last executing test programs: 3m55.098012897s ago: executing program 0 (id=4222): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x80002}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0500000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="ffebbfeb358bba9675d768196a5059b96d0000040000000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040001018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000365c00000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(0xca, &(0x7f0000000000)="040e", 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x40) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r0, @ANYBLOB="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", @ANYRES16, @ANYRESDEC=r4], 0x38}, 0x1, 0x0, 0x0, 0x40081}, 0x0) 3m54.914174119s ago: executing program 0 (id=4225): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x7, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000001600), &(0x7f0000000100)=""/218}, 0x20) (async) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r5, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000000), &(0x7f0000000100)='%-010d \x00'}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r7, @ANYBLOB="0600eb00000800000400ec000a0006"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x28000) (async, rerun: 32) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000ac0)=@newtclass={0x14e4, 0x28, 0x8, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0x0, 0xffe0}, {0x4, 0x9}}, [@tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}, @tclass_kind_options=@c_htb={{0x8}, {0x1478, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x8, 0x2, 0x1ff, 0x8, 0x9, 0x5}, {0x1, 0x1, 0x7, 0xfb34, 0x0, 0x6}, 0x8001, 0x3, 0x3, 0x2}}, @TCA_HTB_CEIL64={0xc, 0x7, 0x3}, @TCA_HTB_CTAB={0x404, 0x3, [0x6, 0x3ff, 0x9, 0x4, 0x18000, 0x9, 0x40, 0xc63, 0x0, 0x7fffffff, 0x3, 0x4, 0x4, 0x1000, 0x0, 0x8, 0x7fff, 0x8, 0x10001, 0x2, 0x1b78, 0x9b, 0x4, 0x3, 0x34, 0x0, 0x7, 0x3, 0x1, 0x7, 0x401, 0x6, 0x10001, 0x4, 0xfffffff8, 0x9, 0x7f, 0x0, 0x8, 0x80000000, 0x40, 0xf29, 0x2, 0x100, 0x7382d14c, 0x1, 0x1829, 0x1ff, 0xd, 0xf9e, 0xabf, 0x10000, 0xb8, 0x5, 0x8, 0x80, 0x3, 0x7, 0x7fffffff, 0x4, 0x7ff, 0x1, 0x6, 0x2, 0x2, 0x2, 0x8000, 0x6, 0x263, 0x5, 0x6, 0xc77c, 0xffffffff, 0x2, 0xe, 0xd, 0x8, 0x7, 0x401, 0x8, 0x3, 0x3, 0x0, 0x0, 0x6, 0x2, 0x3, 0x4, 0x465, 0x7, 0x6, 0x7f, 0x4, 0x5, 0xd91d, 0xb3, 0x1, 0x7, 0x5, 0xffffff1f, 0x9, 0x0, 0x160, 0xa, 0x101, 0xceb0f6c0, 0x4, 0x7, 0x2, 0x4, 0xe, 0xffff, 0x7, 0x7, 0x6, 0x0, 0xfffffffd, 0x1, 0xfffffffd, 0x5, 0x1ff, 0x2, 0x8, 0x0, 0x7, 0x5, 0x0, 0x8000, 0x0, 0x7, 0x3, 0x8, 0x9, 0xd0, 0x6, 0x3ff, 0x0, 0x5, 0x7, 0x2, 0xffffffff, 0x200, 0x8000, 0x3, 0x1, 0x9, 0x5, 0x9, 0xffffffff, 0xffffffff, 0x9c2, 0x7fffffff, 0x7, 0x7ff, 0x6, 0x4d2, 0x7, 0xfffffff9, 0x2, 0x6, 0x2be, 0xeef, 0x1, 0xffff63ea, 0x8, 0x15, 0x8, 0x3, 0x9, 0x40, 0x2, 0x3, 0x0, 0xfffffffa, 0xffff, 0x187d, 0x7, 0x5, 0x2, 0x5, 0x10001, 0xffff8799, 0xf, 0x2, 0x0, 0xb, 0x5, 0x6, 0x401, 0xfff, 0x4, 0x3e, 0x65f, 0x2, 0xfffffffa, 0xbc, 0xfff, 0x3, 0x10, 0x6, 0x8, 0x9, 0x7, 0x3a, 0x7, 0xd, 0x660, 0x2507, 0x8, 0xc74a, 0xed8, 0x40, 0x2, 0x8, 0x6, 0x7, 0x3, 0x2, 0xff, 0x2, 0x6, 0x80000000, 0xfffffffd, 0x3, 0x2, 0xffff, 0x2, 0x7, 0x15a78f4, 0x7, 0x8, 0x10001, 0x7, 0x7, 0xf, 0x0, 0x5, 0x6, 0x3, 0x2, 0x4, 0x6, 0x30c6, 0x9, 0x8, 0xfffffff3, 0x7ff, 0x5, 0x4, 0x2, 0x5, 0xa, 0x1f94, 0x930, 0x7, 0xfbc6]}, @TCA_HTB_RTAB={0x404, 0x4, [0x29c, 0x4, 0x0, 0x9, 0x0, 0x2, 0x6, 0x80000, 0x3, 0x3, 0x10000, 0x7, 0x7, 0x9, 0x8, 0xb, 0x2, 0x81, 0x9, 0x101, 0x9, 0x91fe, 0x9, 0x8, 0x0, 0x401, 0x7, 0x10001, 0x9, 0x3, 0x56a587ec, 0x4, 0x6, 0xff, 0xffffff00, 0x5, 0x4edf, 0x70d, 0x5, 0x101, 0x7fff, 0x9, 0x4, 0x10000, 0xfff, 0x1, 0x99, 0x7, 0x1, 0x80000001, 0x0, 0x7f, 0x4, 0x3, 0x80, 0x3, 0x5, 0x9, 0x7, 0x9, 0x3, 0x7, 0x7, 0x1, 0x3, 0xf52, 0x8001, 0xd99, 0x4, 0x3, 0x76d, 0x7, 0xe70, 0x735f, 0x1f1, 0x7, 0x0, 0x9, 0x3ff, 0x3, 0x7, 0x254, 0x9, 0x1, 0x6d, 0xdb1, 0xaa7, 0x400, 0x4, 0x0, 0x4, 0xfffff96d, 0x2, 0x8, 0x2, 0x8, 0xfffffff7, 0x80, 0xb, 0xe00, 0x7, 0x800, 0x3ff, 0x7a, 0x9, 0x10001, 0x10, 0x8, 0xb, 0x3000000, 0x4, 0x2, 0x5, 0x6, 0x9, 0x5, 0x7, 0x7, 0x2, 0x5, 0x10001, 0x4d0612ea, 0x6, 0x1, 0x5d9, 0x9, 0xd, 0x4, 0x100, 0xffff3621, 0x6d25, 0x1, 0x4, 0x2, 0x7, 0xffffffff, 0x10000, 0xb, 0x3, 0xd310, 0x9, 0x80000000, 0x0, 0x9, 0x0, 0x9, 0x401, 0x0, 0x8, 0x3, 0x80, 0x3, 0x8, 0x3, 0x0, 0x7fff0, 0x200, 0x4, 0x100, 0x3, 0x12f4, 0x40, 0xa9, 0x2, 0x10001, 0x9, 0x1, 0x6, 0xc25e, 0x400, 0xb3bb, 0x1, 0x9, 0x2, 0x9, 0x4, 0x1, 0xe, 0x800, 0x38b, 0x3, 0x837f, 0x9, 0x1, 0x8, 0x7, 0x200, 0x61c6, 0x5, 0x5, 0xfffffffd, 0x101, 0xfff, 0x1, 0x7, 0x40, 0x80, 0x0, 0x0, 0x3, 0x8, 0x2, 0x1, 0x20004, 0x12, 0xc47, 0x9, 0x231, 0x9, 0x3, 0xd, 0x1, 0x7, 0x6, 0x3, 0x8, 0x4, 0x0, 0xe17, 0x200, 0x0, 0xd8, 0x59d, 0xf, 0x1000, 0x1, 0xfff, 0x3, 0x0, 0x7, 0x6, 0x2, 0x5, 0x6, 0x7e, 0x49bac6b5, 0xb875, 0x2, 0x6, 0x6, 0x80, 0x279f, 0x2, 0x2, 0x0, 0x80000000, 0x1ff, 0x31, 0xc75, 0x4, 0x0, 0x1, 0x1, 0x5295, 0xde6, 0x95e]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x200}, @TCA_HTB_RTAB={0x404, 0x4, [0x3, 0x8, 0x8, 0x2, 0x4, 0xa572, 0xfffffffb, 0x1, 0x0, 0x1ee80, 0x5, 0x7fffffff, 0xb3, 0x89, 0x7fff, 0x800, 0x1, 0x7, 0xc, 0x1ff, 0x65cbb866, 0xb, 0x4, 0xc0000, 0xff, 0x4, 0x5, 0x0, 0x400, 0x0, 0x3, 0xe7e, 0x401, 0xa, 0x9c, 0x0, 0xab96611, 0x8, 0x2, 0xb, 0x2, 0x0, 0x3, 0x3, 0x7, 0xd, 0x61, 0x0, 0xb, 0xd3e7, 0x1, 0x3fffc000, 0x1000, 0x7ff, 0x100, 0x9, 0x3, 0x2, 0xc811, 0x7, 0x190, 0x8, 0x3, 0x591f, 0xa, 0x8, 0xdf5f, 0x6, 0x9, 0x8001, 0x4, 0x1ff, 0x7, 0xfffffffe, 0xc4ff, 0x3, 0x0, 0x4, 0x7cba2e2e, 0x3, 0x6, 0x401, 0x80, 0x0, 0x8000, 0x0, 0xf0, 0x1, 0x0, 0xc8b, 0xf, 0xfffffffb, 0xb34, 0x8, 0x3b6, 0x3, 0x0, 0x0, 0xd6, 0x4, 0x7, 0x80000001, 0x4, 0x9, 0x2, 0x3, 0x4f4, 0x8, 0x0, 0x8, 0x80000001, 0xff, 0x1e, 0x31, 0xf, 0x4bf, 0x81, 0x8, 0x1, 0x0, 0xfffffff7, 0x0, 0x4, 0x5, 0x100000, 0x5, 0x101, 0x7, 0x1d5e, 0x2, 0x685b, 0x9, 0x80000001, 0x5, 0x23e80, 0x2, 0x8001, 0x1fa, 0x0, 0x1e7c, 0x5, 0x6, 0x80000000, 0x5, 0x8, 0xffff0000, 0x3227, 0x8, 0xff, 0x5, 0x1b86a08a, 0x7ff, 0x6, 0x0, 0x1, 0x9, 0x0, 0x6, 0x8, 0x1, 0x4, 0x6, 0x166, 0x3434, 0x3, 0xfffffff9, 0x6, 0x2, 0x10, 0x6, 0x5, 0x3, 0x8, 0xe59, 0xffffff00, 0x2, 0x3, 0x43dc, 0x6, 0x4f7, 0x7fffffff, 0x4, 0x4, 0xffffffff, 0x7, 0x3, 0x3, 0x10001, 0x0, 0xc7, 0x800, 0xc, 0x8, 0xc03, 0x98e, 0x2, 0x111110b0, 0x4, 0x5, 0x6, 0x2a38, 0x81, 0x6, 0x2, 0x7, 0x2, 0x1, 0xbb9e, 0x1ff, 0x6, 0xe, 0x0, 0x5, 0xe, 0x50c, 0x800, 0x1, 0x3, 0x1, 0x43, 0x5, 0x8, 0x4, 0x4, 0x2, 0x200, 0x4, 0x48, 0x7, 0x4, 0x3, 0x7f, 0x6, 0x3, 0x3d, 0x6b7b, 0x1, 0x9, 0x100, 0x7, 0xd8, 0x2, 0x42a68118, 0x7, 0x6de2, 0x38, 0x6, 0x5, 0x2, 0x3, 0x8000, 0xa, 0x7fffffff, 0x4, 0x1, 0x4]}, @TCA_HTB_RTAB={0x404, 0x4, [0x37, 0x9, 0x4, 0xffffff01, 0x10, 0xb, 0x752, 0x9, 0x200, 0x9, 0x7ff, 0x101, 0xd, 0x100, 0x9, 0xc2, 0x5, 0xc678, 0x2, 0x2, 0x7, 0x2, 0x1c, 0x6, 0x9, 0x0, 0x10000, 0x81, 0x8, 0x1, 0xfffffff8, 0x2, 0x5, 0x3ca, 0xf, 0x4, 0x2, 0xc3f, 0xdd3d, 0xfffffff8, 0x58, 0x7, 0xfffffff9, 0x2, 0x3, 0x9, 0x8001, 0x5, 0x68, 0x7afb, 0x81, 0xd, 0x4, 0x9dc, 0x8, 0xa9f5, 0x3, 0x4, 0x7, 0x9, 0x20f21e6d, 0x7, 0x10, 0x8, 0x7f, 0xfff, 0x9, 0x1000, 0x3ff, 0x7, 0x401, 0x8, 0x40, 0x8, 0x3e14, 0xb841, 0x9c, 0x401, 0x7, 0x9, 0xf7bb, 0x5, 0x1b34, 0xfff, 0xf3f, 0x54, 0x1, 0x6, 0x1, 0x1, 0x3, 0x9, 0x3, 0x100, 0xfff, 0x9, 0xfffffffc, 0x1, 0x308, 0x1, 0x3, 0x1de, 0xaa54, 0xb97e, 0x2, 0x400, 0x2, 0xfff, 0xd7b, 0x80000001, 0x6, 0x1, 0x80000000, 0x10000, 0x4, 0x2175f8d0, 0x9, 0x3, 0x1, 0x3, 0x5fabfffb, 0x0, 0xd, 0x1000, 0x7, 0x401, 0x3e4b0000, 0x4, 0xd6, 0x0, 0x3, 0x0, 0x9, 0x3, 0x8, 0x1, 0x80, 0x9, 0xfffff613, 0x7, 0x8001, 0x401, 0x1, 0x7fb3, 0x8, 0xb28, 0x100, 0x7, 0x5, 0x1, 0x200, 0x2, 0x6, 0x1f69, 0xf87, 0xb, 0x3, 0x6, 0xffff, 0x3, 0xffff05fd, 0x2, 0x7ff, 0x20000, 0x2, 0x85d, 0x40d, 0x7f, 0x9, 0x8, 0xfffffff5, 0x9, 0x5000000, 0x3, 0x22e4, 0x10, 0xf, 0xf0a, 0xfffffff7, 0x2, 0x8, 0x2, 0xffffffff, 0xa1, 0x5ca7, 0xffffffff, 0x91d, 0x9, 0x7, 0x2, 0x70a, 0x5, 0x6, 0x9, 0x4650, 0x151, 0x4, 0x101, 0x6, 0x8, 0xc, 0x7, 0x6af, 0x7bd, 0x9, 0x0, 0xe68b, 0xff, 0x1293, 0x4, 0xb, 0x9, 0x4000000, 0x7f, 0x4, 0x3, 0x2, 0x1, 0xfffffffa, 0x7, 0x7ff, 0xff, 0xe, 0x8, 0x8, 0x8, 0x4, 0xa1, 0x8, 0x2, 0x0, 0x3, 0x1, 0x3e7a, 0xff, 0x2, 0x4, 0x7f, 0x5, 0x62, 0xffffffff, 0x745f, 0x240, 0x1, 0x63ea, 0x6, 0x144b, 0x3, 0x9, 0x6, 0x3, 0x2, 0x6, 0x51ac, 0x4, 0xff]}, @TCA_HTB_CEIL64={0xc}, @TCA_HTB_RATE64={0xc, 0x6, 0x8000000000000001}, @TCA_HTB_CTAB={0x404, 0x3, [0x8, 0x0, 0x6, 0x38ef, 0x6, 0x4, 0xb6, 0x4e, 0x5, 0x0, 0x10, 0x1, 0x2, 0x2, 0x0, 0x2, 0x6, 0x4, 0x9, 0x8, 0x3, 0x5, 0xb5e4, 0xffffffff, 0x561, 0x40, 0xf28, 0x8000, 0x401, 0x1ff, 0x1ff, 0x6, 0x7fffffff, 0xc96d, 0x5, 0x6, 0x6, 0x1, 0x2, 0x8, 0x7, 0x7, 0x80000001, 0x0, 0x7ff, 0xb7, 0x3, 0x0, 0x8, 0x6, 0x7, 0x7, 0x9, 0xd86, 0x7, 0x1000, 0x1000, 0x5, 0x1, 0x5, 0xffffc598, 0x10001, 0x0, 0x2c904b8e, 0x1, 0x800, 0x5, 0x5, 0x8834, 0x7, 0x5, 0x5, 0x4, 0x4, 0x1, 0x81, 0x8000000, 0x800, 0x8a6, 0x3, 0x1, 0x5, 0x1, 0x9, 0x5, 0x4, 0x3, 0x0, 0xe36, 0xfd, 0x2, 0x9d4, 0xffffffff, 0x3, 0x7, 0x100, 0xfffffff9, 0x1, 0x6b, 0x7, 0x40, 0x4, 0x9, 0x3, 0x6, 0x0, 0x568, 0x6, 0x9c7, 0x7, 0x3, 0x32, 0x6, 0x7, 0x8, 0x4, 0x10001, 0x7, 0x0, 0x3, 0x6, 0x4, 0x9, 0x4, 0x2, 0xec2e, 0x2, 0x100, 0x3, 0xeff3, 0x0, 0x7, 0x4, 0x200, 0x4, 0xa9b, 0xfffffffe, 0x3, 0x1000, 0x8, 0x8, 0x3, 0x7, 0x7, 0x2, 0x1, 0x8, 0x23b, 0x40000000, 0x4d, 0x1e, 0x5, 0x3, 0x7f, 0x4, 0x3, 0x0, 0x1008ea, 0xffff0000, 0x642, 0xffff, 0x6c, 0x7ff, 0x1, 0x1, 0x1, 0x11, 0x9, 0x3, 0xdb5, 0x1, 0x80, 0x40, 0x7, 0x83, 0x6, 0x1951, 0x3, 0x80000001, 0x0, 0x0, 0x7fffffff, 0x5, 0x40, 0x8, 0x0, 0x9, 0x80000000, 0x7fff, 0x9f, 0x4, 0x8, 0x6, 0x9, 0x74a9a216, 0x1000, 0x1, 0x51, 0x5d, 0x0, 0x9, 0x539d, 0xe, 0x4, 0x4, 0x7f, 0x2, 0x8, 0x1ff, 0x5, 0x5, 0x6, 0x0, 0x5, 0x3, 0x6, 0x0, 0x3, 0xe, 0xfff, 0xe, 0x9, 0x4, 0x9, 0x7, 0x800, 0x1000, 0x2, 0x0, 0x9, 0xffffffff, 0x77000000, 0xb, 0xf, 0x3, 0x9, 0x40, 0x10, 0x80, 0xfffff800, 0x10, 0xb, 0x200, 0x3, 0x10000, 0x3, 0x4, 0x4, 0x2, 0x0, 0x6, 0x0, 0x5, 0x9, 0x1, 0x5]}]}}]}, 0x14e4}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xffe0}, {0xfff2, 0xb}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x1, 0x1, 0x3, 0x3, 0xe, 0x1, 0xd, 0x5, 0x8, 0x6, {0xfffff800, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x400c8a4}, 0x4890) (async, rerun: 32) r14 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r14, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@delchain={0x24, 0x26, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xa, 0x9}, {0x2, 0x6}}}, 0x24}}, 0x4000000) r15 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r15, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=r1, 0x24, 0x0, 0xfff2, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) (rerun: 64) 3m53.595945714s ago: executing program 0 (id=4234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20129, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x58}, 0x4000010) write(r0, &(0x7f0000000700)="ffffffffffffc011223344554305000f32ffff90000100112233445500112233445500ff0000", 0x26) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x1, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x4000) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r6, &(0x7f00000006c0)=[{&(0x7f0000001000)="2e9b3d0007e03dd65193dfb6c575963f88641100157097970057", 0x1a}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009ef702000000556300100000fc07450000000600100000007a1bc0ff100000001812f2ffd409245cfd", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) 3m53.045032878s ago: executing program 0 (id=4242): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x70bd2b, 0x80, {0x0, 0x0, 0x0, 0x0, 0x26f13}}, 0x20}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmmsg$unix(r0, &(0x7f000000a140)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x1, 0x2000c080) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x55}, 0x94) 3m52.903394141s ago: executing program 0 (id=4244): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x1, r0}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003080)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0xc70, 0x0, 0xffffffff, 0xffffffff, 0x908, 0xffffffff, 0xba0, 0xffffffff, 0xffffffff, 0xba0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x8e0, 0x908, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd8800000, 0x1}, {0xec, 0x2}, {0x6, 0x3}, {0x80}, {0x6, 0x2}, {0x10000, 0x2}, {0xd}, {0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x4}], [{0x9, 0xfffffffb}, {0x7, 0x7}, {0x2, 0x80000000}, {0x9, 0x1}, {0x799, 0x8001}, {0x0, 0x2}, {0xc2, 0x5}, {0x8, 0x1000}, {0x40, 0x9}, {0xff, 0x81}, {0x636, 0x6}], 0x6}, {[{0x8, 0x2}, {0xe000}, {0xb8b4, 0x1}, {0x3c5f9b87, 0x3}, {0x3, 0x1}, {}, {0x29b5, 0x2}, {0x54a2f77, 0x3}, {0x3, 0x3}, {0x1000, 0x2}, {0x1, 0x2}], [{0x6, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x80000000, 0x2}, {0xee84, 0x8000}, {0x9, 0x9}, {0x3800000, 0x3}, {0x800, 0x9}, {0xfffffffa, 0x1}, {0x0, 0x2}, {0x7, 0x7}], 0x4, 0x3}, {[{0x286f, 0x1}, {0x554b, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x5}, {0x9, 0x1}, {0x6000000, 0x3}, {0x400, 0x3}, {0x9, 0x2}, {0x8001, 0x2}, {0xc5bf}], [{0x6, 0x7f}, {0x5, 0xfffffff9}, {0x7, 0x8}, {0xb, 0x3}, {0x8, 0x9}, {0x9}, {0x7}, {0x7, 0x1000}, {0xfff, 0x2e4}, {0x0, 0x400}, {0x0, 0x8}], 0xb, 0x4}, {[{0x5, 0x2}, {0x2, 0x1}, {0x6, 0x3}, {0xfffffffc, 0x1}, {0x4, 0x3}, {0x10001}, {0xca0, 0x2}, {0x10, 0x1}, {0x8, 0x1}, {0x6796, 0x3}, {0x8, 0x1}], [{0x6, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0xffff, 0x2}, {0xc, 0x5}, {0x51a3, 0x3}, {0x8, 0x5}, {0xfffffff7, 0x9}, {0xd0, 0x1}, {0xfffffff8, 0x8}, {0x7656, 0x2}], 0x7}, {[{0x2, 0x2}, {0x10001}, {0x4eb}, {0x10000, 0x3}, {0x2, 0x2}, {0x3}, {0x81}, {0x4, 0x1}, {0x10001, 0x2}, {0x9, 0x3}, {0x1, 0x2}], [{0x4}, {0x0, 0x400}, {0xd9a8, 0x7}, {0x1000, 0x8f8}, {0x3, 0x10001}, {0x3, 0x7c67}, {0x6, 0x80}, {0xfffffff9, 0x2}, {0xffff, 0x2}, {0x1000, 0x9}, {0x3, 0x2}], 0x1, 0x4}, {[{0xabb918, 0x1}, {0x3, 0x1}, {0x8, 0x2}, {0x9, 0x1}, {0x2}, {0x9, 0x1}, {0x80000000, 0x3}, {0x1, 0x2}, {0x0, 0xc49aafde8229cbf1}, {0x4, 0x1}, {0x3, 0x2}], [{0x8b, 0x9}, {0x6, 0x553}, {0x1, 0xe0}, {0x3, 0x4ad}, {0x0, 0x10001}, {0x1, 0x2}, {0xd1, 0x100}, {0x6, 0x7641}, {0x3, 0xfffffffc}, {0x2, 0x4}, {0x9, 0x2}], 0x1, 0x1}, {[{0x8015, 0x3}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x37b, 0x3}, {0x5}, {0x2, 0x3}, {0x1, 0x2}, {0x7f}, {0x6, 0x2}, {0xfffffff6, 0x2}], [{0x9, 0x7}, {0x8, 0x7}, {0x6, 0x4}, {0x800, 0x80000001}, {0x0, 0x10000}, {0x2, 0x3b58}, {0x4ca7ea08, 0x8001}, {0x0, 0xa9b}, {0x1ff}, {0x5, 0x2}, {0x8, 0x4}], 0xa, 0xb}, {[{0x10001, 0x3}, {0x3}, {0xc, 0x1}, {0x7a, 0x3}, {0x6, 0x1}, {0x80000001, 0x3}, {0x3, 0x2}, {0xa}, {0x401, 0x1}, {0x9}, {0x1, 0x2}], [{0x200, 0x1}, {0x8, 0x1aaa}, {0x706, 0x9}, {0x9, 0x2}, {0x4, 0x7}, {0x5, 0x9}, {0x3}, {0x5, 0xbf789c5e}, {0x8, 0x3}, {0x7, 0x10001}, {0x1}], 0xa, 0x1}, {[{0xc2}, {0x5, 0x1}, {0x7cd72bba}, {0x8, 0x2}, {0x400}, {0x7ff, 0x3}, {0x10001}, {0xe1a}, {0x9, 0x3}, {0xfffffffc, 0x3}, {0x9}], [{0x10, 0x4}, {0x1, 0x10000}, {0xbf9, 0x6}, {0x4}, {0x101, 0x8}, {0x100, 0x4}, {0x0, 0xb6e}, {0x7f, 0x8}, {0x9, 0x7}, {0xffff, 0x92a}, {0xd, 0x2}], 0x9, 0x2}, {[{0x8, 0x3}, {0x80000001}, {0x8, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x4}, {0x4, 0x1}, {0x1, 0x3}, {0xc, 0x3}, {0x101, 0x2}, {0x1}], [{0x4, 0x3}, {0x0, 0x8}, {0xffffe5cb, 0x1}, {0x7f, 0xfffffff4}, {0x40, 0xffffffff}, {0x2, 0x7}, {0x7fff, 0x6}, {0x0, 0x8}, {0xffffff2e, 0x7ff}, {0x40, 0xa}, {0x3, 0x7}], 0x6, 0x2}, {[{0x1ff}, {0x5, 0x2}, {0x10001, 0x1}, {0x2, 0x2}, {0xff, 0x1}, {0x1, 0x1}, {0x800, 0x3}, {0x80000001, 0x2}, {0x1ef6, 0x2}, {0x1, 0x2}, {0xba, 0x3}], [{0x18d, 0x7}, {0x0, 0x2}, {0xdf91, 0x1}, {0xe08, 0x6}, {0x4, 0x7ff}, {0xa64, 0x101}, {0x7, 0x4}, {0x401, 0x2}, {0x7ff}, {0x0, 0xd4}, {0xef}], 0x2, 0x7}]}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x230, 0x298, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0xf31], 0x4, 0x34, 0x1}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xcd0) r3 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000304fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x34}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x1015, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e000"], 0x20000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) write$tun(r4, &(0x7f00000000c0)={@void, @val={0x2, 0x1, 0x4, 0x3, 0x0, 0x1ffc}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @broadcast, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @mcast2}}, 0x3e) 3m52.23896417s ago: executing program 0 (id=4251): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000840), &(0x7f0000000880)=0x30) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x40000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000800)=0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00002f00000061114c000000000085000000af0000009500"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x46}, 0x94) r6 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000380)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x1000}, 0x80, &(0x7f0000000400)}}], 0x1, 0x40) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r1) r8 = socket$igmp6(0xa, 0x3, 0x2) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000a, 0x32, 0xffffffffffffffff, 0xdd502000) getsockopt$inet6_int(r8, 0x29, 0x24, 0x0, &(0x7f0000000000)=0x5b) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r7, 0x100, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x4000005) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x1a, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}}, @generic={0xc, 0x0, 0xd, 0x4c4}, @call={0x85, 0x0, 0x0, 0x20}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000580)='syzkaller\x00', 0x6, 0x16, &(0x7f00000005c0)=""/22, 0x41000, 0x21, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000600)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x7, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000680)=[{0x2, 0x1, 0x3, 0xa}, {0x2, 0x2, 0xc}, {0x3, 0x2, 0xe, 0x6}, {0x4, 0x4, 0x1, 0x9}, {0x4, 0x3, 0x2, 0xb}, {0x1, 0x5, 0x8, 0xc}, {0x3, 0x3, 0x0, 0xa}, {0x2, 0x3, 0x9, 0x3}], 0x10, 0x4}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, r10}, 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r9, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0xb, 0x1, '[!--]\\\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40400c0}, 0x40) 3m37.126026903s ago: executing program 32 (id=4251): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000840), &(0x7f0000000880)=0x30) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x40000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000800)=0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00002f00000061114c000000000085000000af0000009500"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x46}, 0x94) r6 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000380)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x1000}, 0x80, &(0x7f0000000400)}}], 0x1, 0x40) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r1) r8 = socket$igmp6(0xa, 0x3, 0x2) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000a, 0x32, 0xffffffffffffffff, 0xdd502000) getsockopt$inet6_int(r8, 0x29, 0x24, 0x0, &(0x7f0000000000)=0x5b) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r7, 0x100, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x4000005) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x1a, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}}, @generic={0xc, 0x0, 0xd, 0x4c4}, @call={0x85, 0x0, 0x0, 0x20}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000580)='syzkaller\x00', 0x6, 0x16, &(0x7f00000005c0)=""/22, 0x41000, 0x21, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000600)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x7, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000680)=[{0x2, 0x1, 0x3, 0xa}, {0x2, 0x2, 0xc}, {0x3, 0x2, 0xe, 0x6}, {0x4, 0x4, 0x1, 0x9}, {0x4, 0x3, 0x2, 0xb}, {0x1, 0x5, 0x8, 0xc}, {0x3, 0x3, 0x0, 0xa}, {0x2, 0x3, 0x9, 0x3}], 0x10, 0x4}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, r10}, 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r9, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0xb, 0x1, '[!--]\\\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40400c0}, 0x40) 2m47.709707835s ago: executing program 5 (id=4808): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = epoll_create(0xea3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0xb0000001}) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10) r2 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0xfff1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2m47.206934944s ago: executing program 5 (id=4812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="3000000010000003fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001c00", @ANYRES32, @ANYBLOB="08000e0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) bind$nfc_llcp(r1, &(0x7f00000000c0)={0x27, r3, 0x1, 0x7, 0x8, 0xe1, "c171f8af6648de303e39a1ce5b8d47245e30da43201337de55407ebb63f4111c9cafbe52c23106f5123564ec0f7e4dd628792cadab28844962baa427375c65", 0xa}, 0x60) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@alu={0x7, 0x0, 0xd, 0x9, 0x0, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xc6}}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x800}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x23}}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000006c0)={0x0, 0x1000, "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"}, &(0x7f0000001700)=0x1008) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000001740)={r8, 0x2, 0x3, [0x1, 0x2, 0x0]}, 0xe) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dffbfe, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x33822}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x480c1}, 0x240408d0) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000000202050000000000000000060a000b00512e39333100000008000b0073697000090006007070747000000000"], 0x34}, 0x1, 0x0, 0x0, 0x24000c00}, 0xa0) 2m46.593575671s ago: executing program 5 (id=4817): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x200008c1) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="58010000100001002bbc700000000004fe800000000000000000000000000022ac14144300000000000000000000000000000008000300050a00600000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001000000000000000ffffe00000010000000032000000e0000002000000000000000000000000feffffffffffffff0400000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000890000000000000003000000000000000408400000000000090000000000000092020000000000000000b01c000000000000000026bd700000000000020004006c00000000000000680002006362632874776f6669736829000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x158}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) socket$kcm(0x2d, 0x7, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = socket$inet6(0xa, 0xa, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x440007, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff8000}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0xd8, &(0x7f00000004c0)=ANY=[@ANYBLOB="c5a500439a3baaaaaaaaaabb88a81300810044000800459b00c200670000f22190787f000001ac14143b4e204e230401907820692af5040317f5bfbf6e76a0cd47c5ddde5225328835bf59a331e579b8aec936829a59945f3585bace62d051d5d50d78679122633ad6db0ac0610e051fb791a08f541ba5f0391553d9f2c8f4f5b0c0db8ff4857574f9a963f46542b444b28b86c714cb6726ffc10b55618ff7d9c68e3a33d686b19552158d852ffdff4b93da8793437c8042009178a5f2ca528dfb3f7af4f0fa255e13b8dc177a855dfdbd6ed53ca431100e"], 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0001800700000000000000020000060400000005000000040000000300000001000100000030615f2e00b504629cfc47b2a783a664f86b75b635a3491e35c9becc084d3733e9c947b28a6f9b7420ed2c112652a517a25f0ae42205aa8462"], &(0x7f0000000f40)=""/4089, 0x3b, 0xff9, 0x8}, 0x28) 2m45.969882123s ago: executing program 5 (id=4823): socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x7fff, 0x0, 0x7, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0xe8) r0 = socket$key(0xf, 0x3, 0x2) (async, rerun: 64) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010400000000000000000200000a0900010073797a300000000040000000030a010400000000000000000200000a0900010073797a300000000009000300000000300000000014000480080003400000000308000240000000006c000000060a010400000000000000000200000a0900010073797a30000000000900020073797a300000000040000480200001800700010063740000140002800800014000000001"], 0xf4}}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r3, &(0x7f00000000c0)=@in={0x2, 0x270f, @rand_addr=0x64010101}, 0x10) (async) listen(r3, 0x5) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f00000000000000000100003c"], 0x6a) (async, rerun: 32) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async, rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) (async) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008410}, 0x24000000) (async) sendto$inet(r5, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) (async, rerun: 64) recvfrom$inet(r5, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) (rerun: 64) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x4044044) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f0000000100)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0) 2m44.042412105s ago: executing program 5 (id=4837): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x22}, 0x2}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)={r3}, &(0x7f00000001c0)=0x8) sendto$inet(r0, 0x0, 0x0, 0x20008005, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r4, &(0x7f0000000e00)=[{{&(0x7f0000000180)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="d9", 0x1}], 0x1}}], 0x1, 0x2004c044) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000300)={0x3c, 0x8, 0x2, 0xfc, 0x0, 0xfa, 0x3b, 0x6, 0x4, 0x82, 0x3, 0x8, 0x5, 0x8}, 0xe) recvmmsg(r4, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)=""/187, 0xbb}], 0x1}, 0x7}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}, 0x6782}], 0x3, 0x20, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x28, 0x0, 0x0, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x20}, {[@hopopts={0x0, 0x4, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0xd600, [0x4, 0x0]}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) shutdown(r4, 0x1) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a000000080000000100000f020000000100f1ffffff0000000006004977000000439a00000f020000001760000000000000000061"], &(0x7f0000000600)=""/4, 0x4a, 0x4, 0x1}, 0x28) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xee}, &(0x7f0000000000)={0x1f, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000003700)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x7, @loopback, 0x1}, 0x1c, &(0x7f00000025c0)=[{&(0x7f00000001c0)="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", 0xfa}, {&(0x7f00000002c0)="c748f6b3d6421b23cd593893e33f83f335a74bc4e25186", 0x17}, {&(0x7f0000000340)="8f14e2345991ec4fe3b67467e3d9e91e041d10eb3b8f25c63246bcad41313f2f0d2fa214ad11c80f60bff8e363757771cbf339d1c840b39188cd836805f47a5ff79eeae80e45637af8d890cff4cf60db645832f1bf230462cb2b8cd1b2132b1d45e2564bae272f7899556125368742cd8ea0a5296e52893956c85fcc7118e0a27172837b4476debceca9616e0034271f3aaf5984bb6a52c44fd93762855bb52b028b06a09b2cb42e4f8dec48865a55ade1cee8b2f4d542", 0xb7}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000002580)="e5c4ed974f9482414a2a13b347f0aeb4cb01921ca42c19eb15bfcb57c506383b7d4250850809b6", 0x27}], 0x5, &(0x7f0000003640)=ANY=[@ANYBLOB="90000000000000002900000037000000020e000000000000c910fc020000000000000000000000000001072000000000060f0900ffff000000000000010000915b65533239895e0000000000010000000000000000c910ff0100000000000000000000000000010720000000020601e505000000000000000002000000000000000a0000000000000000010000000000"], 0x90}}], 0x1, 0x40) 2m43.35524936s ago: executing program 5 (id=4850): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x18, 0x0, &(0x7f0000000280)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000007118370000000000953dd4603aa9f2cc202b12d32c154afb746ef93c0c828b4ea6cdc435f748504e58d32506c899146fcc314b580850d3151da4ee5dd7f9540596aadd27c2b81b86cc02cb7f9c2cbb8744aaf41167358c5ad05a5d5b6e0f285d5ef2ae701d5f219aff8c4845fb51fc43225d160c8c921f6953390c2c6788ecd9"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0xfffffe8c, 0x0, 0x0, 0x2, '\x00', 0x0, 0x24, r2}, 0x94) 2m28.22715283s ago: executing program 33 (id=4850): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x18, 0x0, &(0x7f0000000280)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000007118370000000000953dd4603aa9f2cc202b12d32c154afb746ef93c0c828b4ea6cdc435f748504e58d32506c899146fcc314b580850d3151da4ee5dd7f9540596aadd27c2b81b86cc02cb7f9c2cbb8744aaf41167358c5ad05a5d5b6e0f285d5ef2ae701d5f219aff8c4845fb51fc43225d160c8c921f6953390c2c6788ecd9"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0xfffffe8c, 0x0, 0x0, 0x2, '\x00', 0x0, 0x24, r2}, 0x94) 1m42.11702021s ago: executing program 1 (id=5294): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000380), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde7, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x2100, &(0x7f0000000200)="df12c9f7b9a6000000000000000a", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030011000500e1000cee0203001a000000", 0x33a) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000080)=0x1e) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82100000000000a6020000f8ffffffb703000008000000b7030000000000000c0000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m41.727627311s ago: executing program 1 (id=5300): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x50, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="9fb98f545db9"}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x50}}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x6c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}, @AF_INET6={0x50, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_ADDR_GEN_MODE={0xfdae, 0x8, 0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x29}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xfb}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1m41.303813436s ago: executing program 1 (id=5304): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x81, 0x3, 0x5, 0x116, 0xffffffffffffffff, 0xffffffff}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, 0x0, 0x0, 0x4}, 0x20) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000040)=@ll={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f00000014c0)=[{&(0x7f00000003c0)="5401020001000000ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f0000000140)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6f", 0x35}, {&(0x7f0000000280)="f76e14895b4c948e303e1fe34234a0a92ecdc3beee7e2a71", 0x18}], 0x3}, 0x44000) 1m40.98191618s ago: executing program 1 (id=5306): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711235000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = socket(0x2d, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000040)=0x7, 0x1d) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000100)=""/19, &(0x7f0000000080)=0x13) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, &(0x7f00000001c0)) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, &(0x7f00000001c0)) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000200)=""/254, &(0x7f0000000300)=0xfe) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0xe, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x2}, 0xe) 1m40.763115978s ago: executing program 1 (id=5312): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2c000010) bind$tipc(0xffffffffffffffff, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0xa) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xfffffffffffffe3a}, 0x404e040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="09000000000000001c00128009000100626f6e64000000000c0002000000000000000000"], 0x3c}}, 0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000080)) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0xffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x20, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000c4e5a221adf54783c078b9ef35999b608381f215"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x1d) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x397, 0x1}}, 0x20) getsockopt$sock_buf(r3, 0x1, 0x1f, &(0x7f0000001680)=""/193, &(0x7f0000000180)=0xc1) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x144}}, 0xc000) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000480)=[@in6={0xa, 0x4e21, 0x400, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f0000000040)={r11, 0x1000}, 0x8) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000900)={{r2, &(0x7f0000000080)='GPL\x00', 0xb0400, &(0x7f00000000c0)={@align=0x5, {0x6, 0x7, 0xe2b, 0xdc50}}, 0x200, &(0x7f0000000100), &(0x7f0000000140)}, 0x6, &(0x7f0000000840)=[{0x3, 0xffff0222, &(0x7f00000001c0)='/-\x00', &(0x7f0000000240)="80b9279ec513fe75671a35932d2c72e46cd4cb77156ad1f01b56da9ed58790dadeb661a28abb187db143f501e8e8e44a4e2940cc232ece3804b35f93783daaf2d1c5623265bda7e11fe4b1be3e8e061a63f298d73826839ac445a2f2487ed8a1ed526e7bdfc8f0d593bc48811993f293ad4c0eed60de020a6c1d962247d1e0bea36d9f1b699637c0854c2cf6b05ccd5f35b813abae686ee6f0429c7a4dfd6fabf20ba960cfe06e49efbb9758db749ccb33c88dce9e884ee7d56b38daf3c4e7223bb42feab050b670ba4f2de3873a92ed97e1ad33ba577e9da2d713ab363264f1ae0846a4977ec0390415c01987c6b4df6b", 0xf1}, {0x2, 0x4, &(0x7f0000000500)='\x00', &(0x7f0000000540)="494931011247a17f4489e98e4f43d42af112b6d21b2bf6f3be7cdeacfbf81680d8867776b0f46fb09cf80e1603540e8e222594cf8479ef603617c1b6189b900d310f9d8307518b62e1cda0", 0x4b, 0x7a}, {0x1, 0x200, &(0x7f00000005c0)='\x00', &(0x7f0000000600)="dd3d297cbf25d2b66594615b66034a7125591afe7a2cc01812cc96b9917490c103f3b6e285b41ab77a08db5c44841861546c1a20b46cde402764a2651db2f19998af2b04d5f14af9c6816cef6f4fefd7c089029c", 0x54, 0x20}, {0x1, 0x3, &(0x7f0000000680)=':S&.\x00', &(0x7f00000006c0)="80fd23433bb59cb82a00720b2bb01892e3862b5a87e37879a26dc4dbedd8b61f741f20982647b1e4e72e63ac63", 0x2d, 0x28}, {0x1, 0x6, &(0x7f0000000700)='\x00', &(0x7f0000000740)="37b2bf3f1d3b55af39f89207cf23a86ac6ad12e4b20b03d076cf3529aad45d84fdc34c128a0381aed229404c5cbd479034f3e3743c0751bc2972272f4ba86ba4f045191f635949db168562ce87c908c6b5d96ce5b71be0de62b08dcfe246a55167ec33556fa7433e4750eee74bd0491924edce6cf6c47b", 0x77, 0x2}, {0x3, 0x8, &(0x7f00000007c0)='}){\xfb-(\x12!\xf0!{-[\\}\\#]\\[,-@$\x00', &(0x7f0000000800), 0x0, 0x8}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f0000000b80)=ANY=[@ANYRESDEC=r4, @ANYRES16=r3, @ANYRES8=r5, @ANYRES32=r6, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 1m39.69524169s ago: executing program 1 (id=5326): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2}]}, 0x1c}}, 0x4000880) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x24, 0x0, &(0x7f00000003c0)) (async) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) 1m24.432617091s ago: executing program 34 (id=5326): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2}]}, 0x1c}}, 0x4000880) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x24, 0x0, &(0x7f00000003c0)) (async) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) 8.586886793s ago: executing program 3 (id=5948): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @in={0x2, 0x0, @private=0xc0586300}], 0x2c) sendmmsg$inet6(r0, &(0x7f0000006180), 0x0, 0x80d0) 8.531686677s ago: executing program 3 (id=5949): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @in={0x2, 0x0, @private=0xc0586300}], 0x2c) sendmmsg$inet6(r0, &(0x7f0000006180), 0x0, 0x80d0) 8.446938553s ago: executing program 3 (id=5951): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000080)={'ipvlan1\x00', {0x2, 0x4, @empty}}) (async) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000080)={'ipvlan1\x00', {0x2, 0x4, @empty}}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 8.328235942s ago: executing program 3 (id=5952): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0xfffffffffffffef3, r1, 0x20, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001080)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0xc884) 8.254036606s ago: executing program 3 (id=5954): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000880)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000880)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd, 0x12, r0, 0x0) (async) 8.222447402s ago: executing program 3 (id=5955): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_TYPE={0x8}]}], {0x14}}, 0x6c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) (async) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x1, 0xfffffffffffffffe}, {0x0, 0x6, 0x796}, 0x0, 0x3507, 0x0, 0x3, 0x2, 0xe55286f1921f74be}, 0x0, 0x4}}, 0xf8}, 0x1, 0x0, 0x0, 0x4005}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet6(0xa, 0x3, 0x5) (async) r6 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r6, &(0x7f0000008940)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=ANY=[], 0x108}}], 0x2, 0xc040) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x40}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x143c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x140c, 0x3, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x88, 0x6, 0x1, 0x0, "40ac84be8101bc71c0eef3e97d45151a5e64cc55ea91f0555ec63c62d86513372ad80f66bd9779a85105085a04ea3fbfb5abb7ee68dd985e69d53fa287154cf44fd06a3a7af4239f0fa81a2f99552be72f5581e976510daaed13f865a7246fa8af4856f3425014276073c3c932bca92c5ecd87244a887e58b2fe2aa0b9c09aa3c4c6b3fd"}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x1320, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x8b, 0x6, 0x1, 0x0, "be8790afe660e7815e28a5cf1cc4ec195b0d2b3f6be524f9b2c776c902c438e466d873fba99eb15230e70b01c765a6535d5a1218cdc36f5718873111b5b4fde82e312ecf39f01f4cb265a7437015b66f78f2d6dabe8d36605fbb6d4bd53df20805e61df2f8f67f63b47bc7b47a7bb85197d0ee79bc9c3f40b16226b17490ab8d02c3ac5b95fb6f"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x11a4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x5d, 0x1, "f53eee77feb1e55886de362e1bc940233ce67e43b105a530c5e82945b54d1e2aa3911de8b12055ad19b31677747c64df6f60e49bafb369b0802a140aefb759d28c7dcb6fef8852340a1b04dc9d3f32f7278d7d1caff8c5aabf"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0xc8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc1, 0x1, "18c96a594ecb5eeb919e952608fe73525f6aec3e0675ee35444f938781f4759ba75a15db0c48906553e779bfdf521b06f8be512b97eb6db9139575385ed5aaa1d45cc54d7da13e46544cdb1082891f6a4b705ff060c614f08eb63a6ede96410bf55e550e2a802c31a7a85a563d46db217756b7513ff0d8c97a9fcf6fb298ff095ecb3fd8cf6dff53cac71dc91bfdc22de2257ee514e55940477074940c2f5cb717228d2ce726e366d42f853175844734ce13671113c4fc4aa73c9f45fc"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @socket={{0xb}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x28, 0x6, 0x1, 0x0, "d77c4fcdda5f7f0c96a1baec5ff3d8d28c73d4585d964681dc672de360a2680c40aa9212"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x77}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @bitwise={{0xc}, @void}}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1464}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) (async) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 5.588968239s ago: executing program 4 (id=5975): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x60000016}) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="01051c001000140006004500001c0000000040119078ac140002ac14000112344e20318072ff7896c5f7c024921ef5217ff900089078"], 0x26) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x20010, r0, 0xf58cb000) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffffffe, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000140)=0x3042, 0x4) close(r0) 5.271011433s ago: executing program 7 (id=5976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2800000013"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000240)={r0, &(0x7f0000000000)='\x00', 0xb02, &(0x7f0000000040)={@_ha_fsid={[0xffffe1af, 0x1]}, {0x3, 0x7, 0x3, 0x7}}, 0x27, &(0x7f00000000c0), &(0x7f0000000100)=0x8}) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000540)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}, @in={0x2, 0x4e22, @loopback}], 0x20) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000000), &(0x7f0000000040)=0x8) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) (async, rerun: 64) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r3) (rerun: 64) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r5, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x2000040) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="85000000070000006a0a00ff010100002600000000000000000000000000000018100000", @ANYRESDEC=r5, @ANYBLOB="100000000000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x4, '\x00', r4, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4720}, 0x94) 4.943151364s ago: executing program 4 (id=5978): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000000)={0x1, @le_reject_cis={{0x2067, 0x3}, {0xc9, 0x5}}}, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2503, 0xff3ac3f992546735}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x200040cc) 4.862893819s ago: executing program 7 (id=5979): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000500)=0x79, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0xba, 0x0, 0xe4}]}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000006000000000000000000000902000000040000000000000700000000000000000100000d000000000000000000641200000000005f00"], &(0x7f0000000540)=""/246, 0x4a, 0xf6, 0x1}, 0x28) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r1, &(0x7f0000000840)="ef976461100d5cf65eda0c997a00976ca6b72e643a4d71f06f4e1129550000c0aa718de352d51791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af49fefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a0615e1e5bbde8983024934a37349907a9629c8e7ed11c31f288d48baed9dfb44bd33dba6bd291cad455d53d0c6f09126918f54e663d71c3506756e3eca40c1c7d270712d709962a359825815a7ad6c4de0741e508d4cde7f48f8f6765546d864c477e9a47ed9f3165e6897d91a91007e1bfb91a00ba8925e686c8ca0b658e9b178d5c43d111db2e619b9880bc014197a43f12ba49c51a90fca18a38e8bbb93a3353247a61c32a8467b1ecc625bd20978670c8c03f03ed64845784030c0d6b661bbe371d6b7685ddc94ef621621648578dcf9155c6273ec5ab38a50024c1f39dacdb0482fb95166c26e55e6ad8405310a14e1290c7139f44f0c330ea5e00bd4d8c703512048beeaead6b5c7b9479ab27aa32426720eec053e38ff2ab89ed6767028721c1320c03ab8407323e4071460fe3f15cdb9420e5d832aea31251bfad158b26b6d8923f36aa96c7e71d80cc1e1f4361a87c2e4b739350381619da0c98bf84f5fa41617240e8860bf74b97489774085b858da3998249d96716d07987e7ae3da96ba06f3a217a2", 0x20c) sendto$inet(r0, &(0x7f0000000140)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e3b", 0xfe2b, 0x10000485, 0x0, 0xfffffffffffffe91) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r2, &(0x7f00000000c0), 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="03000000000000000200df739fadc654000200"/34], 0x50) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000400)={{r2, &(0x7f00000001c0)='-^[\'&$\x00', 0x140, &(0x7f0000000240)={@align=0x36, {0x7, 0x6, 0x4, 0xad76}}, 0x0, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0xa00}, {[0xfff, 0x4, 0x50000, 0x200]}, 0x80, 0xde, &(0x7f0000000300)=""/222}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001580)={0x0, @multicast2, @dev}, &(0x7f00000015c0)=0xc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001600)=0xffffffffffffffff, 0x4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r4, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES32=r5], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r3, @ANYRES32=r6, @ANYRES64=r2], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES8=r7, @ANYRESDEC=r7, @ANYBLOB="83a727a358ff2d175a717bf7ec99f534261f0ef4a909ae9012f412b9bb8b9496297d6b8d11a86b815a3236b6adabcc7c383766c8731a5350a8ad8f8279e232e25c0a1b889b6b0d2a71c1e620aacef607f393b3174ea5fa6831aa7c6b0277dac14d567e8f69b0ddba3179cc226b31a064dcee6d4afbe5f6289f974b6b49612abdd9a1af"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001800)={0xffffffffffffffff, 0x20, &(0x7f00000017c0)={&(0x7f00000016c0)=""/124, 0x7c, 0x0, &(0x7f0000001740)=""/116, 0x74}}, 0x10) 4.769376619s ago: executing program 6 (id=5980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40004000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0027"], 0xb4}}, 0x8044) (async) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r1, 0xc080583d, &(0x7f0000000240)={0x7, 0x1, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0xffffffff}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x54, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="20000000000004000000040001000000098004009c80"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4) accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000200)=0xe4f8) 4.534004541s ago: executing program 6 (id=5981): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0xff, 0x80, 0x2, 0x0, 0x10, 0x1, 0x4, 0x0, 0x0, 0x5, 0x40, 0x10}, 0xe) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0xff, 0x80, 0x2, 0x0, 0x10, 0x1, 0x4, 0x0, 0x0, 0x5, 0x40, 0x10}, 0xe) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x23, 0x0) writev(r1, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0xb96, 0x3}, &(0x7f0000000600)=0x90) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0xb96, 0x3}, &(0x7f0000000600)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000006c0)={r2, 0x80, &(0x7f0000000640)=[@in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, @in6={0xa, 0x4e20, 0x7fffffff, @private1, 0x26e3}, @in6={0xa, 0x4e22, 0x82fc, @remote, 0xfff}, @in6={0xa, 0x4e23, 0x2, @local, 0xb0d}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000000700)=0x10) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000000)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000180)={r4}, &(0x7f0000000400)=0x8) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000180)={r4}, &(0x7f0000000400)=0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5, r5}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r5, r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.520220951s ago: executing program 2 (id=5982): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x0, @private=0xc0586300}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) sendmmsg$inet6(r0, &(0x7f0000006180)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c, &(0x7f0000002b00)=[{&(0x7f0000000580)="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", 0x200}], 0x1, &(0x7f0000002bc0)=[@hopopts_2292={{0x1108, 0x29, 0x36, {0x2f, 0x21d, '\x00', [@ra={0x5, 0x2, 0xfff8}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x2}, @enc_lim, @generic={0x0, 0xc6, "326526e6fa2c58459909aef9816a7de817df26bd4a3c1a11e1b106bb89baf22cf67f0ab6e8751a2d170d14603003686abac2e47dba8a662522cdf46e027dd3d5c095d2903f5be6da372e76e21fcd7c3b2cc5688e11f3facde48e2943926d8b977f621636a59c75f3827ba92bc542bd4c916404aed3a84d732354c7fe605407977532c82e34e7259f9ec824d323d521f0071c99a6353b3bf326b690aeb65fa4fb3da65a39253b343bf50de6ffdae03cbd29a749f38db6fbeb7b70e805bdd9d239f1c37ccf67e5"}, @generic={0xc2, 0x5, "fa85183bb5"}, @generic={0xa8, 0x1000, "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"}, @enc_lim={0x4, 0x1, 0x3}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x87, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x6}}], 0x1140}}], 0x1, 0x80d0) 4.336741486s ago: executing program 4 (id=5983): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f0000000040)={r0, 0x3}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x191240, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'veth1_to_batadv\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}) r2 = socket(0xa, 0x1, 0x2) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000100)) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r3, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x1b}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x28004}, 0x48010) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x78, r3, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x6d}}}}, [@NL80211_ATTR_SSID={0x1d, 0x34, @random="7ec93f0cd4426cabb5b24dfef15f4bc3617ae4526713b751d8"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5f}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="10a619b63213"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x57}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x41}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004001}, 0xa53f7d53b5d41926) (async) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa0, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0x7c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xa}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "ca1cfbce9074baa1"}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xd}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x2}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "886bb89c53647143"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0xff}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "a25aa5765b2aca6a"}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x13}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x6a}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xc}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x44044}, 0x40) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x300, 0x0) write$tun(r6, &(0x7f0000000640)={@void, @void, @arp=@generic={0x310, 0x3, 0x6, 0x4, 0x3, @local, "d3cf8f0d", @empty, "000675224fc2091acaa832eb7f"}}, 0x25) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000680), 0x4000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000780)={'syztnl1\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x7800, 0x7800, 0x10001, 0x2, {{0xd, 0x4, 0x1, 0x0, 0x34, 0x64, 0x0, 0x2, 0x2f, 0x0, @loopback, @local, {[@generic={0x82, 0xd, "14271d230d1f54e2532060"}, @noop, @end, @noop, @cipso={0x86, 0xf, 0x0, [{0x6, 0x9, "833422e911559d"}]}]}}}}}) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000c00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000007c0)={0x3cc, 0x13, 0x400, 0x70bd2d, 0x25dfdbfe, {0x1, 0x6, 0x8, 0x8, {0x4e23, 0x4e21, [0x6, 0x1, 0x9, 0x800000], [0x8000, 0x5, 0x9, 0x10000], r7, [0x3, 0x8]}, 0xc, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x101, 0x1, "43ce113ae3665723e2917b62fdecbcdd48edcf0cb4242311b4da7b7079e2e4d1c3da865429d1e1ce3f909163cde7b09df5ca235955f564911d3e243b7a497428fd66e8b68a1cb1a51f7653ab8561fce9722909bedf44d06b53a83871a69611f6196eeeb0bea101647c341b57129df7131381f886414208ff393307775ddb3fe0c7247ec1d328b6c07617f690bfaa3a53286b382b1fc621a2543859f1e2ca0c6fbb794b59fb2ea8294b9e0fdb8b2ee4b78b163bdac064513d1f0cc09fbb2249db05440d077b1d1d9689409cc9b837259c085ca0f5e9e5db459361d017e44feb6296911c4c8087a0963aba0f23c67b9b5800304ed7e389b8c7964288956f"}, @INET_DIAG_REQ_BYTECODE={0x4e, 0x1, "aa64ffe258740c7fbbea6c454d80f1cf9cd473bb6cfa626f6e27a93b72d54aa2fe006943eb5529620aa2d5bc6a8b97aa1661199661e6fd9197d8ef3673a70f95cc8c4074fd9a05688307"}, @INET_DIAG_REQ_BYTECODE={0xeb, 0x1, "0f251b86708bdced7c12f3875c941eeb2dbff23901264478c2aee9fac91111440116e3e9a93d3a03caaa9bf97aaa73d554862ad06cd35348810c0ab32178ff07e168540cd29bab8dc1a7df8139cf661b325bac94745865bd2072f98734bec4a32a31af20c12e83c97832f59976dceffc1218a3a2b6b423affa622f7b2ad2572afe769c205365d99164befb69bda6e753268c10a25ed9c46a11b89b6e10497f494b5913d307e1a2f076ac57b31dd30c0a6286c6034e2c0b343f4fc4dfef52a6dba175993e2e5cecce6029626ecf8de905f7baf880dac0ddb58fce980a3c76cb3db778b97edc97ec"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "539ded471040bb636d35ce6a1e921c0754c1cf782bf13f594a8e8fa43dd6dae8a6565cca757c3f6902073feb69cfd1d049632aa052e303eddba2b4f1a592bbbea498656dd2f8b22839cf9dd0b15b39ef45cdcc2a4aeabbedabf88ec2cb8133b08761b591fd19fa2c49ef571222a3c9f463d925fa772b18e81d91d763b683efa0a3ad7462cb32139cf54adadc162a08acf8d5753e5521a2dce9bb9a0cd6a210424f5118fe272c5d966b5b6a510ef94e9228de1273edaeb2f79733b54cdbc40a2a8995d8447a023d1ea6f07d7ca5900e3e340fe6cbc6d703225aecaaf06198"}, @INET_DIAG_REQ_BYTECODE={0x5a, 0x1, "bf932fc76ef9b687974efe772c2edeefdd963d143c90f499dfbafba1ce9318bd3e184fb996a710cc7aeb7e090ea175d0d0c80752a6f5cb3df4402904449f6b34780d49b465ca4a7a1182245bda75f3313d31e93acb72"}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x2000a050}, 0x4000000) (async) r8 = socket$netlink(0x10, 0x3, 0x12) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)={0x1b, 0x0, 0x0, 0xfff, 0x0, r5, 0x1, '\x00', r7, r5, 0x3, 0x5, 0x5}, 0x50) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000cc0)={r5, r7, 0x25, 0x2, @void}, 0x10) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000d00)={'macvlan1\x00'}) (async) getsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000d40), &(0x7f0000000d80)=0x4) (async) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r8) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r10, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xaa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4a010) (async) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000f40), r8) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x64, r11, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x8, 0x8]}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) ioctl$BTRFS_IOC_BALANCE(r5, 0x5000940c, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000001080)={0x0, 0x4}, 0x8) (async) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000010c0)={0x32, 0x12, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0x6}, @calipso={0x7, 0x10, {0x3, 0x2, 0x1, 0x2, [0xfe5]}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @calipso={0x7, 0x48, {0x3, 0x10, 0x0, 0xe596, [0x400, 0x80000001, 0x2, 0x6, 0x200, 0x7, 0x1, 0x5]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x65, 0x7, [0x332]}}, @pad1]}, 0x98) 4.321238092s ago: executing program 7 (id=5984): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xd, 0x1fffd, 0x0, 0x3}, 0x10) write(r1, &(0x7f00000000c0)="1b0000001e005f0214fffffffffffff80700000001000000000000", 0x1b) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x5, 0x0, 0x5, 0x2, 0x0, 0x0, 0x10000, 0xffffffff}}) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x4, @empty, 0x3}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x190) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x7c, 0x30, 0xffff, 0x70bd2c, 0x25dfdbfb, {}, [{0x68, 0x1, [@m_nat={0x64, 0x3ffe, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xaf, 0x42, 0x2e3fa6bf2c47fb38, 0x1000, 0x10}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000}}]}, {0x13, 0x6, "5422002fcf6706afb352af162f6c49"}, {0xc, 0x7, {0x1, 0x1}}, {0xfffffffffffffe34, 0x8, {0x0, 0x1}}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) 4.263648645s ago: executing program 2 (id=5985): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0x22, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffff}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x3}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x3, 0x3, 0x3, 0x3, 0x3, 0xfffffffffffffff8, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x1, 0x9, 0x2, 0x80, 0x1}, @jmp={0x5, 0x1, 0x8, 0x6, 0x9, 0xfffffffffffffffe, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}]}, &(0x7f0000000400)='syzkaller\x00', 0x7ff, 0xce, &(0x7f0000000440)=""/206, 0x40f00, 0x4e, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000005c0)=[{0x3, 0x2, 0xb, 0x1}, {0x0, 0x1, 0xe, 0x3}], 0x10, 0x1}, 0x94) ioctl$FIONCLEX(r0, 0x5450) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300697036746e6c30000000000000000000240012800b000100697036746e6c00001400028005000400e400000008000800000004"], 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="2300000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x79, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@enum64={0x3, 0x1, 0x0, 0x13, 0x1, 0x1, [{0x1000000, 0x20003, 0x1}]}]}, {0x0, [0x61, 0x61, 0x5f]}}, 0x0, 0x35, 0x0, 0x1}, 0x28) socket$kcm(0x29, 0x7, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050a000700726f757465b9"], 0xf4}}, 0x40814) 4.137101848s ago: executing program 2 (id=5986): r0 = socket$inet6(0xa, 0x80000, 0x238) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006000000000008000500000003"], 0xd0}}, 0x571f68543cec8180) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="140001800800010000000100050006"], 0x2c}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, r6, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_IE={0x9, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xb6, 0x2}}]}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x200, {0x4, 0x9, 0x7398, 0xd}}}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@broadcast}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="c3a220f1be9c01127efa97020000000400000008a28d127c00000880000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xb, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x490000, 0x0) sendto$inet6(r0, &(0x7f00000003c0)="8000379bfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x4e21, 0xfffffffe, @local, 0x4}, 0x1c) 4.077594359s ago: executing program 6 (id=5987): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="12000000010000000800000008"], 0x48) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000002000)={{r0, &(0x7f0000000000)='\\.\x00', 0x2000, &(0x7f0000000040)={@align=0x7, {0x9, 0x3, 0x6, 0x9}}, 0x5, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000180)=0x8}, {[0x8, 0xa4, 0x5, 0x9]}, 0x6, 0x1000, &(0x7f0000001000)=""/4096}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.958374195s ago: executing program 6 (id=5988): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000004c0)={0x3, 0x20a, 0x0, 0x6898}, &(0x7f0000000880)=0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(r2, &(0x7f00000049c0)=[{{&(0x7f0000000580), 0x6e, &(0x7f0000003280)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000001200)=""/23, 0x17}, {&(0x7f0000000680)=""/217, 0xd9}, {&(0x7f0000000780)=""/128, 0x80}, {&(0x7f0000000800)=""/245, 0xf5}, {0x0}, {&(0x7f00000064c0)=""/4103, 0x1007}], 0x7}}, {{0x0, 0x0, &(0x7f0000004800), 0x0, &(0x7f0000004880)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}}], 0x2, 0x12060, &(0x7f0000004a40)={0x0, 0x3938700}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x8c6, 0x20}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000140)={r6, 0x9, "35a4a020f168bf6045"}, &(0x7f0000000180)=0x11) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xb, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xfffc}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @ldst={0x1, 0x0, 0x3, 0x1}, @alu={0x7, 0x0, 0xb}, @exit], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 3.853484041s ago: executing program 7 (id=5989): connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4) (async) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x8001, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket(0xb, 0xa, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r4, &(0x7f0000000000), &(0x7f0000000600)=@udp=r5, 0x2}, 0x20) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r6, r7}, 0x14) (async) syz_emit_ethernet(0xd81, &(0x7f00000014c0)=ANY=[], 0x0) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) (async) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000300)=""/98, 0x62}], 0x1, &(0x7f00000003c0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}, @zcopy_cookie={0x18, 0x114, 0xc, 0x40000002}], 0x30}, 0x4000000) listen(0xffffffffffffffff, 0x8) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) 3.852966034s ago: executing program 4 (id=5990): pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000001480)=0xffffffffffff7fff, 0x8) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000000)=0x100000001, 0x8) splice(r0, 0x0, r1, 0x0, 0x10000008ebc, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) pipe(&(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000001480)=0xffffffffffff7fff, 0x8) (async) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000000)=0x100000001, 0x8) (async) splice(r0, 0x0, r1, 0x0, 0x10000008ebc, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) 3.762861213s ago: executing program 2 (id=5991): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x14, 0x10, 0x0, 0x8, 0x0, 0x0, 0x3, 0x17}, [@FRA_SRC={0x14, 0x2, @empty}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac00000000000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x1) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xfffff000}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4004884) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031c00d3fc1400fd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r7, 0x29, 0xd8, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r8) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r11, &(0x7f0000000000)="4c00000011000000000000000000000000000000200000", 0x17) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 3.402407772s ago: executing program 7 (id=5992): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x40041) r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, &(0x7f0000002840)=[{&(0x7f0000000600)="b9", 0x1}], 0x1}, 0xfffe) syz_emit_ethernet(0x52, &(0x7f0000000640)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x1e, 0x44, 0x67, 0x0, 0x8, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2e}, {[@timestamp_addr={0x44, 0x1c, 0xc, 0x1, 0x7, [{@broadcast, 0x5}, {@loopback}, {@multicast1, 0xd1}]}]}}, {{0x4e21, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x8000, 0x0, 0xfffe}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f00000000c0)=0x13) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001200)=@nat={'nat\x00', 0x19, 0x4, 0x12e, [0x200000000240, 0x0, 0x0, 0x200000000270, 0x2000000002a0], 0x0, 0x0, 0x0}, 0x104) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070"], 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x0, 0x20000081) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001500)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x3, 0x1, 0x2}}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x2b, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x4b06, 0x77}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e20, 0x2, 0xed, 0x80000}}, 0x44) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100), 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x104, 0x4, 0x438, 0x240, 0x130, 0x130, 0x350, 0x350, 0x350, 0x7fffffe, 0x0, {[{{@arp={@empty, @remote, 0xff000000, 0xff, 0x2, 0x7, {@empty, {[0x0, 0xff, 0xff, 0x7f, 0xff, 0xff]}}, {@mac=@random="18be6f8f994d", {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x0, 0x1, 0x1, 0x3ff, 0x4, 0x639c, 'batadv0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x0, 0x101}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0x7, 0x8, 0x0, 0x0, "5b4970d6a48afb321b57cbfec5525ad742fc713282aba1f2ba7d1abee93152f9b7b4b26a00e850087f511565fc25c36402f0accfc10758b8a9b171f7e32b1483"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@remote, @multicast1, @loopback, 0xf}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @dev={0xac, 0x14, 0x14, 0x24}, @remote, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x488) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe) 3.341532559s ago: executing program 6 (id=5993): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x67, 0xfffffffffffffffe, &(0x7f0000006480)=0xff9f) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) unshare(0x24020400) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x108, 0x10, 0x801, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x36}, @IFLA_VFINFO_LIST={0xe0, 0x16, 0x0, 0x1, [{0xd8, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x10000, 0x1800}}, @IFLA_VF_MAC={0x28, 0x1, {0x10000, @random="01e60b140219"}}, @IFLA_VF_MAC={0x28, 0x1, {0x9, @broadcast}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xf866, 0x4}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x1, 0x7}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0x9}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x401, 0x3c, 0x2, 0x8100}}, {0x14, 0x1, {0x0, 0x9a0, 0x7, 0x8100}}, {0x14, 0x1, {0x1000, 0x316, 0xe7ce, 0x8100}}]}, @IFLA_VF_IB_NODE_GUID={0xfffffd58, 0xa, {0x4, 0x401}}]}, {0x4}]}]}, 0x108}}, 0x8c4) 2.75559874s ago: executing program 4 (id=5994): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000b, 0xc3073, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2000}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x20000000) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005}, 0x40040) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x9, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000068a00800000000004000000cb2004001001000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x4e21, @rand_addr=0x64010101}}) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f000000000000000001"], 0xfdef) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000005c0)={0x2c, r5, 0x201, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) listen(r2, 0x4) r8 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000080)={0xf, 0x6, 0x400}, 0x10) write(r8, &(0x7f0000000000)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) connect$802154_dgram(r8, &(0x7f0000000040)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x14) 807.43624ms ago: executing program 6 (id=5995): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'lo\x00', 0x0}) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$unix(r4, &(0x7f0000002a80)={&(0x7f0000000040)=@abs={0x2, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x28, 0x5}, 0x8000) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffc, 0x1, 0x406, 0x1, 0xffffffff, 0x9}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x0, 0x3c8, 0x9, 0x1, 0x95ce, 0x8}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01002000000000000000000000000000000000000000010000000061"], 0x0, 0x21, 0x0, 0x0, 0x0, 0x10000, @value=r7}, 0x28) readv(r3, &(0x7f0000002380)=[{&(0x7f0000002180)=""/117, 0x75}], 0x1) connect$unix(r2, &(0x7f0000000140)=@abs, 0x6e) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x814}, 0x408c040) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'lo\x00'}) (async) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async) sendmsg$unix(r4, &(0x7f0000002a80)={&(0x7f0000000040)=@abs={0x2, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x28, 0x5}, 0x8000) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffc, 0x1, 0x406, 0x1, 0xffffffff, 0x9}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x0, 0x3c8, 0x9, 0x1, 0x95ce, 0x8}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01002000000000000000000000000000000000000000010000000061"], 0x0, 0x21, 0x0, 0x0, 0x0, 0x10000, @value=r7}, 0x28) (async) readv(r3, &(0x7f0000002380)=[{&(0x7f0000002180)=""/117, 0x75}], 0x1) (async) connect$unix(r2, &(0x7f0000000140)=@abs, 0x6e) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x814}, 0x408c040) (async) 804.058489ms ago: executing program 2 (id=5996): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) close(r0) r1 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000003500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000034c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSETELEM={0x1f4, 0xe, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1b4, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_DATA={0x38, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x31, 0x1, "2f52bbdd7929c759e5f82e486b609e8608c7b5e34d6d825e9929c2c3083f7a08c807f08d5599b5156ac2df04c7"}]}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x4}]}, {0x4}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x13c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0xbc, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x50, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xa178}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x7f}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x1cb}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x28, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2a}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x40, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}}}]}, @NFTA_SET_ELEM_USERDATA={0x4}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x21c}, 0x1, 0x0, 0x0, 0x400c000}, 0x40010) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000035c0)={'veth0_to_bond\x00', &(0x7f0000003580)=@ethtool_eee={0x45, 0x2, 0x7ff, 0x8, 0x8, 0xac2, 0xffffffff, 0x5, [0xd, 0x1000]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r3, &(0x7f0000003780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x24000000) socket$kcm(0x29, 0x6, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000037c0)) r4 = openat$cgroup_procs(r1, &(0x7f0000003840)='tasks\x00', 0x2, 0x0) mmap(&(0x7f0000ff8000/0x7000)=nil, 0x7000, 0x4, 0x4000010, r3, 0xdf3c1000) write(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000003ec0)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20008000) accept4$packet(0xffffffffffffffff, &(0x7f0000003f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000003f40)=0x14, 0x800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) connect$unix(r5, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x100000001, 0x4) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={@multicast1, 0x1, 0x0, 0x20, 0x0, [{@broadcast}, {@broadcast}]}}) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000340)=ANY=[]) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000004040)={'veth0_virt_wifi\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 705.401681ms ago: executing program 7 (id=5997): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001a00010028bd7000000000000220200000000007000000000800", @ANYRES32=r1], 0x34}}, 0xea5bc50b6199d77e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x2, 0x70bd09, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0xfff2, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f2f, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x5, 0x0, 0xe0, 0xbf, &(0x7f0000000380)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54ee2cbf21a66489121f24fefd198059288c9b735e0298e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0abece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c60000000000000002e8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39767830c6f24cd4189b1f7aac072f363e6f4d9633391bc51086c573f6907058f857d748e2531c04896f0a276b55", &(0x7f0000000940)="9c68a9ca09d4cd000bc48806b1a8b1b3bf8435bdbac69d8aaeca69961d6d3f1f819ffa9b0e35978debdd596285e4353ebec50d40bc48f5102a0d245c50fff1ea75cff1c7e6dda924b9abe660b2ae9dda9f82d0f50db9e6c971c38a4725df3c410825932aa87fb9a25b9669dc0521056d0570df7116c1250eb61ffba4902fb2257915710a92d589ddb6ee3c56d4acd4b2e6ae41635e4e9b829650f82f79cd63c004c8b5ac3c6d9f1f89ad90503efa1363c4ae3c06d7710ffb59281cbf7e8dfb"}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f0000000580)="9b01ca20738f70755ff710bfb47f1931ce808f953bc3c7afba2d001df4b9dba8c35e4278a1346d4912efe456609d7e9c33f9eac115e45403f04c4e9fdd2145b3f13ea0744e5eda89622974edc951ee27b9a5610375c22ceb22c7d01a6026be8bc3761a35b50df966c48399cc076817fda5d5595e8cb964a6763cfeeee95da1314a24b21c0bc607eb132615c94224e49a2722f86ebce0bfad888afed0384b5d7659210a65ff7f82bc9648632616dc1e223216e0d0c2105d07ab", 0xb9}, {&(0x7f0000000640)="d0cbe82c81920ed3ac290138c08da27b77e52a0da05de4f1bd9ce612c099b00ae8cc320be9cb75a5ee157f7bf9", 0x2d}, {&(0x7f0000000680)="5d951f329dcf32cf6684022cd9deb6c80e8646ceb76bd89273688615e4ca74b0ae425919a3cbc105b9b4666cce446dc0b12aadfe1515cbc5bc97eab8c6c4e8fd322533674655e9b317ac3b639c028c1375d00eb2c31975ae1d8a49f7f2efec458b503c6ee623", 0x66}, {&(0x7f0000000700)="4bff4e83cf3c0ffcb0a7c11db8adb46f77b3ef7d09bb1c3362474becfcd60da12fee8abe9626fe1dcc75d01f13b71cb7c198ba6309d3917ad1447e19514f2cd440073af03faaaca8f6b399be7d2a376e2312cfbcd17d33a4ff20be23890f0046558472765d06bc4553591b911643386340666d26cbc289bf16a1", 0x7a}, {&(0x7f0000000780)="6b0ce509aec489157dec081c8b8ca56be3a11047852ee8f78ff4be1f8950328ec9f241cdb0dd7b162b2b0770f7919fe8df4a386230fb89d89c3988b3f083b252618d1dc2e3028c36ae93eb636934f097201a082a953afbc9ca197b357a93d8f69481d17c35b4fafc636ea8830e6c7637c2b0ba6ed60c434b553e686e4f6c997d87f0a107dbb4194a52ce42d40ad76fb143d877ebc15f46938ff18e15e17642ad4de87837276e1d7e26afd50e0a", 0xad}], 0x5) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000900)={'sit0\x00', &(0x7f00000008c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private=0xa010101, 0x15, 0x8}}) writev(r5, &(0x7f00000000c0)=[{&(0x7f00000001c0)="2c1e", 0x2}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x4a) 492.839525ms ago: executing program 4 (id=5998): openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x1, 0x56, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0x0, 0x2, 0x10}, 0xc) recvfrom$inet6(r0, 0x0, 0x0, 0x2002, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a30000000000500050005000000050001000600000014000780060004400000000006"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000800) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) close(r8) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) connect$pppl2tp(r7, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) 0s ago: executing program 2 (id=5999): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x100) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f00000001c0)=r2, 0x4) sendmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x80}, 0x40000) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000000)='syzkaller\x00', 0x369081, &(0x7f0000000180)={@_ha_fsid={[0x3]}, {0x3, 0x9, 0xb0ca, 0x1800000000000000}}, 0x8e9, &(0x7f0000000200), &(0x7f0000000240)=0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x1fffffffffffffc2, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe00000000850000006b000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) kernel console output (not intermixed with test programs): ][T26565] veth1_vlan: entered allmulticast mode [ 786.067144][T26565] batman_adv: batadv0: Adding interface: ipvlan2 [ 786.067169][T26565] batman_adv: batadv0: Interface activated: ipvlan2 [ 786.172713][T26565] ipvlan3: entered allmulticast mode [ 786.179083][T26565] batman_adv: batadv0: Adding interface: ipvlan3 [ 786.179110][T26565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:35) already exists on: ipvlan2 [ 786.179128][T26565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.179142][T26565] batman_adv: batadv0: Interface activated: ipvlan3 [ 786.977473][T26603] __nla_validate_parse: 42 callbacks suppressed [ 786.977501][T26603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4924'. [ 786.977644][T26603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4924'. [ 786.977767][T26603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4924'. [ 786.977887][T26603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4924'. [ 786.983982][T26603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4924'. [ 786.984132][T26603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4924'. [ 786.984238][T26603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4924'. [ 786.984385][T26603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4924'. [ 786.984490][T26603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4924'. [ 786.987453][T26603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4924'. [ 787.808715][T19057] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 787.826541][T19057] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 787.828700][T19057] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 787.847566][T19057] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 787.848525][T19057] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 788.283379][T26642] validate_nla: 58 callbacks suppressed [ 788.283405][T26642] netlink: 'syz.1.4931': attribute type 7 has an invalid length. [ 789.087234][T26622] lo speed is unknown, defaulting to 1000 [ 789.121231][T26622] wg2 speed is unknown, defaulting to 1000 [ 789.132862][T26622] lo speed is unknown, defaulting to 1000 [ 789.503004][T26707] syzkaller1: entered promiscuous mode [ 789.503033][T26707] syzkaller1: entered allmulticast mode [ 789.989528][ T4930] Bluetooth: hci6: command tx timeout [ 790.568673][T26622] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.571774][T26622] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.571991][T26622] bridge_slave_0: entered allmulticast mode [ 790.577335][T26622] bridge_slave_0: entered promiscuous mode [ 790.585276][T26622] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.585453][T26622] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.587194][T26622] bridge_slave_1: entered allmulticast mode [ 790.592841][T26622] bridge_slave_1: entered promiscuous mode [ 790.739041][T26622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.761612][T26622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.945462][T26622] team0: Port device team_slave_0 added [ 791.144594][T26741] openvswitch: netlink: Missing key (keys=40, expected=100) [ 791.238125][T26622] team0: Port device team_slave_1 added [ 791.533956][T26622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.533978][T26622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.534007][T26622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.544627][T26622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.544645][T26622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.544671][T26622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 791.843132][T26622] hsr_slave_0: entered promiscuous mode [ 791.844410][T26622] hsr_slave_1: entered promiscuous mode [ 791.845258][T26622] debugfs: 'hsr0' already exists in 'hsr' [ 791.845292][T26622] Cannot create hsr debugfs directory [ 792.080181][ T4930] Bluetooth: hci6: command tx timeout [ 792.298640][T11668] nci: nci_rx_work: unknown MT 0x7 [ 792.317117][T26778] __nla_validate_parse: 29 callbacks suppressed [ 792.317140][T26778] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4961'. [ 792.925077][T26796] netlink: 67 bytes leftover after parsing attributes in process `syz.2.4966'. [ 792.961725][T26796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.967313][T26796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 793.021051][T26796] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 793.021075][T26796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 793.024455][T26796] veth1_vlan: left promiscuous mode [ 793.025274][T26796] veth0_vlan: left promiscuous mode [ 793.026404][T26796] veth0_vlan: entered promiscuous mode [ 793.028508][T26796] veth1_vlan: entered promiscuous mode [ 793.105800][T26796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 793.106413][T26796] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 793.107038][T26796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 793.108712][T26796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 793.149999][T26796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 793.156199][T26796] 8021q: adding VLAN 0 to HW filter on device bond1 [ 793.158272][T26796] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 793.227677][T26796] 8021q: adding VLAN 0 to HW filter on device bond2 [ 793.247240][T26796] 8021q: adding VLAN 0 to HW filter on device bond3 [ 793.260082][T26796] 8021q: adding VLAN 0 to HW filter on device bond4 [ 793.263214][T26796] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 793.329737][T26796] 8021q: adding VLAN 0 to HW filter on device bond5 [ 793.330809][T26796] bond5: entered allmulticast mode [ 793.330833][T26796] bridge6: entered allmulticast mode [ 793.332361][T26796] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 793.334696][T26796] bridge6: entered promiscuous mode [ 793.337031][T26796] 8021q: adding VLAN 0 to HW filter on device bond6 [ 793.385654][T26796] 8021q: adding VLAN 0 to HW filter on device bond7 [ 793.399451][T26796] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 793.404029][T26796] 8021q: adding VLAN 0 to HW filter on device bond8 [ 793.405172][T26796] 8021q: adding VLAN 0 to HW filter on device bond9 [ 793.519639][T11668] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.519667][ T6498] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 793.519679][T11668] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.521975][ T10] wg2 speed is unknown, defaulting to 1000 [ 793.522004][ T10] syz2: Port: 1 Link ACTIVE [ 793.536442][ T6002] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 793.575831][ T6002] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.575872][ T6002] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.577598][T22606] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.577629][T22606] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.577887][T22606] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.577913][T22606] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.153780][ T4930] Bluetooth: hci6: command tx timeout [ 795.149167][T26769] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 795.153060][T26776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4959'. [ 795.219176][T26622] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 795.310981][T26622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 795.313651][T26622] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 795.341670][T26622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 795.351610][T26622] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 795.405138][T26622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 795.418035][T26839] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4978'. [ 795.418123][T26622] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 795.449821][T26622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 795.461620][T26843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4979'. [ 795.541872][T26856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4976'. [ 795.569124][T26858] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4979'. [ 795.583124][T26843] 8021q: adding VLAN 0 to HW filter on device bond10 [ 795.645710][T26866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4979'. [ 795.647941][T26869] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4979'. [ 795.812436][T26855] 8021q: adding VLAN 0 to HW filter on device bond10 [ 795.812863][T26855] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address [ 795.813891][T26855] bond10: (slave wireguard0): Error -95 calling set_mac_address [ 795.820518][T26872] IPVS: length: 24 != 122904 [ 795.827705][T26872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4980'. [ 795.917997][T26867] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address [ 795.918922][T26867] bond10: (slave wireguard0): Error -95 calling set_mac_address [ 796.001227][T26872] 8021q: adding VLAN 0 to HW filter on device bond5 [ 796.244427][ T4930] Bluetooth: hci6: command tx timeout [ 796.346542][T26622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.423608][T26622] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.463592][ T6002] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.463721][ T6002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 796.481222][T11668] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.481335][T11668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 796.704175][T26896] netlink: 'syz.1.4985': attribute type 1 has an invalid length. [ 796.908003][T26908] sch_tbf: peakrate 896 is lower than or equals to rate 3850 ! [ 797.372948][T26896] 8021q: adding VLAN 0 to HW filter on device bond5 [ 797.424229][T26905] bond5: (slave veth5): Enslaving as an active interface with a down link [ 797.424442][T26890] sch_tbf: burst 7 is lower than device bridge0 mtu (1514) ! [ 797.461717][T26909] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 797.461998][T26909] bond5: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 797.909845][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 798.254373][T26951] __nla_validate_parse: 1 callbacks suppressed [ 798.254396][T26951] netlink: 9160 bytes leftover after parsing attributes in process `syz.2.4993'. [ 798.403096][T26960] syz_tun: entered allmulticast mode [ 798.422863][T26959] syz_tun: left allmulticast mode [ 798.546221][T26964] syzkaller0: left promiscuous mode [ 798.546249][T26964] syzkaller0: left allmulticast mode [ 798.546676][T26964] tipc: Resetting bearer [ 798.581263][T26964] syzkaller0: mtu less than device minimum [ 798.728915][T26622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 798.957058][T26970] syzkaller1: entered promiscuous mode [ 798.957085][T26970] syzkaller1: entered allmulticast mode [ 799.482382][T26622] veth0_vlan: entered promiscuous mode [ 799.501761][T26622] veth1_vlan: entered promiscuous mode [ 799.556665][T26622] veth0_macvtap: entered promiscuous mode [ 799.586608][T26622] veth1_macvtap: entered promiscuous mode [ 799.638662][T27006] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5006'. [ 799.663995][T26622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 799.681183][T26622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 799.764247][T22602] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.764822][T22602] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.765568][T22602] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.766297][T22607] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.888394][T27009] syzkaller1: entered promiscuous mode [ 799.888413][T27009] syzkaller1: entered allmulticast mode [ 799.955601][T22608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.955621][T22608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.015001][T22607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.015027][T22607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.188220][T27017] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5009'. [ 800.226368][T27020] nf_ct_set_timeout: 55 callbacks suppressed [ 800.226402][T27020] No such timeout policy "s " [ 800.226415][T27020] netlink: Failed to associated timeout policy 's ' [ 800.357643][T27024] netlink: 'syz.1.5009': attribute type 3 has an invalid length. [ 800.357669][T27024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5009'. [ 800.430861][T27003] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 800.583415][T27017] netlink: 'syz.1.5009': attribute type 5 has an invalid length. [ 800.748481][T27040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5012'. [ 800.937157][T27051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5012'. [ 800.960596][T27055] ip_tables: iptables: counters copy to user failed while replacing table [ 801.394726][T27076] digital: digital_start_poll: Unknown protocol [ 801.524719][T27079] netlink: 'syz.2.5017': attribute type 21 has an invalid length. [ 801.524744][T27079] netlink: 'syz.2.5017': attribute type 20 has an invalid length. [ 802.202380][T27107] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5024'. [ 802.240947][T27107] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 802.276011][T27107] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 802.293594][T27107] bond0 (unregistering): Released all slaves [ 802.497706][T27116] sit0: entered promiscuous mode [ 802.535001][T27116] netlink: 21 bytes leftover after parsing attributes in process `syz.3.5027'. [ 803.013215][T27141] pim6reg: entered allmulticast mode [ 803.017446][T27141] team0: entered allmulticast mode [ 803.018121][T27141] pim6reg: left allmulticast mode [ 803.081194][T27148] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5034'. [ 803.158402][T27140] team0: left allmulticast mode [ 803.221026][T27152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5034'. [ 803.440535][T27161] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5036'. [ 803.461991][T27163] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5037'. [ 803.483079][T27163] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5037'. [ 803.506668][T27165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5036'. [ 803.654231][T27167] veth3: entered promiscuous mode [ 803.667540][T27169] veth0: left allmulticast mode [ 803.667567][T27169] veth0: left promiscuous mode [ 803.667841][T27169] bridge0: port 2(veth0) entered disabled state [ 803.667875][T27167] netlink: zone id is out of range [ 803.667888][T27167] netlink: zone id is out of range [ 803.667896][T27167] netlink: zone id is out of range [ 803.667905][T27167] netlink: zone id is out of range [ 803.667912][T27167] netlink: zone id is out of range [ 803.667920][T27167] netlink: zone id is out of range [ 803.667932][T27167] netlink: zone id is out of range [ 803.667940][T27167] netlink: zone id is out of range [ 803.667948][T27167] netlink: zone id is out of range [ 803.667956][T27167] netlink: zone id is out of range [ 803.753724][T27169] batman_adv: batadv0: Adding interface: veth0 [ 803.753746][T27169] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.753779][T27169] batman_adv: batadv0: Interface activated: veth0 [ 804.023584][T27190] syz.1.5043: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 804.023760][T27190] CPU: 0 UID: 0 PID: 27190 Comm: syz.1.5043 Not tainted syzkaller #0 PREEMPT(full) [ 804.023787][T27190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 804.023801][T27190] Call Trace: [ 804.023810][T27190] [ 804.023821][T27190] dump_stack_lvl+0xe8/0x150 [ 804.023860][T27190] warn_alloc+0x24d/0x270 [ 804.023885][T27190] ? kasan_save_track+0x4f/0x80 [ 804.023908][T27190] ? kasan_save_track+0x3e/0x80 [ 804.023934][T27190] ? __pfx_warn_alloc+0x10/0x10 [ 804.023954][T27190] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 804.023988][T27190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.024034][T27190] __vmalloc_node_range_noprof+0x127/0x1540 [ 804.024129][T27190] ? rcu_is_watching+0x16/0xb0 [ 804.024180][T27190] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 804.024211][T27190] ? __kmalloc_cache_noprof+0x321/0x600 [ 804.024235][T27190] ? __kmalloc_cache_noprof+0x14d/0x600 [ 804.024257][T27190] ? xskq_create+0x56/0x220 [ 804.024318][T27190] xskq_create+0x148/0x220 [ 804.024341][T27190] ? xsk_init_queue+0x8a/0xe0 [ 804.024388][T27190] xsk_init_queue+0x8a/0xe0 [ 804.024424][T27190] xsk_setsockopt+0x5e0/0x960 [ 804.024460][T27190] ? __pfx_xsk_setsockopt+0x10/0x10 [ 804.024493][T27190] ? __pfx_aa_sk_perm+0x10/0x10 [ 804.024569][T27190] ? aa_sock_opt_perm+0x142/0x1e0 [ 804.024602][T27190] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 804.024630][T27190] ? __pfx_xsk_setsockopt+0x10/0x10 [ 804.024678][T27190] do_sock_setsockopt+0x17c/0x1b0 [ 804.024712][T27190] __x64_sys_setsockopt+0x13d/0x1b0 [ 804.024746][T27190] do_syscall_64+0x166/0x520 [ 804.024770][T27190] ? trace_irq_disable+0x3b/0x140 [ 804.024793][T27190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.024816][T27190] ? clear_bhb_loop+0x70/0xc0 [ 804.024845][T27190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.024866][T27190] RIP: 0033:0x7f5914d9e159 [ 804.024889][T27190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 804.024908][T27190] RSP: 002b:00007f5915c6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 804.024931][T27190] RAX: ffffffffffffffda RBX: 00007f5915025fa0 RCX: 00007f5914d9e159 [ 804.024949][T27190] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005 [ 804.024963][T27190] RBP: 00007f5914e3506b R08: 0000000000000004 R09: 0000000000000000 [ 804.024978][T27190] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 804.024992][T27190] R13: 00007f5915026038 R14: 00007f5915025fa0 R15: 00007ffe17afa618 [ 804.025030][T27190] [ 804.025250][T27190] Mem-Info: [ 804.025279][T27190] active_anon:6673 inactive_anon:3 isolated_anon:0 [ 804.025279][T27190] active_file:19 inactive_file:43866 isolated_file:0 [ 804.025279][T27190] unevictable:0 dirty:122 writeback:0 [ 804.025279][T27190] slab_reclaimable:13112 slab_unreclaimable:139830 [ 804.025279][T27190] mapped:40033 shmem:523 pagetables:1779 [ 804.025279][T27190] sec_pagetables:0 bounce:0 [ 804.025279][T27190] kernel_misc_reclaimable:0 [ 804.025279][T27190] free:1216493 free_pcp:8303 free_cma:0 [ 804.025403][T27190] Node 0 active_anon:26692kB inactive_anon:12kB active_file:76kB inactive_file:175268kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:160132kB dirty:488kB writeback:0kB shmem:2092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16892kB pagetables:7012kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 804.025463][T27190] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 804.025516][T27190] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 804.025580][T27190] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 804.027174][T27190] Node 0 DMA32 free:902960kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:26692kB inactive_anon:12kB active_file:76kB inactive_file:175268kB unevictable:0kB writepending:488kB zspages:0kB present:3129332kB managed:2546612kB mlocked:0kB bounce:0kB free_pcp:32208kB local_pcp:14464kB free_cma:0kB [ 804.027244][T27190] lowmem_reserve[]: 0 0 0 0 0 [ 804.027282][T27190] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 804.027397][T27190] lowmem_reserve[]: 0 0 0 0 0 [ 804.027441][T27190] Node 1 Normal free:3947652kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:1004kB local_pcp:0kB free_cma:0kB [ 804.027548][T27190] lowmem_reserve[]: 0 0 0 0 0 [ 804.027591][T27190] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 804.027728][T27190] Node 0 DMA32: 1194*4kB (UME) 847*8kB (UME) 745*16kB (UME) 764*32kB (UM) 1615*64kB (UME) 1093*128kB (UME) 450*256kB (UME) 130*512kB (UME) 40*1024kB (UME) 6*2048kB (UM) 92*4096kB (UM) = 903024kB [ 804.027910][T27190] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 804.028025][T27190] Node 1 Normal: 3*4kB (UM) 1*8kB (M) 1*16kB (M) 1*32kB (M) 1*64kB (M) 6*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 962*4096kB (M) = 3947652kB [ 804.028325][T27190] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 804.028345][T27190] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 804.028373][T27190] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 804.028391][T27190] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 804.028409][T27190] 44404 total pagecache pages [ 804.028419][T27190] 0 pages in swap cache [ 804.028427][T27190] Free swap = 124996kB [ 804.028436][T27190] Total swap = 124996kB [ 804.028446][T27190] 2097051 pages RAM [ 804.028454][T27190] 0 pages HighMem/MovableOnly [ 804.028463][T27190] 428782 pages reserved [ 804.028470][T27190] 0 pages cma reserved [ 804.395507][T27194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5044'. [ 805.408494][T27214] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5048'. [ 805.565422][T27217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5049'. [ 805.643940][T27217] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5049'. [ 806.868658][T27272] syzkaller1: entered promiscuous mode [ 806.868698][T27272] syzkaller1: entered allmulticast mode [ 806.875872][T27273] IPv6: NLM_F_CREATE should be specified when creating new route [ 806.875965][T27273] IPv6: Can't replace route, no match found [ 807.192633][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 808.333784][T27316] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5071'. [ 808.333833][T27316] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5071'. [ 808.457960][T27324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5073'. [ 808.561543][T27323] veth5: entered allmulticast mode [ 808.568098][T27323] bond6: (slave veth5): Enslaving as an active interface with an up link [ 809.109935][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 809.146554][T27354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5081'. [ 809.148984][T27354] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5081'. [ 809.332543][T27355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5081'. [ 809.527333][T27367] No such timeout policy "syz1" [ 809.805116][T27378] net_ratelimit: 16 callbacks suppressed [ 809.805149][T27378] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 809.986204][T27385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5089'. [ 810.147626][T27398] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5091'. [ 810.170650][T27401] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5093'. [ 810.172883][T27401] x_tables: duplicate underflow at hook 1 [ 810.224883][T27392] netlink: 'syz.1.5091': attribute type 5 has an invalid length. [ 810.225033][T27392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 810.391799][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 810.917121][T27427] netlink: 628 bytes leftover after parsing attributes in process `syz.3.5101'. [ 810.917147][T27427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5101'. [ 810.965135][T27427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5101'. [ 810.967383][T27427] xt_TCPMSS: Only works on TCP SYN packets [ 811.032199][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 811.305323][T27439] netlink: 'syz.2.5105': attribute type 30 has an invalid length. [ 811.307768][T27439] lo: entered promiscuous mode [ 811.328402][T27439] tunl0: entered promiscuous mode [ 811.345737][T27439] gre0: entered promiscuous mode [ 811.356220][T27439] gretap0: entered promiscuous mode [ 811.374527][T27439] erspan0: entered promiscuous mode [ 811.378794][T27439] ip_vti0: entered promiscuous mode [ 811.393875][T27439] ip6_vti0: entered promiscuous mode [ 811.397690][T27439] sit0: entered promiscuous mode [ 811.427899][T27439] ip6tnl0: entered promiscuous mode [ 811.446593][T27439] ip6gre0: entered promiscuous mode [ 811.466197][T27439] syz_tun: entered promiscuous mode [ 811.484735][T27439] ip6gretap0: entered promiscuous mode [ 811.487080][T27439] bridge0: entered promiscuous mode [ 811.492493][T27439] vcan0: entered promiscuous mode [ 811.502536][T27439] team0: entered promiscuous mode [ 811.508360][T27439] dummy0: entered promiscuous mode [ 811.582016][T27439] nlmon0: entered promiscuous mode [ 811.588334][T27439] batadv0: entered promiscuous mode [ 811.601362][T27439] vxcan0: entered promiscuous mode [ 811.607568][T27439] vxcan1: entered promiscuous mode [ 811.614028][T27439] veth0: entered promiscuous mode [ 811.620843][T27439] veth1: entered promiscuous mode [ 811.664033][T27439] wg0: entered promiscuous mode [ 811.667242][T27439] wg1: entered promiscuous mode [ 811.684604][T27439] wg2: entered promiscuous mode [ 811.686896][T27439] veth0_to_bridge: entered promiscuous mode [ 811.704976][T27439] bridge_slave_0: entered promiscuous mode [ 811.708379][T27439] veth1_to_bridge: entered promiscuous mode [ 811.726701][T27439] bridge_slave_1: entered promiscuous mode [ 811.737511][T27439] veth0_to_bond: entered promiscuous mode [ 811.748265][T27439] bond_slave_0: entered promiscuous mode [ 811.757912][T27439] veth0_to_team: entered promiscuous mode [ 811.768018][T27439] team_slave_0: entered promiscuous mode [ 811.772087][T27439] veth1_to_team: entered promiscuous mode [ 811.775514][T27439] team_slave_1: entered promiscuous mode [ 811.778896][T27439] veth1_to_batadv: entered promiscuous mode [ 811.781846][T27439] batadv_slave_1: entered promiscuous mode [ 811.789006][T27439] xfrm0: entered promiscuous mode [ 811.814534][T27439] veth0_to_hsr: entered promiscuous mode [ 811.825718][T27439] veth1_to_hsr: entered promiscuous mode [ 811.841413][T27439] hsr0: entered promiscuous mode [ 811.848727][T27439] veth1_virt_wifi: entered promiscuous mode [ 811.857857][T27439] veth0_virt_wifi: entered promiscuous mode [ 811.868165][T27439] virt_wifi0: entered promiscuous mode [ 811.881936][T27439] vlan0: entered promiscuous mode [ 811.885756][T27439] vlan1: entered promiscuous mode [ 811.904300][T27439] macvlan0: entered promiscuous mode [ 811.924897][T27439] macvlan1: entered promiscuous mode [ 811.938637][T27439] ipvlan0: entered promiscuous mode [ 811.951933][T27439] ipvlan1: entered promiscuous mode [ 811.955771][T27439] geneve1: entered promiscuous mode [ 811.981302][T27439] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 811.987359][T27439] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 812.103107][T27439] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 812.111785][T27439] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 812.111991][T27439] mac80211_hwsim hwsim61 wlan1: entered promiscuous mode [ 812.112219][T27439] mac80211_hwsim hwsim62 wlan2: entered promiscuous mode [ 812.114799][T27439] bridge1: entered promiscuous mode [ 812.124812][T27439] bond1: entered promiscuous mode [ 812.124835][T27439] batadv1: entered promiscuous mode [ 812.131593][T27439] gre1: entered promiscuous mode [ 812.178537][T27439] vxlan0: entered promiscuous mode [ 812.185471][T27439] bond2: entered promiscuous mode [ 812.187385][T27439] ip6tnl1: entered promiscuous mode [ 812.202379][T27439] bridge2: entered promiscuous mode [ 812.206796][T27439] bond3: entered promiscuous mode [ 812.206840][T27439] geneve2: entered promiscuous mode [ 812.221509][T27439] vlan2: entered promiscuous mode [ 812.237877][T27439] syztnl2: entered promiscuous mode [ 812.251252][T27439] bond4: entered promiscuous mode [ 812.251289][T27439] batadv2: entered promiscuous mode [ 812.255925][T27439] veth2: entered promiscuous mode [ 812.257745][T27439] veth3: entered promiscuous mode [ 812.281209][T27439] veth4: entered promiscuous mode [ 812.283013][T27439] veth5: entered promiscuous mode [ 812.284663][T27439] sit1: entered promiscuous mode [ 812.304895][T27439] bridge3: entered promiscuous mode [ 812.308460][T27439] bridge4: entered promiscuous mode [ 812.322368][T27453] netlink: NAT attribute has 4 unknown bytes [ 812.322411][T27453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 812.324538][T27439] bridge5: entered promiscuous mode [ 812.327576][T27439] ip6tnl2: entered promiscuous mode [ 812.329014][T27439] veth6: entered promiscuous mode [ 812.334206][T27439] veth7: entered promiscuous mode [ 812.345929][T27439] bond5: entered promiscuous mode [ 812.352892][T27439] bond5: left allmulticast mode [ 812.352914][T27439] bridge6: left allmulticast mode [ 812.358371][T27439] macvtap0: entered promiscuous mode [ 812.371559][T27439] syztnl1: entered promiscuous mode [ 812.381219][T27439] bond6: entered promiscuous mode [ 812.386786][T27439] bridge7: entered promiscuous mode [ 812.397919][T27439] bond7: entered promiscuous mode [ 812.397942][T27439] bridge8: entered promiscuous mode [ 812.411651][T27439] vxlan1: entered promiscuous mode [ 812.420477][T27439] macsec0: entered promiscuous mode [ 812.422007][T27439] 7: entered promiscuous mode [ 812.431908][T27439] vlan3: entered promiscuous mode [ 812.437036][T27439] bond8: entered promiscuous mode [ 812.437060][T27439] bond9: entered promiscuous mode [ 812.451989][T27439] dvmrp8: entered promiscuous mode [ 812.456575][T27439] bridge9: entered promiscuous mode [ 812.464933][T27439] veth8: entered promiscuous mode [ 812.468248][T27439] veth9: entered promiscuous mode [ 812.483756][T27439] bridge10: entered promiscuous mode [ 812.486760][T27439] bond10: entered promiscuous mode [ 812.579622][ T6483] wg2 speed is unknown, defaulting to 1000 [ 812.579651][ T6483] syz2: Port: 1 Link DOWN [ 812.588198][T22602] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 812.588235][T22602] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.588365][T22602] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 812.588389][T22602] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.588423][T22602] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 812.588446][T22602] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.795250][T22602] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 812.795291][T22602] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.287612][T27476] netlink: 'syz.2.5113': attribute type 3 has an invalid length. [ 813.287639][T27476] netlink: 'syz.2.5113': attribute type 2 has an invalid length. [ 813.633587][T27486] netlink: 'syz.2.5115': attribute type 6 has an invalid length. [ 813.846780][T27493] __nla_validate_parse: 4 callbacks suppressed [ 813.846804][T27493] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5117'. [ 815.393052][T27549] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 815.677567][T27558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5135'. [ 815.705421][T27562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5135'. [ 815.779162][T27559] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5130'. [ 815.922414][T27577] netlink: 'syz.4.5140': attribute type 12 has an invalid length. [ 816.081710][T27579] netlink: 'syz.2.5141': attribute type 10 has an invalid length. [ 816.145643][T27585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5142'. [ 816.548767][T27601] netlink: 'syz.4.5146': attribute type 21 has an invalid length. [ 816.558619][T27601] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5146'. [ 816.558667][T27601] netlink: 'syz.4.5146': attribute type 1 has an invalid length. [ 817.312958][T27618] bond0: (slave gretap0): Error: Device is in use and cannot be enslaved [ 817.477624][T27622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5153'. [ 817.504978][T27622] ip6gretap0: entered promiscuous mode [ 817.796854][T27630] ip6gretap1: entered allmulticast mode [ 817.808703][T27630] batman_adv: batadv0: Adding interface: ip6gretap1 [ 817.808738][T27630] batman_adv: batadv0: Interface activated: ip6gretap1 [ 818.332082][T27659] netlink: 15 bytes leftover after parsing attributes in process `syz.6.5164'. [ 818.417737][T27655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5161'. [ 818.522313][T27664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5167'. [ 818.797026][T27674] syzkaller1: entered promiscuous mode [ 818.797053][T27674] syzkaller1: entered allmulticast mode [ 819.274757][T27697] debugfs: '.PÑè'óG!DEÒSˆ' already exists in 'ieee80211' [ 819.414872][T27724] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 819.680327][T27732] netlink: 'syz.3.5182': attribute type 41 has an invalid length. [ 819.844248][T27739] syzkaller1: entered promiscuous mode [ 819.844277][T27739] syzkaller1: entered allmulticast mode [ 820.118068][T27745] can: request_module (can-proto-0) failed. [ 820.126338][T27745] __nla_validate_parse: 3 callbacks suppressed [ 820.126362][T27745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5185'. [ 820.435519][T27756] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5188'. [ 820.516390][T27761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5191'. [ 820.671318][T27766] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5193'. [ 820.671977][T27766] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 820.672353][T27766] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5193'. [ 820.818744][ T31] audit: type=1800 audit(1789742562.231:15): pid=27771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5194" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2117 res=0 errno=0 [ 820.820819][T27771] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5194'. [ 822.336595][T27725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 822.340279][T27712] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 822.622864][T27789] netlink: 'syz.2.5198': attribute type 1 has an invalid length. [ 822.630110][T27789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5198'. [ 823.099137][T27818] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 823.111135][T27818] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5203'. [ 823.300418][T27830] syzkaller0: entered promiscuous mode [ 823.300448][T27830] syzkaller0: entered allmulticast mode [ 823.845755][T27847] lo speed is unknown, defaulting to 1000 [ 823.871335][T27847] wg2 speed is unknown, defaulting to 1000 [ 823.881946][T27847] lo speed is unknown, defaulting to 1000 [ 824.014920][T27858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5216'. [ 824.028942][T27858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 824.092741][T27858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 824.226048][T27862] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5219'. [ 824.442609][T27850] lo speed is unknown, defaulting to 1000 [ 824.446245][T27850] wg2 speed is unknown, defaulting to 1000 [ 824.448075][T27850] lo speed is unknown, defaulting to 1000 [ 826.863998][T27853] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 827.490674][T27910] __nla_validate_parse: 2 callbacks suppressed [ 827.490698][T27910] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5227'. [ 827.490942][T27915] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5231'. [ 827.840560][T27934] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5235'. [ 827.854116][T27935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5234'. [ 827.930364][T27937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5234'. [ 827.963820][T27937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5234'. [ 828.818956][T27983] IPVS: sync thread started: state = MASTER, mcast_ifn = tunl0, syncid = 1, id = 0 [ 829.213360][T27998] syzkaller0: entered promiscuous mode [ 829.213385][T27998] syzkaller0: entered allmulticast mode [ 829.225373][T27993] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5246'. [ 829.480735][T28004] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5251'. [ 829.922345][T28027] bridge0: port 3(vlan2) entered blocking state [ 829.923312][T28027] bridge0: port 3(vlan2) entered disabled state [ 829.923484][T28027] vlan2: entered allmulticast mode [ 829.923503][T28027] geneve0: entered allmulticast mode [ 829.956993][T28027] vlan2: entered promiscuous mode [ 829.957017][T28027] geneve0: entered promiscuous mode [ 830.637226][T28069] netlink: 296 bytes leftover after parsing attributes in process `syz.2.5268'. [ 830.972748][T28074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5270'. [ 832.123722][T28097] netlink: 'syz.2.5275': attribute type 2 has an invalid length. [ 832.147137][ T31] audit: type=1107 audit(1789742573.561:16): pid=28095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 832.164214][T28097] netlink: 'syz.2.5275': attribute type 2 has an invalid length. [ 832.164244][T28097] netlink: 'syz.2.5275': attribute type 2 has an invalid length. [ 832.187432][T28101] SET target dimension over the limit! [ 832.326132][T28116] SET target dimension over the limit! [ 832.381062][T28101] syzkaller1: entered promiscuous mode [ 832.381090][T28101] syzkaller1: entered allmulticast mode [ 832.548326][T28113] vlan3: entered promiscuous mode [ 832.548353][T28113] batadv0: entered promiscuous mode [ 832.713565][T28129] __nla_validate_parse: 3 callbacks suppressed [ 832.713591][T28129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5282'. [ 832.852478][T28129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5282'. [ 833.102139][T28152] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5286'. [ 833.144227][T28152] netlink: 'syz.6.5286': attribute type 1 has an invalid length. [ 833.144254][T28152] netlink: 248 bytes leftover after parsing attributes in process `syz.6.5286'. [ 833.479059][T28161] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5288'. [ 833.700112][T28166] dummy0: mtu less than device minimum [ 833.803121][T28174] netlink: 'syz.1.5294': attribute type 3 has an invalid length. [ 833.803148][T28174] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5294'. [ 833.891969][T28178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5298'. [ 834.281733][T28200] netlink: 'syz.4.5302': attribute type 1 has an invalid length. [ 834.491302][T28200] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5302'. [ 834.511877][T28202] bond0: (slave geneve3): making interface the new active one [ 834.512827][T28202] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 834.514535][T11668] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 834.526915][T28200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.540594][T11668] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 834.540639][T11668] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 834.540672][T11668] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 834.710196][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 834.755273][T28211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5305'. [ 834.773387][T28211] vlan0: entered promiscuous mode [ 835.038021][T28227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5312'. [ 835.167944][T28227] 8021q: adding VLAN 0 to HW filter on device bond6 [ 835.177702][T28230] netlink: 'syz.3.5310': attribute type 1 has an invalid length. [ 835.205327][T28237] bridge0: port 1(wlan1) entered blocking state [ 835.205610][T28237] bridge0: port 1(wlan1) entered disabled state [ 835.205780][T28237] mac80211_hwsim hwsim57 wlan1: entered allmulticast mode [ 835.223729][T28237] mac80211_hwsim hwsim57 wlan1: entered promiscuous mode [ 835.232786][T28223] netlink: 'syz.3.5310': attribute type 1 has an invalid length. [ 835.631106][T28255] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 835.631139][T28255] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 835.803042][T28263] IPv6: addrconf: prefix option has invalid lifetime [ 835.803061][T28263] IPv6: addrconf: prefix option has invalid lifetime [ 836.523691][T28295] openvswitch: netlink: Duplicate or invalid key (type 0). [ 836.924467][T28314] ipt_REJECT: TCP_RESET invalid for non-tcp [ 837.102264][T28324] veth13: entered promiscuous mode [ 837.102290][T28324] veth13: entered allmulticast mode [ 837.103069][T28324] team0: Device veth13 is up. Set it down before adding it as a team port [ 837.328566][T28334] netlink: 'syz.2.5341': attribute type 3 has an invalid length. [ 837.653433][T28345] netlink: 'syz.3.5345': attribute type 61 has an invalid length. [ 837.817820][T28347] netlink: 'syz.6.5346': attribute type 4 has an invalid length. [ 837.879458][T28352] netlink: 'syz.6.5346': attribute type 4 has an invalid length. [ 838.233812][T28365] __nla_validate_parse: 8 callbacks suppressed [ 838.233837][T28365] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5353'. [ 838.334920][T28371] tc_dump_action: action bad kind [ 838.822796][T28402] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5360'. [ 839.062057][T28408] Bluetooth: hci0: unsupported parameter 5134 [ 839.062082][T28408] Bluetooth: hci0: unsupported parameter 8192 [ 839.062096][T28408] Bluetooth: hci0: unsupported parameter 5134 [ 839.062109][T28408] Bluetooth: hci0: unsupported parameter 8192 [ 839.063235][T28408] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5363'. [ 839.308586][T28420] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5364'. [ 839.493386][T28428] netlink: 'syz.4.5366': attribute type 1 has an invalid length. [ 839.559182][T28428] bond3: entered promiscuous mode [ 839.560095][T28428] 8021q: adding VLAN 0 to HW filter on device bond3 [ 839.685378][T28428] veth9: entered allmulticast mode [ 839.711685][T28428] bond3: (slave veth9): making interface the new active one [ 839.711713][T28428] veth9: entered promiscuous mode [ 839.712734][T28428] bond3: (slave veth9): Enslaving as an active interface with an up link [ 839.796098][T28446] SET target dimension over the limit! [ 839.812721][T28435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5368'. [ 839.947663][T28418] Cannot find set identified by id 65534 to match [ 840.040416][T28418] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5365'. [ 840.191321][T28445] xt_CT: No such helper "syz1" [ 840.208620][T28463] netlink: 'syz.2.5369': attribute type 23 has an invalid length. [ 840.350079][ T4930] Bluetooth: hci1: connection err: -111 [ 840.353284][T28466] openvswitch: netlink: Unknown key attributes 20 [ 840.353918][T28463] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5369'. [ 840.355119][T28466] netlink: 'syz.4.5370': attribute type 11 has an invalid length. [ 840.752939][T28484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5375'. [ 840.868236][T28492] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5376'. [ 840.918159][T28484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5375'. [ 841.276905][T28513] syzkaller1: entered promiscuous mode [ 841.276932][T28513] syzkaller1: entered allmulticast mode [ 844.113328][T28504] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 844.557746][T28553] __nla_validate_parse: 2 callbacks suppressed [ 844.557769][T28553] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5389'. [ 844.592328][T28552] macsec0: entered promiscuous mode [ 844.607584][T28553] veth1_macvtap: left promiscuous mode [ 844.673794][T28553] macsec0 (unregistering): left promiscuous mode [ 844.948409][T28580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5392'. [ 844.948685][T28577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5392'. [ 845.394504][T28550] 8021q: VLANs not supported on syzkaller0 [ 845.443940][ T4930] Bluetooth: hci6: link tx timeout [ 845.444192][ T4930] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 845.451267][ T4930] Bluetooth: hci6: link tx timeout [ 845.451288][ T4930] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 845.536986][T28597] netlink: 'syz.3.5396': attribute type 10 has an invalid length. [ 845.554978][T28597] vxcan1: entered promiscuous mode [ 845.555180][T28597] team0: Device vxcan1 is of different type [ 845.564587][ T4930] Bluetooth: hci6: link tx timeout [ 845.564608][ T4930] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 845.564625][ T4930] Bluetooth: hci6: link tx timeout [ 845.564636][ T4930] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 845.617910][ T4930] Bluetooth: hci6: link tx timeout [ 845.619175][ T4930] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 845.619798][ T4930] Bluetooth: hci6: link tx timeout [ 845.619813][ T4930] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 845.652472][ T4930] Bluetooth: hci6: link tx timeout [ 845.652496][ T4930] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 845.652513][ T4930] Bluetooth: hci6: link tx timeout [ 845.652525][ T4930] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 845.732393][T28603] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 845.737454][T28603] bond1 (unregistering): Released all slaves [ 845.866323][T28606] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 845.867718][T28606] bond1 (unregistering): Released all slaves [ 845.905839][ T4930] Bluetooth: hci6: link tx timeout [ 845.905862][ T4930] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 845.905878][ T4930] Bluetooth: hci6: link tx timeout [ 845.905887][ T4930] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 845.987327][ T4930] Bluetooth: hci6: link tx timeout [ 845.987351][ T4930] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 845.987370][ T4930] Bluetooth: hci6: link tx timeout [ 845.987381][ T4930] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 846.210866][T28631] nbd7: detected capacity change from 0 to 63 [ 846.349448][ T4930] block nbd7: Receive control failed (result -104) [ 846.876488][T28665] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5408'. [ 846.876514][T28665] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5408'. [ 846.896567][T28662] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5408'. [ 846.896589][T28662] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5408'. [ 846.952172][ T4930] Bluetooth: hci6: link tx timeout [ 846.952196][ T4930] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 846.952213][ T4930] Bluetooth: hci6: link tx timeout [ 846.952224][ T4930] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 847.259715][ T4930] Bluetooth: hci6: link tx timeout [ 847.259760][ T4930] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 847.259777][ T4930] Bluetooth: hci6: link tx timeout [ 847.259787][ T4930] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 847.360788][ T4930] Bluetooth: hci6: link tx timeout [ 847.360821][ T4930] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 847.360840][ T4930] Bluetooth: hci6: link tx timeout [ 847.360851][ T4930] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 847.450129][T28692] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5413'. [ 847.450157][T28692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5413'. [ 847.518521][T28701] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 847.531199][ T4930] Bluetooth: hci6: command 0x0405 tx timeout [ 847.783953][T28703] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5415'. [ 848.141210][T28725] lo: left promiscuous mode [ 848.141855][T28725] tunl0: left promiscuous mode [ 848.142059][T28725] gre0: left promiscuous mode [ 848.142219][T28725] gretap0: left promiscuous mode [ 848.142390][T28725] erspan0: left promiscuous mode [ 848.142547][T28725] ip_vti0: left promiscuous mode [ 848.142740][T28725] ip6_vti0: left promiscuous mode [ 848.142893][T28725] sit0: left promiscuous mode [ 848.143055][T28725] ip6tnl0: left promiscuous mode [ 848.143211][T28725] ip6gre0: left promiscuous mode [ 848.146950][T28725] syz_tun: left promiscuous mode [ 848.147170][T28725] ip6gretap0: left promiscuous mode [ 848.147345][T28725] bridge0: left promiscuous mode [ 848.147517][T28725] vcan0: left promiscuous mode [ 848.147890][T28725] dummy0: left promiscuous mode [ 848.148094][T28725] nlmon0: left promiscuous mode [ 848.222019][T22607] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x6c [ 848.222956][T28725] veth0: left promiscuous mode [ 848.223216][T28725] veth1: left promiscuous mode [ 848.223401][T28725] wg0: left promiscuous mode [ 848.223586][T28725] wg1: left promiscuous mode [ 848.223759][T28725] wg2: left promiscuous mode [ 848.223941][T28725] veth0_to_bridge: left promiscuous mode [ 848.224123][T28725] bridge_slave_0: left promiscuous mode [ 848.224301][T28725] veth1_to_bridge: left promiscuous mode [ 848.228722][T28725] bridge_slave_1: left promiscuous mode [ 848.228933][T28725] veth0_to_bond: left promiscuous mode [ 848.241789][T28725] bond_slave_0: left promiscuous mode [ 848.242022][T28725] veth0_to_team: left promiscuous mode [ 848.242200][T28725] team_slave_0: left promiscuous mode [ 848.242392][T28725] veth1_to_team: left promiscuous mode [ 848.242568][T28725] team_slave_1: left promiscuous mode [ 848.248429][T28725] veth1_to_batadv: left promiscuous mode [ 848.248613][T28725] batadv_slave_1: left promiscuous mode [ 848.248791][T28725] xfrm0: left promiscuous mode [ 848.248978][T28725] veth0_to_hsr: left promiscuous mode [ 848.261316][T28725] veth1_to_hsr: left promiscuous mode [ 848.261693][T28725] hsr0: left promiscuous mode [ 848.261888][T28725] veth1_virt_wifi: left promiscuous mode [ 848.262073][T28725] veth0_virt_wifi: left promiscuous mode [ 848.262290][T28725] virt_wifi0: left promiscuous mode [ 848.280681][T28725] vlan1: left promiscuous mode [ 848.281065][T28725] macvlan0: left promiscuous mode [ 848.281248][T28725] macvlan1: left promiscuous mode [ 848.281439][T28725] ipvlan0: left promiscuous mode [ 848.281621][T28725] ipvlan1: left promiscuous mode [ 848.281825][T28725] geneve1: left promiscuous mode [ 848.322342][T28738] netlink: zone id is out of range [ 848.322358][T28738] netlink: zone id is out of range [ 848.322375][T28738] netlink: zone id is out of range [ 848.322384][T28738] netlink: zone id is out of range [ 848.322392][T28738] netlink: zone id is out of range [ 848.322400][T28738] netlink: zone id is out of range [ 848.322411][T28738] netlink: zone id is out of range [ 848.322419][T28738] netlink: zone id is out of range [ 848.322426][T28738] netlink: zone id is out of range [ 848.450392][T28725] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 848.451614][T28725] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 848.470308][T28725] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 848.470529][T28725] netdevsim netdevsim2 netdevsim2: left promiscuous mode [ 848.470692][T28725] netdevsim netdevsim2 netdevsim3: left promiscuous mode [ 848.470887][T28725] mac80211_hwsim hwsim60 wlan0: left promiscuous mode [ 848.471090][T28725] mac80211_hwsim hwsim61 wlan1: left promiscuous mode [ 848.471252][T28725] mac80211_hwsim hwsim62 wlan2: left promiscuous mode [ 848.474824][T28725] bridge1: left promiscuous mode [ 848.474980][T28725] bond1: left promiscuous mode [ 848.483481][T28725] batadv1: left promiscuous mode [ 848.483694][T28725] gre1: left promiscuous mode [ 848.483842][T28725] vxlan0: left promiscuous mode [ 848.483973][T28725] bond2: left promiscuous mode [ 848.484136][T28725] ip6tnl1: left promiscuous mode [ 848.484150][T28725] ip6tnl1: left allmulticast mode [ 848.484274][T28725] bridge2: left promiscuous mode [ 848.489031][T28725] vlan2: left promiscuous mode [ 848.489049][T28725] bond3: left promiscuous mode [ 848.496209][T28725] geneve2: left promiscuous mode [ 848.496342][T28725] syztnl2: left promiscuous mode [ 848.496480][T28725] bond4: left promiscuous mode [ 848.503125][T28725] veth2: left promiscuous mode [ 848.503299][T28725] veth3: left promiscuous mode [ 848.512339][T28725] batadv2: left promiscuous mode [ 848.512533][T28725] veth4: left promiscuous mode [ 848.512698][T28725] veth5: left promiscuous mode [ 848.512860][T28725] sit1: left promiscuous mode [ 848.512993][T28725] bridge3: left promiscuous mode [ 848.513133][T28725] bridge4: left promiscuous mode [ 848.513275][T28725] bridge5: left promiscuous mode [ 848.513422][T28725] ip6tnl2: left promiscuous mode [ 848.513553][T28725] veth6: left promiscuous mode [ 848.513769][T28725] veth7: left promiscuous mode [ 848.547194][T28725] bond5: left promiscuous mode [ 848.547567][T28725] macvtap0: left promiscuous mode [ 848.547584][T28725] macvtap0: left allmulticast mode [ 848.547786][T28725] bridge6: left promiscuous mode [ 848.547928][T28725] syztnl1: left promiscuous mode [ 848.548071][T28725] bond6: left promiscuous mode [ 848.548086][T28725] bond6: left allmulticast mode [ 848.548222][T28725] bridge7: left promiscuous mode [ 848.548388][T28725] bond7: left promiscuous mode [ 848.548542][T28725] bond7: left allmulticast mode [ 848.566302][T28725] bridge8: left allmulticast mode [ 848.566521][T28725] bridge8: left promiscuous mode [ 848.566715][T28725] vxlan1: left promiscuous mode [ 848.568558][T28725] macsec0: left promiscuous mode [ 848.568713][T28725] 7: left promiscuous mode [ 848.568860][T28725] vlan3: left promiscuous mode [ 848.568874][T28725] team0: left promiscuous mode [ 848.578454][T28725] bond8: left promiscuous mode [ 848.583742][T28725] bond9: left promiscuous mode [ 848.583898][T28725] dvmrp8: left promiscuous mode [ 848.584036][T28725] bridge9: left promiscuous mode [ 848.584185][T28725] veth8: left promiscuous mode [ 848.584359][T28725] veth9: left promiscuous mode [ 848.588424][T28725] bridge10: left promiscuous mode [ 848.588609][T28725] bond10: left promiscuous mode [ 848.720700][T28736] netlink: 'syz.4.5420': attribute type 1 has an invalid length. [ 848.796019][T28746] SET target dimension over the limit! [ 849.424900][T28785] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 849.425892][T28785] sch_tbf: burst 6281 is lower than device lo mtu (11337746) ! [ 849.491911][T28787] veth13: entered allmulticast mode [ 849.589712][ T4930] Bluetooth: hci6: command 0x0405 tx timeout [ 850.758118][T28835] veth0: entered promiscuous mode [ 850.759087][T28834] veth0: left promiscuous mode [ 850.987634][T28846] __nla_validate_parse: 14 callbacks suppressed [ 850.987661][T28846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5434'. [ 851.041434][T28850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5434'. [ 851.062453][T28726] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 851.666230][T28871] netlink: 'syz.4.5440': attribute type 55 has an invalid length. [ 851.751412][ T4930] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 851.757951][ T4930] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 851.773064][ T4930] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 851.799750][ T4930] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 851.800558][ T4930] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 851.826199][T28879] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5443'. [ 852.019717][T28879] mac80211_hwsim hwsim54 wlan0: entered promiscuous mode [ 852.019746][T28879] mac80211_hwsim hwsim54 wlan0: entered allmulticast mode [ 852.459140][T28891] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.459551][T28891] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.635364][ T2173] block nbd7: Connection timed out, retrying (0/1 alive) [ 852.635433][ T2173] block nbd7: Connection timed out, retrying (0/1 alive) [ 852.635478][ T2173] block nbd7: Connection timed out, retrying (0/1 alive) [ 852.635522][ T2173] block nbd7: Connection timed out, retrying (0/1 alive) [ 852.635698][ T2173] block nbd7: Dead connection, failed to find a fallback [ 852.635717][ T2173] block nbd7: shutting down sockets [ 852.635731][ T2173] blk_print_req_error: 58 callbacks suppressed [ 852.635745][ T2173] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 852.635774][ T2173] buffer_io_error: 138 callbacks suppressed [ 852.635786][ T2173] Buffer I/O error on dev nbd7, logical block 3, async page read [ 852.635816][ T2173] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 852.635841][ T2173] Buffer I/O error on dev nbd7, logical block 2, async page read [ 852.635864][ T2173] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 852.635888][ T2173] Buffer I/O error on dev nbd7, logical block 1, async page read [ 852.635910][ T2173] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 852.635933][ T2173] Buffer I/O error on dev nbd7, logical block 0, async page read [ 852.638200][ T2173] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 852.638233][ T2173] Buffer I/O error on dev nbd7, logical block 0, async page read [ 852.638261][ T2173] Buffer I/O error on dev nbd7, logical block 1, async page read [ 852.638277][ T2173] Buffer I/O error on dev nbd7, logical block 2, async page read [ 852.638293][ T2173] Buffer I/O error on dev nbd7, logical block 3, async page read [ 852.638588][ T2173] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 852.638615][ T2173] Buffer I/O error on dev nbd7, logical block 0, async page read [ 852.638632][ T2173] Buffer I/O error on dev nbd7, logical block 1, async page read [ 852.638871][ T2173] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 852.639054][ T2173] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 852.639318][ T2173] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 852.640556][ T2173] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 852.644974][T27095] ldm_validate_partition_table(): Disk read failed. [ 852.648498][T27095] Dev nbd7: unable to read RDB block 0 [ 852.654140][T27095] nbd7: unable to read partition table [ 852.684442][T27095] ldm_validate_partition_table(): Disk read failed. [ 852.695123][T27095] Dev nbd7: unable to read RDB block 0 [ 852.697798][T27095] nbd7: unable to read partition table [ 852.824294][T28891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 852.847683][T28891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 853.097497][ T6002] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.097548][ T6002] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.097584][ T6002] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.097616][ T6002] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.421283][T28923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5451'. [ 853.487289][T28916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 853.498877][T28916] 8021q: adding VLAN 0 to HW filter on device team0 [ 853.513711][T28916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 853.557230][T28913] netlink: 'syz.6.5449': attribute type 1 has an invalid length. [ 853.606418][T28916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 853.618691][T28916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 853.646938][T28916] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 853.647043][T28916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 853.682063][T28916] veth1_vlan: left promiscuous mode [ 853.684531][T28916] veth0_vlan: left promiscuous mode [ 853.686641][T28916] veth0_vlan: entered promiscuous mode [ 853.706401][T28916] veth1_vlan: entered promiscuous mode [ 853.721168][T28916] veth0_macvtap: left promiscuous mode [ 853.721996][T28916] veth0_macvtap: entered promiscuous mode [ 853.727432][T28916] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 853.728395][T28916] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 853.738608][T28916] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 853.742295][T28916] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 853.767678][T28916] veth3: left promiscuous mode [ 853.777358][T28916] bridge0: port 3(vlan2) entered blocking state [ 853.777538][T28916] bridge0: port 3(vlan2) entered forwarding state [ 853.883056][ T1259] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.883203][ T1259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.888472][ T1259] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.888610][ T1259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.914766][T19057] Bluetooth: hci7: command tx timeout [ 853.985027][T28937] syzkaller0: entered promiscuous mode [ 853.985053][T28937] syzkaller0: entered allmulticast mode [ 853.985451][T28937] tipc: Resetting bearer [ 854.016880][ C1] net_ratelimit: 499 callbacks suppressed [ 854.016906][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 854.083601][T22610] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 854.083642][T22610] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.115383][T22606] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 854.115423][T22606] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.115466][T22606] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 854.115491][T22606] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.133139][T28943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5456'. [ 854.146099][ T6002] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 854.146133][ T6002] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.177644][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 854.313768][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 854.597824][T28874] lo speed is unknown, defaulting to 1000 [ 854.601630][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 854.606536][T28874] wg2 speed is unknown, defaulting to 1000 [ 854.626978][ T6002] ip6_tunnel: L xmit: Local address not yet configured! [ 854.627205][ T6002] ip6_tunnel: L xmit: Local address not yet configured! [ 854.640643][T28874] lo speed is unknown, defaulting to 1000 [ 854.684747][ T6490] ip6_tunnel: L xmit: Local address not yet configured! [ 854.719995][ T6483] ip6_tunnel: L xmit: Local address not yet configured! [ 855.028089][T28977] netlink: zone id is out of range [ 855.028107][T28977] netlink: zone id is out of range [ 855.028122][T28977] netlink: zone id is out of range [ 855.028130][T28977] netlink: zone id is out of range [ 855.028137][T28977] netlink: zone id is out of range [ 855.028144][T28977] netlink: zone id is out of range [ 855.087872][T18279] ip6_tunnel: L xmit: Local address not yet configured! [ 855.977978][T28874] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.978093][T28874] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.978379][T28874] bridge_slave_0: entered allmulticast mode [ 855.980166][T28874] bridge_slave_0: entered promiscuous mode [ 855.983403][T28874] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.983566][T28874] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.983697][T28874] bridge_slave_1: entered allmulticast mode [ 855.985592][T28874] bridge_slave_1: entered promiscuous mode [ 855.995877][T19057] Bluetooth: hci7: command tx timeout [ 856.022154][T28874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.025909][T28874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.059467][T28874] team0: Port device team_slave_0 added [ 856.062551][T28874] team0: Port device team_slave_1 added [ 856.123023][T28874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 856.123043][T28874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.123071][T28874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 856.125308][T28874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.125325][T28874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.125353][T28874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 856.194578][T29006] netlink: 'syz.6.5468': attribute type 1 has an invalid length. [ 856.204734][T29007] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5468'. [ 856.278462][T29006] 8021q: adding VLAN 0 to HW filter on device bond1 [ 856.317177][T29009] bond1: (slave ip6erspan0): making interface the new active one [ 856.319018][T29009] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 856.338333][T29009] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5468'. [ 856.352196][T28874] hsr_slave_0: entered promiscuous mode [ 856.360824][T28874] hsr_slave_1: entered promiscuous mode [ 856.361663][T28874] debugfs: 'hsr0' already exists in 'hsr' [ 856.361682][T28874] Cannot create hsr debugfs directory [ 856.395079][T29009] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5468'. [ 856.396457][T29009] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5468'. [ 856.397207][T29009] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5468'. [ 856.418465][T29009] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5468'. [ 856.424653][T29009] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5468'. [ 856.425994][T29013] netlink: 'syz.2.5469': attribute type 2 has an invalid length. [ 856.468473][T29009] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5468'. [ 856.483480][T29013] : entered promiscuous mode [ 856.493887][T29009] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5468'. [ 856.501254][T29009] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5468'. [ 857.238435][T28948] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 857.312160][T28874] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 857.390102][T28874] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 857.391282][T28874] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 857.428051][T28874] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 857.445892][T28874] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 857.528273][T28874] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 857.538970][T28874] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 857.592439][T28874] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 857.841200][T28874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 857.911462][T28874] 8021q: adding VLAN 0 to HW filter on device team0 [ 857.933606][ T6002] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.933732][ T6002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 857.968884][T22607] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.969010][T22607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 858.080084][T19057] Bluetooth: hci7: command tx timeout [ 858.389618][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 859.474842][T28874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.614235][T29106] netlink: 'syz.3.5488': attribute type 1 has an invalid length. [ 859.872959][T29120] 8021q: VLANs not supported on ip_vti0 [ 860.012206][T29126] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2646007570/2646007572 [ 860.150106][T19057] Bluetooth: hci7: command tx timeout [ 860.226603][T28874] veth0_vlan: entered promiscuous mode [ 860.256130][T28874] veth1_vlan: entered promiscuous mode [ 860.326457][T28874] veth0_macvtap: entered promiscuous mode [ 860.343322][T28874] veth1_macvtap: entered promiscuous mode [ 860.358370][T29140] sctp: [Deprecated]: syz.3.5497 (pid 29140) Use of struct sctp_assoc_value in delayed_ack socket option. [ 860.358370][T29140] Use struct sctp_sack_info instead [ 860.422643][T28874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 860.441275][T28874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 860.716841][ C0] net_ratelimit: 12 callbacks suppressed [ 860.716862][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 860.830059][T11668] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.840382][T11668] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.841149][T11668] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.841964][T11668] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.228117][T29157] openvswitch: netlink: Tunnel attr 12045 out of range max 16 [ 861.250917][T22608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.250942][T22608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.256236][T29155] nbd8: detected capacity change from 0 to 63 [ 861.296867][T19057] block nbd8: Receive control failed (result -104) [ 861.344802][T29161] __nla_validate_parse: 33 callbacks suppressed [ 861.344826][T29161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5503'. [ 861.415534][T29168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5503'. [ 861.486866][ T6002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.486893][ T6002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.771337][T29180] digital: digital_start_poll: Unknown protocol [ 861.774672][T29187] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5436'. [ 861.800445][T29189] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5436'. [ 862.071779][T29196] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 862.128721][T29199] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5510'. [ 862.213628][T22608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.213653][T22608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.425652][T29209] Cannot find add_set index 2 as target [ 862.492433][T29214] netlink: 'syz.4.5516': attribute type 1 has an invalid length. [ 862.563832][T29215] macvtap1: entered allmulticast mode [ 862.593213][T29214] macvtap2: entered allmulticast mode [ 862.641115][T29214] bond4: (slave bridge7): making interface the new active one [ 862.657708][T29214] bond4: (slave bridge7): Enslaving as an active interface with an up link [ 862.843045][T29227] netlink: 'syz.4.5518': attribute type 1 has an invalid length. [ 862.843074][T29227] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.5518'. [ 862.843092][T29227] netlink: 2060 bytes leftover after parsing attributes in process `syz.4.5518'. [ 862.886812][T29223] syzkaller1: entered allmulticast mode [ 862.911982][T29227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5518'. [ 862.912018][T29227] block nbd9: Unsupported socket: should be TCP or UNIX. [ 862.969864][T29227] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5518'. [ 862.969904][T29227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5518'. [ 863.361270][T29244] netlink: 'syz.6.5523': attribute type 4 has an invalid length. [ 863.384665][T29248] netlink: 'syz.4.5524': attribute type 1 has an invalid length. [ 863.387855][T29248] netlink: 'syz.4.5524': attribute type 1 has an invalid length. [ 863.444936][T29251] netlink: 'syz.3.5526': attribute type 4 has an invalid length. [ 863.532907][T29253] syzkaller0: entered promiscuous mode [ 863.532936][T29253] syzkaller0: entered allmulticast mode [ 863.737423][T29256] syzkaller0: entered promiscuous mode [ 863.737451][T29256] syzkaller0: entered allmulticast mode [ 864.014185][T29271] netlink: 'syz.3.5532': attribute type 5 has an invalid length. [ 864.195394][T29282] openvswitch: netlink: IP tunnel dst address not specified [ 864.248445][T29278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 864.356385][T29278] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 864.543307][T29296] netlink: 'syz.3.5540': attribute type 1 has an invalid length. [ 864.810723][T29305] dummy0 (unregistering): left promiscuous mode [ 865.103083][T29310] IPv6: NLM_F_REPLACE set, but no existing node found! [ 865.946091][T29332] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 865.946321][T28929] lo speed is unknown, defaulting to 1000 [ 865.946343][T28929] syz0: Port: 1 Link DOWN [ 866.069874][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 866.088001][T29233] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 866.425224][T29349] __nla_validate_parse: 13 callbacks suppressed [ 866.425258][T29349] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5551'. [ 866.498417][T29349] veth7: entered allmulticast mode [ 866.835676][T29356] netlink: 111 bytes leftover after parsing attributes in process `syz.4.5553'. [ 866.835713][T29356] netlink: 111 bytes leftover after parsing attributes in process `syz.4.5553'. [ 866.835935][T29356] netlink: 111 bytes leftover after parsing attributes in process `syz.4.5553'. [ 866.835957][T29356] netlink: 111 bytes leftover after parsing attributes in process `syz.4.5553'. [ 866.836166][T29356] netlink: 111 bytes leftover after parsing attributes in process `syz.4.5553'. [ 866.836188][T29356] netlink: 111 bytes leftover after parsing attributes in process `syz.4.5553'. [ 866.836407][T29356] netlink: 111 bytes leftover after parsing attributes in process `syz.4.5553'. [ 866.836429][T29356] netlink: 111 bytes leftover after parsing attributes in process `syz.4.5553'. [ 866.836726][T29356] netlink: 111 bytes leftover after parsing attributes in process `syz.4.5553'. [ 867.136648][T29363] IPv6: NLM_F_REPLACE set, but no existing node found! [ 867.233954][T29366] netlink: 'syz.2.5556': attribute type 12 has an invalid length. [ 867.256514][T29366] netlink: 'syz.2.5556': attribute type 12 has an invalid length. [ 867.273953][T22607] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 867.275920][ T6002] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 867.276103][ T6002] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 867.276355][ T6002] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 867.549841][T29385] netlink: 'syz.3.5561': attribute type 1 has an invalid length. [ 867.636321][T29385] bond9: entered promiscuous mode [ 867.636703][T29385] 8021q: adding VLAN 0 to HW filter on device bond9 [ 867.665203][T29390] bond9: (slave ipvlan6): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 867.665233][T29390] bond9: (slave ipvlan6): The slave device specified does not support setting the MAC address [ 867.665250][T29390] bond9: (slave ipvlan6): Setting fail_over_mac to active for active-backup mode [ 867.953143][T29396] netlink: 'syz.3.5562': attribute type 62 has an invalid length. [ 867.953173][T29396] netlink: 'syz.3.5562': attribute type 3 has an invalid length. [ 868.565452][T29406] netlink: Invalid conntrack helper [ 868.565493][T29406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 868.671550][T29409] netlink: 'syz.6.5564': attribute type 44 has an invalid length. [ 868.834600][T29414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 868.850750][T29414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 868.854245][T29414] bond0 (unregistering): Released all slaves [ 868.891401][T29422] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 868.891442][T29422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 869.034895][T29426] bond0: option xmit_hash_policy: invalid value (10) [ 869.053162][T29426] bond0 (unregistering): Released all slaves [ 869.289117][T29438] netlink: 'syz.3.5570': attribute type 1 has an invalid length. [ 869.341801][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 869.364893][T29438] bond10: entered promiscuous mode [ 869.365833][T29438] 8021q: adding VLAN 0 to HW filter on device bond10 [ 870.245270][ T31] audit: type=1804 audit(1789742611.661:17): pid=29465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.5577" name="/newroot/109/cgroup.controllers" dev="tmpfs" ino=583 res=1 errno=0 [ 870.248266][ T31] audit: type=1800 audit(1789742611.661:18): pid=29465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5577" name="cgroup.controllers" dev="tmpfs" ino=583 res=0 errno=0 [ 870.262190][ T31] audit: type=1800 audit(1789742611.681:19): pid=29464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5577" name="cgroup.controllers" dev="tmpfs" ino=583 res=0 errno=0 [ 870.413795][T29374] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 870.537630][T29476] netlink: 'syz.2.5579': attribute type 1 has an invalid length. [ 870.609984][T29476] bond0: entered promiscuous mode [ 870.610508][T29476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.675201][T29476] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 870.675229][T29476] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 870.675240][T29476] bond0: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 872.886322][T29448] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 873.123062][T29488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 873.470372][T29515] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 873.870075][T29538] __nla_validate_parse: 9 callbacks suppressed [ 873.870102][T29538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5593'. [ 873.972024][T29543] xt_ecn: cannot match TCP bits for non-tcp packets [ 875.062452][T29556] netlink: 'syz.2.5597': attribute type 1 has an invalid length. [ 875.103889][T29556] veth15: entered allmulticast mode [ 875.108101][T29556] bond11: (slave veth15): Enslaving as an active interface with a down link [ 875.124445][T29556] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 875.671102][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 876.705507][T29528] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 876.918280][T29575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5605'. [ 876.918610][T29579] xt_ecn: cannot match TCP bits for non-tcp packets [ 877.677047][T29614] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5611'. [ 877.726624][T29610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5610'. [ 877.726765][T29610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 877.859012][T29610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.583530][T29613] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 880.791146][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 881.850837][T29678] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 881.876739][T29672] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 882.069979][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 882.317284][T29699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5636'. [ 882.648093][T29709] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5637'. [ 882.804733][T29718] lo speed is unknown, defaulting to 1000 [ 882.823163][T29724] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.5641'. [ 882.823435][T29724] 0ªX¹¦Dö»: renamed from gretap0 [ 882.831458][T29723] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5642'. [ 882.852252][T29724] 0ªX¹¦Dö»: entered allmulticast mode [ 882.893864][T29729] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.5641'. [ 882.897890][T29723] veth1_to_team: entered promiscuous mode [ 882.905663][T29728] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5642'. [ 882.911823][T29723] gretap0: entered promiscuous mode [ 882.914342][T29723] debugfs: 'hsr1' already exists in 'hsr' [ 882.920616][T29723] Cannot create hsr debugfs directory [ 882.920642][T29723] hsr1: entered promiscuous mode [ 882.921247][T29718] wg2 speed is unknown, defaulting to 1000 [ 882.921912][T29729] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 882.998747][T29718] lo speed is unknown, defaulting to 1000 [ 883.252667][T29740] netlink: 'syz.4.5645': attribute type 2 has an invalid length. [ 883.254546][T29740] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5645'. [ 883.256052][T27099] udevd[27099]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 883.487381][T29751] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.488478][T29751] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 883.512563][T29754] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5647'. [ 884.836993][T29809] ip_tables: iptables: counters copy to user failed while replacing table [ 884.924325][T22602] IPVS: starting estimator thread 0... [ 884.966164][T29818] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5663'. [ 884.967923][T29817] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5663'. [ 885.019773][T29816] IPVS: using max 28 ests per chain, 67200 per kthread [ 885.043129][T29821] syzkaller0: left promiscuous mode [ 885.043147][T29821] syzkaller0: left allmulticast mode [ 885.043539][T29821] tipc: Resetting bearer [ 885.047074][T29821] syzkaller0: Caught tx_queue_len zero misconfig [ 885.271377][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 885.387446][T29830] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 885.387473][T29830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 887.307400][T29795] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 887.516530][T29842] syzkaller1: entered promiscuous mode [ 887.516556][T29842] syzkaller1: entered allmulticast mode [ 887.679135][T29855] netlink: 'syz.2.5673': attribute type 1 has an invalid length. [ 887.679153][T29855] __nla_validate_parse: 1 callbacks suppressed [ 887.679161][T29855] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5673'. [ 887.679236][T29855] netlink: 'syz.2.5673': attribute type 1 has an invalid length. [ 887.989929][T19057] Bluetooth: hci2: command 0x0406 tx timeout [ 887.993984][T29855] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5673'. [ 888.105526][T29847] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5672'. [ 888.105554][T29847] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5672'. [ 888.105791][T29859] Bluetooth: hci0: unsupported parameter 5135 [ 888.105812][T29859] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 888.106335][T29851] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5672'. [ 888.106355][T29851] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5672'. [ 888.139778][T29863] IPv6: addrconf: prefix option has invalid lifetime [ 888.147494][T29858] bond0: (slave bond_slave_1): Device is not bonding slave [ 888.147519][T29858] bond0: option active_slave: invalid value (bond_slave_1) [ 888.177235][T29858] bond0 (unregistering): Released all slaves [ 888.252492][T29863] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5674'. [ 888.387352][T29867] gre0: left allmulticast mode [ 888.535840][T29875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5678'. [ 888.652454][T29867] batman_adv: batadv0: Interface deactivated:  [ 889.062965][T29867] veth1_vlan: left allmulticast mode [ 889.266748][T29867] tipc: Resetting bearer [ 889.266783][T29867] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 889.468562][T29867] batman_adv: batadv0: Interface deactivated: gretap1 [ 889.540423][T29867] bridge5: left promiscuous mode [ 889.540452][T29867] bridge5: left allmulticast mode [ 889.744504][T29867] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 889.744553][T29867] ipvlan2: left allmulticast mode [ 889.767816][T29867] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 889.767889][T29867] ipvlan3: left allmulticast mode [ 889.767906][T29867] macvlan1: left allmulticast mode [ 889.784764][T29867] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 889.795287][T29867] ip6gretap1: left allmulticast mode [ 889.855394][T29867] bond3: left promiscuous mode [ 889.855420][T29867] veth9: left promiscuous mode [ 889.876285][T29867] veth9: left allmulticast mode [ 889.983332][T29867] macvtap1: left allmulticast mode [ 889.983781][T29867] macvtap2: left allmulticast mode [ 889.986862][T29869] netlink: 'syz.7.5677': attribute type 4 has an invalid length. [ 889.986888][T29869] netlink: 'syz.7.5677': attribute type 3 has an invalid length. [ 889.993837][ T6002] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 889.993873][ T6002] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.993921][ T6002] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 889.994097][ T6002] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 889.994123][ T6002] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.994146][ T6002] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 889.994820][ T6002] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 889.994845][ T6002] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.994868][ T6002] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 890.009615][ T1259] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.009648][ T1259] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.009672][ T1259] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 890.047395][T29875] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 890.492656][T29908] netlink: 'syz.6.5683': attribute type 23 has an invalid length. [ 891.328325][T29929] nftables ruleset with unbound set [ 891.672506][ T1944] block nbd8: Possible stuck request ffff888027ac5080: control (read@0,1024B). Runtime 30 seconds [ 891.673986][ T1944] block nbd8: Possible stuck request ffff888027ac5240: control (read@1024,1024B). Runtime 30 seconds [ 891.674025][ T1944] block nbd8: Possible stuck request ffff888027ac5400: control (read@2048,1024B). Runtime 30 seconds [ 891.674061][ T1944] block nbd8: Possible stuck request ffff888027ac55c0: control (read@3072,1024B). Runtime 30 seconds [ 891.816023][T29945] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 891.834690][T29945] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5689'. [ 891.846204][T29945] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5689'. [ 892.054611][T11675] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.074861][T11675] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 892.122701][T29963] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 892.668243][T29985] netlink: 'syz.7.5700': attribute type 1 has an invalid length. [ 892.834675][T29990] lo speed is unknown, defaulting to 1000 [ 892.860705][T29990] wg2 speed is unknown, defaulting to 1000 [ 892.866506][T29990] lo speed is unknown, defaulting to 1000 [ 892.998559][T30000] openvswitch: netlink: Missing key (keys=50, expected=80) [ 893.038660][T30002] __nla_validate_parse: 4 callbacks suppressed [ 893.038687][T30002] netlink: 144 bytes leftover after parsing attributes in process `syz.7.5704'. [ 893.134865][T30002] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5704'. [ 893.337455][T29994] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 893.337651][T29994] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 893.337830][T29994] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 893.338007][T29994] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 893.338177][T29994] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 893.338359][T29994] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 893.338645][T29994] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 893.338834][T29994] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 893.339042][T29994] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 893.722626][T30006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 893.805188][T30016] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5709'. [ 893.816377][T30019] syzkaller0: entered promiscuous mode [ 893.816401][T30019] syzkaller0: entered allmulticast mode [ 894.048996][T30033] xt_IDLETIMER: timeout value is zero [ 894.169037][T30036] xt_IDLETIMER: timeout value is zero [ 894.283769][T30043] hsr1: left promiscuous mode [ 894.285525][T22610] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.285607][T22610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 894.698353][ T6002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.698378][ T6002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.744038][T11668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.744063][T11668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.815318][T30072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5722'. [ 894.816052][T30072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5722'. [ 895.026837][T30079] netlink: 'syz.3.5724': attribute type 3 has an invalid length. [ 895.026864][T30079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5724'. [ 895.077726][T30085] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5727'. [ 895.077755][T30085] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5727'. [ 895.117796][T30087] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5727'. [ 895.117826][T30087] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5727'. [ 895.127338][T30076] netlink: 'syz.3.5724': attribute type 5 has an invalid length. [ 895.373224][T30093] syzkaller0: entered promiscuous mode [ 895.373251][T30093] syzkaller0: entered allmulticast mode [ 896.356888][T30141] tipc: Disabling bearer [ 896.357253][T30141] batman_adv: batadv0: Removing interface: syzkaller0 [ 896.885408][T30157] netlink: 'syz.6.5746': attribute type 16 has an invalid length. [ 896.885434][T30157] netlink: 'syz.6.5746': attribute type 17 has an invalid length. [ 896.962127][T30155] syzkaller0: entered promiscuous mode [ 896.962156][T30155] syzkaller0: entered allmulticast mode [ 896.965271][T30157] lo: entered promiscuous mode [ 896.965298][T30157] lo: entered allmulticast mode [ 896.973927][T30157] tunl0: entered promiscuous mode [ 896.973953][T30157] tunl0: entered allmulticast mode [ 896.977328][T30157] gre0: entered promiscuous mode [ 896.977350][T30157] gre0: entered allmulticast mode [ 897.000281][T30157] gretap0: entered promiscuous mode [ 897.000305][T30157] gretap0: entered allmulticast mode [ 897.006705][T30157] erspan0: entered promiscuous mode [ 897.006728][T30157] erspan0: entered allmulticast mode [ 897.013715][T30157] ip_vti0: entered promiscuous mode [ 897.013735][T30157] ip_vti0: entered allmulticast mode [ 897.019902][T30157] ip6_vti0: entered promiscuous mode [ 897.019924][T30157] ip6_vti0: entered allmulticast mode [ 897.026515][T30157] sit0: entered promiscuous mode [ 897.026563][T30157] sit0: entered allmulticast mode [ 897.027758][T30157] ip6tnl0: entered promiscuous mode [ 897.027775][T30157] ip6tnl0: entered allmulticast mode [ 897.057803][T30157] ip6gre0: entered promiscuous mode [ 897.057903][T30157] ip6gre0: entered allmulticast mode [ 897.065649][T30157] syz_tun: entered promiscuous mode [ 897.065673][T30157] syz_tun: entered allmulticast mode [ 897.081043][T30157] ip6gretap0: entered promiscuous mode [ 897.081065][T30157] ip6gretap0: entered allmulticast mode [ 897.098956][T30157] bridge0: entered promiscuous mode [ 897.099072][T30157] bridge0: entered allmulticast mode [ 897.106771][T30157] vcan0: entered promiscuous mode [ 897.106794][T30157] vcan0: entered allmulticast mode [ 897.121329][T30157] team0: entered promiscuous mode [ 897.121353][T30157] team_slave_0: entered promiscuous mode [ 897.121542][T30157] team_slave_1: entered promiscuous mode [ 897.121727][T30157] team0: entered allmulticast mode [ 897.121741][T30157] team_slave_0: entered allmulticast mode [ 897.121754][T30157] team_slave_1: entered allmulticast mode [ 897.128855][T30157] dummy0: entered promiscuous mode [ 897.128877][T30157] dummy0: entered allmulticast mode [ 897.141532][T30157] nlmon0: entered promiscuous mode [ 897.141557][T30157] nlmon0: entered allmulticast mode [ 897.150400][T30157] batadv0: entered allmulticast mode [ 897.191048][T30157] vxcan0: entered promiscuous mode [ 897.191072][T30157] vxcan0: entered allmulticast mode [ 897.191620][T30157] vxcan1: entered promiscuous mode [ 897.191636][T30157] vxcan1: entered allmulticast mode [ 897.197934][T30157] veth0: entered promiscuous mode [ 897.197957][T30157] veth0: entered allmulticast mode [ 897.210542][T30157] veth1: entered promiscuous mode [ 897.210565][T30157] veth1: entered allmulticast mode [ 897.215569][T30157] wg0: entered promiscuous mode [ 897.215590][T30157] wg0: entered allmulticast mode [ 897.222472][T30157] wg1: entered promiscuous mode [ 897.222493][T30157] wg1: entered allmulticast mode [ 897.225105][T30157] wg2: entered promiscuous mode [ 897.225122][T30157] wg2: entered allmulticast mode [ 897.233593][T30157] veth0_to_bridge: entered promiscuous mode [ 897.233619][T30157] veth0_to_bridge: entered allmulticast mode [ 897.243278][T30157] veth1_to_bridge: entered promiscuous mode [ 897.243304][T30157] veth1_to_bridge: entered allmulticast mode [ 897.259858][T30157] veth0_to_bond: entered promiscuous mode [ 897.259880][T30157] veth0_to_bond: entered allmulticast mode [ 897.263051][T30157] bond_slave_0: entered promiscuous mode [ 897.263073][T30157] bond_slave_0: entered allmulticast mode [ 897.274434][T30157] veth1_to_bond: entered promiscuous mode [ 897.274458][T30157] veth1_to_bond: entered allmulticast mode [ 897.276983][T30157] bond_slave_1: entered promiscuous mode [ 897.277004][T30157] bond_slave_1: entered allmulticast mode [ 897.286548][T30157] veth0_to_team: entered promiscuous mode [ 897.286572][T30157] veth0_to_team: entered allmulticast mode [ 897.303594][T30157] veth1_to_team: entered promiscuous mode [ 897.303618][T30157] veth1_to_team: entered allmulticast mode [ 897.329405][T30157] veth0_to_batadv: entered promiscuous mode [ 897.329428][T30157] veth0_to_batadv: entered allmulticast mode [ 897.332951][T30157] batadv_slave_0: entered promiscuous mode [ 897.332972][T30157] batadv_slave_0: entered allmulticast mode [ 897.334702][T30157] veth1_to_batadv: entered promiscuous mode [ 897.335886][T30157] veth1_to_batadv: entered allmulticast mode [ 897.338838][T30157] batadv_slave_1: entered promiscuous mode [ 897.338856][T30157] batadv_slave_1: entered allmulticast mode [ 897.351016][T30157] xfrm0: entered promiscuous mode [ 897.351040][T30157] xfrm0: entered allmulticast mode [ 897.356745][T30157] veth0_to_hsr: entered promiscuous mode [ 897.356769][T30157] veth0_to_hsr: entered allmulticast mode [ 897.363817][T30157] hsr_slave_0: entered allmulticast mode [ 897.366390][T30157] veth1_to_hsr: entered promiscuous mode [ 897.366410][T30157] veth1_to_hsr: entered allmulticast mode [ 897.368110][T30157] hsr_slave_1: entered allmulticast mode [ 897.372604][T30157] hsr0: entered promiscuous mode [ 897.373853][T30157] hsr0: entered allmulticast mode [ 897.376141][T30166] rdma_op ffff888069be1238 conn xmit_rdma 0000000000000000 [ 897.377350][T30157] veth1_virt_wifi: entered promiscuous mode [ 897.377369][T30157] veth1_virt_wifi: entered allmulticast mode [ 897.384832][T30157] veth0_virt_wifi: entered promiscuous mode [ 897.384856][T30157] veth0_virt_wifi: entered allmulticast mode [ 897.386136][T30157] virt_wifi0: entered promiscuous mode [ 897.386152][T30157] virt_wifi0: entered allmulticast mode [ 897.386898][T30157] veth1_vlan: entered allmulticast mode [ 897.388227][T30157] veth0_vlan: entered allmulticast mode [ 897.397084][T30157] vlan1: entered promiscuous mode [ 897.397413][T30157] vlan1: entered allmulticast mode [ 897.411546][T30157] macvlan0: entered promiscuous mode [ 897.411751][T30157] macvlan0: entered allmulticast mode [ 897.412881][T30157] macvlan1: entered promiscuous mode [ 897.415164][T30157] macvlan1: entered allmulticast mode [ 897.417415][T30157] ipvlan0: entered promiscuous mode [ 897.417434][T30157] ipvlan0: entered allmulticast mode [ 897.427757][T30157] ipvlan1: entered promiscuous mode [ 897.427780][T30157] ipvlan1: entered allmulticast mode [ 897.440265][T30157] veth1_macvtap: entered promiscuous mode [ 897.440289][T30157] veth1_macvtap: entered allmulticast mode [ 897.447657][T30157] veth0_macvtap: entered allmulticast mode [ 897.454485][T30157] macvtap0: entered promiscuous mode [ 897.454672][T30157] macvtap0: entered allmulticast mode [ 897.466340][T30157] geneve1: entered promiscuous mode [ 897.466362][T30157] geneve1: entered allmulticast mode [ 897.475031][T30157] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 897.475916][T30157] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 897.476760][T30157] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 897.476780][T30157] netdevsim netdevsim6 netdevsim1: entered allmulticast mode [ 897.494587][T30157] netdevsim netdevsim6 netdevsim2: entered promiscuous mode [ 897.494615][T30157] netdevsim netdevsim6 netdevsim2: entered allmulticast mode [ 897.495578][T30157] netdevsim netdevsim6 netdevsim3: entered promiscuous mode [ 897.504414][T30157] netdevsim netdevsim6 netdevsim3: entered allmulticast mode [ 897.506132][T30157] mac80211_hwsim hwsim73 wlan0: entered promiscuous mode [ 897.506157][T30157] mac80211_hwsim hwsim73 wlan0: entered allmulticast mode [ 897.514348][T30157] mac80211_hwsim hwsim74 wlan1: entered promiscuous mode [ 897.514471][T30157] mac80211_hwsim hwsim74 wlan1: entered allmulticast mode [ 897.516428][T30157] veth2: entered promiscuous mode [ 897.516446][T30157] veth2: entered allmulticast mode [ 897.520234][T30157] veth3: entered promiscuous mode [ 897.520255][T30157] veth3: entered allmulticast mode [ 897.527502][T30157] ip6gre1: entered promiscuous mode [ 897.527526][T30157] ip6gre1: entered allmulticast mode [ 897.544205][T30157] vxlan0: entered promiscuous mode [ 897.544229][T30157] vxlan0: entered allmulticast mode [ 897.545413][T30157] syztnl1: entered promiscuous mode [ 897.545429][T30157] syztnl1: entered allmulticast mode [ 897.554194][T30157] L: entered promiscuous mode [ 897.554216][T30157] L: entered allmulticast mode [ 897.562285][T30157] mac80211_hwsim hwsim79 wlan2: entered promiscuous mode [ 897.562331][T30157] mac80211_hwsim hwsim79 wlan2: entered allmulticast mode [ 897.562943][T30157] mac80211_hwsim hwsim80 wlan3: entered promiscuous mode [ 897.562965][T30157] mac80211_hwsim hwsim80 wlan3: entered allmulticast mode [ 897.572647][T30157] veth4: entered promiscuous mode [ 897.572671][T30157] veth4: entered allmulticast mode [ 897.577693][T30157] veth5: entered promiscuous mode [ 897.577714][T30157] veth5: entered allmulticast mode [ 897.587057][T30157] bond1: entered promiscuous mode [ 897.587078][T30157] ip6erspan0: entered promiscuous mode [ 897.587228][T30157] bond1: entered allmulticast mode [ 897.587269][T30157] ip6erspan0: entered allmulticast mode [ 897.615852][T30157] veth6: entered promiscuous mode [ 897.615880][T30157] veth6: entered allmulticast mode [ 897.624663][ T6495] ip6_tunnel: L xmit: Local address not yet configured! [ 897.627808][T30157] veth7: entered promiscuous mode [ 897.629017][T30157] mac80211_hwsim hwsim84 wlan4: entered promiscuous mode [ 897.629042][T30157] mac80211_hwsim hwsim84 wlan4: entered allmulticast mode [ 897.657193][T30157] mac80211_hwsim hwsim85 wlan5: entered promiscuous mode [ 897.657221][T30157] mac80211_hwsim hwsim85 wlan5: entered allmulticast mode [ 897.685586][T30157] gtp0: entered promiscuous mode [ 897.685608][T30157] gtp0: entered allmulticast mode [ 897.720604][T30157] bareudp0: entered promiscuous mode [ 897.720628][T30157] bareudp0: entered allmulticast mode [ 897.742256][T30164] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 898.110172][ T6495] ip6_tunnel: L xmit: Local address not yet configured! [ 902.466937][T22602] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.467090][T22602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 902.807499][T30216] netlink: 'syz.3.5760': attribute type 41 has an invalid length. [ 902.840451][ C1] net_ratelimit: 50 callbacks suppressed [ 902.840477][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 902.862543][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 902.893708][T30213] syzkaller0: entered promiscuous mode [ 902.893731][T30213] syzkaller0: entered allmulticast mode [ 902.911252][T22607] ip6_tunnel: L xmit: Local address not yet configured! [ 902.911525][T22607] ip6_tunnel: L xmit: Local address not yet configured! [ 903.196004][T29890] ip6_tunnel: L xmit: Local address not yet configured! [ 903.475161][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 903.488163][T30234] __nla_validate_parse: 11 callbacks suppressed [ 903.488185][T30234] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5767'. [ 903.994732][T30254] netlink: 'syz.7.5772': attribute type 2 has an invalid length. [ 903.994758][T30254] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5772'. [ 904.697801][T30280] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 904.700503][T30280] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 904.986707][T30296] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 905.190118][T30318] netlink: 'syz.2.5791': attribute type 7 has an invalid length. [ 905.190146][T30318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5791'. [ 905.190180][T30318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5791'. [ 905.298658][T30318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5791'. [ 905.298697][T30318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5791'. [ 905.298713][T30318] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 905.838597][T30333] netlink: NAT attribute has 5 unknown bytes [ 905.838639][T30333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 905.966281][T30340] netlink: 'syz.4.5797': attribute type 21 has an invalid length. [ 905.966311][T30340] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5797'. [ 905.966370][T30340] netlink: 'syz.4.5797': attribute type 4 has an invalid length. [ 905.966396][T30340] netlink: 'syz.4.5797': attribute type 5 has an invalid length. [ 905.966410][T30340] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5797'. [ 906.088616][T30342] netlink: 'syz.4.5799': attribute type 16 has an invalid length. [ 906.088642][T30342] netlink: 'syz.4.5799': attribute type 17 has an invalid length. [ 906.088657][T30342] netlink: 'syz.4.5799': attribute type 27 has an invalid length. [ 906.419517][T30358] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5798'. [ 906.436809][T30348] xt_CT: No such helper "snmp" [ 906.553152][T30363] tipc: Can't bind to reserved service type 0 [ 906.555686][ T31] audit: type=1804 audit(1789742647.971:20): pid=30363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.5803" name="/newroot/150/cgroup.controllers" dev="tmpfs" ino=793 res=1 errno=0 [ 906.555946][ T31] audit: type=1800 audit(1789742647.971:21): pid=30363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5803" name="cgroup.controllers" dev="tmpfs" ino=793 res=0 errno=0 [ 906.732047][T30368] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5804'. [ 906.783850][T30368] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.862709][T30368] bridge_slave_1 (unregistering): left allmulticast mode [ 906.862741][T30368] bridge_slave_1 (unregistering): left promiscuous mode [ 906.862836][T30368] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.273066][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 907.350715][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 907.729722][T30405] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 907.974067][T30414] netlink: 'syz.2.5815': attribute type 1 has an invalid length. [ 908.382667][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 908.526884][T30439] sctp: [Deprecated]: syz.3.5822 (pid 30439) Use of int in max_burst socket option deprecated. [ 908.526884][T30439] Use struct sctp_assoc_value instead [ 908.629987][ T5738] ip6_tunnel: L xmit: Local address not yet configured! [ 908.880420][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 908.990067][ T6495] ip6_tunnel: L xmit: Local address not yet configured! [ 910.323285][T30507] __nla_validate_parse: 6 callbacks suppressed [ 910.323309][T30507] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5827'. [ 914.852358][T30530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5831'. [ 914.877420][T30530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5831'. [ 915.535349][T30555] macsec0: entered promiscuous mode [ 915.650280][T30559] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5839'. [ 915.996771][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 916.521274][T30581] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 916.641561][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 917.035231][T30596] syzkaller0: entered promiscuous mode [ 917.035259][T30596] syzkaller0: entered allmulticast mode [ 917.133900][T30603] netlink: 'syz.4.5852': attribute type 21 has an invalid length. [ 918.042743][T30633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5858'. [ 918.124632][T30633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5858'. [ 918.371870][T30644] batman_adv: batadv0: Adding interface: syzkaller0 [ 918.371894][T30644] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.371930][T30644] batman_adv: batadv0: Interface activated: syzkaller0 [ 918.383858][T30644] Bluetooth: hci0: unsupported parameter 5135 [ 918.383883][T30644] Bluetooth: hci0: unsupported parameter 8192 [ 918.383895][T30644] Bluetooth: hci0: unsupported parameter 5135 [ 918.383908][T30644] Bluetooth: hci0: unsupported parameter 8192 [ 918.428911][T30643] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 918.503773][T30643] batman_adv: batadv0: Removing interface: syzkaller0 [ 918.756566][T30659] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5865'. [ 918.756598][T30659] nbd: must specify at least one socket [ 918.854574][T30654] bond12 (unregistering): Released all slaves [ 919.393547][T30687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5872'. [ 919.393576][T30687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5872'. [ 919.434963][T30687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 919.448660][T30684] netlink: 'syz.4.5872': attribute type 4 has an invalid length. [ 919.448684][T30684] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5872'. [ 919.456308][T30687] bond5: (slave bond0): making interface the new active one [ 919.500857][T30687] bond5: (slave bond0): Enslaving as an active interface with an up link [ 919.532334][T22602] bond0: (slave geneve3): link status definitely down, disabling slave [ 919.555430][T22602] bond0: now running without any active interface! [ 919.559300][T30702] netlink: 'syz.4.5872': attribute type 4 has an invalid length. [ 919.559324][T30702] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5872'. [ 919.633080][T30684] .`: renamed from  [ 919.651614][T30700] bond5: option mode: unable to set because the bond device has slaves [ 920.065422][T30711] lo speed is unknown, defaulting to 1000 [ 920.090585][T30711] wg2 speed is unknown, defaulting to 1000 [ 920.095553][T30711] lo speed is unknown, defaulting to 1000 [ 920.105639][T30716] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5877'. [ 920.198175][T30716] bridge0: port 3(veth0) entered blocking state [ 920.198386][T30716] bridge0: port 3(veth0) entered disabled state [ 920.198575][T30716] veth0: entered allmulticast mode [ 920.242151][T30716] veth0: entered promiscuous mode [ 920.281574][T30716] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 920.281618][T30716] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 920.486535][T30711] netlink: 'syz.2.5876': attribute type 15 has an invalid length. [ 920.486565][T30711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5876'. [ 920.487196][T30711] netlink: 'syz.2.5876': attribute type 4 has an invalid length. [ 920.537104][T30728] openvswitch: netlink: Message has 147 unknown bytes. [ 920.686304][T30731] __nla_validate_parse: 2 callbacks suppressed [ 920.686330][T30731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5883'. [ 920.758973][T30731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5883'. [ 920.819496][T30740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5883'. [ 920.862833][T30742] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5885'. [ 921.413363][T30762] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5888'. [ 921.781642][ T1944] block nbd8: Possible stuck request ffff888027ac5080: control (read@0,1024B). Runtime 60 seconds [ 921.781699][ T1944] block nbd8: Possible stuck request ffff888027ac5240: control (read@1024,1024B). Runtime 60 seconds [ 921.781727][ T1944] block nbd8: Possible stuck request ffff888027ac5400: control (read@2048,1024B). Runtime 60 seconds [ 921.781756][ T1944] block nbd8: Possible stuck request ffff888027ac55c0: control (read@3072,1024B). Runtime 60 seconds [ 922.254313][T30799] openvswitch: netlink: Key type 4867 is out of range max 32 [ 922.353678][T30807] netlink: 92 bytes leftover after parsing attributes in process `syz.6.5895'. [ 922.551970][T30794] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5895'. [ 922.728978][T30824] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 922.755782][T30824] x_tables: duplicate underflow at hook 1 [ 923.042057][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 923.220846][T29889] ip6_tunnel: L xmit: Local address not yet configured! [ 923.240574][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 923.390996][T30850] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5909'. [ 923.542998][T30856] netlink: 176 bytes leftover after parsing attributes in process `syz.6.5910'. [ 923.549101][T30855] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20000 [ 923.629712][T29889] ip6_tunnel: L xmit: Local address not yet configured! [ 924.285639][T30877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5916'. [ 924.487195][T30886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 924.507507][T30887] netlink: 'syz.7.5920': attribute type 1 has an invalid length. [ 924.507537][T30887] netlink: 'syz.7.5920': attribute type 1 has an invalid length. [ 924.675775][T30895] ip6tnl0: left promiscuous mode [ 924.675804][T30895] ip6tnl0: left allmulticast mode [ 924.693067][T30895] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 924.887895][T30908] macvtap1: entered promiscuous mode [ 924.887925][T30908] syz_tun: entered promiscuous mode [ 924.891610][T30908] macvtap1: entered allmulticast mode [ 924.891633][T30908] syz_tun: entered allmulticast mode [ 925.307394][T30929] tunl0: left promiscuous mode [ 925.688666][T30918] virtio_blk virtio5: 1/0/0 default/read/poll queues [ 925.697177][T30918] virtio_blk virtio5: [vdb] 262144 512-byte logical blocks (134 MB/128 MiB) [ 925.801253][T30947] __nla_validate_parse: 10 callbacks suppressed [ 925.801280][T30947] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5935'. [ 925.865790][T30947] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5935'. [ 925.914129][T30947] xt_hashlimit: size too large, truncated to 1048576 [ 925.934664][T30928] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 925.957941][T30928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 926.013480][T30928] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5931'. [ 926.171151][T30918] Dev vdb: unable to read RDB block 8 [ 926.171370][T30918] vdb: unable to read partition table [ 926.355449][T22609] bond0: (slave bond_slave_0): interface is now down [ 926.355479][T22609] bond0: (slave bond_slave_1): interface is now down [ 926.384261][T22609] bond0: (slave bond_slave_0): interface is now down [ 926.384290][T22609] bond0: (slave bond_slave_1): interface is now down [ 926.420456][T22609] bond0: now running without any active interface! [ 927.516465][T31011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5955'. [ 927.522751][T31011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5955'. [ 928.019753][T31039] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 928.042371][T31039] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 928.053985][T31039] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 928.055435][T31039] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 928.058292][T31039] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 928.323693][T31057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5960'. [ 928.858774][T31064] syzkaller0: entered promiscuous mode [ 928.858877][T31064] syzkaller0: entered allmulticast mode [ 928.896954][T31073] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 928.943987][T31069] tipc: Started in network mode [ 928.944060][T31069] tipc: Node identity 0ec11c9ac4de, cluster identity 4711 [ 928.944338][T31069] tipc: Enabled bearer , priority 0 [ 928.975010][T31062] tipc: Resetting bearer [ 929.181163][T31062] tipc: Disabling bearer [ 929.510118][T19057] Bluetooth: hci7: command 0x0405 tx timeout [ 929.614577][T22609] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 929.614620][T22609] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.689534][T31094] xt_hashlimit: size too large, truncated to 1048576 [ 930.157887][ T4930] Bluetooth: hci8: command tx timeout [ 930.225373][T22609] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 930.225416][T22609] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.408864][T22609] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 930.408906][T22609] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.485716][T31032] lo speed is unknown, defaulting to 1000 [ 930.498771][T31032] wg2 speed is unknown, defaulting to 1000 [ 930.512596][T31032] lo speed is unknown, defaulting to 1000 [ 930.728266][T31125] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 930.935679][T22609] batman_adv: batadv0: Removing interface: ipvlan2 [ 931.015825][T22609] batman_adv: batadv0: Removing interface: ipvlan3 [ 931.068895][T22609] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 931.068936][T22609] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.230827][T31136] bridge0: entered promiscuous mode [ 931.231231][T31136] macvlan4: entered promiscuous mode [ 931.634084][T31162] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5986'. [ 931.975852][T31181] netlink: 'syz.2.5991': attribute type 1 has an invalid length. [ 931.975879][T31181] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.5991'. [ 931.975898][T31181] netlink: 'syz.2.5991': attribute type 1 has an invalid length. [ 931.975912][T31181] netlink: 2016 bytes leftover after parsing attributes in process `syz.2.5991'. [ 932.231457][ T4930] Bluetooth: hci8: command tx timeout [ 932.279135][T31182] syzkaller0: entered promiscuous mode [ 932.279364][T31182] syzkaller0: entered allmulticast mode [ 932.352448][T22609] batadv1: left allmulticast mode [ 932.352550][T22609] batadv1: left promiscuous mode [ 932.352811][T22609] bridge0: port 2(batadv1) entered disabled state [ 932.392047][T22609] ¾x9ÿ: left allmulticast mode [ 932.392185][T22609] ¾x9ÿ: left promiscuous mode [ 932.392628][T22609] bridge0: port 1(1¾x9ÿ) entered disabled state [ 932.411884][T31181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5991'. [ 932.411949][T31181] block nbd9: Unsupported socket: should be TCP or UNIX. [ 932.476208][T31181] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 932.648481][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 933.186349][T31203] IPVS: set_ctl: invalid protocol: 43 10.1.1.2:20001 [ 933.806083][T22609] bond2 (unregistering): (slave erspan1): Releasing active interface [ 933.944441][T22609] bond4 (unregistering): (slave geneve2): Releasing active interface [ 934.207015][T22609] team0: Port device bridge3 removed [ 934.222012][T22609] bond1 (unregistering): (slave bridge4): Releasing backup interface [ 934.287835][T22609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 934.292989][T22609] bond_slave_0: left promiscuous mode [ 934.309994][ T4930] Bluetooth: hci8: command tx timeout [ 934.316224][T22609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 934.322840][T22609] bond_slave_1: left promiscuous mode [ 934.340533][T22609] bond0 (unregistering): Released all slaves [ 934.384063][T22609] bond1 (unregistering): Released all slaves [ 934.406183][T22609] bond2 (unregistering): Released all slaves [ 934.444905][T22609] bond3 (unregistering): Released all slaves [ 934.486047][T22609] bond4 (unregistering): Released all slaves [ 934.505777][T22609] bond5 (unregistering): Released all slaves [ 934.548222][T22609] bond6 (unregistering): (slave veth5): Releasing backup interface [ 934.550972][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 934.566839][T22609] bond6 (unregistering): Released all slaves [ 934.594662][T22609] bond7 (unregistering): Released all slaves [ 934.614654][T22609] bond8 (unregistering): Released all slaves [ 934.654991][T22609] bond9 (unregistering): Released all slaves [ 934.682652][T22609] bond10 (unregistering): Released all slaves [ 935.296990][T31220] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5997'. [ 935.297017][T31220] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5997'. [ 935.297041][T31220] netlink: 'syz.7.5997': attribute type 13 has an invalid length. [ 935.297054][T31220] netlink: 'syz.7.5997': attribute type 12 has an invalid length. [ 935.414674][T31226] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 935.831112][ T32] INFO: task syz.5.4850:26253 blocked for more than 143 seconds. [ 935.831142][ T32] Not tainted syzkaller #0 [ 935.831154][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 935.831165][ T32] task:syz.5.4850 state:D stack:27144 pid:26253 tgid:26251 ppid:24361 task_flags:0x400140 flags:0x00080002 [ 935.831229][ T32] Call Trace: [ 935.831238][ T32] [ 935.831256][ T32] __schedule+0x17db/0x58f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 935.831322][ T32] ? __pfx___schedule+0x10/0x10 [ 935.831357][ T32] ? schedule+0x90/0x2b0 [ 935.831379][ T32] schedule+0x164/0x2b0 [ 935.831398][ T32] schedule_preempt_disabled+0x13/0x30 [ 935.831415][ T32] __mutex_lock+0x7c1/0x1550 [ 935.831439][ T32] ? __mutex_lock+0x5d4/0x1550 [ 935.831465][ T32] ? nfsd_nl_unlock_export_doit+0x2ef/0x580 [ 935.831584][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 935.831603][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 935.831639][ T32] ? kern_path+0xd1/0x150 [ 935.831676][ T32] nfsd_nl_unlock_export_doit+0x2ef/0x580 [ 935.831700][ T32] ? __nla_parse+0x40/0x60 ** replaying previous printk message ** [ 935.831700][ T32] ? __nla_parse+0x40/0x60 [ 935.831730][ T32] ? __pfx_nfsd_nl_unlock_export_doit+0x10/0x10 [ 935.831757][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 935.831781][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 935.831812][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 935.831840][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 935.831876][ T32] ? bpf_lsm_capable+0x9/0x20 [ 935.831894][ T32] ? security_capable+0x7e/0x2c0 [ 935.831926][ T32] genl_rcv_msg+0x614/0x7a0 [ 935.831955][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 935.831975][ T32] ? __pfx_nfsd_nl_unlock_export_doit+0x10/0x10 [ 935.832016][ T32] netlink_rcv_skb+0x226/0x4a0 [ 935.832045][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 935.832068][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 935.832112][ T32] ? down_read+0x2be/0x330 [ 935.832139][ T32] genl_rcv+0x28/0x40 [ 935.832158][ T32] netlink_unicast+0x7bd/0x940 [ 935.832195][ T32] netlink_sendmsg+0x813/0xb40 [ 935.832233][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 935.832269][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 935.832292][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 935.832318][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 935.832353][ T32] ____sys_sendmsg+0x54e/0x850 [ 935.832382][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 935.832416][ T32] ? import_iovec+0x73/0xa0 [ 935.832462][ T32] ___sys_sendmsg+0x2a5/0x360 [ 935.853376][T31247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5998'. [ 935.870849][T31247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5998'. [ 935.873603][ T32] ? __lock_acquire+0x747/0x2de0 [ 935.873669][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 935.873735][ T32] ? futex_wait+0x2a2/0x390 [ 935.873922][ T32] ? __fget_files+0x2a/0x420 [ 935.873987][ T32] ? __fget_files+0x3a2/0x420 [ 935.874063][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 935.874126][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 935.874255][ T32] do_syscall_64+0x166/0x520 [ 935.874316][ T32] ? trace_irq_disable+0x3b/0x140 [ 935.874584][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.874647][ T32] ? clear_bhb_loop+0x70/0xc0 [ 935.874712][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.874752][ T32] RIP: 0033:0x7f924b19e159 [ 935.874809][ T32] RSP: 002b:00007f924bff5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 935.874855][ T32] RAX: ffffffffffffffda RBX: 00007f924b425fa0 RCX: 00007f924b19e159 [ 935.874905][ T32] RDX: 0000000004000080 RSI: 00002000000000c0 RDI: 0000000000000003 [ 935.874938][ T32] RBP: 00007f924b23506b R08: 0000000000000000 R09: 0000000000000000 [ 935.874970][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 935.875006][ T32] R13: 00007f924b426038 R14: 00007f924b425fa0 R15: 00007ffe88f1d738 [ 935.875105][ T32] [ 935.875236][ T32] [ 935.875236][ T32] Showing all locks held in the system: [ 935.875337][ T32] locks held by pr/ttyS0/16: 2, last CPU#0: [ 935.875695][ T32] #0: ffffffff8ec364b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 935.875855][ T32] #1: ffffffff9ad3a098 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 935.876057][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 935.876091][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 935.876226][ T32] locks held by kworker/u8:8/1259: 4, last CPU#0: [ 935.876260][ T32] #0: ffff88802b795140 ((wq_completion)krds_cp_wq#7/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 935.876413][ T32] #1: ffffc9000523fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 935.876543][ T32] #2: ffff888043122780 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 935.876878][ T32] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __inet_dev_addr_type+0x159/0x560 [ 935.877045][ T32] locks held by getty/5370: 2, on CPU#0: [ 935.877078][ T32] #0: ffff888036b7b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 935.877280][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 935.877429][ T32] locks held by kworker/u8:14/6002: 2, last CPU#0: [ 935.877463][ T32] #0: ffff8880331b4940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 935.877592][ T32] #1: ffffc9000529fc40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 935.877897][ T32] locks held by syz-executor/19694: 4, last CPU#0: [ 935.877952][ T32] #0: ffffffff8ee36330 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 935.878082][ T32] #1: ffff888032e083b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 935.878217][ T32] #2: ffff88801b0929f8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 935.878347][ T32] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 935.878481][ T32] locks held by kworker/u8:13/22609: 6, on CPU#1: [ 935.878515][ T32] #0: ffff88801c2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 935.878651][ T32] #1: ffffc90004a7fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 935.878878][ T32] #2: ffffffff90243cc8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 935.879133][ T32] #3: ffffffff905c2560 (ovs_mutex){+.+.}-{4:4}, at: ovs_exit_net+0xe4/0x7a0 [ 935.880573][ T32] #4: ffffffff90252520 (rtnl_mutex){+.+.}-{4:4}, at: internal_dev_destroy+0xf0/0x170 [ 935.880682][ T32] #5: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 935.880816][ T32] locks held by syz.0.4251/23854: 2, on CPU#1: [ 935.880868][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 935.882771][ T32] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 935.882907][ T32] locks held by syz.5.4850/26253: 2, on CPU#0: [ 935.882941][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 935.883064][ T32] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_export_doit+0x2ef/0x580 [ 935.883199][ T32] locks held by udevd/27095: 1, on CPU#0: [ 935.883232][ T32] #0: ffff888027965350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 935.884746][ T32] locks held by syz.1.5326/28275: 2, on CPU#1: [ 935.884780][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 935.884903][ T32] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 935.885037][ T32] locks held by syz-executor/31032: 2, on CPU#1: [ 935.885070][ T32] #0: ffffffff907a6e70 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 935.885258][ T32] #1: ffffffff90252520 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 935.887366][ T32] locks held by syz.6.5995/31225: 1, on CPU#1: [ 935.887401][ T32] #0: ffffffff90252520 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 935.887529][ T32] locks held by syz.6.5995/31245: 1, on CPU#1: [ 935.887561][ T32] #0: ffffffff90252520 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 935.888979][ T32] locks held by syz.7.5997/31220: 2, on CPU#0: [ 935.889031][ T32] #0: ffffffff907a7568 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 935.907911][ T32] #1: ffffffff90252520 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 935.908064][ T32] locks held by syz.7.5997/31226: 1, on CPU#1: [ 935.908100][ T32] #0: ffffffff90252520 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 935.908235][ T32] locks held by syz.4.5998/31234: 2, on CPU#0: [ 935.908269][ T32] #0: ffff8880901b46e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 935.911079][ T32] #1: ffffffff90252520 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 935.911214][ T32] locks held by syz.4.5998/31236: 1, on CPU#0: [ 935.911248][ T32] #0: ffffffff90252520 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 935.911378][ T32] locks held by syz.4.5998/31247: 3, on CPU#1: [ 935.911411][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 935.911515][ T32] #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 935.922567][ T32] #2: ffffffff90252520 (rtnl_mutex){+.+.}-{4:4}, at: l2tp_eth_create+0x7c9/0xbd0 [ 935.922757][ T32] locks held by sed/31238: 4, last CPU#0: [ 935.922792][ T32] #0: ffff888033b206c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 935.922924][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0 [ 935.923273][ T32] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d1/0x2170 [ 935.923399][ T32] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 935.923505][ T32] [ 935.923511][ T32] ============================================= [ 935.923511][ T32] [ 935.923540][ T32] NMI backtrace for cpu 1 [ 935.923558][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 935.923580][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 935.923592][ T32] Call Trace: [ 935.923600][ T32] [ 935.923609][ T32] dump_stack_lvl+0xe8/0x150 [ 935.923639][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 935.923667][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 935.923699][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 935.923729][ T32] sys_info+0x135/0x170 [ 935.923752][ T32] watchdog+0xfd7/0x1030 [ 935.923789][ T32] ? watchdog+0x1c7/0x1030 [ 935.923816][ T32] kthread+0x38b/0x480 [ 935.923836][ T32] ? __pfx_watchdog+0x10/0x10 [ 935.923853][ T32] ? __pfx_kthread+0x10/0x10 [ 935.923875][ T32] ret_from_fork+0x514/0xb70 [ 935.923920][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 935.923953][ T32] ? __switch_to+0xc89/0x1420 [ 935.923985][ T32] ? __pfx_kthread+0x10/0x10 [ 935.924008][ T32] ret_from_fork_asm+0x1a/0x30 [ 935.924055][ T32] [ 935.924262][ T32] Sending NMI from CPU 1 to CPUs 0: [ 935.924315][ C0] NMI backtrace for cpu 0 [ 935.924331][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 935.924354][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 935.924366][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 935.924392][ C0] Code: e8 fe 24 55 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ef 24 c5 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 935.924408][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 935.924427][ C0] RAX: 1ffffffff35a7460 RBX: 00000000000003fd RCX: 0000000000000000 [ 935.924456][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 935.924468][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 935.924481][ C0] R10: dffffc0000000000 R11: ffffffff8572a560 R12: dffffc0000000000 [ 935.924495][ C0] R13: 0000000000000000 R14: ffffffff9ad3a0c0 R15: 0000000000000000 [ 935.924509][ C0] FS: 0000000000000000(0000) GS:ffff888124cd1000(0000) knlGS:0000000000000000 [ 935.924525][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 935.924538][ C0] CR2: 00007f00a3a42000 CR3: 000000009379c000 CR4: 00000000003526f0 [ 935.924558][ C0] Call Trace: [ 935.924565][ C0] [ 935.924576][ C0] wait_for_lsr+0xbc/0x2f0 [ 935.924600][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 935.924630][ C0] serial8250_console_write+0xaa1/0x1200 [ 935.924651][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 935.924685][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 935.924704][ C0] ? __schedule+0x17f1/0x58f0 [ 935.924731][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 935.924761][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 935.924786][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 935.924815][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 935.924846][ C0] nbcon_kthread_func+0x679/0x880 [ 935.924869][ C0] ? nbcon_kthread_func+0x163/0x880 [ 935.924888][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 935.924912][ C0] ? __kthread_parkme+0x71/0x1f0 [ 935.924938][ C0] ? __kthread_parkme+0x199/0x1f0 [ 935.924967][ C0] kthread+0x38b/0x480 [ 935.924985][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 935.925004][ C0] ? __pfx_kthread+0x10/0x10 [ 935.925022][ C0] ret_from_fork+0x514/0xb70 [ 935.925043][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 935.925071][ C0] ? __switch_to+0xc89/0x1420 [ 935.925097][ C0] ? __pfx_kthread+0x10/0x10 [ 935.925116][ C0] ret_from_fork_asm+0x1a/0x30 [ 935.925152][ C0] [ 935.951306][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 937.166571][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 937.176143][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 937.186384][ T32] Call Trace: [ 937.189673][ T32] [ 937.192616][ T32] vpanic+0x56d/0xa60 [ 937.196627][ T32] ? __pfx___schedule+0x10/0x10 [ 937.201544][ T32] ? __pfx_vpanic+0x10/0x10 [ 937.206068][ T32] panic+0xc5/0xd0 [ 937.209804][ T32] ? __pfx_panic+0x10/0x10 [ 937.214339][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 937.219813][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 937.225218][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 937.231429][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 937.237625][ T32] watchdog+0x1030/0x1030 [ 937.241992][ T32] ? watchdog+0x1c7/0x1030 [ 937.246442][ T32] kthread+0x38b/0x480 [ 937.250525][ T32] ? __pfx_watchdog+0x10/0x10 [ 937.255223][ T32] ? __pfx_kthread+0x10/0x10 [ 937.259823][ T32] ret_from_fork+0x514/0xb70 [ 937.264438][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 937.269599][ T32] ? __switch_to+0xc89/0x1420 [ 937.274433][ T32] ? __pfx_kthread+0x10/0x10 [ 937.279061][ T32] ret_from_fork_asm+0x1a/0x30 [ 937.283860][ T32] [ 937.287223][ T32] Kernel Offset: disabled [ 937.291757][ T32] Rebooting in 86400 seconds..