465.688396][T19576] netlink: zone id is out of range [ 465.707254][T19576] netlink: zone id is out of range [ 465.723630][T19576] netlink: zone id is out of range [ 465.744012][T19576] netlink: zone id is out of range [ 465.760761][T19576] netlink: zone id is out of range [ 465.769473][T19576] netlink: zone id is out of range [ 465.791970][T19494] hsr_slave_0: entered promiscuous mode [ 465.809387][T19494] hsr_slave_1: entered promiscuous mode [ 465.823248][T19494] debugfs: 'hsr0' already exists in 'hsr' [ 465.833246][T19494] Cannot create hsr debugfs directory [ 465.860889][T19588] netlink: 'syz.6.3950': attribute type 1 has an invalid length. [ 465.876286][ T51] Bluetooth: hci8: command tx timeout [ 465.885057][T19588] __nla_validate_parse: 5 callbacks suppressed [ 465.885075][T19588] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3950'. [ 465.901789][T19588] netlink: 'syz.6.3950': attribute type 1 has an invalid length. [ 465.910547][T19588] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3950'. [ 466.098552][T19593] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3952'. [ 466.110070][T19593] erspan0: entered promiscuous mode [ 466.115328][T19593] erspan0: entered allmulticast mode [ 466.277705][T19494] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 466.293777][T19494] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 466.316423][T19494] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 466.337827][T19494] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 466.537423][T19494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.576117][T19494] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.604083][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.611433][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.635456][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.642738][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.742427][T19494] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 467.090886][T19494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.573608][T19652] netlink: 'syz.6.3967': attribute type 1 has an invalid length. [ 467.701475][T19652] 8021q: adding VLAN 0 to HW filter on device bond5 [ 467.833756][T19494] veth0_vlan: entered promiscuous mode [ 467.963117][ T51] Bluetooth: hci8: command tx timeout [ 468.267897][T19660] veth0_macvtap: left allmulticast mode [ 468.287769][T10997] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 468.418766][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.450433][ T5878] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 468.451787][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.467810][ T5878] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 468.478113][ T5878] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 468.491308][ T5878] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 468.510143][ T5878] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 468.558157][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.569267][T19494] veth1_vlan: entered promiscuous mode [ 468.640358][T11005] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.857570][T19494] veth0_macvtap: entered promiscuous mode [ 468.973808][T19688] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3978'. [ 468.978955][T19494] veth1_macvtap: entered promiscuous mode [ 469.132205][T19494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.191593][T19700] syzkaller1: entered promiscuous mode [ 469.197338][T19700] syzkaller1: entered allmulticast mode [ 469.214334][T19494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.272086][T11008] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.301515][T11008] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.314911][T11008] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.382205][T11008] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.550978][T19673] chnl_net:caif_netlink_parms(): no params data found [ 469.560783][T11008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 469.782521][T19729] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.809102][T19729] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.817851][T19735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.837055][T19734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3987'. [ 469.847035][T19735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.930517][T19673] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.946817][T19673] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.964385][T19673] bridge_slave_0: entered allmulticast mode [ 469.973166][T19673] bridge_slave_0: entered promiscuous mode [ 469.995438][T19673] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.014328][T19673] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.035342][T19673] bridge_slave_1: entered allmulticast mode [ 470.035939][ T5878] Bluetooth: hci8: command tx timeout [ 470.076231][T19673] bridge_slave_1: entered promiscuous mode [ 470.199563][T19747] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3990'. [ 470.219240][T19673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.236769][T19673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.272999][T19751] IPVS: set_ctl: invalid protocol: 1 10.1.1.1:20003 [ 470.363468][T19673] team0: Port device team_slave_0 added [ 470.379541][T19673] team0: Port device team_slave_1 added [ 470.470523][T19673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.485688][T19673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.526108][T19673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.543861][T19762] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20003 [ 470.563993][T19673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.573419][T19673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.596241][ T5878] Bluetooth: hci9: command tx timeout [ 470.612045][T19673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.832221][T19673] hsr_slave_0: entered promiscuous mode [ 470.857469][T19673] hsr_slave_1: entered promiscuous mode [ 470.871744][T19673] debugfs: 'hsr0' already exists in 'hsr' [ 470.878648][T19673] Cannot create hsr debugfs directory [ 471.193699][T19777] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3999'. [ 471.306907][T19782] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3999'. [ 471.682249][T19803] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4006'. [ 472.093328][T19821] rdma_rxe: rxe_newlink: failed to add lo [ 472.113384][T19824] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4010'. [ 472.123697][ T5878] Bluetooth: hci8: command tx timeout [ 472.154227][T19821] erspan0: left promiscuous mode [ 472.161985][T19821] erspan0: left allmulticast mode [ 472.208916][T19821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.228520][T19821] net_ratelimit: 19 callbacks suppressed [ 472.228533][T19821] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 472.251485][T19673] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 472.291257][T19673] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 472.336751][T19673] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 472.358698][T19832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4009'. [ 472.384818][T19673] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 472.581272][T19850] bridge1: entered promiscuous mode [ 472.602889][T19850] bridge1: entered allmulticast mode [ 472.676516][ T5878] Bluetooth: hci9: command tx timeout [ 472.731006][ T30] audit: type=1804 audit(1756660929.751:7): pid=19863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4020" name="/newroot/261/cgroup.controllers" dev="tmpfs" ino=1339 res=1 errno=0 [ 472.778264][ T30] audit: type=1800 audit(1756660929.751:8): pid=19863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4020" name="cgroup.controllers" dev="tmpfs" ino=1339 res=0 errno=0 [ 472.786916][T19850] bridge1: entered promiscuous mode [ 472.819122][T19850] bridge1: entered allmulticast mode [ 472.951810][T19673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.985043][T19850] bridge1: entered promiscuous mode [ 472.992419][T19850] bridge1: entered allmulticast mode [ 473.067018][T19673] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.089229][T19725] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.096513][T19725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.119540][T11008] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.126861][T11008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.150999][T19850] bridge1: entered promiscuous mode [ 473.157266][T19850] bridge1: entered allmulticast mode [ 473.294911][T19850] bridge1: entered promiscuous mode [ 473.302609][T19850] bridge1: entered allmulticast mode [ 473.706221][T19879] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4024'. [ 473.980219][T19673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.990564][T19895] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4026'. [ 474.038515][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 474.135427][T19899] netlink: 'syz.1.4027': attribute type 6 has an invalid length. [ 474.325078][T19907] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4030'. [ 474.726608][T19926] netlink: 'syz.1.4034': attribute type 2 has an invalid length. [ 474.754032][T19926] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4034'. [ 474.755978][ T5878] Bluetooth: hci9: command tx timeout [ 474.771640][T19928] delete_channel: no stack [ 474.991981][T19673] veth0_vlan: entered promiscuous mode [ 475.032321][T19943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4039'. [ 475.054615][T19673] veth1_vlan: entered promiscuous mode [ 475.172588][T19673] veth0_macvtap: entered promiscuous mode [ 475.209485][T19673] veth1_macvtap: entered promiscuous mode [ 475.226950][T19951] IPv6: Can't replace route, no match found [ 475.288771][T19673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.320646][ T1109] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 475.342627][T19673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.373910][T10999] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.413477][T10999] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.440425][T10999] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.460381][T10999] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.596093][T19725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.611135][T19725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.682849][T10313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.713666][T10313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.337676][T19995] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 476.349190][T20000] netlink: 'syz.3.4054': attribute type 1 has an invalid length. [ 476.379977][T20000] netlink: 'syz.3.4054': attribute type 2 has an invalid length. [ 476.402996][T20000] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4054'. [ 476.441605][T20004] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4055'. [ 476.449465][T20000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4054'. [ 476.469058][T20004] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4055'. [ 476.490320][T20004] netlink: 'syz.9.4055': attribute type 20 has an invalid length. [ 476.574924][T20004] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4055'. [ 476.575560][T11005] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.639904][T20004] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4055'. [ 476.668882][T20004] netlink: 'syz.9.4055': attribute type 20 has an invalid length. [ 476.680628][T20017] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4058'. [ 476.728318][T11005] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.740845][T11005] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.805778][T11005] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.836990][ T5878] Bluetooth: hci9: command tx timeout [ 477.318961][T20061] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20004 [ 477.880352][T20087] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4077'. [ 478.307169][T20103] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4084'. [ 478.339774][T20103] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4084'. [ 478.623548][T20120] netlink: 'syz.6.4088': attribute type 3 has an invalid length. [ 478.916290][ T5878] Bluetooth: hci9: command tx timeout [ 479.163329][T20140] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 479.181527][T20148] netlink: 'syz.9.4095': attribute type 1 has an invalid length. [ 479.195166][T11005] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 479.557508][T20159] tipc: New replicast peer: 255.255.255.255 [ 479.586869][T20159] tipc: Enabled bearer , priority 10 [ 480.326234][T20210] vlan2: entered promiscuous mode [ 480.331358][T20210] bridge0: entered promiscuous mode [ 480.501343][T20221] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 480.706235][ T5981] tipc: Node number set to 49131053 [ 480.818810][T20243] netlink: 'syz.3.4125': attribute type 5 has an invalid length. [ 481.077931][T11005] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 481.517154][T20272] __nla_validate_parse: 14 callbacks suppressed [ 481.517177][T20272] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4134'. [ 481.843822][T20290] : entered promiscuous mode [ 481.851843][T20290] netlink: 'syz.8.4140': attribute type 21 has an invalid length. [ 481.862228][T20290] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4140'. [ 482.088998][T20300] netlink: 108 bytes leftover after parsing attributes in process `syz.8.4145'. [ 482.194787][T20300] netlink: 25 bytes leftover after parsing attributes in process `syz.8.4145'. [ 482.247547][T20301] netlink: 'syz.8.4145': attribute type 4 has an invalid length. [ 482.369191][T20310] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4148'. [ 482.473251][T20310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4148'. [ 482.516021][T20310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4148'. [ 482.522902][T20314] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 482.535438][T20310] netlink: 'syz.3.4148': attribute type 15 has an invalid length. [ 482.718452][T20332] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 483.294503][T20358] netlink: 'syz.1.4159': attribute type 10 has an invalid length. [ 483.354575][T20360] netlink: 'syz.9.4158': attribute type 1 has an invalid length. [ 483.375407][T20360] netlink: 184 bytes leftover after parsing attributes in process `syz.9.4158'. [ 483.387193][T20360] netlink: 'syz.9.4158': attribute type 1 has an invalid length. [ 483.413066][T20362] netlink: 'syz.9.4158': attribute type 1 has an invalid length. [ 483.442382][T20362] netlink: 224 bytes leftover after parsing attributes in process `syz.9.4158'. [ 483.460624][T20362] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4158'. [ 483.598168][T11005] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 483.628837][T20376] batadv_slave_0: entered promiscuous mode [ 483.642699][T20373] netlink: 'syz.1.4163': attribute type 1 has an invalid length. [ 483.710467][T20365] batadv_slave_0: left promiscuous mode [ 483.886790][T20386] 8021q: adding VLAN 0 to HW filter on device bond4 [ 483.925004][T20392] : renamed from veth0_vlan [ 484.144508][T20403] (unnamed net_device) (uninitialized): option coupled_control: invalid value (10) [ 484.185379][T20403] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 484.916928][T10313] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 485.265046][T20460] tipc: Invalid UDP bearer configuration [ 485.265109][T20460] tipc: Enabling of bearer rejected, failed to enable media [ 485.914629][T20501] sctp: [Deprecated]: syz.3.4203 (pid 20501) Use of int in maxseg socket option. [ 485.914629][T20501] Use struct sctp_assoc_value instead [ 486.839522][ T1109] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 486.944584][T20541] __nla_validate_parse: 77 callbacks suppressed [ 486.944605][T20541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4212'. [ 487.371228][T20554] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4216'. [ 487.373530][T20553] validate_nla: 2 callbacks suppressed [ 487.373545][T20553] netlink: 'syz.8.4217': attribute type 3 has an invalid length. [ 487.400148][T20553] netlink: 80 bytes leftover after parsing attributes in process `syz.8.4217'. [ 488.420933][T20606] rdma_rxe: rxe_newlink: failed to add lo [ 488.457344][T20609] netlink: 324 bytes leftover after parsing attributes in process `syz.8.4232'. [ 488.490906][T20609] netlink: 76 bytes leftover after parsing attributes in process `syz.8.4232'. [ 489.052897][T20634] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4239'. [ 489.198749][T20634] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4239'. [ 489.506146][T20646] bridge0: port 1(batadv1) entered blocking state [ 489.514368][T20646] bridge0: port 1(batadv1) entered disabled state [ 489.521172][T20646] batadv1: entered allmulticast mode [ 489.538588][T20646] batadv1: entered promiscuous mode [ 489.604007][T20659] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4247'. [ 489.721205][T20664] netlink: 'syz.9.4247': attribute type 1 has an invalid length. [ 489.849818][T20673] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4247'. [ 489.927242][T20659] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.935142][T20659] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.034464][ T1109] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 490.046609][ T1109] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 490.057540][T10313] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.180153][T20659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.207476][T20659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.512139][T20659] vlan2: left promiscuous mode [ 490.517835][T20659] bridge0: left promiscuous mode [ 490.525053][T20664] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 490.533674][T20667] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 490.561592][T20685] tipc: Enabled bearer , priority 0 [ 490.604546][T20679] syzkaller0: entered promiscuous mode [ 490.622137][T20679] syzkaller0: entered allmulticast mode [ 490.632767][T19725] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.646708][T19725] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.658562][T19725] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.668271][T19725] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.700952][T20671] tipc: Resetting bearer [ 490.758893][T20671] tipc: Disabling bearer [ 490.788562][T19725] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.808581][T19725] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.825725][T19725] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.855563][T19725] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.872005][T20708] 8021q: VLANs not supported on wlan0 [ 491.570850][T20750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4265'. [ 491.615761][T19725] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.633633][T19725] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.642559][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 491.650665][ T5878] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 491.660603][T19725] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.672624][T19725] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.744482][T20755] Bluetooth: MGMT ver 1.23 [ 492.598756][T11008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 492.762271][T20785] __nla_validate_parse: 1 callbacks suppressed [ 492.762292][T20785] netlink: 84 bytes leftover after parsing attributes in process `syz.9.4276'. [ 493.379146][T20811] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4284'. [ 493.398004][ T5878] Bluetooth: hci5: command 0x0406 tx timeout [ 493.502426][T20813] pim6reg: entered allmulticast mode [ 493.897486][T20823] syzkaller0: entered promiscuous mode [ 493.904595][T20823] syzkaller0: entered allmulticast mode [ 493.911656][T20829] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4289'. [ 493.933754][T20827] netlink: 128 bytes leftover after parsing attributes in process `syz.8.4289'. [ 493.974500][T20827] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4289'. [ 494.198511][T20843] netlink: 348 bytes leftover after parsing attributes in process `syz.9.4293'. [ 495.812979][T11008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 496.140794][T20856] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4296'. [ 496.208664][T20856] gretap0: entered promiscuous mode [ 496.259928][T20856] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4296'. [ 496.286009][T20856] 0ªî{X¹¦: renamed from gretap0 [ 496.317727][T20856] 0ªî{X¹¦: left promiscuous mode [ 496.322827][T20856] 0ªî{X¹¦: entered allmulticast mode [ 496.374854][T20856] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 496.375987][T20863] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4300'. [ 496.601173][T20870] veth5: entered allmulticast mode [ 497.753317][T20931] tipc: Enabled bearer , priority 0 [ 497.784874][T20931] netlink: 'syz.1.4319': attribute type 1 has an invalid length. [ 497.807172][T20931] netlink: 'syz.1.4319': attribute type 4 has an invalid length. [ 497.825281][T20931] netlink: 9422 bytes leftover after parsing attributes in process `syz.1.4319'. [ 497.920821][T20947] IPVS: set_ctl: invalid protocol: 53 127.0.0.1:20000 [ 497.953152][T20949] netlink: 'syz.3.4323': attribute type 1 has an invalid length. [ 498.219543][T20931] syzkaller0: entered promiscuous mode [ 498.219907][T20959] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4323'. [ 498.235286][T20931] syzkaller0: entered allmulticast mode [ 498.236071][T20958] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4324'. [ 498.252048][T20931] tipc: Resetting bearer [ 498.263655][T20943] batadv0 speed is unknown, defaulting to 1000 [ 498.358855][T19725] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 498.373986][T20965] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4327'. [ 498.419520][T20950] 8021q: adding VLAN 0 to HW filter on device bond6 [ 498.435113][T20950] bond5: (slave bond6): making interface the new active one [ 498.448679][T20950] bond5: (slave bond6): Enslaving as an active interface with an up link [ 498.494929][T20956] bond5: (slave gretap0): Enslaving as a backup interface with an up link [ 498.516386][ T5183] Bluetooth: hci2: command 0x0401 tx timeout [ 498.554185][T20974] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4327'. [ 498.586097][ T12] tipc: Resetting bearer [ 498.663245][T20958] hsr_slave_1 (unregistering): left promiscuous mode [ 498.718477][T20978] netlink: 'syz.3.4329': attribute type 2 has an invalid length. [ 498.782397][T20979] netlink: 576 bytes leftover after parsing attributes in process `syz.3.4329'. [ 498.872305][T20929] tipc: Resetting bearer [ 499.479589][T21009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4336'. [ 501.339791][T20929] tipc: Disabling bearer [ 501.351879][T20989] tc_dump_action: action bad kind [ 501.404763][T21012] 8021q: VLANs not supported on xfrm0 [ 501.453003][T21019] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4338'. [ 501.564683][ T1109] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 501.727959][T21033] netlink: 3 bytes leftover after parsing attributes in process `syz.8.4342'. [ 501.739767][T21033] openvswitch: netlink: Actions may not be safe on all matching packets [ 502.331674][T21066] netlink: 'syz.1.4354': attribute type 1 has an invalid length. [ 502.342118][T21066] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4354'. [ 502.629896][T21075] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 502.642508][T21075] bond1: (slave vcan1): Error -95 calling set_mac_address [ 502.885100][T21083] netlink: 'syz.3.4360': attribute type 1 has an invalid length. [ 503.010585][T21087] veth5: entered promiscuous mode [ 503.023902][T21087] bond7: (slave veth5): Enslaving as a backup interface with a down link [ 503.033036][T21086] netlink: 'syz.8.4361': attribute type 29 has an invalid length. [ 503.056761][T21090] netlink: 'syz.8.4361': attribute type 29 has an invalid length. [ 503.110551][T21086] : renamed from veth0_vlan (while UP) [ 503.408600][T21106] __nla_validate_parse: 3 callbacks suppressed [ 503.408621][T21106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4366'. [ 503.635971][ T5878] Bluetooth: hci3: command 0x0406 tx timeout [ 503.669587][T21117] IPVS: length: 180 != 8 [ 504.116175][T19725] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 504.207048][T21142] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4374'. [ 505.161277][T21164] pimreg3: entered allmulticast mode [ 505.480203][T21181] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4387'. [ 505.493940][T21183] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4389'. [ 505.516995][T21187] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4388'. [ 505.592885][T21189] netlink: 'syz.1.4390': attribute type 1 has an invalid length. [ 505.630794][T21189] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4390'. [ 505.857269][T21201] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 505.887136][T21206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.888121][T21204] netlink: 'syz.6.4394': attribute type 10 has an invalid length. [ 506.010956][T21217] netlink: 'syz.1.4396': attribute type 1 has an invalid length. [ 506.020750][T21217] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4396'. [ 506.419063][T21232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 506.512850][T21237] netlink: 696 bytes leftover after parsing attributes in process `syz.3.4402'. [ 506.638361][T21242] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4402'. [ 506.683273][ T5877] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 506.887266][T21259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4407'. [ 506.911371][T21260] netlink: 'syz.8.4408': attribute type 3 has an invalid length. [ 507.317744][T19729] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 507.644325][T21303] netlink: 'syz.1.4419': attribute type 1 has an invalid length. [ 507.919977][T21313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.055841][T21322] netlink: 'syz.3.4428': attribute type 7 has an invalid length. [ 508.703803][T21355] __nla_validate_parse: 9 callbacks suppressed [ 508.703822][T21355] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4437'. [ 508.736062][T21356] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4437'. [ 508.805004][T21355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4437'. [ 508.828181][T21354] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 508.846223][T21361] openvswitch: netlink: IP tunnel dst address not specified [ 508.851581][T21349] netlink: 'syz.3.4437': attribute type 10 has an invalid length. [ 508.978865][T21366] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4441'. [ 509.035680][T21366] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4441'. [ 509.228620][T21381] netlink: 'syz.1.4448': attribute type 23 has an invalid length. [ 509.247012][ T1109] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 509.377754][T21384] sctp: [Deprecated]: syz.8.4449 (pid 21384) Use of int in max_burst socket option deprecated. [ 509.377754][T21384] Use struct sctp_assoc_value instead [ 509.587990][T21402] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4453'. [ 509.940052][T21413] caif0: entered allmulticast mode [ 510.077223][T21429] netlink: 'syz.1.4459': attribute type 8 has an invalid length. [ 510.105033][T21429] netlink: 'syz.1.4459': attribute type 8 has an invalid length. [ 510.439060][T21449] netlink: 'syz.9.4465': attribute type 2 has an invalid length. [ 510.452409][T21453] openvswitch: netlink: Unknown key attributes 2 [ 510.461897][T21454] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4469'. [ 510.463586][T21449] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.4465'. [ 510.483836][T21449] nbd: must specify at least one socket [ 510.491620][T21454] 8021q: VLANs not supported on gre0 [ 510.492189][T21451] netlink: 'syz.1.4468': attribute type 1 has an invalid length. [ 510.829075][T21470] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 510.861670][T21474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4476'. [ 510.872111][T21474] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4476'. [ 511.372692][T21494] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 511.744601][T21507] tipc: Enabled bearer , priority 0 [ 511.767298][T21507] syzkaller0: entered promiscuous mode [ 511.786528][T21507] syzkaller0: entered allmulticast mode [ 511.798870][T21513] netlink: 'syz.6.4490': attribute type 21 has an invalid length. [ 511.913731][T21507] tipc: Resetting bearer [ 511.996191][T21506] tipc: Resetting bearer [ 512.075200][T21506] tipc: Disabling bearer [ 512.159869][T21541] x_tables: ip_tables: udp match: only valid for protocol 17 [ 512.627781][T21564] netlink: 'syz.8.4503': attribute type 13 has an invalid length. [ 512.664323][T21568] netlink: 'syz.8.4503': attribute type 13 has an invalid length. [ 512.682134][T21563] delete_channel: no stack [ 513.077827][T19725] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 513.678882][T21616] netlink: 'syz.6.4524': attribute type 1 has an invalid length. [ 513.736959][T21623] __nla_validate_parse: 17 callbacks suppressed [ 513.736982][T21623] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4526'. [ 513.876012][ T5878] Bluetooth: hci6: command 0x0406 tx timeout [ 513.967222][T21632] netlink: 'syz.8.4531': attribute type 4 has an invalid length. [ 513.988260][T21625] tipc: Started in network mode [ 513.993277][T21625] tipc: Node identity 0e01f46a5ade, cluster identity 4711 [ 514.023051][T21625] tipc: Enabled bearer , priority 0 [ 514.053874][T21625] syzkaller0: entered promiscuous mode [ 514.067572][T21625] syzkaller0: entered allmulticast mode [ 514.088153][T21625] tipc: Resetting bearer [ 514.094354][T21641] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4532'. [ 514.147508][T21624] tipc: Resetting bearer [ 514.173261][T21649] nftables ruleset with unbound set [ 514.260780][T21624] tipc: Disabling bearer [ 514.508095][T21662] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4538'. [ 514.917809][T21679] tap0: tun_chr_ioctl cmd 2148553947 [ 515.013530][T19725] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 515.221153][T21682] vlan0: entered promiscuous mode [ 515.231689][T21682] bridge0: entered promiscuous mode [ 515.326958][T21698] netlink: 9 bytes leftover after parsing attributes in process `syz.8.4550'. [ 515.374060][T21707] netlink: 'syz.1.4552': attribute type 30 has an invalid length. [ 515.383071][T21708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4551'. [ 516.085283][T21730] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4555'. [ 516.110570][T21732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4557'. [ 516.211273][T21738] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4556'. [ 516.238926][T21732] team1: entered promiscuous mode [ 516.244293][T21732] team1: entered allmulticast mode [ 516.259177][T21733] netlink: 340 bytes leftover after parsing attributes in process `syz.8.4556'. [ 517.007315][T21773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4571'. [ 517.436945][T21779] macvlan6: entered promiscuous mode [ 517.453136][T21779] macvlan6: entered allmulticast mode [ 517.471471][T21779] bond4: entered promiscuous mode [ 517.483736][T21779] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 517.504503][T21779] bond4: left promiscuous mode [ 517.553600][T21791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 517.666939][T21794] netlink: 'syz.8.4575': attribute type 10 has an invalid length. [ 517.748093][T21794] team0: Device veth1_macvtap failed to register rx_handler [ 517.892213][T21803] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.999077][T21802] syzkaller0: entered promiscuous mode [ 518.004865][T21802] syzkaller0: entered allmulticast mode [ 518.110857][T21803] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.181347][T21802] tipc: New replicast peer: 255.255.255.255 [ 518.191985][T21802] tipc: Enabled bearer , priority 10 [ 518.216402][T21802] tipc: Enabled bearer , priority 0 [ 518.226348][T21802] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 518.256606][T21802] tipc: Resetting bearer [ 518.337002][T21799] tipc: Resetting bearer [ 518.378322][T21799] tipc: Disabling bearer [ 518.410061][T21803] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.521700][T21803] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.859214][T10313] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 518.902055][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.935794][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.055207][T19725] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.069968][T21857] __nla_validate_parse: 4 callbacks suppressed [ 519.069989][T21857] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4590'. [ 519.167894][T21861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4593'. [ 519.242644][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.347315][ T10] tipc: Node number set to 3180358916 [ 519.409984][T21873] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4597'. [ 519.446016][T21875] tipc: New replicast peer: 255.255.255.255 [ 519.457863][T21873] openvswitch: netlink: Flow actions attr not present in new flow. [ 519.478344][T21875] tipc: Enabled bearer , priority 10 [ 519.579517][T21887] netlink: 'syz.6.4599': attribute type 33 has an invalid length. [ 519.680131][T21887] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 520.052257][T21909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.123677][T21909] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4604'. [ 520.146440][T21909] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 520.163212][T21909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.595855][ T7170] tipc: Node number set to 1423963242 [ 520.757007][T19729] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 520.971051][T21934] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4612'. [ 521.022148][T21937] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4614'. [ 521.128032][T21940] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4615'. [ 521.299255][T21951] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4619'. [ 521.311366][T21951] netlink: 764 bytes leftover after parsing attributes in process `syz.8.4619'. [ 521.321919][T21951] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4619'. [ 521.720916][T21967] tipc: Enabled bearer , priority 0 [ 521.742352][T21967] syzkaller0: entered promiscuous mode [ 521.760869][T21967] syzkaller0: entered allmulticast mode [ 521.781452][ T5913] IPVS: starting estimator thread 0... [ 521.849785][T21975] tipc: Resetting bearer [ 521.864422][T21964] tipc: Resetting bearer [ 521.885954][T21974] IPVS: using max 23 ests per chain, 55200 per kthread [ 521.941881][T21964] tipc: Disabling bearer [ 522.043871][ T5877] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 522.212692][T21993] openvswitch: netlink: Missing key (keys=40, expected=80) [ 522.414600][T22002] veth0: entered promiscuous mode [ 522.429134][T22001] netlink: 'syz.8.4637': attribute type 11 has an invalid length. [ 522.521321][T22001] veth0: left promiscuous mode [ 522.654380][T22010] openvswitch: netlink: IP tunnel dst address not specified [ 523.341966][T22043] netlink: 'syz.3.4652': attribute type 5 has an invalid length. [ 523.487601][T22060] sctp: [Deprecated]: syz.6.4656 (pid 22060) Use of int in max_burst socket option. [ 523.487601][T22060] Use struct sctp_assoc_value instead [ 523.689086][T22071] tipc: Enabled bearer , priority 0 [ 523.712039][T22071] syzkaller0: entered promiscuous mode [ 523.723186][T22071] syzkaller0: entered allmulticast mode [ 523.743021][T22071] tipc: Resetting bearer [ 523.757659][T22070] tipc: Resetting bearer [ 523.826495][T22070] tipc: Disabling bearer [ 524.163125][T22096] __nla_validate_parse: 4 callbacks suppressed [ 524.163146][T22096] netlink: 112 bytes leftover after parsing attributes in process `syz.8.4668'. [ 524.399029][T22110] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 524.505954][T22116] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4676'. [ 524.553341][T22118] netlink: 252 bytes leftover after parsing attributes in process `syz.9.4675'. [ 524.601235][T10999] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 524.710953][T22125] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4678'. [ 524.779896][T22110] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.787938][T22110] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.932432][T22134] netlink: 'syz.3.4680': attribute type 10 has an invalid length. [ 524.947806][T22110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.965019][T22110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.279811][T19725] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.306783][T19725] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.358668][T22138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.389295][T19725] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.405911][T19725] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.662524][T22154] tipc: Enabled bearer , priority 0 [ 525.683534][T22154] syzkaller0: entered promiscuous mode [ 525.701914][T22154] syzkaller0: entered allmulticast mode [ 525.724537][T22154] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 525.804199][T22154] tipc: Resetting bearer [ 525.851626][T22166] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4690'. [ 525.864391][T22151] tipc: Resetting bearer [ 525.967862][T22151] tipc: Disabling bearer [ 526.307707][T22181] IPVS: Error connecting to the multicast addr [ 526.468687][T22183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4695'. [ 526.525925][T19729] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 526.760717][T22199] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4701'. [ 527.343754][T22226] netlink: 'syz.6.4709': attribute type 10 has an invalid length. [ 527.363687][T22226] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4709'. [ 527.424467][T19725] netdevsim netdevsim6 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.444144][T19725] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.477066][T19725] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.496061][T19725] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.656611][T22248] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4716'. [ 528.122149][T22269] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4721'. [ 528.267331][T22272] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 528.294584][T22272] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 528.624061][T22291] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 528.677269][T22291] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 529.106511][T22316] netlink: 'syz.9.4733': attribute type 28 has an invalid length. [ 529.114401][T22316] netlink: 'syz.9.4733': attribute type 3 has an invalid length. [ 529.286872][T22322] __nla_validate_parse: 1 callbacks suppressed [ 529.286893][T22322] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4738'. [ 529.315778][T22323] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4740'. [ 529.379910][T22323] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4740'. [ 529.440153][T22331] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4742'. [ 530.165841][T22358] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 530.357494][ T1109] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 530.962841][T22387] netlink: 'syz.6.4754': attribute type 1 has an invalid length. [ 530.983021][T22387] netlink: 184 bytes leftover after parsing attributes in process `syz.6.4754'. [ 531.015860][T22387] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4754'. [ 531.094297][T22389] netlink: 100 bytes leftover after parsing attributes in process `syz.8.4755'. [ 531.237339][T22391] !€ÿ: renamed from bond_slave_0 [ 531.304146][T22399] netlink: 'syz.6.4759': attribute type 21 has an invalid length. [ 531.637149][T10313] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 532.098223][T22437] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4771'. [ 532.100876][T22438] netlink: 'syz.6.4771': attribute type 10 has an invalid length. [ 532.189721][T22445] netlink: 'syz.6.4772': attribute type 32 has an invalid length. [ 532.200884][T22445] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4772'. [ 532.210700][T22445] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 532.436946][T22455] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4775'. [ 533.556019][ T31] INFO: task syz.2.3189:16961 blocked for more than 143 seconds. [ 533.570518][ T31] Not tainted syzkaller #0 [ 533.605687][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 533.642182][ T31] task:syz.2.3189 state:D stack:27272 pid:16961 tgid:16958 ppid:5868 task_flags:0x400040 flags:0x00004004 [ 533.669601][ T31] Call Trace: [ 533.673039][ T31] [ 533.686306][ T31] __schedule+0x1798/0x4cc0 [ 533.696025][ T31] ? __lock_acquire+0xab9/0xd20 [ 533.708029][ T31] ? __lock_acquire+0xab9/0xd20 [ 533.718570][ T31] ? __pfx___schedule+0x10/0x10 [ 533.729568][ T31] ? schedule+0x91/0x360 [ 533.740448][ T31] schedule+0x165/0x360 [ 533.749275][ T31] schedule_preempt_disabled+0x13/0x30 [ 533.760934][ T31] __mutex_lock+0x7e6/0x1350 [ 533.770494][ T31] ? __mutex_lock+0x5bb/0x1350 [ 533.775431][ T31] ? nfsd_nl_version_get_doit+0x16e/0xb60 [ 533.789080][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 533.803498][ T31] ? __nlmsg_put+0xef/0x1b0 [ 533.812136][ T31] ? genlmsg_put+0x137/0x2e0 [ 533.822649][ T31] nfsd_nl_version_get_doit+0x16e/0xb60 [ 533.828610][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 533.834157][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 533.852321][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 533.861657][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 533.875723][ T31] genl_rcv_msg+0x60e/0x790 [ 533.883562][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 533.897088][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 533.912398][ T31] ? __asan_memcpy+0x40/0x70 [ 533.919757][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 533.925187][ T31] netlink_rcv_skb+0x208/0x470 [ 533.939454][ T31] ? __lock_acquire+0xab9/0xd20 [ 533.944439][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 533.950000][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 533.955414][ T31] ? down_read+0x1ad/0x2e0 [ 533.961145][ T31] genl_rcv+0x28/0x40 [ 533.965184][ T31] netlink_unicast+0x82f/0x9e0 [ 533.970220][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 533.975659][ T31] ? netlink_sendmsg+0x642/0xb30 [ 533.980690][ T31] ? skb_put+0x11b/0x210 [ 533.984964][ T31] netlink_sendmsg+0x805/0xb30 [ 533.990067][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.995655][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 534.000679][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 534.006461][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.011791][ T31] __sock_sendmsg+0x219/0x270 [ 534.019735][ T31] ____sys_sendmsg+0x505/0x830 [ 534.024559][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 534.034980][ T31] ? import_iovec+0x74/0xa0 [ 534.055665][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 534.060518][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 534.077073][ T31] ? __fget_files+0x2a/0x420 [ 534.081738][ T31] ? __fget_files+0x3a0/0x420 [ 534.086773][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 534.091752][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 534.097513][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 534.102930][ T31] ? do_syscall_64+0xbe/0x3b0 [ 534.107935][ T31] do_syscall_64+0xfa/0x3b0 [ 534.112458][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.118218][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.124316][ T31] ? clear_bhb_loop+0x60/0xb0 [ 534.129695][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.136024][ T31] RIP: 0033:0x7f9d1918ebe9 [ 534.140505][ T31] RSP: 002b:00007f9d1a0cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.150466][ T31] RAX: ffffffffffffffda RBX: 00007f9d193c6090 RCX: 00007f9d1918ebe9 [ 534.159564][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 534.167923][ T31] RBP: 00007f9d19211e19 R08: 0000000000000000 R09: 0000000000000000 [ 534.176432][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.184437][ T31] R13: 00007f9d193c6128 R14: 00007f9d193c6090 R15: 00007ffc2878a828 [ 534.192652][ T31] [ 534.198284][ T31] [ 534.198284][ T31] Showing all locks held in the system: [ 534.206584][ T31] 1 lock held by khungtaskd/31: [ 534.211460][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 534.228509][ T31] 3 locks held by kworker/u8:2/36: [ 534.233764][ T31] #0: ffff88801a51a948 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 534.247668][ T31] #1: ffffc90000ac7bc0 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 534.261595][ T31] #2: ffff888020b78700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 534.274257][ T31] 2 locks held by getty/5628: [ 534.279662][ T31] #0: ffff8880337ec0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 534.289820][ T31] #1: ffffc900036c62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 534.301284][ T31] 4 locks held by kworker/u8:8/8048: [ 534.306773][ T31] #0: ffff88801b2fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 534.318133][ T31] #1: ffffc9001b6a7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 534.328849][ T31] #2: ffffffff8f52bbf0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 534.338409][ T31] #3: ffffffff8f538a88 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0x79b/0xea0 [ 534.349568][ T31] 3 locks held by kworker/u8:9/10313: [ 534.355108][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 534.365292][ T31] #1: ffff8880b8624008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 534.374454][ T31] #2: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: batadv_nc_worker+0xd2/0x610 [ 534.385150][ T31] 2 locks held by syz.0.2897/15924: [ 534.390556][ T31] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.399399][ T31] #1: ffffffff8e418608 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 534.409930][ T31] 2 locks held by syz.2.3189/16961: [ 534.415232][ T31] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.423571][ T31] #1: ffffffff8e418608 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x16e/0xb60 [ 534.433769][ T31] 2 locks held by syz.4.3362/17580: [ 534.442202][ T31] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.456746][ T31] #1: ffffffff8e418608 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 534.467260][ T31] 2 locks held by syz.5.3769/18976: [ 534.472543][ T31] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.480873][ T31] #1: ffffffff8e418608 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 534.493601][ T31] 2 locks held by syz.7.3824/19140: [ 534.498917][ T31] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.507734][ T31] #1: ffffffff8e418608 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 534.519711][ T31] 3 locks held by kworker/u8:28/19729: [ 534.525207][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 534.537267][ T31] #1: ffffc9000e27fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 534.548740][ T31] #2: ffffffff8f538a88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 534.558982][ T31] 2 locks held by syz.3.4695/22183: [ 534.564203][ T31] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.572536][ T31] #1: ffffffff8e418608 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 534.583069][ T31] 2 locks held by syz.3.4695/22190: [ 534.588727][ T31] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.599166][ T31] #1: ffffffff8e418608 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 534.609550][ T31] 2 locks held by syz.6.4774/22452: [ 534.614788][ T31] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.623820][ T31] #1: ffffffff8e418608 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x16e/0xb60 [ 534.634021][ T31] 2 locks held by syz.8.4780/22473: [ 534.639356][ T31] #0: ffffffff8f53bd08 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0x9c/0xc90 [ 534.651050][ T31] #1: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 534.664015][ T31] 2 locks held by syz.1.4781/22486: [ 534.669860][ T31] #0: ffffffff8f538a88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 534.681394][ T31] #1: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 534.693195][ T31] [ 534.698677][ T31] ============================================= [ 534.698677][ T31] [ 534.715202][ T31] NMI backtrace for cpu 0 [ 534.715222][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 534.715244][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 534.715255][ T31] Call Trace: [ 534.715263][ T31] [ 534.715272][ T31] dump_stack_lvl+0x189/0x250 [ 534.715304][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 534.715327][ T31] ? __pfx__printk+0x10/0x10 [ 534.715378][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 534.715405][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 534.715433][ T31] ? __pfx__printk+0x10/0x10 [ 534.715467][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 534.715496][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 534.715522][ T31] watchdog+0xf93/0xfe0 [ 534.715553][ T31] ? watchdog+0x1de/0xfe0 [ 534.715586][ T31] kthread+0x70e/0x8a0 [ 534.715613][ T31] ? __pfx_watchdog+0x10/0x10 [ 534.715638][ T31] ? __pfx_kthread+0x10/0x10 [ 534.715662][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 534.715687][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.715711][ T31] ? __pfx_kthread+0x10/0x10 [ 534.715736][ T31] ret_from_fork+0x3f9/0x770 [ 534.715760][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 534.715787][ T31] ? __switch_to_asm+0x39/0x70 [ 534.715808][ T31] ? __switch_to_asm+0x33/0x70 [ 534.715828][ T31] ? __pfx_kthread+0x10/0x10 [ 534.715851][ T31] ret_from_fork_asm+0x1a/0x30 [ 534.715890][ T31] [ 534.857202][ T31] Sending NMI from CPU 0 to CPUs 1: [ 534.862884][ C1] NMI backtrace for cpu 1 [ 534.862902][ C1] CPU: 1 UID: 0 PID: 19725 Comm: kworker/u8:25 Not tainted syzkaller #0 PREEMPT(full) [ 534.862920][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 534.862930][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 534.862957][ C1] RIP: 0010:__kmalloc_noprof+0x421/0x4f0 [ 534.862979][ C1] Code: 80 4c 24 8e 4c 89 f6 e8 9d 25 e7 02 e9 dc fe ff ff be 00 10 00 00 48 c7 c7 20 50 24 8e 4c 89 f2 e8 84 26 e7 02 e9 6c ff ff ff 0f 1e fa 83 3d 64 3f 0d 0c 00 0f 8f b5 fc ff ff 4c 89 e7 48 8b [ 534.862992][ C1] RSP: 0018:ffffc9000e2ff448 EFLAGS: 00000286 [ 534.863005][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 534.863016][ C1] RDX: 0000000000000000 RSI: 0000000000000400 RDI: ffffffff8e2594e0 [ 534.863026][ C1] RBP: 0000000000000920 R08: ffffc9000e2ff61f R09: 0000000000000000 [ 534.863036][ C1] R10: ffffc9000e2ff5e0 R11: fffff52001c5fec4 R12: ffff88801a441dc0 [ 534.863046][ C1] R13: 1ffff92001c5fec4 R14: 0000000000000000 R15: 00000000000003b8 [ 534.863056][ C1] FS: 0000000000000000(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 534.863069][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 534.863079][ C1] CR2: 000055556bd8d808 CR3: 000000007791a000 CR4: 00000000003526f0 [ 534.863095][ C1] Call Trace: [ 534.863101][ C1] [ 534.863108][ C1] ? ieee802_11_parse_elems_full+0x152/0x2ab0 [ 534.863133][ C1] ieee802_11_parse_elems_full+0x152/0x2ab0 [ 534.863154][ C1] ? __lock_acquire+0xab9/0xd20 [ 534.863179][ C1] ? finish_task_switch+0x18b/0x950 [ 534.863203][ C1] ? finish_task_switch+0x266/0x950 [ 534.863220][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.863244][ C1] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 534.863264][ C1] ? trace_sched_exit_tp+0x36/0x110 [ 534.863286][ C1] ieee80211_ibss_rx_queued_mgmt+0x462/0x2ae0 [ 534.863317][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 534.863339][ C1] ? __lock_acquire+0xab9/0xd20 [ 534.863385][ C1] ieee80211_iface_work+0x85f/0x12d0 [ 534.863410][ C1] cfg80211_wiphy_work+0x2bb/0x470 [ 534.863430][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 534.863446][ C1] process_scheduled_works+0xae1/0x17b0 [ 534.863474][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 534.863498][ C1] worker_thread+0x8a0/0xda0 [ 534.863525][ C1] kthread+0x70e/0x8a0 [ 534.863544][ C1] ? __pfx_worker_thread+0x10/0x10 [ 534.863558][ C1] ? __pfx_kthread+0x10/0x10 [ 534.863577][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 534.863595][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.863613][ C1] ? __pfx_kthread+0x10/0x10 [ 534.863630][ C1] ret_from_fork+0x3f9/0x770 [ 534.863647][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 534.863665][ C1] ? __switch_to_asm+0x39/0x70 [ 534.863683][ C1] ? __switch_to_asm+0x33/0x70 [ 534.863700][ C1] ? __pfx_kthread+0x10/0x10 [ 534.863717][ C1] ret_from_fork_asm+0x1a/0x30 [ 534.863743][ C1] [ 535.156365][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 535.163276][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 535.172410][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 535.182491][ T31] Call Trace: [ 535.185798][ T31] [ 535.188855][ T31] dump_stack_lvl+0x99/0x250 [ 535.193707][ T31] ? __asan_memcpy+0x40/0x70 [ 535.198316][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 535.203520][ T31] ? __pfx__printk+0x10/0x10 [ 535.208115][ T31] vpanic+0x281/0x750 [ 535.212524][ T31] ? __pfx_vpanic+0x10/0x10 [ 535.217035][ T31] ? preempt_schedule+0xae/0xc0 [ 535.221939][ T31] ? preempt_schedule_common+0x83/0xd0 [ 535.227434][ T31] panic+0xb9/0xc0 [ 535.231183][ T31] ? __pfx_panic+0x10/0x10 [ 535.235666][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 535.241114][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 535.247290][ T31] watchdog+0xfd2/0xfe0 [ 535.251452][ T31] ? watchdog+0x1de/0xfe0 [ 535.255780][ T31] kthread+0x70e/0x8a0 [ 535.259847][ T31] ? __pfx_watchdog+0x10/0x10 [ 535.264521][ T31] ? __pfx_kthread+0x10/0x10 [ 535.269209][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 535.274453][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 535.279684][ T31] ? __pfx_kthread+0x10/0x10 [ 535.284331][ T31] ret_from_fork+0x3f9/0x770 [ 535.288933][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 535.294047][ T31] ? __switch_to_asm+0x39/0x70 [ 535.298814][ T31] ? __switch_to_asm+0x33/0x70 [ 535.303591][ T31] ? __pfx_kthread+0x10/0x10 [ 535.308195][ T31] ret_from_fork_asm+0x1a/0x30 [ 535.312976][ T31] [ 535.316328][ T31] Kernel Offset: disabled [ 535.320649][ T31] Rebooting in 86400 seconds..