last executing test programs: 4m4.52104853s ago: executing program 1 (id=421): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030062617461647630000000000000000000"], 0x34}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000480)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000ef4ed20f9ae3680000000000000200000008000700ac1414bb0889d66cffaaabc2597316308c3065e874f6"], 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000ffdbdf350600000014000500fc000000000000040000000000050001001100000008000700ac1414bb23ca27df4e45c874be0e79a300"/71], 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x0) 4m4.17264719s ago: executing program 1 (id=424): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000010000000002000000004000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) r1 = socket(0x10, 0x3, 0x0) ioctl$XFS_IOC_FSCOUNTS(r1, 0x80205871, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x4000}, 0x4) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0xb9, "f23cd9de442305841ff20c1ff0c47ec815fe1cf0830d795ab6bafe854e135efcd611b58d8de346e9c8904a69c590303a8b8d7d9501d8ec9b64f723e2411fe9086c1a7fe97984f7dc2292350c7fb2c19a543fce19c0bb2e3c0418bdde69fe7d42bd3f2fd956e4e5d6eb0a5de393f0913f18c401fafa1d0791abc75bcadbf02d628f55111745acd13924a5df2c2140aeaf4ce115da1e3db759d74996ba50d94d6a006479b3cfc1a1cb9ca2cd9fca0bf275172c3061966997a161"}, &(0x7f0000000300)=0xc1) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000340)={r3, 0xb}, &(0x7f0000000380)=0x8) 4m3.337930867s ago: executing program 1 (id=428): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="010000100000000000000300000004000180"], 0x18}}, 0x0) r3 = socket(0xa, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0x3aba54a3571d4071}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xffffffffffffff53, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD={0x0, 0x7, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_LISTDEF(r7, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x48, r9, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'GPL\x00'}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}]}, 0x48}, 0x1, 0x0, 0x0, 0x2400c8c0}, 0x4) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b70300000000000085000000b300000095"], &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x73}, 0x94) 4m2.711776846s ago: executing program 1 (id=430): r0 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet_msfilter(r0, 0x0, 0x30, 0x0, 0x2000000) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0xb8, 0x1, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFCTH_TUPLE={0x78, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x14}]}, 0xb8}, 0x1, 0x0, 0x0, 0x414}, 0x4040) r1 = socket$inet6(0xa, 0x3, 0x9) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x90) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, 0x14, 0x1, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "a71e2a26c2d174b4380271c119"}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r4, 0x89e0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x4001}, 0x80, 0x0}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x0, 0xe, 0x0, &(0x7f0000000240)="ffffffff75664a0a90f73e9eb3cf", 0x0, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000000000000000000000080002"], 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'erspan0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x10, 0x10, 0x7ff, 0x6, {{0x21, 0x4, 0x3, 0x1, 0x84, 0x65, 0x0, 0x0, 0x4, 0x0, @broadcast, @rand_addr=0x64010101, {[@timestamp={0x44, 0x14, 0xd1, 0x0, 0x1, [0x1, 0x4, 0x6, 0x0]}, @cipso={0x86, 0x6, 0x1}, @ssrr={0x89, 0x1b, 0x7, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0xc}, @dev={0xac, 0x14, 0x14, 0x38}, @empty, @private=0xa010102, @remote]}, @ssrr={0x89, 0xb, 0xec, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3a}]}, @timestamp_prespec={0x44, 0xc, 0x3f, 0x3, 0x1, [{@local, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0xc4, 0x3, 0xd, [{@multicast1, 0x1}, {@remote, 0x7}, {@local, 0x9}, {@local, 0x5}]}]}}}}}) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f00000002c0)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000280)={@private2={0xfc, 0x2, '\x00', 0x1}, r8}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 3m58.176836944s ago: executing program 1 (id=439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f00000005c0)=0x5, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xa, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r5, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x85, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, &(0x7f00000002c0)=0x100) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r6, 0x40049366, &(0x7f0000000140)=0x4) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x18, 0x8}, 0x20) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={r7}, 0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newsa={0x190, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0x0, 0x0, 0xffff}, {@in=@broadcast, 0x4d4, 0x32}, @in6=@private2, {0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x8}, {}, 0x0, 0x1000, 0xa, 0x4, 0x0, 0x50}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x58, 0x1, {{'xcbc(aes)\x00'}, 0x80, "8478b0098a3a72ec6b13aa7d25e76d54"}}]}, 0x190}, 0x1, 0x0, 0x0, 0x40}, 0x40082) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r7, @ANYBLOB="0000000000000000790000000000000095000000000000009ebbe569e9ef524f8efe87ad682b0b805c7efe508cc2216572aae9cde6bc966d19e22d57439df0b06c95fc4092741212efda9765ddff2378938bf48ea427c183ef083cb67e273eb31703758ffb7253210fac6b2dcf635f6e18172b79c726f9cff399ae9ae5c327ff48a60fd52795925fb085942b2b8981dfdca7c41333cea00331999645e08a7e2ef0"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) r9 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r10, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r10, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) recvfrom$l2tp(r10, &(0x7f0000000000)=""/252, 0xfc, 0x40, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) 3m56.572807336s ago: executing program 1 (id=443): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0xfe}}, 0x1c}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x34c, r1, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9cee}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x98cb}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NODE={0x1ec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "7c33f42dfa2ec89dd1e0b764e87a46bca3765f45956a108e1c9fa064"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "5f04b781555fbcabaac9dfce55b096c9f4a425e9a9"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "9e883429643409dd29bf36d0c9de1bfcb83dddf34a4f8e"}}, @TIPC_NLA_NODE_ID={0xec, 0x3, "37f0c332ca43d5bd71074f5fef9d91f17dcbaae09567097cdce8b0cea57259a1e1114bdacb1688bd4ff772684eca2d3589efb4d09137bbe57bb1e35c12326d6a232564e06082bda28d8898bdd8caac52842c1e5ec88e79c37ac49fe374404050b9e71d76e6b01579068b1ab85bc0db06f690060a12cd5dd243260783ec389309f111d23ca6e30a6deb3335a6a991d3dbfcf564b6e7245852f78a1a4bfcc326227b3eb92ca83607c3dbe10e4c0e1a6de2fb2861ce21570b97b630d49469ff3ab638b0e8c2c6afeb0c3dfc26b1ad8d3b50fb27b47760f013a25a5a0eb2482b6371306a4cecc681fe87"}, @TIPC_NLA_NODE_ID={0x14, 0x3, "fce30e4b8217a4a12064cb1852ff8aa0"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa47}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xca5}]}]}, 0x34c}, 0x1, 0x0, 0x0, 0xc801}, 0x40080) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd24, 0x25dfdc00, {0x6}}, 0x14}}, 0x4040080) 3m40.99893775s ago: executing program 32 (id=443): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0xfe}}, 0x1c}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x34c, r1, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9cee}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x98cb}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NODE={0x1ec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "7c33f42dfa2ec89dd1e0b764e87a46bca3765f45956a108e1c9fa064"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "5f04b781555fbcabaac9dfce55b096c9f4a425e9a9"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "9e883429643409dd29bf36d0c9de1bfcb83dddf34a4f8e"}}, @TIPC_NLA_NODE_ID={0xec, 0x3, "37f0c332ca43d5bd71074f5fef9d91f17dcbaae09567097cdce8b0cea57259a1e1114bdacb1688bd4ff772684eca2d3589efb4d09137bbe57bb1e35c12326d6a232564e06082bda28d8898bdd8caac52842c1e5ec88e79c37ac49fe374404050b9e71d76e6b01579068b1ab85bc0db06f690060a12cd5dd243260783ec389309f111d23ca6e30a6deb3335a6a991d3dbfcf564b6e7245852f78a1a4bfcc326227b3eb92ca83607c3dbe10e4c0e1a6de2fb2861ce21570b97b630d49469ff3ab638b0e8c2c6afeb0c3dfc26b1ad8d3b50fb27b47760f013a25a5a0eb2482b6371306a4cecc681fe87"}, @TIPC_NLA_NODE_ID={0x14, 0x3, "fce30e4b8217a4a12064cb1852ff8aa0"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa47}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xca5}]}]}, 0x34c}, 0x1, 0x0, 0x0, 0xc801}, 0x40080) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd24, 0x25dfdc00, {0x6}}, 0x14}}, 0x4040080) 2m47.203332403s ago: executing program 2 (id=749): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r0, &(0x7f00000015c0)=[{0x0}, {&(0x7f00000014c0)='|', 0xfdef}], 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x62, 0x0, 0xffffffffffffffff, 0xffff8000, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000ac0)={r2, &(0x7f0000000940)="4776cd0c4e85e975dfcc64a4976e291b6761cf93bd34e4551f0dc177d348b33780f700b897d47f002e41952ad328f48d2fe064b3fa4deb38c064edb1cf822479ad3c0fb6b6c21e3a8153f90e1ff7fbd6bc86cedf8122e2dd2f45956a21c095a7eff34341b7127b3d14cd0bca6906d6d0caffe6ac3e3196adc49a914ed67ee6f244", &(0x7f0000000a00)=""/184}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f0000000000)={0x1d, r8}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}}, 0x410) sendmsg$can_bcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000000300000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="01000000700100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000004001"], 0x48}, 0x1, 0x0, 0x0, 0xc811}, 0x4000014) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbf, {0x0, 0x0, 0x0, r5, {0x5, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x5}, {{0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x1}, {0x8, 0x1, 0x7, 0x2, 0x5, 0x1, 0x1}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x7, r5, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000340)="74949e0ed36a3093e4", 0x9}], 0x1}, 0x5) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f00000004c0)=""/42, 0x2a, 0x0, &(0x7f0000000500)=""/221, 0xdd}}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r10, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000680)='./file0\x00', 0x0, 0x4008, r0}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x10}, 0x18) 2m46.215034246s ago: executing program 2 (id=755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf0000000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01142fbd718da241708e000008180300", @ANYRES32=r4, @ANYBLOB="18001d801400008006000500720000000500060000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x82c) 2m45.602045971s ago: executing program 2 (id=758): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x45}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000180)={0x2, 0x1}) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x45}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000180)={0x2, 0x1}) (async) 2m44.473170657s ago: executing program 2 (id=764): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0x1, 0x58, &(0x7f0000000500)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r1, 0x3, 0x8}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_LINK_UPDATE(0x21, &(0x7f0000000080), 0x10) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100003052abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031000000200012800b0001006d61637365630000100002800c000100ffffffffffffffff08000500", @ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x4040810}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r7, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x1b, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf47}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @alu={0x4, 0x1, 0x0, 0xa, 0x2, 0xffffffffffffffff, 0xfffffffffffffff0}]}, &(0x7f0000000180)='GPL\x00', 0x9, 0x6b, &(0x7f0000000300)=""/107, 0x40f00, 0x38, '\x00', r6, @fallback=0x38, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x5, 0x4, 0x7ce, 0x9}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 2m44.311032026s ago: executing program 2 (id=767): mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x22180, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) ppoll(&(0x7f0000000140)=[{r1}], 0x1, 0x0, 0x0, 0x0) (async) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x84, &(0x7f00000000c0)={r5, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0xfffffffd, 0x79b}, &(0x7f00000001c0)=0x9c) ioctl$NILFS_IOCTL_GET_SUINFO(r2, 0x80186e84, &(0x7f0000000080)={&(0x7f0000000040)=[{0x80e2, 0x1, 0x2}, {0x7, 0x80000001, 0x1}, {0xf, 0x1, 0x2}, {0x6, 0x80000000, 0x2}], 0x4, 0x10, 0xfbff, 0x9}) 2m43.205018894s ago: executing program 2 (id=772): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000003"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000240), 0x0, 0x4}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) 2m27.876092144s ago: executing program 33 (id=772): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000003"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000240), 0x0, 0x4}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) 6.026199558s ago: executing program 4 (id=1564): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0xa, [@int={0x2, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x8, 0x2}]}, {0x0, [0x61, 0x2e, 0x2e, 0x30, 0x2e, 0x0, 0x30, 0x0]}}, &(0x7f0000000240)=""/36, 0x32, 0x24, 0x0, 0x34e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x9, 0xc, 0x2af5, 0x4, r1, 0x1, '\x00', 0x0, r3, 0x5, 0x1, 0x5}, 0x50) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010101, 0x4e1d, 0x3, 'lblcr\x00', 0x0, 0xa8a, 0x2c}, 0x2c) (async) socket$kcm(0x29, 0x2, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x0) (async) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) (async) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a0104000000000200000a28000480242301800b000100657874686472000014000280080006400000000208000140000000130900010073797a300000140000001100010000000000000000000000000a00000000"], 0x7c}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0x10}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}}, 0x4000080) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) 5.512729893s ago: executing program 4 (id=1568): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000004bc0)=0x6, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206010200000000000000000c0000000c0007800800124000060000050005000400000000000900020073797a30003a69702c706f72742c6e6574000000000e00000000000000000000f46038e5c855f9bdf302d4478655d4b24f70cf040f26cf3e975fb416dbda64ac3dfd17601e37cd9c796fa59d24f875c29ed607ccf513e600"/147], 0x5c}}, 0x4020) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, r7, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x14, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @mcast2}}}}}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r5, 0x0) getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r9 = accept4(r1, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x80, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r9, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r10, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$inet(0x2, 0x5, 0x7) 4.466084273s ago: executing program 4 (id=1575): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x3}, @IFLA_BOND_DOWNDELAY={0x8, 0x15}]}}}]}, 0x44}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) 4.161974061s ago: executing program 3 (id=1577): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_getaddr={0x64, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8}, @IFA_FLAGS={0x8}, @IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_CACHEINFO={0x3e}]}, 0x64}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_getaddr={0x64, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8}, @IFA_FLAGS={0x8}, @IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_CACHEINFO={0x3e}]}, 0x64}}, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)=0x4) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) getsockopt$inet6_int(r1, 0x29, 0x13, 0x0, &(0x7f0000000180)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f000000e380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003780)=[{0x10, 0x117, 0x2}], 0x10}}], 0x1, 0x800) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="180000002f00090027bd7000fddbdf2504000000040019"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="180000002f00090027bd7000fddbdf2504000000040019"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 4.029013901s ago: executing program 0 (id=1579): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005", 0xb}], 0x1}, 0x4005) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) socket(0x10, 0x80002, 0x0) (async) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x88, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x68, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8}, {0x8}]}}, @AF_INET6={0x4}]}]}, 0x88}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x88, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x68, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8}, {0x8}]}}, @AF_INET6={0x4}]}]}, 0x88}}, 0x0) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) (async) write$bt_hci(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x20, 0x3, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000811}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x1184, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x1184, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket(0x10, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400e2430800000000000000f300001000030400", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800900010069706970000000001400028005000a00010000000500050000000000"], 0x44}}, 0x0) syz_emit_ethernet(0x6c, &(0x7f0000000180)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x37, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x3]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x6]}, {}, {}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0xf, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) 3.819533304s ago: executing program 5 (id=1580): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000008300)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000008240)=[{{&(0x7f0000000540)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002780)=[{&(0x7f00000005c0)=""/173, 0xad}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/142, 0x8e}, {&(0x7f0000001740)}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x5, &(0x7f0000002800)=""/138, 0x8a}, 0x7}, {{&(0x7f00000028c0)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000007b00)=[{&(0x7f0000002940)=""/12, 0xc}, {&(0x7f0000002980)=""/124, 0x7c}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/4096, 0x1000}, {&(0x7f0000004a00)=""/4096, 0x1000}, {&(0x7f0000005a00)=""/4096, 0x1000}, {&(0x7f0000006a00)=""/112, 0x70}, {&(0x7f0000006a80)}, {&(0x7f0000006ac0)}, {&(0x7f0000006b00)=""/4096, 0x1000}], 0xa}, 0xc}, {{&(0x7f0000007bc0)=@pptp, 0x80, &(0x7f00000081c0)=[{&(0x7f0000007c40)=""/150, 0x96}, {&(0x7f0000007d00)=""/157, 0x9d}, {&(0x7f0000007dc0)=""/254, 0xfe}, {&(0x7f0000007ec0)=""/15, 0xf}, {&(0x7f0000007f00)=""/197, 0xc5}, {&(0x7f0000008000)=""/154, 0x9a}, {&(0x7f00000080c0)=""/246, 0xf6}], 0x7}}], 0x3, 0x40000161, &(0x7f0000008340)={r2, r3+10000000}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4c0, 0x98, 0x138, 0x428, 0x0, 0x0, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@ip={@remote, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x9}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@private=0xa010100, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x32}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x9, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x3, 0x8}, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) 3.68147542s ago: executing program 5 (id=1581): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x26}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, 0x0, 0x50) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000640), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x1c, 0xe, 0x1, 0x0, [{@dev}, {@multicast2}, {@local}]}]}}, @timestamp}}}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfffffffe}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4804}, 0x80) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r11 = socket$inet_sctp(0x2, 0x1, 0x84) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) r13 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f0000000180)={r14, @in={{0x2, 0x4e23, @empty}}, 0xfffffffc, 0x5, 0x4, 0xfffffff8, 0xb, 0x9, 0xf}, &(0x7f0000000000)=0x9c) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r11, 0x84, 0x73, &(0x7f00000000c0)={r14, 0x5, 0x0, 0x6, 0x2002}, &(0x7f0000000500)=0x18) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="409aa4a6", @ANYBLOB="8b6683a369c0335d70f427c5077493546f595b17162f245516cee1a7287a6b59485ba9f6e58eeae7484ae31d0b2dbf627f83d81e09c6cffbb12409c12af629f2b7bf99f1aa69293ba1e814e7d5f54c29d459cad99761673432b28cb5b008c0d3ca8f", @ANYBLOB="010000000000ffdbdf254400000008000300", @ANYRES32=r10, @ANYRESOCT=r15], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f0000000580)={&(0x7f0000000540)=[{&(0x7f0000000240)="66d4705f78df99483af571efec4349e6296234abf2e740f426f7c06e54596f27351287d09d328fadb593085196d58cda076a9637687dfb78a7c9b39c6896d1448b1335fc5207988828ad42d22cfdc39eb3b2be7f30720d63d99029f099beac57cef57117e39f7a9c0da1bc456adf2a1971bb29d200f190910e723438ca1f91efcf7c2fe4e1af96b62dbb7041533e774645d937adb3508f0a26f931e5d9c091e8f7660a217c7685174798860a7b33b635568472eb1be018b3a4534e0e1487fd40f802fbeceddead2d091320", 0xcb}, {&(0x7f0000000440)="a1ee922dede5d5bba8d4bfe2dabc1eb54f419416e95e3a71f3a2eaccf49656833e7305f9430b166b172de302398bf6b5f283a1f26322909a525a2b4a4e64c4727527", 0x42}], 0x2, 0x0, 0x0, 0x1, 0xfffffffffffffffb, 0x5, 0x5, 0x8}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYRES64=r3, @ANYRES16=r6, @ANYBLOB="08002abd7000fddbdf255700000008000300", @ANYRES32=0x0, @ANYBLOB="06009500090000000600950006000000060095000200000006009500000e00000600950005000000060095000400000059fc642078a02014286b1b984bc931dca25698b63a88535429590e97c6af14f25ceb90d11af1cad46a295dfe035fb3602db2609ab5be3b4fcadda40422774e1f91c993d85b05ad8bfca2dee8849850eb6751878cd30ad8938db27d2fc7"], 0x4c}, 0x1, 0x0, 0x0, 0x400880c}, 0x40000) 3.585097951s ago: executing program 6 (id=1582): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000010000104050000000300000000000000", @ANYRES32=0x0, @ANYBLOB="c3670400000000009000128009000100766c616e00000000800002800600010003000000640004800c00010008000000060000000c00010007000000050000000c00010003000000070000000c00010000000000040000000c00010070000000940f00000c000100ff010000030000000c0001007ac00000000000000c00010000010000ff000000100003800c004100020000009b04000008000500", @ANYRES32=r1], 0xb8}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x140c, 0x1, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0xc004}, 0x4000800) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}, 0xf) recvfrom$l2tp(r3, &(0x7f0000000180)=""/102, 0x66, 0x1, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x5}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000300)={r4, 0x6, 0x4, [0xaec3, 0xa, 0x6, 0x1]}, 0x10) 3.27632294s ago: executing program 0 (id=1583): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10880, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffff, 0xf}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0xbc, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x100, 0x4}, {0x0, 0xd, 0x2}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r5 = socket$rxrpc(0x21, 0x2, 0x2) socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r5, 0xa) sendmsg(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e000000fd6c976840290f6098bfcf233e40370742c819edf2f183a419059b4c27cb503d1bea7addc650fc949c615b0a2c5d539140810d8c873f3e2144b553cf553e740c350cfa54da862c5b3b7aab355c6944657ca8a0"], 0x28}, 0x0) sendmsg(r5, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="180000004e4705d64958f940000000102d52e5daec7e76d7"], 0x18}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000000000000000000000080009"], 0x24}}, 0x0) 3.218168216s ago: executing program 4 (id=1584): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed}, 0x8) bind$bt_sco(r2, &(0x7f0000000700)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) accept4$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x80000) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) (async) listen(r1, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) bind$bt_sco(r2, &(0x7f0000000700)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) accept4$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x80000) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) 3.151669436s ago: executing program 5 (id=1585): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a00"/84], 0x48) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000)=0x1, 0x4) (async) recvfrom$inet(r1, 0x0, 0x1f, 0x40000120, 0x0, 0xfffffe91) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073756200"], 0x0, 0x5a}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000608)="0900000004000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.972286502s ago: executing program 6 (id=1586): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic={0x0, 0x8, 0x9}) r1 = accept4(r0, &(0x7f0000000040)=@nfc, &(0x7f00000000c0)=0x80, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x28) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={r2}, 0x8) r5 = accept$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) getsockopt$packet_int(r5, 0x107, 0x13, &(0x7f0000000240), &(0x7f0000000280)=0x4) r6 = accept4(r5, &(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x80, 0x80000) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000380)=@sack_info={r4, 0x5, 0x8e4}, &(0x7f00000003c0)=0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r8) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r9, &(0x7f0000000440)="288afd11daa93023a18fede179f2ddf0ac2d1d63542b672bb4317da04d88de4a340f63b397ee14204d387e255bc9f88f2d5c10d5a62955fcd4e078f62d8f27d655ea5a31a06eb083b462dd41d930478f8efe95f5694cca0cf9334939", 0x5c, 0x20000000, &(0x7f00000004c0)={0x2, 0x4e20, @multicast2}, 0x10) sendmsg$kcm(r6, &(0x7f00000008c0)={&(0x7f0000000500)=@caif=@rfm={0x25, 0xf, "1564a42eef33d0677d7a065e6d16dbdc"}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000580)="589ad4a121820b1b5cde4c67738ffb60c2b76e529ac2b254acbd46b36aa925f656733f59dd02e168bc4772737a1a8065c5584bdbcbc007ed8d2be18abf26774418933ef45c1d6a86146ac19871cf329650066f05f76ee6771b293bc05a010e3c83c4a3c734c69e830ff60e935a2b76e1ec0990ef7beb2141d758e3d3aab96cc95a0d1072bb154d28fc3169f8de9476c92bcf7adfe194a9b2685fe24d487d48ccf485417d21ed6ecd7af52f72cc98c3e21af807859cc31de4f49f5ed786346c78611bcabc8de26f39e8f67322aefdfd5efba03c1078ef5b6fa056a61d8ae10a48c1e4b9276a", 0xe5}, {&(0x7f0000000680)="00fb6858cf18a3ec0a2de831e89b4fbe04", 0x11}, {&(0x7f00000006c0)="702db5f0443145dc593d65603f4bde3327ae1e66a2c4556233195c4dab1ebb95699144d2b399156369", 0x29}, {&(0x7f0000000700)="a20bb7feb689594f4960bb0d2e7642e7173266a125421280cf7a8f96bbfb576a7f8a3e0e6f5fd6fb0d4374bfef48a3b241c8baf7dfedae", 0x37}, {&(0x7f0000000740)="a1d125c6fba9fe58b9092d35e529011d5df62e7106f374faf8501ece14796971a17991de7443c65c19084ec2797c5fb2026eecfcf4c6bebb68582971045be6ab1dbff9b2053ee4d1162b30b5dad7a9a91c612e2242ef475801c6003d77dd4f1555300f9ad4f78e25c3ff677315e66a3f0b76eaab45c365502127532b9e4ae7daea711fdba3f25eb577f45508066612ba74e6847b1de73b55f73c38480fd17b32043d1b43ccef2cb5f2", 0xa9}], 0x5, &(0x7f0000000880)=[{0x20, 0x84, 0x80000000, "57d86670e79443b967"}], 0x20}, 0x40000) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000940), r1) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, r11, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x54}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x40) connect$can_bcm(r0, &(0x7f0000000a80), 0x10) ioctl$sock_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000ac0)) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000b00)={r3, 0xb1bf}, &(0x7f0000000b40)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000b80)=r12, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x1c, 0x18, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40001) sendmsg$NFT_BATCH(r1, &(0x7f0000001080)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001040)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELOBJ={0x8c, 0x14, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_USERDATA={0x43, 0x8, "a62f09c4d1eb7833c7d62e20fe0227d6dc2a892879212abfa51268f37cf8449ec22fbf1a4cdda6092a06ef88d5875996af9074a2086979472f32509c22f6e9"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x210, 0x2, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xf0, 0x6, "d52fb6e5518af3eb3edf2f10b56132f9fc0d8e6ae6477f3274adb7be1ff2eabbb7f3a829078eee90ee54ed16826bc86240df20dac18e9c48179240fd0eadf33b25f56ddd8e260906688a6400386bed417ad127b211fdf5f7da57e3a05b0eebf182d83c8a1d53062c5af5791e867ba237c90af8c8e30e5f9b6ee9291cad150528d469ea473e6dcde6e6c4703b4d6ce723d20049a7edf25b8f7c3456f5b91ba0910a3099520119ff0f1647b8a8fa3ebbaff7d2f06d8545de13d14e0534f3333dae9cf2fa00b95012a85ee1c13d22f4932f7b93e34aee43a80c36c5603ac95474f4478a2e1251374fcd79158732"}, @NFTA_TABLE_USERDATA={0x67, 0x6, "936ed89a7266aa10cc145add325e68c7e6db3a233e20b0c05a44f0cef818817f27debf43c727aed3abc17ced6acd3e025cb3e70449283ec71978ebf8b449c245e92cc7008c65e940414e193fbcabd8bd8ba284639873415cc3b5afae2b63e684f86906"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x77, 0x6, "6b3b22ec3bf668d722a53bf307b603fd626d9e9a1c4ed44a2be216205f39f399f5a66e0c69fc051dc4f666c82a5b3b074e9fb4e99d7aba6d3674e51e2e6327413ad1ca3ed9194fe6769bd9cbbc185158945f83f8beb4860eaf48f2ebb647eb5e8298e379a58fe89c884c0590c8623723872c5d"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x2c4}, 0x1, 0x0, 0x0, 0x4008049}, 0xc001) r13 = accept$nfc_llcp(r1, &(0x7f00000010c0), &(0x7f0000001140)=0x60) preadv(r13, &(0x7f00000011c0)=[{&(0x7f0000001180)=""/37, 0x25}], 0x1, 0x10, 0x1) sendto$x25(r1, &(0x7f0000001200)="bd6a86b071ee807b767ceb835b19ccd6835df18de0fb4aeaaf7b801f45f8007d8f5d4b47077e7caa5655f6dadfe31f706611362a48f4cd86692bd0df7a3c2895d9c72a2db29f370146e8e29302d7d99444cefcce528e5c73733ce02ebbc42dcc6a2c6bbf751204835025c34d1616a36c3a7cc734c03637d7d336974d03b77c691c0ee361d5df64997488c0b8e38fd626095533ec54389d848f6e4f", 0x9b, 0x0, &(0x7f00000012c0), 0x12) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r9, 0x8982, &(0x7f0000001300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r14, &(0x7f00000016c0)={&(0x7f0000001380)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001640)=[{&(0x7f0000001400)="0cefe6a83c470a1bf25005772c4a32253b79fe9a1f085387f897738d98d3f3d2daf736da4a8bc0142f2c500d86f1d2a2f612afa2a4d4e731bd6622a3d5e1a8a7603248c56b45740304da41aa95c725193bb4a60b669ce54e5e4855b36493a77385cf97f5964e0a409c24cc4c37669e9b1488351b9fa8e87cb737c8ca1a3d5f9e6e0e62ecb1f414457986d0439a93cfc80886dda5fa95734bc4510b0ae53d86327d01766fbe7312fe447eedc6117570ceebc3349a4572d1b39cd701a84c322e429bc8", 0xc2}, {&(0x7f0000001500)="e2942ab4e9ac9b1d701d5e489040ec244358ecaae1e9a482697c025c0a667b26cc77cb1f237ed4f90d56502ebd0cd76f4b0d6bd4d41bef74ca86f797e73e10", 0x3f}, {&(0x7f0000001540)="0648e78a01bafb2f552543136ed4996d3ce113e107bca8f8ff70d65f96fa1aac519354b1fe1297f8ef6def8190d87306dde7d5be0d3b049eadfc1e1cc055c0e1daaa720caf88390cd650e77afc9f0ba4e1be8dc4e3d0843e3ddd0c7e3a6aa70b4eae9aa8d9d8bd58167739cdd2220151c6fd3bd223ac74b29f7fa2d22cd072fd87b880d28634a0edd18cef8ad9689c776f5f455c53a18b21b0c452708d207ab5b943c4cf9a6830858db1faaccdc4b54df1e164ee54d848a0b8c3b84a9dc516514cefc56cdb6f7760", 0xc8}], 0x3, &(0x7f0000001680)=[@rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, r10, r6]}}], 0x20, 0x4040840}, 0x0) 2.657758748s ago: executing program 3 (id=1587): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$unix(r2, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="a72d4952962f65f76998112b", 0xc}, {&(0x7f00000002c0)="b8869dd9fb606c38b5f1e38268a108562d150070", 0x14}], 0x2, 0x0, 0x0, 0x4004001}}], 0x1, 0x4000801) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x7817, 0x10, 0x6, 0xfff, {{0x7, 0x4, 0x2, 0x0, 0x1c, 0x65, 0x0, 0xe1, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @end, @end, @end]}}}}}) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="4d0000001200200025bd70fedbdf25ac1414bb000000000000000000000000000004d6020f900008000b00040000000800270035bf000014000e00fe800000000000000000000000000008000bca114cad531251f3267cc62b05b8991ec54214fa1b3e270600aaaa2fc73e8c6dfc9984ab16f5ba6d9979483c0888eb83742d8116a49fcae8222764d1e878f4c40d787c868585ca2677f1906d68221b0b5b903e63f3a15e2813bafc45563b5c406831c46c1ea309b8d94da72b999c62ec8d0af5093c369992f28dea3d16b4b3fc564687fc1dff3a1a5fb44c334ecf7e42bb646ed92ef3a0d95320638d428e8d5272d753edf0859e1df3f9f8d97d97d72034ba4e4a38c15749273bea4b12956bbbc903ad04b7b06842647440bf329414dd898cea61c7425ef3c40052f08f9dd352043fd287e72d210af4b1fc231b311f9530ff92ff99ddea2579349c"], 0x4c}}, 0x24040000) 2.581455368s ago: executing program 0 (id=1588): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket(0x10, 0x803, 0x4) (rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@delchain={0x30, 0x2c, 0xf31, 0x70bd2c, 0x2000, {0x0, 0x0, 0x0, r7, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008854}, 0x40004010) (async) r8 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0x10) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket(0x11, 0x3, 0x300) (async) r9 = socket$packet(0x11, 0x3, 0x300) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r11, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (rerun: 64) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r12, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) (async) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x148, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0, @in=@private=0xa010100, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3a}, {@in6=@mcast2, 0x4d8, 0x6c}, @in=@local, {0x0, 0x192, 0x1, 0xffff, 0x8253c, 0xa, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x800, 0x1}, {0x3, 0x8}, 0x70bd2c, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}, @sa_dir={0x5, 0x21, 0x1}, @extra_flags={0x8, 0x18, 0xa62}]}, 0x148}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) sendto$packet(r9, &(0x7f0000000240)="3f031c000302140006001e0089e9aa", 0xf, 0x40, &(0x7f0000000540)={0xc9, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.354536136s ago: executing program 4 (id=1589): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x9, 0xa}, {0x0, 0xfff1}, {0xb, 0xfff1}}, [{0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$alg(r7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r7) writev(r7, &(0x7f00000026c0)=[{&(0x7f00000003c0)="efce26262f9664e339bcfe37d927424bbfc67f97fa792b31ce79d882", 0x1c}, {&(0x7f0000001240)="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", 0xf64}], 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7050000000000ff89107d0000000000750500002000000095000000000000009abb1723bf24203831c9545b21c751ee4024f479cbe4b89f9808837203000000000000c2d182c7a3221481f5009edaf5f5ac058299e10e790a198f42a715b99fb3d2a73dd025848710155ad1efd7d991408000000000000085a0db0401fa29e075b7ab0408a0d8cfceeb23465bb027ee1151c02af21d8f9aa57e673a6724441d08087aff070eda8abef22b3a806c8226f5a2886c93bd29b37252ba4a6e9cc5f69e75680c431aa855e487ae513abd6c4ee973fce29a26018ed5e0780f8778a602a3533a3dac7da4fe491edf3abfa7bf871c58848ac46ada6776bd9b85df01e626026a59ddfa7a9c879acbfb0bf426785dec7d8611dc850df49ed8633bdb83dd505fb20649f53841a0e200c91f5bf1bb186ed87efc7b6f8859d029c8376ca19265e281fea0a6fd2222f8850c8445758503ede0ce1b3f73ecd8989e8c53c5e679b13802bddf80f3b1d07d6d68bfa12ab34697d40ac1150a842f8bb381344b994c19642a10eb30845a993daaa8bd4aebc595475feb3475d8e802498382e73edb98fcf2df96ab3c870490c4"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 2.266011215s ago: executing program 6 (id=1590): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_skbedit={0x40, 0x1, 0x0, 0x0, {{0xc}, {0xfffffffffffffe8c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x100}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x40, 0x14, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}}, @NFT_MSG_NEWOBJ={0x18, 0x12, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_DATA={0x4}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x4050}, 0x40) 1.990940848s ago: executing program 5 (id=1591): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710419000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc1, &(0x7f000000cf3d)=""/193, 0x0, 0x8, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@empty, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x10, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x6, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x80) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@empty, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x10, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x6, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r4, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) sendto$inet6(r3, &(0x7f0000000380)="e8", 0xfffffffffffffe98, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) (async) sendto$inet6(r3, &(0x7f0000000380)="e8", 0xfffffffffffffe98, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x64, r1, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}, 0x1, 0x2}, 0x0) (async) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x64, r1, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}, 0x1, 0x2}, 0x0) 1.840577311s ago: executing program 3 (id=1592): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020040002000080000000c0003000500110004"]}, 0x58}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) 1.576426514s ago: executing program 6 (id=1593): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x2002}, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8}]}, 0x6c}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) (async) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000340)={[{0x2b, 'pids'}, {0x2d, 'rlimit'}]}, 0xe) (async) write$cgroup_subtree(r5, &(0x7f0000000340)={[{0x2b, 'pids'}, {0x2d, 'rlimit'}]}, 0xe) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r3, 0x4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000), 0xe) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x7}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x20000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="ff0302"], 0xc) 1.52241331s ago: executing program 0 (id=1594): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0), 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002c80)="c1e20180c5ce0000000059dc94c7ffdf1c", 0x11}, 0x1, 0x0, 0x0, 0x24044014}, 0x40000050) recvmmsg(r2, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe72}, 0x1}], 0x1, 0xe88e164663c85842, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x74, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_PROTOINFO={0x53, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xa}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xbc}]}}, @CTA_LABELS_MASK={0x0, 0x17, [0x10000, 0x2, 0xd9, 0xa7d3, 0x1, 0x6]}, @CTA_LABELS_MASK={0x8, 0x17, [0x9]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE]}, @CTA_LABELS_MASK={0x14, 0x17, [0x5, 0x5, 0x0, 0x9e8b]}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x1) 1.454630295s ago: executing program 3 (id=1595): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x8000, 0x0, 0x2, 0xc}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x1000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20004011}, 0x40) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) getpeername$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000001ec0)={0x0, 0x8006}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000038f030000000000fe02001085000000b9000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x12, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$IEEE802154_LLSEC_LIST_DEV(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x44008905}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x40) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x80fe, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c425c573f0fee561e9ef9b68ad690000656d8166832c3a38a45b4e", "c3910f65"}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4}, 0x50) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x110}, 0x8000) accept$alg(r0, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r9, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4c000) bind$bt_hci(r8, &(0x7f0000000480)={0x1f, 0xffff}, 0xfffffdc0) 1.028650418s ago: executing program 5 (id=1596): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x193, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x24}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@local, @in6=@loopback, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast2=0xfc020000, @in6=@mcast1, @in=@loopback, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@empty, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x9, 0x10000000, 0x1}, {0x4, 0x2, 0x7}, {0x40000, 0xffffffff, 0xae8}, 0x0, 0x3502, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x6b8f, 0x2, 0xb4, 0x5}}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x890) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@empty, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0x4, 0x0, 0x60000, 0x0, 0xdea1}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x8001, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@remote}]}, 0x104}}, 0x8000) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x193, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x24}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@local, @in6=@loopback, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast2=0xfc020000, @in6=@mcast1, @in=@loopback, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async) socket$key(0xf, 0x3, 0x2) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@empty, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x9, 0x10000000, 0x1}, {0x4, 0x2, 0x7}, {0x40000, 0xffffffff, 0xae8}, 0x0, 0x3502, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x6b8f, 0x2, 0xb4, 0x5}}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x890) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@empty, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0x4, 0x0, 0x60000, 0x0, 0xdea1}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x8001, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@remote}]}, 0x104}}, 0x8000) (async) 772.158498ms ago: executing program 0 (id=1597): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32=0x1, @ANYBLOB="02000b5b000000000000000000e6540225458781ef4d9f0832c2c83e328e3ee1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000040000000300"/28], 0x50) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @empty}, &(0x7f0000000340)=0xc) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) (async) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000005c0)='cgroup.procs\x00', 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="1807000000000000000000000080100018110000", @ANYRES32=r6, @ANYBLOB="00000000000000009500007b000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) r7 = getpid() (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r6, 0x8010661b, &(0x7f00000008c0)) write$cgroup_pid(r4, &(0x7f0000000600)=r7, 0x12) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40) (async, rerun: 64) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x3, 0x0}, 0x8) (async, rerun: 64) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0x10448) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x14, 0x9, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x52}, [@call={0x85, 0x0, 0x0, 0xc5}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x72}, @map_fd={0x18, 0x5, 0x1, 0x0, r1}]}, &(0x7f0000000180)='syzkaller\x00', 0xd6, 0xa6, &(0x7f0000000240)=""/166, 0x40f00, 0x1, '\x00', r2, @lirc_mode2, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x5, 0xa, 0x8, 0xfffffffd}, 0x10, r8, r9, 0x1, 0x0, &(0x7f00000004c0)=[{0x2, 0x1, 0x6, 0x6}], 0x10, 0x2}, 0x94) (async, rerun: 64) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x18, 0x810}, 0x4000000) (async, rerun: 64) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$sock(r11, &(0x7f00000029c0)={&(0x7f0000000640)=@qipcrtr={0x2a, 0x2, 0xfffffffe}, 0x80, &(0x7f0000002900)=[{&(0x7f00000006c0)="b306e0a5220a1dfc85cf212e244451777ebacabf2d1fe5e4eed383648fff41bb4fd5df75d98a5d386a", 0x29}, {&(0x7f0000000700)="ff4a18a8ea9459012ac5b174b8543f9fc6ab9bbf6988078a6c7c57b8529bc409628005a5eb2aaab364dd1ea3cf3479ef7ed7ef03f34ba2e186b0592009c3026fd56f8d6e611f4711fcb4b735b40dff01996c74f7915572559aa9f879e1ab3d86d31b970eb0893658cf36ce0c0bdf37e5dd6facc90398420b0f3c59243440222ef5f6d9b96c79d1a8fe17f4e76ace686bcfc4", 0x92}, {&(0x7f00000007c0)="5492b80eac3c8e7067df900aa18630f361ef2e74018d36e3fd2215c08c49c3b108dece2819a4b19421f9ee79baf32cb61bd08644817671c7402793043d10da757850072ba4f1", 0x46}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000002640)="97df338a4df44b693b80408ae95d86fc7698bc3d219120f354ef21297fec795e9f27af83e5a1511bf7e889e199fb1a78ad6434250143c93482a7818b6f9d7049252e965b4209a39d3b07d16f88c6eb7bbb44cb507db53fb460a60a38ee5cab62318dabad3d3a05103ddbabc14560911017569b339b7ac5ec4fec2622b65975cd4bd51416277d9906892ce399f3eca975f43b00bd94ad3a2c1e52f686b3b68ca8ff88c9cccc8aa9", 0xa7}, {&(0x7f0000002700)="50e38b0870ccbee86cd0649ffa44ed46592516b270e83e6c8455ad55fd3754fc5425f08f588a7cd58243bd5a9be5fed9f601033d1b509deedd0dd45dbca971ceca03faf7c368350e69d3cbff5366bd213cdba6c1bba64fba7caaff0f45610c8ce3c20f15b7a390e8d8125447cd115cb8e1a3d5c81cbe3494487bc829688fa144be0d2f", 0x83}, {&(0x7f00000027c0)="4333873036064c3681bcb66db1011812624a957f79cf7ddd4cf0bca7ff5bf2caf51b42019d39182e14b0b7310c6113c2cfc845087a9ef1975fc5ceb88fd422a18faf33a6473468e8632385f70af392", 0x4f}, {&(0x7f0000002840)="6f439712442a186bf33901675ee0b6a37f26c5e7c976c0254f9b668e33a1118cdb94bc0b91b7f12bb68b9860251a81c37620644ffaa1839ef8b49b894a71f6cd03231ae3f7d656989367408cdba2e47d0e26680b45a343115fb078ec332c32776bc3a45a141983d25474088118ba9444d2ce254fca93ae9039e1a7b6fa4f0a778f07a07ad79b60595f190383d604fd90287e6a07d7ed05ff3b05940d0cb97b9c12ef75d97aa5f2b816e7014219e904823b61", 0xb2}], 0x8, &(0x7f0000002980)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x1000}}], 0x30}, 0x88800) (async) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000058000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004800c00010000000000000000010c0002000000000000000001080004000000000014000000110001"], 0xa0}}, 0x0) 670.810042ms ago: executing program 6 (id=1598): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100000000000000000002000000", @ANYRES32=r1, @ANYRES32=r0], 0x1c}}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x60, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x3e, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c00002c0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e2c67aa5b"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x60}}, 0x0) 453.866459ms ago: executing program 4 (id=1599): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f0000000140)=""/159, 0x9f}], 0x2}, 0x2000) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000200)={0x60, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0xffffffffffffffcb, 0x4, 0x1}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x884) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xffffffffffffff35, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x0, 0x2}}]}}]}, 0x44}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r13, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r1, 0x29, 0x0, 0x18, 0x10, 0x11, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8, 0x8, 0x3}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @multicast1, @dev}, &(0x7f00000003c0)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000400)={@multicast2, @dev, 0x0}, &(0x7f0000000440)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000011c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001180)={&(0x7f0000000480)={0xcc8, r6, 0x10, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x95}}}]}}, {{0x8, 0x1, r1}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xd60}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r10}, {0x1bc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xa00}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}]}}, {{0x8, 0x1, r1}, {0x1f4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc19}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r13}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3059}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x19e50dfe}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x13d4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0xe8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}]}}, {{0x8, 0x1, r1}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}]}}]}, 0xcc8}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000) 436.231146ms ago: executing program 3 (id=1600): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x2, '\x00', 0x0, r1, 0x0, 0x1}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac6810b64a51238d30ee"], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) 352.969356ms ago: executing program 5 (id=1601): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="6a0ac4ff0000000071109d000000000095"], &(0x7f0000000480)='GPL\x00', 0x3}, 0x94) socketpair(0x1d, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x24, 0x10, 0x439, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_IFALIASn={0x4}]}, 0x24}}, 0x0) 96.886312ms ago: executing program 6 (id=1602): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)={0x62, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r4, &(0x7f0000000380)="0099", &(0x7f0000000480)=@udp6=r3, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0x200000ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r7 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r7, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYRESDEC=r7, @ANYRES32=r6, @ANYBLOB="0a0006000802110000000000"], 0x28}}, 0x0) 76.580104ms ago: executing program 3 (id=1603): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}, 0xf) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="23000000080000000c001b000300000001"], 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0xb5, 0x0, 0x0, @mcast1, @loopback, 0x7, 0x10, 0x9, 0x9}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x54}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x58}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000600000020000180140002006e657464657673696d3000"], 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r7, 0x25, 0x0, @val=@netkit}, 0x1c) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r7, @ANYBLOB="000000002c12070008000400"], 0x28}}, 0x4004090) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002dc0)={&(0x7f00000003c0)="83740935985204017238499f9bcff23e398a315e06a8748e4dcc330a344acf0288c9fddd2646b9f9c5034142f6cac14e36f68e75bdc1535d20e1af348edac9371154bb65e7fffb16dca2373f5fcd1bed2cef1f72c45fa143e9e1a2b0de36c1f66d22bbb3cbcb61895eec52c6817912eac00bf9b521fbff016be7cbd57d7120e2c9d16bbf62b754af423a47f3556b5202f1999189bb2a42c871438506d955b4250d3254ea5417c247bbee46592d", &(0x7f0000000480)=""/135, &(0x7f0000001d80)="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", &(0x7f0000002d80)="0c97694723030f7572", 0x8, r1, 0x4}, 0x38) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f00000018c0)=[@rights={{0x14, 0x1, 0x1, [r8]}}], 0x18, 0x20008880}}], 0x2, 0x4c054) 0s ago: executing program 0 (id=1604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1c) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) writev(r0, &(0x7f0000000180), 0x100000000000003c) kernel console output (not intermixed with test programs): 5.662210][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.664500][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.680810][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.775985][ T5837] openvswitch: netlink: Flow actions attr not present in new flow. [ 95.779772][ T30] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.779922][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.780038][ T30] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.780146][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.780243][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.857325][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.857375][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.969668][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.969719][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.025170][ T5842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 96.115810][ T5840] netlink: 'syz.2.10': attribute type 16 has an invalid length. [ 96.115857][ T5840] netlink: 'syz.2.10': attribute type 2 has an invalid length. [ 96.115888][ T5840] netlink: 64110 bytes leftover after parsing attributes in process `syz.2.10'. [ 96.186274][ T5842] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.203140][ T5855] netlink: 'syz.0.11': attribute type 10 has an invalid length. [ 96.262160][ T5843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 96.264006][ T5842] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 96.296117][ T5855] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 96.338161][ T5842] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 96.338203][ T5842] netlink: 'syz.1.2': attribute type 2 has an invalid length. [ 96.363651][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.363697][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.749742][ T5870] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 97.020230][ T5879] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13'. [ 97.096709][ T5884] netlink: 'syz.4.14': attribute type 1 has an invalid length. [ 97.116235][ T5885] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15'. [ 97.760598][ T5894] openvswitch: netlink: Missing key (keys=40, expected=100) [ 97.899503][ T5903] warning: `syz.0.21' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.941362][ T5903] netlink: 284 bytes leftover after parsing attributes in process `syz.0.21'. [ 98.148371][ T5910] Bluetooth: MGMT ver 1.23 [ 98.444564][ T5917] nftables ruleset with unbound chain [ 98.536747][ T5926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.735847][ T5940] netlink: 'syz.0.28': attribute type 1 has an invalid length. [ 98.819800][ T5946] netlink: 'syz.0.28': attribute type 1 has an invalid length. [ 99.253466][ T5958] nbd: must specify an index to disconnect [ 99.470821][ T5966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.37'. [ 99.816150][ T5982] netlink: 20 bytes leftover after parsing attributes in process `syz.2.38'. [ 100.162596][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.48'. [ 100.375918][ T6004] netlink: 'syz.2.52': attribute type 9 has an invalid length. [ 100.995319][ T6022] syzkaller0: entered promiscuous mode [ 100.995365][ T6022] syzkaller0: entered allmulticast mode [ 101.022827][ T6022] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 101.052629][ T6024] __nla_validate_parse: 6 callbacks suppressed [ 101.063212][ T6024] netlink: 64 bytes leftover after parsing attributes in process `syz.1.58'. [ 101.159076][ T6024] syzkaller1: entered promiscuous mode [ 101.165185][ T6024] syzkaller1: entered allmulticast mode [ 101.324214][ T6030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.59'. [ 101.366742][ T6030] netlink: 76 bytes leftover after parsing attributes in process `syz.3.59'. [ 101.505903][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.62'. [ 101.722332][ T6052] veth1_to_bond: entered allmulticast mode [ 101.737446][ T6052] veth1_to_bond: left allmulticast mode [ 101.919995][ T6057] Cannot find add_set index 0 as target [ 102.134088][ T6069] netlink: 13 bytes leftover after parsing attributes in process `syz.1.72'. [ 102.182557][ T6072] xt_hashlimit: invalid interval [ 102.198110][ T6077] netlink: 13 bytes leftover after parsing attributes in process `syz.1.72'. [ 102.315139][ T6067] Driver unsupported XDP return value 0 on prog (id 21) dev N/A, expect packet loss! [ 102.456049][ T6079] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64 [ 102.524119][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.73'. [ 102.618036][ T6067] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 102.922660][ T6092] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.76'. [ 104.642157][ T6092] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 104.660135][ T6092] 0ªX¹¦Dö»: entered allmulticast mode [ 104.884359][ T6105] netlink: 44 bytes leftover after parsing attributes in process `syz.2.80'. [ 105.030646][ T6111] netlink: 'syz.1.83': attribute type 15 has an invalid length. [ 105.412098][ T6128] pimreg3: entered allmulticast mode [ 105.439743][ T6128] tc action pedit 'at' offset -2147483645 out of bounds [ 105.994636][ T6161] netlink: 59 bytes leftover after parsing attributes in process `syz.0.95'. [ 106.462985][ T6175] __nla_validate_parse: 1 callbacks suppressed [ 106.463042][ T6175] netlink: 144 bytes leftover after parsing attributes in process `syz.2.99'. [ 106.844135][ T6200] ip_tables: iptables: counters copy to user failed while replacing table [ 106.921197][ T6209] ip_tables: iptables: counters copy to user failed while replacing table [ 107.206447][ T6224] netlink: 'syz.3.106': attribute type 1 has an invalid length. [ 107.539901][ T6231] pimreg: entered allmulticast mode [ 107.571059][ T1160] IPVS: starting estimator thread 0... [ 107.658762][ T6238] IPVS: using max 36 ests per chain, 86400 per kthread [ 107.690512][ T6230] IPVS: sh: FWM 3 0x00000003 - no destination available [ 108.164216][ T6270] nftables ruleset with unbound set [ 108.190513][ T6264] netlink: Failed to add  helper -22 [ 108.190591][ T6264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.214841][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.118'. [ 109.232256][ T6266] syz.2.116 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 109.244396][ T6266] CPU: 1 UID: 0 PID: 6266 Comm: syz.2.116 Not tainted syzkaller #0 PREEMPT(full) [ 109.244427][ T6266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.244449][ T6266] Call Trace: [ 109.244462][ T6266] [ 109.244473][ T6266] dump_stack_lvl+0xe8/0x150 [ 109.244519][ T6266] dump_header+0xd3/0x4b0 [ 109.244551][ T6266] oom_kill_process+0x3ab/0x9e0 [ 109.244583][ T6266] out_of_memory+0x1064/0x1480 [ 109.244608][ T6266] ? try_charge_memcg+0xc32/0x15e0 [ 109.244648][ T6266] ? __pfx_out_of_memory+0x10/0x10 [ 109.244671][ T6266] ? do_raw_spin_unlock+0xf5/0x200 [ 109.244712][ T6266] try_charge_memcg+0xcdf/0x15e0 [ 109.244760][ T6266] ? __pfx_try_charge_memcg+0x10/0x10 [ 109.244818][ T6266] ? charge_memcg+0x47/0x310 [ 109.244847][ T6266] charge_memcg+0x1dd/0x310 [ 109.244873][ T6266] ? mem_cgroup_swapin_charge_folio+0x2b/0x390 [ 109.244898][ T6266] mem_cgroup_swapin_charge_folio+0x25a/0x390 [ 109.244928][ T6266] swap_cache_alloc_folio+0x4de/0x990 [ 109.244982][ T6266] swap_cache_read_folio+0x44/0x120 [ 109.245018][ T6266] swap_cluster_readahead+0x392/0x630 [ 109.245057][ T6266] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 109.245116][ T6266] swapin_readahead+0x1a3/0xc50 [ 109.245168][ T6266] ? __pfx_swapin_readahead+0x10/0x10 [ 109.245206][ T6266] ? swap_table_get+0x1e/0x260 [ 109.245234][ T6266] ? swap_table_get+0x1e/0x260 [ 109.245260][ T6266] ? swap_table_get+0x1e/0x260 [ 109.245289][ T6266] ? swap_table_get+0x216/0x260 [ 109.245325][ T6266] ? swap_cache_get_folio+0x2e7/0x2f0 [ 109.245362][ T6266] do_swap_page+0x3fb/0x4c10 [ 109.245410][ T6266] ? __lock_acquire+0x6df/0x2e50 [ 109.245431][ T6266] ? do_swap_page+0x126/0x4c10 [ 109.245458][ T6266] ? __pfx_do_swap_page+0x10/0x10 [ 109.245482][ T6266] ? __pte_offset_map+0x1ae/0x240 [ 109.245514][ T6266] ? pte_offset_map_rw_nolock+0xea/0x160 [ 109.245547][ T6266] handle_mm_fault+0x1398/0x3750 [ 109.245587][ T6266] ? handle_mm_fault+0xf1/0x3750 [ 109.245628][ T6266] ? __pfx_handle_mm_fault+0x10/0x10 [ 109.245654][ T6266] ? lock_vma_under_rcu+0x45a/0x500 [ 109.245719][ T6266] do_user_addr_fault+0xa4f/0x1340 [ 109.245758][ T6266] ? trace_page_fault_user+0x84/0x1e0 [ 109.245784][ T6266] exc_page_fault+0x6a/0xc0 [ 109.245819][ T6266] asm_exc_page_fault+0x26/0x30 [ 109.245841][ T6266] RIP: 0033:0x7f99a4a66875 [ 109.245869][ T6266] Code: e8 c0 51 ff ff 48 8b 05 09 ef ee 00 83 05 f2 ee ee 00 01 be 08 00 00 00 48 89 ef 48 8d 50 ff 48 89 15 ef ee ee 00 44 88 78 ff <44> 8b 3d d4 ee ee 00 e8 8f 51 ff ff 48 8b 05 e0 ee ee 00 44 89 38 [ 109.245888][ T6266] RSP: 002b:00007fffb5b9ebf0 EFLAGS: 00010202 [ 109.245912][ T6266] RAX: 0000001b33c63f70 RBX: 0000000000000026 RCX: 0000000000000026 [ 109.245927][ T6266] RDX: 0000001b33c63f6f RSI: 0000000000000008 RDI: 00007f99a5955720 [ 109.245942][ T6266] RBP: 00007f99a5955720 R08: 0000000000000000 R09: 00007f99a4e26038 [ 109.245957][ T6266] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 109.245970][ T6266] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 [ 109.246003][ T6266] [ 109.346262][ T6266] memory: usage 307200kB, limit 307200kB, failcnt 420 [ 109.346332][ T6266] memory+swap: usage 307328kB, limit 9007199254740988kB, failcnt 0 [ 109.346373][ T6266] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 109.346407][ T6266] Memory cgroup stats for /syz2: [ 109.347609][ T6266] cache 4096 [ 109.347639][ T6266] rss 0 [ 109.347659][ T6266] rss_huge 0 [ 109.377335][ T6266] shmem 0 [ 109.377387][ T6266] mapped_file 4096 [ 109.377410][ T6266] dirty 0 [ 109.377430][ T6266] writeback 0 [ 109.377450][ T6266] workingset_refault_anon 2 [ 109.377471][ T6266] workingset_refault_file 53 [ 109.377492][ T6266] swap 131072 [ 109.377519][ T6266] swapcached 139264 [ 109.377540][ T6266] pgpgin 1262 [ 109.377568][ T6266] pgpgout 1261 [ 109.377589][ T6266] pgfault 2615 [ 109.377609][ T6266] pgmajfault 6 [ 109.377629][ T6266] inactive_anon 0 [ 109.377657][ T6266] active_anon 0 [ 109.377683][ T6266] inactive_file 0 [ 109.377697][ T6266] active_file 0 [ 109.377717][ T6266] unevictable 0 [ 109.377738][ T6266] hierarchical_memory_limit 314572800 [ 109.377760][ T6266] hierarchical_memsw_limit 9223372036854771712 [ 109.377783][ T6266] total_cache 4096 [ 109.377805][ T6266] total_rss 0 [ 109.377827][ T6266] total_rss_huge 0 [ 109.377841][ T6266] total_shmem 0 [ 109.377862][ T6266] total_mapped_file 4096 [ 109.377883][ T6266] total_dirty 0 [ 109.377903][ T6266] total_writeback 0 [ 109.377924][ T6266] total_workingset_refault_anon 2 [ 109.377944][ T6266] total_workingset_refault_file 53 [ 109.377965][ T6266] total_swap 131072 [ 109.377985][ T6266] total_swapcached 139264 [ 109.378037][ T6266] total_pgpgin 1262 [ 109.378059][ T6266] total_pgpgout 1261 [ 109.378079][ T6266] total_pgfault 2615 [ 109.378100][ T6266] total_pgmajfault 6 [ 109.378120][ T6266] total_inactive_anon 0 [ 109.378140][ T6266] total_active_anon 0 [ 109.378161][ T6266] total_inactive_file 0 [ 109.378183][ T6266] total_active_file 0 [ 109.378203][ T6266] total_unevictable 0 [ 109.378223][ T6266] anon_cost 0 [ 109.378244][ T6266] file_cost 0 [ 109.378265][ T6266] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.116,pid=6266,uid=0 [ 109.382914][ T6266] Memory cgroup out of memory: Killed process 6266 (syz.2.116) total-vm:98604kB, anon-rss:1256kB, file-rss:21644kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 109.459282][ T6180] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 110.061483][ T6293] netlink: 48 bytes leftover after parsing attributes in process `syz.3.119'. [ 110.093746][ T6292] netlink: 'syz.3.119': attribute type 8 has an invalid length. [ 110.102969][ T6292] netlink: 'syz.3.119': attribute type 3 has an invalid length. [ 110.103019][ T6292] netlink: 'syz.3.119': attribute type 4 has an invalid length. [ 110.103039][ T6292] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.119'. [ 110.104695][ T6268] syz.2.116 (6268) used greatest stack depth: 18528 bytes left [ 110.349009][ T6300] netlink: 92 bytes leftover after parsing attributes in process `syz.4.122'. [ 110.355224][ T6300] netlink: 92 bytes leftover after parsing attributes in process `syz.4.122'. [ 110.398813][ T6300] netlink: 92 bytes leftover after parsing attributes in process `syz.4.122'. [ 110.410810][ T6300] netlink: 92 bytes leftover after parsing attributes in process `syz.4.122'. [ 110.425373][ T6300] netlink: 92 bytes leftover after parsing attributes in process `syz.4.122'. [ 110.438017][ T6300] netlink: 92 bytes leftover after parsing attributes in process `syz.4.122'. [ 110.924494][ T6323] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 111.873549][ T6341] syz.4.133 (6341) used greatest stack depth: 18088 bytes left [ 112.396999][ T6372] macsec1: entered promiscuous mode [ 112.397050][ T6372] hsr0: entered promiscuous mode [ 112.479205][ T6385] __nla_validate_parse: 30 callbacks suppressed [ 112.479257][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 112.601250][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 112.837223][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 112.904928][ T6396] netlink: 16 bytes leftover after parsing attributes in process `syz.2.144'. [ 112.904978][ T6396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.144'. [ 113.169129][ T6398] netlink: 180 bytes leftover after parsing attributes in process `syz.2.144'. [ 113.182129][ T6407] netlink: 180 bytes leftover after parsing attributes in process `syz.2.144'. [ 113.205259][ T6396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'. [ 113.358740][ T6416] netlink: 20 bytes leftover after parsing attributes in process `syz.0.149'. [ 113.445639][ T6416] xt_hashlimit: size too large, truncated to 1048576 [ 113.555997][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.619876][ T6417] bridge_slave_0 (unregistering): left allmulticast mode [ 113.631924][ T6417] bridge_slave_0 (unregistering): left promiscuous mode [ 113.641661][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.744850][ T6436] netlink: 116 bytes leftover after parsing attributes in process `syz.4.153'. [ 113.765705][ T6423] IPv6: NLM_F_CREATE should be specified when creating new route [ 113.816210][ T6427] netlink: 'syz.1.154': attribute type 29 has an invalid length. [ 113.816263][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'. [ 113.827613][ T6423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.152'. [ 114.970858][ T6478] netlink: 'syz.2.163': attribute type 1 has an invalid length. [ 115.117369][ T6478] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.181064][ T6489] bond1: (slave veth0_to_bond): making interface the new active one [ 115.208669][ T6489] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 115.240807][ T6492] bond1: entered promiscuous mode [ 115.246451][ T6492] veth0_to_bond: entered promiscuous mode [ 115.252854][ T6492] bond1: entered allmulticast mode [ 115.258647][ T6492] veth0_to_bond: entered allmulticast mode [ 115.595565][ T172] IPVS: starting estimator thread 0... [ 115.672847][ T6502] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 115.686746][ T6510] IPVS: using max 27 ests per chain, 64800 per kthread [ 115.760678][ T6503] netlink: zone id is out of range [ 115.760729][ T6503] netlink: zone id is out of range [ 115.760757][ T6503] netlink: zone id is out of range [ 115.760766][ T6503] netlink: zone id is out of range [ 115.760773][ T6503] netlink: zone id is out of range [ 115.760816][ T6503] netlink: zone id is out of range [ 115.761454][ T6503] netlink: zone id is out of range [ 115.914714][ T6496] syzkaller1: entered promiscuous mode [ 115.923959][ T6496] syzkaller1: entered allmulticast mode [ 116.271146][ T6529] netlink: 'syz.0.174': attribute type 29 has an invalid length. [ 116.330800][ T6535] netlink: 'syz.1.176': attribute type 10 has an invalid length. [ 116.425476][ T6535] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.427420][ T6535] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.474405][ T6535] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.474838][ T6535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.477727][ T6535] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.478094][ T6535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.519395][ T6535] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 116.669118][ T6549] Cannot find add_set index 4 as target [ 116.713983][ T6537] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.945815][ T6566] netlink: 'syz.1.185': attribute type 3 has an invalid length. [ 117.658309][ T6600] __nla_validate_parse: 7 callbacks suppressed [ 117.658377][ T6600] netlink: 16 bytes leftover after parsing attributes in process `syz.1.189'. [ 117.969958][ T6613] net_ratelimit: 3 callbacks suppressed [ 117.970015][ T6613] ip_tables: iptables: counters copy to user failed while replacing table [ 117.976116][ T6613] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 118.002538][ T6613] syzkaller0: entered promiscuous mode [ 118.002590][ T6613] syzkaller0: entered allmulticast mode [ 118.044612][ T6613] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress) [ 118.361033][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.199'. [ 118.480231][ T6633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.199'. [ 118.518163][ T6652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.202'. [ 118.671772][ T6635] netlink: Failed to add  helper -22 [ 118.671857][ T6635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.333654][ T6687] netlink: 'syz.1.209': attribute type 29 has an invalid length. [ 119.398854][ T6687] netlink: 'syz.1.209': attribute type 29 has an invalid length. [ 119.405316][ T6687] netlink: 'syz.1.209': attribute type 29 has an invalid length. [ 119.695862][ T6702] syzkaller0: entered promiscuous mode [ 119.702576][ T6702] syzkaller0: entered allmulticast mode [ 119.731271][ T6702] tipc: Started in network mode [ 119.731342][ T6702] tipc: Node identity 1a98072b3ffe, cluster identity 4711 [ 119.748742][ T6702] tipc: Enabled bearer , priority 0 [ 119.838498][ T6713] netlink: zone id is out of range [ 119.844023][ T6713] netlink: zone id is out of range [ 119.850100][ T6713] netlink: zone id is out of range [ 119.855570][ T6713] netlink: zone id is out of range [ 119.927806][ T6716] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.957483][ T6716] bridge_slave_0 (unregistering): left allmulticast mode [ 119.967479][ T6716] bridge_slave_0 (unregistering): left promiscuous mode [ 119.967602][ T6716] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.274059][ T6727] x_tables: duplicate underflow at hook 1 [ 120.295811][ T6728] xt_ecn: cannot match TCP bits for non-tcp packets [ 120.500667][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'. [ 120.743218][ T6747] veth5: entered promiscuous mode [ 120.808380][ T6749] netlink: 32 bytes leftover after parsing attributes in process `syz.2.229'. [ 120.826220][ T6749] netlink: 32 bytes leftover after parsing attributes in process `syz.2.229'. [ 120.853464][ T6749] netlink: 16 bytes leftover after parsing attributes in process `syz.2.229'. [ 120.864663][ T5761] tipc: Node number set to 627443499 [ 120.874132][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'. [ 120.897346][ T6754] IPv6: Can't replace route, no match found [ 120.945015][ T6749] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 121.158031][ T6766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.174601][ T6766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.191150][ T6771] netlink: 28 bytes leftover after parsing attributes in process `syz.0.235'. [ 121.774069][ T6794] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 121.784540][ T6794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.879691][ T6797] netlink: 'syz.0.242': attribute type 1 has an invalid length. [ 121.888197][ T6797] netlink: 'syz.0.242': attribute type 1 has an invalid length. [ 122.761839][ T6834] block nbd0: not configured, cannot reconfigure [ 123.453254][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 124.659654][ T6852] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 124.751716][ T6849] __nla_validate_parse: 6 callbacks suppressed [ 124.761375][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.255'. [ 124.857142][ T6857] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 124.901437][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.260'. [ 125.000795][ T6855] openvswitch: netlink: Duplicate or invalid key (type 0). [ 125.229193][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.263'. [ 125.284907][ T6878] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.297723][ T6878] bond0: (slave bond1): Enslaving as an active interface with an up link [ 125.589506][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.267'. [ 125.589548][ T6892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.267'. [ 125.589600][ T6892] netlink: 'syz.3.267': attribute type 11 has an invalid length. [ 125.696435][ T6898] netlink: 72 bytes leftover after parsing attributes in process `syz.1.269'. [ 125.737315][ T6901] sch_fq: defrate 0 ignored. [ 125.862322][ T6909] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 126.012019][ T6910] netlink: 'syz.0.271': attribute type 32 has an invalid length. [ 126.145673][ T6914] IPv6: sit1: Disabled Multicast RS [ 126.258600][ T6903] block nbd0: server does not support multiple connections per device. [ 126.293704][ T6903] block nbd0: shutting down sockets [ 126.486131][ T6930] pim6reg527: entered allmulticast mode [ 126.941714][ T6949] netlink: 'syz.3.280': attribute type 10 has an invalid length. [ 126.950243][ T6949] syz_tun: entered promiscuous mode [ 126.982658][ T6949] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 127.062327][ T6952] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 127.108168][ T6955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.283'. [ 127.502240][ T6966] netlink: 36 bytes leftover after parsing attributes in process `syz.1.286'. [ 129.412002][ T6933] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 129.718274][ T6976] netlink: 32 bytes leftover after parsing attributes in process `syz.1.291'. [ 129.734815][ T6976] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 129.736321][ T6976] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.122208][ T6989] syzkaller0: entered promiscuous mode [ 130.122259][ T6989] syzkaller0: entered allmulticast mode [ 130.561749][ T7011] netlink: 28 bytes leftover after parsing attributes in process `syz.2.297'. [ 130.562845][ T7011] netlink: 28 bytes leftover after parsing attributes in process `syz.2.297'. [ 130.596830][ T7013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.297'. [ 130.596882][ T7013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.297'. [ 130.733738][ T7015] netlink: 144 bytes leftover after parsing attributes in process `syz.1.296'. [ 130.783142][ T7020] netlink: 'syz.0.299': attribute type 2 has an invalid length. [ 130.834112][ T7024] veth0: entered promiscuous mode [ 130.894436][ T7023] veth0: left promiscuous mode [ 131.532122][ T7058] netlink: 20 bytes leftover after parsing attributes in process `syz.2.309'. [ 131.862407][ T7071] team0: Device ipvlan0 failed to register rx_handler [ 131.890189][ T7071] netlink: 'syz.0.314': attribute type 4 has an invalid length. [ 131.940796][ T7077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.315'. [ 131.976051][ T7077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.315'. [ 132.072386][ T7082] bond1: Removing last arp target with arp_interval on [ 132.107162][ T7086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.526285][ T7100] netlink: 18 bytes leftover after parsing attributes in process `syz.2.322'. [ 132.652661][ T7106] xt_l2tp: missing protocol rule (udp|l2tpip) [ 132.683340][ T7106] nbd: couldn't find device at index 15663104 [ 133.006335][ T7113] netlink: 'syz.0.326': attribute type 29 has an invalid length. [ 133.066057][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.270460][ T7120] netlink: 16 bytes leftover after parsing attributes in process `syz.1.329'. [ 134.440711][ T7159] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 134.680794][ T7159] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 134.759071][ T7159] bond1 (unregistering): Released all slaves [ 135.012150][ T7180] netlink: 'syz.3.347': attribute type 2 has an invalid length. [ 135.376344][ T7185] Cannot find add_set index 0 as target [ 135.829620][ T7200] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 136.333828][ T7223] __nla_validate_parse: 2 callbacks suppressed [ 136.345618][ T7223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.358'. [ 136.451528][ T7223] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 136.860538][ T7248] veth0_vlan: mtu less than device minimum [ 136.872256][ T7250] openvswitch: netlink: Missing key (keys=50, expected=80) [ 136.915548][ T7248] netlink: 20 bytes leftover after parsing attributes in process `syz.1.363'. [ 136.916060][ T7248] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 136.929661][ T7250] netlink: 'syz.4.364': attribute type 21 has an invalid length. [ 136.930045][ T7250] netlink: 132 bytes leftover after parsing attributes in process `syz.4.364'. [ 137.189418][ T7263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.365'. [ 137.401028][ T7269] netlink: 'syz.2.369': attribute type 8 has an invalid length. [ 137.411248][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.369'. [ 137.423202][ T7266] netlink: 32 bytes leftover after parsing attributes in process `syz.1.368'. [ 137.773095][ T7282] netlink: 20 bytes leftover after parsing attributes in process `syz.4.372'. [ 137.806160][ T7282] netlink: 16 bytes leftover after parsing attributes in process `syz.4.372'. [ 138.275616][ T7299] netlink: 20 bytes leftover after parsing attributes in process `syz.2.378'. [ 138.445386][ T7303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.381'. [ 138.544113][ T7310] netlink: 'syz.3.382': attribute type 1 has an invalid length. [ 138.673071][ T7311] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.991298][ T7315] syzkaller1: entered promiscuous mode [ 139.864215][ T7342] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 139.942675][ T7347] netlink: 'syz.2.390': attribute type 2 has an invalid length. [ 140.407263][ T7361] netlink: 'syz.4.394': attribute type 39 has an invalid length. [ 141.857896][ T7395] tc_dump_action: action bad kind [ 141.868737][ T7401] lo: entered promiscuous mode [ 141.915740][ T7401] netlink: 'syz.1.402': attribute type 2 has an invalid length. [ 141.926699][ T7401] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.284045][ T7445] __nla_validate_parse: 5 callbacks suppressed [ 143.284124][ T7445] netlink: 36 bytes leftover after parsing attributes in process `syz.2.417'. [ 143.316151][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.417'. [ 143.442592][ T7442] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 143.456149][ T7442] team0: Device ipvlan2 is already an upper device of the team interface [ 143.685054][ T7448] netlink: 'syz.4.418': attribute type 11 has an invalid length. [ 143.943593][ T7463] netlink: 'syz.3.420': attribute type 1 has an invalid length. [ 143.954444][ T7459] wg2 speed is unknown, defaulting to 1000 [ 144.035147][ T7459] wg2 speed is unknown, defaulting to 1000 [ 144.305847][ T7459] wg2 speed is unknown, defaulting to 1000 [ 144.468964][ T7469] netlink: 'syz.1.424': attribute type 12 has an invalid length. [ 144.478239][ T7469] netlink: 'syz.1.424': attribute type 29 has an invalid length. [ 144.486272][ T7469] netlink: 148 bytes leftover after parsing attributes in process `syz.1.424'. [ 144.498923][ T7469] netlink: 59 bytes leftover after parsing attributes in process `syz.1.424'. [ 145.251136][ T7487] netlink: 20 bytes leftover after parsing attributes in process `syz.1.428'. [ 145.519069][ T7490] netlink: 'syz.4.427': attribute type 1 has an invalid length. [ 145.519115][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.427'. [ 145.654944][ T7497] openvswitch: netlink: Actions may not be safe on all matching packets [ 145.911897][ T7496] v: renamed from veth0_vlan [ 145.942170][ T7504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.431'. [ 146.021046][ T7459] infiniband syz2: set active [ 146.061211][ T7459] infiniband syz2: added wg2 [ 146.174689][ T7459] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 146.302167][ T7459] infiniband syz2: Couldn't open port 1 [ 146.303219][ T7459] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 146.303279][ T7459] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 146.358125][ T7459] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 146.537308][ T5859] wg2 speed is unknown, defaulting to 1000 [ 147.214986][ T7459] RDS/IB: syz2: added [ 147.279047][ T7528] sctp: [Deprecated]: syz.0.433 (pid 7528) Use of int in max_burst socket option deprecated. [ 147.279047][ T7528] Use struct sctp_assoc_value instead [ 147.296061][ T7459] smc: adding ib device syz2 with port count 1 [ 147.296241][ T7459] smc: ib device syz2 port 1 has no pnetid [ 147.317871][ T5859] wg2 speed is unknown, defaulting to 1000 [ 147.343303][ T7459] wg2 speed is unknown, defaulting to 1000 [ 147.422192][ T7530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.433'. [ 149.524740][ T5283] veth1_vlan: left promiscuous mode [ 149.602248][ T7559] netlink: 'syz.2.437': attribute type 1 has an invalid length. [ 149.810956][ T7549] syzkaller0: entered promiscuous mode [ 149.811003][ T7549] syzkaller0: entered allmulticast mode [ 150.023957][ T7559] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.039283][ T7560] bond2: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 150.121071][ T7560] bond2: entered allmulticast mode [ 150.190682][ T7459] wg2 speed is unknown, defaulting to 1000 [ 150.283300][ T7565] netlink: 16 bytes leftover after parsing attributes in process `syz.1.439'. [ 150.283502][ T7565] netlink: 6 bytes leftover after parsing attributes in process `syz.1.439'. [ 151.318619][ T7459] wg2 speed is unknown, defaulting to 1000 [ 152.804864][ T7605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.907552][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.445'. [ 153.120265][ T7613] netlink: 16 bytes leftover after parsing attributes in process `syz.4.446'. [ 153.163117][ T7459] wg2 speed is unknown, defaulting to 1000 [ 153.474383][ T7619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.528146][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.303451][ T7632] netlink: 76 bytes leftover after parsing attributes in process `syz.0.450'. [ 154.519206][ T7459] wg2 speed is unknown, defaulting to 1000 [ 154.862684][ T7645] netlink: 20 bytes leftover after parsing attributes in process `syz.4.452'. [ 154.912704][ T7645] veth6: entered promiscuous mode [ 154.918349][ T7645] veth6: entered allmulticast mode [ 154.981972][ T7644] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 155.235444][ T5283] v: left promiscuous mode [ 155.303194][ T5858] v: entered promiscuous mode [ 156.308327][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'. [ 156.366299][ T7682] netlink: 20 bytes leftover after parsing attributes in process `syz.2.458'. [ 157.251337][ T7690] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 157.471729][ T7690] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 158.333299][ T7726] netlink: 'syz.2.465': attribute type 28 has an invalid length. [ 158.333348][ T7726] netlink: 'syz.2.465': attribute type 3 has an invalid length. [ 158.333389][ T7726] netlink: 132 bytes leftover after parsing attributes in process `syz.2.465'. [ 158.455381][ T7730] netlink: 20 bytes leftover after parsing attributes in process `syz.4.468'. [ 158.476742][ T7730] netlink: 11 bytes leftover after parsing attributes in process `syz.4.468'. [ 158.477557][ T7730] netlink: 20 bytes leftover after parsing attributes in process `syz.4.468'. [ 158.477581][ T7730] netlink: 11 bytes leftover after parsing attributes in process `syz.4.468'. [ 158.514392][ T7730] netlink: 20 bytes leftover after parsing attributes in process `syz.4.468'. [ 158.524557][ T7730] netlink: 11 bytes leftover after parsing attributes in process `syz.4.468'. [ 158.534880][ T7730] netlink: 20 bytes leftover after parsing attributes in process `syz.4.468'. [ 159.266113][ T7738] ipt_rpfilter: unknown options [ 159.710362][ T7752] syzkaller0: entered promiscuous mode [ 159.719261][ T7752] syzkaller0: entered allmulticast mode [ 161.024257][ T7784] netlink: 'syz.2.478': attribute type 2 has an invalid length. [ 162.267470][ T7797] __nla_validate_parse: 125 callbacks suppressed [ 162.267530][ T7797] netlink: 64 bytes leftover after parsing attributes in process `syz.2.481'. [ 164.074053][ T7762] gretap0: entered promiscuous mode [ 164.647853][ T7806] netlink: 20 bytes leftover after parsing attributes in process `syz.4.483'. [ 164.648121][ T7807] netlink: 20 bytes leftover after parsing attributes in process `syz.4.483'. [ 165.684059][ T7825] syzkaller1: entered promiscuous mode [ 165.696390][ T7825] syzkaller1: entered allmulticast mode [ 166.416254][ T7833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 168.125654][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.498'. [ 168.139589][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 168.179602][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 168.215502][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 168.236670][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 168.310836][ T7878] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 168.402019][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 168.997328][ T7897] ip6t_srh: unknown srh match flags 5F28 [ 170.461810][ T7931] xt_HMARK: proto mask must be zero with L3 mode [ 170.479990][ T7934] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 170.489153][ T5624] Bluetooth: hci5: command tx timeout [ 170.549737][ T7874] wg2 speed is unknown, defaulting to 1000 [ 171.002943][ T7944] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 171.033008][ T7945] netlink: 132 bytes leftover after parsing attributes in process `syz.0.517'. [ 171.476041][ T7955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.519'. [ 172.412108][ T7974] Cannot find add_set index 65532 as target [ 172.567689][ T5624] Bluetooth: hci5: command tx timeout [ 172.778045][ T7984] netlink: 'syz.2.524': attribute type 58 has an invalid length. [ 172.786259][ T7984] netlink: 20 bytes leftover after parsing attributes in process `syz.2.524'. [ 172.903108][ T7983] netlink: 'syz.2.524': attribute type 4 has an invalid length. [ 173.176271][ T7990] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 173.243710][ T7990] netlink: 'syz.4.526': attribute type 11 has an invalid length. [ 173.363622][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.526'. [ 173.433175][ T7994] netlink: 'syz.2.527': attribute type 1 has an invalid length. [ 173.813294][ T7972] ip_tables: iptables: counters copy to user failed while replacing table [ 174.515104][ T7874] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.526457][ T7874] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.542758][ T7874] bridge_slave_0: entered allmulticast mode [ 174.564059][ T7874] bridge_slave_0: entered promiscuous mode [ 174.586277][ T7874] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.600904][ T7874] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.601127][ T7874] bridge_slave_1: entered allmulticast mode [ 174.620956][ T7874] bridge_slave_1: entered promiscuous mode [ 174.657203][ T5624] Bluetooth: hci5: command tx timeout [ 174.786004][ T8013] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 175.043780][ T7874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.068420][ T7874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.125420][ T7874] team0: Port device team_slave_0 added [ 175.138209][ T7874] team0: Port device team_slave_1 added [ 175.203758][ T8026] syzkaller0: entered promiscuous mode [ 175.203811][ T8026] syzkaller0: entered allmulticast mode [ 175.291366][ T8026] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.535'. [ 175.505431][ T8043] netlink: 156 bytes leftover after parsing attributes in process `syz.0.539'. [ 175.516128][ T8044] netlink: 156 bytes leftover after parsing attributes in process `syz.0.539'. [ 175.580840][ T7874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.580877][ T7874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.580936][ T7874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.638176][ T7874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.638215][ T7874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.638261][ T7874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.057865][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.542'. [ 176.119778][ T7874] hsr_slave_0: entered promiscuous mode [ 176.128633][ T7874] hsr_slave_1: entered promiscuous mode [ 176.136733][ T7874] debugfs: 'hsr0' already exists in 'hsr' [ 176.142723][ T7874] Cannot create hsr debugfs directory [ 176.524868][ T8062] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 176.726702][ T5624] Bluetooth: hci5: command tx timeout [ 177.078035][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.547'. [ 177.078101][ T8073] netlink: 'syz.0.547': attribute type 10 has an invalid length. [ 177.078119][ T8073] netlink: 32 bytes leftover after parsing attributes in process `syz.0.547'. [ 177.309982][ T8073] geneve2: entered promiscuous mode [ 177.323074][ T8073] geneve2: entered allmulticast mode [ 177.358676][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.548'. [ 177.461720][ T8083] netlink: 'syz.3.549': attribute type 10 has an invalid length. [ 177.607237][ T8083] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 178.524559][ T8096] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 178.722241][ T8107] v: renamed from veth0_vlan (while UP) [ 178.839050][ T8114] netlink: 256 bytes leftover after parsing attributes in process `syz.3.555'. [ 179.840870][ T7874] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 179.902946][ T7874] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 179.935336][ T7874] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 180.034885][ T7874] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 180.095943][ T7874] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 180.129602][ T7874] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 180.140987][ T6922] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.151969][ T6922] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.152025][ T6922] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.196203][ T6918] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.200598][ T7874] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 180.387711][ T7874] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 180.433167][ T8144] netlink: 3 bytes leftover after parsing attributes in process `syz.4.560'. [ 180.703465][ T8156] netlink: 40 bytes leftover after parsing attributes in process `syz.2.562'. [ 181.299265][ T8171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.564'. [ 181.419633][ T8171] vlan2: entered promiscuous mode [ 181.419681][ T8171] gretap0: entered promiscuous mode [ 181.866733][ T8178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.567'. [ 181.892715][ T7874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.974310][ T8184] netlink: 28 bytes leftover after parsing attributes in process `syz.3.568'. [ 182.286457][ T8179] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 182.592319][ T8197] netlink: 76 bytes leftover after parsing attributes in process `syz.3.570'. [ 182.592368][ T8197] nbd: illegal input index 65508 [ 182.862544][ T8200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.571'. [ 183.343761][ T8211] netlink: 'syz.4.575': attribute type 1 has an invalid length. [ 183.575271][ T7874] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.633000][ T6921] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.633145][ T6921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.692242][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.692391][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.505386][ T8268] bond2: option fail_over_mac: invalid value (16) [ 186.551281][ T8268] bond2 (unregistering): Released all slaves [ 187.189374][ T8239] netlink: 'syz.3.583': attribute type 3 has an invalid length. [ 187.189417][ T8239] netlink: 'syz.3.583': attribute type 1 has an invalid length. [ 187.189451][ T8239] netlink: 212 bytes leftover after parsing attributes in process `syz.3.583'. [ 187.189500][ T8239] NCSI netlink: No device for ifindex 813332851 [ 187.916242][ T8302] Bluetooth: hci0: unsupported parameter 5135 [ 187.916287][ T8302] Bluetooth: hci0: unsupported parameter 8192 [ 187.916342][ T8302] Bluetooth: hci0: unsupported parameter 5135 [ 187.916361][ T8302] Bluetooth: hci0: unsupported parameter 8192 [ 188.069618][ T7874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.462128][ T8316] netlink: 'syz.2.593': attribute type 39 has an invalid length. [ 188.462172][ T8316] netlink: 20 bytes leftover after parsing attributes in process `syz.2.593'. [ 190.223297][ T7874] veth0_vlan: entered promiscuous mode [ 190.279467][ T7874] veth1_vlan: entered promiscuous mode [ 190.538914][ T7874] veth0_macvtap: entered promiscuous mode [ 190.647771][ T7874] veth1_macvtap: entered promiscuous mode [ 190.735975][ T7874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.782582][ T7874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.167219][ T6769] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.181281][ T6918] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.181361][ T6918] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.181405][ T6918] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.325083][ T6922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.339105][ T6922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.665239][ T6922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.665280][ T6922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.844738][ T8378] netlink: 40 bytes leftover after parsing attributes in process `syz.0.606'. [ 191.934865][ T8378] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 192.298860][ T8386] netlink: 24 bytes leftover after parsing attributes in process `syz.3.608'. [ 192.749004][ T8401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.770562][ T8402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.788207][ T8399] sit1: entered allmulticast mode [ 192.862262][ T8405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.612'. [ 193.749257][ T8419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'. [ 193.749303][ T8419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.614'. [ 193.803708][ T8427] veth1_macvtap: left promiscuous mode [ 194.273509][ T8437] netlink: 8 bytes leftover after parsing attributes in process `syz.5.621'. [ 194.292785][ T8437] openvswitch: netlink: Multiple metadata blocks provided [ 194.311243][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.620'. [ 194.506059][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.754677][ T8444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.622'. [ 194.954871][ T8455] openvswitch: netlink: Message has 8 unknown bytes. [ 196.145779][ T8482] tipc: Started in network mode [ 196.145832][ T8482] tipc: Node identity 82338223c4f7, cluster identity 512 [ 196.179636][ T8482] tipc: Enabled bearer , priority 0 [ 196.535146][ T8475] syzkaller0: entered promiscuous mode [ 196.542690][ T8475] syzkaller0: entered allmulticast mode [ 196.553531][ T8475] tipc: Resetting bearer [ 197.034073][ T6769] tipc: Resetting bearer [ 197.192400][ T8471] tipc: Resetting bearer [ 200.703829][ T8471] tipc: Disabling bearer [ 200.715085][ T8490] ip6gre0: Master is either lo or non-ether device [ 200.725257][ T8493] ip6gre0: Master is either lo or non-ether device [ 200.809693][ T9] tipc: Node number set to 1187283491 [ 201.828006][ T8539] netlink: 4 bytes leftover after parsing attributes in process `syz.5.647'. [ 201.854878][ T8540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.645'. [ 202.033636][ T8545] SET target dimension over the limit! [ 202.080545][ T8535] netlink: 68 bytes leftover after parsing attributes in process `syz.0.645'. [ 202.101662][ T8548] netlink: 4 bytes leftover after parsing attributes in process `syz.5.647'. [ 202.822685][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.643'. [ 203.465605][ T8570] 8021q: VLANs not supported on vxcan1 [ 203.920698][ T8579] netlink: 20 bytes leftover after parsing attributes in process `syz.5.655'. [ 203.920755][ T8579] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 204.094404][ T8585] netlink: 56 bytes leftover after parsing attributes in process `syz.0.657'. [ 204.458347][ T8589] netlink: 'syz.5.658': attribute type 2 has an invalid length. [ 204.462898][ T8595] lo: entered promiscuous mode [ 204.483192][ T8589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.583651][ T8595] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.609894][ T8596] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.636220][ T8554] netlink: 44 bytes leftover after parsing attributes in process `syz.2.648'. [ 204.714124][ T8599] netlink: 'syz.4.661': attribute type 1 has an invalid length. [ 204.722426][ T8599] netlink: 'syz.4.661': attribute type 3 has an invalid length. [ 204.740264][ T8599] netlink: 172 bytes leftover after parsing attributes in process `syz.4.661'. [ 204.740334][ T8599] NCSI netlink: No device for ifindex 813332851 [ 204.877153][ T8599] Bluetooth: hci0: unsupported parameter 5135 [ 204.899460][ T8599] Bluetooth: hci0: unsupported parameter 8192 [ 204.899538][ T8599] Bluetooth: hci0: unsupported parameter 5135 [ 204.899559][ T8599] Bluetooth: hci0: unsupported parameter 8192 [ 205.208511][ T5624] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 205.220199][ T5624] Bluetooth: hci5: Injecting HCI hardware error event [ 205.223265][ T5636] Bluetooth: hci5: hardware error 0x00 [ 205.830852][ T8621] netlink: 76 bytes leftover after parsing attributes in process `syz.3.667'. [ 205.893950][ T8614] sctp: [Deprecated]: syz.4.666 (pid 8614) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.893950][ T8614] Use struct sctp_sack_info instead [ 207.095862][ T8650] sctp: [Deprecated]: syz.2.674 (pid 8650) Use of int in max_burst socket option. [ 207.095862][ T8650] Use struct sctp_assoc_value instead [ 207.312059][ T8649] dvmrp0: entered allmulticast mode [ 207.367014][ T5636] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 207.412771][ T8661] netlink: 'syz.5.677': attribute type 32 has an invalid length. [ 207.425624][ T8661] __nla_validate_parse: 3 callbacks suppressed [ 207.432134][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.677'. [ 207.634734][ T8661] bond1: option coupled_control: invalid value (192) [ 207.756471][ T8661] bond1 (unregistering): Released all slaves [ 207.969744][ T8668] netlink: 20 bytes leftover after parsing attributes in process `syz.4.680'. [ 208.003574][ T8671] netlink: 20 bytes leftover after parsing attributes in process `syz.4.680'. [ 208.692348][ T8697] Bluetooth: hci0: unsupported parameter 5161 [ 208.779216][ T8697] Bluetooth: hci0: unsupported parameter 8192 [ 208.779276][ T8697] Bluetooth: hci0: unsupported parameter 5161 [ 208.779296][ T8697] Bluetooth: hci0: unsupported parameter 8192 [ 208.895944][ T8697] netlink: 16 bytes leftover after parsing attributes in process `syz.2.685'. [ 208.972498][ T8705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.686'. [ 208.978262][ T8697] netlink: 'syz.2.685': attribute type 9 has an invalid length. [ 209.827463][ T8723] netlink: 36 bytes leftover after parsing attributes in process `syz.5.690'. [ 211.486037][ T8747] tap0: tun_chr_ioctl cmd 1074025672 [ 211.486081][ T8747] tap0: ignored: set checksum disabled [ 211.650481][ T8752] syzkaller1: entered promiscuous mode [ 211.650526][ T8752] syzkaller1: entered allmulticast mode [ 211.927907][ T5633] Bluetooth: hci1: command 0x0406 tx timeout [ 211.928032][ T5630] Bluetooth: hci3: command 0x0406 tx timeout [ 211.934246][ T4938] Bluetooth: hci2: command 0x0406 tx timeout [ 212.710215][ T8761] kthread_run failed with err -4 [ 213.066027][ T8782] netlink: 32 bytes leftover after parsing attributes in process `syz.4.701'. [ 213.078233][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.701'. [ 213.155170][ T8787] xt_hashlimit: max too large, truncated to 1048576 [ 213.163593][ T8787] No such timeout policy "syz1" [ 213.913677][ T8810] bridge_slave_1: left allmulticast mode [ 213.930578][ T8810] bridge_slave_1: left promiscuous mode [ 213.945875][ T8810] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.079396][ T8810] bond0: (slave veth0_to_bond): Releasing backup interface [ 214.145367][ T8810] bond0: (slave bond_slave_0): Releasing backup interface [ 214.240352][ T8810] bond0: (slave bond_slave_1): Releasing backup interface [ 214.403181][ T8810] team0: Port device team_slave_0 removed [ 214.525511][ T8810] team0: Port device team_slave_1 removed [ 214.534220][ T8810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.543446][ T8810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.555636][ T8810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.564953][ T8810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.611088][ T8810] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 214.757038][ T8815] team0: Mode changed to "roundrobin" [ 214.775558][ T8823] vlan0: entered promiscuous mode [ 214.787120][ T8825] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 214.797529][ T8825] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.980259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.105663][ T8835] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 215.143782][ T8840] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 215.144408][ T8840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.177171][ T8824] tipc: Enabling of bearer rejected, failed to enable media [ 215.194175][ T8839] team0: Unable to change to the same mode the team is in [ 215.255414][ T8841] tipc: Enabling of bearer rejected, failed to enable media [ 215.717992][ T8860] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 215.762686][ T8862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.714'. [ 215.775576][ T8862] netlink: 14 bytes leftover after parsing attributes in process `syz.3.714'. [ 216.496076][ T8892] netlink: 'syz.4.719': attribute type 30 has an invalid length. [ 216.616236][ T8892] bond2: option arp_missed_max: invalid value (0) [ 216.623194][ T8892] bond2: option arp_missed_max: allowed values 1 - 255 [ 216.687297][ T8892] bond2 (unregistering): Released all slaves [ 216.895229][ T8897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.721'. [ 216.960391][ T8906] netlink: 24 bytes leftover after parsing attributes in process `syz.0.721'. [ 217.054505][ T8897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.721'. [ 217.733278][ T8921] IPv6: Can't replace route, no match found [ 217.883412][ T8921] batadv0: entered promiscuous mode [ 217.883573][ T8921] macsec1: entered promiscuous mode [ 217.900614][ T8921] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 218.025317][ T8921] batadv0: left promiscuous mode [ 218.244436][ T8936] netlink: 36 bytes leftover after parsing attributes in process `syz.5.729'. [ 218.321109][ T8938] netlink: 40 bytes leftover after parsing attributes in process `syz.4.730'. [ 218.333373][ T8938] tipc: Trying to set illegal importance in message [ 218.343274][ T8938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.730'. [ 218.354250][ T8938] netlink: 24 bytes leftover after parsing attributes in process `syz.4.730'. [ 218.465949][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.731'. [ 218.483317][ T8941] xt_cgroup: path and classid specified [ 218.512126][ T8941] syzkaller1: entered promiscuous mode [ 218.519330][ T8941] syzkaller1: entered allmulticast mode [ 218.940054][ T6921] IPVS: starting estimator thread 0... [ 219.026643][ T8945] IPVS: using max 25 ests per chain, 60000 per kthread [ 219.450343][ T8961] netlink: 16 bytes leftover after parsing attributes in process `syz.2.736'. [ 219.473082][ T8961] sctp: [Deprecated]: syz.2.736 (pid 8961) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.473082][ T8961] Use struct sctp_sack_info instead [ 219.684871][ T8964] openvswitch: netlink: Duplicate or invalid key (type 0). [ 220.206483][ T8973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.740'. [ 220.230235][ T8975] x_tables: duplicate underflow at hook 1 [ 220.245694][ T8975] blkio.reset_stats is deprecated [ 220.521037][ T8979] netlink: 48 bytes leftover after parsing attributes in process `syz.5.743'. [ 220.722320][ T8983] Bluetooth: hci0: unsupported parameter 5161 [ 220.722364][ T8983] Bluetooth: hci0: unsupported parameter 8192 [ 220.722437][ T8983] Bluetooth: hci0: unsupported parameter 5161 [ 220.722456][ T8983] Bluetooth: hci0: unsupported parameter 8192 [ 220.781733][ T32] audit: type=1107 audit(1789040270.902:2): pid=8986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Õ7J·Ž»ÙÍìin4 ¶ô¬ W ¢ì›Gø6 Àv÷®Ö$¿=%W¾×èÝÿ×$›Ü(Sà2}ëOó1fZÆè-;õ6—úyAÅ)Èc§H“†à¥æ¹ ƈ¢*݆ƒìf™î£~¶f-¿' [ 221.222747][ T9001] xt_TCPMSS: Only works on TCP SYN packets [ 221.276103][ T52] Bluetooth: hci4: link tx timeout [ 221.284052][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 221.407034][ T9001] netlink: 'syz.0.750': attribute type 10 has an invalid length. [ 221.418149][ T9001] syz_tun: entered promiscuous mode [ 221.459526][ T9007] SET target dimension over the limit! [ 221.471046][ T9001] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 221.900656][ T9014] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 222.143991][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.753'. [ 222.144064][ T9019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.753'. [ 222.197859][ T6769] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.208251][ T6769] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.217666][ T6769] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.231101][ T6769] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.277144][ T9048] __nla_validate_parse: 4 callbacks suppressed [ 223.277196][ T9048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.761'. [ 223.277224][ T9048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.761'. [ 223.294698][ T5636] Bluetooth: hci4: command 0x0405 tx timeout [ 224.807720][ T59] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96 [ 224.922713][ T9083] netlink: 'syz.4.771': attribute type 1 has an invalid length. [ 225.138634][ T9083] bond2: entered promiscuous mode [ 225.157866][ T9083] 8021q: adding VLAN 0 to HW filter on device bond2 [ 225.473317][ T9096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.773'. [ 225.683487][ T9101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.774'. [ 225.715108][ T9100] netlink: 260 bytes leftover after parsing attributes in process `syz.4.774'. [ 226.698049][ T13] IPVS: starting estimator thread 0... [ 226.828482][ T9124] IPVS: using max 25 ests per chain, 60000 per kthread [ 226.990988][ T9136] netlink: 'syz.3.782': attribute type 1 has an invalid length. [ 227.001098][ T9136] netlink: 228 bytes leftover after parsing attributes in process `syz.3.782'. [ 227.793811][ T9150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.785'. [ 228.189112][ T9167] netlink: 'syz.4.789': attribute type 49 has an invalid length. [ 229.183550][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'. [ 229.186978][ T9198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.797'. [ 230.373873][ T9225] netlink: 272 bytes leftover after parsing attributes in process `syz.5.800'. [ 230.436998][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.5.800'. [ 230.829845][ T9157] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.431009][ T9229] pimreg: entered allmulticast mode [ 231.822442][ T9239] netlink: 'syz.5.807': attribute type 1 has an invalid length. [ 231.885759][ T9239] bond1: (slave gretap1): making interface the new active one [ 231.898422][ T9239] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 231.940862][ T9239] netdevsim netdevsim5: Firmware load for './file0/file0/..' refused, path contains '..' component [ 232.766230][ T9264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.811'. [ 232.908424][ T9260] netlink: 168 bytes leftover after parsing attributes in process `syz.3.811'. [ 233.032099][ T9272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.815'. [ 233.042484][ T9247] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.398546][ T9247] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.775493][ T9247] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.095060][ T9247] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.319351][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.820'. [ 234.319412][ T9294] netlink: 'syz.3.820': attribute type 19 has an invalid length. [ 234.319453][ T9294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.820'. [ 234.364063][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.822'. [ 234.425925][ T9296] netlink: 52 bytes leftover after parsing attributes in process `syz.3.820'. [ 234.435253][ T9299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.449952][ T9296] netlink: 52 bytes leftover after parsing attributes in process `syz.3.820'. [ 234.461761][ T9296] netlink: 52 bytes leftover after parsing attributes in process `syz.3.820'. [ 234.586663][ T9297] batadv0: entered promiscuous mode [ 234.630150][ T9297] macsec1: entered promiscuous mode [ 234.761715][ T9297] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 235.215326][ T9317] netlink: 16 bytes leftover after parsing attributes in process `syz.5.824'. [ 235.304413][ T9320] openvswitch: netlink: Message has 8 unknown bytes. [ 235.348643][ T6921] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.357362][ T6921] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.441842][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.497865][ T59] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.068966][ T9334] netlink: NAT attribute has 4 unknown bytes [ 236.076835][ T9334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.169618][ T9339] netlink: 220 bytes leftover after parsing attributes in process `syz.5.830'. [ 236.832190][ T9348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.832'. [ 238.678504][ T9396] netlink: 'syz.5.843': attribute type 5 has an invalid length. [ 238.693892][ T9395] netlink: 'syz.5.843': attribute type 1 has an invalid length. [ 238.755995][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.843'. [ 240.132001][ T9418] netlink: 'syz.3.847': attribute type 15 has an invalid length. [ 240.132044][ T9418] __nla_validate_parse: 2 callbacks suppressed [ 240.132073][ T9418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.847'. [ 240.174949][ T9416] netlink: 'syz.4.846': attribute type 1 has an invalid length. [ 240.218040][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.846'. [ 240.228363][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.846'. [ 240.251573][ T9418] netlink: 'syz.3.847': attribute type 15 has an invalid length. [ 240.260136][ T9418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.847'. [ 240.269175][ T59] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 240.280626][ T3369] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 240.280736][ T3369] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 240.280783][ T3369] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 240.673686][ T9416] 8021q: adding VLAN 0 to HW filter on device bond3 [ 241.326073][ T9443] xt_hashlimit: invalid interval [ 241.388979][ T9437] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 241.437759][ T5636] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 241.449970][ T5636] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 241.458181][ T5636] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 241.471972][ T5636] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 241.481842][ T5636] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 243.527350][ T5636] Bluetooth: hci6: command tx timeout [ 243.970404][ T9493] netlink: 256 bytes leftover after parsing attributes in process `syz.0.864'. [ 243.995918][ T9444] wg2 speed is unknown, defaulting to 1000 [ 244.228843][ T9501] netlink: 32 bytes leftover after parsing attributes in process `syz.5.866'. [ 245.149698][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.870'. [ 245.609303][ T5636] Bluetooth: hci6: command tx timeout [ 246.462997][ T9549] openvswitch: netlink: IP tunnel TTL not specified. [ 247.345400][ T9569] netlink: 64 bytes leftover after parsing attributes in process `syz.5.878'. [ 247.495763][ T9569] netlink: 4 bytes leftover after parsing attributes in process `syz.5.878'. [ 247.563870][ T9570] syzkaller1: entered promiscuous mode [ 247.563914][ T9570] syzkaller1: entered allmulticast mode [ 247.654553][ T9569] bond2: Invalid ad_actor_system MAC address. [ 247.666601][ T9569] bond2: option ad_actor_system: invalid value (1) [ 247.691244][ T5636] Bluetooth: hci6: command tx timeout [ 247.774602][ T9569] bond2 (unregistering): Released all slaves [ 248.848598][ T9444] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.850718][ T9444] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.850950][ T9444] bridge_slave_0: entered allmulticast mode [ 248.888428][ T9444] bridge_slave_0: entered promiscuous mode [ 248.924420][ T9444] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.933838][ T9444] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.941476][ T9444] bridge_slave_1: entered allmulticast mode [ 248.949322][ T9583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.882'. [ 248.963364][ T9444] bridge_slave_1: entered promiscuous mode [ 249.234737][ T9583] team0: Port device team_slave_0 removed [ 249.372961][ T9444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.408544][ T9444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.591833][ T9444] team0: Port device team_slave_0 added [ 249.615839][ T9444] team0: Port device team_slave_1 added [ 249.767192][ T5636] Bluetooth: hci6: command tx timeout [ 249.818283][ T9444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.825813][ T9444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.852246][ T9601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.864917][ T9444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.900929][ T9444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.908293][ T9444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.937266][ T9444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.262292][ T9444] hsr_slave_0: entered promiscuous mode [ 250.274027][ T9444] hsr_slave_1: entered promiscuous mode [ 250.283908][ T9444] debugfs: 'hsr0' already exists in 'hsr' [ 250.290546][ T9444] Cannot create hsr debugfs directory [ 250.961693][ T9626] openvswitch: netlink: Actions may not be safe on all matching packets [ 252.114342][ T9650] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 252.208911][ T9651] netlink: 40 bytes leftover after parsing attributes in process `syz.4.897'. [ 252.460785][ T9657] netlink: 36 bytes leftover after parsing attributes in process `syz.5.900'. [ 252.803130][ T9444] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 252.836993][ T9444] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 252.847411][ T9444] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 252.933432][ T9444] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 252.943528][ T9444] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 252.963562][ T9444] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 253.060010][ T9444] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 253.089887][ T9444] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 253.903136][ T9688] netlink: 24 bytes leftover after parsing attributes in process `syz.5.905'. [ 253.938093][ T9688] netlink: 24 bytes leftover after parsing attributes in process `syz.5.905'. [ 253.952582][ T9444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.984025][ T9444] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.000232][ T6769] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.000361][ T6769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.072202][ T6769] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.072333][ T6769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.391565][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.906'. [ 254.391612][ T9694] netlink: 176 bytes leftover after parsing attributes in process `syz.0.906'. [ 254.391781][ T9694] netlink: 'syz.0.906': attribute type 5 has an invalid length. [ 254.467875][ T9694] netlink: 'syz.0.906': attribute type 1 has an invalid length. [ 255.034790][ T9708] netlink: 4372 bytes leftover after parsing attributes in process `syz.4.910'. [ 255.055258][ T9709] netlink: 4372 bytes leftover after parsing attributes in process `syz.4.910'. [ 255.065445][ T52] Bluetooth: hci6: command 0x0405 tx timeout [ 255.634517][ T9724] netlink: 'syz.4.914': attribute type 39 has an invalid length. [ 255.934244][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.817807][ T9751] netlink: 'syz.5.918': attribute type 1 has an invalid length. [ 257.261848][ T9761] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 257.262020][ T9761] syzkaller1: Refused to change device type [ 257.275078][ T9757] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 257.275186][ T9757] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 257.275269][ T9757] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 257.275354][ T9757] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 257.275438][ T9757] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 257.275683][ T9757] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 257.275912][ T9757] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 257.276143][ T9757] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 257.276372][ T9757] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 257.276601][ T9757] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 257.276828][ T9757] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 257.277074][ T9757] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 257.277294][ T9757] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 257.279134][ T9757] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 257.279373][ T9757] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 257.279588][ T9757] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 257.279837][ T9757] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 257.280076][ T9757] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 257.280297][ T9757] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 257.280520][ T9757] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 257.280735][ T9757] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 257.280966][ T9757] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 257.281203][ T9757] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 257.281329][ T9757] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 257.281416][ T9757] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 257.285517][ T9757] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 257.285856][ T9757] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 257.286079][ T9757] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 257.286324][ T9757] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 257.286654][ T9757] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 257.286910][ T9757] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 257.287129][ T9757] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 257.976712][ T9775] openvswitch: netlink: Unknown key attributes 1 [ 258.936231][ T9796] netlink: 'syz.4.927': attribute type 1 has an invalid length. [ 259.007438][ T9796] netlink: 256 bytes leftover after parsing attributes in process `syz.4.927'. [ 259.320918][ T9444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.663597][ T9808] netlink: 76 bytes leftover after parsing attributes in process `syz.4.930'. [ 259.712815][ T9809] netlink: 76 bytes leftover after parsing attributes in process `syz.4.930'. [ 260.150496][ T9814] wg2 speed is unknown, defaulting to 1000 [ 260.568009][ T9834] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 261.220943][ T9444] veth0_vlan: entered promiscuous mode [ 261.256098][ T9444] veth1_vlan: entered promiscuous mode [ 261.526394][ T9444] veth0_macvtap: entered promiscuous mode [ 261.561094][ T9444] veth1_macvtap: entered promiscuous mode [ 261.646065][ T9444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.685643][ T9444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.837111][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.837293][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.837437][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.837567][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.352686][ T9851] ªªªªª»: renamed from dummy0 (while UP) [ 262.739101][ T6922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.739176][ T6922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.215974][ T9870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.941'. [ 263.278426][ T6769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.286827][ T6769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.351634][ T9870] tipc: Enabling of bearer rejected, failed to enable media [ 264.139282][ T9886] netlink: 348 bytes leftover after parsing attributes in process `syz.5.946'. [ 264.223809][ T9888] netlink: 20 bytes leftover after parsing attributes in process `syz.6.848'. [ 265.459583][ T9904] ipvlan3: entered allmulticast mode [ 265.459630][ T9904] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode [ 265.481947][ T9904] batman_adv: batadv0: Adding interface: ipvlan3 [ 265.488954][ T9904] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.517614][ T9904] batman_adv: batadv0: Interface activated: ipvlan3 [ 265.530715][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.6.953'. [ 265.946879][ T6918] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.947928][ T6918] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.948004][ T6918] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.957180][ T6922] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.411808][ T9926] Bluetooth: ISO socket layer initialized [ 266.499425][ T5636] Bluetooth: hci6: unexpected event for opcode 0x2003 [ 268.582473][ T9961] netlink: 104 bytes leftover after parsing attributes in process `syz.0.971'. [ 269.448245][ T9977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.980'. [ 270.765424][T10000] netlink: 'syz.5.990': attribute type 8 has an invalid length. [ 271.089254][T10005] netlink: 80 bytes leftover after parsing attributes in process `syz.3.993'. [ 272.876026][ T5858] hid-generic 0005:0C45:0003.0001: item fetching failed at offset 0/1 [ 272.897851][ T5858] hid-generic 0005:0C45:0003.0001: probe with driver hid-generic failed with error -22 [ 275.990953][T10008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 276.308867][T10018] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 276.723977][T10025] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1000'. [ 276.724071][T10025] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1000'. [ 276.724150][T10025] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1000'. [ 277.223158][T10043] xt_l2tp: missing protocol rule (udp|l2tpip) [ 277.724603][T10048] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1006'. [ 277.724654][T10048] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1006'. [ 278.920289][T10079] netlink: 'syz.4.1013': attribute type 1 has an invalid length. [ 279.267141][T10090] Cannot find add_set index 46338 as target [ 281.518337][T10147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1028'. [ 281.758081][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 281.908352][T10149] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1032'. [ 281.908395][T10149] netlink: 13 bytes leftover after parsing attributes in process `syz.5.1032'. [ 281.973168][ T5732] wg2 speed is unknown, defaulting to 1000 [ 282.012385][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 282.063127][T10149] veth3: entered promiscuous mode [ 283.202735][T10187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1038'. [ 283.203043][T10187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1038'. [ 283.203312][T10187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1038'. [ 283.203605][T10187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1038'. [ 283.203825][T10187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1038'. [ 283.204047][T10187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1038'. [ 283.204268][T10187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1038'. [ 283.288845][T10187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1038'. [ 284.386427][T10187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.423708][T10187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.451134][T10187] bond0 (unregistering): (slave bond1): Releasing backup interface [ 284.534761][T10187] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 284.577766][T10187] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 284.590372][T10187] bond0 (unregistering): Released all slaves [ 286.421349][T10245] ipvlan0: entered allmulticast mode [ 286.427049][T10245] virt_wifi0: entered allmulticast mode [ 286.450407][T10245] batman_adv: batadv0: Adding interface: ipvlan0 [ 286.450447][T10245] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.450498][T10245] batman_adv: batadv0: Interface activated: ipvlan0 [ 286.525860][T10245] ipvlan1: entered allmulticast mode [ 286.535623][T10245] batman_adv: batadv0: Adding interface: ipvlan1 [ 286.542267][T10245] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.569058][T10245] batman_adv: The newly added mac address (ca:49:6b:1f:66:68) already exists on: ipvlan0 [ 286.569086][T10245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.569104][T10245] batman_adv: batadv0: Interface activated: ipvlan1 [ 287.592791][T10286] __nla_validate_parse: 63 callbacks suppressed [ 287.592858][T10286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1061'. [ 288.388046][T10294] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1064'. [ 288.463024][T10294] netlink: 'syz.0.1064': attribute type 2 has an invalid length. [ 288.475475][T10300] netlink: 'syz.6.1065': attribute type 1 has an invalid length. [ 288.845406][T10308] can: request_module (can-proto-0) failed. [ 288.953758][T10316] openvswitch: netlink: IP tunnel dst address not specified [ 289.965617][T10344] netlink: 'syz.0.1076': attribute type 29 has an invalid length. [ 290.244999][T10354] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1079'. [ 290.328334][T10356] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1079'. [ 290.436954][T10349] netlink: Failed to add ¦â—k\ helper -22 [ 290.444513][T10349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.526705][T10360] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1080'. [ 290.554571][ T9] hid-generic 0005:07C0:0003.0002: item fetching failed at offset 0/1 [ 290.571461][ T9] hid-generic 0005:07C0:0003.0002: probe with driver hid-generic failed with error -22 [ 290.851368][ T32] audit: type=1804 audit(1789040340.972:3): pid=10365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1082" name="/newroot/110/cgroup.controllers" dev="tmpfs" ino=586 res=1 errno=0 [ 290.868387][ T32] audit: type=1800 audit(1789040340.982:4): pid=10365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1082" name="cgroup.controllers" dev="tmpfs" ino=586 res=0 errno=0 [ 290.976980][ T32] audit: type=1804 audit(1789040341.082:5): pid=10365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1082" name="/newroot/110/cgroup.controllers" dev="tmpfs" ino=586 res=1 errno=0 [ 290.996633][ T32] audit: type=1800 audit(1789040341.092:6): pid=10367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1082" name="cgroup.controllers" dev="tmpfs" ino=586 res=0 errno=0 [ 291.929109][T10316] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 292.364711][T10390] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 292.764390][T10392] netlink: 524 bytes leftover after parsing attributes in process `syz.0.1085'. [ 292.788599][T10400] netlink: 'syz.3.1089': attribute type 12 has an invalid length. [ 292.942122][T10413] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1090'. [ 292.953564][T10413] netlink: 'syz.6.1090': attribute type 5 has an invalid length. [ 292.963428][T10413] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1090'. [ 293.133526][T10415] netlink: 'syz.4.1091': attribute type 11 has an invalid length. [ 293.133570][T10415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1091'. [ 293.407285][T10413] geneve2: entered promiscuous mode [ 293.408333][T10413] geneve2: entered allmulticast mode [ 293.590706][T10415] netlink: 'syz.4.1091': attribute type 11 has an invalid length. [ 293.600429][ T1160] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.600546][ T1160] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.600589][ T1160] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.600629][ T1160] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.600670][ T1160] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 293.600710][ T1160] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 293.600750][ T1160] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 293.610736][ T13] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 293.611403][T10415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1091'. [ 294.725102][T10451] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1098'. [ 295.571589][T10461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.650379][T10468] netlink: 'syz.4.1104': attribute type 1 has an invalid length. [ 295.822429][T10468] 8021q: adding VLAN 0 to HW filter on device bond5 [ 295.916026][T10470] bond5: (slave veth0_to_bond): making interface the new active one [ 295.933663][T10470] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 295.979822][T10473] bond5: entered promiscuous mode [ 295.985170][T10473] veth0_to_bond: entered promiscuous mode [ 296.011247][T10473] bond5: entered allmulticast mode [ 296.011352][T10473] veth0_to_bond: entered allmulticast mode [ 296.100321][T10471] ipvlan2: entered allmulticast mode [ 296.112286][T10471] batman_adv: batadv0: Adding interface: ipvlan2 [ 296.120969][T10471] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.121058][T10471] batman_adv: The newly added mac address (ca:49:6b:1f:66:68) already exists on: ipvlan0 [ 296.121089][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.121105][T10471] batman_adv: The newly added mac address (ca:49:6b:1f:66:68) already exists on: ipvlan1 [ 296.121125][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.121144][T10471] batman_adv: batadv0: Interface activated: ipvlan2 [ 296.243532][T10489] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1109'. [ 296.254109][T10489] netlink: 'syz.5.1109': attribute type 7 has an invalid length. [ 296.263274][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1107'. [ 296.263344][T10485] netlink: 'syz.3.1107': attribute type 10 has an invalid length. [ 296.263366][T10485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1107'. [ 296.284006][T10489] netlink: 'syz.5.1109': attribute type 8 has an invalid length. [ 296.284032][T10489] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1109'. [ 296.339796][T10476] ipvlan3: entered allmulticast mode [ 296.350605][T10476] batman_adv: batadv0: Adding interface: ipvlan3 [ 296.358917][T10476] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.358969][T10476] batman_adv: The newly added mac address (ca:49:6b:1f:66:68) already exists on: ipvlan0 [ 296.358991][T10476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.359007][T10476] batman_adv: The newly added mac address (ca:49:6b:1f:66:68) already exists on: ipvlan1 [ 296.359026][T10476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.359041][T10476] batman_adv: The newly added mac address (ca:49:6b:1f:66:68) already exists on: ipvlan2 [ 296.359057][T10476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.359075][T10476] batman_adv: batadv0: Interface activated: ipvlan3 [ 297.335398][T10510] 8021q: VLANs not supported on ip6gre0 [ 297.570827][T10512] ip6gre1: entered allmulticast mode [ 298.200725][T10528] bond0: Error: Cannot enslave bond to itself. [ 298.915209][T10539] netlink: 'syz.4.1125': attribute type 97 has an invalid length. [ 298.915250][T10539] __nla_validate_parse: 2 callbacks suppressed [ 298.915291][T10539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1125'. [ 298.915328][T10539] netlink: 'syz.4.1125': attribute type 97 has an invalid length. [ 298.915347][T10539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1125'. [ 298.989398][T10549] netlink: 'syz.4.1125': attribute type 97 has an invalid length. [ 298.989445][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1125'. [ 298.989482][T10549] netlink: 'syz.4.1125': attribute type 97 has an invalid length. [ 298.989502][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1125'. [ 299.309523][T10522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1119'. [ 299.598875][T10559] netlink: 'syz.4.1128': attribute type 3 has an invalid length. [ 300.394119][T10581] netlink: 'syz.6.1133': attribute type 4 has an invalid length. [ 300.394161][T10581] netlink: 'syz.6.1133': attribute type 7 has an invalid length. [ 300.628820][T10588] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1134'. [ 300.628870][T10588] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1134'. [ 300.748577][T10593] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1134'. [ 300.759074][T10593] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1134'. [ 300.780753][T10591] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1135'. [ 301.910062][T10619] openvswitch: netlink: Message has 8 unknown bytes. [ 301.925048][T10611] 8021q: adding VLAN 0 to HW filter on device bond6 [ 302.000723][T10622] netlink: 'syz.5.1140': attribute type 2 has an invalid length. [ 302.003230][T10622] netlink: 'syz.5.1140': attribute type 2 has an invalid length. [ 302.003844][T10622] netlink: 'syz.5.1140': attribute type 2 has an invalid length. [ 302.059596][T10620] macvlan2: entered promiscuous mode [ 302.066251][T10620] macvlan2: entered allmulticast mode [ 302.765201][T10634] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 304.521691][T10672] xt_CT: You must specify a L4 protocol and not use inversions on it [ 304.729932][T10674] lo: entered promiscuous mode [ 304.747827][T10674] tunl0: entered promiscuous mode [ 304.763952][T10674] gre0: entered promiscuous mode [ 304.900643][T10674] gretap0: entered promiscuous mode [ 305.024066][T10674] erspan0: entered promiscuous mode [ 305.149405][T10674] ip_vti0: entered promiscuous mode [ 305.261938][T10696] validate_nla: 30 callbacks suppressed [ 305.262022][T10696] netlink: 'syz.3.1154': attribute type 1 has an invalid length. [ 305.354716][T10697] netlink: 'syz.6.1156': attribute type 1 has an invalid length. [ 305.500662][T10701] __nla_validate_parse: 5 callbacks suppressed [ 305.500717][T10701] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1156'. [ 305.500750][T10701] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 305.709555][T10703] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1157'. [ 305.752715][T10697] 8021q: adding VLAN 0 to HW filter on device bond2 [ 305.768085][T10704] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1157'. [ 305.804909][T10705] bond2: (slave geneve3): making interface the new active one [ 305.817408][T10705] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 306.020937][T10707] netlink: 'syz.4.1158': attribute type 1 has an invalid length. [ 306.032232][T10707] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1158'. [ 306.032300][T10707] netlink: 'syz.4.1158': attribute type 2 has an invalid length. [ 306.032321][T10707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1158'. [ 306.640620][T10729] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1160'. [ 307.379500][T10744] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20002 [ 307.485416][T10742] netlink: 60951 bytes leftover after parsing attributes in process `syz.3.1167'. [ 307.594958][T10748] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1169'. [ 308.544465][T10769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1177'. [ 308.969951][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1179'. [ 309.103999][T10774] bond3: option xmit_hash_policy: invalid value (64) [ 309.125395][T10774] bond3 (unregistering): Released all slaves [ 310.319273][T10809] bond3 (unregistering): Released all slaves [ 310.792192][T10826] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.869101][T10828] __nla_validate_parse: 1 callbacks suppressed [ 310.869160][T10828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1192'. [ 310.974495][T10826] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 310.983267][T10826] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1191'. [ 310.983321][T10826] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1191'. [ 311.007986][T10826] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1191'. [ 311.017701][T10829] 8021q: VLANs not supported on lo [ 311.053931][T10832] 8021q: VLANs not supported on lo [ 312.174498][T10852] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1198'. [ 312.273634][T10852] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1198'. [ 312.520759][T10858] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1200'. [ 313.090236][T10876] netlink: 'syz.5.1205': attribute type 21 has an invalid length. [ 313.090281][T10876] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1205'. [ 313.090383][T10876] netlink: 'syz.5.1205': attribute type 4 has an invalid length. [ 313.090403][T10876] netlink: 'syz.5.1205': attribute type 5 has an invalid length. [ 313.090421][T10876] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1205'. [ 313.142595][T10876] netlink: 'syz.5.1205': attribute type 21 has an invalid length. [ 313.151018][T10876] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1205'. [ 313.151153][T10876] netlink: 'syz.5.1205': attribute type 4 has an invalid length. [ 313.151173][T10876] netlink: 'syz.5.1205': attribute type 5 has an invalid length. [ 314.081811][T10894] tipc: Failed to obtain node identity [ 314.088610][T10894] tipc: Enabling of bearer rejected, failed to enable media [ 314.716339][T10910] macsec1: entered promiscuous mode [ 314.716382][T10910] bridge0: entered promiscuous mode [ 314.731503][T10910] macsec1: entered allmulticast mode [ 314.742781][T10910] bridge0: entered allmulticast mode [ 314.755423][T10910] bridge0: port 3(macsec1) entered blocking state [ 314.764724][T10910] bridge0: port 3(macsec1) entered disabled state [ 314.831992][T10910] bridge0: left allmulticast mode [ 314.884424][ T9] bridge0: left promiscuous mode [ 315.271706][T10919] xt_MASQUERADE: bad MAP_IPS. [ 315.477107][T10924] Bluetooth: hci0: unsupported parameter 5161 [ 315.477152][T10924] Bluetooth: hci0: unsupported parameter 8192 [ 315.477186][T10924] Bluetooth: hci0: unsupported parameter 5161 [ 315.477205][T10924] Bluetooth: hci0: unsupported parameter 8192 [ 316.133404][T10938] __nla_validate_parse: 5 callbacks suppressed [ 316.133471][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1225'. [ 316.197935][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1225'. [ 316.198218][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1225'. [ 316.282147][T10941] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1226'. [ 316.294104][T10938] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1225'. [ 316.698661][ T32] audit: type=1800 audit(1789040366.812:7): pid=10949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1229" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1294 res=0 errno=0 [ 316.754093][T10951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1227'. [ 316.769529][T10951] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1227'. [ 316.795613][T10951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1227'. [ 316.808341][T10951] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1227'. [ 316.862140][T10959] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1231'. [ 317.081262][T10960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.374984][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.511292][T11005] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 319.352445][T11020] macvtap0: entered allmulticast mode [ 319.352491][T11020] veth0_macvtap: entered allmulticast mode [ 319.568464][T11033] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 320.363395][T11052] netlink: 'syz.4.1251': attribute type 2 has an invalid length. [ 320.459665][T11058] 8021q: adding VLAN 0 to HW filter on device bond3 [ 320.473139][T11058] bridge0: port 3(bond3) entered blocking state [ 320.480541][T11058] bridge0: port 3(bond3) entered disabled state [ 320.487741][T11058] bond3: entered allmulticast mode [ 320.522413][T11058] bond3: entered promiscuous mode [ 320.534212][T11057] netlink: 'syz.6.1253': attribute type 7 has an invalid length. [ 320.534255][T11057] netlink: 'syz.6.1253': attribute type 8 has an invalid length. [ 320.558170][T11058] bridge0: port 3(bond3) entered blocking state [ 320.559516][T11058] bridge0: port 3(bond3) entered forwarding state [ 320.688726][T11057] team0: entered promiscuous mode [ 320.688771][T11057] team_slave_0: entered promiscuous mode [ 320.702024][T11057] team_slave_1: entered promiscuous mode [ 320.800774][T11057] team0: left promiscuous mode [ 320.800819][T11057] team_slave_0: left promiscuous mode [ 320.801121][T11057] team_slave_1: left promiscuous mode [ 320.990927][ T6769] bridge0: port 3(bond3) entered disabled state [ 321.052724][T11068] batman_adv: batadv0: Adding interface: veth0 [ 321.063045][T11068] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.091171][T11068] batman_adv: batadv0: Interface activated: veth0 [ 321.103865][T11071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.103908][T11071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.127602][T11071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.137174][T11071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.210810][T11071] batman_adv: batadv0: Interface deactivated: veth0 [ 321.220300][T11071] batman_adv: batadv0: Removing interface: veth0 [ 321.923837][T11080] __nla_validate_parse: 14 callbacks suppressed [ 321.923920][T11080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1257'. [ 322.324532][T11087] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1259'. [ 322.420790][T11087] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1259'. [ 322.420844][T11087] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 323.095172][T11099] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 323.178145][T11099] bond0 (unregistering): Released all slaves [ 323.199579][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1264'. [ 323.464129][T11104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 323.489880][T11106] syzkaller0: entered promiscuous mode [ 323.489924][T11106] syzkaller0: entered allmulticast mode [ 323.516103][T11109] tipc: Started in network mode [ 323.522746][T11109] tipc: Node identity d6b9381a4738, cluster identity 4711 [ 323.530448][T11109] tipc: Enabled bearer , priority 0 [ 323.658359][T11097] tipc: Resetting bearer [ 323.760454][T11097] tipc: Disabling bearer [ 324.265365][T11122] netlink: 'syz.6.1266': attribute type 1 has an invalid length. [ 324.551482][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1269'. [ 324.561995][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1269'. [ 324.584601][T11129] syzkaller1: entered promiscuous mode [ 324.584646][T11129] syzkaller1: entered allmulticast mode [ 324.700588][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1269'. [ 324.700640][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1269'. [ 324.724103][T11131] netlink: 'syz.4.1270': attribute type 1 has an invalid length. [ 324.742123][T11137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1269'. [ 324.742172][T11137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1269'. [ 324.998207][T11131] bond7: entered promiscuous mode [ 325.006389][T11131] 8021q: adding VLAN 0 to HW filter on device bond7 [ 325.093615][T11138] 8021q: adding VLAN 0 to HW filter on device bond7 [ 325.103242][T11138] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 325.114403][T11138] bond7: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 325.147244][T11138] bond7: (slave ip6gre1): making interface the new active one [ 325.147292][T11138] ip6gre1: entered promiscuous mode [ 325.165580][T11138] bond7: (slave ip6gre1): Enslaving as an active interface with an up link [ 325.190222][T11143] A link change request failed with some changes committed already. Interface nlmon0 may have been left with an inconsistent configuration, please check. [ 325.701696][T11157] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 325.865197][T11158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.284313][T11167] ip_tables: iptables: counters copy to user failed while replacing table [ 327.499283][T11191] __nla_validate_parse: 4 callbacks suppressed [ 327.499348][T11191] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1288'. [ 327.546797][T11186] bond0: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 327.642712][T11186] bond0 (unregistering): Released all slaves [ 327.681016][T11194] Cannot find del_set index 3 as target [ 328.048526][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1284'. [ 328.338966][T11204] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1291'. [ 328.593335][T11204] 8021q: adding VLAN 0 to HW filter on device bond8 [ 328.849040][T11206] macvlan2: entered promiscuous mode [ 328.855103][T11206] macvlan2: entered allmulticast mode [ 328.857525][T11206] bond8: entered allmulticast mode [ 328.857645][T11206] bond8: entered promiscuous mode [ 328.860117][T11206] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 329.003299][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1295'. [ 329.012836][T11206] team0: Port device macvlan2 added [ 329.021996][T11218] IPv6: NLM_F_CREATE should be specified when creating new route [ 329.044068][T11217] netlink: 'syz.3.1295': attribute type 2 has an invalid length. [ 329.590649][T11240] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 329.659149][T11232] bridge3: entered promiscuous mode [ 329.664846][T11232] bridge3: entered allmulticast mode [ 329.690194][T11242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1301'. [ 329.742691][T11239] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 329.761398][T11239] bond4 (unregistering): Released all slaves [ 330.243543][T11259] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1305'. [ 330.554196][T11264] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1306'. [ 330.591037][T11267] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1307'. [ 330.851435][T11269] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1307'. [ 331.958703][T11301] openvswitch: netlink: Invalid VLAN frame [ 332.577283][T11310] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1315'. [ 332.577338][T11310] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1315'. [ 332.677148][T11316] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1319'. [ 332.836058][T11310] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1315'. [ 332.845367][ T6767] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.859742][ T6919] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.861047][ T6919] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.861116][ T6919] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.947027][T11310] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1315'. [ 333.261141][T11327] netlink: 'syz.5.1320': attribute type 1 has an invalid length. [ 333.438774][T11333] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1320'. [ 333.454231][T11333] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1320'. [ 333.763784][T11327] 8021q: adding VLAN 0 to HW filter on device bond4 [ 333.915715][T11342] x_tables: duplicate underflow at hook 2 [ 334.129935][T11346] xt_l2tp: v2 doesn't support IP mode [ 334.965974][T11357] netlink: 83 bytes leftover after parsing attributes in process `syz.3.1329'. [ 336.960748][T11413] netlink: 'syz.3.1342': attribute type 10 has an invalid length. [ 336.975846][T11408] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1341'. [ 337.858070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.460522][T11413] team0: Port device dummy0 added [ 340.792189][T11420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1345'. [ 341.268655][T11433] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1346'. [ 341.279315][T11433] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1346'. [ 341.428038][T11433] netlink: 'syz.6.1346': attribute type 1 has an invalid length. [ 341.455022][T11435] syzkaller0: entered promiscuous mode [ 341.455067][T11435] syzkaller0: entered allmulticast mode [ 341.819984][T11433] 8021q: adding VLAN 0 to HW filter on device bond4 [ 341.859980][T11434] bond4: (slave geneve4): making interface the new active one [ 341.874686][T11434] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 342.439164][T11457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1354'. [ 342.605869][T11459] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1354'. [ 342.859426][T11465] syzkaller1: entered promiscuous mode [ 342.859471][T11465] syzkaller1: entered allmulticast mode [ 344.458269][T11500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1363'. [ 344.970348][T11512] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1368'. [ 345.870691][T11533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1372'. [ 345.870759][T11533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1372'. [ 347.027508][T11549] netlink: 'syz.5.1379': attribute type 1 has an invalid length. [ 347.403735][T11549] bond5: option mode: invalid value (8) [ 347.492333][T11549] bond5 (unregistering): Released all slaves [ 348.898128][T11577] netlink: 'syz.0.1385': attribute type 21 has an invalid length. [ 348.906647][T11577] netlink: 'syz.0.1385': attribute type 6 has an invalid length. [ 348.915727][T11577] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1385'. [ 351.255178][T11632] netlink: 'syz.6.1399': attribute type 2 has an invalid length. [ 351.285374][T11632] netlink: 'syz.6.1399': attribute type 2 has an invalid length. [ 351.299500][T11632] netlink: 'syz.6.1399': attribute type 2 has an invalid length. [ 351.300442][T11632] netlink: 'syz.6.1399': attribute type 2 has an invalid length. [ 351.300466][T11632] netlink: 'syz.6.1399': attribute type 1 has an invalid length. [ 351.490612][T11636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.229285][T11658] netlink: 'syz.4.1404': attribute type 3 has an invalid length. [ 352.458931][T11668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 353.790748][T11701] ieee802154 phy1 wpan1: encryption failed: -22 [ 354.342399][ T32] audit: type=1804 audit(1789040404.392:8): pid=11707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1415" name="/newroot/103/cgroup.controllers" dev="tmpfs" ino=543 res=1 errno=0 [ 354.342475][ T32] audit: type=1800 audit(1789040404.462:9): pid=11707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1415" name="cgroup.controllers" dev="tmpfs" ino=543 res=0 errno=0 [ 354.898268][T11704] 8021q: adding VLAN 0 to HW filter on device bond2 [ 354.964208][T11704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1414'. [ 354.964252][T11704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1414'. [ 355.014651][T11712] netlink: 'syz.0.1414': attribute type 4 has an invalid length. [ 355.014696][T11712] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1414'. [ 355.152582][T11732] netlink: 'syz.4.1418': attribute type 1 has an invalid length. [ 355.215338][T11728] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1418'. [ 355.232805][T11712] .`: renamed from bond0 (while UP) [ 355.328028][T11733] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1418'. [ 355.361838][T11737] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 355.469720][T11740] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1421'. [ 355.756308][T11748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1422'. [ 355.855841][T11752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1422'. [ 356.160614][T11761] syzkaller1: entered promiscuous mode [ 356.160659][T11761] syzkaller1: entered allmulticast mode [ 356.584564][T11771] xt_IDLETIMER: label is empty or not nul-terminated [ 356.762704][T11778] netlink: 'syz.0.1428': attribute type 4 has an invalid length. [ 357.429728][T11778] tipc: Failed to remove unknown binding: 66,0,0/0:3563273896/3563273897 [ 357.502029][T11778] tipc: Failed to remove unknown binding: 66,0,0/0:3563273896/3563273897 [ 357.868726][T11796] bond9: (slave bond_slave_0): Device is not our slave [ 357.868778][T11796] bond9: option active_slave: invalid value (bond_slave_0) [ 357.922846][T11796] bond9 (unregistering): Released all slaves [ 359.195692][T11831] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1439'. [ 359.196668][T11831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1439'. [ 360.018093][T11857] __nla_validate_parse: 2 callbacks suppressed [ 360.025730][T11857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1446'. [ 360.662783][T11865] team0 (unregistering): Port device team_slave_0 removed [ 360.752037][T11865] team0 (unregistering): Port device team_slave_1 removed [ 362.026528][T11910] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.027108][T11910] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.199448][T11914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1459'. [ 362.222803][T11914] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1459'. [ 362.222865][T11914] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1459'. [ 362.463124][T11922] netlink: 'syz.3.1463': attribute type 1 has an invalid length. [ 362.492777][T11919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1460'. [ 362.606051][T11926] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 362.616713][T11926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.670604][T11922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.687879][T11923] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1462'. [ 362.842631][T11922] bond0: (slave bridge1): making interface the new active one [ 362.932877][T11922] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 363.000887][T11930] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1465'. [ 363.000946][T11930] netlink: 'syz.6.1465': attribute type 7 has an invalid length. [ 363.000996][T11930] netlink: 'syz.6.1465': attribute type 8 has an invalid length. [ 363.001015][T11930] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1465'. [ 363.234397][T11943] ieee802154 phy1 wpan1: encryption failed: -22 [ 363.744545][T11959] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.065622][T11968] netlink: 'syz.5.1471': attribute type 1 has an invalid length. [ 364.065667][T11968] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1471'. [ 364.065738][T11968] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1471'. [ 364.484457][T11976] sctp: [Deprecated]: syz.0.1476 (pid 11976) Use of struct sctp_assoc_value in delayed_ack socket option. [ 364.484457][T11976] Use struct sctp_sack_info instead [ 364.996787][T11983] netlink: 'syz.0.1478': attribute type 9 has an invalid length. [ 365.528479][ T5636] Bluetooth: hci4: command 0x0405 tx timeout [ 366.700507][T12029] netlink: ct family unspecified [ 366.815937][T12029] netlink: 'syz.0.1491': attribute type 4 has an invalid length. [ 366.946012][T12034] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 367.422362][T12047] __nla_validate_parse: 1 callbacks suppressed [ 367.422423][T12047] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1495'. [ 367.422466][T12047] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1495'. [ 368.946077][T12090] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1504'. [ 369.505602][T12098] netlink: 'syz.4.1505': attribute type 10 has an invalid length. [ 369.541236][T12098] team0: Device vxcan1 is of different type [ 369.642245][T12104] netlink: 'syz.5.1510': attribute type 1 has an invalid length. [ 369.866008][T12107] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1511'. [ 369.866065][T12107] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1511'. [ 369.901540][T12107] gretap1: entered promiscuous mode [ 369.909503][T12107] gretap1: entered allmulticast mode [ 370.079234][T12116] netlink: 'syz.0.1513': attribute type 29 has an invalid length. [ 370.098239][T12116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1513'. [ 371.011075][T12132] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1518'. [ 371.161513][T12139] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1520'. [ 371.177728][T12140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.277192][T12140] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1521'. [ 372.063925][T12162] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1525'. [ 372.835876][T12162] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.178604][T12171] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1527'. [ 373.771131][T12185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 373.884335][T12187] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1534'. [ 373.911796][T12187] netlink: 165 bytes leftover after parsing attributes in process `syz.6.1534'. [ 374.063054][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1535'. [ 374.063113][T12192] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1535'. [ 375.126182][T12211] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1539'. [ 375.203114][T12211] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1539'. [ 375.203173][T12211] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1539'. [ 375.474270][T12220] netlink: 'syz.3.1542': attribute type 21 has an invalid length. [ 375.474331][T12220] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1542'. [ 379.345472][T12220] netlink: 'syz.3.1542': attribute type 5 has an invalid length. [ 379.345516][T12220] netlink: 'syz.3.1542': attribute type 6 has an invalid length. [ 379.345551][T12220] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1542'. [ 379.979791][T12250] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 379.981568][T12261] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 379.995104][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1551'. [ 379.995138][T12257] openvswitch: netlink: Flow actions attr not present in new flow. [ 379.995386][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1551'. [ 379.995422][T12257] openvswitch: netlink: Flow actions attr not present in new flow. [ 379.995641][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1551'. [ 379.995662][T12257] openvswitch: netlink: Flow actions attr not present in new flow. [ 379.995878][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1551'. [ 379.995899][T12257] openvswitch: netlink: Flow actions attr not present in new flow. [ 379.996139][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1551'. [ 379.996161][T12257] openvswitch: netlink: Flow actions attr not present in new flow. [ 379.996374][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1551'. [ 379.996393][T12257] openvswitch: netlink: Flow actions attr not present in new flow. [ 380.015399][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1551'. [ 380.015478][T12257] openvswitch: netlink: Flow actions attr not present in new flow. [ 380.035765][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1551'. [ 380.035835][T12257] openvswitch: netlink: Flow actions attr not present in new flow. [ 380.042892][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1551'. [ 380.042916][T12257] openvswitch: netlink: Flow actions attr not present in new flow. [ 380.043167][T12257] openvswitch: netlink: Flow actions attr not present in new flow. [ 380.257679][T12261] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 380.276539][T12267] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 380.294807][T12261] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 380.343721][T12261] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 380.355085][T12261] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 380.372316][T12250] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 380.383425][T12261] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 380.472237][T12261] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 380.569961][T12269] pim6reg1: entered promiscuous mode [ 380.570016][T12269] pim6reg1: entered allmulticast mode [ 380.981422][T12287] Bluetooth: hci0: unsupported parameter 5134 [ 380.981484][T12287] Bluetooth: hci0: unsupported parameter 8192 [ 380.981545][T12287] Bluetooth: hci0: unsupported parameter 5134 [ 380.981565][T12287] Bluetooth: hci0: unsupported parameter 8192 [ 381.012868][T12287] sock: sock_timestamping_bind_phc: sock not bind to device [ 381.121573][T12281] batman_adv: batadv0: Adding interface: veth0 [ 381.129820][T12281] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.129891][T12281] batman_adv: batadv0: Interface activated: veth0 [ 382.541755][T12320] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 382.549084][T12299] tipc: Failed to remove unknown binding: 66,1,1/0:2429484448/2429484450 [ 382.549118][T12299] tipc: Failed to remove unknown binding: 66,1,1/0:2429484448/2429484450 [ 383.148212][T12333] macvlan0: entered promiscuous mode [ 383.581025][T12350] sctp: [Deprecated]: syz.6.1572 (pid 12350) Use of int in max_burst socket option. [ 383.581025][T12350] Use struct sctp_assoc_value instead [ 384.231549][T12361] netlink: 'syz.4.1575': attribute type 21 has an invalid length. [ 384.254769][T12365] netlink: 'syz.5.1578': attribute type 2 has an invalid length. [ 384.313769][T12370] netlink: 'syz.0.1579': attribute type 5 has an invalid length. [ 384.406021][T12375] xt_SECMARK: invalid mode: 9 [ 384.476256][T12370] Bluetooth: MGMT ver 1.23 [ 384.485156][T12370] Bluetooth: hci1: too big key_count value 32778 [ 384.487412][T12371] Bluetooth: hci1: too big key_count value 32778 [ 384.502933][T12361] bond9: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 384.526412][T12361] bond9 (unregistering): Released all slaves [ 384.684146][T12383] __nla_validate_parse: 37 callbacks suppressed [ 384.691794][T12383] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1581'. [ 384.701582][T12383] netlink: 'syz.5.1581': attribute type 5 has an invalid length. [ 384.701606][T12383] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1581'. [ 384.760799][T12376] netlink: 'syz.3.1577': attribute type 3 has an invalid length. [ 384.770366][T12377] netlink: 'syz.3.1577': attribute type 3 has an invalid length. [ 384.802119][T12382] vlan1: entered promiscuous mode [ 384.802170][T12382] bridge0: entered promiscuous mode [ 384.802610][T12382] vlan1: entered allmulticast mode [ 384.802633][T12382] bridge0: entered allmulticast mode [ 386.220545][T12422] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1590'. [ 386.220597][T12422] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1590'. [ 386.308732][T12420] trusted_key: syz.4.1589 sent an empty control message without MSG_MORE. [ 386.474051][T12428] net_ratelimit: 25 callbacks suppressed [ 386.474187][T12428] openvswitch: netlink: Message has 8 unknown bytes. [ 386.491849][T12428] netlink: 'syz.3.1592': attribute type 11 has an invalid length. [ 387.985542][T12460] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1599'. [ 387.985597][T12460] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1599'. [ 388.103846][T12460] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1599'. [ 388.219789][T12463] can: request_module (can-proto-0) failed. [ 388.407270][ T33] INFO: task syz.2.772:9089 blocked for more than 143 seconds. [ 388.407315][ T33] Not tainted syzkaller #0 [ 388.407343][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 388.407373][ T33] task:syz.2.772 state:D stack:27200 pid:9089 tgid:9086 ppid:5621 task_flags:0x400140 flags:0x00080002 [ 388.407469][ T33] Call Trace: [ 388.407549][ T33] [ 388.407625][ T33] __schedule+0x17db/0x58f0 [ 388.407880][ T33] ? __pfx___schedule+0x10/0x10 [ 388.407955][ T33] ? schedule+0x90/0x2b0 [ 388.407995][ T33] schedule+0x164/0x2b0 [ 388.408033][ T33] schedule_preempt_disabled+0x13/0x30 [ 388.408068][ T33] __mutex_lock+0x7c1/0x1550 [ 388.408148][ T33] ? __mutex_lock+0x5d4/0x1550 [ 388.408191][ T33] ? nfsd_nl_version_get_doit+0x17c/0xd20 [ 388.408306][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 388.408352][ T33] ? __nlmsg_put+0xef/0x1b0 [ 388.408453][ T33] ? genlmsg_put+0x137/0x2e0 [ 388.408494][ T33] nfsd_nl_version_get_doit+0x17c/0xd20 [ 388.408534][ T33] ? __nla_parse+0x40/0x60 [ 388.408652][ T33] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 388.408684][ T33] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 388.408723][ T33] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 388.408774][ T33] genl_family_rcv_msg_doit+0x233/0x340 [ 388.408823][ T33] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 388.408874][ T33] ? __dev_queue_xmit+0x29b/0x3820 [ 388.408989][ T33] genl_rcv_msg+0x614/0x7a0 [ 388.409036][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 388.409076][ T33] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 388.409109][ T33] ? __pfx_ref_tracker_free+0x10/0x10 [ 388.409179][ T33] netlink_rcv_skb+0x226/0x4a0 [ 388.409213][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 388.409254][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 388.409305][ T33] ? down_read+0x2be/0x330 [ 388.409336][ T33] genl_rcv+0x28/0x40 [ 388.409373][ T33] netlink_unicast+0x7bd/0x940 [ 388.409416][ T33] netlink_sendmsg+0x813/0xb40 [ 388.409461][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.409504][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 388.409622][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.409655][ T33] sock_sendmsg_nosec+0x13a/0x180 [ 388.409742][ T33] ____sys_sendmsg+0x54e/0x850 [ 388.409779][ T33] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.409820][ T33] ? import_iovec+0x73/0xa0 [ 388.409888][ T33] ___sys_sendmsg+0x2a5/0x360 [ 388.409918][ T33] ? __lock_acquire+0x6df/0x2e50 [ 388.410009][ T33] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.410043][ T33] ? futex_wait+0x2a2/0x390 [ 388.410131][ T33] ? __fget_files+0x2a/0x420 [ 388.410194][ T33] ? __fget_files+0x3a2/0x420 [ 388.410241][ T33] __x64_sys_sendmsg+0x1b1/0x290 [ 388.410275][ T33] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 388.410328][ T33] do_syscall_64+0x166/0x520 [ 388.410411][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.410460][ T33] ? clear_bhb_loop+0x70/0xc0 [ 388.410493][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.410522][ T33] RIP: 0033:0x7f99a4b9e159 [ 388.410571][ T33] RSP: 002b:00007f99a5b53028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.410634][ T33] RAX: ffffffffffffffda RBX: 00007f99a4e25fa0 RCX: 00007f99a4b9e159 [ 388.410656][ T33] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000005 [ 388.410675][ T33] RBP: 00007f99a4c3503b R08: 0000000000000000 R09: 0000000000000000 [ 388.410693][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.410711][ T33] R13: 00007f99a4e26038 R14: 00007f99a4e25fa0 R15: 00007fffb5b9eaf8 [ 388.410753][ T33] [ 388.410802][ T33] [ 388.410802][ T33] Showing all locks held in the system: [ 388.410819][ T33] locks held by khungtaskd/33: 1, last CPU#0: [ 388.410857][ T33] #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 388.411017][ T33] locks held by getty/5377: 2, on CPU#1: [ 388.411038][ T33] #0: ffff8880366eb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 388.411200][ T33] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 388.411323][ T33] locks held by kworker/1:3/5739: 2, last CPU#1: [ 388.411345][ T33] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 388.411452][ T33] #1: ffffc9000470fc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 388.411543][ T33] locks held by syz.1.443/7593: 2, on CPU#0: [ 388.411563][ T33] #0: ffffffff902c1c68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 388.411658][ T33] #1: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 388.411739][ T33] locks held by syz.2.772/9089: 2, on CPU#0: [ 388.411759][ T33] #0: ffffffff902c1c68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 388.411846][ T33] #1: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xd20 [ 388.411929][ T33] locks held by syz.4.1599/12476: 2, last CPU#0: [ 388.411950][ T33] #0: ffff88807e41a9f8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 388.412050][ T33] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 388.412151][ T33] locks held by syz.6.1602/12477: 2, on CPU#0: [ 388.412171][ T33] #0: ffffffff90254700 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0xc2/0xf20 [ 388.412276][ T33] #1: ffffffff8ed62aa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 388.412367][ T33] locks held by kworker/u8:31/12469: 3, on CPU#0: [ 388.412388][ T33] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 388.412474][ T33] #1: ffffc90003697c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 388.412559][ T33] #2: ffffffff8ed62978 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 388.412644][ T33] locks held by kworker/u8:32/12470: 3, on CPU#0: [ 388.412665][ T33] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 388.412747][ T33] #1: ffffc90002fb7c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 388.412832][ T33] #2: ffffffff8ed62978 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 388.412944][ T33] locks held by syz-executor/12478: 2, last CPU#1: [ 388.412965][ T33] #0: ffff88807e9336b8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 388.413052][ T33] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 388.413133][ T33] locks held by syz.0.1604/12479: 2, last CPU#0: [ 388.413163][ T33] #0: ffff8880764dfa88 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 388.413249][ T33] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 388.413339][ T33] [ 388.413350][ T33] ============================================= [ 388.413350][ T33] [ 388.413370][ T33] NMI backtrace for cpu 0 [ 388.413395][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 388.413425][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 388.413438][ T33] Call Trace: [ 388.413446][ T33] [ 388.413456][ T33] dump_stack_lvl+0xe8/0x150 [ 388.413499][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 388.413560][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 388.413605][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 388.413637][ T33] sys_info+0x135/0x170 [ 388.413661][ T33] watchdog+0xfd7/0x1030 [ 388.413699][ T33] ? watchdog+0x1c7/0x1030 [ 388.413730][ T33] kthread+0x38b/0x480 [ 388.413754][ T33] ? __pfx_watchdog+0x10/0x10 [ 388.413773][ T33] ? __pfx_kthread+0x10/0x10 [ 388.413798][ T33] ret_from_fork+0x514/0xb70 [ 388.413835][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 388.413871][ T33] ? __switch_to+0xc89/0x1420 [ 388.413909][ T33] ? __pfx_kthread+0x10/0x10 [ 388.413931][ T33] ret_from_fork_asm+0x1a/0x30 [ 388.413983][ T33] [ 388.414041][ T33] Sending NMI from CPU 0 to CPUs 1: [ 388.414078][ C1] NMI backtrace for cpu 1 [ 388.414093][ C1] CPU: 1 UID: 0 PID: 12478 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 388.414114][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 388.414126][ C1] RIP: 0010:mark_lock+0x3e/0x190 [ 388.414150][ C1] Code: 03 00 48 83 f9 01 bb 09 00 00 00 83 db 00 83 fa 08 0f 45 da bd 01 00 00 00 89 d9 d3 e5 25 ff 1f 00 00 48 0f a3 05 42 b9 f6 12 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 d0 24 3b 94 eb 42 83 3d 09 49 [ 388.414168][ C1] RSP: 0000:ffffc90000a18ba0 EFLAGS: 00000007 [ 388.414184][ C1] RAX: 0000000000000071 RBX: 0000000000000004 RCX: 0000000000000004 [ 388.414196][ C1] RDX: 0000000000000004 RSI: ffff8880328b8c00 RDI: ffff8880328b8000 [ 388.414209][ C1] RBP: 0000000000000010 R08: 1a00000000000000 R09: 0000000000080000 [ 388.414222][ C1] R10: 0000000000000000 R11: ffff8880b8728298 R12: 0000000000000003 [ 388.414234][ C1] R13: 0000000000000000 R14: ffff8880328b8c00 R15: 0000000000000001 [ 388.414246][ C1] FS: 00005555792c1500(0000) GS:ffff888124dd9000(0000) knlGS:0000000000000000 [ 388.414263][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 388.414276][ C1] CR2: 00007f4bebbc6bd2 CR3: 000000007dab4000 CR4: 00000000003526f0 [ 388.414293][ C1] Call Trace: [ 388.414300][ C1] [ 388.414309][ C1] __lock_acquire+0x6b7/0x2e50 [ 388.414334][ C1] ? __hrtimer_get_next_event+0x51c/0x600 [ 388.414378][ C1] lock_acquire+0x115/0x350 [ 388.414395][ C1] ? __hrtimer_rearm_deferred+0x99/0x4b0 [ 388.414424][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 388.414451][ C1] _raw_spin_lock+0x2e/0x40 [ 388.414474][ C1] ? __hrtimer_rearm_deferred+0x99/0x4b0 [ 388.414499][ C1] __hrtimer_rearm_deferred+0x99/0x4b0 [ 388.414528][ C1] irqentry_exit+0x8d3/0x910 [ 388.414558][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 388.414578][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 388.414604][ C1] Code: f7 e8 5d f5 bc f5 f7 c3 00 02 00 00 74 05 e8 50 32 e9 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f4 0e ae f5 65 48 8b 05 9c a1 ad 07 48 85 c0 74 18 5b 41 5e c3 [ 388.414620][ C1] RSP: 0000:ffffc90000a18f18 EFLAGS: 00000206 [ 388.414641][ C1] RAX: 0000000000000002 RBX: 0000000000000283 RCX: 8000000000000101 [ 388.414654][ C1] RDX: 0000000000000003 RSI: ffffffff8e4749e3 RDI: 0000000000000001 [ 388.414666][ C1] RBP: 0000000000000001 R08: ffffffff907a177f R09: 1ffffffff20f42ef [ 388.414680][ C1] R10: dffffc0000000000 R11: fffffbfff20f42f0 R12: 0000000000000006 [ 388.414693][ C1] R13: 0000000000000008 R14: ffff8880b8728280 R15: 0000000000000020 [ 388.414715][ C1] handle_softirqs+0x226/0x860 [ 388.414742][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 388.414769][ C1] __irq_exit_rcu+0xcb/0x220 [ 388.414793][ C1] irq_exit_rcu+0x9/0x30 [ 388.414815][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 388.414841][ C1] [ 388.414847][ C1] [ 388.414854][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 388.414873][ C1] RIP: 0010:unwind_next_frame+0x48e/0x2550 [ 388.414896][ C1] Code: d8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 b4 19 00 00 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 bf 19 00 00 0f b6 43 01 <83> e0 07 0f 84 7c 16 00 00 83 f8 01 4c 8b 6c 24 50 49 bc 00 00 00 [ 388.414911][ C1] RSP: 0000:ffffc9001e667380 EFLAGS: 00000246 [ 388.414926][ C1] RAX: 0000000000000002 RBX: ffffffff9120fd20 RCX: ffffffff909d5130 [ 388.414939][ C1] RDX: ffffffff9120fd1c RSI: ffffffff9120fd1c RDI: ffffffff8c6d9420 [ 388.414953][ C1] RBP: ffffffff82419b0c R08: 0000000000000001 R09: 0000000000000000 [ 388.414965][ C1] R10: 0000000000000000 R11: ffffffff8ed5c6e0 R12: dffffc0000000000 [ 388.414978][ C1] R13: ffffffff9120fd21 R14: ffffc9001e667428 R15: ffffffff909d5130 [ 388.414994][ C1] ? __set_page_owner+0x8c/0x4c0 [ 388.415035][ C1] ? __set_page_owner+0x8d/0x4c0 [ 388.415053][ C1] ? unwind_next_frame+0x8f/0x2550 [ 388.415089][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 388.415119][ C1] arch_stack_walk+0x11b/0x150 [ 388.415143][ C1] ? __set_page_owner+0x8d/0x4c0 [ 388.415164][ C1] stack_trace_save+0xa9/0x100 [ 388.415192][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 388.415226][ C1] save_stack+0x122/0x230 [ 388.415246][ C1] ? __pfx_save_stack+0x10/0x10 [ 388.415263][ C1] ? __lock_acquire+0x6df/0x2e50 [ 388.415291][ C1] __set_page_owner+0x8d/0x4c0 [ 388.415312][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 388.415330][ C1] ? seqcount_lockdep_reader_access+0x89/0xc0 [ 388.415356][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 388.415386][ C1] post_alloc_hook+0x1f9/0x250 [ 388.415415][ C1] get_page_from_freelist+0x2209/0x2280 [ 388.415441][ C1] ? lock_acquire+0x115/0x350 [ 388.415472][ C1] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 388.415492][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 388.415514][ C1] ? __pfx_policy_nodemask+0x10/0x10 [ 388.415548][ C1] alloc_pages_mpol+0x21e/0x390 [ 388.415573][ C1] alloc_pages_noprof+0xb1/0x2b0 [ 388.415600][ C1] pte_alloc_one+0x22/0x370 [ 388.415623][ C1] do_pte_missing+0x13c8/0x34b0 [ 388.415665][ C1] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 388.415690][ C1] handle_mm_fault+0x1a53/0x3750 [ 388.415720][ C1] ? handle_mm_fault+0xf1/0x3750 [ 388.415748][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 388.415771][ C1] ? lock_vma_under_rcu+0x45a/0x500 [ 388.415810][ C1] do_user_addr_fault+0xa4f/0x1340 [ 388.415833][ C1] ? trace_page_fault_user+0x84/0x1e0 [ 388.415852][ C1] exc_page_fault+0x6a/0xc0 [ 388.415879][ C1] asm_exc_page_fault+0x26/0x30 [ 388.415896][ C1] RIP: 0033:0x7f4bebbc6bd2 [ 388.415916][ C1] Code: Unable to access opcode bytes at 0x7f4bebbc6ba8. [ 388.415967][ C1] RSP: 002b:00007ffdf9f00da0 EFLAGS: 00010246 [ 388.415983][ C1] RAX: 0000000000000000 RBX: 00007ffdf9f00da0 RCX: 00007f4bebbc6bd2 [ 388.415996][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 388.416007][ C1] RBP: 00007ffdf9f00f2c R08: 0000000000000000 R09: 0000000000000001 [ 388.416019][ C1] R10: 00005555792c17d0 R11: 0000000000000246 R12: 0000000000000001 [ 388.416031][ C1] R13: 00000000000927c0 R14: 000000000005eb51 R15: 00007ffdf9f00f80 [ 388.416053][ C1] [ 388.416167][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 389.794448][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 389.803599][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 389.813712][ T33] Call Trace: [ 389.817014][ T33] [ 389.819960][ T33] vpanic+0x56d/0xa60 [ 389.823978][ T33] ? __pfx___schedule+0x10/0x10 [ 389.828861][ T33] ? __pfx_vpanic+0x10/0x10 [ 389.833403][ T33] panic+0xc5/0xd0 [ 389.837158][ T33] ? __pfx_panic+0x10/0x10 [ 389.841611][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 389.847102][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 389.852491][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 389.858677][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 389.864863][ T33] watchdog+0x1030/0x1030 [ 389.869224][ T33] ? watchdog+0x1c7/0x1030 [ 389.873673][ T33] kthread+0x38b/0x480 [ 389.877771][ T33] ? __pfx_watchdog+0x10/0x10 [ 389.882471][ T33] ? __pfx_kthread+0x10/0x10 [ 389.887098][ T33] ret_from_fork+0x514/0xb70 [ 389.891730][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 389.896973][ T33] ? __switch_to+0xc89/0x1420 [ 389.901685][ T33] ? __pfx_kthread+0x10/0x10 [ 389.906303][ T33] ret_from_fork_asm+0x1a/0x30 [ 389.911111][ T33] [ 389.914348][ T33] Kernel Offset: disabled [ 389.918684][ T33] Rebooting in 86400 seconds..