last executing test programs: 7m42.352268046s ago: executing program 2 (id=4544): r0 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r1 = socket$inet6(0xa, 0x1, 0x0) (async) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c) listen(r1, 0x5) (async) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000700000000040014001a80100004800c"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) (async) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000800)='/', 0x1}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.cpu_exclusive\x00', 0x2, 0x0) (async) listen(r0, 0x7) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) connect$vsock_stream(r8, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r9 = accept(r0, 0x0, 0x0) setsockopt$sock_timeval(r9, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) (async) r10 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_CAP_ACK(r10, 0x10e, 0xa, &(0x7f0000000100)=0xc, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000a400000000000000", @ANYRES32, @ANYBLOB="0000017700000000000000000000000000000000c92efca3e539b9b29acb4e8d4033527c9ee45617d38f2824db4852dfe3b12d56b8aabb5351d1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 7m42.03879551s ago: executing program 2 (id=4549): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x3, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x895}, 0x40c0) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, 0x0, 0x10) recvfrom(r3, 0x0, 0x0, 0x101, 0x0, 0x0) 7m39.283524436s ago: executing program 2 (id=4565): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f00000002c0), &(0x7f0000000240)=r2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x28, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x4, 0x38}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 7m38.732061839s ago: executing program 2 (id=4568): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fcffffff0000000000000000180100002064f8a7bdde438e8c19d04314706c2500000000002020207b1af8ff00000000bfa10000000008000000b7030000000000808500000087f53b280e50da5f75756967fcece476a683424a50fe58640dfcfc0ce99e9598bc67d5f3928d11c8b1990c5f7f52f5251de162270698ce62afd0a5a14b1490a5c5bb8d6a5d22d428f8e90d6cb62da027d829f4a08d4994f95df9793c22b64fdd281d7d79edb2b301f75fb8"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fcffffff0000000000000000180100002064f8a7bdde438e8c19d04314706c2500000000002020207b1af8ff00000000bfa10000000008000000b7030000000000808500000087f53b280e50da5f75756967fcece476a683424a50fe58640dfcfc0ce99e9598bc67d5f3928d11c8b1990c5f7f52f5251de162270698ce62afd0a5a14b1490a5c5bb8d6a5d22d428f8e90d6cb62da027d829f4a08d4994f95df9793c22b64fdd281d7d79edb2b301f75fb8"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={&(0x7f00000007c0)="669ae47cf3d2f185eaac3b47003a835e10a6cc8365a0808beb2957dec086258ad110fe003faec8dac8f77c40e67b1c0c428010bfc113ad52ffd6402e4cb91831612631719dceee6ead828567eeab7dfb37d5", &(0x7f00000004c0)=""/204, 0x0, 0x0, 0x1}, 0x38) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x843}, 0x44040) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x1128}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x8000}, 0x8) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000004780)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x4}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000340)="c7c9b0d708", 0x5}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000140), 0x4) (async) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000140), 0x4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000140)=0x90) (async) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000140)=0x90) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) bind$alg(r5, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x800) (async) accept4(r5, 0x0, 0x0, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r6) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002"], 0x44}}, 0x8000) sendmsg$NL802154_CMD_NEW_SEC_DEV(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r8, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001100010028bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e0000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001100010028bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e0000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x14) 7m38.410543253s ago: executing program 2 (id=4571): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x5, 0x61, 0x11, 0x99}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x0, 0xe1d6, 0x24, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8000, 0xfff}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_user\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f00000002c0), &(0x7f0000000240)=r4}, 0x20) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffffda, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000000)=@raw=[@generic={0x10, 0x3, 0x0, 0x5, 0x7}, @call={0x85, 0x0, 0x0, 0x3f}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x4a, &(0x7f00000000c0)=""/74, 0x40f00, 0x10, '\x00', r0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x101}, 0x8, 0x10, 0x0, 0x0, 0x20c5, 0xffffffffffffffff, 0x6, &(0x7f0000000480)=[r1, r2, r3, r5], &(0x7f00000004c0)=[{0x4, 0x2, 0x3, 0xa}, {0x1, 0x1, 0x6, 0x9}, {0x3, 0x2, 0x6, 0x3}, {0x0, 0x4, 0x2, 0x7}, {0x3, 0x3, 0x8, 0x1}, {0x0, 0x1, 0x9, 0x2}], 0x10, 0x5}, 0x94) 7m38.196455548s ago: executing program 2 (id=4574): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac141400060003004c"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x240000d2) bind$llc(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x50, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r6 = socket(0x15, 0x5, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r6, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r7, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c1}, 0x8000) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 7m23.131012996s ago: executing program 32 (id=4574): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac141400060003004c"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x240000d2) bind$llc(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x50, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r6 = socket(0x15, 0x5, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r6, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r7, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c1}, 0x8000) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 3m27.63574144s ago: executing program 3 (id=6204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)={0x50, 0x7, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x800) r1 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa0000258000000150300000a004e002d35010000000000950041000000000069163a0000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a25c3a2feb39e94a5266a10716d4a3cef499fa176018054e9149a1c9d20a809ce3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x80, "0e577e79e96f6369099828c441a6ca34f8ce777143396408bda9a0d2384ccc14c94ecdaafe9cd009470a391966aa14c8901f8a0a89937993f4ae58e57e3aaaab2cc9284f0e26a7b58a68664d2f2778bc74c47bb1b08a19e0f235725455486fe21e8484d46d6cf835d898a2c4a5c86bf8a4f4eb7063b1e9451d78893f960d69c2"}, &(0x7f0000000080)=0x88) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc004000202080003000300000007000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000580)={r2, 0xec, "0f5efaacd0d12878f2659e749babba7d41e443975068a8178cd07aa09a9753f5e4a3c56672587b74e32d5b5fbf6ba2722bec7bcf22286464f872f2ee202284493c4021100739ac60f91da2345778cd1bdbe2d988b6e6ae1a67b0ff2197fda56d55b50a198331561220b7805108684e433e54bb839adce44669b37fc583eca8acf610c7cdd57666ac3c01f2a6a62dfb50e8a6785b6a57e3614fd9904e21c0c26a0027bebe458001fb746fa5b07eeff2cf7a914dab742e5b31f8e6a2c4ce7595fd420f2e53b802a1fd96ba89fc8d56e42d1266c3c0609f878c889dd7fcde33b07909908730606100f79630269a"}, &(0x7f0000000180)=0xf4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x9, &(0x7f0000000140)=0xfb78, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) 3m27.32417547s ago: executing program 3 (id=6207): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x9, 0x0, 0xc}, 0x20) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000001600)) r2 = socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000980)=@ethtool_coalesce={0xe, 0x2, 0x5a6, 0x400, 0x5, 0x10001, 0x2, 0x0, 0x8, 0x38, 0x1ff, 0x5, 0xfffffffd, 0x8, 0x2, 0xb, 0x81, 0x4, 0xfffff20f, 0x1, 0x3, 0x73, 0x9}}) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x14, 0x19, 0x1, 0x0, 0x0, {0x1c, 0xd601, 0x9}}, 0x14}}, 0x0) 3m27.072122543s ago: executing program 3 (id=6209): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x2, 0xb}, {0xe, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8844) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000020200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 3m26.933631216s ago: executing program 3 (id=6212): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000001c0)={0x1f, 0x3, 0x6}, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="e0000000100001002dbd7000fddbdf257874732874776f6669732829"], 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x80) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) unshare(0xe040400) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = socket(0x2b, 0x1, 0x0) listen(r8, 0x0) ppoll(&(0x7f0000000280)=[{r8, 0xa0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000080)=0x6f89c659e9b3087f) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r10, 0x100, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40008c0}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010028bd7000fbdbdf254f00000008000300", @ANYRES32=r9, @ANYBLOB='@\x00z'], 0x5c}, 0x1, 0x0, 0x0, 0x4010000}, 0x4000000) 3m25.748228748s ago: executing program 3 (id=6217): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x20) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0xc080) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x35}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x20) (async) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0xc080) (async) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x35}, 0x14) (async) 3m25.671842703s ago: executing program 3 (id=6219): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES64=0xffffffffffffffff, @ANYRES16=r0], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYRES64, @ANYRES8=0x0, @ANYRESHEX=r1], 0x0, 0xf, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000ff00000001000000fdfffffffd85000000a0000000850000001100000095000000000001"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000140)="9b7d589f668f4113c16a6297df66", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000054005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x20008045}, 0x2400409c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x240000d2) bind$llc(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000001800), &(0x7f0000001840)=0x4) r5 = socket$kcm(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x50, 0x0, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r7 = socket(0x15, 0x5, 0xffff7ea9) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r7, 0x200000000114, 0x2716, &(0x7f0000000400)=""/1, &(0x7f0000000000)=0x1) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) socket(0x40000000015, 0x5, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="34da3f00e002000000bbb50ce39f99e15b000030d301094f76f4680466242fec8b051766637a8b06fe2067bdaf04006bce9db9c0840ea9e7a2be8c1deed0a64bdecb3bb9d9765a88f212faa74f9979b1b194f0e8a84826e38e7a3fe9be5f42c09ed3c9e91e9257f557989eb81cf981600af5d873976488d877b71619d77288ab32895626dbbd90bafbfe624b2b30e1be872d9b937ba0f936ce4e63e7f29668e9e4515c049b0900154330de19a04d435858afc689a44b844fd5081e06b902e5199f785db748c539cc5b78c5d2443c145ac58645a6cc7836e3fbe7a9ec3b5912a744538d319240df64423aad4adf94507708e1a855c7f89555e5470000000000000000000000000000d31552f1ff4ab3f898aaf9138774d5c17fe5e74bef455999f78ee7a6653e4391c63db0209a30595a20339e156c552cea10c86ddb44bbff", @ANYRES16=r8, @ANYBLOB="04002bbd7000fedbdf250200000005000400020000000900010073797a32000000000900010073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x400c040}, 0x8000) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 3m10.592942022s ago: executing program 33 (id=6219): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES64=0xffffffffffffffff, @ANYRES16=r0], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYRES64, @ANYRES8=0x0, @ANYRESHEX=r1], 0x0, 0xf, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000ff00000001000000fdfffffffd85000000a0000000850000001100000095000000000001"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000140)="9b7d589f668f4113c16a6297df66", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000054005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x20008045}, 0x2400409c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x240000d2) bind$llc(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000001800), &(0x7f0000001840)=0x4) r5 = socket$kcm(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x50, 0x0, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r7 = socket(0x15, 0x5, 0xffff7ea9) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r7, 0x200000000114, 0x2716, &(0x7f0000000400)=""/1, &(0x7f0000000000)=0x1) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) socket(0x40000000015, 0x5, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES16=r8, @ANYBLOB="04002bbd7000fedbdf250200000005000400020000000900010073797a32000000000900010073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x400c040}, 0x8000) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m41.767101668s ago: executing program 0 (id=6564): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x400000, @private1}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) (async) shutdown(r1, 0x1) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x8, 0x8, 0x6bb}, &(0x7f0000000180)=0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) (async) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) (async) recvfrom(r2, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 2m41.475927461s ago: executing program 0 (id=6568): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000480)={r1, &(0x7f0000000300)='disconnect aa:aa:aa:aa:aa:10 1', 0x0, &(0x7f0000000380)={@align=0x7ff, {0x7, 0x200, 0x1d0, 0x6}}, 0xfff, &(0x7f00000003c0), &(0x7f0000000440)=0x5ac2}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001ec0)={{r0, &(0x7f0000000500)='\x00', 0x80082, &(0x7f0000000540)={@align=0x7, {0x7, 0x8, 0xe, 0x36a}}, 0xa47, &(0x7f0000000580)={@_ha_fsid}, &(0x7f00000005c0)=0x2}, 0xa, &(0x7f0000001d80)=[{0x2, 0x3, &(0x7f0000000600)='disconnect aa:aa:aa:aa:aa:10 1', &(0x7f0000000640)="baba29cd3563b2ae68e9340e04e6ffd39285cc70c1170841f44f6325b92237b00131bd2ea5808767410c30", 0x2b, 0x10}, {0x2, 0x2b7f, &(0x7f0000000680)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', &(0x7f00000006c0)="06c8b76734c6ae754dc0e200e788c895601e8744eda3246b55b9ae33cbf1a0de74a67ec7eb107a7c0574532668f9d6f351822504ec1b45e64246c8ac6dc7a0e170ea279f55421224b9fd3799d1571e825b0796d95927a37ec34896b72955c8b8d28a4ac891ba401e59ae7b8b74bdfd92c362f23a8a23021cfe82", 0x7a, 0x1a}, {0x1, 0x8001, &(0x7f0000000740)='+\x00', &(0x7f00000021c0)="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", 0xfd, 0x12}, {0x1, 0x9, &(0x7f0000000840)='\x00', &(0x7f0000000880)="34c26fa3cf9ea553e3073e0347ec7e15a87c7171dbbce9df57e4c0f44ab2cd09b877874a2e2a8c5d02ca1144ed280356ca64a8222ac5835dd2086d77af61b2a3a08cd61fd239b84da627818f81c76b5b0448ffd77fc108e154736e02ad0cb61149abd1b4c1913c72f964cf9fe1d11e90cbe8c7a6ce5a817eada4c3faaefb2c41a1ad4e14fbee143f57a585fa", 0x8c, 0x20}, {0x2, 0x10, &(0x7f0000000940)='@\x00', &(0x7f0000000980)="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", 0xfb}, {0x3, 0x9, &(0x7f0000000a80)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', &(0x7f0000000ac0)="17833c95b00fc5589ab67d8d9a1d1493fd49aa339399e095b094fb6ea4b5ae62bef427bcf11f7f03471b2230988da37e726d3f63402810dd1ab50ebb8ef071130e9c6317aab7ee8444e68c5af2dacbb7e100e928d90f42a8db507eb1dae377db27319a67361a0c96ad3da2c86e6c170acc20e0", 0x73, 0x8}, {0x3, 0xffffff7f, &(0x7f0000000b40)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', &(0x7f0000000b80)="7657c84ca1105a19a7e952621ba67b8c288d405a83bb2ad13c9a28cdf62d", 0x1e, 0x8}, {0x1, 0x7, &(0x7f0000000bc0)='^:\\\x00', &(0x7f0000000c00)="ebe974a648687f62944993d17669ae7f4871fa29cbf6ea24d8643b14e6e14e4b32bcdb483beba7dee9265302a23a4d78ef0910977866bda09c06b293e183a562faeb0f06ca2f82b368ba48268c3485612f0d4a71a001cb931b4d2d7bef3223c83172da61f462145e39be6952b1daa360a276d1ec0d94429fc1a82a11f4e26d892fb7517c9bfe20e7a0aa1045f61926269913", 0x92, 0x20}, {0x1, 0x6, &(0x7f0000000cc0)='disconnect aa:aa:aa:aa:aa:10 1', &(0x7f0000000d00)="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", 0x1000}, {0x1, 0x65b, &(0x7f0000001d00)='disconnect aa:aa:aa:aa:aa:10 1', &(0x7f0000001d40)="c156b57be3e257", 0x7, 0x8}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000e000000400000000300000041000000", @ANYRES32, @ANYBLOB="000000000000000000000000fbc0000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r5, &(0x7f0000000300), 0x0}, 0x20) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000800000001c10000000000000a500ffffff1dd6e695"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b040000000000000000020000400900020073797a32000000000900010073797a30000000005000048018000180080001006f7366000c000280080001400000000424000180090001006d65746100000000140002800800024000000013080003"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c"], 0x80}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r9}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000280), 0x4, r9}, 0x38) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x3, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xfffff801}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r11}, &(0x7f00000002c0), &(0x7f0000000440)=r10}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r11, &(0x7f0000000100), 0x0}, 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f00000020c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000fb7b59214785abb4bfcb434b93d558789e36af6f68c25cd95aae64b7747d6fe216eda5cdf6d878af5e1cf46e6adef3981ce198696c9ef85d3281c3bdc08f0c0c", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001f40)={0x0, 0x0, 0x18}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002000)=@bpf_ext={0x1c, 0x6, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @exit], &(0x7f0000000180)='GPL\x00', 0x1, 0xdc, &(0x7f00000001c0)=""/220, 0x41000, 0x8, '\x00', r2, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x2, 0x2, 0x0, 0x3}, 0x10, 0x250ab, r4, 0x2, &(0x7f0000001f80)=[r5, r6, r7, r9, r11, 0xffffffffffffffff, r12, r13], &(0x7f0000001fc0)=[{0x4, 0x3, 0xd, 0x8}, {0x4, 0x4, 0x4, 0x5}], 0x10, 0x4}, 0x94) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 2m41.078340864s ago: executing program 0 (id=6576): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f00000002c0)={r1, &(0x7f0000000080)='\x00', 0x30480, &(0x7f00000000c0)={@align=0x6, {0x3, 0x1, 0x4, 0x3}}, 0x3f, &(0x7f0000000100), &(0x7f0000000280)=0xf}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0xd8) sendmmsg$unix(r1, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)='}', 0x1}], 0x1, 0x0, 0x0, 0x4004000}}], 0x1, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) sendmmsg(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x42}, {&(0x7f0000000140)="a9807181b6f375eecdf87aa9662fbf12b9c681ba88559317b626dfbbc1c7278871ce5407e3f23067653b9bbf7f50882c73eb851ad7788c1c943706e7dbf0c910636080d8a319924ac86191501d45ad888db0fb24485bd7d1975518fd98b173255f1ad28fc493572f1fc620b864659c9afe81ea8e0a012260ee40ec684a3a78024865be0f3583cd031051960e640b5a7045386a3c2318d8204fc56a0cf46a9cc4e10f1439489bb16392912a3a86e781233e37837c74c4cad22578d400040000190bc774015d95f360f9569f6b4c4158e6657a689d6dee9dcac052e4e0aaf7c73edbccc02981c2247f3dec8834dc367492dd94fb54e627c577de6bb2bee912b50598e6ae899781d77d6aa4", 0x10a}], 0x2}}], 0x1, 0x0) 2m40.932310089s ago: executing program 0 (id=6578): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r0}, 0x38) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket(0x11, 0x800000003, 0x0) bind$packet(r4, &(0x7f0000000d00)={0x11, 0x0, r3, 0x1, 0x7f, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r5 = socket$packet(0x11, 0x3, 0x300) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) (async) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'dvmrp0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3000018000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 2m40.618172059s ago: executing program 0 (id=6582): r0 = socket(0x10, 0x80002, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000003b80)="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", 0x621}], 0x4}}], 0x1, 0x4000001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x19, &(0x7f0000000000)=0x2, 0x4) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2m40.167778666s ago: executing program 0 (id=6586): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80005, 0x25dfdc00, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x8840) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x30000, 0x0) 2m24.908320663s ago: executing program 34 (id=6586): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80005, 0x25dfdc00, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x8840) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x30000, 0x0) 1m47.790478499s ago: executing program 1 (id=6967): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, &(0x7f0000000000)) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a6ddf0000000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d080006"], 0xe8}}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x6, 0x0) write(r5, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) getsockopt(r4, 0x111, 0x2, 0x0, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001", 0x30}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e000000806"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a000044000000eb00000000141001"], 0x3c}, 0x1, 0x0, 0x0, 0x800400d}, 0x8001) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="828ba5028ebb45ff6a919a477f2d338a18f04acb43f027248e7bee6571b638f40d03a41800869ef66681023cdbe6e7733ac6388ecc2ae7816c231dd2648fa9ba68c78700d7fce5d0efee3ae3e2b01897f6fa75614b7ec67b1751de301168a8fb1ab731cb3ea89985b0bc0eab35d1dbca665ea901893d80d9ce82a404c94f1915e271ff90f2bbfff4467a913302ad9c9703638da0ae20c3766603be9247b357f0d6b2eecccc9951d3155fcf3f71f0e4a15ad9bd86a201c91f800f39017b4b38d9405237eaec9f2f"], 0x44}, 0x1, 0x0, 0x0, 0x40080b1}, 0x80010) r9 = socket$kcm(0x2, 0xa, 0x2) r10 = socket$kcm(0x21, 0x2, 0x2) ioctl$XFS_IOC_DIOINFO(r10, 0x800c581e, &(0x7f00000000c0)) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180093000000000001000000"], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x890c, &(0x7f0000000000)={'veth0_vlan\x00', @random="0200ff7fffff"}) 1m46.783833851s ago: executing program 1 (id=6974): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x6, 0x4) sendmsg$802154_raw(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)="cc0e9c", 0x3}, 0x1, 0x0, 0x0, 0x4008074}, 0x8000) 1m46.600392231s ago: executing program 1 (id=6976): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xff, 0x9}) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r0, 0x100000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) 1m46.407746355s ago: executing program 1 (id=6978): r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) r5 = gettid() sendmsg$unix(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000000dc0)="6e241ab99619", 0x6}], 0x1, &(0x7f00000007c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}], 0x20, 0x20008000}, 0x4000080) sendmsg$inet(r1, &(0x7f00000028c0)={&(0x7f0000000900)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000002800)=[{&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000027c0)="92ce96624a88d167fa8aa551f4d91662ee090e940580778f218d3c0540", 0x1d}], 0x2, &(0x7f0000002840)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0xf0, 0x0, 0x1, [0xa92b, 0x1, 0xd60, 0x400]}, @timestamp_addr={0x44, 0x1c, 0x34, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x36}, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000}]}, @ssrr={0x89, 0x1b, 0xb2, [@loopback, @dev={0xac, 0x14, 0x14, 0x29}, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}]}}}], 0x78}, 0x40000c1) bind$alg(r0, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) r6 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000780)=0x1c, 0x80000) setsockopt$inet6_tcp_int(r6, 0x6, 0x22, &(0x7f0000000800)=0x1b5e, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x54099000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r0, 0x0, 0x0, 0x800) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@common=@ipv6header={{0x28}, {0x1a, 0x1, 0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xff], @ipv6=@remote, [0x0, 0xff000000, 0xff000000, 0xffffff00], 0x4d3, 0x34ff, 0x1, 0x1, 0x15, 0x10}, {@ipv4=@multicast1, [0x0, 0xffffffff, 0xffffffff, 0xff], @ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff], 0x4d6, 0x3503, 0x87, 0x0, 0x2, 0x10}, {@ipv4=@empty, [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x11}, [0xff000000, 0x0, 0xff, 0xff000000], 0x4d6, 0x3500, 0x3a, 0x0, 0x0, 0x4}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0x0, 0xffffff00], @ipv6=@mcast1, [0xff000000, 0xffffffff, 0xff000000, 0xffffffff], 0x4d3, 0x0, 0x2f, 0x0, 0x4, 0x1a}], 0x1, 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x458) sendmsg$OSF_MSG_ADD(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x175c}, 0x1, 0x0, 0x0, 0x4044084}, 0x1dc8b08251aa3334) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x14, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r7) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x8e, "5d97ddb246d67b6eb10e740614c8660a7514d8a1b440a7d794206cbef96d4d116d7c90344e7eba6f355f40a6df8f36cb01282c10747d449343d79ec43b8cd13e7203dd15178981be498cea378c23c100ef3b3e3fc0f8cf19dd0e209377f3da02fcfd9a2abfd99ea195da0968a05c80124fce0a71639dc9c1fd39e71ae8080cc3dd68e96e6ea60dcf43fd9df2a9c7"}, &(0x7f0000000100)=0x96) recvmsg$can_raw(r7, &(0x7f0000000600)={&(0x7f0000000340)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/166, 0xa6}, {&(0x7f0000000480)=""/164, 0xa4}], 0x2, &(0x7f0000000580)=""/88, 0x58}, 0x40000001) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000140)={r10, 0x7a, "5124a38ca0a32355e7f37813ba4d6dafb9c5f757ac5dce1c4c15f1b7648a42804784654697ff6d14d573dd2187109be7d2203fb44ab21d493b0d14c1051d1e1b76b070e6a17a720d2a39919de5ad155ad451fbbf650e605c8fb1def6320d62f76cced01ba06072173c3188208d23f4e999a00c50f1276c1b3458"}, &(0x7f0000000200)=0x82) 1m46.144074926s ago: executing program 1 (id=6981): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x4, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c40)=ANY=[], 0x50}}, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000400)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x20043084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5}, {}, {0x1, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0xf382}]}, 0x48}}, 0x4000) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r13, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r13, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, 0x8001}, 0x28) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) r14 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r14, 0x800452d3, &(0x7f0000000200)) 1m44.851765399s ago: executing program 1 (id=6991): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@multicast1, @remote}, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000440)={0x0, 0xf, 0x4, 0x1}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000004f00)={'veth1_to_bridge\x00', &(0x7f0000004dc0)=@ethtool_eeprom={0xc, 0x5, 0x9d8d}}) ioctl$int_in(r1, 0x5421, &(0x7f0000000240)=0x1400) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000280)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x20) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000300)={r3, 0x6, "4385c7d6a315"}, &(0x7f0000000340)=0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fffffff3180100006400000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2e}, 0x94) 1m29.728335519s ago: executing program 35 (id=6991): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@multicast1, @remote}, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000440)={0x0, 0xf, 0x4, 0x1}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000004f00)={'veth1_to_bridge\x00', &(0x7f0000004dc0)=@ethtool_eeprom={0xc, 0x5, 0x9d8d}}) ioctl$int_in(r1, 0x5421, &(0x7f0000000240)=0x1400) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000280)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x20) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000300)={r3, 0x6, "4385c7d6a315"}, &(0x7f0000000340)=0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fffffff3180100006400000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2e}, 0x94) 9.356139777s ago: executing program 8 (id=7486): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001100), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="240003000000000000000300000000000000000000000000000000000000000000004e2324000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 8.775660264s ago: executing program 8 (id=7488): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0xfa83eb850bd66ef}, 0xc) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x401}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001801}, 0x4008840) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a01010100000000000000000000000000000003000000000a00000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000000) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 8.379693134s ago: executing program 8 (id=7493): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000008400000000000000ffff"], 0x18, 0x20000001}, 0x20008000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d103000008000340000000011400"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) accept4$inet(r0, 0x0, 0x0, 0x800) accept4$nfc_llcp(r0, 0x0, 0x0, 0x800) 7.156131268s ago: executing program 8 (id=7498): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockname$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000000080)=0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x1b, 0x5, 0x748, 0x0, 0xf0, 0xffffffff, 0xf0, 0x470, 0x678, 0x678, 0xffffffff, 0x678, 0x678, 0x5, &(0x7f00000000c0), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffffff, 0xffffff00, 0x0, 0xff000000], [0xff, 0xff, 0xffffff00, 0xffffff00], 'dvmrp1\x00', 'lo\x00', {0xdb20959efd05e273}, {0xff}, 0x14, 0x9, 0x7, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv4=@multicast1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @gre_key=0x9, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x17}, [0x0, 0xff000000, 0x0, 0xffffffff], [0x0, 0xff000000, 0x0, 0xffffffff], 'vcan0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3c, 0x80, 0x1, 0x10}, 0x0, 0x338, 0x380, 0x0, {}, [@common=@rt={{0x138}, {0x7, [0x1, 0x96], 0xb8fb, 0x20, 0x1, [@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x29}, @remote, @empty, @mcast1, @loopback, @local, @empty, @private2, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @local], 0xcc}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xffffffff, 0xffffff00, 0xffffffff], @ipv4=@local, [0xff, 0x0, 0xff, 0xffffffff], 0x4d5, 0x3506, 0x11, 0x1, 0x33, 0x11}, {@ipv4=@multicast1, [0x0, 0xff000000, 0xffffffff, 0xffffffff], @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], 0x4d4, 0x3506, 0x1d, 0x1, 0x18, 0x8}, {@ipv4=@rand_addr=0x64010101, [0xffffff00, 0xffffff00, 0xffffff00, 0xff], @ipv4=@multicast2, [0xff000000, 0xffffffff, 0xffffffff, 0xffffff00], 0x4d6, 0x0, 0x2c, 0x0, 0x5, 0xc}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffffff, 0xffffff00, 0xffffff00, 0xffffffff], @ipv6=@private2, [0x0, 0xffffff00, 0xff, 0xff000000], 0x4d5, 0x3505, 0x2c, 0x71d8221360354b1b, 0xa, 0x10}], 0x9, 0x1}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xb, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv6=@mcast2, @port=0x4e21, @port=0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x294, 0x3, 0x1, [0xc84, 0x1, 0xed40, 0x1, 0xfffa, 0x7f, 0x7, 0x1, 0x0, 0x9, 0x7, 0x8, 0xfffa, 0xd4, 0x1, 0x1], 0x6}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x7, @ipv4=@broadcast, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @port=0x4e20, @icmp_id=0x65}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7a8) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000900)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000980)="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", 0x1000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000019c0), r0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x58, r1, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x25}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xae}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8e}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x240480d1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001b40), r0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x7c, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3523a65c}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20040811}, 0x48005) (async) recvmmsg(r0, &(0x7f0000008680)=[{{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000001c80)=""/245, 0xf5}, {&(0x7f0000001d80)=""/186, 0xba}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/220, 0xdc}, {&(0x7f0000002f40)=""/100, 0x64}, {&(0x7f0000002fc0)=""/245, 0xf5}, {&(0x7f00000030c0)=""/5, 0x5}], 0x7, &(0x7f0000003180)=""/190, 0xbe}, 0xf}, {{0xfffffffffffffffe, 0x0, &(0x7f0000004340)=[{&(0x7f0000003240)=""/209, 0xd1}, {&(0x7f0000003340)=""/4096, 0x1000}], 0x2, &(0x7f0000004380)=""/152, 0x98}, 0xffff}, {{&(0x7f0000004440)=@l2tp, 0x80, &(0x7f00000059c0)=[{&(0x7f00000044c0)=""/4096, 0x1000}, {&(0x7f00000054c0)=""/163, 0xa3}, {&(0x7f0000005580)=""/41, 0x29}, {&(0x7f00000055c0)=""/231, 0xe7}, {&(0x7f00000056c0)=""/155, 0x9b}, {&(0x7f0000005780)=""/32, 0x20}, {&(0x7f00000057c0)=""/110, 0x6e}, {&(0x7f0000005840)=""/229, 0xe5}, {&(0x7f0000005940)=""/85, 0x55}], 0x9}, 0x2}, {{&(0x7f0000005a80)=@generic, 0x80, &(0x7f0000006000)=[{&(0x7f0000005b00)=""/9, 0x9}, {&(0x7f0000005b40)=""/199, 0xc7}, {&(0x7f0000005c40)=""/237, 0xed}, {&(0x7f0000005d40)=""/254, 0xfe}, {&(0x7f0000005e40)=""/136, 0x88}, {&(0x7f0000005f00)=""/1, 0x1}, {&(0x7f0000005f40)=""/144, 0x90}], 0x7, &(0x7f0000006080)=""/219, 0xdb}, 0x3}, {{&(0x7f0000006180)=@nfc, 0x80, &(0x7f00000085c0)=[{&(0x7f0000006200)=""/203, 0xcb}, {&(0x7f0000006300)=""/25, 0x19}, {&(0x7f0000006340)=""/200, 0xc8}, {&(0x7f0000006440)=""/254, 0xfe}, {&(0x7f0000006540)=""/4096, 0x1000}, {&(0x7f0000007540)=""/114, 0x72}, {&(0x7f00000075c0)=""/4096, 0x1000}], 0x7, &(0x7f0000008640)=""/33, 0x21}, 0x3}], 0x5, 0x140, &(0x7f00000087c0)={0x77359400}) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000008840)=@generic={&(0x7f0000008800)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000008a80)={r3, &(0x7f0000008880)="04ba42c844b6f76b29b84eb915c8fbc807b7cc93077d212fd27a827da2ea48c9ec2c62cf106d692dd0adc1db8d2ba8386d6f1ca115e994d7af1e8db91b99ff63838fa319fb0c3e34115a0f4211e026a9a39f4df03043ee525e5b4a26cf43a256c03b2c7160f0aff5e5322f720850c2175f870e0db45510ac88b01d70a2454e4236e897f7fb69a184667e7c099d9f279340eda098d9848a26b0049e3caacffc0ebfbde5d7212435d8327036fc0d1ec30d0500e792a1333ab867f3b29efb4fe882da72b7925cc1e8c7e51ed03b7726154dbeec55ef51719f124d683b4615c127e93d9fb016", &(0x7f0000008980)=""/193}, 0x20) (async, rerun: 64) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000008ac0)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f0000008bc0)=0xe8) (rerun: 64) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000008d40)={&(0x7f0000008c00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000008d00)={&(0x7f0000008c40)={0xac, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x28}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async, rerun: 32) r5 = socket(0x1, 0x800, 0x8) (async, rerun: 32) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000008d80), 0x111100, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000001, 0x2010, r6, 0x9f01c000) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r7, &(0x7f0000008ec0)={&(0x7f0000008dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000008e80)={&(0x7f0000008e00)={0x78, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x8004}, 0x41) (async, rerun: 64) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000008f40), r0) (rerun: 64) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000009000)={&(0x7f0000008f00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000008fc0)={&(0x7f0000008f80)={0x24, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xe}, @val={0x8}, @void}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004081}, 0x4000) (async) setsockopt(r0, 0x4, 0x3, &(0x7f0000009040)="9d3343e22342465e9d4207ffbd03e7ce4d6278bdd129add9dcb51ddf", 0x1c) (async, rerun: 64) recvmsg(r0, &(0x7f0000009300)={&(0x7f0000009080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000009200)=[{&(0x7f0000009100)=""/250, 0xfa}], 0x1, &(0x7f0000009240)=""/169, 0xa9}, 0x40) (rerun: 64) sendmsg$IPSET_CMD_GET_BYINDEX(r9, &(0x7f0000009400)={&(0x7f0000009340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000093c0)={&(0x7f0000009380)={0x1c, 0xf, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004010) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000009440)) (async, rerun: 64) bind$inet(r9, &(0x7f0000009480)={0x2, 0x4e22, @private=0xa010100}, 0x10) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000009540)={r3, 0x58, &(0x7f00000094c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000009600)={'ip6_vti0\x00', &(0x7f0000009580)={'syztnl2\x00', r10, 0x2f, 0x9, 0xaa, 0x0, 0x21, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x20, 0x7800, 0x26, 0xffff8001}}) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000009880)=@bpf_ext={0x1c, 0x15, &(0x7f0000009640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000009700)='GPL\x00', 0x0, 0x15, &(0x7f0000009740)=""/21, 0x40f00, 0x40, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000009780)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000097c0)={0x5, 0x1, 0x9, 0x2}, 0x10, 0x4f70, 0xffffffffffffffff, 0x4, &(0x7f0000009800)=[r3, r3, r3, r3, r3], &(0x7f0000009840)=[{0x2, 0x5, 0x10, 0xc}, {0x3, 0x1, 0x10, 0x7}, {0x4, 0x3, 0xd, 0x4}, {0x0, 0x1, 0x7, 0xb}], 0x10, 0xb}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000009d80)={@fallback=r5, r12, 0x0, 0x22}, 0x20) 4.321515177s ago: executing program 8 (id=7507): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) (async) r1 = socket(0x80000000000000a, 0x2, 0x0) (async) r2 = accept$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14) accept$packet(r2, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000340)='%-5lx \x00'}, 0x20) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r3}, 0x4) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e22, 0x1, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xfffffffc, @remote, 0x200000}}}, 0x108) close(r0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x40000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.074401243s ago: executing program 8 (id=7511): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x20000000, '\x00', 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x18, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040), 0xc) r5 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x40002e9, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r4, 0x891c, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000080)={r8, 0x6, 0x8, 0xeec}, 0x10) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x4c, r10, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc0}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'veth1_to_bridge\x00', 0x2000}) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x24, 0x9, 0x0, 0x4211}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.683533932s ago: executing program 4 (id=7514): sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0xa}, 0x28) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000040000000400000001"], 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f00000000c0)=@udp6=r1, 0x1}, 0x20) shutdown(r1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=@newtfilter={0x40, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x5, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = epoll_create1(0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000040)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0xfffffffe}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0xffff8c87, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r8, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = socket(0x10, 0x3, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYRESDEC=r5], 0x30}}, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x4924b68, 0x0) 3.384087597s ago: executing program 4 (id=7516): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='^!\v\x00', 0x14400, &(0x7f0000000040)={@align=0x5, {0x1, 0x0, 0x7, 0x1}}, 0x80000000, &(0x7f0000000080), &(0x7f00000000c0)=0xb27}) read$nci(r0, &(0x7f0000000140)=""/215, 0xd7) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x124, r1, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x81, 0x23}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xf4, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7fffffff}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7ff}}, {0xd8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xd3, 0x2, "62f736c437bb48603f79b180399de931fc9dc765213b4cddef8bbc18f2c9e0e063bdea162fc23f9e0531aaf063c2d288619a63c9a733c2aee84dc19f655227708ee18ab94d2136dac5e6136c1512c14b81cecc6f50f4f9e1a0f5237c42c4fdaa963214f2e4237a4c7c7580b9002f1baa2e34dae63c44f1de0d573d57766378eb959f1a72ee93b5f38aafb9ed78c5c9b837113e498e34893add4e24ddb75a4b0a8611b3542ce40ef0bc882b9bb81dae263fb969f5f584e9231b9a13a21d7b96e851e395face0e3eb7559d0907c847c2"}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x40}, 0x20000841) (async) socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r3) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r1, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000600)={0x0, 0x4}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000680)={r7, 0x6, 0x75, 0x8}, &(0x7f00000006c0)=0x10) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r4, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x49}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5e}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) (async) write$nci(r0, &(0x7f0000000800)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x0, 0x3, 0x8, 0x0, {0x0, 0x1}}, 0x5) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x54}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x40024) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000940)='nv', 0x2) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), r6) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000b80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a00)={0x134, r8, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x9, @remote, 0x1}}}}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffff}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x801}, 0x4002080) (async) unshare(0x56020100) (async) sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x94, r1, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0xd}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x94}, 0x1, 0x0, 0x0, 0x81}, 0x810) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f0000000d40)={0x8, 'veth1_virt_wifi\x00', {'bond_slave_1\x00'}, 0x200}) (async) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x28, r4, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x34}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x44) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x9, '\x00', 0x0, r0, 0x1, 0x0, 0x1}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000f40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000f80)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001040)={'erspan0\x00', &(0x7f0000000fc0)={'syztnl2\x00', 0x0, 0x10, 0x8, 0x7fffffff, 0x10000, {{0x18, 0x4, 0x3, 0x5, 0x60, 0x67, 0x0, 0x6, 0x2d, 0x0, @loopback, @local, {[@generic={0x44, 0x9, "878d88c9bc942a"}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x3c, 0xc8, 0x1, 0x8, [{@broadcast, 0xa7e6}, {@multicast2, 0x3}, {@multicast2, 0x3}, {@private=0xa010100, 0x7}, {@broadcast, 0x7}, {@remote, 0x81}, {@multicast1, 0x13540000}]}]}}}}}) (async) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000001080)={@dev, @empty, 0x0}, &(0x7f00000010c0)=0xc) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000002740)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002700)={&(0x7f0000001d00)={0x9e8, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r9}, {0x224, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x9, 0x7f, 0x7, 0x6}, {0xf800, 0x7, 0x7f, 0x2}, {0x2f7, 0x54, 0x8, 0x7fff}, {0x2, 0x5, 0x1, 0x81}, {0x7, 0xa7, 0x7, 0x1000}, {0x31c, 0xf, 0x9a, 0x8000}, {0x5, 0x8, 0xa9, 0x1cf9}, {0x7963, 0x2, 0xd, 0xe}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff7db0}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r12}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x4, 0x4, 0x89, 0x80000001}, {0x8, 0x3, 0x9, 0x4}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9c6d}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xdffe}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1ad}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4800000}}}]}}]}, 0x9e8}, 0x1, 0x0, 0x0, 0x80}, 0x24040800) 3.217985506s ago: executing program 4 (id=7518): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@TCA_STAB={0x24}, @qdisc_kind_options=@q_drr={0x8}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x6}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0xff}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0xfdc}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x4, 0x0, 0x0, 0x0, 0x3, 0x30018}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0) poll(&(0x7f0000000180)=[{r4, 0x84}], 0x1, 0x9) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 3.036484778s ago: executing program 4 (id=7521): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000040000000c000c8006000200d43f00000600030001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000180)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x1, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@ra={0x94, 0x4}]}}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x1a, 0x0, @local, @remote}}}}, 0x42) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000041cdfc78d836f49b470620f8410b92aa2e65189c35f55aee05f8d2bf8ad53bed48215c02c880955a4b80a05", @ANYRES16=r8, @ANYBLOB="05002cbd7000fbdbdf252c0000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r9, 0x1, 0x300, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r7, @ANYBLOB="0800020096a68e15670b"], 0x20}}, 0x40000c0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x440b0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2.912021167s ago: executing program 6 (id=7523): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000000000000000300ab00000085000000870000009500000000000000"], &(0x7f0000000800)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.743530029s ago: executing program 6 (id=7525): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x20010, r0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = socket$packet(0x11, 0x3, 0x300) (async) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES8=r4], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendto$packet(r3, &(0x7f0000000600)="05d936277c6f542200", 0x9, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x1b, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7613, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3ff}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0xfed, &(0x7f0000000780)=""/4077, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 2.627603889s ago: executing program 5 (id=7526): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac010000170001000000000000000000ffffffff0000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000000000000000000000000000000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB], 0x1ac}, 0x1, 0x0, 0x0, 0x4880}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @mcast1, 0x4}, 0x1c) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000680)) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000000500)={&(0x7f0000000400)=[{&(0x7f0000000080)="67d54d09e33ff501287d4c508875fc9648e2e0fc67ae7d", 0x17}, {&(0x7f00000000c0)="00843d048f369937", 0x8}, {&(0x7f0000000100)="85551f710cfc3f25cfc824f37fa0c2423cbb2812c510f98fc56534847894b1e3a9bee835d615304fd558a5215f11b1acbae2f53816a01aaf1a2a9a7030ed6b0216bcf3be899f3ad261825f2cc19522f1db5fb6cff3f1151106841f160a18340872fa0c773234b6f85c0fe22175b1d48903a3bbcbce9b7a1846b3228a0edda83233a84f40000a8d3b63bac080d7774b0e54d9950f3a57a7fc9d6bef663aa6cd655621615a658c1a8bd4a81304344a51f7d1cbdddc0402612e0668b4610f1c24f9979105f3ec78e0624cabe4138479b800fca2133c5b93c0b1a5eb0d966ea13abb1622df8be720cdd971e517", 0xeb}, {&(0x7f0000000200)="b53916f8052e92b6b54480f8067f7b17956eb42204b4f683309cace9b6b30ea3804d938e923f3642d619b1cc157409bb60c55982ec65b9acf9cade18e32ee40d008a2cedf819e3637ca849a876a8011a3d7f8c588a15a1808dc1f60ea66078050e293f5986143a0d9adbebb6a56f2b5d8b0de5358105e54e2ed1907b8466bc4a80a1d53f0ea6802e12f870c214a98e1424cb4bb77205aedb6427612e7e5d", 0x9e}, {&(0x7f00000002c0)="3d1ff1b9e661981e9773b5a263679d63d7eaa6e2e3e0f65fe56ed4bf615b59b5f527f111b27bf422fac94f05fdb5144bd8545776e530f51ba91557ee756092587e71f0f8b5e18ed85f1036eb7adfb2d1d6d9ab41f814697bd3ad57dae6e65ad8aa0823a93d5af9575b9a556872ebe6ebec9c9375cfd842247353b2195593b1a7c013f0353a47abd46e8f5322", 0x8c}, {&(0x7f0000000380)="ca2724b0c0a4cfe0133611ed8f65ec11230302b2a93a48a2585f13f12b88720fab9896f595590f53a610c45b2de3bd4cfd5a2d9b4c55c63a0ad63ece6b5768b26819b31fab467b95abb363560848c3ec0391a35c64f1389eac420ddeda9517690463960d55aec030483c92e0f20115902ae1be0940124080", 0x78}], 0x6, 0xfffffffffffffc00, 0x0, 0x4, 0x5, 0x4af1, 0x5, 0xff}) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xffffffffffffff87) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) unshare(0x6020400) r4 = gettid() syz_open_procfs$namespace(r4, &(0x7f0000000000)='ns/uts\x00') unshare(0x2c060000) unshare(0x2a060400) socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0xf5, &(0x7f0000000480)=""/6, &(0x7f0000000580)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4011, @empty}, 0x10, 0x0}, 0x30006041) r7 = socket(0x3, 0x800, 0x2) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) 2.525597817s ago: executing program 6 (id=7527): socket$kcm(0x2c, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0xff7783f2f7932ead, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0xa, 0x3, 0xff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000380)={0x6, 0x2000027, 0x20000000, 0x1}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r5], 0x20}, 0x1, 0x0, 0x0, 0x200c0881}, 0x40800) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f00000002c0)={@mcast1, 0x0}, &(0x7f0000000300)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000500)={0x0, 0x78, &(0x7f0000000480)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x40}}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in6={0xa, 0x4e24, 0x4, @loopback, 0xc}, @in6={0xa, 0x4e24, 0x5, @local, 0x10}]}, &(0x7f0000000540)=0x10) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@bridge_newneigh={0xa4, 0x1c, 0x400, 0x70bd28, 0x25dfdbff, {0xa, 0x0, 0x0, r9, 0x0, 0x0, 0x3}, [@NDA_MASTER={0x8, 0x9, 0x1}, @NDA_IFINDEX={0x8}, @NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x64010100}, @NDA_NH_ID={0x8, 0xd, 0x8}, @NDA_DST_IPV6={0x14, 0x1, @mcast2}, @NDA_IFINDEX={0x8, 0x8, r12}, @NDA_PORT={0x6, 0x6, 0x4e22}, @NDA_PORT={0x6, 0x6, 0x4e20}, @NDA_VNI={0x8, 0x7, 0xdfa}, @NDA_DST_IPV6={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NDA_PROTOCOL={0x5, 0xc, 0x3}, @NDA_IFINDEX={0x8}, @NDA_FLAGS_EXT={0x8}, @NDA_PROBES={0x8, 0x4, 0x1}]}, 0xa4}}, 0x0) r13 = socket$xdp(0x2c, 0x3, 0x0) r14 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r14, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x93e000, 0x1000}, 0x20) close(r13) 2.266870833s ago: executing program 4 (id=7528): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x17, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe8000"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x30000010}) unshare(0x26020480) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) socket(0x10, 0x80002, 0x4) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8925, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6002000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e204e22e3d1988b98dd36a99e0f022c39a96f81bcd7267f0b5d3d2bd0726d95b3e696ff3c0847fea456c5d2502076469f0e398db4af53f5fa65d05d8edb1aabde21c34465679349dfb83d53fc77f474b2ec9875fad7482af742c1736ddc391979e3", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6026843500140601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES16, @ANYRES32=r1, @ANYBLOB="5002f3d9907800006cb5cfa63338965cd5d792dc668620ba14600e0afa827135ea6057218a565ce30b2a6ac20d5467324b89ec913f3965caecb969a391364db7c1a78504cb096cf1d29d46c8c15f3519d48e603ce3cdbd06320b9727a912435651a053c007a0f356a85fb723a83de736c4a607a5a06b784c069394faaad5f47b8c437abf7c7538e51aad3115b6b15930a2e8e484141a3c71a9e984df29185c9b37613a848016eda1aa3168eb9492ab0a0821ddb87a988020f0a7cfa7e65ed3a0344b2a9cd49f00000000000000000017cf4cddf43a0fc34c7c1a034f4741689b6c69651a87f2594394604258130408628f3877747bfae934bc7424945b5771f29be98228e94554bf4bce60bb9da61e3215d37345d91466a2f2a5901fd1c41b49378d1f320a77f37f502a3fbd11ac120ba3d3b4eb8e2bc658d7f0a95f11b332026e619ee2150681977d81ce0e0ae3cbcc7cd72c725ce61099da52c48bb3c9b917c419d07a9dc33e063579f9b6dec7e6b870bc17a3ff73554cdc6e88fcf9f242da35c098417bbd8292ac520b6d84f0bef7c042bb9dca77"], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r6, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x10, &(0x7f0000000080)=0x2, 0x4) 2.131881401s ago: executing program 5 (id=7529): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x15a8, 0xd0, 0x0, 0x12e0, 0x0, 0xd0, 0x14d8, 0x14d8, 0x14d8, 0x14d8, 0x14d8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x80}}}, {{@ipv6={@mcast1, @local, [0xffff00], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x1100, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x0, './cgroup.cpu/syz0\x00', 0x5, {0x31b}}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}}, @inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1608) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0x0, 0x1, 0x0, r4}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x8, 0x8, 0x8, 0x1022, r1, 0xc36, '\x00', r3, r5, 0x2, 0x5, 0x1, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000f6620170000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.527661903s ago: executing program 5 (id=7531): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e21}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x20014086) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/242, 0xf2}], 0x1, &(0x7f0000000000)=""/14, 0xe}, 0x40002010) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xffe0, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x6}, {{0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7fff, 0x7, 0xa}, {{0x2, 0x1}, {0x4, 0x1}}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x12, 0x100, 0x70bd2d, 0x25dfdbff, {0xa, 0x3, 0x6, 0x8a, {0x4e21, 0x4e20, [0x401, 0x8, 0x0, 0xc], [0x4, 0x4, 0xe], 0x0, [0x0, 0x3]}, 0x7ff, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x17, 0x1, "b116a12ef7efe371bdc9c63918b23432395596"}, @INET_DIAG_REQ_BYTECODE={0xf, 0x1, "81243321365ee7f78375f3"}]}, 0x74}, 0x1, 0x0, 0x0, 0x8040}, 0x20004040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r5, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38, 0x4004c}}], 0x1, 0x805) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000440)=r6) 1.256118685s ago: executing program 7 (id=7532): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) close(r0) socket(0x1e, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0), 0xb8) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x28) setsockopt$inet6_tcp_int(r1, 0x11a, 0x4, &(0x7f0000000040), 0x44) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x20000400) r3 = socket(0x15, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x6, @remote}], 0x1c) 1.255526185s ago: executing program 6 (id=7533): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000100)=0x7, 0x4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a80180004801400"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) 985.138723ms ago: executing program 7 (id=7534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x6c}, 0x1, 0x0, 0x0, 0x4028005}, 0x4044044) 778.606011ms ago: executing program 6 (id=7535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000000)={{0xf15, 0x6, 0x2, 0x8, 0xf37}, [{0x0, 0x7, 0x4, 0x81}]}) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000080), &(0x7f00000000c0)=0x10) getsockname(r0, &(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000180)=0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c844}, 0x40408d0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000300), &(0x7f0000000340)=0x4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x80, 0x8000, 0x3, 0xe, {{0x17, 0x4, 0x1, 0x4, 0x5c, 0x68, 0x0, 0x2, 0x2f, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x26}, {[@cipso={0x86, 0x20, 0x2, [{0x7, 0x7, "f4e5ee3b68"}, {0x5, 0xf, "fbb3b866a8ba4bfc5b37703943"}, {0x5, 0x4, "8379"}]}, @rr={0x7, 0x27, 0x79, [@local, @loopback, @multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x1f}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'syztnl0\x00', r5, 0x4, 0xd, 0x3, 0x7, 0x75, @mcast1, @empty, 0x10, 0x8000, 0xfc, 0x7}}) r6 = accept$nfc_llcp(r4, &(0x7f0000000580), &(0x7f0000000600)=0x60) getsockopt(r6, 0xb, 0x7, &(0x7f0000000640)=""/16, &(0x7f0000000680)=0x10) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000006c0)={0x64a, 0x0, 0x0, 0x8, 0xfffffff9}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x880) ioctl$XFS_IOC_FSGEOMETRY(r1, 0x8100587e, &(0x7f0000000800)) r7 = accept$inet6(r4, &(0x7f0000000940)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000980)=0x1c) splice(r3, &(0x7f0000000900)=0xfffffffffffffffe, r7, &(0x7f00000009c0)=0x7, 0x2, 0x5) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, 0x0, 0xa22, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x26040800) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r1) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r8, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x44, r9, 0x100, 0x70bd27, 0xfff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40480) r10 = socket$netlink(0x10, 0x3, 0x1) ioctl$XFS_IOC_EXCHANGE_RANGE(r6, 0x40285881, &(0x7f0000000c80)={r10, 0x0, 0xffffffffffffffff, 0x2, 0x4, 0xf}) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000cc0)={0x0, 0x3c, "4d894e2b7ad8c3d6ac55ae3fe13d9295271f084b5d845d0d936d2c7baa8cc2a0f36da6227997aa3b2a7bade3cc987e06364041c43c44414229ec6064"}, &(0x7f0000000d40)=0x44) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000d80)={r11, 0x3}, 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000dc0)='pids.current\x00', 0x0, 0x0) 720.562612ms ago: executing program 5 (id=7536): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'veth0_virt_wifi\x00', 0x1}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x2, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x15}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000070000000000000a3c000000120a090000000000000000000200000009000200000000010000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) close(r0) 719.774826ms ago: executing program 4 (id=7537): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018090000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007ea000000000000056080000000000208500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e22, @local}, 0x83, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='syzkaller0\x00', 0x9, 0x9, 0x4}) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x475, 0x4, 0x3}, 0x1c) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x4003, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x20) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000700)=""/4080, 0xff0}], 0x1}, 0x20) r8 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmsg$OSF_MSG_ADD(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x175c}, 0x1, 0x0, 0x0, 0x4044084}, 0x1dc8b08251aa3334) 679.563481ms ago: executing program 7 (id=7538): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, @empty, @empty, 0x0, 0x1, 0xfffffffe, 0x1}}) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x64010102}}, 0x376e, 0x5, 0x100, 0x6, 0x10, 0x5, 0x7}, 0x83) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4db, @local, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 225.213828ms ago: executing program 7 (id=7539): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0x871a15abc695fa3d, 0x0, 0x80000, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x10001, 0x3, 0x8, 0x1, 0x99ad}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000e40), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) getsockopt$packet_int(r3, 0x107, 0x11, &(0x7f0000000140), &(0x7f0000000540)=0x4) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6de9608e9ceab21f}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x6de5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4cc5db9e4f0a0fdb00000000000000000a0020050900030073f97a3000000000797a310000000014007f5008000240e7b140bb08000140000000030a0700000000000000b7bf00140000001100010000000000d493988b4ff7e55e1bed45a48a237f191158c09fbd00b706c4dcac099f4979f0ace082f2f5b0347d6e3780423c2919a75fa46d86ada9c62b7a1bc72ab43ca204f6f9b74041660ce33440eb3755fc9d9edb81bea7f4ccfebe8883578be97bfe26dc6dffb78fcd26"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r8 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r8, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x87, @dev={0xfe, 0x80, '\x00', 0x12}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="671723d7c6012c", 0x7}, {&(0x7f00000003c0)="9e91d91a92dc7c8fff658bb539e08d97fa631f943ee2ffb332c99223a7dfe52c1f3c218206", 0x25}], 0x2}, 0x20008b88) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x56401, 0xfffffbfc, 0x8, 0x3, 0x3}, 0x1c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0d0300000000000000001300000024000980080002"], 0x38}}, 0x4) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)={0x1a8, r9, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd7d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xec}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7026}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf9d8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa3}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x162}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'syz_tun\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf62a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0xc010}, 0x81) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6abff1b3c929783}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x124, r9, 0x0, 0x70bd2a, 0x6, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @local, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @mcast2, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x277}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x96}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x804}, 0x4000804) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)={0x1c, r2, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 223.76377ms ago: executing program 5 (id=7540): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000004ef033632812116ebc6abc1aa748c4ae00006110800000000000fd53950000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000540)="00000000000000008a7e84d67aa8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r5, 0xc7, 0x1}, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000500000000000e1ff95000000000000002ba76bb33123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee04000000670d25010000020000040000009fc404000000c788b277beee11bf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d04683712a0b09edc9e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca311f5b87e1ca8433a8acd715f5888b2007f0000000000000000010000000000fb00010000000000414027efc84293af6a22000000005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdc2ba9d580609e31c30891f7e5ff7fd6fce424c2200af6c3784a1975fa657de38a3a32a4fd67ce446ac5431d07db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bf2b5543ffc1669557b3819d8c396d2c2361629d1022f722ec23812770d72cd0010000007889b8c7044f563a1f68d4eff895fdbc463f747c08f40105869035000000000000000000000000000000000000000000000000080000003ddf4aa4b1c8baa0ae6feb6737c275dc2740f742b5425f1d581961471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f1538ee25a365ccf4a9b604e88e12ff25184d4e3c6f7f623559435b26b50fb7113000000f0bc440550ee91302f5a000000000000000000000000006d0000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7af05c648978d9980ba49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec2c3f4523110c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da093dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32881dfd15dc84e79d326337e21e041654f06bd7f000000000000000000000000000000282ffe0000000009350cfa3ab109ab4a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dd6b1bfe4104d2262f33f596d606ccce75a3c3d5f9ad94a7316b0c6ad14f1398a6b39b07121f636da418b34d48677cf8d2d99ee8ac50142bcdcc73dd73cc6ec46896ffb35ac82ac7a9309ea07396d2814dc630ad1a9913934849be25f7b81b59aaa9fa2e9d6ecafcfa1de81b2d3581ab1138537f98d2240b6c2bf40569da4e2bb77532ab9220347d78319617d17e14f7331486e86b2145980b95c88ae11b1c6b6ea6c2b2311d6ce6315cc451dd50ac746acd59d075b41f9a747894956b10453ccf6527d8f579256e9849bbaf6c7c84362209d3d2320101d57"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000002c0)=r7, 0x4) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe80000a000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) socket$kcm(0x11, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000000)={r10, 0x3, 0x6, @remote}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r10, {0xfffd, 0x10}, {0x1, 0xfff1}, {0x2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x3604c8a4}, 0x840) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xffffe000) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="06ac0f0001ac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)) write$cgroup_subtree(r12, &(0x7f0000000140)=ANY=[], 0x21) 222.019458ms ago: executing program 6 (id=7541): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50) setsockopt$sock_int(r5, 0x1, 0x2c, &(0x7f0000000080)=0x1, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf2500df00000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x40) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x40001) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r2) 221.775572ms ago: executing program 7 (id=7542): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1e26de3eeccc152b75d09e4cbc369929bc67003a00010024bd70f1f70379dac9dbdf250f000000"], 0x14}}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1e26de3eeccc152b75d09e4cbc369929bc67003a00010024bd70f1f70379dac9dbdf250f000000"], 0x14}}, 0x4000000) (async) 159.157198ms ago: executing program 5 (id=7543): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback={0xff00000000000000}, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0x6}, 0x9c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffdc4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x11, {{@in=@multicast1, @in=@broadcast, 0x4e21, 0xb, 0x1, 0x0, 0xa, 0x20, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x2, 0x9, 0x80}, 0x4000000}, [@tmpl={0x144, 0x5, [{{@in6=@private0, 0x0, 0x3c}, 0xa, @in=@rand_addr=0x64010101, 0x34ff, 0x3, 0x1, 0x0, 0xffffffff, 0x80000000, 0x6e}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@loopback, 0xfffffff9, 0x2, 0x3, 0x0, 0x7, 0x800, 0x2}, {{@in6=@loopback, 0x4d3, 0x3c}, 0x0, @in6=@empty, 0x0, 0x1, 0x1, 0x0, 0xc}, {{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3503, 0x0, 0x0, 0x4, 0x0, 0xabb}, {{@in=@multicast1, 0x4d4, 0x32}, 0xa, @in=@local, 0x4, 0x4, 0x1, 0x7, 0x0, 0x0, 0x400}]}]}, 0x1fc}}, 0x8044) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) connect$netlink(r2, &(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc) unshare(0x22020600) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c720000000100000000000003000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) 0s ago: executing program 7 (id=7544): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e00000027bd70000000000004000900a800000001d78771b90bd8a3b4914783c5432d69ca5b9538a900000003000600000000000200000000000001000000000000000002000100010000000000031600000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@getsa={0x34, 0x12, 0x1, 0x70bd2a, 0x25dfdbfd, {@in=@local, 0x4d3, 0x2, 0x3c}, [@mark={0xc, 0x15, {0x350759, 0x2}}]}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): 11777] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 948.941918][T11777] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 949.121269][T31930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.133677][T31930] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.153081][T31930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 949.243082][T31930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 949.255182][T31930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 949.285373][T31930] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 949.297606][T31930] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 949.310991][T31938] __nla_validate_parse: 2 callbacks suppressed [ 949.311013][T31938] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6270'. [ 949.374808][T31930] veth1_vlan: left promiscuous mode [ 949.388537][T31930] veth0_vlan: left promiscuous mode [ 949.396596][T31930] veth0_vlan: entered promiscuous mode [ 949.412319][T31930] veth1_vlan: entered promiscuous mode [ 949.461848][T31930] veth1_macvtap: left promiscuous mode [ 949.490483][T31930] veth0_macvtap: left promiscuous mode [ 949.497939][T28609] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 949.512844][T28609] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 949.549411][T31930] veth0_macvtap: entered promiscuous mode [ 949.642184][T31930] veth1_macvtap: entered promiscuous mode [ 949.675203][T31930] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 949.753935][T31930] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 949.816613][T31930] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 949.908689][T31930] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 949.968197][T31930] ip6erspan0: left allmulticast mode [ 949.988471][T31930] 8021q: adding VLAN 0 to HW filter on device bond1 [ 950.012499][T11771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.034776][T11771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.065155][T11782] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.072413][T11782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 950.080530][T27566] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 950.086466][T11782] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.095619][T27566] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 950.102077][T11782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 950.208801][T31937] syz_tun: left promiscuous mode [ 950.259443][T31937] xfrm0: left promiscuous mode [ 950.303820][T31937] 8021q: adding VLAN 0 to HW filter on device eth0 [ 950.315315][T31937] 8021q: adding VLAN 0 to HW filter on device eth1 [ 950.333501][T31937] 8021q: adding VLAN 0 to HW filter on device eth2 [ 950.346108][T31937] 8021q: adding VLAN 0 to HW filter on device eth3 [ 950.379360][T11771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.390963][T28605] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.528209][T31960] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6273'. [ 950.590897][T31963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6274'. [ 950.614378][T31963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6274'. [ 950.629798][T11771] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 950.646249][T11771] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 950.657370][T31965] netlink: 168 bytes leftover after parsing attributes in process `syz.5.6275'. [ 950.789085][T31967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6276'. [ 950.846167][T31967] vlan2: entered promiscuous mode [ 950.861657][T31967] gretap0: entered promiscuous mode [ 951.149515][T31986] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 951.181595][T31986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.208756][T28609] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 952.077155][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 952.422793][T32041] netlink: 'syz.5.6295': attribute type 14 has an invalid length. [ 952.536653][T32045] netlink: 'syz.4.6296': attribute type 1 has an invalid length. [ 952.557113][T32045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6296'. [ 952.684165][T32049] netlink: 'syz.5.6297': attribute type 1 has an invalid length. [ 952.698202][T32049] netlink: 'syz.5.6297': attribute type 1 has an invalid length. [ 953.040505][T32061] syzkaller0: entered promiscuous mode [ 953.060638][T32061] syzkaller0: entered allmulticast mode [ 953.164594][T32069] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6304'. [ 953.310753][T32074] tipc: Started in network mode [ 953.318708][T32074] tipc: Node identity 02d9b5564095, cluster identity 4711 [ 953.326158][T32074] tipc: Enabled bearer , priority 0 [ 953.341424][T32074] syzkaller0: entered promiscuous mode [ 953.348544][T32074] syzkaller0: entered allmulticast mode [ 953.403049][T32078] block nbd0: Unsupported socket: should be TCP or UNIX. [ 953.412682][T32074] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6305'. [ 953.431225][T32073] tipc: Resetting bearer [ 953.503130][T32073] tipc: Disabling bearer [ 953.564342][T32081] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6308'. [ 953.736606][T32087] bond9: ARP target 9.0.0.0 is already present [ 953.745963][T32087] bond9: option arp_ip_target: invalid value (9) [ 954.139252][T32087] bond9 (unregistering): Released all slaves [ 954.287193][T11782] net_ratelimit: 11 callbacks suppressed [ 954.287214][T11782] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 954.308012][T11782] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 954.422438][T32101] bond1: ARP target 9.0.0.0 is already present [ 954.429143][T32101] bond1: option arp_ip_target: invalid value (9) [ 954.443230][T32101] bond1 (unregistering): Released all slaves [ 954.644414][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 954.888962][T28605] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 954.904506][T28605] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 954.928739][T32120] block nbd0: Unsupported socket: should be TCP or UNIX. [ 955.058393][T32124] __nla_validate_parse: 3 callbacks suppressed [ 955.058415][T32124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6320'. [ 955.097322][ T29] audit: type=1804 audit(1780561073.793:30): pid=32124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6320" name="/newroot/87/cgroup.controllers" dev="tmpfs" ino=468 res=1 errno=0 [ 955.167010][ T29] audit: type=1800 audit(1780561073.793:31): pid=32124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6320" name="cgroup.controllers" dev="tmpfs" ino=468 res=0 errno=0 [ 955.449304][T11775] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 955.463798][T11775] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 955.623719][T32139] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6324'. [ 956.073405][T28605] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 956.088143][T28605] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 956.564158][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 956.607907][T11771] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 956.622580][T11771] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 957.207326][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 958.141603][T16168] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 958.179670][T16168] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 958.211767][T16168] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 958.249293][T16168] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 958.274274][T16168] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 959.245429][T22916] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 959.719329][T28604] net_ratelimit: 10 callbacks suppressed [ 959.719351][T28604] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 959.739648][T28604] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 960.261975][T27566] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 960.276359][T27566] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 960.512850][T27086] Bluetooth: hci4: command tx timeout [ 960.605463][T32149] syzkaller1: left promiscuous mode [ 960.611149][T32149] syzkaller1: left allmulticast mode [ 960.811538][T32177] block nbd0: Unsupported socket: should be TCP or UNIX. [ 960.844558][T32181] netlink: 'syz.5.6330': attribute type 1 has an invalid length. [ 960.856511][T28605] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 960.871377][T28605] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 960.975696][T32187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6334'. [ 961.066592][T32191] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 961.316671][T32203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 961.440845][T28609] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 961.455320][T28609] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 961.535822][T32162] lo speed is unknown, defaulting to 1000 [ 961.888009][T32211] xt_HMARK: spi-set and port-set can't be combined [ 961.927189][T32213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6340'. [ 962.004203][T28605] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 962.168756][T32162] lo speed is unknown, defaulting to 1000 [ 962.456448][T32225] block nbd0: Unsupported socket: should be TCP or UNIX. [ 962.557708][T27086] Bluetooth: hci4: command tx timeout [ 962.737259][T32233] netlink: 22 bytes leftover after parsing attributes in process `syz.5.6345'. [ 962.778544][T32232] Bluetooth: MGMT ver 1.23 [ 963.146698][T32162] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.154231][T32162] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.162123][T32162] bridge_slave_0: entered allmulticast mode [ 963.170743][T32162] bridge_slave_0: entered promiscuous mode [ 963.180256][T32162] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.187670][T32162] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.195914][T32162] bridge_slave_1: entered allmulticast mode [ 963.205717][T32162] bridge_slave_1: entered promiscuous mode [ 963.250118][T32162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.262954][T32162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.329763][T32162] team0: Port device team_slave_0 added [ 963.363075][T32162] team0: Port device team_slave_1 added [ 963.442166][T32256] netlink: 'syz.5.6350': attribute type 3 has an invalid length. [ 963.472775][T32256] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6350'. [ 963.611210][T32162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 963.655149][T32162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.710408][T32162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.724210][T32162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.732328][T32162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.763883][T32162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.963106][T32278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6354'. [ 963.976439][T32162] hsr_slave_0: entered promiscuous mode [ 963.993514][T32162] hsr_slave_1: entered promiscuous mode [ 964.005411][T32162] debugfs: 'hsr0' already exists in 'hsr' [ 964.018848][T32162] Cannot create hsr debugfs directory [ 964.042442][T32278] ipip0: entered promiscuous mode [ 964.553647][T32284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6357'. [ 964.576108][T32272] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6352'. [ 964.596607][T32284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6357'. [ 964.606292][T32284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6357'. [ 964.616352][T32284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6357'. [ 964.637569][T27086] Bluetooth: hci4: command tx timeout [ 965.102439][T32162] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 965.146972][T27566] net_ratelimit: 11 callbacks suppressed [ 965.146995][T27566] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 965.167474][T27566] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 965.233846][T32162] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 965.265447][T32162] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 965.304805][T32162] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 965.325604][T32162] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 965.429494][T32162] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 965.589438][T32162] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 965.623378][T32162] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 965.750111][T28609] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 965.765169][T28609] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 966.012974][T32162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 966.349012][T11782] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 966.363533][T11782] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 966.420359][T32162] 8021q: adding VLAN 0 to HW filter on device team0 [ 966.436024][T32334] __nla_validate_parse: 50 callbacks suppressed [ 966.436046][T32334] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6369'. [ 966.472859][T32334] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6369'. [ 966.488475][T32334] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6369'. [ 966.502588][T32334] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6369'. [ 966.521395][T32334] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6369'. [ 966.532134][T32334] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6369'. [ 966.545363][T32334] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6369'. [ 966.558677][T32334] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6369'. [ 966.570357][T32334] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6369'. [ 966.581263][T32334] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6369'. [ 966.721215][T27086] Bluetooth: hci4: command tx timeout [ 966.758445][T32334] ipip0: left promiscuous mode [ 966.795157][T11771] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.802441][T11771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 966.863109][T28606] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.870370][T28606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 966.917842][T11771] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 966.932370][T11771] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 967.298348][T32358] netlink: 'syz.4.6375': attribute type 39 has an invalid length. [ 967.342762][T32355] can: request_module (can-proto-3) failed. [ 967.563159][T28609] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 967.577726][T28609] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 967.744681][T32378] block nbd0: Unsupported socket: should be TCP or UNIX. [ 968.585359][T32162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 968.840022][T32423] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 969.500195][T32162] veth0_vlan: entered promiscuous mode [ 969.517392][T32443] netlink: 'syz.1.6392': attribute type 1 has an invalid length. [ 969.542841][T32162] veth1_vlan: entered promiscuous mode [ 969.555972][T32439] tipc: Enabling of bearer rejected, failed to enable media [ 969.672472][T32162] veth0_macvtap: entered promiscuous mode [ 969.723330][T32162] veth1_macvtap: entered promiscuous mode [ 969.832050][T32458] FAULT_INJECTION: forcing a failure. [ 969.832050][T32458] name failslab, interval 1, probability 0, space 0, times 0 [ 969.866611][T32162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 969.889678][T32458] CPU: 0 UID: 0 PID: 32458 Comm: syz.0.6396 Not tainted syzkaller #0 PREEMPT(full) [ 969.889707][T32458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 969.889722][T32458] Call Trace: [ 969.889732][T32458] [ 969.889742][T32458] dump_stack_lvl+0xe8/0x150 [ 969.889775][T32458] should_fail_ex+0x412/0x560 [ 969.889806][T32458] should_failslab+0xa8/0x100 [ 969.889828][T32458] ? skb_clone+0x212/0x3a0 [ 969.889859][T32458] kmem_cache_alloc_noprof+0x87/0x650 [ 969.889900][T32458] ? __netlink_lookup+0xc6/0x8b0 [ 969.889933][T32458] skb_clone+0x212/0x3a0 [ 969.889962][T32458] __netlink_deliver_tap+0x404/0x850 [ 969.890001][T32458] ? netlink_deliver_tap+0x2e/0x1b0 [ 969.890028][T32458] netlink_deliver_tap+0x19c/0x1b0 [ 969.890054][T32458] netlink_unicast+0x730/0x8e0 [ 969.890089][T32458] netlink_sendmsg+0x813/0xb40 [ 969.890125][T32458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 969.890154][T32458] ? aa_sock_msg_perm+0xf1/0x1b0 [ 969.890190][T32458] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 969.890223][T32458] ____sys_sendmsg+0x972/0x9f0 [ 969.890248][T32458] ? __might_fault+0xaf/0x130 [ 969.890284][T32458] ? __pfx_____sys_sendmsg+0x10/0x10 [ 969.890319][T32458] ? import_iovec+0x73/0xa0 [ 969.890350][T32458] ___sys_sendmsg+0x2a5/0x360 [ 969.890373][T32458] ? __lock_acquire+0x6b5/0x2cf0 [ 969.890401][T32458] ? __pfx____sys_sendmsg+0x10/0x10 [ 969.890465][T32458] ? __fget_files+0x2a/0x420 [ 969.890491][T32458] ? __fget_files+0x3a0/0x420 [ 969.890529][T32458] __x64_sys_sendmsg+0x1bd/0x2a0 [ 969.890558][T32458] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 969.890601][T32458] ? __pfx_ksys_write+0x10/0x10 [ 969.890642][T32458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.890666][T32458] do_syscall_64+0x174/0x580 [ 969.890691][T32458] ? trace_irq_disable+0x3b/0x140 [ 969.890723][T32458] ? clear_bhb_loop+0x40/0x90 [ 969.890749][T32458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.890770][T32458] RIP: 0033:0x7f532b59ce59 [ 969.890792][T32458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 969.890810][T32458] RSP: 002b:00007f53297f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 969.890833][T32458] RAX: ffffffffffffffda RBX: 00007f532b815fa0 RCX: 00007f532b59ce59 [ 969.890848][T32458] RDX: 0000000020006004 RSI: 0000200000000140 RDI: 0000000000000008 [ 969.890869][T32458] RBP: 00007f53297f6090 R08: 0000000000000000 R09: 0000000000000000 [ 969.890883][T32458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 969.890895][T32458] R13: 00007f532b816038 R14: 00007f532b815fa0 R15: 00007ffff788e398 [ 969.890932][T32458] [ 970.013010][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 970.186979][T11771] net_ratelimit: 8 callbacks suppressed [ 970.187000][T11771] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 970.207352][T11771] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 970.257706][T32162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 970.311278][T28604] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.376691][T32473] netlink: 'syz.1.6398': attribute type 1 has an invalid length. [ 970.378099][T28604] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.524738][T32477] openvswitch: netlink: ufid size 32 bytes exceeds the range (1, 16) [ 970.580001][T32473] bond2: entered promiscuous mode [ 970.585716][T32473] 8021q: adding VLAN 0 to HW filter on device bond2 [ 970.605422][T28604] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.614698][T28604] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.626015][T32475] netlink: 'syz.1.6398': attribute type 1 has an invalid length. [ 970.652165][T32475] netlink: 'syz.1.6398': attribute type 2 has an invalid length. [ 970.692028][T32483] vlan2: entered allmulticast mode [ 970.703938][T32483] bond2: entered allmulticast mode [ 970.770152][T32473] bond2: (slave bridge2): making interface the new active one [ 970.779025][T32473] bridge2: entered promiscuous mode [ 970.788185][T32487] netlink: 'syz.5.6402': attribute type 1 has an invalid length. [ 970.796211][T32473] bridge2: entered allmulticast mode [ 970.819525][T32473] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 970.849173][T28606] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 970.863606][T28606] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 971.262520][ T5977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 971.310388][ T5977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.408294][T11775] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 971.423050][T11775] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 971.527685][T27566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 971.535579][T27566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.680958][T32523] __nla_validate_parse: 77 callbacks suppressed [ 971.680978][T32523] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6412'. [ 972.011298][T32541] netlink: 'syz.6.6329': attribute type 11 has an invalid length. [ 972.019609][T28606] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 972.034719][T28606] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 972.093557][T32544] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6416'. [ 972.111924][T32544] IPv6: sit2: Disabled Multicast RS [ 972.123182][T32544] sit2: entered allmulticast mode [ 972.242251][T32548] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6416'. [ 972.275564][T32548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6416'. [ 972.543868][T32567] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6422'. [ 972.554720][T32566] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6422'. [ 972.582914][T32566] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.590254][T32566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 972.597947][T32566] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.605179][T32566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 972.614475][T28606] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 972.673275][T32566] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6422'. [ 972.706703][T32566] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.714293][T32566] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.107088][T32585] bond9: invalid ARP target 0.0.0.0 specified for addition [ 973.124682][T32585] bond9: option arp_ip_target: invalid value (0) [ 973.159995][T32585] bond9 (unregistering): Released all slaves [ 973.350553][T32601] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6431'. [ 973.370073][T32601] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6431'. [ 973.519507][T32606] bond1: ARP target 9.0.0.0 is already present [ 973.540526][T32606] bond1: option arp_ip_target: invalid value (9) [ 973.584909][T32606] bond1 (unregistering): Released all slaves [ 973.730407][ T29] audit: type=1804 audit(1780561092.423:32): pid=32613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6435" name="/newroot/56/memory.events" dev="tmpfs" ino=307 res=1 errno=0 [ 973.779124][ T29] audit: type=1800 audit(1780561092.423:33): pid=32613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6435" name="memory.events" dev="tmpfs" ino=307 res=0 errno=0 [ 974.254920][T32640] FAULT_INJECTION: forcing a failure. [ 974.254920][T32640] name failslab, interval 1, probability 0, space 0, times 0 [ 974.287734][T32640] CPU: 1 UID: 0 PID: 32640 Comm: syz.5.6443 Not tainted syzkaller #0 PREEMPT(full) [ 974.287764][T32640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 974.287778][T32640] Call Trace: [ 974.287786][T32640] [ 974.287796][T32640] dump_stack_lvl+0xe8/0x150 [ 974.287828][T32640] should_fail_ex+0x412/0x560 [ 974.287861][T32640] should_failslab+0xa8/0x100 [ 974.287883][T32640] ? skb_clone+0x212/0x3a0 [ 974.287912][T32640] kmem_cache_alloc_noprof+0x87/0x650 [ 974.287952][T32640] skb_clone+0x212/0x3a0 [ 974.287982][T32640] __netlink_deliver_tap+0x404/0x850 [ 974.288025][T32640] ? netlink_deliver_tap+0x2e/0x1b0 [ 974.288052][T32640] netlink_deliver_tap+0x19c/0x1b0 [ 974.288080][T32640] netlink_sendskb+0x68/0x140 [ 974.288106][T32640] nfsd_nl_pool_mode_get_doit+0x3c2/0x520 [ 974.288187][T32640] ? __pfx_nfsd_nl_pool_mode_get_doit+0x10/0x10 [ 974.288222][T32640] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 974.288252][T32640] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 974.288291][T32640] genl_family_rcv_msg_doit+0x22a/0x330 [ 974.288323][T32640] ? __asan_memcpy+0x40/0x70 [ 974.288362][T32640] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 974.288418][T32640] genl_rcv_msg+0x61c/0x7a0 [ 974.288456][T32640] ? __pfx_genl_rcv_msg+0x10/0x10 [ 974.288485][T32640] ? __pfx_nfsd_nl_pool_mode_get_doit+0x10/0x10 [ 974.288518][T32640] ? __pfx_ref_tracker_free+0x10/0x10 [ 974.288554][T32640] netlink_rcv_skb+0x232/0x4b0 [ 974.288580][T32640] ? __pfx_genl_rcv_msg+0x10/0x10 [ 974.288611][T32640] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 974.288653][T32640] ? down_read+0x270/0x2e0 [ 974.288679][T32640] ? genl_rcv+0xd/0x40 [ 974.288713][T32640] genl_rcv+0x28/0x40 [ 974.288740][T32640] netlink_unicast+0x75c/0x8e0 [ 974.288775][T32640] netlink_sendmsg+0x813/0xb40 [ 974.288812][T32640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 974.288840][T32640] ? aa_sock_msg_perm+0xf1/0x1b0 [ 974.288874][T32640] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 974.288907][T32640] ____sys_sendmsg+0x972/0x9f0 [ 974.288932][T32640] ? __might_fault+0xaf/0x130 [ 974.288967][T32640] ? __pfx_____sys_sendmsg+0x10/0x10 [ 974.289002][T32640] ? import_iovec+0x73/0xa0 [ 974.289032][T32640] ___sys_sendmsg+0x2a5/0x360 [ 974.289055][T32640] ? __lock_acquire+0x6b5/0x2cf0 [ 974.289083][T32640] ? __pfx____sys_sendmsg+0x10/0x10 [ 974.289147][T32640] ? __fget_files+0x2a/0x420 [ 974.289173][T32640] ? __fget_files+0x3a0/0x420 [ 974.289213][T32640] __x64_sys_sendmsg+0x1bd/0x2a0 [ 974.289241][T32640] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 974.289278][T32640] ? __pfx_ksys_write+0x10/0x10 [ 974.289320][T32640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.289371][T32640] do_syscall_64+0x174/0x580 [ 974.289397][T32640] ? clear_bhb_loop+0x40/0x90 [ 974.289424][T32640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.289445][T32640] RIP: 0033:0x7fb96a79ce59 [ 974.289466][T32640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.289485][T32640] RSP: 002b:00007fb96b741028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 974.289507][T32640] RAX: ffffffffffffffda RBX: 00007fb96aa15fa0 RCX: 00007fb96a79ce59 [ 974.289522][T32640] RDX: 0000000020006004 RSI: 0000200000000140 RDI: 0000000000000008 [ 974.289536][T32640] RBP: 00007fb96b741090 R08: 0000000000000000 R09: 0000000000000000 [ 974.289550][T32640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 974.289563][T32640] R13: 00007fb96aa16038 R14: 00007fb96aa15fa0 R15: 00007ffe35817478 [ 974.289600][T32640] [ 974.644576][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 974.770730][T32649] bridge0: port 3(batadv1) entered blocking state [ 974.796173][T32649] bridge0: port 3(batadv1) entered disabled state [ 974.880888][T32625] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6440'. [ 974.913754][T32649] batadv1: entered allmulticast mode [ 974.933816][T32625] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 975.065744][T32649] batadv1: entered promiscuous mode [ 975.194054][T32650] lo speed is unknown, defaulting to 1000 [ 975.202900][T11782] net_ratelimit: 9 callbacks suppressed [ 975.202939][T11782] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 975.223983][T11782] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 975.276659][T11782] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 975.286267][T11782] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 975.443800][T32665] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 975.487710][T32665] vlan0: entered allmulticast mode [ 975.504899][T32665] veth0_vlan: entered allmulticast mode [ 975.519751][T32665] tipc: Enabled bearer , priority 0 [ 975.538773][T32668] sctp: [Deprecated]: syz.1.6449 (pid 32668) Use of int in max_burst socket option. [ 975.538773][T32668] Use struct sctp_assoc_value instead [ 975.656006][T32650] lo speed is unknown, defaulting to 1000 [ 975.720733][T32665] tipc: Disabling bearer [ 975.775420][T11777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.802032][T27566] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 975.816588][T27566] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 976.360856][ T5977] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 976.375309][ T5977] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 976.401379][T28604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.596263][T32711] block nbd0: Unsupported socket: should be TCP or UNIX. [ 976.705700][T32713] netlink: 'syz.4.6459': attribute type 29 has an invalid length. [ 976.740134][T32713] __nla_validate_parse: 8 callbacks suppressed [ 976.740174][T32713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6459'. [ 976.898765][T11775] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 976.913923][T11775] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 976.987851][T32720] netlink: 'syz.4.6463': attribute type 1 has an invalid length. [ 977.016250][T32722] netlink: 'syz.4.6463': attribute type 1 has an invalid length. [ 977.033586][T32724] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6464'. [ 977.056913][T32720] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6463'. [ 977.078644][T32722] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6463'. [ 977.513232][T32721] batman_adv: batadv0: Interface deactivated: dummy0 [ 977.848379][T32721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 977.907700][T32721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 978.025908][T32735] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 978.087967][T32744] netlink: 'syz.0.6466': attribute type 4 has an invalid length. [ 978.174737][T32746] netlink: 'syz.0.6466': attribute type 4 has an invalid length. [ 978.885071][T28605] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.969821][T28605] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.023945][T28605] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.059765][T28605] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.099434][T32767] netlink: 'syz.5.6471': attribute type 1 has an invalid length. [ 979.291747][ T314] netlink: 'syz.5.6471': attribute type 10 has an invalid length. [ 979.321466][ T314] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6471'. [ 979.406440][ T318] netlink: 'syz.4.6476': attribute type 22 has an invalid length. [ 979.434175][ T320] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6471'. [ 979.476992][ T305] bond9: (slave veth17): Enslaving as an active interface with a down link [ 979.521480][ T310] dummy0: left promiscuous mode [ 979.528943][ T310] batman_adv: batadv0: Removing interface: dummy0 [ 979.546820][ T310] bond9: (slave dummy0): making interface the new active one [ 979.555690][ T310] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 979.568514][ T314] dummy0: entered promiscuous mode [ 979.578281][ T314] bond9: (slave dummy0): Releasing active interface [ 979.661211][T32767] vlan3: entered allmulticast mode [ 979.667598][T32767] bond0: entered allmulticast mode [ 979.672803][T32767] bond_slave_0: entered allmulticast mode [ 979.680785][T32767] bond_slave_1: entered allmulticast mode [ 979.690503][T32767] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 979.714548][ T320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 979.724678][ T320] bond_slave_0: left allmulticast mode [ 979.734016][ T320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 979.743830][ T320] bond_slave_1: left allmulticast mode [ 979.753550][ T320] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 979.764306][ T320] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 979.771860][ T320] netdevsim netdevsim5 netdevsim1: left allmulticast mode [ 979.780218][ T320] bond0 (unregistering): Released all slaves [ 980.125279][ T333] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6481'. [ 980.205535][ T333] netlink: 'syz.6.6481': attribute type 9 has an invalid length. [ 980.224959][ T333] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6481'. [ 980.270629][ T333] syz_tun: entered promiscuous mode [ 980.285610][ T333] macvlan2: entered promiscuous mode [ 980.293879][ T333] macvlan2: entered allmulticast mode [ 980.301473][ T333] syz_tun: entered allmulticast mode [ 981.252054][ T384] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 981.296552][ T388] lo speed is unknown, defaulting to 1000 [ 981.474735][ T412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6499'. [ 981.495265][ T412] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6499'. [ 981.875527][ T388] lo speed is unknown, defaulting to 1000 [ 981.929414][ T427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6503'. [ 981.963995][ T426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6504'. [ 981.986249][ T426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6504'. [ 982.027239][ T427] vlan2: entered promiscuous mode [ 982.032408][ T427] erspan0: entered promiscuous mode [ 982.296346][ T434] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6506'. [ 982.451233][ T444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 982.468128][ T444] batadv_slave_1: entered promiscuous mode [ 982.757851][ T451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6512'. [ 982.832349][ T456] netlink: 'syz.1.6514': attribute type 1 has an invalid length. [ 983.124845][ T467] netlink: 65051 bytes leftover after parsing attributes in process `syz.6.6518'. [ 983.167959][ T467] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6518'. [ 983.426147][ T480] netlink: 'syz.6.6521': attribute type 1 has an invalid length. [ 983.494619][ T480] gretap1: entered allmulticast mode [ 983.731015][ T490] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6522'. [ 983.788509][ T460] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 983.807414][ T460] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 983.965926][ T460] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 983.972218][ T460] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 984.258376][ T516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6527'. [ 984.369940][ T519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6527'. [ 984.627863][ T529] syzkaller0: entered promiscuous mode [ 984.653497][ T529] syzkaller0: entered allmulticast mode [ 984.949194][ T550] Bluetooth: MGMT ver 1.23 [ 985.942577][ T608] netlink: 'syz.0.6554': attribute type 6 has an invalid length. [ 987.069707][ T662] __nla_validate_parse: 8 callbacks suppressed [ 987.069734][ T662] netlink: 187388 bytes leftover after parsing attributes in process `syz.0.6568'. [ 987.114259][ T666] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6570'. [ 987.135650][ T666] netlink: 'syz.5.6570': attribute type 2 has an invalid length. [ 987.159135][ T666] netlink: 'syz.5.6570': attribute type 8 has an invalid length. [ 987.185952][ T666] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6570'. [ 987.380446][ T675] netlink: 288 bytes leftover after parsing attributes in process `syz.4.6573'. [ 987.609324][ T688] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6577'. [ 987.620469][ T690] netlink: 'syz.0.6578': attribute type 4 has an invalid length. [ 987.637137][ T689] netlink: 'syz.0.6578': attribute type 4 has an invalid length. [ 987.686015][ T694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6580'. [ 987.734545][ T698] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6579'. [ 987.917353][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 988.036189][ T698] ip6gre2: entered promiscuous mode [ 988.057235][ T698] ip6gre2: entered allmulticast mode [ 988.144472][T28606] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 988.197746][T28606] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 988.243165][T28606] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 988.282711][T28606] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 988.308739][ T718] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6583'. [ 988.671756][ T732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6589'. [ 988.693464][ T732] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6589'. [ 989.182902][ T764] gretap0: entered promiscuous mode [ 989.212309][ T764] 0ªî{X¹¦: renamed from gretap0 [ 989.224055][ T764] 0ªî{X¹¦: left promiscuous mode [ 989.231095][ T764] 0ªî{X¹¦: entered allmulticast mode [ 989.239758][ T764] net_ratelimit: 3 callbacks suppressed [ 989.239791][ T764] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 989.557549][ T774] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 989.682698][ T782] nbd: illegal input index -1113835520 [ 990.251908][ T795] bond3: invalid ARP target 0.0.0.0 specified for addition [ 990.279881][ T795] bond3: option arp_ip_target: invalid value (0) [ 990.298562][ T795] bond3 (unregistering): Released all slaves [ 990.386592][ T794] lo speed is unknown, defaulting to 1000 [ 990.596171][ T815] syzkaller0: entered promiscuous mode [ 990.602125][ T815] syzkaller0: entered allmulticast mode [ 990.690782][ T815] tipc: Started in network mode [ 990.704536][ T815] tipc: Node identity 4afe7ad14bd9, cluster identity 4711 [ 990.719673][ T815] tipc: Enabled bearer , priority 0 [ 991.052344][ T794] lo speed is unknown, defaulting to 1000 [ 991.291144][ T834] veth0: entered promiscuous mode [ 991.304780][ T833] veth0: left promiscuous mode [ 991.380362][ T813] tipc: Resetting bearer [ 991.447633][ T838] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 991.481096][ T813] tipc: Disabling bearer [ 991.729890][ T846] netlink: 'syz.1.6617': attribute type 1 has an invalid length. [ 991.961418][ T848] 8021q: adding VLAN 0 to HW filter on device bond4 [ 992.024230][ T848] bond3: (slave bond4): making interface the new active one [ 992.050122][ T848] bond3: (slave bond4): Enslaving as an active interface with an up link [ 992.198010][ T846] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 992.322489][ T854] __nla_validate_parse: 10 callbacks suppressed [ 992.322514][ T854] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.6619'. [ 992.355003][ T854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6619'. [ 992.451252][ T859] netlink: 'syz.1.6620': attribute type 1 has an invalid length. [ 992.724575][ T872] xt_CT: You must specify a L4 protocol and not use inversions on it [ 992.813693][ T879] syz_tun: entered allmulticast mode [ 992.836289][ T879] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6629'. [ 992.846371][ T879] openvswitch: netlink: Flow key attr not present in new flow. [ 992.864361][ T879] netlink: 1720 bytes leftover after parsing attributes in process `syz.1.6629'. [ 992.922582][ T879] syz_tun: left allmulticast mode [ 992.949093][ T880] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6628'. [ 993.043545][ T1316] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 993.103609][ T889] netlink: 280 bytes leftover after parsing attributes in process `syz.5.6633'. [ 993.374620][ T899] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6637'. [ 993.793294][ T917] syzkaller1: entered allmulticast mode [ 994.829748][ T966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 994.853717][ T966] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6651'. [ 995.096304][ T971] syzkaller1: entered promiscuous mode [ 995.115498][ T971] syzkaller1: entered allmulticast mode [ 995.155198][ T971] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6654'. [ 995.423772][ T979] netlink: 'syz.4.6655': attribute type 1 has an invalid length. [ 995.452505][ T979] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6655'. [ 996.090626][ T1006] netlink: 'syz.6.6661': attribute type 1 has an invalid length. [ 996.705407][ T1024] syzkaller0: entered promiscuous mode [ 996.729287][ T1024] syzkaller0: entered allmulticast mode [ 996.836028][ T1024] syzkaller0: mtu less than device minimum [ 997.140179][ T1040] xt_hashlimit: Unknown mode mask 3FFFF, kernel too old? [ 997.141186][ T1039] xt_NFQUEUE: number of queues (3633) out of range (got 69161) [ 997.424200][ T1049] netlink: 'syz.6.6676': attribute type 11 has an invalid length. [ 997.748206][ T1032] netlink: 'syz.1.6670': attribute type 1 has an invalid length. [ 998.145492][ T1086] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 998.188873][ T1086] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 998.232114][ T1080] syzkaller0: entered promiscuous mode [ 998.248749][ T1080] syzkaller0: entered allmulticast mode [ 998.853989][ T1110] __nla_validate_parse: 35 callbacks suppressed [ 998.854012][ T1110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6688'. [ 999.292376][ T1116] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6690'. [ 999.352336][ T1117] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6690'. [ 1002.010605][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1003.568918][ T1120] bond0: ARP target 9.0.0.0 is already present [ 1003.619940][ T1120] bond0: option arp_ip_target: invalid value (9) [ 1003.683006][ T1120] bond0 (unregistering): Released all slaves [ 1003.730420][T16168] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1003.752924][T16168] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1003.767890][T16168] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1003.785669][T16168] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1003.797890][T16168] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1003.959568][T27086] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1003.970056][T27086] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1004.011092][T27086] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1004.036697][T27086] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1004.050663][T27086] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1004.400696][ T1150] bridge0: entered allmulticast mode [ 1004.450497][ T1150] bridge_slave_1: left allmulticast mode [ 1004.469160][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.519861][ T1150] bridge_slave_0: left allmulticast mode [ 1004.555757][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.693866][ T1157] hsr0: entered promiscuous mode [ 1005.012055][ T1174] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6704'. [ 1005.098301][ T1127] lo speed is unknown, defaulting to 1000 [ 1005.235200][ T1188] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6706'. [ 1005.289686][ T1192] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6707'. [ 1005.361743][ T1198] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6707'. [ 1005.640148][ T1198] bond1: ARP target 9.0.0.0 is already present [ 1005.646447][ T1209] netlink: 'syz.4.6710': attribute type 1 has an invalid length. [ 1005.657342][ T1198] bond1: option arp_ip_target: invalid value (9) [ 1005.668941][ T1198] bond1 (unregistering): Released all slaves [ 1005.761524][ T1217] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6712'. [ 1005.791992][ T1209] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1006.030871][ T1207] syzkaller0: entered promiscuous mode [ 1006.076967][ T1207] syzkaller0: entered allmulticast mode [ 1006.099902][ T1127] lo speed is unknown, defaulting to 1000 [ 1006.115869][ T1236] netlink: 240 bytes leftover after parsing attributes in process `syz.6.6715'. [ 1006.157153][T27086] Bluetooth: hci7: command tx timeout [ 1006.690030][ T1247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1008.237509][T27086] Bluetooth: hci7: command tx timeout [ 1010.321836][T27086] Bluetooth: hci7: command tx timeout [ 1010.328700][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1011.834427][ T1272] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6725'. [ 1011.933996][ T1281] netlink: 'syz.6.6727': attribute type 2 has an invalid length. [ 1011.950122][ T1281] netlink: 'syz.6.6727': attribute type 8 has an invalid length. [ 1011.960370][ T1281] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6727'. [ 1012.178154][ T1291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6728'. [ 1012.235388][ T1282] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6725'. [ 1012.284225][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.291594][ T1127] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.299364][ T1127] bridge_slave_0: entered allmulticast mode [ 1012.308459][ T1127] bridge_slave_0: entered promiscuous mode [ 1012.318357][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.325699][ T1127] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.333658][ T1127] bridge_slave_1: entered allmulticast mode [ 1012.342369][ T1127] bridge_slave_1: entered promiscuous mode [ 1012.398184][T27086] Bluetooth: hci7: command tx timeout [ 1012.442375][ T1127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1012.456424][ T1127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1012.553773][ T1127] team0: Port device team_slave_0 added [ 1012.580068][ T1127] team0: Port device team_slave_1 added [ 1012.601221][ T1297] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6730'. [ 1012.653004][ T1297] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6730'. [ 1012.656564][ T1307] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1012.674805][ T1127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1012.682441][ T1127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1012.750405][ T1127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1012.823760][ T1127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1012.841091][ T1127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1012.901614][ T1127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1012.958714][ T1297] bond1: ARP target 9.0.0.0 is already present [ 1012.965304][ T1297] bond1: option arp_ip_target: invalid value (9) [ 1012.974685][ T1297] bond1 (unregistering): Released all slaves [ 1013.221716][ T1127] hsr_slave_0: entered promiscuous mode [ 1013.243521][ T1127] hsr_slave_1: entered promiscuous mode [ 1013.258551][ T1127] debugfs: 'hsr0' already exists in 'hsr' [ 1013.279534][ T1127] Cannot create hsr debugfs directory [ 1014.251312][ T1340] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6740'. [ 1014.262333][ T1340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6740'. [ 1014.553524][ T1342] lo speed is unknown, defaulting to 1000 [ 1014.724194][ T1362] bridge_slave_0: left allmulticast mode [ 1014.739749][ T1362] bridge_slave_0: left promiscuous mode [ 1014.750556][ T1362] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.779695][ T1362] bridge_slave_1: left allmulticast mode [ 1014.798124][ T1362] bridge_slave_1: left promiscuous mode [ 1014.814276][ T1362] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.825183][ T1366] netlink: 'syz.6.6743': attribute type 10 has an invalid length. [ 1014.860205][ T1362] bond0: (slave bond_slave_0): Releasing backup interface [ 1014.897580][ T1362] bond0: (slave bond_slave_1): Releasing backup interface [ 1014.925523][ T1362] team0: Port device team_slave_0 removed [ 1014.965296][ T1362] team0: Port device team_slave_1 removed [ 1014.982334][ T1362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1014.997835][ T1362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1015.010080][ T1362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1015.018415][ T1362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1015.028756][ T1362] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1015.046266][ T1127] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1015.068502][ T1127] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1015.079786][ T1127] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1015.091281][ T1127] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1015.193029][ T1127] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1015.232496][ T1127] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1015.261367][ T1342] lo speed is unknown, defaulting to 1000 [ 1015.277824][ T1127] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1015.305397][ T1127] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1015.351116][ T1371] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6746'. [ 1015.401087][ T1382] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6746'. [ 1015.596463][ T1374] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1015.611442][ T1374] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.781372][ T1382] bond0: ARP target 9.0.0.0 is already present [ 1015.788084][ T1382] bond0: option arp_ip_target: invalid value (9) [ 1015.796444][ T1382] bond0 (unregistering): Released all slaves [ 1015.834987][ T29] audit: type=1804 audit(1780561134.533:34): pid=1392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.6749" name="/newroot/70/memory.events" dev="tmpfs" ino=381 res=1 errno=0 [ 1015.860345][ T29] audit: type=1800 audit(1780561134.533:35): pid=1392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6749" name="memory.events" dev="tmpfs" ino=381 res=0 errno=0 [ 1016.043141][ T1374] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1016.055501][ T1374] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.354650][ T1374] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1016.366975][ T1374] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.390983][ T1398] netlink: 'syz.5.6752': attribute type 16 has an invalid length. [ 1016.577171][ T1374] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1016.590716][ T1374] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.811372][ T1127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1016.849818][ T1127] 8021q: adding VLAN 0 to HW filter on device team0 [ 1016.870486][T28606] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.877861][T28606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1016.895359][T28606] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.902692][T28606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1017.116510][T28605] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1017.145362][T28605] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.161603][ T1409] __nla_validate_parse: 1 callbacks suppressed [ 1017.161623][ T1409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6755'. [ 1017.189754][T28605] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1017.197687][ T1409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6755'. [ 1017.201386][T28605] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.215567][ T1409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6755'. [ 1017.224892][ T1409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6755'. [ 1017.306673][T11782] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1017.329636][T11782] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.464762][T11777] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1017.519358][T11777] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.744506][ T1436] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6759'. [ 1017.772753][ T1436] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6759'. [ 1017.947087][ T1436] bond1: ARP target 9.0.0.0 is already present [ 1017.953518][ T1436] bond1: option arp_ip_target: invalid value (9) [ 1018.015697][ T1436] bond1 (unregistering): Released all slaves [ 1018.628668][ T1453] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1019.126076][ T1127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1019.432381][ T1486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6774'. [ 1019.955041][ T1510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6780'. [ 1020.060140][ T1127] veth0_vlan: entered promiscuous mode [ 1020.127690][ T1127] veth1_vlan: entered promiscuous mode [ 1020.238495][ T1127] veth0_macvtap: entered promiscuous mode [ 1020.264691][ T1127] veth1_macvtap: entered promiscuous mode [ 1020.363729][ T1127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1020.378964][ T1127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1020.422106][T11782] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.447973][T28609] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.472365][T28609] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.492662][T28609] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.757086][T28605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1020.794189][T28605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1020.874460][T11782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1020.904602][T11782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1021.745409][ T1560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6796'. [ 1021.954067][ T1565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6796'. [ 1022.197062][ T1577] pim6reg: entered allmulticast mode [ 1022.545191][ T1590] syzkaller1: entered promiscuous mode [ 1022.576858][ T1590] syzkaller1: entered allmulticast mode [ 1022.938884][ T1594] netlink: 'syz.6.6805': attribute type 1 has an invalid length. [ 1022.967180][ T1594] netlink: 476 bytes leftover after parsing attributes in process `syz.6.6805'. [ 1023.001209][ T1594] netlink: 1041 bytes leftover after parsing attributes in process `syz.6.6805'. [ 1023.498298][T22916] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1023.544402][ T1616] netlink: 'syz.6.6810': attribute type 1 has an invalid length. [ 1023.826100][ T1616] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1023.956023][ T1638] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6815'. [ 1024.004743][ T1638] netlink: 'syz.5.6815': attribute type 16 has an invalid length. [ 1024.044458][ T1638] netlink: 'syz.5.6815': attribute type 17 has an invalid length. [ 1024.061872][ T1638] netlink: 'syz.5.6815': attribute type 27 has an invalid length. [ 1024.269613][ T1616] bond1: (slave ip6gretap1): making interface the new active one [ 1024.285778][ T1616] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1024.533878][ T1655] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6822'. [ 1024.594735][ T1655] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6822'. [ 1024.961503][ T1671] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6828'. [ 1024.980769][ T1671] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 1025.390559][ T1687] netlink: 'syz.4.6831': attribute type 10 has an invalid length. [ 1025.438909][ T1687] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6831'. [ 1025.450075][ T1692] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6833'. [ 1025.527284][ T1687] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6831'. [ 1025.557723][ T1687] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6831'. [ 1025.980623][ T1710] erspan0: entered promiscuous mode [ 1025.994038][ T1710] macvtap1: entered promiscuous mode [ 1026.003046][ T1710] macvtap1: entered allmulticast mode [ 1026.012510][ T1710] erspan0: entered allmulticast mode [ 1026.039870][ T1718] openvswitch: netlink: Message has 24 unknown bytes. [ 1027.018674][ T1731] lo speed is unknown, defaulting to 1000 [ 1027.387379][ T1758] netlink: 'syz.5.6848': attribute type 8 has an invalid length. [ 1027.406506][ T1758] netlink: 'syz.5.6848': attribute type 1 has an invalid length. [ 1027.566108][ T1731] lo speed is unknown, defaulting to 1000 [ 1028.092777][ T1774] netlink: 'syz.7.6854': attribute type 1 has an invalid length. [ 1028.220545][ T1779] __nla_validate_parse: 3 callbacks suppressed [ 1028.220567][ T1779] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6853'. [ 1028.305359][ T1774] bond1: option updelay: invalid value (18446744073709518847) [ 1028.334391][ T1774] bond1: option updelay: allowed values 0 - 2147483647 [ 1028.899647][ T1774] bond1 (unregistering): Released all slaves [ 1028.985486][ T1777] syzkaller1: entered promiscuous mode [ 1028.997507][ T1777] syzkaller1: entered allmulticast mode [ 1029.009209][ T1779] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1029.196135][ T1776] lo speed is unknown, defaulting to 1000 [ 1029.397021][ T1792] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.404807][ T1792] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.626508][ T1792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1029.644648][ T1792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1029.800514][ T1776] lo speed is unknown, defaulting to 1000 [ 1029.800708][T28605] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.869769][T28605] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.881336][T28605] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.955194][T28605] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.051513][ T1804] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6860'. [ 1030.282739][ T1810] lo speed is unknown, defaulting to 1000 [ 1030.475187][ T1818] tipc: Enabling of bearer rejected, failed to enable media [ 1030.634859][ T1818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6865'. [ 1030.674574][ T1818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6865'. [ 1031.324080][ T1810] lo speed is unknown, defaulting to 1000 [ 1031.456979][ T1837] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6874'. [ 1031.468551][ T1840] netlink: 'syz.5.6871': attribute type 1 has an invalid length. [ 1031.482117][ T1840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1031.511496][ T1843] netlink: 'syz.1.6874': attribute type 29 has an invalid length. [ 1031.751391][ T1851] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6876'. [ 1032.632455][ T1885] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 1032.811481][ T1890] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6888'. [ 1032.910691][ T1891] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6888'. [ 1033.872686][ T1919] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6896'. [ 1033.903948][ T1920] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.6897'. [ 1033.921185][ T1919] xt_TCPMSS: Only works on TCP SYN packets [ 1034.312819][ T1944] netlink: 200 bytes leftover after parsing attributes in process `syz.7.6901'. [ 1034.353923][ T1943] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1034.841523][ T1974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6913'. [ 1034.934337][ T1977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6913'. [ 1034.980636][ T1980] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6912'. [ 1034.992332][ T1980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6912'. [ 1035.432780][ T1993] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6915'. [ 1035.688463][ T2005] netlink: 212320 bytes leftover after parsing attributes in process `syz.6.6921'. [ 1035.707290][ T2006] netlink: 212320 bytes leftover after parsing attributes in process `syz.6.6921'. [ 1035.820121][ T2011] netlink: 'syz.4.6922': attribute type 25 has an invalid length. [ 1035.881915][ T2011] netlink: 'syz.4.6922': attribute type 3 has an invalid length. [ 1036.433533][ T2042] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 1036.553797][ T2046] netlink: 'syz.6.6933': attribute type 1 has an invalid length. [ 1036.613028][T28291] IPVS: starting estimator thread 0... [ 1036.742541][ T2049] IPVS: using max 32 ests per chain, 76800 per kthread [ 1037.021908][ T2054] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1037.074589][ T2056] bond5: (slave veth9): Enslaving as an active interface with an up link [ 1037.110154][ T2057] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1037.131669][ T2057] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 1037.219602][ T2059] lo speed is unknown, defaulting to 1000 [ 1037.553721][ T2079] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1037.584952][ T2085] bond0: (slave veth1_to_bond): Device is not bonding slave [ 1037.608974][ T2085] bond0: option active_slave: invalid value (veth1_to_bond) [ 1037.790136][ T2059] lo speed is unknown, defaulting to 1000 [ 1038.959391][ T2124] __nla_validate_parse: 17 callbacks suppressed [ 1038.959413][ T2124] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6954'. [ 1039.036452][ T2113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6949'. [ 1039.086103][ T2111] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1039.116560][ T2111] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1039.141679][ T2128] netlink: 'syz.4.6953': attribute type 6 has an invalid length. [ 1039.571026][ T2139] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6958'. [ 1039.618040][ T2142] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6959'. [ 1039.671470][ T2144] syzkaller0: entered promiscuous mode [ 1039.690401][ T2144] syzkaller0: entered allmulticast mode [ 1040.015909][ T2152] netlink: 152 bytes leftover after parsing attributes in process `syz.7.6961'. [ 1040.046054][ T2153] netlink: 156 bytes leftover after parsing attributes in process `syz.7.6961'. [ 1040.068480][ T2152] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6961'. [ 1040.091156][ T2153] netlink: 156 bytes leftover after parsing attributes in process `syz.7.6961'. [ 1040.103139][ T2153] netlink: 156 bytes leftover after parsing attributes in process `syz.7.6961'. [ 1040.131802][ T2153] netlink: 156 bytes leftover after parsing attributes in process `syz.7.6961'. [ 1040.364720][ T2161] netlink: 'syz.6.6963': attribute type 1 has an invalid length. [ 1041.193174][ T2193] bond10: ARP target 9.0.0.0 is already present [ 1041.216337][ T2193] bond10: option arp_ip_target: invalid value (9) [ 1041.253166][ T2193] bond10 (unregistering): Released all slaves [ 1042.066321][ T2237] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1043.153618][ T2280] bond2: ARP target 9.0.0.0 is already present [ 1043.190058][ T2280] bond2: option arp_ip_target: invalid value (9) [ 1043.232339][ T2280] bond2 (unregistering): Released all slaves [ 1043.344600][ T2291] netlink: 'syz.5.6987': attribute type 4 has an invalid length. [ 1044.111313][ T2329] ip6tnl1: entered allmulticast mode [ 1044.541222][ T2350] __nla_validate_parse: 36 callbacks suppressed [ 1044.541245][ T2350] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7002'. [ 1044.594906][ T2352] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7002'. [ 1044.621830][ T2352] dummy0: left promiscuous mode [ 1044.968933][ T2367] netlink: 'syz.6.7006': attribute type 12 has an invalid length. [ 1044.987117][ T2367] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7006'. [ 1045.484560][ T2385] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7010'. [ 1046.230363][ T2387] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7010'. [ 1046.260799][ T2387] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7010'. [ 1046.528502][ T2402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7013'. [ 1046.602100][ T2404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7013'. [ 1046.727532][ T2404] bond3: option ad_actor_sys_prio: invalid value (0) [ 1046.734573][ T2404] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1046.745166][ T2404] bond3 (unregistering): Released all slaves [ 1048.209776][ T2458] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1048.221634][ T2459] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1048.431289][ T2468] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7027'. [ 1048.460077][ T2468] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7027'. [ 1048.575013][ T2474] bond3: ARP target 9.0.0.0 is already present [ 1048.585821][ T2474] bond3: option arp_ip_target: invalid value (9) [ 1048.610273][ T2474] bond3 (unregistering): Released all slaves [ 1048.739299][ T2477] lo speed is unknown, defaulting to 1000 [ 1049.470251][ T2477] lo speed is unknown, defaulting to 1000 [ 1049.700411][ T2504] netlink: 'syz.7.7037': attribute type 30 has an invalid length. [ 1049.910882][ T2504] bond1: option arp_missed_max: invalid value (0) [ 1049.922743][ T2504] bond1: option arp_missed_max: allowed values 1 - 255 [ 1049.990978][ T2504] bond1 (unregistering): Released all slaves [ 1051.579176][ T2542] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7045'. [ 1051.805603][ T2558] netlink: 'syz.4.7048': attribute type 21 has an invalid length. [ 1051.822409][ T2558] netlink: 'syz.4.7048': attribute type 6 has an invalid length. [ 1052.008790][ T2568] vlan0: entered allmulticast mode [ 1052.017962][ T2568] veth0_to_bond: entered allmulticast mode [ 1052.069871][ T2569] netlink: 'syz.7.7049': attribute type 12 has an invalid length. [ 1052.083136][ T2569] netlink: 'syz.7.7049': attribute type 29 has an invalid length. [ 1052.097740][ T2569] netlink: 148 bytes leftover after parsing attributes in process `syz.7.7049'. [ 1052.120586][ T2569] netlink: 59 bytes leftover after parsing attributes in process `syz.7.7049'. [ 1052.137645][ T2568] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7049'. [ 1052.300563][ T2581] batman_adv: batadv0: Adding interface: dummy0 [ 1052.335468][ T2581] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1052.377987][ T2581] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1052.477396][T28295] page_pool_release_retry() stalled pool shutdown: id 419, 1 inflight 60 sec [ 1052.624741][ T2596] syzkaller0: entered promiscuous mode [ 1052.652150][ T2596] syzkaller0: entered allmulticast mode [ 1052.699699][ T2600] netlink: 'syz.7.7058': attribute type 1 has an invalid length. [ 1052.722348][ T2601] vlan2: entered promiscuous mode [ 1052.736880][ T2601] bridge0: entered promiscuous mode [ 1052.812004][ T2601] netlink: 'syz.4.7057': attribute type 4 has an invalid length. [ 1053.131083][ T2616] IPVS: set_ctl: invalid protocol: 98 172.20.20.48:20001 [ 1053.319203][ T2618] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1053.686284][ T2640] tipc: Invalid UDP bearer configuration [ 1053.686340][ T2640] tipc: Enabling of bearer rejected, failed to enable media [ 1053.711537][ T2640] netlink: 212340 bytes leftover after parsing attributes in process `syz.5.7065'. [ 1053.724548][ T2640] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1053.994102][ T2656] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1054.047192][ T2656] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1054.066250][ T2656] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1054.082223][ T2656] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1054.094228][ T2656] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1054.111369][ T2656] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1054.121913][ T2656] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1054.155114][ T2656] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1054.193054][ T2656] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1054.480514][ T1316] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1054.556239][ T2693] tipc: Enabling of bearer rejected, failed to enable media [ 1054.666010][ T2698] netlink: 'syz.4.7076': attribute type 3 has an invalid length. [ 1054.695833][ T2698] netlink: 244 bytes leftover after parsing attributes in process `syz.4.7076'. [ 1054.735258][ T2698] netlink: 'syz.4.7076': attribute type 6 has an invalid length. [ 1054.909584][ T2704] netlink: 317 bytes leftover after parsing attributes in process `syz.5.7077'. [ 1055.338623][ T2724] sctp: [Deprecated]: syz.7.7079 (pid 2724) Use of int in max_burst socket option. [ 1055.338623][ T2724] Use struct sctp_assoc_value instead [ 1055.553844][ T2727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7080'. [ 1056.006844][ T2750] netlink: 'syz.6.7086': attribute type 25 has an invalid length. [ 1056.028716][ T2750] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7086'. [ 1056.064512][T11782] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1056.074364][ T2750] netlink: 'syz.6.7086': attribute type 25 has an invalid length. [ 1056.087797][ T2750] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7086'. [ 1056.092192][T11782] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1056.132909][T11782] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1056.156427][T11782] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1056.175640][ T2756] xt_bpf: check failed: parse error [ 1056.742111][ T2790] netlink: 'syz.4.7095': attribute type 1 has an invalid length. [ 1056.783107][ T2790] bond3: entered promiscuous mode [ 1056.791224][ T2790] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1056.894939][ T2790] bond3: (slave bridge3): making interface the new active one [ 1056.903626][ T2790] bridge3: entered promiscuous mode [ 1056.911840][ T2790] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 1056.928636][ T2798] __nla_validate_parse: 2 callbacks suppressed [ 1056.928658][ T2798] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7097'. [ 1057.292889][ T2810] netlink: 'syz.7.7102': attribute type 3 has an invalid length. [ 1057.336398][ T2810] nbd: nbd7 already in use [ 1057.462893][ T2810] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1057.498304][ T2810] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1057.534375][ T2810] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1057.601400][ T2810] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1058.025880][ T2828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7105'. [ 1058.155135][ T2829] lo speed is unknown, defaulting to 1000 [ 1058.453096][ T2856] netlink: 'syz.5.7110': attribute type 29 has an invalid length. [ 1058.461985][ T2859] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7107'. [ 1058.473265][ T2856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7110'. [ 1058.483551][ T2860] xt_NFQUEUE: number of total queues is 0 [ 1058.489822][ T2859] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7107'. [ 1058.502894][ T2856] netlink: 'syz.5.7110': attribute type 29 has an invalid length. [ 1058.512474][ T2856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7110'. [ 1058.519519][ T2829] lo speed is unknown, defaulting to 1000 [ 1058.528389][ T2856] netlink: 'syz.5.7110': attribute type 29 has an invalid length. [ 1058.536409][ T2856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7110'. [ 1058.567244][ T2856] netlink: 'syz.5.7110': attribute type 29 has an invalid length. [ 1058.584118][ T2856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7110'. [ 1058.601969][ T2856] netlink: 'syz.5.7110': attribute type 29 has an invalid length. [ 1058.611269][ T2856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7110'. [ 1058.682615][ T2856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7110'. [ 1058.838043][ T2871] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1058.868802][T28307] IPVS: starting estimator thread 0... [ 1058.951289][ T2877] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.967584][ T2873] IPVS: using max 26 ests per chain, 62400 per kthread [ 1058.986037][ T2877] bridge_slave_0 (unregistering): left allmulticast mode [ 1059.014194][ T2877] bridge_slave_0 (unregistering): left promiscuous mode [ 1059.036398][ T2877] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.145998][T16168] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1059.161735][T16168] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1059.176583][T16168] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1059.191986][T16168] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1059.200375][T16168] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1059.377599][ T2882] syzkaller1: entered promiscuous mode [ 1059.383431][ T2882] syzkaller1: entered allmulticast mode [ 1059.533546][ T2902] net_ratelimit: 56 callbacks suppressed [ 1059.533568][ T2902] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 1059.570691][ T2902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1059.631485][ T2904] syzkaller0: entered promiscuous mode [ 1059.643315][ T2904] syzkaller0: entered allmulticast mode [ 1059.669763][ T2902] bridge0: port 1(syz_tun) entered blocking state [ 1059.697958][ T2902] bridge0: port 1(syz_tun) entered disabled state [ 1060.026469][ T2917] validate_nla: 29 callbacks suppressed [ 1060.026492][ T2917] netlink: 'syz.7.7120': attribute type 7 has an invalid length. [ 1060.096606][ T2917] netlink: 'syz.7.7120': attribute type 7 has an invalid length. [ 1060.369342][ T2933] xt_cgroup: invalid path, errno=-2 [ 1060.530823][ T2935] netlink: 'syz.4.7124': attribute type 1 has an invalid length. [ 1060.635054][ T2881] lo speed is unknown, defaulting to 1000 [ 1060.892425][ T2881] lo speed is unknown, defaulting to 1000 [ 1061.049525][T28609] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1061.062102][T28609] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.278264][T16168] Bluetooth: hci8: command tx timeout [ 1061.417807][ T2961] openvswitch: netlink: nsh attribute has 16 unknown bytes. [ 1061.433220][T28609] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1061.444484][T28609] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.487322][ T2961] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1061.631170][ T2958] lo speed is unknown, defaulting to 1000 [ 1061.783327][T28609] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1061.795508][T28609] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.068601][T28609] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1062.102571][T28609] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.515301][ T2958] lo speed is unknown, defaulting to 1000 [ 1062.868264][ T3002] __nla_validate_parse: 32 callbacks suppressed [ 1062.868285][ T3002] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7138'. [ 1062.918398][ T3002] openvswitch: netlink: nsh attr 8 is out of range max 3 [ 1062.925563][ T3002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1062.979846][ T3004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7139'. [ 1063.360999][T16168] Bluetooth: hci8: command tx timeout [ 1063.454447][T28609] vlan2: left allmulticast mode [ 1063.483738][T28609] geneve0: left allmulticast mode [ 1063.509761][T28609] vlan2: left promiscuous mode [ 1063.532185][T28609] bridge0: port 1(vlan2) entered disabled state [ 1063.609195][T28609] dvmrp0: left allmulticast mode [ 1064.279123][T28609] geneve0 (unregistering): left promiscuous mode [ 1064.341834][T28609] bridge0 (unregistering): left promiscuous mode [ 1064.373917][T28609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1064.387939][T28609] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 1064.402830][T28609] bond0 (unregistering): Released all slaves [ 1064.417461][T28609] bond1 (unregistering): Released all slaves [ 1064.434082][T28609] bond2 (unregistering): Released all slaves [ 1064.454910][T28609] bond3 (unregistering): Released all slaves [ 1064.475109][T28609] bond4 (unregistering): Released all slaves [ 1064.498021][T28609] bond5 (unregistering): Released all slaves [ 1064.514101][ T2881] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.521595][ T2881] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.529501][ T2881] bridge_slave_0: entered allmulticast mode [ 1064.538974][ T2881] bridge_slave_0: entered promiscuous mode [ 1064.548204][ T2881] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.555457][ T2881] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.565692][ T2881] bridge_slave_1: entered allmulticast mode [ 1064.574438][ T2881] bridge_slave_1: entered promiscuous mode [ 1064.718545][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1064.749142][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1064.839335][T28609] tipc: Disabling bearer [ 1064.853713][T28609] tipc: Left network mode [ 1064.949158][ T3037] IPv6: addrconf: prefix option has invalid lifetime [ 1064.964924][T28609] IPVS: stopping master sync thread 23703 ... [ 1065.035756][ T2881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1065.050176][ T2881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1065.132717][ T3032] tipc: Enabled bearer , priority 0 [ 1065.396016][ T2881] team0: Port device team_slave_0 added [ 1065.423904][ T2881] team0: Port device team_slave_1 added [ 1065.437023][T16168] Bluetooth: hci8: command tx timeout [ 1065.589893][ T3053] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 1065.676191][ T2881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1065.685243][ T2881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1065.752469][ T2881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1065.829780][ T2881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1065.846064][ T2881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1065.874122][ T2881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1065.917103][ T3044] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7147'. [ 1066.191779][ T3065] netlink: 'syz.4.7152': attribute type 1 has an invalid length. [ 1066.339839][ T2881] hsr_slave_0: entered promiscuous mode [ 1066.365144][ T2881] hsr_slave_1: entered promiscuous mode [ 1066.394894][ T2881] debugfs: 'hsr0' already exists in 'hsr' [ 1066.408396][ T2881] Cannot create hsr debugfs directory [ 1066.540382][T28295] tipc: Node number set to 1112323414 [ 1066.873578][ T3098] tipc: Started in network mode [ 1066.879939][ T3096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1066.919550][ T3098] tipc: Node identity 5, cluster identity 4711 [ 1066.946454][ T3098] tipc: Node number set to 5 [ 1066.968714][ T3098] tipc: Cannot configure node identity twice [ 1067.386872][ T3062] syzkaller0: delete flow: hash 4253245095 index 2 [ 1067.517096][T16168] Bluetooth: hci8: command tx timeout [ 1072.666438][ T3100] syzkaller1: left promiscuous mode [ 1072.672166][ T3100] syzkaller1: left allmulticast mode [ 1072.681020][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1072.754948][T28609] hsr_slave_0: left promiscuous mode [ 1072.775097][T28609] hsr_slave_1: left promiscuous mode [ 1072.791806][T28609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1072.802379][T28609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1072.853037][T28609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1072.883745][T28609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1072.907225][ T3132] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7165'. [ 1072.917315][ T3132] netlink: 11 bytes leftover after parsing attributes in process `syz.6.7165'. [ 1072.951501][ T3131] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1072.971303][T28609] veth1_macvtap: left promiscuous mode [ 1072.981368][T28609] veth0_macvtap: left promiscuous mode [ 1072.988848][T28609] veth0_vlan: left promiscuous mode [ 1074.021813][ T3156] netlink: 92 bytes leftover after parsing attributes in process `syz.6.7172'. [ 1074.211048][ T3152] lo speed is unknown, defaulting to 1000 [ 1075.076655][ T3202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7179'. [ 1075.384715][ T3152] lo speed is unknown, defaulting to 1000 [ 1075.395542][T28609] IPVS: stop unused estimator thread 0... [ 1075.479394][ T3216] netlink: 'syz.5.7183': attribute type 1 has an invalid length. [ 1075.547252][ T3216] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1075.711988][ T3228] netlink: 'syz.7.7184': attribute type 10 has an invalid length. [ 1075.772031][ T3234] netlink: 'syz.7.7184': attribute type 10 has an invalid length. [ 1075.842870][ T3236] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1075.871209][ T3228] batman_adv: batadv0: Removing interface: dummy0 [ 1075.924835][ T3228] team0: Port device dummy0 added [ 1076.010096][ T3234] team0: Port device dummy0 removed [ 1076.044328][ T3234] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1076.074595][ T2881] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1076.121014][ T2881] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1076.149243][ T2881] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1076.177025][ T2881] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1076.274128][ T2881] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1076.289081][ T2881] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1076.302050][ T5296] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1076.320317][ T2881] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1076.361356][ T2881] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1076.513711][ T3265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7186'. [ 1076.991428][ T3276] xt_hashlimit: size too large, truncated to 1048576 [ 1077.069996][ T2881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1077.102524][ T3285] netlink: 'syz.7.7191': attribute type 11 has an invalid length. [ 1077.162762][ T3285] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7191'. [ 1077.253037][ T2881] 8021q: adding VLAN 0 to HW filter on device team0 [ 1077.311967][T11777] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.319252][T11777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1077.403801][T11777] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.411069][T11777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1077.982496][ T3314] netlink: 324 bytes leftover after parsing attributes in process `syz.5.7194'. [ 1078.033274][ T3314] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7194'. [ 1078.428463][ T3331] ip6tnl2: entered allmulticast mode [ 1078.451351][T11776] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1078.482705][T28300] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1078.490831][T11776] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1078.557857][T28300] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1078.583278][ T3342] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7198'. [ 1078.707141][ T5296] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1078.722467][ T3334] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1078.738383][ T3337] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1078.758267][ T3337] dvmrp1: linktype set to 804 [ 1079.197486][ T5750] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1079.798893][ T2881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1080.051163][ T3407] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7208'. [ 1080.080031][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1080.090217][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1080.174875][ T3409] netlink: 'syz.5.7209': attribute type 1 has an invalid length. [ 1080.200221][ T3409] netlink: 'syz.5.7209': attribute type 2 has an invalid length. [ 1080.250168][ T3409] netlink: 'syz.5.7209': attribute type 1 has an invalid length. [ 1080.270329][ T3409] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7209'. [ 1080.917786][ T2881] veth0_vlan: entered promiscuous mode [ 1080.960338][ T3440] netlink: 212344 bytes leftover after parsing attributes in process `syz.7.7215'. [ 1080.977915][ T2881] veth1_vlan: entered promiscuous mode [ 1081.103678][ T2881] veth0_macvtap: entered promiscuous mode [ 1081.143424][ T2881] veth1_macvtap: entered promiscuous mode [ 1081.250869][ T2881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1081.290063][ T2881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1081.333353][T28606] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.365505][T28606] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.406647][T28606] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.443088][T28606] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.628247][ T3453] block nbd0: reconnected socket [ 1081.661102][T16168] block nbd0: Receive control failed (result -32) [ 1081.964114][ T3458] lo speed is unknown, defaulting to 1000 [ 1081.986337][T11782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.026226][T11782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.131681][ T3464] netlink: 464 bytes leftover after parsing attributes in process `syz.5.7220'. [ 1082.173066][ T3464] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1082.797481][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1082.982841][ T3478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7219'. [ 1083.025005][T11777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.045839][T11777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.252621][ T3488] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7222'. [ 1083.286291][ T3458] lo speed is unknown, defaulting to 1000 [ 1083.304760][ T3488] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7222'. [ 1085.892659][ T3497] syzkaller1: entered promiscuous mode [ 1085.916197][ T3497] syzkaller1: entered allmulticast mode [ 1086.133554][ T3503] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1086.269445][ T3516] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 1086.293948][ T3516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1086.350850][ T3518] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1086.751952][ T3531] netlink: 'syz.8.7232': attribute type 1 has an invalid length. [ 1086.774662][ T3531] netlink: 224 bytes leftover after parsing attributes in process `syz.8.7232'. [ 1086.935908][ T3543] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7235'. [ 1091.597116][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1095.440276][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1105.396150][ T3651] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1105.408839][ T3651] bond2 (unregistering): Released all slaves [ 1105.509882][ T3653] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7237'. [ 1105.635162][ T3661] netlink: 'syz.8.7237': attribute type 5 has an invalid length. [ 1105.673059][ T3661] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7237'. [ 1105.747031][ T3668] netlink: 'syz.4.7243': attribute type 1 has an invalid length. [ 1106.094174][ T3681] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7248'. [ 1106.174517][ T3685] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7249'. [ 1106.310422][ T3693] netlink: 'syz.8.7252': attribute type 1 has an invalid length. [ 1106.333188][ T3693] netlink: 'syz.8.7252': attribute type 4 has an invalid length. [ 1106.347606][ T3693] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.7252'. [ 1106.385604][ T3694] 8021q: VLANs not supported on vxcan1 [ 1106.469811][ T3700] netlink: 'syz.8.7254': attribute type 1 has an invalid length. [ 1106.504585][ T3701] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7254'. [ 1106.534427][ T3701] batadv0: entered promiscuous mode [ 1106.565284][ T3701] batadv0: entered allmulticast mode [ 1106.580944][ T3698] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7253'. [ 1106.606077][ T3706] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7256'. [ 1106.621531][ T3698] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7253'. [ 1106.630941][ T3698] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7253'. [ 1106.667636][ T3701] batman_adv: batadv0: Adding interface: bridge1 [ 1106.674235][ T3701] batman_adv: batadv0: The MTU of interface bridge1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1106.703470][ T3701] batman_adv: batadv0: Not using interface bridge1 (retrying later): interface not active [ 1106.932915][ T3714] netlink: 'syz.8.7259': attribute type 1 has an invalid length. [ 1107.340206][ T3735] openvswitch: netlink: Key type 30 is not supported [ 1107.575392][ T3750] IPv6: NLM_F_CREATE should be specified when creating new route [ 1108.459338][ T3794] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1108.716667][ T3813] FAULT_INJECTION: forcing a failure. [ 1108.716667][ T3813] name failslab, interval 1, probability 0, space 0, times 0 [ 1108.745002][ T3813] CPU: 0 UID: 0 PID: 3813 Comm: syz.5.7285 Not tainted syzkaller #0 PREEMPT(full) [ 1108.745033][ T3813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1108.745047][ T3813] Call Trace: [ 1108.745057][ T3813] [ 1108.745067][ T3813] dump_stack_lvl+0xe8/0x150 [ 1108.745101][ T3813] should_fail_ex+0x412/0x560 [ 1108.745132][ T3813] should_failslab+0xa8/0x100 [ 1108.745156][ T3813] __kmalloc_noprof+0xe8/0x760 [ 1108.745187][ T3813] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1108.745218][ T3813] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1108.745241][ T3813] ? tomoyo_domain+0xd7/0x130 [ 1108.745268][ T3813] ? tomoyo_path_number_perm+0x219/0x630 [ 1108.745298][ T3813] tomoyo_path_number_perm+0x246/0x630 [ 1108.745340][ T3813] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1108.745368][ T3813] ? __lock_acquire+0x6b5/0x2cf0 [ 1108.745410][ T3813] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1108.745462][ T3813] ? __fget_files+0x2a/0x420 [ 1108.745493][ T3813] ? __fget_files+0x2a/0x420 [ 1108.745519][ T3813] ? __fget_files+0x3a0/0x420 [ 1108.745544][ T3813] ? __fget_files+0x2a/0x420 [ 1108.745575][ T3813] security_file_ioctl+0xc3/0x2a0 [ 1108.745606][ T3813] __se_sys_ioctl+0x47/0x170 [ 1108.745636][ T3813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.745657][ T3813] do_syscall_64+0x174/0x580 [ 1108.745675][ T3813] ? trace_irq_disable+0x3b/0x140 [ 1108.745701][ T3813] ? clear_bhb_loop+0x40/0x90 [ 1108.745723][ T3813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.745740][ T3813] RIP: 0033:0x7fb96a79ce59 [ 1108.745759][ T3813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1108.745774][ T3813] RSP: 002b:00007fb96b741028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1108.745794][ T3813] RAX: ffffffffffffffda RBX: 00007fb96aa15fa0 RCX: 00007fb96a79ce59 [ 1108.745807][ T3813] RDX: 0000200000000000 RSI: 00000000000089e3 RDI: 0000000000000004 [ 1108.745818][ T3813] RBP: 00007fb96b741090 R08: 0000000000000000 R09: 0000000000000000 [ 1108.745829][ T3813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1108.745841][ T3813] R13: 00007fb96aa16038 R14: 00007fb96aa15fa0 R15: 00007ffe35817478 [ 1108.745870][ T3813] [ 1108.745893][ T3813] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1108.882478][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1109.978842][ T3862] 8021q: VLANs not supported on ipvlan1 [ 1111.665257][ T3804] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1111.693413][ T3868] netlink: 'syz.4.7293': attribute type 1 has an invalid length. [ 1111.718251][ T3868] __nla_validate_parse: 10 callbacks suppressed [ 1111.718274][ T3868] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7293'. [ 1111.757602][ T3868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7293'. [ 1111.865394][ T3871] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7294'. [ 1111.902778][ T3874] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7295'. [ 1111.940819][ T3871] openvswitch: netlink: Message has 2 unknown bytes. [ 1111.953313][ T3879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7295'. [ 1112.017164][ T3879] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1112.045129][ T3879] bond11 (unregistering): Released all slaves [ 1112.665025][ T3909] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7305'. [ 1113.445393][ T3927] lo speed is unknown, defaulting to 1000 [ 1113.470357][ T3935] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7310'. [ 1113.522827][ T3930] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7311'. [ 1113.674253][ T3940] netlink: 68 bytes leftover after parsing attributes in process `syz.8.7313'. [ 1113.972085][ T3949] IPv6: addrconf: prefix option has invalid lifetime [ 1113.980963][ C1] IPv6: addrconf: prefix option has invalid lifetime [ 1114.040154][ T3951] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7315'. [ 1114.085352][ T3952] mac80211_hwsim hwsim86 wlan0: left promiscuous mode [ 1114.110701][ T3952] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1114.263738][ T3957] v: renamed from ip6tnl0 (while UP) [ 1114.375142][ T3927] lo speed is unknown, defaulting to 1000 [ 1114.812376][ T3985] bridge0: port 1(erspan0) entered blocking state [ 1114.835554][ T3985] bridge0: port 1(erspan0) entered disabled state [ 1114.848183][ T3985] erspan0: entered allmulticast mode [ 1114.862567][ T3985] erspan0: entered promiscuous mode [ 1114.870996][ T3985] bridge0: port 1(erspan0) entered blocking state [ 1114.877626][ T3985] bridge0: port 1(erspan0) entered forwarding state [ 1114.898591][ T3991] erspan0: left allmulticast mode [ 1114.908397][ T3991] erspan0: left promiscuous mode [ 1114.913684][ T3991] bridge0: port 1(erspan0) entered disabled state [ 1115.380602][ T4002] bond5: ARP target 9.0.0.0 is already present [ 1115.396113][ T4002] bond5: option arp_ip_target: invalid value (9) [ 1115.421465][ T4002] bond5 (unregistering): Released all slaves [ 1115.794012][ T4017] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1115.818365][ T4017] IPVS: length: 33 != 8 [ 1115.879931][ T4019] netlink: 'syz.7.7330': attribute type 11 has an invalid length. [ 1116.353397][ T4031] lo speed is unknown, defaulting to 1000 [ 1116.789781][ T4056] lo speed is unknown, defaulting to 1000 [ 1116.964803][ T4070] __nla_validate_parse: 7 callbacks suppressed [ 1116.964826][ T4070] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7342'. [ 1117.132227][ T4031] lo speed is unknown, defaulting to 1000 [ 1117.206416][ T4075] netlink: 'syz.4.7343': attribute type 3 has an invalid length. [ 1117.415318][ T4085] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7346'. [ 1117.449767][ T4084] netlink: 'syz.4.7345': attribute type 11 has an invalid length. [ 1117.627128][ T4088] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7347'. [ 1117.666253][ T4056] lo speed is unknown, defaulting to 1000 [ 1117.782403][ T4088] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1118.225228][ T4105] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7351'. [ 1118.295919][ T4107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7352'. [ 1118.426008][ T4110] syz.5.7353: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1118.510220][ T4110] CPU: 1 UID: 0 PID: 4110 Comm: syz.5.7353 Not tainted syzkaller #0 PREEMPT(full) [ 1118.510252][ T4110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1118.510268][ T4110] Call Trace: [ 1118.510278][ T4110] [ 1118.510288][ T4110] dump_stack_lvl+0xe8/0x150 [ 1118.510321][ T4110] warn_alloc+0x249/0x340 [ 1118.510357][ T4110] ? stack_trace_save+0xa9/0x100 [ 1118.510394][ T4110] ? __pfx_warn_alloc+0x10/0x10 [ 1118.510434][ T4110] ? kasan_save_track+0x4f/0x80 [ 1118.510463][ T4110] ? kasan_save_track+0x3e/0x80 [ 1118.510491][ T4110] ? __kasan_kmalloc+0x93/0xb0 [ 1118.510520][ T4110] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1118.510549][ T4110] ? xskq_create+0x56/0x170 [ 1118.510581][ T4110] ? xsk_setsockopt+0x54c/0x990 [ 1118.510608][ T4110] ? do_sock_setsockopt+0x17c/0x1b0 [ 1118.510632][ T4110] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1118.510663][ T4110] ? do_syscall_64+0x174/0x580 [ 1118.510690][ T4110] __vmalloc_node_range_noprof+0x132/0x1750 [ 1118.510761][ T4110] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1118.510801][ T4110] ? __kasan_kmalloc+0x93/0xb0 [ 1118.510839][ T4110] vmalloc_user_noprof+0xad/0xe0 [ 1118.510871][ T4110] ? xskq_create+0xbf/0x170 [ 1118.510903][ T4110] xskq_create+0xbf/0x170 [ 1118.510939][ T4110] xsk_init_queue+0x8a/0xe0 [ 1118.510973][ T4110] xsk_setsockopt+0x54c/0x990 [ 1118.511006][ T4110] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1118.511036][ T4110] ? __pfx_aa_sk_perm+0x10/0x10 [ 1118.511072][ T4110] ? aa_sock_opt_perm+0xff/0x1a0 [ 1118.511107][ T4110] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1118.511136][ T4110] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1118.511169][ T4110] do_sock_setsockopt+0x17c/0x1b0 [ 1118.511198][ T4110] __x64_sys_setsockopt+0x13d/0x1b0 [ 1118.511226][ T4110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.511250][ T4110] do_syscall_64+0x174/0x580 [ 1118.511271][ T4110] ? trace_irq_disable+0x3b/0x140 [ 1118.511302][ T4110] ? clear_bhb_loop+0x40/0x90 [ 1118.511328][ T4110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.511350][ T4110] RIP: 0033:0x7fb96a79ce59 [ 1118.511369][ T4110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1118.511394][ T4110] RSP: 002b:00007fb96b741028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1118.511418][ T4110] RAX: ffffffffffffffda RBX: 00007fb96aa15fa0 RCX: 00007fb96a79ce59 [ 1118.511435][ T4110] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1118.511448][ T4110] RBP: 00007fb96a832d6f R08: 0000000000000004 R09: 0000000000000000 [ 1118.511462][ T4110] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1118.511477][ T4110] R13: 00007fb96aa16038 R14: 00007fb96aa15fa0 R15: 00007ffe35817478 [ 1118.511514][ T4110] [ 1118.806103][ T4110] Mem-Info: [ 1118.809380][ T4110] active_anon:9845 inactive_anon:6 isolated_anon:0 [ 1118.809380][ T4110] active_file:3199 inactive_file:40928 isolated_file:0 [ 1118.809380][ T4110] unevictable:768 dirty:162 writeback:0 [ 1118.809380][ T4110] slab_reclaimable:15672 slab_unreclaimable:205023 [ 1118.809380][ T4110] mapped:49110 shmem:3831 pagetables:3731 [ 1118.809380][ T4110] sec_pagetables:0 bounce:0 [ 1118.809380][ T4110] kernel_misc_reclaimable:0 [ 1118.809380][ T4110] free:1151885 free_pcp:21589 free_cma:0 [ 1118.855192][ T4110] Node 0 active_anon:39380kB inactive_anon:24kB active_file:12796kB inactive_file:163504kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36696kB dirty:648kB writeback:0kB shmem:13788kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:21408kB pagetables:14780kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1118.890369][ T4110] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:161844kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1118.924516][ T4110] Node 0 DMA free:11232kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:16kB free_cma:0kB [ 1118.954839][ T4110] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1118.960806][ T4110] Node 0 DMA32 free:1177060kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39384kB inactive_anon:24kB active_file:12796kB inactive_file:163504kB unevictable:1536kB writepending:664kB zspages:0kB present:3129332kB managed:2552596kB mlocked:0kB bounce:0kB free_pcp:30236kB local_pcp:20672kB free_cma:0kB [ 1118.994430][ T4110] lowmem_reserve[]: 0 0 0 0 0 [ 1118.999365][ T4110] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1119.033117][ T4110] lowmem_reserve[]: 0 0 0 0 0 [ 1119.041753][ T4110] Node 1 Normal free:3419448kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:55832kB local_pcp:31956kB free_cma:0kB [ 1119.074316][ T4110] lowmem_reserve[]: 0 0 0 0 0 [ 1119.079288][ T4110] Node 0 DMA: 0*4kB 0*8kB 2*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11232kB [ 1119.113534][ T4110] Node 0 DMA32: 6368*4kB (UM) 7913*8kB (UME) 4938*16kB (UM) 338*32kB (UM) 117*64kB (UME) 616*128kB (UM) 928*256kB (UME) 537*512kB (UM) 284*1024kB (UE) 53*2048kB (UM) 0*4096kB = 1176808kB [ 1119.180508][ T4112] netlink: 'syz.5.7353': attribute type 10 has an invalid length. [ 1119.184811][ T4110] Node 0 [ 1119.213119][ T4112] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7353'. [ 1119.226153][ T4112] openvswitch: netlink: Message has 2 unknown bytes. [ 1119.234341][ T4112] netlink: 'syz.5.7353': attribute type 10 has an invalid length. [ 1119.235336][ T4110] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1119.317384][ T4110] Node 1 Normal: 6*4kB (U) 10*8kB (UM) 14*16kB (UM) 5*32kB (UM) 18*64kB (UM) 10*128kB (UM) 11*256kB (UM) 10*512kB (UM) 9*1024kB (UM) 8*2048kB (U) 826*4096kB (UM) = 3419752kB [ 1119.341438][ T4110] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1119.385464][ T4110] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1119.395859][ T4110] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1119.411303][ T4118] netlink: 72 bytes leftover after parsing attributes in process `syz.8.7355'. [ 1119.428519][ T4110] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1119.456860][ T4110] 46217 total pagecache pages [ 1119.472076][ T4110] 0 pages in swap cache [ 1119.486991][ T4110] Free swap = 124996kB [ 1119.494056][ T4122] netlink: 6 bytes leftover after parsing attributes in process `syz.4.7356'. [ 1119.498054][ T4110] Total swap = 124996kB [ 1119.527310][ T4110] 2097051 pages RAM [ 1119.537584][ T4110] 0 pages HighMem/MovableOnly [ 1119.550538][ T4110] 427119 pages reserved [ 1119.560775][ T4110] 0 pages cma reserved [ 1119.980876][ T4140] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1120.275857][ T4158] netlink: 6 bytes leftover after parsing attributes in process `syz.4.7368'. [ 1125.903695][ T4163] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7369'. [ 1125.914706][ T4160] lo: Caught tx_queue_len zero misconfig [ 1126.222344][ T4200] syzkaller0: entered promiscuous mode [ 1126.249822][ T4200] syzkaller0: entered allmulticast mode [ 1126.283351][ T4207] netlink: 6 bytes leftover after parsing attributes in process `syz.5.7380'. [ 1126.420729][ T4205] syzkaller0: entered promiscuous mode [ 1126.427335][ T4205] syzkaller0: entered allmulticast mode [ 1126.572315][ T4217] xt_hashlimit: size too large, truncated to 1048576 [ 1126.778487][ T4221] xt_hashlimit: size too large, truncated to 1048576 [ 1126.844273][ T4221] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1126.880634][ T4231] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7386'. [ 1126.900751][ T4231] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7386'. [ 1127.306093][ T4242] syzkaller0: entered allmulticast mode [ 1127.636652][ T4247] netlink: 6 bytes leftover after parsing attributes in process `syz.6.7393'. [ 1127.860583][ T4254] netdevsim netdevsim6: Firmware load for './file0/file0/..' refused, path contains '..' component [ 1128.238035][T16168] Bluetooth: hci7: command 0x0406 tx timeout [ 1128.485802][ T4279] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1128.616225][ T4251] netlink: 84 bytes leftover after parsing attributes in process `syz.5.7395'. [ 1129.249845][ T4288] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1129.308288][ T4295] syzkaller0: entered promiscuous mode [ 1129.323963][ T4295] syzkaller0: entered allmulticast mode [ 1129.715317][ T4311] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7408'. [ 1129.786581][ T4311] netlink: 88 bytes leftover after parsing attributes in process `syz.7.7408'. [ 1130.893795][ T4364] netlink: 'syz.5.7424': attribute type 1 has an invalid length. [ 1130.912108][ T4364] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7424'. [ 1130.931913][ T4364] netlink: 'syz.5.7424': attribute type 1 has an invalid length. [ 1130.949057][ T4364] netlink: 'syz.5.7424': attribute type 8 has an invalid length. [ 1130.970716][ T4364] netlink: 582 bytes leftover after parsing attributes in process `syz.5.7424'. [ 1130.991807][ T4364] netlink: 1 bytes leftover after parsing attributes in process `syz.5.7424'. [ 1131.094680][ T4369] netlink: 'syz.7.7426': attribute type 11 has an invalid length. [ 1131.389654][ T4385] syz_tun: entered allmulticast mode [ 1131.444862][ T4391] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7433'. [ 1131.581308][ T4391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7433'. [ 1131.816962][ T4406] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7437'. [ 1131.829147][ T4404] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7436'. [ 1131.945760][ T4406] syz_tun (unregistering): left allmulticast mode [ 1132.245377][ T4421] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7441'. [ 1132.571869][ T4406] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.7437'. [ 1132.684971][ T4427] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7443'. [ 1132.802061][ T4429] netlink: 'syz.5.7444': attribute type 11 has an invalid length. [ 1133.313746][ T4452] xt_hashlimit: size too large, truncated to 1048576 [ 1133.813738][ T4463] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1133.831649][ T4463] bond11: (slave bond12): Enslaving as an active interface with an up link [ 1133.850076][ T4475] netlink: 'syz.8.7452': attribute type 1 has an invalid length. [ 1133.866236][ T4467] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 1134.032454][ T4475] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1134.041513][ T4481] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 1135.039015][T28291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.464159][ T4505] netlink: 'syz.4.7458': attribute type 11 has an invalid length. [ 1135.677507][T28300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.811076][ T4514] veth5: entered promiscuous mode [ 1136.099086][T18867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.466059][T18867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.651017][ T4476] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1137.090732][ T4535] lo speed is unknown, defaulting to 1000 [ 1137.145649][T28291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.242245][ T4548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.301564][ T4548] netlink: 'syz.8.7469': attribute type 11 has an invalid length. [ 1137.636217][ T4562] nbd: nbd7 already in use [ 1137.655035][ T4562] block nbd0: NBD_DISCONNECT [ 1137.671812][ T4562] block nbd0: Send disconnect failed -32 [ 1137.690032][ T4562] block nbd0: Send disconnect failed -32 [ 1137.724551][ T4562] block nbd0: Send disconnect failed -32 [ 1137.739004][ T4566] syz_tun: left allmulticast mode [ 1137.750463][ T4562] block nbd0: shutting down sockets [ 1138.071511][ T4577] netlink: 'syz.6.7478': attribute type 2 has an invalid length. [ 1138.080646][ T3751] vlan0: left allmulticast mode [ 1138.080725][ T3751] veth0_vlan: left allmulticast mode [ 1138.118365][ T3751] bridge4: port 1(vlan0) entered disabled state [ 1138.157578][T28291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.170430][ T3751] pimreg9: left allmulticast mode [ 1138.695235][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.717386][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.763517][ T4595] netlink: 'syz.8.7482': attribute type 11 has an invalid length. [ 1138.958605][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.141072][ T3751] team0: Port device geneve1 removed [ 1139.284401][ T3751] bond0 (unregistering): Released all slaves [ 1139.297971][ T3751] bond1 (unregistering): Released all slaves [ 1139.314547][ T4611] __nla_validate_parse: 3 callbacks suppressed [ 1139.314568][ T4611] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7487'. [ 1139.373079][ T3751] bond2 (unregistering): Released all slaves [ 1139.400236][ T3751] bond3 (unregistering): Released all slaves [ 1139.446572][ T3751] bond4 (unregistering): Released all slaves [ 1139.465064][ T3751] bond5 (unregistering): Released all slaves [ 1139.483920][ T3751] bond6 (unregistering): Released all slaves [ 1139.504247][ T3751] bond7 (unregistering): Released all slaves [ 1139.531417][ T4573] netlink: 288 bytes leftover after parsing attributes in process `syz.5.7476'. [ 1139.542132][ T4572] netlink: 288 bytes leftover after parsing attributes in process `syz.5.7476'. [ 1139.551783][ T4535] lo speed is unknown, defaulting to 1000 [ 1139.567846][ T4585] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1139.599568][ T4585] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1139.637801][ T4585] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1139.915047][ T4622] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7490'. [ 1140.178769][ T3751] : left promiscuous mode [ 1140.238958][ T5750] net_ratelimit: 1 callbacks suppressed [ 1140.238979][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.252826][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.386978][ T3751] tipc: Disabling bearer [ 1140.415887][ T3751] tipc: Left network mode [ 1140.478120][ T4638] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7494'. [ 1140.916636][T11773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.939875][T11776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.278413][T28291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.899474][ T4678] netlink: 'syz.5.7503': attribute type 39 has an invalid length. [ 1142.318915][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.918473][T18867] lo speed is unknown, defaulting to 1000 [ 1142.928647][T18867] syz2: Port: 1 Link DOWN [ 1142.948420][T11776] smbdirect: ib_dev[syz2] removed [ 1143.277676][T28300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.330018][ T3751] IPVS: stop unused estimator thread 0... [ 1143.358144][T28291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.437186][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1143.449454][T28291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.999167][ T4647] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1144.276641][ T4692] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7506'. [ 1144.288950][ T4698] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7509'. [ 1144.320596][ T4692] netlink: 'syz.4.7506': attribute type 1 has an invalid length. [ 1144.325187][ T4698] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7509'. [ 1144.357544][ T4698] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7509'. [ 1144.390859][ T4698] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7509'. [ 1144.400969][T28291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.478371][ T4692] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1145.304080][ T4739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7518'. [ 1145.437131][T28291] net_ratelimit: 1 callbacks suppressed [ 1145.437151][T28291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.485382][ T4749] netlink: 'syz.4.7521': attribute type 2 has an invalid length. [ 1145.556508][ T4749] syzkaller1: entered promiscuous mode [ 1145.587308][ T4749] syzkaller1: entered allmulticast mode [ 1145.608284][ T4749] netlink: 'syz.4.7521': attribute type 1 has an invalid length. [ 1145.698889][ T4756] netlink: 'syz.4.7521': attribute type 1 has an invalid length. [ 1145.876439][ T4765] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7526'. [ 1145.912404][ T4763] xt_hashlimit: size too large, truncated to 1048576 [ 1145.928722][ T4765] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7526'. [ 1145.986819][ T4766] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7522'. [ 1146.004401][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.045361][ T4768] netlink: 'syz.7.7522': attribute type 12 has an invalid length. [ 1146.320071][T28295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.423120][ T4782] xt_cgroup: xt_cgroup: no path or classid specified [ 1146.477460][T28291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.649499][ T3751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.657724][ T3751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.109367][ T4800] ipvlan0: left promiscuous mode [ 1147.527482][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.765542][ T4822] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7536'. [ 1148.087274][ T4830] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7539'. [ 1148.557977][T28291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.559727][ T30] INFO: task syz.0.6586:725 blocked for more than 143 seconds. [ 1148.574961][T28295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.606211][ T30] Not tainted syzkaller #0 [ 1148.625777][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1148.638281][ T30] task:syz.0.6586 state:D stack:27168 pid:725 tgid:723 ppid:29665 task_flags:0x400040 flags:0x00080002 [ 1148.660722][ T30] Call Trace: [ 1148.668727][ T30] [ 1148.674096][ T30] __schedule+0x1821/0x5740 [ 1148.682484][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1148.693658][ T30] ? __pfx___schedule+0x10/0x10 [ 1148.704000][ T30] ? schedule+0x90/0x360 [ 1148.713376][ T30] schedule+0x164/0x360 [ 1148.723172][ T30] schedule_preempt_disabled+0x13/0x30 [ 1148.734665][ T30] __mutex_lock+0x7f7/0x1550 [ 1148.745889][ T30] ? __mutex_lock+0x608/0x1550 [ 1148.756883][ T30] ? nfsd_nl_version_get_doit+0x181/0xcd0 [ 1148.771548][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1148.782951][ T30] ? __nlmsg_put+0xef/0x1b0 [ 1148.793534][ T30] ? genlmsg_put+0x137/0x2e0 [ 1148.805822][ T30] nfsd_nl_version_get_doit+0x181/0xcd0 [ 1148.820837][ T30] ? __nla_parse+0x40/0x60 [ 1148.825812][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1148.839915][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1148.853976][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1148.869014][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 1148.885431][ T30] ? __asan_memcpy+0x40/0x70 [ 1148.897692][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1148.912459][ T30] genl_rcv_msg+0x61c/0x7a0 [ 1148.925066][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1148.938005][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1148.961438][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 1148.971777][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1148.979766][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1148.985125][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1148.993369][ T30] ? down_read+0x270/0x2e0 [ 1148.998460][ T30] ? genl_rcv+0xd/0x40 [ 1149.002951][ T30] genl_rcv+0x28/0x40 [ 1149.007637][ T30] netlink_unicast+0x75c/0x8e0 [ 1149.012612][ T30] netlink_sendmsg+0x813/0xb40 [ 1149.019753][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1149.025291][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1149.031525][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1149.043488][ T30] ____sys_sendmsg+0x972/0x9f0 [ 1149.048854][ T30] ? __might_fault+0xaf/0x130 [ 1149.053912][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1149.060060][ T30] ? import_iovec+0x73/0xa0 [ 1149.064906][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1149.081078][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1149.092686][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1149.100551][ T30] ? futex_wait+0x2a2/0x390 [ 1149.105207][ T30] ? __fget_files+0x2a/0x420 [ 1149.110356][ T30] ? __fget_files+0x3a0/0x420 [ 1149.115208][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1149.124053][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1149.130924][ T30] ? rcu_is_watching+0x15/0xb0 [ 1149.135793][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.143844][ T30] do_syscall_64+0x174/0x580 [ 1149.149278][ T30] ? trace_irq_disable+0x3b/0x140 [ 1149.154477][ T30] ? clear_bhb_loop+0x40/0x90 [ 1149.160360][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.169531][ T30] RIP: 0033:0x7f532b59ce59 [ 1149.174052][ T30] RSP: 002b:00007f53297f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1149.185726][ T30] RAX: ffffffffffffffda RBX: 00007f532b815fa0 RCX: 00007f532b59ce59 [ 1149.195550][ T30] RDX: 0000000000008840 RSI: 0000200000000100 RDI: 0000000000000003 [ 1149.222181][ T30] RBP: 00007f532b632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1149.230400][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1149.240535][ T30] R13: 00007f532b816038 R14: 00007f532b815fa0 R15: 00007ffff788e398 [ 1149.250746][ T30] [ 1149.254317][ T30] [ 1149.254317][ T30] Showing all locks held in the system: [ 1149.272804][ T30] 2 locks held by ksoftirqd/0/15: [ 1149.285115][ T30] 1 lock held by khungtaskd/30: [ 1149.290314][ T30] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1149.301372][ T30] 2 locks held by getty/5390: [ 1149.309538][ T30] #0: ffff8880366d80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1149.345442][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1149.366226][T28295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.377014][ T30] 2 locks held by syz.3.6219/31716: [ 1149.388102][ T30] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1149.407436][ T30] #1: ffffffff8ec8b1c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 1149.428207][ T30] 2 locks held by syz.0.6586/725: [ 1149.443216][ T30] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1149.463243][ T30] #1: ffffffff8ec8b1c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x181/0xcd0 [ 1149.487386][ T30] 2 locks held by syz.1.6991/2308: [ 1149.497109][ T30] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1149.518775][ T30] #1: ffffffff8ec8b1c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 1149.538435][ T30] 4 locks held by kworker/u8:13/3751: [ 1149.554112][ T30] #0: ffff8880b873aee0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1149.574603][ T30] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1149.584242][ T30] #2: ffff8880b8726118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 1149.596331][ T30] #3: ffffffff9a74f7d0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 1149.621452][ T30] 1 lock held by syz.8.7511/4708: [ 1149.626642][ T30] 4 locks held by syz.5.7543/4843: [ 1149.632524][ T30] #0: ffff8880a86352c0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1149.643221][ T30] #1: ffffffff8fe37348 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 1149.655700][ T30] #2: ffff88804fbbf0d0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x13d/0xe00 [ 1149.669524][ T30] #3: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1149.682098][ T30] [ 1149.684578][ T30] ============================================= [ 1149.684578][ T30] [ 1149.695290][ T30] NMI backtrace for cpu 1 [ 1149.695313][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1149.695337][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1149.695350][ T30] Call Trace: [ 1149.695359][ T30] [ 1149.695369][ T30] dump_stack_lvl+0xe8/0x150 [ 1149.695400][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1149.695526][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1149.695553][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1149.695591][ T30] sys_info+0x135/0x170 [ 1149.695617][ T30] watchdog+0xfd3/0x1030 [ 1149.695656][ T30] ? watchdog+0x1c9/0x1030 [ 1149.695695][ T30] kthread+0x389/0x470 [ 1149.695723][ T30] ? __pfx_watchdog+0x10/0x10 [ 1149.695751][ T30] ? __pfx_kthread+0x10/0x10 [ 1149.695779][ T30] ret_from_fork+0x514/0xb70 [ 1149.695805][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1149.695828][ T30] ? __switch_to+0xc79/0x1410 [ 1149.695861][ T30] ? __pfx_kthread+0x10/0x10 [ 1149.695888][ T30] ret_from_fork_asm+0x1a/0x30 [ 1149.695932][ T30] [ 1149.695952][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1149.814651][ C0] NMI backtrace for cpu 0 [ 1149.814671][ C0] CPU: 0 UID: 0 PID: 4708 Comm: syz.8.7511 Not tainted syzkaller #0 PREEMPT(full) [ 1149.814692][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1149.814704][ C0] RIP: 0010:trace_irq_disable+0x34/0x140 [ 1149.814743][ C0] Code: 8b 05 34 6b 6b 11 83 f8 08 73 37 89 c3 c1 e8 06 48 8d 3c c5 f0 89 30 90 be 08 00 00 00 e8 34 2a 63 00 48 0f a3 1d cc a4 62 0e <73> 09 e8 c5 e7 dc ff 84 c0 74 13 5b 41 5c 41 5e 41 5f c3 cc cc cc [ 1149.814759][ C0] RSP: 0018:ffffc900049bf600 EFLAGS: 00000057 [ 1149.814776][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff81cde51c [ 1149.814788][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff903089f0 [ 1149.814800][ C0] RBP: 1ffff1100b0de0f5 R08: ffffffff903089f7 R09: 1ffffffff206113e [ 1149.814813][ C0] R10: dffffc0000000000 R11: fffffbfff206113f R12: dffffc0000000000 [ 1149.814826][ C0] R13: 1ffff1100b0de0f5 R14: ffff8880586f0740 R15: ffff8880586f0728 [ 1149.814840][ C0] FS: 00007f1b419256c0(0000) GS:ffff88812528b000(0000) knlGS:0000000000000000 [ 1149.814855][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1149.814874][ C0] CR2: 0000200000cd9030 CR3: 000000005dcec000 CR4: 00000000003526f0 [ 1149.814890][ C0] Call Trace: [ 1149.814898][ C0] [ 1149.814908][ C0] _raw_spin_lock_irqsave+0x1a/0x60 [ 1149.814939][ C0] __skb_try_recv_datagram+0x14a/0x4d0 [ 1149.814966][ C0] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 1149.814998][ C0] skb_recv_datagram+0xbe/0x190 [ 1149.815023][ C0] qrtr_recvmsg+0x13c/0x980 [ 1149.815117][ C0] ? __pfx_qrtr_recvmsg+0x10/0x10 [ 1149.815136][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1149.815158][ C0] ? kasan_check_range+0x9d/0x2c0 [ 1149.815176][ C0] ? __pfx_qrtr_recvmsg+0x10/0x10 [ 1149.815197][ C0] sock_recvmsg_nosec+0x10c/0x140 [ 1149.815250][ C0] ____sys_recvmsg+0x3e3/0x4a0 [ 1149.815270][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1149.815294][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1149.815324][ C0] ? import_iovec+0x73/0xa0 [ 1149.815348][ C0] ___sys_recvmsg+0x215/0x590 [ 1149.815373][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 1149.815416][ C0] do_recvmmsg+0x334/0x800 [ 1149.815442][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 1149.815461][ C0] ? file_init_path+0x3b/0x590 [ 1149.815489][ C0] ? __pfx_do_futex+0x10/0x10 [ 1149.815510][ C0] ? fd_install+0x94/0x3d0 [ 1149.815539][ C0] __x64_sys_recvmmsg+0x198/0x250 [ 1149.815562][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1149.815588][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.815608][ C0] do_syscall_64+0x174/0x580 [ 1149.815627][ C0] ? trace_irq_disable+0x3b/0x140 [ 1149.815652][ C0] ? clear_bhb_loop+0x40/0x90 [ 1149.815672][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.815690][ C0] RIP: 0033:0x7f1b4099ce59 [ 1149.815706][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1149.815721][ C0] RSP: 002b:00007f1b41925028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1149.815739][ C0] RAX: ffffffffffffffda RBX: 00007f1b40c15fa0 RCX: 00007f1b4099ce59 [ 1149.815752][ C0] RDX: 00000000040002e9 RSI: 0000200000000900 RDI: 0000000000000004 [ 1149.815764][ C0] RBP: 00007f1b40a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1149.815776][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1149.815786][ C0] R13: 00007f1b40c16038 R14: 00007f1b40c15fa0 R15: 00007ffe5ff8fe58 [ 1149.815810][ C0] [ 1150.259013][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1150.265959][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1150.275110][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1150.285201][ T30] Call Trace: [ 1150.288508][ T30] [ 1150.291474][ T30] vpanic+0x56c/0xa60 [ 1150.295498][ T30] ? __pfx___schedule+0x10/0x10 [ 1150.300409][ T30] ? __pfx_vpanic+0x10/0x10 [ 1150.304962][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1150.311185][ T30] panic+0xc5/0xd0 [ 1150.314939][ T30] ? __pfx_panic+0x10/0x10 [ 1150.319391][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1150.324824][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1150.331073][ T30] watchdog+0x102c/0x1030 [ 1150.335472][ T30] ? watchdog+0x1c9/0x1030 [ 1150.339941][ T30] kthread+0x389/0x470 [ 1150.344061][ T30] ? __pfx_watchdog+0x10/0x10 [ 1150.348785][ T30] ? __pfx_kthread+0x10/0x10 [ 1150.353421][ T30] ret_from_fork+0x514/0xb70 [ 1150.358052][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1150.363205][ T30] ? __switch_to+0xc79/0x1410 [ 1150.367932][ T30] ? __pfx_kthread+0x10/0x10 [ 1150.372560][ T30] ret_from_fork_asm+0x1a/0x30 [ 1150.377377][ T30] [ 1150.381048][ T30] Kernel Offset: disabled [ 1150.385400][ T30] Rebooting in 86400 seconds..