last executing test programs: 2.567425279s ago: executing program 4 (id=475): r0 = socket$rxrpc(0x21, 0x2, 0x2) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000280000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdffff014000"/28], 0x50) socket$rxrpc(0x21, 0x2, 0x2) (async) close(r0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000280000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdffff014000"/28], 0x50) (async) 2.303323367s ago: executing program 4 (id=479): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f00000010c0)="2ae2", 0x2}], 0x1, 0x1) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r9) splice(r3, 0x0, r9, 0x0, 0x10000000000066, 0xa) write(r2, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r2, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x14, r1, 0x301, 0x70bd28, 0x0, {0x34}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x0) 2.011243609s ago: executing program 2 (id=482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x68}, 0x1, 0x0, 0x0, 0x850}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x3, 0x0, 0x0, {0x1}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000001) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x194, 0x2, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}, @CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_NAT={0xcc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @loopback}}}]}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa43}, @CTA_EXPECT_MASTER={0x58, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, 0x194}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x8}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_OIF={0x8}}, @RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x30}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0000000004000800470f003c00640000050690780000000004000000013493ac26dea0ae9b51aa01940400040000000000000000000d00000000000000000000004e2300"], 0x0) 2.010556868s ago: executing program 1 (id=483): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000080)=0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 1.97737916s ago: executing program 0 (id=484): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd25, 0x0, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x44}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) close(0x3) r4 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000000c0)) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000540)="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", 0x118) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="b0020000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fbdbdf253b0000000800a00004000000050018012800000008002600081600000800a000090000000800a100050000000500180138000000080057007c0400000400870004006c0004006c000c00cd0003005807b60056bd0400870008002700030000000500190109000000080022018a030000080026006c09000008009f0007000000080026006c09000008005700cc11000008002700030000000500180122000000"], 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x4041) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000200)=[{0x0, 0x0, 0x0}], 0x1, 0x20040802) recvmmsg$unix(r7, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000700)=""/218, 0xda}], 0x1}}], 0x1, 0x41, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x83, &(0x7f0000000080)={r8, 0x2}, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000800cb8004000880100001800c0010800400088004000b800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r9 = socket(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0020480a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000004c0)={r5, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, @in6={0xa, 0x4e20, 0x7, @loopback, 0xb}, @in6={0xa, 0x4e20, 0xc0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, @in={0x2, 0x4e23, @local}]}, &(0x7f0000000500)=0x10) 1.974120196s ago: executing program 4 (id=486): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0xa, &(0x7f0000000180), 0x4) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000050) (async) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000043) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x200, 0x70bd27, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0xfffd, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x20000000007, 0xfffffffffffffffb}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) (async) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast2, 0x3}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) sendmmsg$inet6(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f0000000180)='?3', 0x2}], 0x2}}], 0x1, 0x4400c800) (async) sendto$inet6(r4, &(0x7f0000000300), 0x20, 0x3b00, 0x0, 0xfffffffffffffdfd) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000000400000241000000030013"], 0x2c}}, 0x0) (async) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000200)={0x9, 0x5}) 1.841560319s ago: executing program 2 (id=487): socket$netlink(0x10, 0x3, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x2004c8a1}, 0x8000) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES16=r3], 0xa4}, 0x1, 0x0, 0x0, 0x805}, 0x801) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb7e00000000fe880000000000000000000000000001fc020000000000000000000000000000000200000000000004010001010031"], 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r4}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r6, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x121880, 0x0) setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000080)=0x7f, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8000}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x5}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xd8b6}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004010}, 0x10) 1.764124071s ago: executing program 1 (id=488): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4431b0afe50248f764ab71296f67a3570000002000010026bd7000000000000a80000000000f071d000000140003006c6f00000000000000000000000000001400010001"], 0x44}}, 0x40000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = socket(0x2, 0xa, 0x0) sendmmsg$inet(r3, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$l2tp6(0xa, 0x2, 0x73) connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0xffff, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x32) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r9, 0x1, 0xa, &(0x7f0000000180)=0x1007e, 0x11fb96e13838704f) recvmmsg$unix(r9, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012000, 0x0) sendto$unix(r8, &(0x7f0000000000)="ba", 0x1, 0x48005, 0x0, 0x0) r10 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8881}], 0x1, 0x20006850) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x10000) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000020", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x80000000, 0x1}}, 0x20) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000300)={'veth0\x00', &(0x7f00000006c0)=@ethtool_per_queue_op={0x4b, 0xe, [0x9, 0x10, 0x1, 0x5, 0x6c87, 0x2, 0x8, 0x9, 0x35a7e55f, 0x1000, 0x6, 0xd24, 0x4a9, 0x0, 0xb2, 0x3, 0x401, 0x8, 0x1, 0x4, 0x0, 0x1, 0xfda1, 0xffffffff, 0x2, 0x3d75, 0xe6, 0x338, 0xd, 0x4, 0x1, 0x4, 0x6088, 0xa, 0x3, 0x3, 0x7a, 0x9, 0x6, 0x6, 0x5, 0x2, 0x1, 0x1, 0x5, 0x1c4ca971, 0x200, 0x40, 0x0, 0x3, 0x401, 0x6, 0x8, 0x8, 0xb, 0x7, 0x7ff, 0x16e, 0x4, 0xe7f5, 0x401, 0x1, 0xe2d, 0x4, 0x4, 0x7, 0x0, 0x1, 0x65ab, 0xfffffff8, 0xfffffffc, 0x401, 0x0, 0xf546, 0x9, 0x7, 0x6, 0x1, 0x60000000, 0xd, 0xb, 0x1, 0x81, 0x1, 0x8, 0x3, 0x101, 0x3, 0x2, 0xe, 0x8, 0x5, 0x7f, 0x9, 0x10001, 0x6, 0x33, 0x5, 0x1, 0x8, 0x4, 0xf1, 0x7, 0x40, 0x7, 0xc, 0x8, 0x8, 0x5, 0x8, 0x1, 0x80, 0xffffffff, 0x2, 0xa0, 0x3, 0x5, 0x8, 0x8, 0x7fff, 0xb5, 0xe05, 0x9, 0x6, 0x8, 0xf68, 0x800, 0x1], "478c4eb9f76d7261c45b1e7b6b5e51a1bdf6eb5877580d29b31af096663e3f"}}) 1.763831942s ago: executing program 4 (id=489): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async, rerun: 64) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000080)) (rerun: 64) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f00000000c0)) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0xfd, "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"}, &(0x7f0000000280)=0x105) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)={r1, 0x3, 0x2, [0x7ff, 0x4]}, &(0x7f0000000300)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000340)={0x6, {{0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7ff}}, 0x1, 0x2, [{{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x6}}, {{0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x10000}}]}, 0x190) (async) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000500)={'pimreg\x00', 0x3}) (async, rerun: 32) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) sendmmsg$alg(r3, &(0x7f0000000dc0)=[{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000540)="2c5718116c11d0e13fcde1e42823ed549985fb", 0x13}, {&(0x7f0000000580)="34397597dfd0a35a97fda966492d66867a89e1bbe60ec6ce43fb1f321005a9e3cab3c1df44a2c6ad6d705f8c189be9bf14", 0x31}, {&(0x7f00000005c0)="314dfc120bf674639eeb028af091d8e527d0a518051146f8834bb26ba0480b0379e1ecfa6c929b1b6b84cae3686f9db38b6bf7af0f865b07d8681a4312764b6b3aa55a454f428e5a63f30de32bca68ff53995a6e86a628", 0x57}, {&(0x7f0000000640)="89fc7789ad6b0dee2329915df07a482f0848cd4ec7e15564b278636ce5264e671530dc2bc3ae51aef9eb64a8fdfcce59257fd21673c04eb13a04d74ce070655a4129e4a70cf1dd58f5b2b4728f5c03c0b67f527ed1e8d6781b1f2a5760e03ab8b1e3b060930026a5426fc622db374c9a0bb069721507a481", 0x78}, {&(0x7f00000006c0)="c62d0655725e0f8e44ac193a1c13419880f73ed7237ab4d9c6a8e22329b700a1f2efe3b3ea0ff0771ce2b1523d4fa83ee8b1d0124a48ca3bfee107f5ab286141e2d0aaf2430c80c01a29a5abf43e39cd51bdf666911022177f1e3fe792e069b938e190c9ac587d25ef104b27d4695856e234364b649b27adf15e58e578782129938784596a2c65c95534975b382ea610b15e0f276d4b44b6e8b423cfcabfa4d377d9fa012b6c7cfc1e690df7298b018aedaf668f8838fca5cec15f6f28e8f254e343e7fa1a03ddbd9cffda1faa73c28f1d694214a657c7923201ded7581f9d", 0xdf}, {&(0x7f00000007c0)="57a1e3c7179b75ca290a10ff00077413b9c98b7d0d632769eedaa8c3eeefb61a5af024c714d8113d5b15d76ec4e1b4ce320f9f487e390a6539333e4435e8b192544e8a159bee91d8d65a8a959eea75ba7060e58cae7f16c848c9b04a9fbc6b40cae27f5b18ab7acbc2eb1e", 0x6b}, {&(0x7f0000000840)="db68cb7bea7540b935b108764e4fd63776b80623cc188aacf83a054dae602464d96bf195728f2231e7ce54eded81d7c8b66f4dd23523b02ef24990a6e18a84189ef6266f5cf51df7a23b5c68015134b856aae25bd9d9ec8cc2eb2d04bcc42b366e92447fcc0fd5eb9ad1f478eed89b87e5f487cfaacb4b72f03afc04ca6e3734e33da6db08fd2fa8269c53747919f968b84b39ba9ea2ce503f9d0ecdfa81b1fa2ae8b386aa2b946662571f8dbc89626ded9a6121debc", 0xb6}], 0x7, 0x0, 0x0, 0x44045}, {0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)="50c82d2646fb439228f1f8a8780d9514050a671abf7aae4f75aabff64b56f52812c83d0e1217eeee0c1f11c297a28d64ed2fc58bc18270435afbaddbe4e1bd3ed9fa0484664fec258a90e8562eb490299e81f15054db5d2e05ae011753bc1edca463073e149821913d96c0bf7a8781971aff5eaf0ff93e3bce43cc67e848e9697bdcb5372048e650a63a1e86", 0x8c}, {&(0x7f0000000a40)="746bfcf06cab01d3c0e5267e6418ff5b", 0x10}, {&(0x7f0000000a80)="35c4fce5f8c8e2472f7dbc1c40eb6bd1793cd1491f747dec97cbbb679711076dc784dcbef88ca32029abc7c772a706e259b604636dd98c9e5528d325eadff22628b2cf704e4818bd134f", 0x4a}, {&(0x7f0000000b00)="e959da6228fa8645e485c6e80bdad4ae02b8f462362b27f13680126b637a0339dae3175b5f2724d29cb2", 0x2a}, {&(0x7f0000000b40)="13cfaf78db1ca5dce4e884bf4e76b1330a041f80a6202c657800f196b1fa0ec8dcf293b22b0208d6c91c9847b21edc61aa16f05d8658330fea9f832a69c07899e883031b3e3a6f83282b35e8c3a49877d1c41d046953e21d075d62d2dcdd522c00446900f333", 0x66}, {&(0x7f0000000bc0)="d2e55d09e4faa7cfb4c4d3dfbc96ebe929be35a07c72953e7c71dc8cf6a9e9a6b04e81200a8a58cf0995ce80fa7b1c9350d3e54ab910e5ed09ee750f1bff6b8561f000ff020436c2e1d6f306256569bf3826f9ddd7d88055aa234c80f26f1ca232672a9eb8d5c4bb18a4b6efc812c284c4e93d20b345f944a523", 0x7a}, {&(0x7f0000000c40)="4c5262f78b0f52bdfacb4980afb600e79c89d37e9b6b50797b23afb3bed77db2679afd36f1cd1e63bf554ec75559a47083083404764049b0e49ece6b26fe3d0059543b339dc52ad991fb7bc5a7a956c52d54a85529e823f82f9e86dea34026b37f790a2e32ab1b6268f1a77e970825a6552ffdd77aaa92839ae4cec6ed2fcda762f534f54b6ef1ee9feace8da9572fb9be6c5bea153f58b7c0de888df29dcee341fc3bd6", 0xa4}], 0x7, &(0x7f0000000d80)=[@assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x30, 0x20048051}], 0x2, 0x10) (async, rerun: 64) r4 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001040)=@bpf_lsm={0x1d, 0xc, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xe9b}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0x7}, @generic={0x3b, 0x6, 0x2, 0x7fff, 0x4}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}]}, &(0x7f0000000ec0)='syzkaller\x00', 0xe, 0xfc, &(0x7f0000000f00)=""/252, 0x41000, 0x14, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001000)={0x4, 0x3, 0x200, 0x3ff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3b}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001100)=r5, 0x4) (async) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r6, 0x8030942b, &(0x7f0000001180)={0x10001, {0x0, 0x5, 0x1, 0x4, 0x7}}) (async, rerun: 32) r7 = socket$kcm(0x29, 0xf, 0x0) (rerun: 32) setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f00000011c0)=0x1736, 0x4) r8 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x5, &(0x7f0000001200), &(0x7f0000001240)=0x4) (async, rerun: 32) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r7, 0x8010661b, &(0x7f0000001280)) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000012c0)={'ipvlan1\x00'}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000001300)=0x1, 0x4) (async) connect(r4, &(0x7f0000001340)=@x25, 0x80) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f00000013c0)={{0x0, 0x401}, 0x100, './file0\x00'}) (async) r9 = openat$cgroup_ro(r0, &(0x7f0000001500)='freezer.self_freezing\x00', 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r9, 0x111, 0x5, 0x1e, 0x4) (async) sendmsg$NFT_MSG_GETOBJ(r9, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x20, 0x13, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20001080}, 0x8010) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) (rerun: 32) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000001c80)={{r8}, r10, 0x4, @unused=[0x0, 0x1, 0xfffffffffffffffb, 0x8], @devid}) 1.740275479s ago: executing program 0 (id=490): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x3, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060001000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.464048305s ago: executing program 1 (id=492): r0 = socket$inet6(0xa, 0x3, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0xffff, 0x1, 0x6af6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000400000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000b40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async, rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) (async, rerun: 64) r2 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) (async) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x1a958, 0x0, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000480)="d04fc2edf5", 0x5}, {0x0}, {&(0x7f0000000780)}, {&(0x7f0000000880)}], 0x4) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x4e2a, @broadcast}, {0x0, @multicast}, 0x68, {0x2, 0xce23, @empty}, 'lo\x00'}) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="0218000010000000000000000000000003000600000000000200000400000000000000000000000008001200000000000000000000000000170000000000000000000000000000007f000001000000000000000000000000fc020000000000000000000000000000030005000000000002"], 0x80}}, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.426131793s ago: executing program 3 (id=493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x4}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000041c000980100002800c00018008000140000000020800014000000003"], 0x364}}, 0x0) 1.377966339s ago: executing program 0 (id=494): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x4, @mcast2, 0xb}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa86dd60010100009c1100fe8000000000000000000000000000aaff0200000000000000000000000000014e200e22"], 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0), 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={&(0x7f0000000000)="9e", &(0x7f0000000940)=""/4096, &(0x7f0000000100), &(0x7f00000001c0), 0x1, r2}, 0x38) mmap(&(0x7f0000159000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x100010, r0, 0xf321e000) 1.179342344s ago: executing program 4 (id=495): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x15}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg(r6, &(0x7f0000003040)={&(0x7f0000001a00)=@qipcrtr={0x2a, 0xffffffff, 0x7ffe}, 0x80, 0x0}, 0x0) recvmsg(r6, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x40) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) close(r4) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=@newtclass={0xd8, 0x28, 0x800, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x7, 0x3}, {0x1, 0x3}, {0x7, 0x8}}, [@TCA_RATE={0x6, 0x5, {0xe, 0x40}}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_qfq={{0x8}, {0x54, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x6}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x9}, @TCA_QFQ_LMAX={0x8, 0x2, 0x1}, @TCA_QFQ_LMAX={0x8, 0x2, 0x4}, @TCA_QFQ_LMAX={0x8, 0x2, 0x1}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x7fffffff}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xa}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x3}, @TCA_QFQ_LMAX={0x8, 0x2, 0xfffffff9}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x8}]}}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x9, 0x3}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x48901}, 0x4000000) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200affd14000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.179031782s ago: executing program 3 (id=496): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x156}, {&(0x7f0000000bc0)="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", 0x1cb}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d8590070", 0x22}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b7464048cf573c21df5435e3b81aaba048fa4264d4c15513c91e9230a8e4b7635b58dc631604c311225f2", 0xd9}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@multicast1, 0x1, 0x0, 0x60, 0x0, [{@private}, {}, {@loopback}, {@local}, {@multicast2}, {@loopback}]}}) 1.134304778s ago: executing program 0 (id=497): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r2 = accept4$bt_l2cap(r1, 0x0, 0x0, 0x800) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0)=0x4, 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000001080)="be", 0x1}, {&(0x7f0000002180)='@', 0x1}, {&(0x7f0000000200)="52b01844c21f75e54c52974d025adcc8e3051f4679f565cd863819222173fe6f1296929b26ab06e8419352ae28de2edf53e445a7b8c0e8a9982dff47f1ff880c8030c36256d6e3335f3dcd6c7189db03af1267530bed83c25a1c8364ca04d1a5c3938f9f1b97d4b233662c2534e67924fceb647b2d993191644eadfb69b08778203b835e7cbb01abc829931e677ce5dd10d6f6c1b4fe61f87a0b", 0x9a}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000050) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 985.94605ms ago: executing program 2 (id=498): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, 0x2e, 0x1, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0xe}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 883.802666ms ago: executing program 0 (id=499): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80007, 0x1ff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000400)={'gre0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x80, 0x80, 0x8, 0x4, {{0x45, 0x4, 0x0, 0x4, 0x114, 0x66, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@cipso={0x86, 0x18, 0xffffffffffffffff, [{0x0, 0x3, '$'}, {0x7, 0x4, "825c"}, {0x0, 0xb, "471b71b56f6d5248f0"}]}, @ssrr={0x89, 0x27, 0x52, [@empty, @private=0xa010100, @rand_addr=0x64010101, @broadcast, @private=0xa010100, @rand_addr=0x64010101, @loopback, @remote, @multicast1]}, @ra={0x94, 0x3}, @ssrr={0x89, 0x1b, 0xfa, [@empty, @multicast1, @rand_addr=0x64010101, @loopback, @remote, @private=0xa010101]}, @timestamp={0x44, 0x14, 0x3b, 0x0, 0x8, [0x1d9f, 0x0, 0x200, 0x4]}, @ssrr={0x89, 0x17, 0x8, [@dev={0xac, 0x14, 0x14, 0x36}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @lsrr={0x83, 0x2b, 0xf8, [@rand_addr=0x64010102, @local, @multicast1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @timestamp_addr={0x44, 0x4c, 0x1b, 0x1, 0x7, [{@remote, 0x9d2c}, {@local, 0x80}, {@rand_addr=0x64010100, 0x4}, {@multicast1, 0x9a}, {@private=0xa010101, 0x1000}, {@loopback, 0x7ff}, {@local, 0x7fffffff}, {@broadcast, 0xd04}, {@loopback, 0x10000}]}]}}}}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map, 0x26, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x13, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0xd6, 0x0, &(0x7f0000000200)=""/214, 0x40, 0x0, 0x11, 0x4f, &(0x7f0000000140)="bd5eaa2edd2d2781ba6b2ad4c9e8876956", &(0x7f0000000300)="bf30d685f67e9c05d82bfc823f94734dd05c598b6bc542a8f16e5787e73f8df443db040e2226f576c9b05386d4153abf4022380f61e1c3653ec00b684b2e4aa8ccef437189ea0e678ec343f937670c", 0x2, 0x0, 0xc}, 0x50) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c000780080012400000000505000500020000000500040001000000110003006861"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x64, r7, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000001, 0x7a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="392593dd08bc"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0x4c, r9, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x0, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x5}, {0x7, 0x13}, {0x5, 0x3}, {0x3, 0x4}, {0x5, 0x7}]}]}]}]}]}]}, 0x4c}}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r11, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0xfffff63d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x802, 0x10a08}}, 0xffffffffffffffa1}, 0x1, 0x0, 0x0, 0x10}, 0x4c002) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006900d2012cbd7000fbdbdf250000000000000000480001004e69baeb8196462a0100000001000000080800010001000000"], 0x38}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) socket$netlink(0x10, 0x3, 0x10) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000000)=0x5, 0x4) 878.440327ms ago: executing program 3 (id=500): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) (async) 877.635896ms ago: executing program 4 (id=501): socket(0x2a, 0x2, 0x0) (async) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x6e, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xc}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0xfffffffffffffec7, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x992c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004d968119f68f58d94773b9ab884100003c"], 0x0) socket$kcm(0x10, 0x2, 0x10) (async) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) socket$inet6(0xa, 0x1, 0x0) (async) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x43, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}}, {{@in6=@empty}, 0x0, @in6=@private1}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x43, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}}, {{@in6=@empty}, 0x0, @in6=@private1}}, 0xe8) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x2, 0xf) (async) r6 = socket(0x10, 0x2, 0xf) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=r7, @ANYBLOB="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"], 0x3c}}, 0x0) sendto$packet(r2, &(0x7f0000000500)="39c394f705916c4516999da20800", 0xe, 0x0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000900)=@newtfilter={0x178, 0x2c, 0xd27, 0x400000, 0x3, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x9}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x148, 0x2, [@TCA_CGROUP_EMATCHES={0x144, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x138, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x134, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0xcd, 0x5, "0af0f757b9f72d292f4681d2dd64ea4cb43c8cbcd349026b0c2da4382f96be778616f73e9817ddf1b8c8b9ba4c7be6b43d27b0c49c2572433bd9b2cc3b1f46ca3b0bc3dd57a3ebb5e90fbcd758b75d31f25aab135a34a859db0921b793d3aa8134d3f656b3eaa0b5ef4e06dbabcd917a19b1d1406bc230448ab83748fdc382547e3d24e396a3659b57a996f443daf98e0cc51ac03fe6c56c148632c6abfbd19e927c096ca6265e2b9143f0dd4baf3887ac1c007509e90cc2f18d7fa8d9bb033e2f7c428c17022f6ba3"}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x178}}, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000010000d042abd7000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="b2000600410c0400240012800c0001006d6163766c616e00140002800800090006000000080070696d36726524d0cdd4670000c4000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x400c844}, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r10, 0x0, 0x31, 0x0, &(0x7f00000000c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)=@gettfilter={0x64, 0x2e, 0x20, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xc, 0xffff}, {0xb, 0xffff}, {0xffe0, 0x1}}, [{0x8, 0xb, 0xffffff14}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0xf}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x6df}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0xc3ef950dd569d50b) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)=@gettfilter={0x64, 0x2e, 0x20, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xc, 0xffff}, {0xb, 0xffff}, {0xffe0, 0x1}}, [{0x8, 0xb, 0xffffff14}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0xf}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x6df}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0xc3ef950dd569d50b) 852.565984ms ago: executing program 1 (id=502): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYRES8=r2], 0x3c}}, 0x4048004) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000180)) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, &(0x7f0000000180)={0xfffffffd}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd24, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x64004081}, 0x0) 696.834212ms ago: executing program 3 (id=503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="23000300010007", 0x7) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r4}, 0x10) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c00028008000140000000020800024000000005050003000000000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x4000040) 616.226862ms ago: executing program 2 (id=504): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7fffffff}]}, 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000030805000000000000000000000000000c0004800800014000000000060002400000000005000300ff"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4840}, 0xcc00) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf250601f2800c"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}]}}}]}, 0x3c}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000040)=0x9) 615.632003ms ago: executing program 0 (id=505): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000100)={'gretap0\x00', 0x7f}) close(r3) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000006c0)=[0x1], &(0x7f0000000700), 0x4, 0x100000}}, 0x40) 426.811307ms ago: executing program 3 (id=506): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getqdisc={0x3c, 0x26, 0x10, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff2}, {0xf, 0x5}, {0xb, 0x2}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040000) 416.375594ms ago: executing program 1 (id=507): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000050000030920010073797a30000000002c000000030a010200000800000000000500000409000100737d7a30000000000900030073797a30000000004c000000060a010400000000000000000500000008000b40000000002400048000000000000000006677640014000280080001400000001308000240000000030900010073797a300000000014000000112201000000000aef00000a67f2b75b0b473de209f82968cea027d090d2487b1167422144007b51ff0e9cef71203700000000"], 0xc0}}, 0x840) (async) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, 0x0, 0x108) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000d00)=""/266, 0x10a}, {&(0x7f0000000600)=""/245, 0xf5}, {&(0x7f0000002340)=""/4057, 0xfd9}, {&(0x7f00000009c0)=""/219, 0xdb}, {&(0x7f0000000500)=""/245, 0xf5}, {&(0x7f0000001f00)=""/203, 0xcb}, {&(0x7f0000000240)=""/166, 0xa6}, {&(0x7f0000000300)=""/205, 0xcd}, {&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f00000007c0)=""/158, 0x9e}, {&(0x7f0000000140)=""/95, 0x5f}, {&(0x7f0000000880)=""/59, 0x3b}, {&(0x7f0000000700)=""/135, 0x87}], 0xd}, 0x40002060) 243.446018ms ago: executing program 2 (id=508): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0xf8, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xc8, 0x2, {{0x0, 0x2}, [@TCA_NETEM_LOSS={0x8c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x101, 0xfffffffc, 0x2, 0x5}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x80000001, 0x3, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x3, 0x3, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7ff, 0x7, 0xfffeffff, 0xc5, 0x401}}, @NETEM_LOSS_GI={0x18, 0x1, {0xffff, 0xb1, 0x7fffffff, 0xde9, 0x42}}, @NETEM_LOSS_GI={0x18, 0x1, {0xc, 0x4, 0x1, 0x0, 0x1000}}]}, @TCA_NETEM_DELAY_DIST={0x13, 0x2, "5ef508480dabc5fc582fb606d3137d"}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0xf8}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000030000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r4}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0xffffffffffffffb3, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 114.544412ms ago: executing program 1 (id=509): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWRULE={0x10c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0xb8, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x40, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x47}, @NFTA_LIMIT_FLAGS={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x18}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, '\x00'}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}, @NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x168}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x0, 0x0, 0xfffffffc}, [@TCA_NETEM_RATE={0x14, 0xe, {0x2, 0x0, 0x80000}}]}}}]}, 0x60}}, 0x8c0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x58}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb8, r0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "deb2e6e63a6bc3743f834f30161662d058504b0d57ee0f5e48ed4faa23e6178d"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xda0e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000040) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004004}, 0x40001) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) r7 = socket(0x400000000010, 0x3, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r7, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10300000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)={0x40, r8, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x7}}]}, 0x40}}, 0x24000080) r9 = socket$tipc(0x1e, 0x5, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x8, 0x7f0dbe3ac64a03d0}, 0x9c) setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86) r11 = socket(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x2000400c) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r11) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r14, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x80000000}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x4c}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x44, r6, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffff95e}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r14}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044000}, 0x20000000) 96.66598ms ago: executing program 3 (id=510): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, 0x15, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_OBJ_USERDATA={0x78, 0x8, "16e7dbd78484e3e409b4ac622efec30018899db41fcbe1d2343c4dcda229b588362fc47f7fc028c3a14e4e6aa15fe1732af7392b599c1a8ef6858d204d0be914e4f902ef0ce847a67c066a90aa5199b8006906668e58d81878fc82302dacc68fb0fad3611863fbb586f91682b7d74b0694a6fa02"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000814}, 0x800) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}], 0x1, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001bc0)=ANY=[], 0x11a0}, 0x1, 0x0, 0x0, 0x8040}, 0x8080) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 0s ago: executing program 2 (id=511): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) read$nci(r2, &(0x7f0000000200)=""/89, 0x59) read$nci(r2, 0x0, 0x0) write$nci(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="71ca6a2d6f0d89cd361dd7ee030a0725ac9d007ecc88951c00000000000000"], 0x18) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001208000440000000040900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x20000000) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000340)) close(r10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.244' (ED25519) to the list of known hosts. [ 71.898196][ T5805] cgroup: Unknown subsys name 'net' [ 71.993415][ T5805] cgroup: Unknown subsys name 'cpuset' [ 72.002760][ T5805] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.636097][ T5805] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.700950][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.710569][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.721653][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.730806][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.738396][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.746467][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.758654][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.759163][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.767629][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.774787][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.789279][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.789713][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.804671][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.810423][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.812184][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.820537][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.834813][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.836161][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.843982][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.856655][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.864860][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.872541][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.873064][ T5143] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.880919][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.887721][ T5143] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.513130][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 76.531176][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 76.654053][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 76.716641][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 76.756175][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 76.881842][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.889576][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.896873][ T5827] bridge_slave_0: entered allmulticast mode [ 76.904319][ T5827] bridge_slave_0: entered promiscuous mode [ 76.950998][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.958196][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.965532][ T5827] bridge_slave_1: entered allmulticast mode [ 76.972692][ T5827] bridge_slave_1: entered promiscuous mode [ 76.980041][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.987173][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.994685][ T5820] bridge_slave_0: entered allmulticast mode [ 77.001849][ T5820] bridge_slave_0: entered promiscuous mode [ 77.047416][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.054723][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.062256][ T5820] bridge_slave_1: entered allmulticast mode [ 77.069262][ T5820] bridge_slave_1: entered promiscuous mode [ 77.093049][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.100319][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.107457][ T5823] bridge_slave_0: entered allmulticast mode [ 77.114745][ T5823] bridge_slave_0: entered promiscuous mode [ 77.162104][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.169936][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.177212][ T5823] bridge_slave_1: entered allmulticast mode [ 77.184729][ T5823] bridge_slave_1: entered promiscuous mode [ 77.194163][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.224278][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.231540][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.238675][ T5821] bridge_slave_0: entered allmulticast mode [ 77.246189][ T5821] bridge_slave_0: entered promiscuous mode [ 77.254066][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.261333][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.268514][ T5821] bridge_slave_1: entered allmulticast mode [ 77.275847][ T5821] bridge_slave_1: entered promiscuous mode [ 77.295101][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.307348][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.316683][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.324208][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.331516][ T5828] bridge_slave_0: entered allmulticast mode [ 77.338584][ T5828] bridge_slave_0: entered promiscuous mode [ 77.379061][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.388587][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.395864][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.403325][ T5828] bridge_slave_1: entered allmulticast mode [ 77.410694][ T5828] bridge_slave_1: entered promiscuous mode [ 77.429681][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.482044][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.493522][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.515624][ T5827] team0: Port device team_slave_0 added [ 77.534094][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.546059][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.567458][ T5827] team0: Port device team_slave_1 added [ 77.586914][ T5820] team0: Port device team_slave_0 added [ 77.594762][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.616794][ T5823] team0: Port device team_slave_0 added [ 77.624803][ T5823] team0: Port device team_slave_1 added [ 77.643158][ T5820] team0: Port device team_slave_1 added [ 77.649562][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.656617][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.682740][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.736913][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.744083][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.770208][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.793290][ T5821] team0: Port device team_slave_0 added [ 77.801208][ T5828] team0: Port device team_slave_0 added [ 77.835611][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.842734][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.868791][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.870803][ T5835] Bluetooth: hci2: command tx timeout [ 77.879635][ T5143] Bluetooth: hci0: command tx timeout [ 77.892851][ T5821] team0: Port device team_slave_1 added [ 77.900682][ T5828] team0: Port device team_slave_1 added [ 77.906902][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.913930][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.940260][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.951021][ T5143] Bluetooth: hci1: command tx timeout [ 77.951141][ T5835] Bluetooth: hci4: command tx timeout [ 77.956654][ T5143] Bluetooth: hci3: command tx timeout [ 77.971363][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.978514][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.004779][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.046573][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.053661][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.079953][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.134804][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.141880][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.168413][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.193538][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.200840][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.228115][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.241361][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.248337][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.274933][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.302323][ T5827] hsr_slave_0: entered promiscuous mode [ 78.308791][ T5827] hsr_slave_1: entered promiscuous mode [ 78.316674][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.323892][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.350269][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.387054][ T5820] hsr_slave_0: entered promiscuous mode [ 78.393477][ T5820] hsr_slave_1: entered promiscuous mode [ 78.399557][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 78.405447][ T5820] Cannot create hsr debugfs directory [ 78.483558][ T5823] hsr_slave_0: entered promiscuous mode [ 78.490387][ T5823] hsr_slave_1: entered promiscuous mode [ 78.496631][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 78.502771][ T5823] Cannot create hsr debugfs directory [ 78.579254][ T5821] hsr_slave_0: entered promiscuous mode [ 78.585823][ T5821] hsr_slave_1: entered promiscuous mode [ 78.592211][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 78.597968][ T5821] Cannot create hsr debugfs directory [ 78.633985][ T5828] hsr_slave_0: entered promiscuous mode [ 78.640737][ T5828] hsr_slave_1: entered promiscuous mode [ 78.647044][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 78.652938][ T5828] Cannot create hsr debugfs directory [ 79.132462][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.150810][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.158751][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.168283][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.176394][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.186641][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.203554][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.213456][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.259746][ T5820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.273200][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.281292][ T5820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.291777][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.318030][ T5820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.328483][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.352719][ T5820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.362061][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.424729][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.435627][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.451963][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.462639][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.471674][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.481908][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.501306][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.511189][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.602038][ T5821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.615016][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.623747][ T5821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.634105][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.642451][ T5821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.652794][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.662992][ T5821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.673104][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.764904][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.775743][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.786225][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.816537][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.827611][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.849033][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.861852][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.873777][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.884284][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.894293][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.909124][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.916459][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.949975][ T5143] Bluetooth: hci2: command tx timeout [ 79.951933][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.961043][ T5143] Bluetooth: hci0: command tx timeout [ 79.962621][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.031097][ T5143] Bluetooth: hci4: command tx timeout [ 80.033542][ T5835] Bluetooth: hci1: command tx timeout [ 80.037204][ T5143] Bluetooth: hci3: command tx timeout [ 80.067674][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.154927][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.165627][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.195789][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.222498][ T418] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.229645][ T418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.256387][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.294591][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.301744][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.342692][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.369582][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.376834][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.391400][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.398534][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.437854][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.445180][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.465772][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.494849][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.502038][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.518720][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.547434][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.554614][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.607959][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.618753][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.625948][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.794555][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.922988][ T5827] veth0_vlan: entered promiscuous mode [ 81.003131][ T5827] veth1_vlan: entered promiscuous mode [ 81.158767][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.214915][ T5827] veth0_macvtap: entered promiscuous mode [ 81.250179][ T5827] veth1_macvtap: entered promiscuous mode [ 81.302025][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.318445][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.342673][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.363958][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.394242][ T164] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.403718][ T164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.418062][ T5821] veth0_vlan: entered promiscuous mode [ 81.432161][ T164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.441534][ T164] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.463990][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.499539][ T5821] veth1_vlan: entered promiscuous mode [ 81.577360][ T5820] veth0_vlan: entered promiscuous mode [ 81.620717][ T5820] veth1_vlan: entered promiscuous mode [ 81.693504][ T5821] veth0_macvtap: entered promiscuous mode [ 81.705955][ T5919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.729950][ T5919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.777654][ T5821] veth1_macvtap: entered promiscuous mode [ 81.799866][ T164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.808572][ T164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.849123][ T5823] veth0_vlan: entered promiscuous mode [ 81.917049][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.922521][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.945196][ T5823] veth1_vlan: entered promiscuous mode [ 81.965457][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.988765][ T5820] veth0_macvtap: entered promiscuous mode [ 82.004929][ T5919] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.020604][ T5820] veth1_macvtap: entered promiscuous mode [ 82.031168][ T5143] Bluetooth: hci0: command tx timeout [ 82.037833][ T5143] Bluetooth: hci2: command tx timeout [ 82.064567][ T5919] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.081165][ T5919] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.114089][ T5143] Bluetooth: hci3: command tx timeout [ 82.119551][ T5143] Bluetooth: hci1: command tx timeout [ 82.125139][ T5835] Bluetooth: hci4: command tx timeout [ 82.145644][ T5919] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.197335][ T5823] veth0_macvtap: entered promiscuous mode [ 82.225789][ T5828] veth0_vlan: entered promiscuous mode [ 82.259684][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.286217][ T5823] veth1_macvtap: entered promiscuous mode [ 82.296104][ T5828] veth1_vlan: entered promiscuous mode [ 82.338463][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.383024][ T3534] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.394758][ T3534] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.409391][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.446200][ T3534] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.469437][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.487703][ T3534] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.579941][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.587781][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.597673][ T5919] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.611526][ T5919] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.623281][ T5919] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.651873][ T5919] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.707984][ T5828] veth0_macvtap: entered promiscuous mode [ 82.748777][ T5828] veth1_macvtap: entered promiscuous mode [ 82.790481][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.799473][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.851816][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.859717][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.922423][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.957028][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.997505][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.009435][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.021864][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.030824][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.053529][ T164] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.066924][ T164] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.175677][ T164] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.200644][ T164] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.277778][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.303061][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.413472][ T5892] IPVS: starting estimator thread 0... [ 83.500048][ T5960] IPVS: using max 23 ests per chain, 55200 per kthread [ 83.507133][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.544287][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.718402][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.733914][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.110666][ T5143] Bluetooth: hci2: command tx timeout [ 84.116205][ T5143] Bluetooth: hci0: command tx timeout [ 84.190473][ T5143] Bluetooth: hci1: command tx timeout [ 84.190585][ T5835] Bluetooth: hci4: command tx timeout [ 84.195975][ T5143] Bluetooth: hci3: command tx timeout [ 84.347931][ T5989] warning: `syz.3.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.408835][ T5995] Cannot find add_set index 0 as target [ 84.416736][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 84.442155][ T5994] trusted_key: syz.1.19 sent an empty control message without MSG_MORE. [ 85.027104][ T6028] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.078747][ T6026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27'. [ 85.123271][ T6026] +: renamed from syzkaller0 [ 85.221131][ T6034] netlink: 'syz.0.30': attribute type 1 has an invalid length. [ 85.248720][ T6034] wg0: Master is either lo or non-ether device [ 85.272731][ T6034] wg0: Master is either lo or non-ether device [ 85.284347][ T6034] Zero length message leads to an empty skb [ 85.804623][ T6056] netlink: 24 bytes leftover after parsing attributes in process `syz.0.34'. [ 85.840413][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'. [ 85.857810][ T6056] bond0: (slave bond_slave_1): Releasing backup interface [ 87.359230][ T6070] netlink: 'syz.0.37': attribute type 10 has an invalid length. [ 87.368250][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.376328][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.388170][ T6070] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.395382][ T6070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.403343][ T6070] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.410656][ T6070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.422340][ T6070] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 87.689385][ T6008] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 87.918742][ T6074] netlink: 'syz.1.39': attribute type 1 has an invalid length. [ 88.117178][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 88.341976][ T6092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.44'. [ 88.549357][ T6110] netlink: 'syz.0.49': attribute type 1 has an invalid length. [ 88.581888][ T6110] netlink: 224 bytes leftover after parsing attributes in process `syz.0.49'. [ 88.691354][ T6113] bond1: option miimon: invalid value (18446744073709551585) [ 88.720625][ T6113] bond1: option miimon: allowed values 0 - 2147483647 [ 88.741613][ T6117] netlink: 'syz.1.52': attribute type 1 has an invalid length. [ 88.789704][ T6113] bond1 (unregistering): Released all slaves [ 88.903645][ T6125] bond_slave_0: Device is already in use. [ 88.908491][ T6113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.50'. [ 88.933439][ T6117] bond_slave_0: Device is already in use. [ 89.097584][ T1540] IPVS: starting estimator thread 0... [ 89.213502][ T6133] IPVS: using max 29 ests per chain, 69600 per kthread [ 89.461476][ T6141] tipc: Started in network mode [ 89.502564][ T6141] tipc: Node identity 4, cluster identity 4711 [ 89.508782][ T6141] tipc: Node number set to 4 [ 89.534882][ T6146] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 89.542427][ T6146] IPv6: NLM_F_CREATE should be set when creating new route [ 89.549757][ T6146] IPv6: NLM_F_CREATE should be set when creating new route [ 89.845891][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.61'. [ 90.176087][ T6170] netlink: 44 bytes leftover after parsing attributes in process `syz.2.65'. [ 90.434901][ T6178] netlink: 'syz.4.69': attribute type 1 has an invalid length. [ 90.444699][ T6178] netlink: 20 bytes leftover after parsing attributes in process `syz.4.69'. [ 90.609477][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.639747][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.766632][ T6197] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.142393][ T6210] netlink: 100 bytes leftover after parsing attributes in process `syz.3.79'. [ 91.439460][ T6225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'. [ 91.450006][ T6225] netlink: 40 bytes leftover after parsing attributes in process `syz.2.82'. [ 91.710346][ T6210] syzkaller0: entered promiscuous mode [ 92.040220][ T42] cfg80211: failed to load regulatory.db [ 92.237264][ T6254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.90'. [ 92.258506][ T6255] netlink: 104 bytes leftover after parsing attributes in process `syz.2.89'. [ 93.226676][ T6254] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 93.861836][ T6300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.105'. [ 93.915716][ T6301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.105'. [ 93.944004][ T6303] syz_tun: entered allmulticast mode [ 93.956221][ T6303] lo: entered allmulticast mode [ 94.037761][ T6302] syz_tun: left allmulticast mode [ 94.343555][ T6322] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 94.381295][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056978000: rx timeout, send abort [ 94.882133][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056979c00: rx timeout, send abort [ 94.890632][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056978000: abort rx timeout. Force session deactivation [ 95.347769][ T6330] __nla_validate_parse: 4 callbacks suppressed [ 95.347791][ T6330] netlink: 36 bytes leftover after parsing attributes in process `syz.0.113'. [ 95.390494][ C1] vcan0 (unregistering): j1939_tp_rxtimer: 0xffff888056979c00: abort rx timeout. Force session deactivation [ 95.460086][ T164] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.468876][ T164] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.538129][ T164] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.562962][ T164] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.621724][ T6341] xt_TCPMSS: Only works on TCP SYN packets [ 95.634524][ T6339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.661537][ T6347] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 95.795437][ T6354] netlink: 56 bytes leftover after parsing attributes in process `syz.1.120'. [ 95.836810][ T6354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.120'. [ 95.847332][ T6354] netlink: 31 bytes leftover after parsing attributes in process `syz.1.120'. [ 95.860858][ T6354] netlink: 'syz.1.120': attribute type 3 has an invalid length. [ 95.868759][ T6354] netlink: 'syz.1.120': attribute type 2 has an invalid length. [ 95.905656][ T6354] netlink: 31 bytes leftover after parsing attributes in process `syz.1.120'. [ 96.017787][ T6368] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.022987][ T6362] ±ÿ: renamed from team_slave_1 (while UP) [ 96.420195][ T6385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.128'. [ 96.439649][ T6385] veth0_virt_wifi: entered promiscuous mode [ 96.493161][ T6390] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 96.711882][ T6400] openvswitch: netlink: Flow key attr not present in new flow. [ 97.004015][ T6412] netlink: 'syz.4.136': attribute type 1 has an invalid length. [ 97.035412][ T6416] syz.3.137 uses obsolete (PF_INET,SOCK_PACKET) [ 97.268142][ T6421] macvtap1: entered allmulticast mode [ 97.312776][ T6410] netlink: 196 bytes leftover after parsing attributes in process `syz.3.137'. [ 97.392687][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.137'. [ 97.974340][ T6461] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 98.130366][ T6473] netlink: 'syz.4.152': attribute type 1 has an invalid length. [ 98.139101][ T6473] netlink: 'syz.4.152': attribute type 2 has an invalid length. [ 98.169747][ T6463] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 98.185071][ T6474] netlink: 28 bytes leftover after parsing attributes in process `syz.2.150'. [ 98.204063][ T6478] gretap1: entered promiscuous mode [ 98.217936][ T6478] batman_adv: batadv0: Adding interface: gretap1 [ 98.235426][ T6480] Driver unsupported XDP return value 0 on prog (id 25) dev N/A, expect packet loss! [ 98.250618][ T6478] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 98.313717][ T6478] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 98.756943][ T6504] netlink: 'syz.2.157': attribute type 1 has an invalid length. [ 98.782897][ T6504] netlink: 20 bytes leftover after parsing attributes in process `syz.2.157'. [ 99.234898][ T6518] wireguard0: entered promiscuous mode [ 99.269531][ T6518] wireguard0: entered allmulticast mode [ 99.342805][ T6518] team0: Device wireguard0 is of different type [ 99.830786][ T6559] netlink: 'syz.3.170': attribute type 1 has an invalid length. [ 100.392468][ T6587] netlink: 'syz.1.178': attribute type 1 has an invalid length. [ 100.403064][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 100.432505][ T6588] __nla_validate_parse: 2 callbacks suppressed [ 100.432527][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.179'. [ 100.567914][ T6587] bond2: entered promiscuous mode [ 100.597011][ T6587] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.703972][ T6595] ipvlan2: entered allmulticast mode [ 100.709570][ T6595] bond2: entered allmulticast mode [ 100.736739][ T6601] ipvlan3: entered allmulticast mode [ 100.798965][ T6604] Bluetooth: MGMT ver 1.23 [ 100.830894][ T6604] netlink: 116 bytes leftover after parsing attributes in process `syz.3.182'. [ 100.867064][ T6617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.184'. [ 101.243782][ T6626] bond1: Removing last ns target with arp_interval on [ 101.446053][ T6643] IPv6: sit1: Disabled Multicast RS [ 101.452161][ T6647] netlink: 28 bytes leftover after parsing attributes in process `syz.0.194'. [ 101.476898][ T6643] sit1: entered allmulticast mode [ 101.494195][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 101.551504][ T6652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.194'. [ 101.577216][ T6652] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.584778][ T6652] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.657556][ T6657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.667992][ T6657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.682790][ T6657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.700465][ T6657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.729714][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 101.792797][ T6666] netlink: 'syz.4.199': attribute type 9 has an invalid length. [ 101.839431][ T6663] vlan0: entered allmulticast mode [ 101.844718][ T6663] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 101.855900][ T6666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.199'. [ 101.902476][ T6667] netlink: 44 bytes leftover after parsing attributes in process `syz.4.199'. [ 102.139554][ T6677] netlink: 20 bytes leftover after parsing attributes in process `syz.2.202'. [ 102.258927][ T6685] netlink: 'syz.0.205': attribute type 3 has an invalid length. [ 102.326583][ T6684] netlink: 'syz.0.205': attribute type 3 has an invalid length. [ 102.754037][ T6711] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 102.793933][ T6711] bond3 (unregistering): Released all slaves [ 102.883999][ T6724] netlink: 'syz.2.216': attribute type 1 has an invalid length. [ 103.209363][ T6735] veth0_macvtap: left promiscuous mode [ 103.884537][ T6777] pim6reg1: entered promiscuous mode [ 103.901624][ T6777] pim6reg1: entered allmulticast mode [ 104.099186][ T6781] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.263426][ T5143] block nbd0: Receive control failed (result -32) [ 104.293856][ T6796] sctp: [Deprecated]: syz.2.236 (pid 6796) Use of int in max_burst socket option. [ 104.293856][ T6796] Use struct sctp_assoc_value instead [ 104.447818][ T6796] chnl_net:caif_netlink_parms(): no params data found [ 104.598445][ T6806] syzkaller0: entered promiscuous mode [ 104.607651][ T6806] syzkaller0: entered allmulticast mode [ 104.691475][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 105.102183][ T6805] delete_channel: no stack [ 105.224276][ T6831] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 105.498777][ T6845] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 105.529318][ T6845] __nla_validate_parse: 11 callbacks suppressed [ 105.529341][ T6845] netlink: 148 bytes leftover after parsing attributes in process `syz.2.247'. [ 105.933729][ T6864] netlink: 'syz.3.254': attribute type 25 has an invalid length. [ 106.261799][ T6886] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:1 [ 106.532979][ T6899] nbd: nbd0 already in use [ 106.554407][ T6899] delete_channel: no stack [ 106.723322][ T6913] netlink: 732 bytes leftover after parsing attributes in process `syz.4.266'. [ 106.733533][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'. [ 106.787636][ T6920] netlink: 732 bytes leftover after parsing attributes in process `syz.4.266'. [ 106.849649][ T6922] netlink: 'syz.1.268': attribute type 25 has an invalid length. [ 106.857701][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.268'. [ 106.931718][ T6922] netlink: 'syz.1.268': attribute type 25 has an invalid length. [ 106.945795][ T5919] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.965697][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.268'. [ 106.966573][ T5919] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.020567][ T5919] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.044160][ T5919] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.054749][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.270'. [ 107.407877][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'. [ 107.417063][ T6947] sch_fq: defrate 0 ignored. [ 107.767017][ T6965] IPVS: ip_vs_add_dest(): server weight less than zero [ 107.784365][ T5892] IPVS: starting estimator thread 0... [ 107.881429][ T6968] IPVS: using max 26 ests per chain, 62400 per kthread [ 108.157494][ T6983] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 108.506057][ T6997] netlink: 24 bytes leftover after parsing attributes in process `syz.3.288'. [ 109.480580][ T7017] netlink: 'syz.1.295': attribute type 1 has an invalid length. [ 109.560381][ T7019] syzkaller0: entered promiscuous mode [ 109.565922][ T7019] syzkaller0: entered allmulticast mode [ 109.571978][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.296'. [ 109.663491][ T7017] 8021q: adding VLAN 0 to HW filter on device bond3 [ 109.785971][ T7025] bond3: (slave geneve2): making interface the new active one [ 109.798079][ T7025] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 109.915830][ T7027] ip6erspan0: entered promiscuous mode [ 109.954985][ T3534] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 109.970219][ T3534] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 110.025515][ T3534] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 110.096480][ T3534] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 110.602331][ T7044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'. [ 111.391063][ T7072] netlink: 'syz.3.310': attribute type 1 has an invalid length. [ 111.393574][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.311'. [ 111.554835][ T7072] bond1: entered promiscuous mode [ 111.568409][ T7072] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.635640][ T7082] netlink: 44 bytes leftover after parsing attributes in process `syz.2.313'. [ 111.659996][ T7082] netlink: 43 bytes leftover after parsing attributes in process `syz.2.313'. [ 111.686606][ T7082] netlink: 'syz.2.313': attribute type 6 has an invalid length. [ 111.700280][ T7085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.314'. [ 111.724415][ T7082] netlink: 'syz.2.313': attribute type 5 has an invalid length. [ 111.779961][ T7082] netlink: 43 bytes leftover after parsing attributes in process `syz.2.313'. [ 111.895200][ T7094] netlink: 14 bytes leftover after parsing attributes in process `syz.0.316'. [ 112.068931][ T7099] netlink: 28 bytes leftover after parsing attributes in process `syz.3.317'. [ 112.102896][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.320'. [ 112.127791][ T7099] netlink: 16 bytes leftover after parsing attributes in process `syz.3.317'. [ 112.829003][ T7142] bridge0: entered promiscuous mode [ 112.850791][ T7142] macsec1: entered promiscuous mode [ 112.866482][ T7142] macsec1: entered allmulticast mode [ 112.909036][ T7142] bridge0: entered allmulticast mode [ 112.938434][ T7142] bridge0: port 3(macsec1) entered blocking state [ 112.972600][ T7142] bridge0: port 3(macsec1) entered disabled state [ 112.988198][ T7142] bridge0: left allmulticast mode [ 113.010053][ T7142] bridge0: left promiscuous mode [ 113.036067][ T7148] tipc: Started in network mode [ 113.043606][ T7148] tipc: Node identity , cluster identity 4711 [ 113.049746][ T7148] tipc: Failed to set node id, please configure manually [ 113.059527][ T7148] tipc: Enabling of bearer rejected, failed to enable media [ 113.620471][ T7170] tipc: Started in network mode [ 113.630965][ T7170] tipc: Node identity 76091cc59371, cluster identity 4711 [ 113.638484][ T7170] tipc: Enabled bearer , priority 0 [ 113.684013][ T7170] syzkaller0: MTU too low for tipc bearer [ 113.696781][ T7170] tipc: Disabling bearer [ 113.826931][ T7181] xt_hashlimit: size too large, truncated to 1048576 [ 113.961113][ T7187] netlink: 'syz.1.335': attribute type 25 has an invalid length. [ 113.991000][ T7187] netlink: 'syz.1.335': attribute type 28 has an invalid length. [ 114.417848][ T7214] netlink: 'syz.2.343': attribute type 13 has an invalid length. [ 114.811568][ T7227] sctp: [Deprecated]: syz.3.347 (pid 7227) Use of int in maxseg socket option. [ 114.811568][ T7227] Use struct sctp_assoc_value instead [ 114.829659][ T7227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.005382][ T7241] netlink: 'syz.2.352': attribute type 83 has an invalid length. [ 115.061686][ T7243] xt_l2tp: v2 sid > 0xffff: 1114112 [ 115.094679][ T7243] netlink: 'syz.0.351': attribute type 1 has an invalid length. [ 115.218123][ T7248] netlink: 'syz.2.354': attribute type 21 has an invalid length. [ 115.254595][ T7251] syz.3.355: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 115.351303][ T7256] netlink: 'syz.0.356': attribute type 10 has an invalid length. [ 115.371047][ T7251] CPU: 1 UID: 0 PID: 7251 Comm: syz.3.355 Not tainted syzkaller #0 PREEMPT(full) [ 115.371074][ T7251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 115.371085][ T7251] Call Trace: [ 115.371093][ T7251] [ 115.371102][ T7251] dump_stack_lvl+0xe8/0x150 [ 115.371136][ T7251] warn_alloc+0x249/0x340 [ 115.371163][ T7251] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 115.371204][ T7251] ? __pfx_warn_alloc+0x10/0x10 [ 115.371235][ T7251] ? kasan_save_track+0x4f/0x80 [ 115.371255][ T7251] ? kasan_save_track+0x3e/0x80 [ 115.371275][ T7251] ? __kasan_kmalloc+0x93/0xb0 [ 115.371296][ T7251] ? __kmalloc_cache_noprof+0x31c/0x660 [ 115.371318][ T7251] ? xskq_create+0x56/0x170 [ 115.371342][ T7251] ? xsk_setsockopt+0x54c/0x990 [ 115.371362][ T7251] ? do_sock_setsockopt+0x17c/0x1b0 [ 115.371386][ T7251] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 115.371410][ T7251] ? do_syscall_64+0x14d/0xf80 [ 115.371442][ T7251] __vmalloc_node_range_noprof+0x132/0x1730 [ 115.371500][ T7251] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 115.371530][ T7251] ? __kasan_kmalloc+0x93/0xb0 [ 115.371559][ T7251] vmalloc_user_noprof+0xad/0xe0 [ 115.371582][ T7251] ? xskq_create+0xbf/0x170 [ 115.371607][ T7251] xskq_create+0xbf/0x170 [ 115.371634][ T7251] xsk_init_queue+0x8a/0xe0 [ 115.371661][ T7251] xsk_setsockopt+0x54c/0x990 [ 115.371687][ T7251] ? __pfx_xsk_setsockopt+0x10/0x10 [ 115.371710][ T7251] ? __pfx_aa_sk_perm+0x10/0x10 [ 115.371745][ T7251] ? aa_sock_opt_perm+0xff/0x1a0 [ 115.371767][ T7251] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 115.371791][ T7251] ? __pfx_xsk_setsockopt+0x10/0x10 [ 115.371815][ T7251] do_sock_setsockopt+0x17c/0x1b0 [ 115.371847][ T7251] __x64_sys_setsockopt+0x13d/0x1b0 [ 115.371878][ T7251] do_syscall_64+0x14d/0xf80 [ 115.371904][ T7251] ? trace_irq_disable+0x3b/0x150 [ 115.371921][ T7251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.371940][ T7251] ? clear_bhb_loop+0x40/0x90 [ 115.371965][ T7251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.371985][ T7251] RIP: 0033:0x7fdbb1d9c819 [ 115.372004][ T7251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.372020][ T7251] RSP: 002b:00007fdbb2c25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 115.372042][ T7251] RAX: ffffffffffffffda RBX: 00007fdbb2015fa0 RCX: 00007fdbb1d9c819 [ 115.372056][ T7251] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 115.372068][ T7251] RBP: 00007fdbb1e32c91 R08: 0000000000000004 R09: 0000000000000000 [ 115.372080][ T7251] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.372092][ T7251] R13: 00007fdbb2016038 R14: 00007fdbb2015fa0 R15: 00007ffec97ad878 [ 115.372126][ T7251] [ 115.372134][ T7251] Mem-Info: [ 115.567027][ T7269] xt_time: unknown flags 0xf4 [ 115.573576][ T7251] active_anon:6095 inactive_anon:0 isolated_anon:0 [ 115.573576][ T7251] active_file:2565 inactive_file:39942 isolated_file:0 [ 115.573576][ T7251] unevictable:768 dirty:58 writeback:0 [ 115.573576][ T7251] slab_reclaimable:10659 slab_unreclaimable:96570 [ 115.573576][ T7251] mapped:29152 shmem:1362 pagetables:1328 [ 115.573576][ T7251] sec_pagetables:0 bounce:0 [ 115.573576][ T7251] kernel_misc_reclaimable:0 [ 115.573576][ T7251] free:1335429 free_pcp:8470 free_cma:0 [ 115.755984][ T7251] Node 0 active_anon:24480kB inactive_anon:0kB active_file:10260kB inactive_file:159568kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116608kB dirty:228kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13160kB pagetables:5072kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 115.799255][ T7251] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 115.832027][ T7251] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 115.866556][ T7251] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 115.873358][ T7251] Node 0 DMA32 free:1375660kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24280kB inactive_anon:0kB active_file:10260kB inactive_file:159568kB unevictable:1536kB writepending:228kB zspages:0kB present:3129332kB managed:2552580kB mlocked:0kB bounce:0kB free_pcp:33160kB local_pcp:11860kB free_cma:0kB [ 115.908405][ T7251] lowmem_reserve[]: 0 0 0 0 0 [ 115.913580][ T7251] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 115.943798][ T7251] lowmem_reserve[]: 0 0 0 0 0 [ 115.948584][ T7251] Node 1 Normal free:3950696kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 115.989480][ T7304] __nla_validate_parse: 8 callbacks suppressed [ 115.989502][ T7304] netlink: 52 bytes leftover after parsing attributes in process `syz.0.361'. [ 116.027885][ T7251] lowmem_reserve[]: 0 0 0 0 0 [ 116.060803][ T7251] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 116.130061][ T7251] Node 0 DMA32: 1826*4kB (UM) 1017*8kB (UME) 487*16kB (UME) 139*32kB (UM) 107*64kB (UM) 72*128kB (UME) 27*256kB (UM) 16*512kB (UME) 27*1024kB (UM) 16*2048kB (UM) 307*4096kB (UM) = 1376736kB [ 116.187802][ T7313] tipc: Failed to remove unknown binding: 66,0,0/4:2188216248/2188216249 [ 116.198519][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.364'. [ 116.207569][ T7251] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 116.222210][ T7313] tipc: Failed to remove unknown binding: 66,0,0/4:2188216248/2188216249 [ 116.237147][ T7317] x_tables: duplicate underflow at hook 2 [ 116.256212][ T7251] Node 1 Normal: 0*4kB 1*8kB (M) 4*16kB (UM) 9*32kB (UM) 8*64kB (UM) 6*128kB (UM) 4*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 962*4096kB (M) = 3950696kB [ 116.296519][ T7251] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 116.324155][ T7251] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 116.356462][ T7251] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 116.382135][ T7251] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 116.395766][ T7251] 43865 total pagecache pages [ 116.401279][ T7251] 0 pages in swap cache [ 116.405735][ T7251] Free swap = 124996kB [ 116.419502][ T7251] Total swap = 124996kB [ 116.430726][ T7251] 2097051 pages RAM [ 116.439174][ T7251] 0 pages HighMem/MovableOnly [ 116.457361][ T7251] 427072 pages reserved [ 116.467590][ T7251] 0 pages cma reserved [ 116.668081][ T7337] netlink: 'syz.0.372': attribute type 1 has an invalid length. [ 116.755688][ T7339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.373'. [ 116.820248][ T7337] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.360944][ T7365] IPVS: length: 239 != 24 [ 117.367602][ T7365] netlink: 'syz.3.378': attribute type 1 has an invalid length. [ 117.500712][ T7362] syzkaller0: entered promiscuous mode [ 117.521528][ T7362] syzkaller0: entered allmulticast mode [ 117.617707][ T7377] netlink: 24 bytes leftover after parsing attributes in process `syz.1.381'. [ 117.662676][ T7380] netlink: 36 bytes leftover after parsing attributes in process `syz.2.383'. [ 117.944585][ T7396] xt_hashlimit: size too large, truncated to 1048576 [ 117.986861][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 118.068190][ T7402] netlink: 20 bytes leftover after parsing attributes in process `syz.2.387'. [ 118.263842][ T7418] netlink: 64 bytes leftover after parsing attributes in process `syz.4.390'. [ 118.274239][ T7411] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.550144][ T7284] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.561480][ T7284] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.586635][ T7284] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.645338][ T7411] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.700963][ T7411] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.744954][ T7424] syzkaller1: entered promiscuous mode [ 118.757212][ T7424] syzkaller1: entered allmulticast mode [ 118.768908][ T7447] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.395'. [ 118.824269][ T7446] bond2: entered promiscuous mode [ 118.829555][ T7446] bond2: entered allmulticast mode [ 118.840616][ T7446] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.905183][ T7411] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.928427][ T7411] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.055846][ T7411] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.077290][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.400'. [ 119.087239][ T7411] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.264400][ T7460] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 119.312265][ T7460] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 119.363033][ T7284] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.383653][ T7284] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.452775][ T49] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.480442][ T49] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.548205][ T7274] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.570046][ T7274] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.679736][ T49] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.688295][ T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.903059][ T7490] ieee802154 phy0 wpan0: encryption failed: -22 [ 120.194354][ T7509] netlink: 'syz.3.417': attribute type 11 has an invalid length. [ 120.204057][ T7506] syzkaller0: entered promiscuous mode [ 120.221267][ T7506] syzkaller0: entered allmulticast mode [ 120.313491][ T7513] netlink: 'syz.0.418': attribute type 2 has an invalid length. [ 121.117523][ T7554] netlink: 'syz.4.424': attribute type 39 has an invalid length. [ 121.594481][ T5892] IPVS: starting estimator thread 0... [ 121.699979][ T7569] IPVS: using max 27 ests per chain, 64800 per kthread [ 123.012477][ T7495] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 123.283909][ T7578] netlink: 'syz.0.433': attribute type 1 has an invalid length. [ 123.406226][ T7578] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 123.529180][ T7595] __nla_validate_parse: 9 callbacks suppressed [ 123.529203][ T7595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.437'. [ 123.902802][ T7612] syzkaller0: entered promiscuous mode [ 123.913740][ T7612] syzkaller0: entered allmulticast mode [ 124.484809][ T7647] netlink: 68 bytes leftover after parsing attributes in process `syz.2.449'. [ 124.535504][ T7649] syzkaller0: entered promiscuous mode [ 124.559886][ T7649] syzkaller0: entered allmulticast mode [ 124.934855][ T7678] netlink: 232 bytes leftover after parsing attributes in process `syz.3.456'. [ 124.942054][ T7676] netlink: 'syz.2.458': attribute type 1 has an invalid length. [ 125.117041][ T7676] bond2: entered promiscuous mode [ 125.164749][ T7676] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.179547][ T7687] ipvlan0: entered allmulticast mode [ 125.187023][ T7687] bond2: entered allmulticast mode [ 125.206992][ T7690] ipvlan1: entered allmulticast mode [ 125.373831][ T7702] IPVS: ip_vs_add_dest(): server weight less than zero [ 125.381365][ T7700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.393178][ T7705] IPVS: ip_vs_add_dest(): server weight less than zero [ 125.627371][ T7717] netlink: 20 bytes leftover after parsing attributes in process `syz.4.469'. [ 125.640646][ T7722] netlink: 'syz.2.470': attribute type 2 has an invalid length. [ 125.659259][ T7722] netlink: 244 bytes leftover after parsing attributes in process `syz.2.470'. [ 125.687874][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.469'. [ 126.090028][ T7746] netlink: 'syz.3.476': attribute type 1 has an invalid length. [ 126.233869][ T7746] bond3: entered promiscuous mode [ 126.251148][ T7746] 8021q: adding VLAN 0 to HW filter on device bond3 [ 126.340421][ T7765] netlink: 'syz.0.481': attribute type 2 has an invalid length. [ 126.349686][ T7766] netlink: 'syz.0.481': attribute type 2 has an invalid length. [ 126.352291][ T7746] ipvlan2: entered allmulticast mode [ 126.363060][ T7746] bond3: entered allmulticast mode [ 126.375662][ T7753] ipvlan3: entered allmulticast mode [ 126.441880][ T7765] ‚#{6c: entered promiscuous mode [ 126.621623][ T7776] netlink: 'syz.0.484': attribute type 11 has an invalid length. [ 126.867017][ T7797] netlink: 'syz.0.490': attribute type 1 has an invalid length. [ 126.910667][ T7797] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.087867][ T7804] xt_hashlimit: size too large, truncated to 1048576 [ 127.459631][ T7813] syzkaller0: entered promiscuous mode [ 127.465516][ T7813] syzkaller0: entered allmulticast mode [ 127.735503][ T7826] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.501'. [ 127.787243][ T7828] netlink: 'syz.0.499': attribute type 11 has an invalid length. [ 127.796101][ T7830] netlink: 28 bytes leftover after parsing attributes in process `syz.1.502'. [ 127.814101][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.502'. [ 127.880838][ T7826] netlink: 20 bytes leftover after parsing attributes in process `syz.4.501'. [ 128.018865][ T7833] Bluetooth: MGMT ver 1.23 [ 128.299040][ T7848] netlink: 'syz.1.507': attribute type 29 has an invalid length. [ 128.531188][ T7854] ================================================================== [ 128.539323][ T7854] BUG: KASAN: slab-out-of-bounds in af_alg_pull_tsgl+0x1c6/0x740 [ 128.547101][ T7854] Read of size 8 at addr ffff8880795d4060 by task syz.3.510/7854 [ 128.554834][ T7854] [ 128.557165][ T7854] CPU: 0 UID: 0 PID: 7854 Comm: syz.3.510 Not tainted syzkaller #0 PREEMPT(full) [ 128.557185][ T7854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 128.557195][ T7854] Call Trace: [ 128.557202][ T7854] [ 128.557209][ T7854] dump_stack_lvl+0xe8/0x150 [ 128.557234][ T7854] print_report+0xba/0x230 [ 128.557252][ T7854] ? af_alg_pull_tsgl+0x1c6/0x740 [ 128.557278][ T7854] kasan_report+0x117/0x150 [ 128.557300][ T7854] ? af_alg_pull_tsgl+0x1c6/0x740 [ 128.557328][ T7854] af_alg_pull_tsgl+0x1c6/0x740 [ 128.557358][ T7854] skcipher_recvmsg+0x5df/0x1140 [ 128.557384][ T7854] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 128.557402][ T7854] ? aa_sock_msg_perm+0xf1/0x1b0 [ 128.557426][ T7854] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 128.557444][ T7854] ? security_socket_recvmsg+0x7e/0x2c0 [ 128.557463][ T7854] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 128.557480][ T7854] sock_recvmsg+0x172/0x1b0 [ 128.557497][ T7854] __sys_recvfrom+0x240/0x3c0 [ 128.557518][ T7854] ? __pfx___sys_recvfrom+0x10/0x10 [ 128.557546][ T7854] ? exc_page_fault+0x6a/0xc0 [ 128.557570][ T7854] ? do_user_addr_fault+0xc6f/0x1340 [ 128.557592][ T7854] __x64_sys_recvfrom+0xde/0x100 [ 128.557612][ T7854] do_syscall_64+0x14d/0xf80 [ 128.557633][ T7854] ? trace_irq_disable+0x3b/0x150 [ 128.557647][ T7854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.557663][ T7854] ? clear_bhb_loop+0x40/0x90 [ 128.557680][ T7854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.557696][ T7854] RIP: 0033:0x7fdbb1d5d04e [ 128.557711][ T7854] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 128.557725][ T7854] RSP: 002b:00007fdbb2c23e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 128.557742][ T7854] RAX: ffffffffffffffda RBX: 00007fdbb2c256c0 RCX: 00007fdbb1d5d04e [ 128.557754][ T7854] RDX: 0000000000001000 RSI: 00007fdbb2c24000 RDI: 0000000000000005 [ 128.557764][ T7854] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 128.557773][ T7854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 128.557783][ T7854] R13: 00007fdbb2c23f58 R14: 00007fdbb2c24000 R15: 0000000000000000 [ 128.557800][ T7854] [ 128.557806][ T7854] [ 128.777290][ T7854] Allocated by task 7854: [ 128.781621][ T7854] kasan_save_track+0x3e/0x80 [ 128.786312][ T7854] __kasan_kmalloc+0x93/0xb0 [ 128.790932][ T7854] __kmalloc_noprof+0x35c/0x760 [ 128.795795][ T7854] sock_kmalloc+0xd6/0x160 [ 128.800222][ T7854] skcipher_recvmsg+0x54d/0x1140 [ 128.805166][ T7854] sock_recvmsg+0x172/0x1b0 [ 128.809671][ T7854] __sys_recvfrom+0x240/0x3c0 [ 128.814357][ T7854] __x64_sys_recvfrom+0xde/0x100 [ 128.819305][ T7854] do_syscall_64+0x14d/0xf80 [ 128.823908][ T7854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.829809][ T7854] [ 128.832136][ T7854] The buggy address belongs to the object at ffff8880795d4040 [ 128.832136][ T7854] which belongs to the cache kmalloc-32 of size 32 [ 128.846019][ T7854] The buggy address is located 0 bytes to the right of [ 128.846019][ T7854] allocated 32-byte region [ffff8880795d4040, ffff8880795d4060) [ 128.860431][ T7854] [ 128.862762][ T7854] The buggy address belongs to the physical page: [ 128.869192][ T7854] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x795d4 [ 128.877960][ T7854] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 128.885078][ T7854] page_type: f5(slab) [ 128.889081][ T7854] raw: 00fff00000000000 ffff88813fea6780 dead000000000100 dead000000000122 [ 128.897674][ T7854] raw: 0000000000000000 0000000800400040 00000000f5000000 0000000000000000 [ 128.906254][ T7854] page dumped because: kasan: bad access detected [ 128.912665][ T7854] page_owner tracks the page as allocated [ 128.918381][ T7854] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6595, tgid 6584 (syz.1.178), ts 100700106394, free_ts 100697917682 [ 128.939057][ T7854] post_alloc_hook+0x231/0x280 [ 128.943837][ T7854] get_page_from_freelist+0x24dc/0x2580 [ 128.949400][ T7854] __alloc_frozen_pages_noprof+0x18d/0x380 [ 128.955214][ T7854] allocate_slab+0x77/0x660 [ 128.959746][ T7854] refill_objects+0x331/0x3c0 [ 128.964440][ T7854] __pcs_replace_empty_main+0x2e6/0x730 [ 128.969995][ T7854] __kmalloc_cache_noprof+0x392/0x660 [ 128.975373][ T7854] ref_tracker_alloc+0x15a/0x4c0 [ 128.980317][ T7854] neigh_parms_alloc+0x1f4/0x510 [ 128.985261][ T7854] ipv6_add_dev+0x40d/0x13a0 [ 128.989862][ T7854] addrconf_notify+0x771/0x1050 [ 128.994747][ T7854] notifier_call_chain+0x1be/0x400 [ 128.999880][ T7854] register_netdevice+0x173a/0x1cf0 [ 129.005090][ T7854] ipvlan_link_new+0x3e9/0xa70 [ 129.009868][ T7854] rtnl_newlink_create+0x329/0xb70 [ 129.015004][ T7854] rtnl_newlink+0x166a/0x1bb0 [ 129.019694][ T7854] page last free pid 12 tgid 12 stack trace: [ 129.025674][ T7854] __free_frozen_pages+0xc2b/0xdb0 [ 129.030815][ T7854] __kasan_populate_vmalloc+0x1b2/0x1d0 [ 129.036366][ T7854] alloc_vmap_area+0xd73/0x14b0 [ 129.041224][ T7854] __get_vm_area_node+0x1f8/0x300 [ 129.046257][ T7854] __vmalloc_node_range_noprof+0x372/0x1730 [ 129.052152][ T7854] __vmalloc_node_noprof+0xc2/0x100 [ 129.057354][ T7854] dup_task_struct+0x275/0x9a0 [ 129.062127][ T7854] copy_process+0x508/0x3cd0 [ 129.066728][ T7854] kernel_clone+0x248/0x8e0 [ 129.071242][ T7854] user_mode_thread+0x110/0x180 [ 129.076116][ T7854] call_usermodehelper_exec_work+0x9c/0x230 [ 129.082017][ T7854] process_scheduled_works+0xb6e/0x18c0 [ 129.087576][ T7854] worker_thread+0xa53/0xfc0 [ 129.092181][ T7854] kthread+0x388/0x470 [ 129.096257][ T7854] ret_from_fork+0x51e/0xb90 [ 129.100950][ T7854] ret_from_fork_asm+0x1a/0x30 [ 129.105727][ T7854] [ 129.108099][ T7854] Memory state around the buggy address: [ 129.113747][ T7854] ffff8880795d3f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 129.121838][ T7854] ffff8880795d3f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 129.129922][ T7854] >ffff8880795d4000: 00 00 00 fc fc fc fc fc 00 00 00 00 fc fc fc fc [ 129.137988][ T7854] ^ [ 129.145189][ T7854] ffff8880795d4080: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 129.153258][ T7854] ffff8880795d4100: 00 00 05 fc fc fc fc fc 00 00 00 00 fc fc fc fc [ 129.161316][ T7854] ================================================================== [ 129.226329][ T7856] netlink: 'syz.1.509': attribute type 14 has an invalid length. [ 129.231131][ T7854] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 129.231152][ T7854] CPU: 1 UID: 0 PID: 7854 Comm: syz.3.510 Not tainted syzkaller #0 PREEMPT(full) [ 129.231175][ T7854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 129.231186][ T7854] Call Trace: [ 129.231194][ T7854] [ 129.231202][ T7854] vpanic+0x56c/0xa60 [ 129.231233][ T7854] ? __pfx_vpanic+0x10/0x10 [ 129.231258][ T7854] ? __pfx___schedule+0x10/0x10 [ 129.231285][ T7854] panic+0xc5/0xd0 [ 129.231308][ T7854] ? __pfx_panic+0x10/0x10 [ 129.231334][ T7854] ? preempt_schedule_common+0x82/0xd0 [ 129.231360][ T7854] ? af_alg_pull_tsgl+0x1c6/0x740 [ 129.231388][ T7854] check_panic_on_warn+0x89/0xb0 [ 129.231409][ T7854] ? af_alg_pull_tsgl+0x1c6/0x740 [ 129.231436][ T7854] end_report+0x73/0x180 [ 129.231459][ T7854] ? af_alg_pull_tsgl+0x1c6/0x740 [ 129.231485][ T7854] kasan_report+0x128/0x150 [ 129.231509][ T7854] ? af_alg_pull_tsgl+0x1c6/0x740 [ 129.231540][ T7854] af_alg_pull_tsgl+0x1c6/0x740 [ 129.231574][ T7854] skcipher_recvmsg+0x5df/0x1140 [ 129.231603][ T7854] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 129.231623][ T7854] ? aa_sock_msg_perm+0xf1/0x1b0 [ 129.231653][ T7854] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 129.231674][ T7854] ? security_socket_recvmsg+0x7e/0x2c0 [ 129.231696][ T7854] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 129.231717][ T7854] sock_recvmsg+0x172/0x1b0 [ 129.231737][ T7854] __sys_recvfrom+0x240/0x3c0 [ 129.231763][ T7854] ? __pfx___sys_recvfrom+0x10/0x10 [ 129.231795][ T7854] ? exc_page_fault+0x6a/0xc0 [ 129.231821][ T7854] ? do_user_addr_fault+0xc6f/0x1340 [ 129.231848][ T7854] __x64_sys_recvfrom+0xde/0x100 [ 129.231872][ T7854] do_syscall_64+0x14d/0xf80 [ 129.231897][ T7854] ? trace_irq_disable+0x3b/0x150 [ 129.231914][ T7854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.231933][ T7854] ? clear_bhb_loop+0x40/0x90 [ 129.231953][ T7854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.231971][ T7854] RIP: 0033:0x7fdbb1d5d04e [ 129.231989][ T7854] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 129.232013][ T7854] RSP: 002b:00007fdbb2c23e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 129.232036][ T7854] RAX: ffffffffffffffda RBX: 00007fdbb2c256c0 RCX: 00007fdbb1d5d04e [ 129.232050][ T7854] RDX: 0000000000001000 RSI: 00007fdbb2c24000 RDI: 0000000000000005 [ 129.232063][ T7854] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 129.232074][ T7854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 129.232086][ T7854] R13: 00007fdbb2c23f58 R14: 00007fdbb2c24000 R15: 0000000000000000 [ 129.232106][ T7854] [ 129.234241][ T7854] Kernel Offset: disabled