last executing test programs: 4.652660053s ago: executing program 2 (id=1303): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000000e0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x30, 0x40, 0x1, 0xfffffffe, 0x25dfdbfb, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x17, 0x0, 0x1, [@nested={0x4, 0x1f}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004850) sendmsg$NFT_BATCH(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0xfffffedb, &(0x7f0000000000)="0101000871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x70bd24, 0xfffffffc, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x804}, 0x20000010) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f00000004c0)="b0", 0x1, 0x4000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x1000c041) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="24040000", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fddbdf250200000008000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff01000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008", @ANYRES32, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100008040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000900"], 0x424}, 0x1, 0x0, 0x0, 0x408c0}, 0x40001) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 3.747243158s ago: executing program 1 (id=1308): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100fdffffb700010000e0000002000000000000000000000000ffffffff000000000000000000006f000000000000000020020000003c000000", @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d36c00000000000000000000000000ffffac14141800000000000000000900000000000000060000000000000000000100000000001c25080000000000020000000000000083000000000000000000000000000000fcffffffffffffffff7f0000000000000700000000000000ff0100000000000002000000fcffffff000000002cbd700000000000020000fd2000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x20000810) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x41}, 0x4d3, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x70bd25, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x3}, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0xfffffffffffffffa, 0x0, 0x2dd}, 0x0, 0x6e6bc0}, [@tmpl={0x184, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x0, 0x2}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3, 0x0, 0x7ff}, {{@in=@dev={0xac, 0x14, 0x14, 0x34}, 0x0, 0x3c}, 0x2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x2, @in6=@private2, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0xa, @in=@loopback, 0x0, 0x4, 0x0, 0x0, 0x10000, 0x0, 0xfffffffe}]}]}, 0x23c}}, 0x0) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) write(r2, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@allocspi={0x144, 0x16, 0x1, 0x70bd2d, 0x25dfdbff, {{{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x8}, {@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x6c}, @in=@broadcast, {0x0, 0x0, 0x1, 0x0, 0x88c}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2}}, 0x0, 0x7fff}, [@proto={0x5, 0x1b}, @tmpl={0x44, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x32}, 0x2, @in6=@mcast1, 0x3505, 0x4, 0x1, 0x9, 0x100, 0x8000, 0x2}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x3) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r7, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r8, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x2, 0x42c, 0x1, 0x7, 0x6, 0x6, 0x9, 0x4, 0x9]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000740)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000180)="27031c00160514000200", 0xa}, {&(0x7f0000000100)="7d3ed2ea1f2f210c0784b2ce65c9e34b1100301a03df46a4853ed1b3", 0x1c}], 0x2}, 0x40080c8) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x48, 0xfb, 0x0, 0xfdeffffe}, {0x6, 0x60, 0x10, 0x8}]}) ioctl$PPPIOCSDEBUG(r5, 0x40047440, &(0x7f0000000240)=0x5) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r11, r12, 0x5, 0x0, @void}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 3.668146335s ago: executing program 2 (id=1310): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) listen(r5, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x5, @multicast}, 0x10) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000080)={r4, 0x1, 0x6, @multicast}, 0x10) bind$nfc_llcp(r0, &(0x7f0000000880)={0x27, r2, 0x0, 0x6, 0x0, 0x2, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60) close(r1) close(0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r8, 0xc0046686, &(0x7f00000001c0)={0x2, 0x42, "b0d8535e5b2ae66eaa09f98b20e4ea7fa0dc93b666f199b4cad93a74a0a91857156c229961a264cf754565f03fcaea190694046921ac34fa9484c1f8f23f8e7139ac"}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r9, 0x0, 0x8000f28, 0x6) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYBLOB="04e0e9962b5d321ae838da2df51ee9643d7df960ddee1e7945bbb5d653ee4908421ea93b7d9ab17f74fb081dde8953c51817ddc2bd14b12b13b86f89466a7c5106d2430cec5e7fbfad3d2cadedbce8819233699eda85f4e053a868bf901145775e0e8edd6f8546db31cf527d4050ef769c6b08d4990765913e42c08643b7e5edc8897b5d134a50c85c2ab976ed47122b4b002334ab6d53103312018102cd2b", @ANYBLOB="000000000000000004002400140012"], 0x38}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r11, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000003c0)=""/86, 0x56}, {&(0x7f0000001880)=""/4112, 0x1010}, {&(0x7f0000000000)=""/100, 0x64}, {&(0x7f00000005c0)=""/82, 0x52}, {&(0x7f0000000440)=""/62, 0x3e}, {&(0x7f0000000640)=""/118, 0x76}, {&(0x7f0000000980)=""/134, 0x86}, {&(0x7f00000028c0)=""/4096, 0x1000}], 0x8}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}], 0x4, 0x2030, 0x0) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="40000000120003042dbd7000fbdbdf2500000400", @ANYRES32=0x0, @ANYBLOB="40600000800000000a00010000000000000000001400030062726964676530000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x2008004) 3.367247751s ago: executing program 1 (id=1312): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000228bd7000ffdbdf25070000000c00"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x804) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0xa}, {0x7}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r9, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f00000003c0)=ANY=[@ANYBLOB="800000000802110000010802110000005050505050500063c8b5e1410c98403bfda2112a0b000000000000000000640001000012bcb2fc61dca02864d19884114976094ba46f010076065c0504000600"], 0x42) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 3.261179307s ago: executing program 4 (id=1313): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000020c0)={0x14, 0x26, 0x301, 0x270bd1d, 0x25dfdbf7, {0x15}}, 0x14}, 0x1, 0x0, 0x0, 0x88c4}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x1}, 0x1c) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xaf4, 0x0) unshare(0x22020400) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) shutdown(r1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="020000"], 0x50) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f0000005f80)={0x533, 0x9, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000000)="fc00", 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) splice(r4, 0x0, r6, 0x0, 0x1100000000f336, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{r3}, 0x0, 0x0}, 0x20) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005f40), r9) sendmsg$IEEE802154_SET_MACPARAMS(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="bf582bbd7000fcdbdf252300000008000200", @ANYRES32=0x0, @ANYBLOB="0500210007000000050026008e0000000a0001007770616e310000000500250050000000050028000100bfc1d96fcfb43b6dc600003944568766f46b4cd35bdbb8a6a2f742a2047c00b44fffc017dc0af4f8697236ff51bb9c8fe0b7bb9990e0ff6bad51641ef0991c93f82f70b9019d92b314fbbfb078e8fd432c5740af4af32df5744bcaaceee4136b11f7cdc765f7fc2f1674ee992daef3fb3750649587bbb1283985fd303055d0aefa449e0c4bae83a8b8bae462cdd6683a"], 0x48}, 0x1, 0x0, 0x0, 0x200008c4}, 0x24008050) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076003008b050000008650", 0x0, 0xfe8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r11) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r7, &(0x7f00000000c0)={0x40000000}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000005c0)={0x78, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x14) 3.041801458s ago: executing program 4 (id=1314): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0xa, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0xe4, 0x0, 0x0, 0x8, 0x0, 0x5c1, 0x8000, 0x0, 0x0, 0x7], [0xec52, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000000d08000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0c0009"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) r10 = socket(0xa, 0x2, 0x0) sendmmsg$inet(r10, &(0x7f0000000780)=[{{&(0x7f0000000440)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x804) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r9, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 2.546573026s ago: executing program 2 (id=1320): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000000e0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x30, 0x40, 0x1, 0xfffffffe, 0x25dfdbfb, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x17, 0x0, 0x1, [@nested={0x4, 0x1f}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004850) sendmsg$NFT_BATCH(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0xfffffedb, &(0x7f0000000000)="0101000871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x70bd24, 0xfffffffc, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x804}, 0x20000010) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f00000004c0)="b0", 0x1, 0x4000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x1000c041) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="24040000", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fddbdf250200000008000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff01000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008", @ANYRES32, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100008040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000900"], 0x424}, 0x1, 0x0, 0x0, 0x408c0}, 0x40001) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 2.511953756s ago: executing program 1 (id=1321): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xa, 0x10, 0x3, 0x2, 0x0, 0x70bd2b, 0x25dfdbfd}, 0x10}}, 0xc040) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x36, 0x0, &(0x7f00000006c0)="e0270300040000000000762f86ddf931e86128db19ae1f5ffbc1e4bfea89fa4fc749e5d7f4130ab5e3064fff5f80cc30e7f50db99113", 0x0, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x4, 0x3, 0xcbf, 0x4e, @private0={0xfc, 0x0, '\x00', 0xfc}, @ipv4={'\x00', '\xff\xff', @local}, 0x8000, 0x8, 0x101, 0x7}}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', r4, 0x29, 0x84, 0x3, 0x4038a0b, 0x11, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a3100000000050005000200000005000400000000000c00078008001240"], 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r8, 0x6, 0x6, &(0x7f0000000300)=0xffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, 0x0, 0x0) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r10, &(0x7f0000001d80), 0x0, 0x48000) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, 0x0) sendto$inet(r8, &(0x7f00000007c0), 0x0, 0xe044, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 2.226583964s ago: executing program 0 (id=1324): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r2, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x42, 0xffffffff}}}, 0x10) bind$tipc(r3, &(0x7f0000000440)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x1}}, 0x10) bind$tipc(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x3a, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x0, 0x0, &(0x7f0000000540), 0x8, 0x62, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bind$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x15, r5, 0x1, 0xaf, 0x6, @multicast}, 0x14) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000002900)=r4, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0xfffffdb9, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r3], 0xe8}}, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 2.192394478s ago: executing program 3 (id=1325): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xb, 0x0, 0x0, 0x0, @binary="56ccabd869c203"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f00000000c0)=0x400) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r8, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) getpid() r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xfffffffd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x400c941) sendmsg$NL80211_CMD_SET_WIPHY(r3, 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2.11456862s ago: executing program 4 (id=1326): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x71c03}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x4880) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x1a}]}}}]}, 0x44}}, 0x0) sendto$packet(r1, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079b008000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000bf03000000000000850000006b000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001e80)={{0x1, 0xffffffffffffffff}, &(0x7f0000001e00), &(0x7f0000001e40)}, 0x20) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000001ec0)={r3}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001fc0)={0x6, 0x9, &(0x7f00000001c0)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xdc}}, @call={0x85, 0x0, 0x0, 0x73}], &(0x7f0000000540)='GPL\x00', 0x800, 0x1000, &(0x7f0000000d80)=""/4096, 0x41000, 0x44, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001d80)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001dc0)={0x4, 0xb, 0xd841, 0x2}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001f00)=[r9, r8, r10, r11], &(0x7f0000001f40)=[{0x4, 0x3, 0x4, 0x4}, {0x0, 0x2, 0x6, 0xa}, {0x1, 0x3, 0x7, 0x5}, {0x5, 0x5, 0x6, 0x2}, {0x0, 0x4, 0x3, 0x3}, {0x4, 0x4, 0x8, 0xc}], 0x10, 0x63e}, 0x94) setsockopt$inet6_MCAST_MSFILTER(r11, 0x29, 0x30, &(0x7f00000008c0)={0x1, {{0xa, 0x4e24, 0x1, @local, 0x3}}, 0x1, 0x7, [{{0xa, 0x4e22, 0xacfd, @loopback, 0x7}}, {{0xa, 0x4e23, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffa}}, {{0xa, 0x4e24, 0x7, @loopback, 0x101}}, {{0xa, 0x4e24, 0xb1, @remote, 0x1}}, {{0xa, 0x4e22, 0x3, @empty}}, {{0xa, 0x4e24, 0x3, @local, 0x7}}, {{0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}]}, 0x410) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) gettid() r13 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r13, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0xc4, r5, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x6}}}}, [@NL80211_ATTR_FTM_RESPONDER={0xa4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x9a, 0x2, "99320587e2bd6450f9de8371e3707aa7e3410a5710773a75d6d6213e3eb1ed633266279ec05def386543df3a10be8481c0e6e1f138c5a3a84002b048b7e0777033a451f1165dc24fddc7b1c3369ca82dab8926ad449f428102552570e76c4c016a16373cfb4f15aec1fc00d146a3b3e239bfe09be222a615ae66f19c426feaf04d0f36683b05f7bff722beabb240e651906573f9e016"}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r12, @ANYBLOB="089805000750050008001300", @ANYRES64=r14, @ANYBLOB="08002c00050000001400030076"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000006c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000002400)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002080)={0x300, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r12}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffff340}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x300}}, 0x80) 1.942942958s ago: executing program 3 (id=1327): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.68826055s ago: executing program 0 (id=1328): r0 = socket(0x2a, 0x2, 0x5) sendto(r0, 0x0, 0xffffff9b, 0x0, &(0x7f0000000040)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @rand_addr=0x64010102}}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000003b0001031dbd7017fadbdf2502"], 0x14}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={r2, 0x0, 0x0}, 0x10) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$sock_int(r3, 0x1, 0x13cac0546f95b70a, &(0x7f0000000100)=0xa, 0x4) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000400)="02", 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 1.606031744s ago: executing program 4 (id=1329): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt(r0, 0x44, 0x7fffffff, &(0x7f00000005c0)="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", 0x1000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{}, "e87d855b0b6de5ad", "1ed94607f3c637a4d3559dada07c9bc9", "387972be", "a97f7a54ab9fd929"}, 0x28) socket$kcm(0x29, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x90000005}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) epoll_pwait(r4, &(0x7f0000000580)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) epoll_pwait(r4, &(0x7f00000000c0)=[{}], 0x1, 0x101, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0xa}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x4}]}}]}, 0x4c}}, 0x0) close(r2) 1.560833257s ago: executing program 2 (id=1330): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x290, 0x20a, 0x278, 0x290, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0xffffffff, 0xffffff00, 0x0, 0xffffff00], [0x0, 0xffffff00], 'ip_vti0\x00', 'batadv0\x00', {0xff}, {}, 0x6, 0xfe, 0x1}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0xff0}, {[], [], 0x0, 0xc0, 0x2, 0xb}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x27}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x2}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0xffffff00, 0xffff00], [], 'veth1_to_hsr\x00', 'pim6reg1\x00', {}, {}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xa3, 0x7, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x701, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x10044880) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) r8 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_ENABLE_SE(r2, &(0x7f0000001780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x44, r7, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xa0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20080014}, 0x8010) r12 = socket$inet6(0xa, 0x1, 0x8010000000000084) r13 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in6=@mcast2, 0x0, 0x1, 0x1000, 0xfffe, 0xa}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0xb5, 0x1}, 0x800, 0x0, 0x1, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x2, @in=@multicast1, 0x0, 0x2, 0x3}}, 0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in=@remote, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3ff}, 0x0, 0x20000000}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x80000, 0x9, 0x3}}, 0xe8) close(r13) bind$inet6(r12, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0xfff9, 0x20000000, 0x5, 0x50, 0x1000, 0x1}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x2, @empty, 0x9d7}}, 0x6, 0x0, 0x0, 0xb3, 0xb3550aa4ba878396, 0x0, 0x1}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x17, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xd4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 1.55550928s ago: executing program 1 (id=1331): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x8) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0xa, 0x80016, 0xb3, 0x7f}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x11, &(0x7f00000001c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @local, @void, {@mpls_mc={0x8848, {[], @llc={@llc={0xd4, 0x0, 'N'}}}}}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x4010) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @rand_addr=0x64010101, @multicast1}, "040022eb00000000"}}}}}, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b39ff, 0x0) 1.534609922s ago: executing program 0 (id=1332): socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0800e5076dbf"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xda90) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000200)=@req3={0x10000, 0x1, 0x100, 0x100, 0x6, 0x0, 0x3}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) socket(0x11, 0x800000003, 0x9) bind$packet(r6, &(0x7f0000000d00)={0x11, 0x5, r5, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r7 = epoll_create1(0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @rand_addr=0x64010101}, 0x10, 0x0}, 0x300080c1) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f00000000c0)={0x2000}) accept4(r1, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, '\x00', {}, 0x9e8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x40004}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x0, 0x9}, @generic={0x66, 0x0, 0x0, 0x0, 0xf1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x1001}, @exit, @printk={@x, {0x3, 0x3, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0xa}, 0x94) r9 = socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000) sendmsg$kcm(r9, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x40040) write$cgroup_pressure(r9, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000076b96834df4b8a1d27996857551c5f2b00"/44], 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000181100003f27ec821a9d7148827df68a9c1b8c0ba956b002f7d3fc75b35b42d4c696f2013f3aa95e33759ee635aac4f3e719225604d1b3eebb7556a361838bdd90f87a36dad2f80382586b", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffda1) 1.486409387s ago: executing program 3 (id=1333): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x290, 0x20a, 0x278, 0x290, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0xffffffff, 0xffffff00, 0x0, 0xffffff00], [0x0, 0xffffff00], 'ip_vti0\x00', 'batadv0\x00', {0xff}, {}, 0x6, 0xfe, 0x1}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0xff0}, {[], [], 0x0, 0xc0, 0x2, 0xb}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x27}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x2}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0xffffff00, 0xffff00], [], 'veth1_to_hsr\x00', 'pim6reg1\x00', {}, {}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xa3, 0x7, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x701, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x10044880) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) r7 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000001780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x44, r6, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xa0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20080014}, 0x8010) r11 = socket$inet6(0xa, 0x1, 0x8010000000000084) r12 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in6=@mcast2, 0x0, 0x1, 0x1000, 0xfffe, 0xa}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0xb5, 0x1}, 0x800, 0x0, 0x1, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x2, @in=@multicast1, 0x0, 0x2, 0x3}}, 0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in=@remote, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3ff}, 0x0, 0x20000000}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x80000, 0x9, 0x3}}, 0xe8) close(r12) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0xfff9, 0x20000000, 0x5, 0x50, 0x1000, 0x1}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x2, @empty, 0x9d7}}, 0x6, 0x0, 0x0, 0xb3, 0xb3550aa4ba878396, 0x0, 0x1}, 0x9c) shutdown(r11, 0x1) 1.240508989s ago: executing program 3 (id=1334): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r2, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x42, 0xffffffff}}}, 0x10) bind$tipc(r3, &(0x7f0000000440)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x1}}, 0x10) bind$tipc(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x3a, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x0, 0x0, &(0x7f0000000540), 0x8, 0x62, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bind$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x15, r5, 0x1, 0xaf, 0x6, @multicast}, 0x14) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000002900)=r4, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0xfffffdb9, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r3], 0xe8}}, 0x0) close(r8) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.207222519s ago: executing program 4 (id=1335): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000000e0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x30, 0x40, 0x1, 0xfffffffe, 0x25dfdbfb, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x17, 0x0, 0x1, [@nested={0x4, 0x1f}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004850) sendmsg$NFT_BATCH(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0xfffffedb, &(0x7f0000000000)="0101000871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x70bd24, 0xfffffffc, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x804}, 0x20000010) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f00000004c0)="b0", 0x1, 0x4000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x1000c041) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="24040000", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fddbdf250200000008000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff01000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008", @ANYRES32, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100008040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000900"], 0x424}, 0x1, 0x0, 0x0, 0x408c0}, 0x40001) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 1.019082518s ago: executing program 1 (id=1336): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000000)=0x8887, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0xfa83eb8507d66ff}, 0xc) bind$netlink(r3, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0xfa83eb850bd66ef}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x45, 0x0, 0x1, 0x9}, {0x35, 0x0, 0x0, 0xffffffff}, {0x6, 0xff}]}, 0x10) r5 = socket$qrtr(0x2a, 0x2, 0x0) getpeername$qrtr(r5, &(0x7f00000004c0), &(0x7f0000000500)=0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000440)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@getqdisc={0x4c, 0x26, 0x0, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x8, 0xffff}, {0xfff1, 0xffe0}, {0xa, 0x9}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40004000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0027"], 0xb4}}, 0x8044) r9 = accept4(r7, 0x0, 0x0, 0x80800) sendmmsg$alg(r9, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) recvmmsg(r9, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1}, 0x6}], 0x1, 0x10100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 991.490375ms ago: executing program 0 (id=1337): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@broadcast, @multicast2, 0x0}, &(0x7f0000000200)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f00)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0xff, 0x0, 0x0, 0x2], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd24, 0x25dfdffd, {0x2, 0x80, 0x20, 0x0, 0xfc, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8, 0x3, r12}, @RTA_DST={0x8, 0x1, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0xea5bc50b6199d77e) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001000010400000000fedbdf2500000000", @ANYRES32=r15, @ANYBLOB="00030000800000000a0001"], 0x2c}}, 0x884) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000540)={0x340, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}]}}, {{0x8, 0x1, r5}, {0x26c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}]}}]}, 0x340}, 0x1, 0x0, 0x0, 0x20004080}, 0x4048014) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r16 = socket$netlink(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r16, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="90000000", @ANYRES16=r17, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r18, @ANYBLOB="7400028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000f1000500030003000000080004"], 0x90}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) r19 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r19, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4d, 0x8f, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, [0x0, 0x100004, 0x4, 0x0, 0x0, 0x0, 0x533e, 0x4]}}) 768.557414ms ago: executing program 3 (id=1338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0xc) r2 = socket(0x2a, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getsockname$packet(r2, &(0x7f0000002600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x70bd21, 0x25dfdbfe, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x14024811}, 0x4000000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x9, 0x3}, &(0x7f0000000080)=0x90) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000300)={'sit0\x00', r3, 0x700, 0x7800, 0x40, 0x8001, {{0x18, 0x4, 0x0, 0x37, 0x60, 0x67, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @dev={0xac, 0x14, 0x14, 0x2e}, {[@ssrr={0x89, 0x7, 0x68, [@multicast1]}, @timestamp_addr={0x44, 0x44, 0x11, 0x1, 0x8, [{@rand_addr=0x64010102, 0x3}, {@private=0xa010101, 0x5}, {@private=0xa010102, 0x1}, {@broadcast, 0x1}, {@rand_addr=0x64010101, 0x1}, {@initdev={0xac, 0x1e, 0x7, 0x0}}, {@loopback, 0x6}, {@rand_addr=0x64010101, 0x100}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) write(r1, &(0x7f0000000040)="effd00001000ff00fd4344c007110000", 0x10) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000b0601080000000000000000020000000900020073797a310000000005000100070000002c000780060004404e21000005000700110000000c000180080001407f0000010c000280"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x7c, 0x3, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xf}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7b4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xffff}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 766.771244ms ago: executing program 0 (id=1339): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r2, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x42, 0xffffffff}}}, 0x10) bind$tipc(r3, &(0x7f0000000440)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x1}}, 0x10) bind$tipc(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x3a, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x0, 0x0, &(0x7f0000000540), 0x8, 0x62, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bind$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x15, r5, 0x1, 0xaf, 0x6, @multicast}, 0x14) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000002900)=r4, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0xfffffdb9, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r3], 0xe8}}, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 674.356049ms ago: executing program 1 (id=1340): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000580)=@framed={{}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000440), &(0x7f00000004c0)=0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000bc0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000001c00)=ANY=[@ANYBLOB="280600004552bf58ed5f1a09f359e7aa3af2244436c3ff22f8f4150f75aadb9a0f29", @ANYRES16=r3, @ANYBLOB="e92b2bbd7000fcdbdf250500000005000700040000000c00038008000200cc000000050007000200000005000700020000001c030380ed0005004d33b00036d244d88525ef4e889662c6bc7649b78d57ba8070c441c3ee66e2e30c02ca5f228f27bdfaca7fb92c43d80046afeeecf4e58d7c8a7fd245be1c0184452ac3a80091c5d195cdbdb41d7ef865a22c65d0b1ada1a65f23007fc05a32204b98e2c2ac925784ef4bd4c334dc87b707bb54e290dff7b724b2677892324eec825e652437d67ecd3078795a59d9850e3f6cf994ac5ba908fabaae64dd7a7c5a9d7210629cbcc4f0341988d7dbb18a270f94916d7fa545d9ee703e3e426997f245b084d157aeb9e7c2146a3a4d9c7661cfc55f1d2742840c728bec6a6a87bbdfa801315e55ca18ba8f000000b60004000dd4092264a787b299d2dfbd271c1587375a23c063a1503b062b9b8dd7e56fb6c2d668d4b52bcfe50db7b35279bda1c3312392ea26621b8a9910190dde8d8b8e58a56b703510012fa228382f65b0a0f721dc432b79e4357ed97e4a7b2541b6d255dc69f9943194a15a0243176820fe5b7bfd1235a5fda8035deea1c417499e481555abd34938144bff23d01404b52c84a206dfbdff8f111bc39f4da0fb54f355ce4a85c657cd942ec87bbbdf6443334633bc0000a90005006eae8b849424b9d4fc0851f8ce0f5f6837648dafa6b7876c842d5f5a33abec9a5fcf1bcffc193447c7860c5f82d39a8468078c1cda772eb10aa12a1bff247d016a24b312dd5c6c23466c3cdfd612e3cdac9410700cd9dd4628c4403a0bc543b5ecdc4d6413a1d3ce4d5abcbb245bd2eeb58bc3a92db36ccb343003e83156dff7527678e5a9ed3a625c924dd287e30ddb14eb33705dd5f50f2a4dbdc18f0dfc95026f4d2f5500000008000200ff7f0000b900050008c5a56e51dff9a11b922e34f23e3c23dbe15d41670821d075415e8a7369d5efe65961fabf5362486d51d5c224ea4ba45d3e0dea14fa3a5f777513afee8a9c2227466da0f048e1e6c17f4a51cfca0bd57ba7bdd790fcd35f7eacc533c2cd52ae8f1c43057229a81f6fb5b457faf360d9c3fd5ed8f31235e7007263aa9ba651015b62f3d4e93f0b1ecfd44407dd84e21ecdc37338b0adff4343e9061c9055b173206b7efd86e807ad48bc187d4259296d79dfb45c47000000080005000600000008000900000000006801038045000500942dc97fab698d2862ecc47545dc3d97a34985196a83bd936c61b1c7c5c382e158eba70c19925e839eaeb7e443cdd43416f934590343260eb5166d1e62d99415f3000000080002000400000054000380200001800500020000000000040003000800020047504c00040003000400030030000180120002002f2b2a7d2125972140217f292f000000080001001300000005000200000000000800010007000000040001004a000400e2909ae7026c194e9b18f3b56dc8c174262968c43df88f9db743d9ef7571ddbb84ae12a665798788b6a13fc4855c9e671507ac60e25199e067415bb4455c4d3f0d683c7f880100006e000400f5a1f691ccf7068905d7124e1069684c8ba66943bda53536433549c8484076e521d24744d494eda4fd03888a0708b668e36c232ceb85601629cffe332a5d4e696f9151223c7035a1b6309d16a1dea1516629ddc263f9d3b0e14588ab6fba39f355af577002ac05ee9ff00000540103804d000500f8aca886b20b30ea27c4fed8a7fe89448997a1738f7362c8b0d18e53d3d46d60088ad3a27c308b08bc32c22bab54824b2f3903a90d8fbb8590f9d7edd607b9172d8bac724323fedd52000000ff00040038ab98de4c3b4406c11dc16afd7893bcef6a05d1a1160d31c4e827535d0390396d5ce2e14347f2e51b0c8ae652451ce69c87c0f2f99f237abd62a3112c4e6c93e5ced26eea4e63510a0c6bcb010d384645c8240e9f8416dfae671878df6a1bce4d0ec9938eb1df5648a43055a652123756fd3d78a64982771ca794f09e930e174b0415519be7d99af8f96a4a048009b25be100492b6adb6bdc17d63b9e7aae5ad1eed5207616e4c4f634e1e77dc481fd9f31cb9de313f14e5cb76aed383df4d453366216304292b4311c861ac9f1628e8c35a5e5aab81f45b87cf8e1b354ea49a1bb2eae186182238f6091c7196fe709533103c490592e55b50d88000500060009000000"], 0x628}, 0x1, 0x0, 0x0, 0xa080}, 0x4000014) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000140)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000180)=0x28) close(r1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000500), &(0x7f0000000540)=0xc) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r7 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="38000000090601a1c97bb73d035c2300000000000900020073797a3100000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 547.15997ms ago: executing program 2 (id=1341): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000000e0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x30, 0x40, 0x1, 0xfffffffe, 0x25dfdbfb, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x17, 0x0, 0x1, [@nested={0x4, 0x1f}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004850) sendmsg$NFT_BATCH(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0xfffffedb, &(0x7f0000000000)="0101000871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x70bd24, 0xfffffffc, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x804}, 0x20000010) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r4) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0xe, 0x4, 0x0, 0x0, 0x4, 0xffffffffffffffea, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x1000c041) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="24040000", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fddbdf250200000008000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff01000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008", @ANYRES32, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100008040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000900"], 0x424}, 0x1, 0x0, 0x0, 0x408c0}, 0x40001) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b6c782cebd6a7bc78a21d1bc9f3c1bd441ada5266780599eaf18965bbfcc07c2037129672275c399e1e03f8a0664d807385cc4d566f230400db800400498096d9641e8b1887b25501b11ecd71313a47df368b078d7b825bff33b9eab3964d7b2394b1950c7aeaba6014fe2cd33c89fd070ce0f1f306494a44adf6609d8ad55a5080b36b05cb0b9a57833b14fcd62c0aba0ac67f03b20e87ba6f3610a5bd1d3369ae014c8036c1e596b800991698810ff706e98871c17ad581b0695476273ac6c33a7a51d4a44a5b95684befe95ef49b03458bce89d87355f35b766b242b9f98b661269bb9255d836fb4e30d0000c72ec5561adf6112ca278273b4af42597e7bfa1f5c228f13161b34517c92bc352c017afac22d14047e6fbdc61536f9e51738ea935cb2a577ec2b788433bc13a9e976cfee267f36d988b766a29632c84c94d4cf31d780ef683293d7eacfc93f248d137affcae7cffa699237ea9c74919850dc164f1483f3f352bf7dd787191705b26936e1d090526b6ac5765df318f160cc84b15b94c662cf92611c9eb0b92bfbd3512bffed96a4150d653e130625b6ae5a78da2c4b9c70c736a224b18d89222095fbc4c61bcad1eb73be9c6efaaae48f871223694999b2a925a37138be8220008180cc20e57a92076b2308003200", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 283.125194ms ago: executing program 0 (id=1342): socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x8000000, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100030a00000000000000000000000300050000000000020000000000000000000000000000000200100000000000ffffffff00000000030006000000000002"], 0x50}}, 0x0) r3 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000040)={'macsec0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x43, 0xffdffffe, 0x3e7e79a6, 0x1, 0x4, 0x40000000, 0x8f}}) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000001300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000012c0)={&(0x7f0000000280)={0x20, r5, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x46}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000", @ANYRES16=r9, @ANYBLOB="010200000000000000001700"], 0x14}, 0x1, 0x0, 0x0, 0x34000804}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7, r6}, 0xc) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r10, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) socket(0x2b, 0x1, 0x1) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=@base={0x1, 0x6, 0x12, 0x8, 0x24401, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r11}, 0x38) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000240)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) 207.77364ms ago: executing program 4 (id=1343): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 35.112588ms ago: executing program 3 (id=1344): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x290, 0x20a, 0x278, 0x290, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0xffffffff, 0xffffff00, 0x0, 0xffffff00], [0x0, 0xffffff00], 'ip_vti0\x00', 'batadv0\x00', {0xff}, {}, 0x6, 0xfe, 0x1}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0xff0}, {[], [], 0x0, 0xc0, 0x2, 0xb}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x27}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x2}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0xffffff00, 0xffff00], [], 'veth1_to_hsr\x00', 'pim6reg1\x00', {}, {}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xa3, 0x7, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x701, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x10044880) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) r7 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000001780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x44, r6, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xa0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20080014}, 0x8010) r11 = socket$inet6(0xa, 0x1, 0x8010000000000084) r12 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in6=@mcast2, 0x0, 0x1, 0x1000, 0xfffe, 0xa}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0xb5, 0x1}, 0x800, 0x0, 0x1, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x2, @in=@multicast1, 0x0, 0x2, 0x3}}, 0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in=@remote, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3ff}, 0x0, 0x20000000}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x80000, 0x9, 0x3}}, 0xe8) close(r12) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0xfff9, 0x20000000, 0x5, 0x50, 0x1000, 0x1}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x2, @empty, 0x9d7}}, 0x6, 0x0, 0x0, 0xb3, 0xb3550aa4ba878396, 0x0, 0x1}, 0x9c) shutdown(r11, 0x1) 0s ago: executing program 2 (id=1345): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt(r0, 0x44, 0x7fffffff, &(0x7f00000005c0)="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", 0x1000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{}, "e87d855b0b6de5ad", "1ed94607f3c637a4d3559dada07c9bc9", "387972be", "a97f7a54ab9fd929"}, 0x28) socket$kcm(0x29, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x90000005}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) epoll_pwait(r4, &(0x7f0000000580)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) epoll_pwait(r4, &(0x7f00000000c0)=[{}], 0x1, 0x101, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0xa}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x4}]}}]}, 0x4c}}, 0x0) close(r2) kernel console output (not intermixed with test programs): de [ 156.051038][ T7748] netlink: 'syz.1.444': attribute type 1 has an invalid length. [ 156.182138][ T7743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.248822][ T7762] __nla_validate_parse: 3 callbacks suppressed [ 156.248839][ T7762] netlink: 36 bytes leftover after parsing attributes in process `syz.4.447'. [ 156.261669][ T7743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.269514][ T7762] netlink: 36 bytes leftover after parsing attributes in process `syz.4.447'. [ 156.284776][ T7762] netlink: 31 bytes leftover after parsing attributes in process `syz.4.447'. [ 156.403382][ T7760] netlink: 14 bytes leftover after parsing attributes in process `syz.0.445'. [ 156.430089][ T7760] batman_adv: batadv0: Interface deactivated: dummy0 [ 156.457771][ T7760] batman_adv: batadv0: Removing interface: dummy0 [ 156.567856][ T7771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'. [ 156.745170][ T7776] vlan2: entered promiscuous mode [ 156.752750][ T7776] bridge0: entered promiscuous mode [ 157.171824][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.454'. [ 157.183639][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.455'. [ 157.255200][ T7798] net_ratelimit: 1 callbacks suppressed [ 157.255218][ T7798] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.276551][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 157.330285][ T7795] macvtap1: entered promiscuous mode [ 157.344772][ T7795] syz_tun: entered promiscuous mode [ 157.352413][ T7795] macvtap1: entered allmulticast mode [ 157.359401][ T7795] syz_tun: entered allmulticast mode [ 157.395622][ T7801] syz_tun: left allmulticast mode [ 157.411177][ T7801] syz_tun: left promiscuous mode [ 157.430029][ T7801] macvtap1: left promiscuous mode [ 157.440258][ T7801] macvtap1: left allmulticast mode [ 157.456525][ T7806] netlink: 32 bytes leftover after parsing attributes in process `syz.3.456'. [ 157.685283][ T7816] netlink: 36 bytes leftover after parsing attributes in process `syz.3.459'. [ 157.730138][ T7816] netlink: 36 bytes leftover after parsing attributes in process `syz.3.459'. [ 157.940986][ T7826] §: renamed from sit0 (while UP) [ 158.004260][ T7825] netlink: 'syz.4.461': attribute type 30 has an invalid length. [ 158.088391][ T7825] bond1: option arp_missed_max: invalid value (0) [ 158.095318][ T7825] bond1: option arp_missed_max: allowed values 1 - 255 [ 158.108492][ T7825] bond1 (unregistering): Released all slaves [ 158.194192][ T7839] syzkaller0: entered promiscuous mode [ 158.227563][ T7839] syzkaller0: entered allmulticast mode [ 158.262340][ T7828] simple: basic_9 [ 158.680067][ T7860] netlink: 'syz.3.470': attribute type 2 has an invalid length. [ 158.692462][ T7858] macsec2: entered promiscuous mode [ 158.694119][ T7860] netlink: 'syz.3.470': attribute type 2 has an invalid length. [ 158.719703][ T7860] netlink: 'syz.3.470': attribute type 4 has an invalid length. [ 158.728459][ T7860] netlink: 'syz.3.470': attribute type 8 has an invalid length. [ 159.025717][ T7876] Bluetooth: MGMT ver 1.23 [ 159.064821][ T7876] bond5: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 159.088736][ T7876] bond5 (unregistering): Released all slaves [ 159.567664][ T7888] sctp: [Deprecated]: syz.3.477 (pid 7888) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.567664][ T7888] Use struct sctp_sack_info instead [ 160.066380][ T7904] netlink: 'syz.0.479': attribute type 3 has an invalid length. [ 160.801554][ T7934] netlink: 'syz.0.485': attribute type 1 has an invalid length. [ 161.149890][ T7934] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.157211][ T7934] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.292961][ T7934] bridge_slave_0: left allmulticast mode [ 161.313847][ T7934] bridge_slave_0: left promiscuous mode [ 161.345119][ T7934] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.419702][ T7934] bridge_slave_1: left allmulticast mode [ 161.434555][ T7934] bridge_slave_1: left promiscuous mode [ 161.442610][ T7934] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.488760][ T7934] team0: Port device team_slave_0 removed [ 161.523326][ T7934] team0: Port device team_slave_1 removed [ 161.546531][ T7934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.568931][ T7934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.585790][ T7934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.600848][ T7934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.621915][ T7934] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 161.657951][ T7931] bridge0: entered promiscuous mode [ 161.663322][ T7931] bridge0: entered allmulticast mode [ 161.704656][ T7948] gretap1: entered allmulticast mode [ 162.116831][ T7973] netlink: 'syz.2.494': attribute type 13 has an invalid length. [ 162.145866][ T7973] __nla_validate_parse: 8 callbacks suppressed [ 162.145882][ T7973] netlink: 36 bytes leftover after parsing attributes in process `syz.2.494'. [ 164.716488][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 164.814229][ T9] IPVS: starting estimator thread 0... [ 164.871734][ T8037] netlink: 40 bytes leftover after parsing attributes in process `syz.1.503'. [ 164.917064][ T8035] IPVS: using max 28 ests per chain, 67200 per kthread [ 164.927196][ T8039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.505'. [ 164.952731][ T8039] netlink: 'syz.0.505': attribute type 5 has an invalid length. [ 164.960773][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.505'. [ 165.062944][ T8041] syzkaller0: entered promiscuous mode [ 165.075322][ T8041] syzkaller0: entered allmulticast mode [ 165.140575][ T8046] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 165.187149][ T8048] ±ÿ-œL5³ŸÅQ: renamed from lo [ 165.258268][ T7984] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 165.410977][ T8053] syzkaller0: entered promiscuous mode [ 165.435939][ T8053] syzkaller0: entered allmulticast mode [ 165.485659][ T8059] syzkaller0: entered promiscuous mode [ 165.499895][ T8059] syzkaller0: entered allmulticast mode [ 165.568153][ T8059] tipc: Enabled bearer , priority 0 [ 165.606089][ T8059] tipc: Resetting bearer [ 165.668921][ T8056] tipc: Resetting bearer [ 165.716183][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'. [ 165.730963][ T8056] tipc: Disabling bearer [ 165.773034][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'. [ 166.209893][ T8085] netlink: 19 bytes leftover after parsing attributes in process `syz.1.519'. [ 166.233683][ T8086] netlink: 28 bytes leftover after parsing attributes in process `syz.2.520'. [ 166.254242][ T8085] netlink: 19 bytes leftover after parsing attributes in process `syz.1.519'. [ 166.289737][ T8086] lo speed is unknown, defaulting to 1000 [ 166.332434][ T8086] lo speed is unknown, defaulting to 1000 [ 166.460140][ T8086] lo speed is unknown, defaulting to 1000 [ 166.469066][ T8086] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 166.484142][ T8086] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 166.522776][ T8086] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 166.635598][ T8086] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 166.792442][ T8106] netlink: 36 bytes leftover after parsing attributes in process `syz.4.524'. [ 166.886129][ T8111] veth1_macvtap: renamed from vlan0 [ 166.894197][ T8086] lo speed is unknown, defaulting to 1000 [ 166.918926][ T8086] lo speed is unknown, defaulting to 1000 [ 166.939497][ T8086] lo speed is unknown, defaulting to 1000 [ 166.959478][ T8086] lo speed is unknown, defaulting to 1000 [ 166.976014][ T8086] lo speed is unknown, defaulting to 1000 [ 167.010711][ T8086] lo speed is unknown, defaulting to 1000 [ 167.202334][ T8130] netlink: 'syz.4.529': attribute type 9 has an invalid length. [ 167.288185][ T8132] syzkaller0: entered promiscuous mode [ 167.302842][ T8132] syzkaller0: entered allmulticast mode [ 167.772745][ T8159] __nla_validate_parse: 2 callbacks suppressed [ 167.772763][ T8159] netlink: 36 bytes leftover after parsing attributes in process `syz.0.537'. [ 167.845496][ T8159] netlink: 36 bytes leftover after parsing attributes in process `syz.0.537'. [ 167.899344][ T8159] netlink: 31 bytes leftover after parsing attributes in process `syz.0.537'. [ 168.030879][ T8156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.204278][ T8174] netlink: 56 bytes leftover after parsing attributes in process `syz.2.541'. [ 168.262242][ T8174] xt_hashlimit: size too large, truncated to 1048576 [ 168.298182][ T8176] bridge2: entered promiscuous mode [ 168.319612][ T8176] bridge2: entered allmulticast mode [ 168.354802][ T8176] team0: Port device bridge2 added [ 168.775174][ T8193] tipc: Enabled bearer , priority 0 [ 168.785668][ T8193] tipc: Resetting bearer [ 168.825123][ T8192] tipc: Disabling bearer [ 169.185129][ T8200] syzkaller1: entered promiscuous mode [ 169.196910][ T8200] syzkaller1: entered allmulticast mode [ 169.296157][ T8208] netlink: 20 bytes leftover after parsing attributes in process `syz.0.546'. [ 169.355679][ T8212] block nbd0: reconnected socket [ 169.479717][ T8215] netlink: 20 bytes leftover after parsing attributes in process `syz.4.549'. [ 169.618631][ T8218] IPVS: length: 203 != 24 [ 169.890138][ T8222] ip6gretap0: entered promiscuous mode [ 169.927981][ T187] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 170.063191][ T8233] tipc: Enabling of bearer rejected, failed to enable media [ 170.260158][ T8248] netlink: 5408 bytes leftover after parsing attributes in process `syz.0.557'. [ 170.295799][ T8248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.318302][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 170.344065][ T8252] netlink: 36 bytes leftover after parsing attributes in process `syz.4.558'. [ 170.367202][ T8252] netlink: 36 bytes leftover after parsing attributes in process `syz.4.558'. [ 170.388171][ T8252] netlink: 31 bytes leftover after parsing attributes in process `syz.4.558'. [ 170.592352][ T8265] syzkaller1: left promiscuous mode [ 170.613915][ T8265] syzkaller1: left allmulticast mode [ 170.754578][ T8263] syzkaller0: entered promiscuous mode [ 170.769663][ T8263] syzkaller0: entered allmulticast mode [ 172.014555][ T8293] xt_hashlimit: size too large, truncated to 1048576 [ 173.276538][ T5752] page_pool_release_retry() stalled pool shutdown: id 35, 1 inflight 60 sec [ 173.395260][ T8279] syzkaller1: entered promiscuous mode [ 173.401167][ T8279] syzkaller1: entered allmulticast mode [ 173.421051][ T8292] bridge_slave_1: invalid flags given to default FDB implementation [ 173.444859][ T8301] vlan3: entered promiscuous mode [ 173.450688][ T8301] hsr0: entered promiscuous mode [ 173.456160][ T8301] vlan3: entered allmulticast mode [ 173.461988][ T8301] hsr0: entered allmulticast mode [ 173.469321][ T8301] hsr_slave_0: entered allmulticast mode [ 173.482371][ T8301] hsr_slave_1: entered allmulticast mode [ 173.558477][ T8303] hsr_slave_0: left promiscuous mode [ 173.592624][ T8303] hsr_slave_1: left promiscuous mode [ 173.708804][ T35] nci: nci_rx_work: unknown MT 0x6 [ 173.721769][ T8317] netlink: 'syz.4.572': attribute type 4 has an invalid length. [ 173.748734][ T8317] __nla_validate_parse: 1 callbacks suppressed [ 173.748752][ T8317] netlink: 152 bytes leftover after parsing attributes in process `syz.4.572'. [ 173.800316][ T8317] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 173.867899][ T8321] netlink: 36 bytes leftover after parsing attributes in process `syz.1.574'. [ 173.877858][ T8321] netlink: 36 bytes leftover after parsing attributes in process `syz.1.574'. [ 173.888598][ T8321] netlink: 31 bytes leftover after parsing attributes in process `syz.1.574'. [ 174.204394][ T29] audit: type=1804 audit(1784541021.397:4): pid=8337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.575" name="/newroot/115/cgroup.controllers" dev="tmpfs" ino=610 res=1 errno=0 [ 174.229718][ T29] audit: type=1800 audit(1784541021.397:5): pid=8337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.575" name="cgroup.controllers" dev="tmpfs" ino=610 res=0 errno=0 [ 176.585811][ T8312] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 176.795984][ T8354] netlink: 176 bytes leftover after parsing attributes in process `syz.0.578'. [ 176.954926][ T8354] syzkaller0: entered promiscuous mode [ 176.987483][ T8354] syzkaller0: entered allmulticast mode [ 177.124374][ T8353] bridge0: left promiscuous mode [ 177.125637][ T8373] sctp: [Deprecated]: syz.4.584 (pid 8373) Use of struct sctp_assoc_value in delayed_ack socket option. [ 177.125637][ T8373] Use struct sctp_sack_info instead [ 177.130002][ T8353] vlan2: left promiscuous mode [ 177.164923][ T8353] geneve0: left promiscuous mode [ 177.190252][ T8353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.210126][ T8353] tipc: Resetting bearer [ 177.238455][ T8353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.247266][ T8378] RDS: rds_bind could not find a transport for ::fcff:ffff:8000:0:20:0, load rds_tcp or rds_rdma? [ 177.382771][ T8353] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 177.408852][ T8353] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.444392][ T8353] veth1_vlan: left promiscuous mode [ 177.458992][ T8353] veth0_vlan: left promiscuous mode [ 177.475171][ T8353] veth0_vlan: entered promiscuous mode [ 177.498620][ T8353] veth1_vlan: entered promiscuous mode [ 177.522338][ T8353] veth1_macvtap: left promiscuous mode [ 177.538425][ T8353] veth0_macvtap: left promiscuous mode [ 177.551406][ T8353] veth0_macvtap: entered promiscuous mode [ 177.570215][ T8353] veth1_macvtap: entered promiscuous mode [ 177.600823][ T8353] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 177.612476][ T8353] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 177.622286][ T8353] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 177.631603][ T8353] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 177.645202][ T8353] bridge0: port 3(vlan2) entered blocking state [ 177.651675][ T8353] bridge0: port 3(vlan2) entered forwarding state [ 177.666979][ T8353] geneve0: entered promiscuous mode [ 177.698144][ T8353] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.737580][ T9] lo speed is unknown, defaulting to 1000 [ 177.754817][ T9] syz2: Port: 1 Link ACTIVE [ 177.776786][ T5746] bridge0: entered promiscuous mode [ 177.783926][ T5746] vlan2: entered promiscuous mode [ 177.858261][ T5955] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.879980][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 177.891788][ T5955] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.916651][ T5955] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.932086][ T5955] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.009379][ T8390] netlink: 36 bytes leftover after parsing attributes in process `syz.2.585'. [ 178.023266][ T8390] netlink: 36 bytes leftover after parsing attributes in process `syz.2.585'. [ 178.044525][ T8390] netlink: 31 bytes leftover after parsing attributes in process `syz.2.585'. [ 178.095493][ T5955] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.118453][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 178.148774][ T5955] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.168722][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 178.193639][ T8399] tipc: Enabled bearer , priority 0 [ 178.228657][ T5955] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.260254][ T5955] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.292421][ T5807] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 178.306611][ T5807] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 178.322736][ T5751] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 178.363631][ T5751] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 178.369339][ T8399] tipc: Resetting bearer [ 178.403836][ T8415] netlink: 20 bytes leftover after parsing attributes in process `syz.2.589'. [ 178.413432][ T8400] lo speed is unknown, defaulting to 1000 [ 178.437388][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 178.458073][ T8415] netlink: 20 bytes leftover after parsing attributes in process `syz.2.589'. [ 178.501369][ T8398] tipc: Disabling bearer [ 178.534045][ T8418] netlink: 'syz.2.589': attribute type 1 has an invalid length. [ 178.581147][ T8418] trusted_key: syz.2.589 sent an empty control message without MSG_MORE. [ 178.653541][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 178.717545][ T8415] geneve2: entered promiscuous mode [ 178.830729][ T8427] bridge0: entered allmulticast mode [ 179.096909][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 179.117420][ T5736] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 179.274659][ T8444] netlink: 'syz.1.592': attribute type 4 has an invalid length. [ 179.277199][ T5736] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 179.315889][ T8436] netlink: 'syz.1.592': attribute type 4 has an invalid length. [ 179.327269][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 179.337292][ T5736] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 179.419357][ T8444] netlink: 'syz.1.592': attribute type 4 has an invalid length. [ 179.542312][ T8453] batman_adv: batadv0: Adding interface: ip6gretap2 [ 179.576107][ T8453] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.693290][ T8453] batman_adv: batadv0: Not using interface ip6gretap2 (retrying later): interface not active [ 179.764558][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 179.789724][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 179.804129][ T8470] x_tables: unsorted entry at hook 2 [ 179.840977][ T8470] xt_hashlimit: size too large, truncated to 1048576 [ 179.877905][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 180.076905][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.292884][ T8480] __nla_validate_parse: 4 callbacks suppressed [ 180.292903][ T8480] netlink: 36 bytes leftover after parsing attributes in process `syz.4.599'. [ 180.350106][ T8480] netlink: 36 bytes leftover after parsing attributes in process `syz.4.599'. [ 180.388744][ T8480] netlink: 31 bytes leftover after parsing attributes in process `syz.4.599'. [ 180.421549][ T8486] netlink: 'syz.1.601': attribute type 3 has an invalid length. [ 180.441804][ T5807] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 180.713995][ T8492] netlink: 180 bytes leftover after parsing attributes in process `syz.2.604'. [ 181.257391][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 181.329006][ T8509] team0: Port device xfrm0 removed [ 181.368543][ T35] tipc: Resetting bearer [ 181.624487][ T8506] syzkaller0: entered promiscuous mode [ 181.654609][ T8506] syzkaller0: entered allmulticast mode [ 181.663885][ T8529] IPVS: ip_vs_add_dest(): server weight less than zero [ 182.069638][ T8540] tipc: Enabled bearer , priority 0 [ 182.096115][ T8540] syzkaller0: entered promiscuous mode [ 182.116274][ T8540] syzkaller0: entered allmulticast mode [ 182.204770][ T8540] netlink: 44 bytes leftover after parsing attributes in process `syz.2.616'. [ 182.243595][ T8540] tipc: Resetting bearer [ 182.364355][ T8539] tipc: Resetting bearer [ 182.445445][ T8539] tipc: Disabling bearer [ 182.512009][ T8547] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 182.548128][ T8547] netlink: 'syz.4.617': attribute type 1 has an invalid length. [ 182.596742][ T8547] netlink: 1 bytes leftover after parsing attributes in process `syz.4.617'. [ 182.602046][ T8559] netlink: 96 bytes leftover after parsing attributes in process `syz.0.619'. [ 182.739585][ T8563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.620'. [ 182.911828][ T8557] lo speed is unknown, defaulting to 1000 [ 183.137324][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.622'. [ 183.163637][ T8586] netlink: 20 bytes leftover after parsing attributes in process `syz.3.622'. [ 183.918685][ C1] net_ratelimit: 2 callbacks suppressed [ 183.918705][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 184.316491][ C0] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 184.316509][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 184.317108][ T8579] syzkaller1: entered promiscuous mode [ 184.348856][ T8579] syzkaller1: entered allmulticast mode [ 184.922509][ T8602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.937352][ T8602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.107686][ T8665] netlink: 'syz.2.633': attribute type 1 has an invalid length. [ 186.153840][ T8665] bond2: entered promiscuous mode [ 186.164094][ T8665] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.610159][ T8672] __nla_validate_parse: 2 callbacks suppressed [ 186.610172][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'. [ 186.629412][ T8672] tipc: Resetting bearer [ 186.653731][ T8672] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 186.677099][ T5736] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 186.681735][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 186.695734][ T5736] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 186.729156][ T8672] netlink: 132 bytes leftover after parsing attributes in process `syz.2.636'. [ 186.827349][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 186.986633][ T5736] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 187.336278][ T8617] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 187.605032][ T8683] netlink: 24 bytes leftover after parsing attributes in process `syz.4.639'. [ 187.645910][ T8686] tipc: Resetting bearer [ 187.653894][ T8686] tipc: Resetting bearer [ 187.670958][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 187.678950][ T5736] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 187.873056][ T187] lo speed is unknown, defaulting to 1000 [ 187.886595][ T187] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 187.905891][ T5746] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 188.066544][ T5746] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 188.124090][ T8697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.144407][ T8697] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.204832][ T8697] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 188.215755][ T8697] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.230149][ T8697] veth1_vlan: left promiscuous mode [ 188.236210][ T8697] veth0_vlan: left promiscuous mode [ 188.242862][ T8697] veth0_vlan: entered promiscuous mode [ 188.250228][ T8697] veth1_vlan: entered promiscuous mode [ 188.270975][ T8697] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 188.279145][ T8697] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 188.287524][ T8697] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 188.295370][ T8697] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 188.304811][ T8697] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.314120][ T8697] 8021q: adding VLAN 0 to HW filter on device bond2 [ 188.326730][ T5746] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 188.397361][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 188.462237][ T81] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.503620][ T81] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.628502][ T81] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.638529][ T81] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.950413][ T8729] tipc: Enabling of bearer rejected, failed to enable media [ 189.068543][ T8734] netlink: 36 bytes leftover after parsing attributes in process `syz.1.649'. [ 189.089687][ T8734] netlink: 36 bytes leftover after parsing attributes in process `syz.1.649'. [ 189.110822][ T8734] netlink: 31 bytes leftover after parsing attributes in process `syz.1.649'. [ 189.533198][ T8751] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.763998][ T8751] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.870923][ T8751] bond0: (slave netdevsim1): Releasing backup interface [ 189.919675][ T8751] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.042802][ T8751] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.274416][ T5808] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.368999][ T5950] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.448110][ T5955] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.497535][ T8759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.519748][ T5950] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.768920][ T8774] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.770747][ T8772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.821359][ T8774] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.828625][ T8774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.841593][ T8774] bridge0: entered promiscuous mode [ 190.847230][ T8774] bridge0: entered allmulticast mode [ 190.860447][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.660'. [ 190.957459][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 191.123918][ T8777] netlink: 28 bytes leftover after parsing attributes in process `syz.1.661'. [ 191.421618][ T8791] netlink: 40 bytes leftover after parsing attributes in process `syz.1.664'. [ 191.466675][ T8798] netlink: 'syz.1.664': attribute type 4 has an invalid length. [ 191.490669][ T8799] tipc: Enabling of bearer rejected, failed to enable media [ 191.523727][ T8798] netlink: 152 bytes leftover after parsing attributes in process `syz.1.664'. [ 191.586161][ T8798] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 191.601873][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 191.752756][ T8807] __nla_validate_parse: 1 callbacks suppressed [ 191.752773][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.668'. [ 191.807653][ T8809] netlink: 'syz.2.667': attribute type 4 has an invalid length. [ 191.850638][ T5736] lo speed is unknown, defaulting to 1000 [ 191.870350][ T5736] syz2: Port: 1 Link DOWN [ 192.017202][ T8811] syz.3.669: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 192.058779][ T8811] CPU: 1 UID: 0 PID: 8811 Comm: syz.3.669 Not tainted syzkaller #0 PREEMPT(full) [ 192.058807][ T8811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 192.058827][ T8811] Call Trace: [ 192.058835][ T8811] [ 192.058843][ T8811] dump_stack_lvl+0xe8/0x150 [ 192.058877][ T8811] warn_alloc+0x24c/0x270 [ 192.058902][ T8811] ? stack_depot_save_flags+0x33/0x800 [ 192.058928][ T8811] ? __pfx_warn_alloc+0x10/0x10 [ 192.058953][ T8811] ? kasan_save_track+0x3e/0x80 [ 192.058975][ T8811] ? __kasan_kmalloc+0x93/0xb0 [ 192.059000][ T8811] ? xsk_setsockopt+0x52a/0x960 [ 192.059025][ T8811] ? do_sock_setsockopt+0x17c/0x1b0 [ 192.059053][ T8811] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 192.059081][ T8811] ? do_syscall_64+0x174/0x580 [ 192.059098][ T8811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.059126][ T8811] __vmalloc_node_range_noprof+0x12c/0x1730 [ 192.059176][ T8811] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 192.059203][ T8811] ? __kasan_kmalloc+0x93/0xb0 [ 192.059230][ T8811] ? __kmalloc_cache_noprof+0x32d/0x660 [ 192.059254][ T8811] ? __kmalloc_cache_noprof+0x150/0x660 [ 192.059282][ T8811] vmalloc_user_noprof+0xad/0xe0 [ 192.059302][ T8811] ? xskq_create+0xbf/0x170 [ 192.059328][ T8811] xskq_create+0xbf/0x170 [ 192.059356][ T8811] xsk_init_queue+0x8a/0xe0 [ 192.059384][ T8811] xsk_setsockopt+0x52a/0x960 [ 192.059410][ T8811] ? __fget_files+0x2a/0x420 [ 192.059436][ T8811] ? __pfx_xsk_setsockopt+0x10/0x10 [ 192.059462][ T8811] ? __pfx_aa_sk_perm+0x10/0x10 [ 192.059493][ T8811] ? aa_sock_opt_perm+0xff/0x1a0 [ 192.059516][ T8811] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 192.059535][ T8811] ? __pfx_xsk_setsockopt+0x10/0x10 [ 192.059564][ T8811] do_sock_setsockopt+0x17c/0x1b0 [ 192.059604][ T8811] __x64_sys_setsockopt+0x13d/0x1b0 [ 192.059635][ T8811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.059666][ T8811] do_syscall_64+0x174/0x580 [ 192.059687][ T8811] ? clear_bhb_loop+0x40/0x90 [ 192.059711][ T8811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.059731][ T8811] RIP: 0033:0x7ff05e39de99 [ 192.059750][ T8811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.059765][ T8811] RSP: 002b:00007ff05f2f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 192.059784][ T8811] RAX: ffffffffffffffda RBX: 00007ff05e625fa0 RCX: 00007ff05e39de99 [ 192.059797][ T8811] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 192.059809][ T8811] RBP: 00007ff05e433eaf R08: 0000000000000004 R09: 0000000000000000 [ 192.059820][ T8811] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.059832][ T8811] R13: 00007ff05e626038 R14: 00007ff05e625fa0 R15: 00007ffff76870b8 [ 192.059863][ T8811] [ 192.062170][ T8811] Mem-Info: [ 192.217841][ T8820] netlink: 32 bytes leftover after parsing attributes in process `syz.3.669'. [ 192.246621][ T8811] active_anon:7637 inactive_anon:0 isolated_anon:0 [ 192.246621][ T8811] active_file:0 inactive_file:43140 isolated_file:0 [ 192.246621][ T8811] unevictable:768 dirty:512 writeback:0 [ 192.246621][ T8811] slab_reclaimable:10345 slab_unreclaimable:98541 [ 192.246621][ T8811] mapped:30481 shmem:1294 pagetables:1340 [ 192.246621][ T8811] sec_pagetables:0 bounce:0 [ 192.246621][ T8811] kernel_misc_reclaimable:0 [ 192.246621][ T8811] free:1305165 free_pcp:10985 free_cma:0 [ 192.304931][ T8816] netlink: 28 bytes leftover after parsing attributes in process `syz.3.669'. [ 192.324157][ T8811] Node 0 active_anon:30948kB inactive_anon:0kB active_file:0kB inactive_file:172372kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121924kB dirty:2044kB writeback:0kB shmem:3640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13052kB pagetables:5220kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 192.443227][ T8811] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 192.476918][ T8811] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 192.509011][ T8811] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 192.514829][ T8811] Node 0 DMA32 free:1255652kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32148kB inactive_anon:0kB active_file:0kB inactive_file:172372kB unevictable:1536kB writepending:2044kB zspages:0kB present:3129332kB managed:2548700kB mlocked:0kB bounce:0kB free_pcp:42688kB local_pcp:12048kB free_cma:0kB [ 192.548594][ T8811] lowmem_reserve[]: 0 0 0 0 0 [ 192.553393][ T8811] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 192.588019][ T8811] lowmem_reserve[]: 0 0 0 0 0 [ 192.592774][ T8811] Node 1 Normal free:3949648kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:160kB local_pcp:0kB free_cma:0kB [ 192.625181][ T8811] lowmem_reserve[]: 0 0 0 0 0 [ 192.630090][ T8811] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 192.704987][ T8811] Node 0 DMA32: 131*4kB (U) 441*8kB (U) 173*16kB (UM) 210*32kB (UME) 53*64kB (U) 22*128kB (UME) 10*256kB (UE) 9*512kB (UME) 8*1024kB (UE) 12*2048kB (UM) 292*4096kB (UM) = 1255716kB [ 192.752729][ T8811] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 192.767574][ T8811] Node 1 Normal: 0*4kB 6*8kB (UM) 6*16kB (UM) 5*32kB (UM) 5*64kB (UM) 3*128kB (UM) 4*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 962*4096kB (M) = 3949552kB [ 192.789922][ T8827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.671'. [ 192.812752][ T8827] netlink: 'syz.2.671': attribute type 1 has an invalid length. [ 192.828288][ T8811] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 192.833634][ T8827] netlink: 28 bytes leftover after parsing attributes in process `syz.2.671'. [ 192.872444][ T8811] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 192.908271][ T8811] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 192.935700][ T8811] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 192.985581][ T8811] 44430 total pagecache pages [ 192.998545][ T8811] 0 pages in swap cache [ 193.017595][ T8811] Free swap = 124996kB [ 193.036194][ T8811] Total swap = 124996kB [ 193.048043][ T8811] 2097051 pages RAM [ 193.057883][ T8811] 0 pages HighMem/MovableOnly [ 193.063165][ T8834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.673'. [ 193.071964][ T8811] 428195 pages reserved [ 193.071976][ T8811] 0 pages cma reserved [ 193.417400][ T8843] netlink: 420 bytes leftover after parsing attributes in process `syz.2.676'. [ 193.582803][ T8846] syz_tun: entered allmulticast mode [ 193.615178][ T8846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.677'. [ 193.646638][ T8846] netlink: 'syz.4.677': attribute type 9 has an invalid length. [ 193.686433][ T8846] netlink: 'syz.4.677': attribute type 6 has an invalid length. [ 193.736662][ T8845] syz_tun: left allmulticast mode [ 193.955944][ T8854] netlink: 36 bytes leftover after parsing attributes in process `syz.2.680'. [ 193.982065][ T8854] netlink: 36 bytes leftover after parsing attributes in process `syz.2.680'. [ 194.159909][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.693502][ T8867] syzkaller1: entered promiscuous mode [ 194.720213][ T8867] syzkaller1: entered allmulticast mode [ 195.271035][ T8882] bridge0: port 3(vlan2) entered disabled state [ 195.297689][ T8882] tipc: Resetting bearer [ 196.027729][ T8882] geneve2: left promiscuous mode [ 196.048641][ T8882] bond2: left promiscuous mode [ 196.093686][ T8905] tun0: tun_chr_ioctl cmd 1074025681 [ 196.199279][ T8931] netlink: 'syz.3.693': attribute type 2 has an invalid length. [ 196.208328][ T8890] syzkaller0: entered promiscuous mode [ 196.223608][ T8890] syzkaller0: entered allmulticast mode [ 196.238425][ T5807] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.254253][ T5807] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.268431][ T5955] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.277948][ T5955] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.188826][ T8929] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 198.197837][ T8931] : entered promiscuous mode [ 198.213029][ T8933] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 198.214446][ T8936] __nla_validate_parse: 7 callbacks suppressed [ 198.214461][ T8936] netlink: 36 bytes leftover after parsing attributes in process `syz.1.694'. [ 198.239662][ T8936] netlink: 36 bytes leftover after parsing attributes in process `syz.1.694'. [ 198.265113][ T8936] netlink: 31 bytes leftover after parsing attributes in process `syz.1.694'. [ 198.279291][ T5955] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.297791][ T5955] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.319848][ T5955] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.330476][ T5955] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.356517][ T8949] netlink: 'syz.4.696': attribute type 12 has an invalid length. [ 198.443113][ T8943] bridge0: left promiscuous mode [ 198.450186][ T8954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.698'. [ 198.459514][ T8943] vlan2: left promiscuous mode [ 198.469591][ T8943] geneve0: left promiscuous mode [ 198.483600][ T8943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.512183][ T8943] tipc: Resetting bearer [ 198.534310][ T8943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.583686][ T8943] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 198.594090][ T8943] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.609448][ T8943] veth1_vlan: left promiscuous mode [ 198.615781][ T8943] veth0_vlan: left promiscuous mode [ 198.637901][ T8943] veth0_vlan: entered promiscuous mode [ 198.660080][ T8943] veth1_vlan: entered promiscuous mode [ 198.671787][ T8943] veth1_macvtap: left promiscuous mode [ 198.678485][ T8943] veth0_macvtap: left promiscuous mode [ 198.688746][ T8943] veth0_macvtap: entered promiscuous mode [ 198.695750][ T8943] veth1_macvtap: entered promiscuous mode [ 198.711244][ T8943] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 198.720044][ T8943] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 198.730510][ T8943] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 198.741047][ T8943] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 198.752022][ T8943] geneve0: entered promiscuous mode [ 198.759122][ T8943] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.809461][ T8943] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 198.889079][ T5808] bridge0: port 3(vlan2) entered blocking state [ 198.895476][ T5808] bridge0: port 3(vlan2) entered forwarding state [ 198.923749][ T5751] lo speed is unknown, defaulting to 1000 [ 198.929700][ T5751] syz2: Port: 1 Link ACTIVE [ 198.940950][ T5807] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 198.959940][ T5807] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 198.969672][ T5751] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 198.984221][ T5736] bridge0: entered promiscuous mode [ 198.993955][ T5736] vlan2: entered promiscuous mode [ 199.028750][ T5955] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.038344][ T5955] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.047403][ T5736] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 199.056146][ T5955] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.067707][ T5955] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.126822][ T5736] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 199.154428][ T5955] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.185208][ T5955] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.216598][ T5955] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.231167][ T5955] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.274103][ T5808] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 199.408138][ T8984] netlink: 16 bytes leftover after parsing attributes in process `syz.2.700'. [ 199.432113][ T8901] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 199.513088][ T8978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.525529][ T5736] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 199.725634][ T8990] netlink: 48 bytes leftover after parsing attributes in process `syz.1.705'. [ 200.294306][ T8997] netlink: 36 bytes leftover after parsing attributes in process `syz.3.708'. [ 200.320575][ T8997] netlink: 36 bytes leftover after parsing attributes in process `syz.3.708'. [ 200.339902][ T8997] netlink: 31 bytes leftover after parsing attributes in process `syz.3.708'. [ 200.375552][ T5808] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 200.408309][ T5808] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 200.516647][ T9002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.709'. [ 200.754567][ T9004] syzkaller0: entered promiscuous mode [ 200.760955][ T9004] syzkaller0: entered allmulticast mode [ 200.912979][ T9013] syzkaller0: refused to change device tx_queue_len [ 201.110539][ T9021] netlink: 'syz.1.713': attribute type 1 has an invalid length. [ 201.125729][ T9021] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 201.141723][ T9022] syzkaller0: entered promiscuous mode [ 201.148300][ T9022] syzkaller0: entered allmulticast mode [ 201.159114][ T9022] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 201.362583][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 201.368700][ T5630] Bluetooth: hci1: command 0x0406 tx timeout [ 201.368732][ T5623] Bluetooth: hci2: command 0x0401 tx timeout [ 201.397520][ T9007] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 202.656764][ T9043] 8021q: adding VLAN 0 to HW filter on device eth0 [ 202.694437][ T9043] 8021q: adding VLAN 0 to HW filter on device eth1 [ 202.708814][ T9043] 8021q: adding VLAN 0 to HW filter on device eth2 [ 202.725367][ T9043] 8021q: adding VLAN 0 to HW filter on device eth3 [ 203.055908][ T9052] netlink: 'syz.1.723': attribute type 13 has an invalid length. [ 203.206151][ T9058] netlink: 'syz.2.724': attribute type 1 has an invalid length. [ 203.247102][ T9052] gretap0: refused to change device tx_queue_len [ 203.275659][ T9052] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 203.458837][ T9058] 8021q: adding VLAN 0 to HW filter on device bond3 [ 203.520553][ T9060] bond3: (slave veth0_to_bond): making interface the new active one [ 203.550805][ T9060] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 203.885268][ T9064] vlan0: entered promiscuous mode [ 204.032716][ T9070] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 204.156508][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 204.156525][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 204.498021][ T9089] syzkaller0: entered promiscuous mode [ 204.520444][ T9089] syzkaller0: entered allmulticast mode [ 204.545399][ T9089] tipc: Enabled bearer , priority 0 [ 204.568727][ T9088] tipc: Resetting bearer [ 204.622910][ T9088] tipc: Disabling bearer [ 206.008957][ T187] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.799128][ T187] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.895365][ T9164] __nla_validate_parse: 2 callbacks suppressed [ 206.895384][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.743'. [ 206.991515][ T9164] vxcan1: left allmulticast mode [ 207.301919][ T9164] vlan2: left allmulticast mode [ 207.311631][ T9164] bond1: left allmulticast mode [ 207.323502][ T9164] geneve2: left allmulticast mode [ 207.373310][ T9164] bond2: left promiscuous mode [ 207.378874][ T9164] bond2: left allmulticast mode [ 207.397279][ T9164] bridge2: left promiscuous mode [ 207.409479][ T9164] bridge2: left allmulticast mode [ 207.493329][ T9160] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 207.530313][ T9160] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 207.531240][ T35] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.584835][ T9160] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 207.632349][ T9174] tipc: Resetting bearer [ 207.656043][ T9174] tipc: Resetting bearer [ 207.898960][ T35] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.933564][ T35] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.948168][ T35] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.959658][ T9195] sit0: entered promiscuous mode [ 207.981796][ T9195] netlink: 'syz.3.748': attribute type 1 has an invalid length. [ 208.001073][ T9195] netlink: 1 bytes leftover after parsing attributes in process `syz.3.748'. [ 208.020848][ T5808] tipc: Resetting bearer [ 208.099604][ T9203] netlink: 64 bytes leftover after parsing attributes in process `syz.2.749'. [ 208.292339][ T9214] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 208.310234][ T9211] GUP no longer grows the stack in syz.3.751 (9211): 200000006000-20000000a000 (200000005000) [ 208.337174][ T9211] CPU: 1 UID: 0 PID: 9211 Comm: syz.3.751 Not tainted syzkaller #0 PREEMPT(full) [ 208.337202][ T9211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 208.337213][ T9211] Call Trace: [ 208.337221][ T9211] [ 208.337229][ T9211] dump_stack_lvl+0xe8/0x150 [ 208.337265][ T9211] __get_user_pages+0x238c/0x2720 [ 208.337300][ T9211] ? __gup_longterm_locked+0xc3b/0x15c0 [ 208.337349][ T9211] __gup_longterm_locked+0xd52/0x15c0 [ 208.337371][ T9211] ? lock_acquire+0x106/0x350 [ 208.337404][ T9211] ? sanity_check_pinned_pages+0x810/0x8d0 [ 208.337441][ T9211] gup_fast_fallback+0x1d8c/0x20e0 [ 208.337459][ T9211] ? __lock_acquire+0x683/0x2cf0 [ 208.337516][ T9211] ? __pfx_gup_fast_fallback+0x10/0x10 [ 208.337538][ T9211] ? is_valid_gup_args+0x11f/0x200 [ 208.337559][ T9211] ? pin_user_pages_fast+0x4d/0xb0 [ 208.337579][ T9211] iov_iter_extract_pages+0x3a1/0x690 [ 208.337617][ T9211] extract_iter_to_sg+0xeda/0x2610 [ 208.337658][ T9211] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 208.337682][ T9211] ? do_raw_spin_lock+0x12b/0x2f0 [ 208.337706][ T9211] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 208.337739][ T9211] ? __asan_memset+0x22/0x50 [ 208.337761][ T9211] hash_sendmsg+0x4fd/0x1060 [ 208.337798][ T9211] ? __pfx_hash_sendmsg+0x10/0x10 [ 208.337820][ T9211] sock_sendmsg_nosec+0x13a/0x180 [ 208.337847][ T9211] ____sys_sendmsg+0x54e/0x850 [ 208.337873][ T9211] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.337900][ T9211] ? import_iovec+0x73/0xa0 [ 208.337930][ T9211] ___sys_sendmsg+0x2a5/0x360 [ 208.337948][ T9211] ? __lock_acquire+0x683/0x2cf0 [ 208.337976][ T9211] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.338000][ T9211] ? preempt_schedule_common+0x82/0xd0 [ 208.338030][ T9211] ? preempt_schedule_thunk+0x16/0x40 [ 208.338080][ T9211] ? __fget_files+0x2a/0x420 [ 208.338111][ T9211] ? __fget_files+0x3a2/0x420 [ 208.338143][ T9211] __sys_sendmmsg+0x273/0x4d0 [ 208.338166][ T9211] ? __pfx___sys_sendmmsg+0x10/0x10 [ 208.338182][ T9211] ? do_futex+0x458/0x4e0 [ 208.338218][ T9211] ? fd_install+0x94/0x3d0 [ 208.338250][ T9211] ? rcu_is_watching+0x15/0xb0 [ 208.338283][ T9211] __x64_sys_sendmmsg+0xa0/0xc0 [ 208.338299][ T9211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.338316][ T9211] do_syscall_64+0x174/0x580 [ 208.338332][ T9211] ? trace_irq_disable+0x3b/0x140 [ 208.338351][ T9211] ? clear_bhb_loop+0x40/0x90 [ 208.338370][ T9211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.338386][ T9211] RIP: 0033:0x7ff05e39de99 [ 208.338402][ T9211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.338415][ T9211] RSP: 002b:00007ff05f2f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 208.338432][ T9211] RAX: ffffffffffffffda RBX: 00007ff05e625fa0 RCX: 00007ff05e39de99 [ 208.338444][ T9211] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000009 [ 208.338454][ T9211] RBP: 00007ff05e433eaf R08: 0000000000000000 R09: 0000000000000000 [ 208.338464][ T9211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.338473][ T9211] R13: 00007ff05e626038 R14: 00007ff05e625fa0 R15: 00007ffff76870b8 [ 208.338500][ T9211] [ 208.729845][ T9222] netlink: 'syz.2.753': attribute type 1 has an invalid length. [ 208.799726][ T9222] bond4: (slave dummy0): making interface the new active one [ 208.808817][ T9222] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 208.876866][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 208.978563][ T9222] bridge0: port 3(vlan2) entered disabled state [ 209.102786][ T9222] tipc: Resetting bearer [ 209.382875][ T9247] netlink: 'syz.0.757': attribute type 4 has an invalid length. [ 209.409284][ T9222] bond4: (slave dummy0): Releasing active interface [ 209.464882][ T9252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'. [ 209.584442][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.758'. [ 210.156523][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 211.733805][ T9222] bond3: (slave veth0_to_bond): Releasing active interface [ 211.819480][ T9222] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 211.854656][ T5810] lo speed is unknown, defaulting to 1000 [ 211.861217][ T5810] syz2: Port: 1 Link DOWN [ 211.904677][ T9257] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 212.077268][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 212.220642][ T9278] netlink: 'syz.3.763': attribute type 4 has an invalid length. [ 212.236119][ T9279] netlink: 24 bytes leftover after parsing attributes in process `syz.4.760'. [ 212.465020][ T9286] sit0: left promiscuous mode [ 212.589571][ T9286] bridge0: left promiscuous mode [ 212.634226][ T9286] ip6gre1: left promiscuous mode [ 212.671862][ T8921] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 212.685444][ T9303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'. [ 212.703610][ T9303] netlink: 32 bytes leftover after parsing attributes in process `syz.0.765'. [ 212.864482][ T9311] lo speed is unknown, defaulting to 1000 [ 213.116433][ T9320] netlink: 16 bytes leftover after parsing attributes in process `syz.4.769'. [ 213.194276][ T9320] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 213.206726][ T8921] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 213.822164][ T9356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.773'. [ 213.876866][ T8916] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 214.146672][ T8911] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 214.284591][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.776'. [ 214.320112][ T9370] block nbd0: Unsupported socket: should be TCP or UNIX. [ 214.426050][ T9376] macvlan0: mtu less than device minimum [ 214.488629][ T9368] lo speed is unknown, defaulting to 1000 [ 215.281358][ T9400] netlink: 36 bytes leftover after parsing attributes in process `syz.3.780'. [ 215.344063][ T9400] netlink: 36 bytes leftover after parsing attributes in process `syz.3.780'. [ 215.397176][ T9400] netlink: 31 bytes leftover after parsing attributes in process `syz.3.780'. [ 215.773955][ T9379] bridge0: port 3(vlan2) entered blocking state [ 215.780539][ T9379] bridge0: port 3(vlan2) entered forwarding state [ 215.797526][ T9379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.807323][ T9379] tipc: Resetting bearer [ 215.822324][ T9379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.902578][ T9379] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 215.933459][ T8901] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 215.944835][ T8901] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 215.953870][ T24] lo speed is unknown, defaulting to 1000 [ 215.969911][ T24] syz2: Port: 1 Link ACTIVE [ 215.999526][ T9412] netlink: 'syz.0.782': attribute type 12 has an invalid length. [ 216.120931][ T9423] bond1: option min_links: invalid value (18446744073709551612) [ 216.128946][ T9423] bond1: option min_links: allowed values 0 - 2147483647 [ 216.138141][ T9423] bond1 (unregistering): Released all slaves [ 216.877132][ T8906] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 216.945321][ T9466] netlink: 244 bytes leftover after parsing attributes in process `syz.0.791'. [ 216.959626][ T8906] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 217.052136][ T9471] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 217.239970][ T9476] __nla_validate_parse: 1 callbacks suppressed [ 217.239988][ T9476] netlink: 36 bytes leftover after parsing attributes in process `syz.3.793'. [ 217.243035][ T9474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.791'. [ 217.253585][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.794'. [ 217.273734][ T9476] netlink: 36 bytes leftover after parsing attributes in process `syz.3.793'. [ 217.285832][ T9476] netlink: 31 bytes leftover after parsing attributes in process `syz.3.793'. [ 217.320159][ T9479] netlink: 20 bytes leftover after parsing attributes in process `syz.1.794'. [ 217.544412][ T9491] netlink: 'syz.4.796': attribute type 1 has an invalid length. [ 217.561703][ T9488] lo speed is unknown, defaulting to 1000 [ 217.569648][ T9491] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.796'. [ 218.111545][ T9508] netlink: 'syz.3.808': attribute type 1 has an invalid length. [ 218.141998][ T9508] netlink: 'syz.3.808': attribute type 2 has an invalid length. [ 218.184717][ T9508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.808'. [ 218.300232][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.799'. [ 218.363948][ T9509] vlan0: entered promiscuous mode [ 218.376901][ T9509] bond0: entered promiscuous mode [ 218.561395][ T9522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.801'. [ 219.008777][ T9537] netlink: 'syz.0.804': attribute type 1 has an invalid length. [ 219.119697][ T9553] tipc: Enabled bearer , priority 0 [ 219.140261][ T9553] tipc: Resetting bearer [ 219.171539][ T9551] tipc: Disabling bearer [ 220.082094][ T9591] netlink: 'syz.0.813': attribute type 2 has an invalid length. [ 220.227435][ T9602] ieee802154 phy1 wpan1: encryption failed: -22 [ 221.441417][ T9632] tipc: Enabled bearer , priority 0 [ 221.470874][ T9632] tipc: Resetting bearer [ 221.479305][ T9636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.510957][ T9629] tipc: Disabling bearer [ 221.872406][ T9652] xt_l2tp: invalid flags combination: 8 [ 221.899032][ T9652] netlink: 'syz.0.822': attribute type 1 has an invalid length. [ 221.922076][ T9646] netlink: 'syz.2.823': attribute type 1 has an invalid length. [ 221.950623][ T9652] gre0: entered promiscuous mode [ 221.965605][ T9652] gre0: entered allmulticast mode [ 222.296180][ T9665] __nla_validate_parse: 15 callbacks suppressed [ 222.296200][ T9665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.824'. [ 222.433750][ T9667] syzkaller0: entered promiscuous mode [ 222.447386][ T9667] syzkaller0: entered allmulticast mode [ 222.477231][ T9667] tipc: Enabled bearer , priority 0 [ 222.518162][ T9667] tipc: Resetting bearer [ 222.552075][ T9664] tipc: Resetting bearer [ 222.620696][ T9664] tipc: Disabling bearer [ 222.710971][ T9681] syzkaller0: entered promiscuous mode [ 222.747522][ T9681] syzkaller0: entered allmulticast mode [ 223.008897][ T9685] syzkaller0: entered promiscuous mode [ 223.024825][ T9685] syzkaller0: entered allmulticast mode [ 223.038802][ T9694] (: renamed from bridge_slave_0 (while UP) [ 225.516505][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 225.588575][ T9710] netlink: 20 bytes leftover after parsing attributes in process `syz.2.843'. [ 225.598531][ T8906] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 225.643182][ T9713] netlink: 36 bytes leftover after parsing attributes in process `syz.4.834'. [ 225.673826][ T9713] netlink: 36 bytes leftover after parsing attributes in process `syz.4.834'. [ 225.694715][ T9720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.836'. [ 225.696464][ T9713] netlink: 31 bytes leftover after parsing attributes in process `syz.4.834'. [ 225.724259][ T9716] netlink: 36 bytes leftover after parsing attributes in process `syz.1.835'. [ 225.768997][ T9716] netlink: 36 bytes leftover after parsing attributes in process `syz.1.835'. [ 225.789704][ T9716] netlink: 31 bytes leftover after parsing attributes in process `syz.1.835'. [ 225.854412][ T9720] 8021q: adding VLAN 0 to HW filter on device bond3 [ 225.893188][ T9724] tipc: New replicast peer: 255.255.255.255 [ 225.905340][ T9724] tipc: Enabled bearer , priority 10 [ 225.918401][ T9726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.837'. [ 226.063634][ T9739] netlink: 'syz.1.840': attribute type 2 has an invalid length. [ 226.109187][ T9739] netlink: 'syz.1.840': attribute type 2 has an invalid length. [ 226.159204][ T9735] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 226.481322][ T9755] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 226.499127][ T8911] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 226.578926][ T9749] batadv0 (unregistering): left allmulticast mode [ 226.866797][ T8916] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 227.436958][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 229.444941][ T9783] __nla_validate_parse: 10 callbacks suppressed [ 229.444961][ T9783] netlink: 36 bytes leftover after parsing attributes in process `syz.0.850'. [ 229.490508][ T9783] netlink: 36 bytes leftover after parsing attributes in process `syz.0.850'. [ 229.500066][ T9783] netlink: 31 bytes leftover after parsing attributes in process `syz.0.850'. [ 229.510953][ T9787] netlink: 36 bytes leftover after parsing attributes in process `syz.1.851'. [ 229.528076][ T9787] netlink: 36 bytes leftover after parsing attributes in process `syz.1.851'. [ 229.555830][ T9787] netlink: 31 bytes leftover after parsing attributes in process `syz.1.851'. [ 229.687694][ T9797] syzkaller0: entered promiscuous mode [ 229.691482][ T9794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.853'. [ 229.708321][ T9797] syzkaller0: entered allmulticast mode [ 229.853070][ T9806] dvmrp0: entered allmulticast mode [ 229.882289][ T9802] lo speed is unknown, defaulting to 1000 [ 230.041750][ T9811] lo speed is unknown, defaulting to 1000 [ 230.508501][ T9830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.862'. [ 230.797355][ T9839] gre0: left promiscuous mode [ 230.899368][ T9839] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.928601][ T9839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.081408][ T9839] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 231.108089][ T9839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.127562][ T9839] veth1_vlan: left promiscuous mode [ 231.135345][ T9839] veth0_vlan: left promiscuous mode [ 231.143825][ T9839] veth0_vlan: entered promiscuous mode [ 231.150966][ T9839] veth1_vlan: entered promiscuous mode [ 231.164014][ T9839] veth1_macvtap: left promiscuous mode [ 231.171802][ T9839] veth0_macvtap: left promiscuous mode [ 231.180500][ T9839] veth0_macvtap: entered promiscuous mode [ 231.189228][ T9839] veth1_macvtap: entered promiscuous mode [ 231.229338][ T9839] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 231.258974][ T9839] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 231.274535][ T9839] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 231.297835][ T9839] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 231.310100][ T10] hid-generic 0005:0007:0009.0001: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 231.335440][ T9839] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.379862][ T9839] 8021q: adding VLAN 0 to HW filter on device bond2 [ 231.623766][ T9848] netlink: 36 bytes leftover after parsing attributes in process `syz.1.867'. [ 231.654364][ T9848] netlink: 36 bytes leftover after parsing attributes in process `syz.1.867'. [ 231.815215][ T5959] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.853227][ T5959] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.912102][ T5959] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.951817][ T5959] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.031811][ T9868] syzkaller0: entered promiscuous mode [ 232.085533][ T9868] syzkaller0: entered allmulticast mode [ 232.585763][ T9890] bond5: option min_links: invalid value (18446744073709551612) [ 232.599448][ T9890] bond5: option min_links: allowed values 0 - 2147483647 [ 232.641860][ T9890] bond5 (unregistering): Released all slaves [ 232.705465][ T9887] lo speed is unknown, defaulting to 1000 [ 232.731228][ T9894] debugfs: '!' already exists in 'ieee80211' [ 233.118392][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.127879][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.136388][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.144858][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.337566][ T9924] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.372094][ T9924] bridge0: left allmulticast mode [ 234.996246][ T9977] __nla_validate_parse: 5 callbacks suppressed [ 235.003142][ T9977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.886'. [ 235.284292][ T9924] : left allmulticast mode [ 235.292693][ T9924] macvlan2: left allmulticast mode [ 235.331526][ T9924] veth1: left allmulticast mode [ 235.368378][ T9924] ip6gre1: left allmulticast mode [ 235.445382][ T9944] gretap0: entered promiscuous mode [ 235.534069][ T9966] syzkaller0: entered promiscuous mode [ 235.539695][ T9966] syzkaller0: entered allmulticast mode [ 235.553168][ T5953] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 235.562477][ T5953] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 235.574719][ T5953] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 235.599425][ T5953] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 235.677235][ T5953] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 235.686456][ T5953] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 235.705890][ T5953] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 235.725201][ T5953] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 235.875182][ T9988] batman_adv: batadv0: Adding interface: dummy0 [ 235.908572][ T9988] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.967581][ T9988] batman_adv: batadv0: Interface activated: dummy0 [ 236.104181][ T9999] netlink: 80 bytes leftover after parsing attributes in process `syz.3.891'. [ 236.153211][T10000] batadv0: mtu less than device minimum [ 236.184005][T10000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 236.195831][T10000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 236.207582][T10000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 236.219447][T10000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 236.231187][T10000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 236.550328][T10010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.893'. [ 236.834678][T10022] netlink: 32 bytes leftover after parsing attributes in process `syz.2.897'. [ 236.877969][T10022] syzkaller0: entered promiscuous mode [ 236.889174][T10022] syzkaller0: entered allmulticast mode [ 236.971653][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.898'. [ 237.013238][T10028] ±ÿ-œL5³ŸÅQ: entered allmulticast mode [ 237.135593][T10023] ±ÿ-œL5³ŸÅQ: left allmulticast mode [ 237.484472][T10051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.901'. [ 237.843058][T10034] bridge0: port 3(vlan2) entered disabled state [ 237.890554][T10034] tipc: Resetting bearer [ 237.900915][T10034] batman_adv: batadv0: Interface deactivated: dummy0 [ 238.380328][ T8916] lo speed is unknown, defaulting to 1000 [ 238.388614][T10045] netlink: 'syz.3.901': attribute type 13 has an invalid length. [ 238.401296][ T8916] syz2: Port: 1 Link DOWN [ 238.523485][T10059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.904'. [ 238.552670][ T5953] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.583290][ T5953] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.609890][ T5953] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.623744][ T5953] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.642133][ T5953] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.651445][ T5953] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.697577][ T5953] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.734107][ T5953] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.767595][T10048] lo speed is unknown, defaulting to 1000 [ 238.871048][T10067] netlink: 'syz.2.907': attribute type 2 has an invalid length. [ 238.891906][T10067] netlink: 'syz.2.907': attribute type 2 has an invalid length. [ 239.009063][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.909'. [ 239.151770][ T81] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 239.170686][ T81] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 239.229624][T10088] lo speed is unknown, defaulting to 1000 [ 239.766657][T10118] xt_CT: You must specify a L4 protocol and not use inversions on it [ 239.941799][T10116] syzkaller1: entered promiscuous mode [ 239.972999][T10116] syzkaller1: entered allmulticast mode [ 240.000218][T10129] netlink: 'syz.1.917': attribute type 14 has an invalid length. [ 240.570850][ T5281] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 241.070615][T10142] tipc: Started in network mode [ 241.075529][T10142] tipc: Node identity 7f000001, cluster identity 4711 [ 241.117370][T10142] tipc: Enabled bearer , priority 10 [ 241.140402][T10142] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 241.162721][T10142] tipc: Enabled bearer , priority 10 [ 241.180827][T10164] netlink: 296 bytes leftover after parsing attributes in process `syz.0.925'. [ 241.223970][T10145] tipc: Enabling of bearer rejected, already enabled [ 241.319281][T10162] netlink: 'syz.4.924': attribute type 1 has an invalid length. [ 241.363417][T10162] netlink: 1 bytes leftover after parsing attributes in process `syz.4.924'. [ 241.554240][T10171] netlink: 36 bytes leftover after parsing attributes in process `syz.2.927'. [ 241.579035][T10171] netlink: 36 bytes leftover after parsing attributes in process `syz.2.927'. [ 241.598561][T10171] netlink: 31 bytes leftover after parsing attributes in process `syz.2.927'. [ 241.706226][T10174] netlink: 36 bytes leftover after parsing attributes in process `syz.3.928'. [ 241.736598][T10174] netlink: 36 bytes leftover after parsing attributes in process `syz.3.928'. [ 241.766748][T10174] netlink: 31 bytes leftover after parsing attributes in process `syz.3.928'. [ 242.139059][T10188] netlink: 60 bytes leftover after parsing attributes in process `syz.1.933'. [ 242.201284][T10188] tipc: Resetting bearer [ 242.283278][T10188] 8021q: adding VLAN 0 to HW filter on device bond3 [ 242.306229][ T8906] tipc: Node number set to 2130706433 [ 242.535315][T10214] netlink: 'syz.0.936': attribute type 1 has an invalid length. [ 242.650412][T10214] 8021q: adding VLAN 0 to HW filter on device bond4 [ 242.669565][T10218] netlink: 36 bytes leftover after parsing attributes in process `syz.1.939'. [ 242.994147][T10210] netlink: 'syz.0.936': attribute type 4 has an invalid length. [ 243.991143][T10289] netlink: 'syz.2.946': attribute type 9 has an invalid length. [ 244.074141][ T5281] veth0_macvtap: left promiscuous mode [ 244.777086][T10318] sctp: [Deprecated]: syz.0.952 (pid 10318) Use of int in max_burst socket option. [ 244.777086][T10318] Use struct sctp_assoc_value instead [ 245.109902][T10335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.135522][T10324] lo speed is unknown, defaulting to 1000 [ 245.509170][T10345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.526129][T10350] netlink: 'syz.1.957': attribute type 2 has an invalid length. [ 245.552740][T10345] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.644657][T10345] veth1_to_batadv: left promiscuous mode [ 245.658492][T10345] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 245.673476][T10345] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.730776][T10345] veth1_vlan: left promiscuous mode [ 245.784767][T10345] veth0_vlan: left promiscuous mode [ 245.825056][T10345] veth0_vlan: entered promiscuous mode [ 245.866884][T10345] veth1_vlan: entered promiscuous mode [ 245.955746][T10345] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 245.994703][T10345] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 246.037834][T10345] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 246.082155][T10345] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 246.113823][T10345] veth1_to_batadv: entered promiscuous mode [ 246.278264][T10345] gretap0: entered promiscuous mode [ 246.433992][T10350] : entered promiscuous mode [ 246.483997][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.491239][ T5955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.522111][T10382] __nla_validate_parse: 8 callbacks suppressed [ 246.522131][T10382] netlink: 36 bytes leftover after parsing attributes in process `syz.4.960'. [ 246.530482][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.545090][ T5955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.572807][T10382] netlink: 60 bytes leftover after parsing attributes in process `syz.4.960'. [ 246.677531][ T5808] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.702078][ T5959] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.749457][T10382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.960'. [ 246.784362][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.960'. [ 246.787371][T10390] IPv6: NLM_F_CREATE should be specified when creating new route [ 246.906727][T10395] netlink: 'syz.1.962': attribute type 1 has an invalid length. [ 246.917802][T10395] netlink: 'syz.1.962': attribute type 2 has an invalid length. [ 247.015433][ T5959] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.041961][ T5959] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.140902][T10388] bond5: entered promiscuous mode [ 247.156615][T10388] bond5: entered allmulticast mode [ 247.181956][T10388] 8021q: adding VLAN 0 to HW filter on device bond5 [ 247.189582][T10398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.962'. [ 247.559629][T10410] syzkaller0: entered promiscuous mode [ 247.569876][T10410] syzkaller0: entered allmulticast mode [ 247.889374][T10433] netlink: 'syz.0.967': attribute type 1 has an invalid length. [ 247.947788][T10433] netlink: 224 bytes leftover after parsing attributes in process `syz.0.967'. [ 248.028492][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.967'. [ 248.089320][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.967'. [ 248.372821][T10433] netlink: 220 bytes leftover after parsing attributes in process `syz.0.967'. [ 248.412125][T10438] bond5: option ad_actor_sys_prio: invalid value (0) [ 248.458570][T10438] bond5: option ad_actor_sys_prio: allowed values 1 - 65535 [ 248.488708][T10438] bond5 (unregistering): Released all slaves [ 248.544144][T10433] netlink: 120 bytes leftover after parsing attributes in process `syz.0.967'. [ 248.915493][T10450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.983240][ T5955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.004595][T10464] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 249.007777][ T5955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.742349][T10482] lo speed is unknown, defaulting to 1000 [ 250.498066][T10509] lo speed is unknown, defaulting to 1000 [ 251.152629][T10537] vlan0: entered promiscuous mode [ 251.165108][T10537] hsr0: entered promiscuous mode [ 251.170501][T10537] vlan0: entered allmulticast mode [ 251.175772][T10537] hsr0: entered allmulticast mode [ 251.181736][T10537] hsr_slave_0: entered allmulticast mode [ 251.187549][T10537] hsr_slave_1: entered allmulticast mode [ 251.229371][T10537] hsr_slave_0: left promiscuous mode [ 251.259828][T10537] hsr_slave_1: left promiscuous mode [ 251.755328][T10547] __nla_validate_parse: 12 callbacks suppressed [ 251.755348][T10547] netlink: 144 bytes leftover after parsing attributes in process `syz.4.986'. [ 251.829720][T10566] netlink: 28 bytes leftover after parsing attributes in process `syz.0.990'. [ 252.015523][T10574] lo: entered allmulticast mode [ 252.034179][T10574] tunl0: entered allmulticast mode [ 252.040261][T10574] gre0: entered allmulticast mode [ 252.046020][T10574] gretap0: entered allmulticast mode [ 252.052228][T10574] erspan0: entered allmulticast mode [ 252.058212][T10574] ip_vti0: entered allmulticast mode [ 252.064101][T10574] ip6_vti0: entered allmulticast mode [ 252.070177][T10574] sit0: entered allmulticast mode [ 252.076252][T10574] ip6tnl0: entered allmulticast mode [ 252.083839][T10574] ip6gre0: entered allmulticast mode [ 252.099509][T10574] syz_tun: entered allmulticast mode [ 252.112076][T10574] vcan0: entered allmulticast mode [ 252.128838][T10574] bond0: entered allmulticast mode [ 252.135170][T10574] team0: entered allmulticast mode [ 252.140897][T10574] xfrm0: entered allmulticast mode [ 252.151853][T10574] tipc: Resetting bearer [ 252.157598][T10574] dummy0: entered allmulticast mode [ 252.178807][T10574] nlmon0: entered allmulticast mode [ 252.186027][T10581] netlink: 20 bytes leftover after parsing attributes in process `syz.4.994'. [ 252.200436][T10574] vxcan0: entered allmulticast mode [ 252.214094][T10574] vxcan1: entered allmulticast mode [ 252.225583][T10574] wg0: entered allmulticast mode [ 252.234538][T10574] wg1: entered allmulticast mode [ 252.245049][T10574] wg2: entered allmulticast mode [ 252.254671][T10574] veth0_to_bridge: entered allmulticast mode [ 252.276898][T10574] (: entered allmulticast mode [ 252.308555][T10574] veth1_to_bridge: entered allmulticast mode [ 252.349457][T10574] bridge_slave_1: entered allmulticast mode [ 252.364438][T10574] veth0_to_bond: entered allmulticast mode [ 252.383917][T10574] bond_slave_0: entered allmulticast mode [ 252.413593][T10574] veth1_to_bond: entered allmulticast mode [ 252.431231][T10574] bond_slave_1: entered allmulticast mode [ 252.460707][T10574] veth0_to_team: entered allmulticast mode [ 252.484536][T10574] team_slave_0: entered allmulticast mode [ 252.510865][T10574] veth1_to_team: entered allmulticast mode [ 252.518205][ T5629] udevd[5629]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 252.534397][T10574] team_slave_1: entered allmulticast mode [ 252.560973][T10574] veth0_to_batadv: entered allmulticast mode [ 252.573900][ T6370] udevd[6370]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 252.588832][T10574] batadv_slave_0: entered allmulticast mode [ 252.605708][T10574] veth1_to_batadv: entered allmulticast mode [ 252.617803][T10574] batadv_slave_1: entered allmulticast mode [ 252.669274][T10574] veth0_to_hsr: entered allmulticast mode [ 252.700180][T10574] hsr_slave_0: entered allmulticast mode [ 252.710320][T10574] veth1_to_hsr: entered allmulticast mode [ 252.718310][T10574] hsr_slave_1: entered allmulticast mode [ 252.724894][T10574] hsr0: entered allmulticast mode [ 252.731194][T10574] veth1_virt_wifi: entered allmulticast mode [ 252.739380][T10574] veth0_virt_wifi: entered allmulticast mode [ 252.746168][T10574] veth1_vlan: entered allmulticast mode [ 252.753691][T10574] veth0_vlan: entered allmulticast mode [ 252.772940][T10574] vlan0: entered allmulticast mode [ 252.787790][T10574] vlan1: entered allmulticast mode [ 252.813481][T10574] macvlan0: entered allmulticast mode [ 252.835684][T10574] macvlan1: entered allmulticast mode [ 252.856096][T10574] ipvlan0: entered allmulticast mode [ 252.877712][T10574] ipvlan1: entered allmulticast mode [ 252.903940][T10574] geneve0: entered allmulticast mode [ 252.949499][T10574] geneve1: entered allmulticast mode [ 252.981180][T10574] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 253.016199][T10574] ip6tnl1: entered allmulticast mode [ 253.025879][T10574] bond1: entered allmulticast mode [ 253.031509][T10574] bridge1: entered allmulticast mode [ 253.060574][T10574] bond2: entered allmulticast mode [ 253.066087][T10574] syzkaller1: entered allmulticast mode [ 253.072581][T10574] geneve2: entered allmulticast mode [ 253.078965][T10574] ip6gre1: entered allmulticast mode [ 253.084914][T10574] gre1: entered allmulticast mode [ 253.091396][T10574] ipip0: entered allmulticast mode [ 253.097542][T10574] netdevsim netdevsim1 eth0: entered allmulticast mode [ 253.105536][T10574] netdevsim netdevsim1 eth1: entered allmulticast mode [ 253.114789][T10574] netdevsim netdevsim1 eth2: entered allmulticast mode [ 253.124822][T10574] netdevsim netdevsim1 eth3: entered allmulticast mode [ 253.133787][T10574] bond3: entered allmulticast mode [ 253.140363][T10574] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode [ 253.148884][T10574] ip6gretap0: entered allmulticast mode [ 253.155164][T10574] ip6tnl2: entered allmulticast mode [ 253.163302][T10574] : entered allmulticast mode [ 253.316072][T10614] netlink: 180 bytes leftover after parsing attributes in process `syz.1.998'. [ 253.344399][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.998'. [ 253.371094][T10616] netlink: 36 bytes leftover after parsing attributes in process `syz.4.999'. [ 253.380330][T10616] netlink: 36 bytes leftover after parsing attributes in process `syz.4.999'. [ 253.390888][T10616] netlink: 31 bytes leftover after parsing attributes in process `syz.4.999'. [ 254.138095][T10646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1006'. [ 254.161148][T10642] lo speed is unknown, defaulting to 1000 [ 254.209431][ T5626] block nbd2: Receive control failed (result -107) [ 254.643702][T10660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1008'. [ 254.973138][T10680] netlink: 'syz.1.1012': attribute type 1 has an invalid length. [ 255.350217][T10680] 8021q: adding VLAN 0 to HW filter on device bond4 [ 255.415726][T10684] vlan2: entered allmulticast mode [ 255.422618][T10684] bond4: entered allmulticast mode [ 255.597985][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.701252][T10696] syzkaller0: entered promiscuous mode [ 255.711273][T10696] syzkaller0: entered allmulticast mode [ 256.048653][T10714] smbdirect: ib_dev[syz2] removed [ 257.903523][T10759] net_ratelimit: 14 callbacks suppressed [ 257.903544][T10759] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 259.085435][T10718] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 259.204397][T10767] __nla_validate_parse: 6 callbacks suppressed [ 259.204416][T10767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1023'. [ 259.249851][T10769] netlink: 'syz.0.1024': attribute type 1 has an invalid length. [ 259.271943][T10767] xt_TCPMSS: Only works on TCP SYN packets [ 259.283149][T10769] netlink: 'syz.0.1024': attribute type 2 has an invalid length. [ 259.315177][T10769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1024'. [ 259.595212][T10777] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.668100][T10784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1028'. [ 259.713606][T10767] bridge_slave_1: left allmulticast mode [ 259.721314][T10767] bridge_slave_1: left promiscuous mode [ 259.741173][T10767] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.752537][T10767] bridge_slave_0: left allmulticast mode [ 259.758877][T10767] bridge_slave_0: left promiscuous mode [ 259.764799][T10767] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.814412][T10784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1028'. [ 259.945088][T10791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1031'. [ 260.013763][T10799] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1033'. [ 260.024155][T10799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1033'. [ 260.035884][T10799] veth1_macvtap: left promiscuous mode [ 260.267459][T10804] syzkaller0: entered promiscuous mode [ 260.273190][T10804] syzkaller0: entered allmulticast mode [ 260.354700][T10810] netlink: 'syz.2.1036': attribute type 13 has an invalid length. [ 260.485266][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.504305][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.514800][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.524366][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.548020][T10816] x_tables: duplicate underflow at hook 3 [ 260.598007][T10814] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1036'. [ 260.639380][T10824] netlink: 'syz.0.1038': attribute type 1 has an invalid length. [ 260.656514][T10824] netlink: 'syz.0.1038': attribute type 2 has an invalid length. [ 260.754007][T10828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1038'. [ 260.925718][T10833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1040'. [ 261.439766][T10858] syzkaller0: entered promiscuous mode [ 261.455395][T10858] syzkaller0: entered allmulticast mode [ 261.479349][T10858] tipc: Enabled bearer , priority 0 [ 261.500385][T10858] tipc: Resetting bearer [ 261.687607][T10856] tipc: Resetting bearer [ 261.737468][T10856] tipc: Disabling bearer [ 261.942575][T10866] syzkaller0: entered promiscuous mode [ 261.957848][T10866] syzkaller0: entered allmulticast mode [ 261.979618][T10868] netlink: 'syz.0.1049': attribute type 1 has an invalid length. [ 262.002677][T10868] netlink: 'syz.0.1049': attribute type 2 has an invalid length. [ 262.828595][T10883] bond5: left allmulticast mode [ 263.314509][T10907] netlink: 'syz.3.1057': attribute type 1 has an invalid length. [ 263.371465][T10902] Bluetooth: MGMT ver 1.23 [ 263.551356][T10907] 8021q: adding VLAN 0 to HW filter on device bond6 [ 263.641484][T10912] bond6: (slave geneve3): making interface the new active one [ 263.676945][T10912] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 263.704381][T10896] netlink: 'syz.3.1057': attribute type 4 has an invalid length. [ 263.762614][ T5808] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.800440][ T5808] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.825134][T10929] tipc: Enabling of bearer rejected, failed to enable media [ 263.851009][ T5808] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.326166][T10957] netlink: 'syz.3.1060': attribute type 4 has an invalid length. [ 264.398272][T10961] __nla_validate_parse: 5 callbacks suppressed [ 264.398290][T10961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1060'. [ 264.482423][T10960] netlink: 'syz.4.1059': attribute type 9 has an invalid length. [ 264.612947][T10957] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1060'. [ 264.624346][T10963] syzkaller0: entered promiscuous mode [ 264.645544][T10963] syzkaller0: entered allmulticast mode [ 264.670243][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.164837][T10976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.174569][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.194601][T10974] block nbd3: server does not support multiple connections per device. [ 265.219769][T10976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.241906][T10976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.253995][T10974] block nbd3: shutting down sockets [ 265.272465][T10976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.539657][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.550121][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.596800][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.867534][ T3368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.994896][T11001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1071'. [ 266.231693][T11001] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1071'. [ 266.286849][T11001] batman_adv: batadv0: Removing interface: dummy0 [ 266.307221][T11006] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1071'. [ 266.355283][T11007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1072'. [ 266.433968][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1071'. [ 266.465179][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1071'. [ 266.499184][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1071'. [ 266.537108][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1071'. [ 266.698985][T11018] syzkaller0: entered promiscuous mode [ 266.710994][T11018] syzkaller0: entered allmulticast mode [ 266.750314][T11018] tipc: Enabled bearer , priority 0 [ 266.777161][T11015] tipc: Resetting bearer [ 267.062728][T11025] syzkaller0: entered promiscuous mode [ 267.069402][T11025] syzkaller0: entered allmulticast mode [ 267.092596][T11026] syzkaller0: entered promiscuous mode [ 267.098342][T11026] syzkaller0: entered allmulticast mode [ 267.276622][ T5626] Bluetooth: hci4: command 0x0406 tx timeout [ 267.397192][T11014] tipc: Resetting bearer [ 267.478724][T11035] vcan0: tx drop: invalid da for name 0x0000000200000000 [ 267.489192][T11014] tipc: Disabling bearer [ 267.671809][T11048] virt_wifi0 speed is unknown, defaulting to 1000 [ 267.691278][T11048] virt_wifi0 speed is unknown, defaulting to 1000 [ 267.721977][T11048] virt_wifi0 speed is unknown, defaulting to 1000 [ 267.749479][T11048] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 267.834038][T11048] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 267.941231][T11048] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 268.015079][T11048] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 268.146563][T11048] virt_wifi0 speed is unknown, defaulting to 1000 [ 268.180248][T11048] virt_wifi0 speed is unknown, defaulting to 1000 [ 268.205581][T11048] virt_wifi0 speed is unknown, defaulting to 1000 [ 268.223082][T11062] netlink: 'syz.4.1089': attribute type 1 has an invalid length. [ 268.241696][T11048] virt_wifi0 speed is unknown, defaulting to 1000 [ 268.266022][T11048] virt_wifi0 speed is unknown, defaulting to 1000 [ 268.674571][T11078] syzkaller0: entered promiscuous mode [ 268.698315][T11078] syzkaller0: entered allmulticast mode [ 269.104938][T11095] netlink: 'syz.4.1097': attribute type 1 has an invalid length. [ 269.118615][T11095] netlink: 'syz.4.1097': attribute type 2 has an invalid length. [ 270.336648][ T13] net_ratelimit: 4 callbacks suppressed [ 270.336666][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.456653][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.623380][T11085] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 271.779014][T11115] __nla_validate_parse: 10 callbacks suppressed [ 271.779032][T11115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1103'. [ 272.019560][T11115] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1103'. [ 272.230675][T11135] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1107'. [ 272.256550][T11122] sit0: entered promiscuous mode [ 272.268198][T11138] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1107'. [ 272.278125][T11122] netlink: 'syz.4.1106': attribute type 1 has an invalid length. [ 272.312339][T11122] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1106'. [ 272.424026][T11126] nbd: nbd2 already in use [ 272.433325][T11120] block nbd2: NBD_DISCONNECT [ 272.451992][T11120] block nbd2: Send disconnect failed -32 [ 272.470467][T11120] block nbd2: shutting down sockets [ 272.556639][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.849089][T11156] netlink: 'syz.3.1112': attribute type 1 has an invalid length. [ 272.885560][T11156] netlink: 'syz.3.1112': attribute type 2 has an invalid length. [ 272.927958][T11156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1112'. [ 273.044948][T11169] netlink: 'syz.0.1115': attribute type 1 has an invalid length. [ 273.083081][T11172] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 273.155720][T11169] bond5: entered promiscuous mode [ 273.162442][T11169] bond5: entered allmulticast mode [ 273.171731][T11169] 8021q: adding VLAN 0 to HW filter on device bond5 [ 273.182085][T11156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.192723][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.219239][T11185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1114'. [ 273.277695][T11170] gretap0: left promiscuous mode [ 273.363225][T11170] bridge0: left promiscuous mode [ 273.371630][T11170] vlan2: left promiscuous mode [ 273.383520][T11170] geneve0: left promiscuous mode [ 273.399690][T11170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.418669][T11170] tipc: Resetting bearer [ 273.439658][T11170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.549696][T11170] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 273.569711][T11170] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.601684][T11170] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 273.641465][T11176] erspan2: entered allmulticast mode [ 273.665736][T11176] bond5: (slave erspan2): making interface the new active one [ 273.673448][T11176] erspan2: entered promiscuous mode [ 273.682495][T11176] bond5: (slave erspan2): Enslaving as an active interface with an up link [ 273.687047][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.691532][T11163] ip6gre0: left allmulticast mode [ 273.784232][T11181] syz.0.1115 (11181) used obsolete PPPIOCDETACH ioctl [ 273.887675][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1116'. [ 273.961417][T11197] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1116'. [ 273.984359][T11199] syzkaller0: entered promiscuous mode [ 273.998109][T11199] syzkaller0: entered allmulticast mode [ 274.191018][T11212] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 274.749343][T11227] bond5 (unregistering): Released all slaves [ 274.852088][T11235] xt_CT: You must specify a L4 protocol and not use inversions on it [ 274.866668][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.887741][T11237] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1126'. [ 274.982235][T11244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.108443][T11248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.125809][T11249] netlink: 'syz.4.1129': attribute type 1 has an invalid length. [ 275.145087][T11249] netlink: 'syz.4.1129': attribute type 2 has an invalid length. [ 275.543821][T11259] xt_hashlimit: max too large, truncated to 1048576 [ 275.903634][T11270] sit0: entered promiscuous mode [ 275.912951][T11270] netlink: 'syz.3.1134': attribute type 1 has an invalid length. [ 275.998473][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.726608][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.739521][T11284] syzkaller1: left allmulticast mode [ 277.070513][T11294] __nla_validate_parse: 3 callbacks suppressed [ 277.070540][T11294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1141'. [ 277.100211][T11291] bridge3: entered promiscuous mode [ 277.114389][T11291] bridge3: entered allmulticast mode [ 277.137011][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.153974][T11290] virt_wifi0 speed is unknown, defaulting to 1000 [ 277.275409][T11299] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1143'. [ 277.330949][T11299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.343914][T11296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.523649][T11306] netlink: 'syz.2.1144': attribute type 49 has an invalid length. [ 278.066238][T11314] netlink: 'syz.4.1147': attribute type 1 has an invalid length. [ 278.116953][T11314] netlink: 'syz.4.1147': attribute type 2 has an invalid length. [ 278.127427][T11317] netlink: 'syz.3.1146': attribute type 1 has an invalid length. [ 278.142585][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1147'. [ 278.147793][T11317] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1146'. [ 278.277210][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.459612][T11325] tipc: Enabled bearer , priority 2 [ 278.574873][T11328] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1151'. [ 279.167083][T11337] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1154'. [ 279.312645][T11342] netlink: 16170 bytes leftover after parsing attributes in process `syz.3.1156'. [ 279.418951][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.445656][T11349] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1157'. [ 279.598085][T11349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.607436][ T5624] block nbd2: Receive control failed (result -32) [ 279.615686][ T5632] block nbd2: Receive control failed (result -32) [ 279.622765][ T5623] block nbd2: Receive control failed (result -32) [ 279.708403][ T5722] virt_wifi0 speed is unknown, defaulting to 1000 [ 279.727174][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.971353][T11356] netlink: 'syz.4.1158': attribute type 1 has an invalid length. [ 279.986420][T11356] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1158'. [ 279.997093][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.075290][T11263] Set syz1 is full, maxelem 65536 reached [ 280.254186][T11361] xt_hashlimit: size too large, truncated to 1048576 [ 280.291492][T11363] netlink: 'syz.1.1160': attribute type 1 has an invalid length. [ 280.318448][T11363] netlink: 'syz.1.1160': attribute type 2 has an invalid length. [ 280.343897][T11363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1160'. [ 280.387810][T11365] netlink: 'syz.0.1159': attribute type 11 has an invalid length. [ 280.477222][ T5626] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 280.549082][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.568999][T11373] dvmrp0: entered allmulticast mode [ 280.583169][T11370] virt_wifi0 speed is unknown, defaulting to 1000 [ 280.663320][T11372] virt_wifi0 speed is unknown, defaulting to 1000 [ 280.720394][ T5626] Bluetooth: hci4: command 0x0406 tx timeout [ 280.863408][T11380] netlink: 'syz.4.1164': attribute type 1 has an invalid length. [ 280.873535][T11380] netlink: 'syz.4.1164': attribute type 2 has an invalid length. [ 281.353367][T11388] netlink: 'syz.0.1166': attribute type 1 has an invalid length. [ 281.667275][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.867938][T11406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.268655][T11409] netlink: 'syz.3.1172': attribute type 1 has an invalid length. [ 282.288099][T11409] __nla_validate_parse: 4 callbacks suppressed [ 282.288118][T11409] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1172'. [ 282.328091][T11419] tipc: Enabled bearer , priority 2 [ 282.537715][T11422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1175'. [ 282.802729][T11438] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1177'. [ 282.813651][T11437] netlink: 'syz.1.1178': attribute type 1 has an invalid length. [ 282.827014][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.863576][T11437] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1178'. [ 282.898106][T11437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1178'. [ 283.095618][T11445] syzkaller0: entered promiscuous mode [ 283.114004][T11445] syzkaller0: entered allmulticast mode [ 283.246673][T11452] tipc: Enabled bearer , priority 0 [ 283.277366][T11443] netlink: 'syz.0.1179': attribute type 1 has an invalid length. [ 283.281829][T11447] tipc: Resetting bearer [ 283.295981][T11443] netlink: 756 bytes leftover after parsing attributes in process `syz.0.1179'. [ 283.404108][T11452] tipc: Disabling bearer [ 283.737707][T11462] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1185'. [ 283.790575][T11464] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1186'. [ 283.803765][T11464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.896488][T11457] sit0: entered promiscuous mode [ 283.928637][T11457] netlink: 'syz.2.1183': attribute type 1 has an invalid length. [ 283.936547][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.969834][T11457] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1183'. [ 284.336376][ T5722] tipc: Node number set to 2695826091 [ 284.409674][T11481] sch_tbf: burst 4 is lower than device lo mtu (18) ! [ 284.494712][T11485] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1192'. [ 284.740895][T11488] netlink: 'syz.3.1193': attribute type 10 has an invalid length. [ 284.767678][T11488] syz_tun: entered promiscuous mode [ 284.819083][T11488] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 284.890375][ T57] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.912773][ T57] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.939383][ T57] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.957194][ T57] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.046923][ T3368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.094118][T11509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 285.558475][T11522] ip6tnl0: Caught tx_queue_len zero misconfig [ 285.660487][T11527] validate_nla: 2 callbacks suppressed [ 285.660503][T11527] netlink: 'syz.2.1204': attribute type 1 has an invalid length. [ 285.707921][T11527] 8021q: adding VLAN 0 to HW filter on device bond5 [ 285.718312][T11520] netlink: 'syz.4.1202': attribute type 1 has an invalid length. [ 285.844189][T11531] vlan3: entered allmulticast mode [ 285.874979][T11531] bond5: entered allmulticast mode [ 285.943544][T11532] bond5: (slave geneve3): making interface the new active one [ 285.963845][T11532] geneve3: entered allmulticast mode [ 285.992130][T11532] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 286.031856][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.052767][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.074063][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.101807][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.166548][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.363669][T11545] netlink: 'syz.2.1209': attribute type 1 has an invalid length. [ 286.373135][T11545] netlink: 'syz.2.1209': attribute type 2 has an invalid length. [ 286.500300][T11537] 8021q: adding VLAN 0 to HW filter on device bond5 [ 286.712362][T11546] bond5: entered promiscuous mode [ 286.730253][T11546] bond5: entered allmulticast mode [ 286.902346][T11566] gre0: left allmulticast mode [ 287.193892][T11566] bond5: left promiscuous mode [ 287.201914][T11566] erspan2: left promiscuous mode [ 287.207614][T11566] bond5: left allmulticast mode [ 287.218824][T11566] erspan2: left allmulticast mode [ 287.297853][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.804802][ T81] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.814460][ T81] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.423393][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.530276][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.288889][ T81] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.297990][ T81] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.381536][T11630] tipc: Enabling of bearer rejected, failed to enable media [ 290.399746][ T81] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.423850][ T81] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.449865][ T81] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.480818][ T81] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.509577][T11641] __nla_validate_parse: 14 callbacks suppressed [ 290.509595][T11641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1220'. [ 290.657284][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.720718][T11651] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1221'. [ 290.784982][T11654] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1221'. [ 290.874133][T11642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1221'. [ 290.913707][T11636] netlink: 'syz.3.1219': attribute type 1 has an invalid length. [ 290.951343][T11636] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1219'. [ 291.278770][T11676] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1224'. [ 291.312329][T11670] virt_wifi0 speed is unknown, defaulting to 1000 [ 291.318844][T11674] syzkaller0: entered promiscuous mode [ 291.318877][T11674] syzkaller0: entered allmulticast mode [ 291.436764][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.487294][T11683] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 291.786882][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.209960][T11704] Set syz1 is full, maxelem 65536 reached [ 292.720963][T11721] syzkaller0: entered promiscuous mode [ 292.749701][T11721] syzkaller0: entered allmulticast mode [ 292.773931][T11728] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1234'. [ 292.790971][T11721] tipc: Enabled bearer , priority 0 [ 292.823617][T11721] tipc: Resetting bearer [ 292.857163][T11718] tipc: Resetting bearer [ 292.921550][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.953879][T11718] tipc: Disabling bearer [ 293.068067][T11740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1236'. [ 293.292478][T11746] bond1: entered promiscuous mode [ 293.333430][T11746] bond1: entered allmulticast mode [ 293.582440][T11748] syzkaller0: entered promiscuous mode [ 293.594621][T11748] syzkaller0: entered allmulticast mode [ 293.642671][T11759] bond0: (slave syz_tun): Releasing backup interface [ 293.862777][T11772] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1241'. [ 294.047055][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.105664][T11775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1243'. [ 295.177147][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.051895][T11770] lo speed is unknown, defaulting to 1000 [ 296.172223][T11770] lo speed is unknown, defaulting to 1000 [ 296.187551][T11770] lo speed is unknown, defaulting to 1000 [ 296.208238][T11770] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 296.246410][T11770] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 296.282986][T11770] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 296.301171][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.351331][T11798] netlink: 'syz.2.1247': attribute type 1 has an invalid length. [ 296.368278][T11770] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 296.405255][T11801] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 296.514988][T11798] 8021q: adding VLAN 0 to HW filter on device bond6 [ 296.537892][T11770] lo speed is unknown, defaulting to 1000 [ 296.548587][T11806] vlan4: entered allmulticast mode [ 296.559355][T11806] bond6: entered allmulticast mode [ 296.573405][T11770] lo speed is unknown, defaulting to 1000 [ 296.589164][T11770] lo speed is unknown, defaulting to 1000 [ 296.595040][T11796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.608680][T11770] lo speed is unknown, defaulting to 1000 [ 296.618357][T11770] lo speed is unknown, defaulting to 1000 [ 296.643417][T11802] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 296.841147][T11824] sit0: left promiscuous mode [ 296.848859][T11824] tipc: Resetting bearer [ 296.867142][T11824] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 297.314726][T11840] geneve0: Caught tx_queue_len zero misconfig [ 297.427652][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.455690][T11844] syzkaller0: entered promiscuous mode [ 297.470804][T11843] netlink: 'syz.0.1255': attribute type 13 has an invalid length. [ 297.485732][T11844] syzkaller0: entered allmulticast mode [ 297.502831][T11843] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 297.880172][T11864] netlink: 'syz.3.1261': attribute type 1 has an invalid length. [ 297.900228][T11861] __nla_validate_parse: 2 callbacks suppressed [ 297.900243][T11861] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1263'. [ 298.011353][T11864] 8021q: adding VLAN 0 to HW filter on device bond7 [ 298.060684][T11870] bond7: (slave geneve4): making interface the new active one [ 298.072535][T11870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.094822][T11870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.106145][T11870] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 298.144834][T11866] vlan2: entered allmulticast mode [ 298.150304][T11866] bond7: entered allmulticast mode [ 298.155711][T11866] geneve4: entered allmulticast mode [ 298.243312][T11849] virt_wifi0 speed is unknown, defaulting to 1000 [ 298.259524][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.279406][T11872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1264'. [ 298.298794][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.309888][T11849] lo speed is unknown, defaulting to 1000 [ 298.472273][T11881] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 298.552192][T11882] xt_hashlimit: size too large, truncated to 1048576 [ 298.563201][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.567488][T11881] block nbd3: server does not support multiple connections per device. [ 298.580798][T11881] block nbd3: shutting down sockets [ 298.653811][T11884] tipc: Resetting bearer [ 298.782751][T11901] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1267'. [ 298.816047][ T8920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.109517][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.121042][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.470448][T11884] bond1: left allmulticast mode [ 299.519615][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.537661][T11891] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 299.549886][T11891] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 299.558708][ T5950] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.572394][ T5950] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.591756][ T5950] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.613907][ T5950] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.678399][T11891] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 299.685066][T11891] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 299.747616][T11918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1273'. [ 299.752859][T11891] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 299.774405][T11891] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 299.786109][T11919] gretap0: left promiscuous mode [ 299.857752][T11923] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1271'. [ 299.879338][T11891] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 299.892384][T11891] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 299.910509][T11919] tipc: Resetting bearer [ 299.929054][T11919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.943296][T11919] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.037840][T11919] veth1_to_batadv: left promiscuous mode [ 300.081740][T11919] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 300.088763][T11929] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1275'. [ 300.093135][T11919] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 300.247685][T11931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1276'. [ 300.330518][T11933] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1277'. [ 300.417553][T11935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1278'. [ 300.512229][T11940] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1276'. [ 300.679007][T11945] netlink: 'syz.4.1279': attribute type 1 has an invalid length. [ 300.815184][T11945] 8021q: adding VLAN 0 to HW filter on device bond2 [ 300.900367][T11950] vlan2: entered allmulticast mode [ 300.908301][T11950] bond2: entered allmulticast mode [ 301.013431][T11954] bond2: (slave geneve2): making interface the new active one [ 301.047109][T11954] geneve2: entered allmulticast mode [ 301.056081][T11954] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 301.087083][T11971] sctp: [Deprecated]: syz.1.1282 (pid 11971) Use of int in max_burst socket option. [ 301.087083][T11971] Use struct sctp_assoc_value instead [ 303.256092][T11959] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 303.257050][ T5808] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.274160][ T5808] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.284967][T11968] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 303.298086][T11968] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 303.309586][T11968] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 303.467512][T11978] erspan0: entered promiscuous mode [ 303.478367][T11978] erspan0: entered allmulticast mode [ 303.507538][ T5808] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.559076][ T5808] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.639101][ T3368] net_ratelimit: 14 callbacks suppressed [ 303.639118][ T3368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.690864][ T3368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.716207][T11986] netlink: 'syz.3.1287': attribute type 2 has an invalid length. [ 303.825937][T10054] lo speed is unknown, defaulting to 1000 [ 303.840149][T11993] tipc: Enabled bearer , priority 0 [ 303.874242][T11993] tipc: Resetting bearer [ 303.931486][T11991] tipc: Disabling bearer [ 304.025116][T12004] tipc: Resetting bearer [ 304.073993][T12008] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 304.109023][T12004] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 304.166796][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.200152][T11988] bridge0: entered promiscuous mode [ 304.205438][T11988] bridge0: entered allmulticast mode [ 304.220282][T11988] team0: Port device bridge0 added [ 304.238265][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.275684][T12005] bridge3: entered promiscuous mode [ 304.278492][T12016] nbd3: detected capacity change from 0 to 63 [ 304.281945][T12005] bridge3: entered allmulticast mode [ 304.295524][T12005] team0: Port device bridge3 added [ 304.373481][T12011] sit0: left promiscuous mode [ 304.382035][T12012] __nla_validate_parse: 6 callbacks suppressed [ 304.382054][T12012] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1296'. [ 304.391906][T12011] ip6gretap0: left promiscuous mode [ 304.446826][T12011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.461856][T12011] : left promiscuous mode [ 304.490249][ T3368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.492310][T12027] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1298'. [ 304.500587][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.522361][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.531574][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.540669][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.577653][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.585000][ T5808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.621688][T12004] team0: Port device xfrm0 added [ 304.851829][ T5617] block nbd3: Receive control failed (result -104) [ 305.070767][T12036] tipc: Resetting bearer [ 305.144060][T12048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.161085][T12047] netlink: 'syz.2.1303': attribute type 1 has an invalid length. [ 305.188623][T12047] netlink: 'syz.2.1303': attribute type 2 has an invalid length. [ 305.200687][T12047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1303'. [ 305.230509][T12048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.514237][ T5722] lo speed is unknown, defaulting to 1000 [ 305.529487][ T5722] syz2: Port: 1 Link DOWN [ 305.560001][ T57] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.595173][ T57] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.621432][T12068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.622250][ T57] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.648794][T12069] tipc: Resetting bearer [ 305.670689][T12069] bond0: (slave bond_slave_0): Releasing backup interface [ 305.695987][T12069] bond0: (slave bond_slave_1): Releasing backup interface [ 305.721645][T12069] team0: Port device team_slave_0 removed [ 305.745212][T12069] team0: Port device team_slave_1 removed [ 305.779123][ T57] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.930662][T12069] team0: Mode changed to "activebackup" [ 305.990832][T12078] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1308'. [ 306.111278][T12081] syzkaller0: entered promiscuous mode [ 306.126882][T12081] syzkaller0: entered allmulticast mode [ 306.213516][T12090] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1311'. [ 306.227221][T12084] batadv_slave_1: entered promiscuous mode [ 306.488445][T12097] syzkaller0: entered promiscuous mode [ 306.514641][T12097] syzkaller0: entered allmulticast mode [ 306.605201][T12094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.800868][ T4936] block nbd0: Receive control failed (result -22) [ 306.879910][T12115] macsec1: entered promiscuous mode [ 306.963002][T12083] batadv_slave_1: left promiscuous mode [ 307.167356][T12127] netlink: 'syz.3.1319': attribute type 1 has an invalid length. [ 307.206873][T12127] netlink: 'syz.3.1319': attribute type 2 has an invalid length. [ 307.224913][T12127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1319'. [ 307.270538][T12129] netlink: 'syz.2.1320': attribute type 1 has an invalid length. [ 307.302412][T12129] netlink: 'syz.2.1320': attribute type 2 has an invalid length. [ 307.325490][T12135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1320'. [ 307.589174][T12143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1325'. [ 307.591986][T12141] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1324'. [ 307.719513][T12146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.782194][T12151] syzkaller0: entered promiscuous mode [ 307.788200][T12151] syzkaller0: entered allmulticast mode [ 307.883307][T12146] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1326'. [ 308.381114][T12179] netlink: 'syz.0.1332': attribute type 4 has an invalid length. [ 308.411550][T12179] netlink: 'syz.0.1332': attribute type 4 has an invalid length. [ 308.582631][T12183] netlink: 'syz.4.1335': attribute type 1 has an invalid length. [ 308.720218][ T8904] net_ratelimit: 24 callbacks suppressed [ 308.720236][ T8904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.832342][T12192] bond0: Caught tx_queue_len zero misconfig [ 309.293120][T12210] validate_nla: 1 callbacks suppressed [ 309.293140][T12210] netlink: 'syz.2.1341': attribute type 1 has an invalid length. [ 309.309700][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.340829][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.345090][T12210] netlink: 'syz.2.1341': attribute type 2 has an invalid length. [ 309.391008][T12213] __nla_validate_parse: 5 callbacks suppressed [ 309.391025][T12213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1341'. [ 309.600184][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.623789][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.641688][ T8926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.661533][T12221] syzkaller0: entered promiscuous mode [ 309.702864][T12221] syzkaller0: entered allmulticast mode [ 309.735159][T12219] [ 309.737524][T12219] ====================================================== [ 309.744542][T12219] WARNING: possible circular locking dependency detected [ 309.751562][T12219] syzkaller #0 Not tainted [ 309.755964][T12219] ------------------------------------------------------ [ 309.762963][T12219] syz.0.1342/12219 is trying to acquire lock: [ 309.769010][T12219] ffff88805e3b2a70 (&vma_lock->rw_sema){++++}-{4:4}, at: hugetlb_vma_lock_free+0xb7/0x1a0 [ 309.778973][T12219] [ 309.778973][T12219] but task is already holding lock: [ 309.786325][T12219] ffff88807ed9d950 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: hugetlbfs_file_mmap+0x2de/0x630 [ 309.796937][T12219] [ 309.796937][T12219] which lock already depends on the new lock. [ 309.796937][T12219] [ 309.807322][T12219] [ 309.807322][T12219] the existing dependency chain (in reverse order) is: [ 309.816315][T12219] [ 309.816315][T12219] -> #9 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}: [ 309.824993][T12219] down_write+0x96/0x200 [ 309.829758][T12219] hugetlbfs_file_mmap+0x2de/0x630 [ 309.835384][T12219] mmap_region+0x19e6/0x2310 [ 309.840500][T12219] do_mmap+0xc3b/0x10c0 [ 309.845175][T12219] vm_mmap_pgoff+0x272/0x4e0 [ 309.850365][T12219] ksys_mmap_pgoff+0x57d/0x760 [ 309.855735][T12219] do_syscall_64+0x174/0x580 [ 309.860851][T12219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.867254][T12219] [ 309.867254][T12219] -> #8 (&mm->mmap_lock){++++}-{4:4}: [ 309.874800][T12219] __might_fault+0xcb/0x130 [ 309.879812][T12219] _copy_from_iter+0x100/0x1660 [ 309.885177][T12219] tcp_sendmsg_locked+0x2620/0x55c0 [ 309.890882][T12219] tcp_sendmsg+0x2f/0x50 [ 309.895630][T12219] sock_sendmsg_nosec+0x10e/0x180 [ 309.901163][T12219] sock_write_iter+0x2de/0x3e0 [ 309.906519][T12219] vfs_write+0x612/0xba0 [ 309.911364][T12219] ksys_write+0x150/0x270 [ 309.916209][T12219] do_syscall_64+0x174/0x580 [ 309.921306][T12219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.927706][T12219] [ 309.927706][T12219] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 309.935336][T12219] lock_sock_nested+0x41/0x100 [ 309.940613][T12219] inet_shutdown+0x6a/0x390 [ 309.945626][T12219] nbd_mark_nsock_dead+0x2cb/0x550 [ 309.951246][T12219] recv_work+0x1cee/0x1e10 [ 309.956167][T12219] process_scheduled_works+0xa8e/0x14e0 [ 309.962221][T12219] worker_thread+0xa47/0xfb0 [ 309.967318][T12219] kthread+0x388/0x470 [ 309.971896][T12219] ret_from_fork+0x514/0xb70 [ 309.976997][T12219] ret_from_fork_asm+0x1a/0x30 [ 309.982278][T12219] [ 309.982278][T12219] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 309.989915][T12219] __mutex_lock+0x19d/0x1550 [ 309.995018][T12219] nbd_queue_rq+0x373/0x1150 [ 310.000124][T12219] blk_mq_dispatch_rq_list+0x499/0x1990 [ 310.006180][T12219] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 310.013036][T12219] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 310.019539][T12219] blk_mq_run_work_fn+0x16c/0x300 [ 310.025067][T12219] process_scheduled_works+0xa8e/0x14e0 [ 310.031120][T12219] worker_thread+0xa47/0xfb0 [ 310.036221][T12219] kthread+0x388/0x470 [ 310.040803][T12219] ret_from_fork+0x514/0xb70 [ 310.045905][T12219] ret_from_fork_asm+0x1a/0x30 [ 310.051171][T12219] [ 310.051171][T12219] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 310.058368][T12219] __mutex_lock+0x19d/0x1550 [ 310.063468][T12219] nbd_queue_rq+0xc1/0x1150 [ 310.068582][T12219] blk_mq_dispatch_rq_list+0x499/0x1990 [ 310.074733][T12219] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 310.081579][T12219] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 310.088078][T12219] blk_mq_run_work_fn+0x16c/0x300 [ 310.093609][T12219] process_scheduled_works+0xa8e/0x14e0 [ 310.099663][T12219] worker_thread+0xa47/0xfb0 [ 310.104760][T12219] kthread+0x388/0x470 [ 310.109338][T12219] ret_from_fork+0x514/0xb70 [ 310.114438][T12219] ret_from_fork_asm+0x1a/0x30 [ 310.119708][T12219] [ 310.119708][T12219] -> #4 (set->srcu){.+.+}-{0:0}: [ 310.126820][T12219] __synchronize_srcu+0xc9/0x2f0 [ 310.132267][T12219] elevator_switch+0x1e8/0x7b0 [ 310.137549][T12219] elevator_change+0x2fa/0x480 [ 310.142830][T12219] elevator_set_default+0x375/0x440 [ 310.148544][T12219] blk_register_queue+0x3f3/0x4e0 [ 310.154082][T12219] __add_disk+0x6cb/0xe30 [ 310.158914][T12219] add_disk_fwnode+0x100/0x3a0 [ 310.164183][T12219] nbd_dev_add+0x733/0xb60 [ 310.169115][T12219] nbd_init+0x15f/0x1e0 [ 310.173781][T12219] do_one_initcall+0x250/0x870 [ 310.179055][T12219] do_initcall_level+0x10a/0x1a0 [ 310.184500][T12219] do_initcalls+0x59/0xa0 [ 310.189332][T12219] kernel_init_freeable+0x29d/0x3e0 [ 310.195037][T12219] kernel_init+0x1d/0x1d0 [ 310.199874][T12219] ret_from_fork+0x514/0xb70 [ 310.204973][T12219] ret_from_fork_asm+0x1a/0x30 [ 310.210244][T12219] [ 310.210244][T12219] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 310.218051][T12219] __mutex_lock+0x19d/0x1550 [ 310.223157][T12219] elevator_change+0x1af/0x480 [ 310.228432][T12219] elevator_set_none+0xb5/0x140 [ 310.233829][T12219] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 310.240183][T12219] nbd_start_device+0x189/0xb30 [ 310.245570][T12219] nbd_genl_connect+0x1597/0x1c10 [ 310.251128][T12219] genl_family_rcv_msg_doit+0x233/0x340 [ 310.257193][T12219] genl_rcv_msg+0x614/0x7a0 [ 310.262211][T12219] netlink_rcv_skb+0x226/0x4a0 [ 310.267484][T12219] genl_rcv+0x28/0x40 [ 310.271972][T12219] netlink_unicast+0x7bb/0x940 [ 310.277251][T12219] netlink_sendmsg+0x813/0xb40 [ 310.282528][T12219] sock_sendmsg_nosec+0x13a/0x180 [ 310.288070][T12219] ____sys_sendmsg+0x54e/0x850 [ 310.293429][T12219] ___sys_sendmsg+0x2a5/0x360 [ 310.298612][T12219] __x64_sys_sendmsg+0x1b1/0x290 [ 310.304055][T12219] do_syscall_64+0x174/0x580 [ 310.309151][T12219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.315557][T12219] [ 310.315557][T12219] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 310.324156][T12219] blk_alloc_queue+0x544/0x690 [ 310.329431][T12219] __blk_mq_alloc_disk+0x194/0x390 [ 310.335057][T12219] nbd_dev_add+0x494/0xb60 [ 310.340027][T12219] nbd_init+0x15f/0x1e0 [ 310.344711][T12219] do_one_initcall+0x250/0x870 [ 310.349989][T12219] do_initcall_level+0x10a/0x1a0 [ 310.355433][T12219] do_initcalls+0x59/0xa0 [ 310.360275][T12219] kernel_init_freeable+0x29d/0x3e0 [ 310.365977][T12219] kernel_init+0x1d/0x1d0 [ 310.370823][T12219] ret_from_fork+0x514/0xb70 [ 310.375933][T12219] ret_from_fork_asm+0x1a/0x30 [ 310.381200][T12219] [ 310.381200][T12219] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 310.388397][T12219] fs_reclaim_acquire+0x71/0x100 [ 310.393851][T12219] __kmalloc_cache_noprof+0x61/0x660 [ 310.399645][T12219] allocate_file_region_entries+0x1ef/0x5a0 [ 310.406046][T12219] __vma_reservation_common+0x7c2/0x9c0 [ 310.412100][T12219] alloc_hugetlb_folio+0x2de/0x1630 [ 310.417815][T12219] hugetlb_no_page+0xfdd/0x1fc0 [ 310.423195][T12219] hugetlb_fault+0x570/0x12c0 [ 310.428393][T12219] handle_mm_fault+0x1f42/0x3080 [ 310.433850][T12219] __get_user_pages+0x1678/0x2720 [ 310.439399][T12219] populate_vma_page_range+0x2be/0x3c0 [ 310.445389][T12219] __mm_populate+0x25f/0x390 [ 310.450585][T12219] vm_mmap_pgoff+0x353/0x4e0 [ 310.455697][T12219] ksys_mmap_pgoff+0x57d/0x760 [ 310.461231][T12219] do_syscall_64+0x174/0x580 [ 310.466388][T12219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.472878][T12219] [ 310.472878][T12219] -> #0 (&vma_lock->rw_sema){++++}-{4:4}: [ 310.480773][T12219] __lock_acquire+0x1520/0x2cf0 [ 310.486146][T12219] lock_acquire+0x106/0x350 [ 310.491168][T12219] down_write+0x96/0x200 [ 310.495923][T12219] hugetlb_vma_lock_free+0xb7/0x1a0 [ 310.501634][T12219] hugetlb_reserve_pages+0xce6/0x1140 [ 310.507519][T12219] hugetlbfs_file_mmap+0x475/0x630 [ 310.513138][T12219] mmap_region+0x19e6/0x2310 [ 310.518238][T12219] do_mmap+0xc3b/0x10c0 [ 310.522897][T12219] vm_mmap_pgoff+0x272/0x4e0 [ 310.528000][T12219] ksys_mmap_pgoff+0x57d/0x760 [ 310.533274][T12219] do_syscall_64+0x174/0x580 [ 310.538482][T12219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.544880][T12219] [ 310.544880][T12219] other info that might help us debug this: [ 310.544880][T12219] [ 310.555097][T12219] Chain exists of: [ 310.555097][T12219] &vma_lock->rw_sema --> &mm->mmap_lock --> &sb->s_type->i_mutex_key#24 [ 310.555097][T12219] [ 310.569439][T12219] Possible unsafe locking scenario: [ 310.569439][T12219] [ 310.576876][T12219] CPU0 CPU1 [ 310.582224][T12219] ---- ---- [ 310.587571][T12219] lock(&sb->s_type->i_mutex_key#24); [ 310.593021][T12219] lock(&mm->mmap_lock); [ 310.599854][T12219] lock(&sb->s_type->i_mutex_key#24); [ 310.607822][T12219] lock(&vma_lock->rw_sema); [ 310.612484][T12219] [ 310.612484][T12219] *** DEADLOCK *** [ 310.612484][T12219] [ 310.620608][T12219] 2 locks held by syz.0.1342/12219: [ 310.625796][T12219] #0: ffff88807c66a9f8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 310.635194][T12219] #1: ffff88807ed9d950 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: hugetlbfs_file_mmap+0x2de/0x630 [ 310.646245][T12219] [ 310.646245][T12219] stack backtrace: [ 310.652122][T12219] CPU: 1 UID: 0 PID: 12219 Comm: syz.0.1342 Not tainted syzkaller #0 PREEMPT(full) [ 310.652140][T12219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 310.652161][T12219] Call Trace: [ 310.652170][T12219] [ 310.652178][T12219] dump_stack_lvl+0xe8/0x150 [ 310.652202][T12219] print_circular_bug+0x2e1/0x300 [ 310.652219][T12219] check_noncircular+0x12e/0x150 [ 310.652244][T12219] __lock_acquire+0x1520/0x2cf0 [ 310.652269][T12219] ? __lock_acquire+0x683/0x2cf0 [ 310.652290][T12219] ? hugetlb_vma_lock_free+0xb7/0x1a0 [ 310.652312][T12219] lock_acquire+0x106/0x350 [ 310.652331][T12219] ? hugetlb_vma_lock_free+0xb7/0x1a0 [ 310.652358][T12219] down_write+0x96/0x200 [ 310.652374][T12219] ? hugetlb_vma_lock_free+0xb7/0x1a0 [ 310.652396][T12219] ? __pfx_down_write+0x10/0x10 [ 310.652413][T12219] ? css_put+0x57/0x290 [ 310.652429][T12219] ? css_put+0x57/0x290 [ 310.652445][T12219] hugetlb_vma_lock_free+0xb7/0x1a0 [ 310.652468][T12219] hugetlb_reserve_pages+0xce6/0x1140 [ 310.652494][T12219] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 310.652515][T12219] ? down_write+0x16d/0x200 [ 310.652532][T12219] ? touch_atime+0xf1/0x670 [ 310.652557][T12219] ? mas_preallocate+0x3f1/0x630 [ 310.652574][T12219] hugetlbfs_file_mmap+0x475/0x630 [ 310.652593][T12219] ? __pfx_hugetlbfs_file_mmap+0x10/0x10 [ 310.652611][T12219] ? __mas_set_range+0x11a/0x3a0 [ 310.652626][T12219] mmap_region+0x19e6/0x2310 [ 310.652654][T12219] ? __pfx_mmap_region+0x10/0x10 [ 310.652676][T12219] ? unwind_next_frame+0x8f/0x2550 [ 310.652727][T12219] ? apparmor_capable+0x126/0x170 [ 310.652746][T12219] ? bpf_lsm_capable+0x9/0x20 [ 310.652764][T12219] ? security_capable+0x7e/0x2c0 [ 310.652786][T12219] ? shmem_mapping+0xd/0x50 [ 310.652805][T12219] ? memfd_check_seals_mmap+0x165/0x200 [ 310.652826][T12219] do_mmap+0xc3b/0x10c0 [ 310.652843][T12219] ? __pfx_do_mmap+0x10/0x10 [ 310.652856][T12219] ? down_write_killable+0x180/0x240 [ 310.652874][T12219] ? __pfx_down_write_killable+0x10/0x10 [ 310.652891][T12219] ? apparmor_mmap_file+0x2da/0x3e0 [ 310.652912][T12219] vm_mmap_pgoff+0x272/0x4e0 [ 310.652936][T12219] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 310.652960][T12219] ? hugetlb_file_setup+0x42c/0x630 [ 310.652976][T12219] ksys_mmap_pgoff+0x57d/0x760 [ 310.652992][T12219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.653007][T12219] do_syscall_64+0x174/0x580 [ 310.653022][T12219] ? trace_irq_disable+0x3b/0x140 [ 310.653040][T12219] ? clear_bhb_loop+0x40/0x90 [ 310.653057][T12219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.653073][T12219] RIP: 0033:0x7f075639de99 [ 310.653088][T12219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.653102][T12219] RSP: 002b:00007f07572fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 310.653118][T12219] RAX: ffffffffffffffda RBX: 00007f0756626090 RCX: 00007f075639de99 [ 310.653129][T12219] RDX: 0000000002000002 RSI: 0000000000c00000 RDI: 0000200000000000 [ 310.653139][T12219] RBP: 00007f0756433eaf R08: ffffffffffffffff R09: 00000000aba00000 [ 310.653150][T12219] R10: 0000000000042073 R11: 0000000000000246 R12: 0000000000000000 [ 310.653159][T12219] R13: 00007f0756626128 R14: 00007f0756626090 R15: 00007fff5a82f7c8 [ 310.653181][T12219] [ 310.668773][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.979944][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.988061][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.996266][ T8904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.776911][ T5955] net_ratelimit: 11 callbacks suppressed [ 313.776929][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.790876][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.077922][T10054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.336803][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.906470][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.914796][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.118415][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.127227][T10054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.135663][ T8906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.144539][ T8906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.796553][ T35] net_ratelimit: 16 callbacks suppressed [ 318.796577][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.278056][T10054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.366841][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.375172][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.436825][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog