last executing test programs: 2m37.490804222s ago: executing program 0 (id=14944): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="1c002d800a00000002020202020200000a0000000101010101010000"], 0x38}}, 0x0) 2m37.443230646s ago: executing program 0 (id=14945): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3, @ANYRES16=r1, @ANYRES32=r1], 0x1c}}, 0x4008054) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r5) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r6, 0x72b, 0xfffffffd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="88000000f188d7cdcda83ab257e408fa94b508be78692c105a98b992e94e7621b281bc336a70b48adc344fc05dd14d32ef3953e812e8f8fbd4c15d0d1247fd9f9aeded58921e613d66b0a7911b5769556e279297f0ae9315364614d3db83", @ANYRES16=r6, @ANYBLOB="01002cbd7000fddbdf25210000000c00050000000000000000000a0001007770616e330000000a0001007770616e300000000c0005000203aaaaaaaaaaaa05002000000000000a0001007770616e3100000009001f00706879310000000009001f0070687933000000000c00050000000000000000000a0001007770616e33000000"], 0x88}, 0x1, 0x0, 0x0, 0x44}, 0xd880) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4004001) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r5, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="64010000", @ANYRES16=r7, @ANYBLOB="000829bd7000fbdbdf2513000000200013801c0000800a00010026407d287b2a000009000100706879310000000008000100", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="c5de4a2f48b3246adac5ded286ccaf733f3191e9bc1ab9f30e08569f12fe560cb8a2cc5bc4f8fff6b4a961e391d91a22406a15bedc52345d12e677b3919c755ada770e236dbba684bb3cf82519a94fa593a28d3ca574075c0d3b874b7211336c8da2dc064c8f9aa789d453fedc8fe6c016ee799474f17c935575050fd69a7a63bb99e993a5fd6d"], 0x164}, 0x1, 0x0, 0x0, 0x24044011}, 0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090a010400000000000000000000000008000a40001000000900020073797a31000000000900010073797a31000000000800054000000021080003400000004008000f"], 0x74}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) unshare(0x28000600) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) r12 = socket(0x10, 0x800000000080002, 0x6) setsockopt$sock_attach_bpf(r12, 0x1, 0x34, &(0x7f00000000c0)=r11, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r13, 0xc040ff0b, 0x2000000000) sendmsg$nl_route(r13, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@ipv6_getanyicast={0x14, 0x3e, 0x400, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x1) r14 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000000300)=ANY=[@ANYRES8=r4], 0xfdef) socket$nl_netfilter(0x10, 0x3, 0xc) 2m37.2508216s ago: executing program 0 (id=14946): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @broadcast, 0x4}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x620, 0xe0, 0x428, 0x338, 0x338, 0x338, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x45, 0x1}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@eui64={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x0, 0x7}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x62, 0x8, 0x7, 0xb, 0x30ba, 0x222}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) 2m37.183084017s ago: executing program 0 (id=14947): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x11, @loopback, 0x15, 0x0, 'wlc\x00', 0x39, 0x6, 0x1f}, 0x2c) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0xe, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0) 2m37.084411064s ago: executing program 0 (id=14949): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071120a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x5ddc, 0xffffffff, 0x2dfe}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000affc21dc000000100000001800018014000200776c616e300000000000000000000800080006"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4040010) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000010025bd7002f9dbdf5b000000c8de06", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200012a000000000000000000101e00463caeb6f80bcd9194f3627bfffd50202064b205afa0c126cba46de8a7aca995a0fb1290278e8dbc39c2b4", @ANYRES8, @ANYRES8=r0], 0x26}}, 0x80) 2m37.054315031s ago: executing program 0 (id=14951): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x440, 0x30, 0x51b, 0x0, 0x0, {}, [{0x42c, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xec, 0x0, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x228, 0xe, 0x0, 0x0, {{0x7}, {0x11c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x68, 0x6, {0x1, 'security\x00', 0x10, 0x601, "cc7f0d8e6a71b09bc6896b57636e7f85df9b4f8215e0c486baa4c510387d2302f461cd27d7a96858084af585c5e0f61c6f36198f0ce821f1fa9dc892d84e"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x69, 0x6, {0x7, 'security\x00', 0x4, 0x7, "b7d444d0548e1a4bda030af7d9220b353120584ed738c93b5848eb3154415528162e8c94c3f0b22d9b6021d8f21118bd9be296e2ae42a94814950d85d6f5a3"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0xe8, 0x6, "ec47c77560220092771c9eaca147337fabfc41e85416d68b39449d3f1508a10baa2b15cc9482168d2f59162f4d138c6d6e5201418a51dabca095331043b4614d08ff5c37299c7e4a41f5c7e9a5ed732028175e1228ae2356ddc89865ef9167367b7ae96c45e5198187dd8e9b3e8d2c5e94a0c2935304e71dafbb6a51fe54f7e4e44591797bd82becccedae8011c8ed0b276f38da417ca793c7fff783150326e4915cd03aa936fe9698a3a521d9909c6f48662b546cc660cd54b3d0d9212638f3b193dce2098065f976cdd56188e9a2035626d00c4d68ff415a64681bc80ba3fc301e14fa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x440}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x5]}, &(0x7f0000000040)=0x6) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m24.295277083s ago: executing program 2 (id=15124): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000004004880883601ccabcfc5ca04000880040008800c0002000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @broadcast, 0x4}, 0x10) 2m24.212764427s ago: executing program 2 (id=15126): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x10000) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000300)=0x3) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)="00214717a70700080000030600710a5e31163ceb9d0471200000000500000000000000ff7ac48cd5bb5b44d7cc8e2dafffc941", 0x33}], 0x1, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x5}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x4, 0x0, 0x4, 0x0, 0x80, 0x30, 0x9f}}}}}]}, 0x44}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x7ff, '\x00', r2, 0xffffffffffffffff, 0x1, 0x5}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1d, 0x8, 0x1, 0x9, 0x40, 0xffffffffffffffff, 0x26, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x1e, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc42f, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_val={0x18, 0x9, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x8}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x33}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x7}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x10000) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000300)=0x3) (async) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) (async) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)="00214717a70700080000030600710a5e31163ceb9d0471200000000500000000000000ff7ac48cd5bb5b44d7cc8e2dafffc941", 0x33}], 0x1, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x5}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x4, 0x0, 0x4, 0x0, 0x80, 0x30, 0x9f}}}}}]}, 0x44}}, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x7ff, '\x00', r2, 0xffffffffffffffff, 0x1, 0x5}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1d, 0x8, 0x1, 0x9, 0x40, 0xffffffffffffffff, 0x26, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x1e, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc42f, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_val={0x18, 0x9, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x8}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x33}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x7}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) (async) 2m24.052643353s ago: executing program 2 (id=15128): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x38, r2, 0x1, 0x70bd2c, 0x1, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x117}]]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c085}, 0x4040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008000f"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2m23.922281732s ago: executing program 2 (id=15131): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x1e, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x1, 0x5, 0x0, 0x5}, @generic={0x4, 0x7, 0xc, 0x1, 0x9}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x9}, @ldst={0x1, 0x2, 0x0, 0x8, 0xa, 0x80, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x9c}, @alu={0x4, 0x1, 0x4, 0x9, 0x4, 0x40, 0xfffffffffffffffc}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000140)='syzkaller\x00', 0x80000001, 0x1000, &(0x7f0000000740)=""/4096, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001740)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000001780)={0x1, 0xb, 0xffffffff, 0xffff6ecd}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="61123000000000006113670000000000bf2000000000000015000600071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) 2m23.857139371s ago: executing program 2 (id=15133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f30455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x1e, 0x5, 0x3ff) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0x4, 0x7, 0xe48, 0x4, 0xffd, 0x10000, 0x9, 0x9}}) r12 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r13, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r14, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m23.717186466s ago: executing program 2 (id=15135): r0 = socket(0x21, 0x5, 0x19) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x16}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x14}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004010) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0x20004000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000100000001800018014000200776c616e3100000000000000000000000800070001000000"], 0x34}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x56) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba12", 0x11}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x670, 0x5, 0x3b0, 0x178, 0x0, 0xfeffffff, 0x178, 0xa8, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'geneve1\x00', 'geneve0\x00', {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x7ffffffe, {0x12, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @port=0x4e24, @gre_key=0x6}}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x0, 0x7}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x5, 0x5, 0x4, 0x4, 0x1], 0x6, 0x1}, {0x3, [0x1, 0x0, 0x0, 0xc, 0x2, 0x5], 0x4, 0x1}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0xd00, {0x0, @loopback, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {0xff}, 0x84, 0x2}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000a80)={0x0, 0x0, 0x5, r11, 0x4}, 0xc) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {}, {}, {0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r12, 0x0, 0x3c, 0x7d, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000b00)=""/125, 0x0, 0x0, 0xd8, 0x11b, &(0x7f0000000840)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000940)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526e503f1dd2601d4316fea7e3247d2ff584ed42439a696e6bda009b688930f71c2be9d09c402e2b42b034d6e807ce87b97d6160c26ca90c005f289faf82d4efd00fd5eea861ad4ead3a4929a4394b9acf01f21ad2959a8d6", 0x0, 0x8000, 0xffffffff}, 0x50) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b1c40000", @ANYRES16=r2, @ANYBLOB="000128bd7000fbdbdf25010000002400028006000b00020000000800040094400002080006005c00000005000d000000000064000380080001000300000008000100020000000500080007000000080005000a01180000000100020000000800030000000000140002006e723000000000000000000000000000050008000b0000001400020076657468305f6d6163767461700000000c000380060007004e2200004000038008000500e000000108000500ac1414aa14000600fe800000000000000000000000000036064c8adf700000000800010001000000060007004e230000"], 0xe8}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) 2m21.81265611s ago: executing program 32 (id=14951): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x440, 0x30, 0x51b, 0x0, 0x0, {}, [{0x42c, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xec, 0x0, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x228, 0xe, 0x0, 0x0, {{0x7}, {0x11c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x68, 0x6, {0x1, 'security\x00', 0x10, 0x601, "cc7f0d8e6a71b09bc6896b57636e7f85df9b4f8215e0c486baa4c510387d2302f461cd27d7a96858084af585c5e0f61c6f36198f0ce821f1fa9dc892d84e"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x69, 0x6, {0x7, 'security\x00', 0x4, 0x7, "b7d444d0548e1a4bda030af7d9220b353120584ed738c93b5848eb3154415528162e8c94c3f0b22d9b6021d8f21118bd9be296e2ae42a94814950d85d6f5a3"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0xe8, 0x6, "ec47c77560220092771c9eaca147337fabfc41e85416d68b39449d3f1508a10baa2b15cc9482168d2f59162f4d138c6d6e5201418a51dabca095331043b4614d08ff5c37299c7e4a41f5c7e9a5ed732028175e1228ae2356ddc89865ef9167367b7ae96c45e5198187dd8e9b3e8d2c5e94a0c2935304e71dafbb6a51fe54f7e4e44591797bd82becccedae8011c8ed0b276f38da417ca793c7fff783150326e4915cd03aa936fe9698a3a521d9909c6f48662b546cc660cd54b3d0d9212638f3b193dce2098065f976cdd56188e9a2035626d00c4d68ff415a64681bc80ba3fc301e14fa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x440}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x5]}, &(0x7f0000000040)=0x6) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m8.685535757s ago: executing program 33 (id=15135): r0 = socket(0x21, 0x5, 0x19) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x16}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x14}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004010) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0x20004000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000100000001800018014000200776c616e3100000000000000000000000800070001000000"], 0x34}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x56) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba12", 0x11}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x670, 0x5, 0x3b0, 0x178, 0x0, 0xfeffffff, 0x178, 0xa8, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'geneve1\x00', 'geneve0\x00', {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x7ffffffe, {0x12, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @port=0x4e24, @gre_key=0x6}}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x0, 0x7}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x5, 0x5, 0x4, 0x4, 0x1], 0x6, 0x1}, {0x3, [0x1, 0x0, 0x0, 0xc, 0x2, 0x5], 0x4, 0x1}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0xd00, {0x0, @loopback, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {0xff}, 0x84, 0x2}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000a80)={0x0, 0x0, 0x5, r11, 0x4}, 0xc) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {}, {}, {0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r12, 0x0, 0x3c, 0x7d, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000b00)=""/125, 0x0, 0x0, 0xd8, 0x11b, &(0x7f0000000840)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000940)="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", 0x0, 0x8000, 0xffffffff}, 0x50) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b1c40000", @ANYRES16=r2, @ANYBLOB="000128bd7000fbdbdf25010000002400028006000b00020000000800040094400002080006005c00000005000d000000000064000380080001000300000008000100020000000500080007000000080005000a01180000000100020000000800030000000000140002006e723000000000000000000000000000050008000b0000001400020076657468305f6d6163767461700000000c000380060007004e2200004000038008000500e000000108000500ac1414aa14000600fe800000000000000000000000000036064c8adf700000000800010001000000060007004e230000"], 0xe8}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) 1.646711454s ago: executing program 1 (id=16824): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0x13, 0x0, &(0x7f0000000280)=0x2f) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket(0x2a, 0x6, 0xceb) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x201, 0x70bd28, 0x25dfdbfe, {0x2, 0x8, 0x43}}, 0x18}}, 0x0) setsockopt$sock_int(r1, 0x28, 0x0, 0x0, 0x0) 1.515121848s ago: executing program 1 (id=16828): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x50) (async) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r4, r1, 0x0, r0}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x45, &(0x7f0000000000), 0x4) (async) r6 = socket(0xa, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x44, 0x6, 0x520, 0x138, 0x0, 0x138, 0x208, 0x0, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x3a}, 0xff, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {0xff}, 0x1}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x138}}, {{@ip={@loopback, @remote, 0xffffff00, 0x0, 'macvtap0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x2, @multicast2}}}, {{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x24}, 0xffffffff, 0xff, 'veth0_to_bond\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0xff, 0x3, 0x19}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x7fff, 0x7, [0x29, 0x26, 0x35, 0xc, 0x15, 0x33, 0x21, 0xf, 0x38, 0x21, 0xa, 0x3, 0x3, 0x1f, 0x14, 0x37], 0x2, 0x8, 0x85}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'macvlan0\x00', {0xff}, {}, 0x33, 0x3}, 0x0, 0x170, 0x198, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x2, 0x4, 0x5, 0x6, 0x3, 0x2], 0x1, 0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@empty, [0xffffffff, 0xffffffff, 0xffffff00], @ipv4=@broadcast, [0xffffff00, 0xff000000, 0xffffff00], @ipv4=@broadcast, [0xff, 0xffffff00, 0xff, 0xff], @ipv4=@empty, [0x0, 0xff000000, 0xff000000, 0xff], 0x40, 0xf, 0x89, 0x4e22, 0x4e20, 0x4e22, 0x4e22, 0x40}, 0x0, 0x8c}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x6}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 'lo\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x4, 0x7}, {0x0, 0x6, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x580) 1.514557603s ago: executing program 5 (id=16829): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000006000000180900002020642500000000002320207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000069a0fcff0000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e16}, 0x94) 1.514122507s ago: executing program 4 (id=16830): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000440)="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", 0x150) r5 = openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f00000000c0)={0x604, 0x2, 0x3, 0xffffffff}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f00000003c0)={@val={0x4}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "b79a56", 0x44, 0x29, 0x0, @local, @mcast2={0xff, 0x3}, {[], {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81c}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x1}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0xfffffffc}}}}}}}}, 0x7e) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0xdb4a}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000000c0)={r8, 0x4}, &(0x7f0000000140)=0x8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0x22e2e, 0x100, 0x7, 0x3, 0x0, 0x0, 0xffff}}) socket$inet_sctp(0x2, 0x5, 0x84) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r3, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84) (async) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000440)="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", 0x150) (async) openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (async) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f00000000c0)={0x604, 0x2, 0x3, 0xffffffff}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r6, &(0x7f00000003c0)={@val={0x4}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "b79a56", 0x44, 0x29, 0x0, @local, @mcast2={0xff, 0x3}, {[], {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81c}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x1}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0xfffffffc}}}}}}}}, 0x7e) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0xdb4a}, &(0x7f0000000080)=0x8) (async) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000000c0)={r8, 0x4}, &(0x7f0000000140)=0x8) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0x22e2e, 0x100, 0x7, 0x3, 0x0, 0x0, 0xffff}}) (async) 1.495352711s ago: executing program 6 (id=16831): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x418, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0x270, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x70}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0xa0, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x5112], 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x6, [@restrict={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x1}]}, @union]}, {0x0, [0x0, 0x0, 0x2e, 0x2e]}}, 0x0, 0x4a}, 0x20) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x5c}, 0x1, 0x0, 0x0, 0x2004c880}, 0x0) 1.351186602s ago: executing program 1 (id=16833): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYRESDEC=r1], 0x34}}, 0x0) (async) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000040), 0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) close(0x3) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4080000000000007311be00000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20684040}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x20004001) 1.34900604s ago: executing program 6 (id=16834): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x20c, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0x1, 0xffff}, {0xe, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x401, 0x10, 0x6, 0x8, 0x9}, 0x20000001, 0xffffffff, 0x1, 0x5, 0xe, 0x4, 0xd, 0x18, 0x1, 0x2, {0x4, 0x9, 0xfffffffc, 0x800, 0x7, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = accept4(r5, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000280)=0x80, 0x800) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r7, &(0x7f0000001040)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="20050000", @ANYRES16=r8, @ANYBLOB="00022bbd7000ffdbdf250a00000044000180140002007465616d5f736c6176655f300000000008000100", @ANYRES32=r6, @ANYBLOB="0800eb00", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="14000200726f7365300000000000000000000000340001800800030002000000140002006261746164763000000000000000000014000200626f6e645f736c6176655f3000000000ec020280ec000500ca138bf85d0365f9f45cc33f67aa81ec196338a0bf7338a8f91bfc0a3cf76b8b9cf923262365a80a9c1291db1fe441c15bcc7cfad5d60afaba7d947d9b843a10dbbd400ef89f7f3877fe285e2530edbf998b72bc8e6fa8f5d8fcbd2778dd85ada099abe7fb67c5c27e023cf7a2a7960b225e4af2210f9e1e73052219e20c314c646b182cb272f2033fb40a2082435d56dcb40dc471130a00b7f7c496558cb0ab99251ecdb982c9a1186dd62b2d32eabfde3b2d2593ca405281616bf957bb56bd6fd9d1192149a6ea7c6007c803139e8573b586943b0a0fd911d1ccd8405c4f90455d245e539aa6ca0c000380080001800400030008000200060000002800040042210d0de5d65b82c1bd6bc7e5e4ec7ae0080f7bcbcf72e6fdaba8a89a889794f0ae09e88c000400216dc3c275fc3ef6f09af17c2e374ef24ceb10e71380663af03e793de5716d716021fe3d696062db9155e7fd7fff712f423e0e209252830bc196042a81e10661913af4d84fa3f17d24fb9ea900e54f0c806788a30412f2c6d2928984394e425d0c4071950bc7d6858d785f74ffc8a5068131cd5b31544d67c0d3d1e297b713f291badeecc28526d9760004009db5dbb6cea003a25668bfd9fcd48b39a4e576370d9d7b1b4c005a04f303248e43ab8df4040f448702644734e49ea5ede8629642702686c427421d16feee7cd884b81ee88434bf812202770068cfd8b60ceaedd96e930e73bd5e67f77537b08579903e87a4aef2cbec8a23f57cb189dc1d59000004000100b80005004a117b96ec1d913e38e8a3794b0b3874e2d39b27245334bf7e2459acf529e0ae1e593785ec1a5b41cf59563755944ea800eb8b927bdfcd93cafb7d26bda04122ec6ca25ab461183ef8ad8d8fb6d6bd8d41a7aad9fc625d790e0cad4366102509745e1d1b4c4f69358a004e84b5d685a5ec873e92f4ed5ccad94926647efa4ac01d65b38c3ca1d9548748a5dc58bb448f097ec01325a8efb0a1c1c96de1f2dfe0bd8608508e63bf0f6d1f8cb46424754681e5206020000180080003000100000014000200627269646765300000000000000000004401028067000500f44c0d18ff00d4a363e2fac08b2e747bc4bef28fdcb55e39bf6ec0794b4e0aec46c41be0b902a4fd5bf0cdbc0ed96d63b6c139f85d20c6f56ee43f2557e32ef16ae750b405efa0921c2739adf8b6d9700d84a58d58029f326791cc846370dbc5fe6ad000d500050002240734a6ac94342d0376628479046607f81b91cd758e101e77d7147cef9e28813205f5dc33f396e9e376dddf48fdebbda4f69676e5bf3f198ab9ca976591a36bb35584161cca7da01580ae4ee50bbd69a87b2bc67ff6ee8015f17d45046da07a01bc2ade15fe289cc8ac02a268945bf7662c2d221a9349c2246e87e6f3ac0414d8243eec8866512df6eaca70b7488c2eee62f13e492a3d65a2d2afcf29810451dcb49ebf1d7319c2ec11ba5568937c60b786f93014eab3d15b6eab29b5b83eb271e4078efa98e14ad46067bb67eb314000000044000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020069705f76746930000000000000000000140002007663616e3000"/48], 0x520}, 0x1, 0x0, 0x0, 0x44040}, 0x4000) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.276605678s ago: executing program 4 (id=16836): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x7d74c000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000001080)="3a53e6ff19acc27dfcd05fbc5da0cca1", 0x10) 1.167060462s ago: executing program 1 (id=16837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001000000e7472cbcbbb7b541000a70000000060a010400000000000000000200000344000480400001800e000100627974656f726465720000002c000280080001400000000908000240000000000800044000000000080003400000008108000540000000040900010073797a30000000000900020073797a32"], 0x98}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x6, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x7, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x6, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0x80000ec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x140, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb827, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x1, 0x3, 0x9, 0xc, 0x5, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0xe, 0x400, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0xa, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0xfffffffffffffffa, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.166423977s ago: executing program 4 (id=16838): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f000000cd80)={0x0, 0x0, &(0x7f000000cd40)={&(0x7f000000cd00)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000180)={r4, 0x38, "2578bac7061f3447a08504a2446c491a23182dafbb473aafa54eb3ed48ca035bdffd91df4210d2f7aa12cbbe0f09339f6cb8fbb3fba27bbc"}, &(0x7f00000011c0)=0x40) (async) sendmsg$nl_xfrm(r2, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000bc0)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@empty, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'vmac(tnepres-generic)\x00'}}}]}, 0x184}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006000600800a000008000f00", @ANYRES32=0x0, @ANYBLOB="040002805458dc8bf76b2a58a421a5bff2f7985df7335c956be15c6848ecb1f9ebb6dba1352a70a8bf5407dbb4c415843dd6a14f0a64667faa90be4b5ddf1d38162a7476b6b3c283593cec32f1fe12a55b0ad30e208c70cce8b7d538d5c13c911aa1fc58912491938289573cc0be4454327879366f4976616b0a774bbd047cd5913efa23d2d1e8e3d56145be2fa1373f5aac24f8198135adb0622b7144d3bf995d8f3ab5cf0a85b236a319e202c31393fdac78d07f6230347a41dc188da76a6866e28f7f238c47bc3bab9f"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="1800000069006bcd8e0300dc6e3640030003010000040000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB="adffa888000000002400128009000100626f6e640000000014000280050001000100000005001d0001000000"], 0x44}}, 0x0) 1.137143655s ago: executing program 6 (id=16840): socket$unix(0x1, 0x5, 0x0) (async) r0 = socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x11, 0x40, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000014c0)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0020000000060000580012800b00010067726574617000004800028006000e0002000000050017000100000006000300070000000800050008002200050008148000000005001600010000000500080005000000040012"], 0x78}}, 0x0) socket$inet6(0xa, 0x80001, 0x0) (async) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2, 0xffffffff}}, {{0xa, 0x4e21, 0x400, @ipv4={'\x00', '\xff\xff', @local}, 0x8}}}, 0x108) (async) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2, 0xffffffff}}, {{0xa, 0x4e21, 0x400, @ipv4={'\x00', '\xff\xff', @local}, 0x8}}}, 0x108) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000001180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001000)={0x114, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "e8b9b722f4d50b1730c8f2fce2"}, @NL80211_ATTR_FILS_ERP_REALM={0xdd, 0xfa, "588ad5f4080b5276ed4775670d39c6ce32eb0b4583ff55afd9dbbe9898cfd50181419e1e9f7e40d74cd5a66c30a4708597ffada0062dbfb715b9ee6b1a16f7a2442adc1908e8984ad1cd527808a3a5f8db5e0cc6db0b2898b214b8d64034aa2b09ea9b647dd89b49d8fb0be3ca6e1f6b85cd8cf8b9221b3ad03bed7b1304393bf2b0dd19a72fd664942d05075956cba0d5783a0d3c5edf4e706ecbdd6dcf84e8cab686e5890c6e7bc154a436cf10972cdce3e873e3c43627ea23f006cef0d6899b8a3be3c994d17356efd032dbe9d423908defa46d5494b459"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}]]}, 0x114}, 0x1, 0x0, 0x0, 0x40040}, 0x4840) (async) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000001180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001000)={0x114, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "e8b9b722f4d50b1730c8f2fce2"}, @NL80211_ATTR_FILS_ERP_REALM={0xdd, 0xfa, "588ad5f4080b5276ed4775670d39c6ce32eb0b4583ff55afd9dbbe9898cfd50181419e1e9f7e40d74cd5a66c30a4708597ffada0062dbfb715b9ee6b1a16f7a2442adc1908e8984ad1cd527808a3a5f8db5e0cc6db0b2898b214b8d64034aa2b09ea9b647dd89b49d8fb0be3ca6e1f6b85cd8cf8b9221b3ad03bed7b1304393bf2b0dd19a72fd664942d05075956cba0d5783a0d3c5edf4e706ecbdd6dcf84e8cab686e5890c6e7bc154a436cf10972cdce3e873e3c43627ea23f006cef0d6899b8a3be3c994d17356efd032dbe9d423908defa46d5494b459"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}]]}, 0x114}, 0x1, 0x0, 0x0, 0x40040}, 0x4840) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x190) epoll_create1(0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003a40)=@newtaction={0x900, 0x30, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{0x64, 0x1, [@m_ipt={0x60, 0x17, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xadc0}, @TCA_IPT_HOOK={0x8}]}, {0x25, 0x6, "e0bc7743d52057483c234da7396aee1c1620232e9758fc402870746166594df527"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x888, 0x1, [@m_ipt={0x884, 0x17, 0x0, 0x0, {{0x8}, {0x4}, {0x859, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x900}, 0x1, 0x0, 0x0, 0x4}, 0x24040001) recvmmsg$unix(r8, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYRES64=r2], 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@delqdisc={0x34, 0x25, 0x400, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0xfff3, 0xc}, {0xfff1, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x34}}, 0x20040084) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000140)={'wpan3\x00'}) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000001440)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001400)={&(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x800}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 1.01523281s ago: executing program 1 (id=16842): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0xffffffffffffff11, 0x2, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @restrict={0x1}]}}, 0x0, 0x46, 0x0, 0xa}, 0x20) (async) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) (async, rerun: 32) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r2, 0x0) (async, rerun: 64) unshare(0x22020400) (rerun: 64) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') read(r3, &(0x7f0000000200)=""/196, 0xc4) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r4], 0x944}, 0x1, 0x0, 0x0, 0x40850}, 0x20000000) 1.01450735s ago: executing program 4 (id=16843): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xa98ffd98012990a5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="400000e210ffff000003e4", @ANYRES32=0x0, @ANYBLOB="03000000c31006002000128008000100736974001400028008000300ac1414bb08000200ac14142d"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f00000000c0)=0x6, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvfrom(r3, &(0x7f0000000080)=""/60, 0x3c, 0x180, 0x0, 0xffffffffffffff69) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000030c0)={0x1, 0x0, {0x4, @struct={0x80000001, 0x5}, 0x0, 0x63, 0xabd, 0x8, 0x5, 0x3, 0x6b, @struct={0x2, 0x7d2d}, 0x7, 0x2d, [0xf, 0x4, 0x8001, 0x4, 0x81, 0x10001]}, {0x5, @usage=0x6, 0x0, 0x4, 0x0, 0xed, 0x0, 0xe6, 0x400, @usage=0xfff, 0xe, 0x3, [0x400, 0x2, 0x0, 0xfff, 0x6, 0xd3]}, {0x10001, @struct={0xffffffff, 0x4}, 0x0, 0x10000, 0x1, 0x9b0, 0x5, 0x6, 0x400, @usage=0xffffffffffffff00, 0x2, 0x7f, [0x2, 0x0, 0x80000001, 0x9, 0x10000000008, 0x4]}, {0x0, 0x800, 0x7ff}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000002c80)={r7, 0x7, 0x1, [0x1, 0x2, 0x416dcaa3, 0xfffffffffffffffa, 0x8000000000000000], [0x7, 0x7, 0x9, 0x0, 0x0, 0x7, 0x2, 0xe, 0x4, 0x8, 0x1, 0x800, 0xfffffffffffffffb, 0x1, 0x1, 0x3330, 0x1, 0x5, 0x14, 0x6, 0xf, 0x80000000, 0x1000, 0x5, 0xea5, 0x8, 0xc, 0xfff, 0x0, 0x0, 0x8, 0xc, 0xf3, 0x2b82c156, 0x5, 0xb, 0xdd, 0x200, 0x3, 0x506cece6, 0xfe71, 0x2, 0xc, 0x7fff, 0x7, 0x8, 0x3, 0x10001, 0xb, 0xfff, 0x9, 0x7ff, 0x3, 0x1, 0x3, 0xffffffffffffffff, 0x8, 0x9b, 0x8b73, 0x2, 0x5, 0x3, 0xa, 0x8000000000000001, 0x1000, 0x1, 0x8, 0x8, 0x1, 0x7, 0x9, 0x0, 0x8000, 0x8, 0xbf, 0x0, 0x401, 0x3ff, 0x8, 0x18, 0x0, 0x7, 0x9, 0x1, 0xfffffffffffffff7, 0x81, 0x2, 0x6, 0x2, 0x4, 0x7, 0x1, 0x0, 0xfffffffffffffffb, 0x5, 0x9, 0x5, 0x7fffffffffffffff, 0x0, 0xe, 0x8, 0x5e, 0x5, 0x8, 0x8, 0xf, 0x4, 0x101, 0x0, 0x4, 0xd0b, 0x2, 0xe, 0xfffffffffffffff8, 0x9, 0x4, 0xb, 0x6, 0x600000000000000, 0x7fffffffffffffff, 0x6]}) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="fc33000046000701feffffff00000000017c000008000180040006004d23c78008001f00e00000028710278004004d8004006680080040000400000004105600aab194f43a5b5ba6a91d029d6dbc1662e9cfab4339701856c4ba46b92a051eb3210b4a78ee75d401d54a0a8e9c711db4142415b7e0c3559e68332145fd0c53524607a1288233662d278d1efba2ff0efed6aa81ca5d2f87232923194e699e56e77b5f22ffd5e16cdd9df171cfea1297833af370d56bf8cfce50f804cfede439b9295fa8512045d368811008c34653d391202070dff86508464744ef489643d6dbd5942180994c53e0edc9503d47b313b1ef8dc6b6afef2661aa6b19845961ee850ab490693293963a069b8f90587a387721468ba74fc8e5ceb69536608623d9d037eb63731405cb6c7eec07d8f73cc598bc31d60cf2c4363fa067ca1f1d6558e248cd1d1db6f2d3cddfb6c09641a4185fefad55167d08ecc1b56fbd5a87af0c50efc31598118a371ac3162875e91d743f82579ebc804dde12e13a2e0ba31b1c80d86654ad58a91dec1675e1f101a772706c00cf5ec6fa16a31acb20edbfd36411329f410b6e113e249b89169762cbda8ef64ee1bc5053b7696bb12c442b29088277f5d8858485f2545e67f993ba0d640263e1c175e04da1842bc9c16851a3a08d2d3709531ddf8c2f705df9a6dde660f214b6189579cd18cee716a139996447f60606f511e0fe5ad1862e0c717e4cd158ce68d8a03b80f1b46c12585764574c0768fa80a23bafe48c3f4ece287cec335d94b90a33c69d20a12455cbe9745cd875b560d170da9705ecd8b23f2cf37f9e1b49cb9aaad3ee18e9be0037ce556efa42c97e0e5d3ba53fdedad5a38e03dff100000000c214dca98ed3c6a467a6da6af8dc898f8446b6a26e431fb22e8dc98e7ddea62d9f5edd983ce8b33ecc5e6cf51d2200f50ab922a1c0c11c698da9d6364ee1dde37a7b876703dee143409d817efc9a41c7cf3225558cb47540c9b649de1da68dadb848d9245b877facf69f0d60aa09050943a9477ac9114ac463675fa17737af016782a403b6538aab624434cddb5136b6ee76e5abb6bf59e58b4b30e881e977dc600aafcdaaca8bfef956b805fab777b9f8e50fe973c475d69faa37e96c28d9d9790744f62bd02e96646b53c808f2b539a37f197e0d6a7593139c880ec7027c17816000f9af57f236988ee105a9d0da34cc3d69291f854e918f488ee61c8854265e252174f67310362ab1ddaf29a7d7b3adc8df48287adb9e9ba36c72272ab29682497cf642d50e3fcf93e5acd74afcc3e39132aa78f2a8497f7177cbe5ca77177313a6e456307f77f03db6272511f675f504b3a22a1a07562d5e12c0005338fd481d103837c6e281e3e5d2c9b783fb3a056166c63ad06970ae9e117eccabd963cf3dc0eb949532388437cc71d31679ba7079c1c89e4069210d2e1fc2c32a32f206422d4f1767ec9d11b554b36076c1fc60e6fc042b12c41eb807bbba69db79ed9a458794153c85dd27424bc416a3312cf65893736789cad5744acb45dcbf0a4ab37197e865230baf2c78e47e14cef88ef77fbbd27fde6464b5e45f39d412a87a704d2f1d9531dea6f5e795954f1609f7620e0aadb3444138b216e53a44e2b10a7a4ae8806d7e46c513f77ce12887fb2370194e68cff4143b324f3201f5a2e5a697d2aa1c68782a769fee6bb99563d9d553185384be2cd40e7bcf2f719b65aab98ad1ad4176f0be6efd07c90b9d8ae3bd43ffbf7f7c5679100eac7350a75db09a99e2faa2aeed0e36cf1a942ea1cda0e41df1de80acb1fec0e15a6d1a53b0faf436f8e0c5a77f83aabf8eac1b5d05f102252c97ba038ca7b5545a93715aed2479443a0b578babbebabdc66865c46fe5bc96e1c051a55f01e94587e3c3fcc6a599af9b5b4ac7f1342d1aa818a7971375f9c0981c4da7be0997fb5d6165678cab5998a64c659d0adc5ebb6dea5af14bcba15f8036a2e10a087d502cd001bd29f082ffa604367ee2dba6a406deed2df91c548994c9f6ebe21159619c0644e4a49f7c837113fec0c12badc91454dbd2cfd6b1e400fbc9a1b70ab9bf2ed58742e98a38fb748c49f7cf62febf587f5819731957816919d6bb518f5912697af03550206506c0f501548a9548a4f4584b9aa421942ccc8d729557378ea746e679f918e413f7c4d535b12c28effe9881922c4926eff8e99a0bdfaed6b009d14fad6f95023a1f3565ce81e50e8b9a27244bf5552829dbab004528f51c6d59cf4435119dd3b4fa56cc54e6d897852112f9b7da758016137064fa8a3013425b396bdbd1c9057c3beee833b5935c1b4c4f10c1dc28890c4094ab787761289566762854366a3866e7e7144bdf67e830bf9cf1e7a5ef56e7db931a6cbf48b84ff06f4cbbac3844cfc5217c2e1af7913dd1461a1a13dc3296fc3e4492dc2525e191294e28ed7a4947ff131e91fb805dffa154c4259e4be0ec470522408e39081514a493c33bca7d93a26aea87540116a2518e4ba2783173917f5529c5f669c5c897d6f64eed804ab966d6e8f6ebbfced77d12007bddd3ee372c4a489461853aa3be2e0a1cf8d603b0c0a62a11fb9d1cd3b8d2dcec3752534639deb4e125faf61c380e77cca8a6f0c20cd54daf33372beb87eefde602b182f0a6d9d77906e59979e08e2d4c67d469b60ef3350b790ddbd2d10755c8e1c3cc2aa8d3a9ebc05d49b076e0c16aaf00a2cd464bec3624361ce65bcedcecc31b27cf47a738baabe0512eb8a35fedad4b89068337dde15df375d2f80816e3ce21310568e26f24ec248e8c9a32ab82a7be36ca3d49a4e19db983e14f7c844074b91ba9c735b5009b03fdae2c7156814f8fcee0934c3ba02369dfac1bf392c0bd571f07276b61d66a655b783f57d32f4617aef7029253ea8722168fddecb1c81dc4322fb962a08aadf5798d06539a4265680ce9acb9944063c383fafc3e872390122d851ada7ce6628af62f3d33c2123c58b85a072fe0096bbb429a1190591170ca3a1d8f9948e3066bc6d2326e67f7fee7c579b47c0e88a62fd49811612159968ec3629fa9fe14b950bee4a420b5c45ee4fdeb600ea22ad1cee9e3d79a2bb7c0d82a7d794790152c40a476b5a004ed8a96d0212614fc1f9243667340b15a3a632e619c77e73167127136d10b63e4e8add39d6cf4501625b8493fdbdcabf488aa30ca765fe8c21c43c64ee95777d0baaaac200290db8194678334bd4a1d58fc71a677aa73aeb8fae9dbb9d01b68ae3ef80226e529a4997bcdfca32dbe5972e60c79adab364725300fad03a8b82b149f43660b3142d8f39b0a0af51ae2ca79398e455453eecef922796bd9979f8f02c2ed0da5d0f00461d1e8792d47be88d53b44b0e938af30f4d6723183da7007de4692bb83a0f4779033a3d44244e533e945caed1ff1c4fd106f0ee0d393c61c7e1a2f993e8309cabafab2d62377b6810ded17b12b36ca14efc725c7eb21f14e67d45db09b3653c6f6c34c572c2c64b386069f0c8776fafe8d02042cbc46016dfdc20ecce47090acf2ab74ed4307d8612cc5ac79fe46409d3bd78201f9b5bb9e15a4884dfe11c14b1fe6535facaab8336393d6d27c67a9c9962c75b9b2ec60aa0a0647fbacfae2508f16ee5fadb2d8324b7c6029088fc798c8869f5c893e5f6adb19a44243eaf4da29c2e9928e52243d6b89595e10d367f8d88e9f08b8218b384bc9c95d26e89f2a6f1d8c5817f58a314fc01a0d15cd3b51dacc3643f26c9f91b71c53f2a7ecca031a7cf989c060c622d0fc0bc4ea3d0294023d281c62489880754eadd7d6cbaa583d733391dbcfd24d3f0e2c5d1f585d86b11d85a80660aa79934a45cf0b3265aa1d5b826862fdb24b60d79e97ce2ad09baafc2e132a5e9accaa85ee64863cf309863331d9c4cea723c79451d12f841a8fc1acfb33d2e8288e258baaa9655f54e2c80ca66be5d150e656d57db3ca775852614b26f7d6624bbc21ed2aa7f4a27ba6e9286fdb2cf29dbbe46d34a99723e114b7a2872430b915bd1bf950fe96fcdfdebe80cfde3766e954f2864a6fb9a2d2b6f76c89387ce6c9f4f816357961a1afe88d4012d3c5033fe434bd6f40089996572458f94528335d397048c241f23e71d5cca8c8d970b1c61177c495009edd33f0332a29fc31798cdac2136317f52d15f6300d471d37441211b90494022ac59aa47ab7de0c297a5ed4102d1cd22e0f5dbf579997b3f0c4e980b5d8fa2e08bb635a81908c0642d3059192f2922238c2a260ce4dd171570f91841175720e564a3a03789414056c8aea263ef72e8f54384fd58974821faa8969367b3d3dd5e02f7344a9eed4918dd61fb7bab38618e91e3e4f16ada352233a15d1c3c0fab11eefa009a8ed552c212e609b7ef33a191a27d0d3c02b8fcb2c091b4283c7734e44d69a1ab54082c994f204fef97bd348807aeef29c4acc36e334192d87cee8b2e10b6a451502fac4bf26ae4aeb7cb81b3aeae9256d12b8a7f80166a9b5d172cad0bad73a5c6b045117d01ba22b1c06d9eb93b85cb31dbdb84f55b6f7631c7273ea5c25ee85d015003fc37c5eda8262baeacaef09c2070ff601b4acae942a3a31a06a60388b8ddd89209056a09d08cba11ad2bf7ed67a194c6708f5d58d9db67d603b57a49df76933baef8f07d2bf4c49da01a27776ac26efd43ed82a346a554de8b2be00f30f1d88805403fd80c10d480746d9919f2c56368e3f22808f594b5443bab9e84c45c0cdb1be06c057b12480ee11f8273ddac719fbc952282fcfc46a9e35b79280bb5e62b3549841cd2d71d8ae99b963275bac679ae4d85ad4762e9ebfd9cd4f3dc341a2982ef13a1bb276dd545db1536e85de26b75de192b81f264f3f1bffa0c7f537e8600ebf81a205cf08c7af9895bb2b4a3cb800250e28758bc07cbe49afc83c56399e1949ae0e9995d3149944b22e97a3da037ea8b11b49c26a5380221462bb4c38295fed1df7576c2d70123f2de053674e3ae6a1cd653309697f4dc3f3a800774bc6f4e3b8e8f0b4abaa763187b1e515a177cd01490c67c2770e74a51d2e55b84f6a3313e857503d835d4671159a8ac20d4d69d5b8d57aef15046aa15b222b33980993d0b473217c8317e51a88351db618dd43421836cac07aca281471bc51df34a4e5f0901f5d5f19a2ee0a400602db09eb1d8a137e0a03520721dd6351fced393eba9c930e5a8f18bcfd29e3fde01665dcae00b4fb156394ccf4675941c3b1005518f86085f23940770fefbfcc57c063f27c504249155414df61ca4dd63df5de2ebdff1e89fcbe0c3b6bb0e6f99572396eb847d17df74b77de7fdf5ab5285c6300b1c8932ed365fd553da690271a62453a8f08a2ee69213ce7484c9c99e5a57f1f5689cdea6b0cf4fc37aa761065b9c7a07ceb47d45a639e08cf64b657c6e55564f42bdbcc6e22ac42fd7e68243e4bba0316e2a7139282ddedbe7efca37813e29ea30a72c0a11c0ae8c3e878d53c789ba0ff695d51299fdcbe6e89b8809f5171086d4b15d783139a7b6da08b1de241b3727c1024fa75ab47cb61effd4f238b5b5eee1b0ad48b530a99e1b37c90a7337c79603b2bec59afd2d276e67528beadc823e36f58661f9552a6c41ca43408ddadc9a741282f4a5cd8752ea26f7a2bba73b78abd1e70baee02ad99c4f2a983a48fc30718d395b89b7ee508bbedaa3b370a685ff36283f3d4a0d58fd24ddf934f14c0e24481b35423a51954dd6e855e02c353f911aba7bd71e8ec7fde07c7e3215d7f4464b243762b89b246e672b2679f57e0ea2bfae16a2e78384d82934efba1e9d30ca647258fd8762d6411e02471777519f033d9fe7fbff3ef2deb5f500ac64ec940706fa5c90a0400c8800400ef807c99fb210e218bcee1d531abe78665687538f8088d3c7689871231d8c533a6f185c4a158753a3dd6a8c43f3d104914ae4d68ddc6b7ecff1b93dfd68b0b66fba522269a607abb35d8f5133c8193ba3760868f63ffc6806f0c0020005e2e5c25232a7b0004004980000800d200", @ANYRES32, @ANYBLOB="2311be805ac1fbd1514ab6cdb544bdc2501b7f63eeae018267f4622cdf0824a00d1027bca8f12de10cf718a737bbab5ea29a9c9fd41b8b8c2db3d3f438fa86b693224220bca63c3cc98445f689e5a4520d5bdbb2be06d30221c7f6321427bb7bcba4de19b7a74d0283eba4bd6ae583c59f463d1f8c89af0d2c8f35c2c92d79faf815e6c60c391a019bf5d07bcfa66792a2ce891b5eb21212205fe03c79a765d8ec459c3441a57fbbe450dff8567bd32835c015cd1a4752ba36c7affea3de32d631d62e60b57dbfcdfeb19293ad4d72c77d7ea6d8d7088cbd22123742858b8780ddf6a3ce628514777c88c4f728c17a0e0d392f64b1e01d1dee3e5d4c6ee17314d0c40bca57788dd580b9797ffcc2ac15affd7f08002300", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="00000000008f1003"], 0x33fc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4, 0x21}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="0100"], 0x3c}}, 0x0) 901.855115ms ago: executing program 6 (id=16844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d13}) (async) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) (async) r2 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r2, 0x2) (async) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40081}, 0x40000) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)={@void, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @val={@void, {0x8100, 0x6, 0x1}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x9c, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "786b8afe8ef6c8e90c1e350689fcd4d61b4576015011084c54b22430637a2838", "563c538774ee22ce2bb8f46f7373cb97218dd5ee5af3108bd6d195c614d44230e598e0731465bf4fcdfa004c93ce4b4e", "02833533ce8152a09040f08bd2892b7233376dcda3f0b6962e66f617", {"2e7c8cbccc480860f94cd609888bc51a", "38a461132eddc6aef8a88f02e0ed7e13"}}}}}}}}}, 0xd6) syz_emit_ethernet(0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500006000000000000190780a010101ac1414aa05019078e000000241a00004000000000289000064010101e0000002441c9571ac1e0101000020000a01010100000401ac1414aa0000000344144453640101000000000900000000000000fdfa80dabf9c74109660895c023ef7471d2f8e495d923698c3ca2c45ff3199d7a0f64e1aee50696f094fd362b5c5de4fdc24798b99fe8398116557c2081744852acb68e9c356130c73c8ba94c7d7fabb372356bf42160eb126f7e16616f3961998b244dcdaba5e4d3d5b65eb9165"], 0x0) 738.793331ms ago: executing program 3 (id=16846): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {0x0, @remote}, 0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'ip6gre0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES8=r0, @ANYBLOB="00000000000000001c401a800800028008000200080000003e1200"], 0x44}}, 0x40010) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x234, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x16, 0x2c}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0xffff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x9}, {0x5}, {0x6, 0x11, 0x5cff}, {0x8, 0xb, 0x4e20}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x101}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0xe}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0xfffffffe}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x3}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0xb2a}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7f}, {0x8, 0xb, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0x21}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xec}, {0x8, 0xb, 0x7}}]}, 0x234}, 0x1, 0x0, 0x0, 0x804}, 0x2000000) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {0x0, @remote}, 0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'ip6gre0\x00'}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES8=r0, @ANYBLOB="00000000000000001c401a800800028008000200080000003e1200"], 0x44}}, 0x40010) (async) socket$kcm(0x29, 0x2, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x234, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x16, 0x2c}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0xffff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x9}, {0x5}, {0x6, 0x11, 0x5cff}, {0x8, 0xb, 0x4e20}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x101}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0xe}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0xfffffffe}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x3}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0xb2a}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7f}, {0x8, 0xb, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0x21}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xec}, {0x8, 0xb, 0x7}}]}, 0x234}, 0x1, 0x0, 0x0, 0x804}, 0x2000000) (async) socket(0x10, 0x3, 0x0) (async) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) 738.469662ms ago: executing program 6 (id=16847): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r5, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x1ec0, 'syz0\x00'}}}, 0x28}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r3, &(0x7f0000000080), 0x0}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xb}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x89b0, &(0x7f0000000080)={'bridge0\x00', 0x2000}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/112, 0x70}], 0x1) sendmsg$nl_xfrm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@in6=@local, 0x0, 0x2b}, @in6=@mcast2, {}, {0x20000, 0x0, 0x0, 0x800000}, {}, 0x0, 0x0, 0x2, 0x4}, [@coaddr={0x14}]}, 0x104}}, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00') syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000280)=@ctrl_frame=@bar={{}, {0x9}, @device_a, @device_a, @compressed={{0x0, 0x0, 0x1, 0x0, 0x8}, {0x3, 0xe}}}, 0x14) 710.096579ms ago: executing program 1 (id=16848): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x3}]}, @enum, @int={0x9}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x4c, 0x0, 0x3}, 0x28) unshare(0x6000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, &(0x7f0000000180)) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x3}]}, @enum, @int={0x9}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x4c, 0x0, 0x3}, 0x28) (async) unshare(0x6000000) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, &(0x7f0000000180)) (async) 688.633861ms ago: executing program 3 (id=16849): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010000191235f542c07e0349d0f00bdcd00000000000000000a0000000c00c0fc2a911d5628abe14e11f769a602006e"], 0x20}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010000191235f542c07e0349d0f00bdcd00000000000000000a0000000c00c0fc2a911d5628abe14e11f769a602006e"], 0x20}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="aa000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) (async) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x4e21, @empty}, 0x40, 0x0, 0x0, 0x0, 0x2009, 0x0, 0x200001, 0x1ff, 0x9}) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) (async) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000071000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000071000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) 598.643124ms ago: executing program 5 (id=16850): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0xc008006) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="d2500f9b6516d77295c601537da84af690fe6ad975ca56705ba5230cef067f6e18285fda1c1ad22af7f52ba597410fbbae031e663c07db72d10d38a1f3658b5b44b1e14910930abcf1850c9f429363ab3ff4b72e502ec7c7560ec23517ae9e926a71bf97d64f64329cb9f524efa785973085cca918d00b8d51af466c8b3a4c99c728e5d91e60c19fc7f750bdc4a1090fec69c5d2719c7af42d5cf65d0e02d147a4fadd7ad042e933279e4771cd45d2ffac8dff01f9d8f9ff30b1827234acd12cf8ab7c7e5d5f2edacf399a9bc31040e2", 0xd0}, {&(0x7f0000000580)="30ff059b0309bac360cdaf48999b458f8d1de297ff8d36dfd2b96575c26d009a0a6f1b1fa534579998ab475fd27fe8a0fe78c91f6795c65d336042cfdc", 0x3d}, {&(0x7f00000005c0)="8f45971a42ba2a63450ce628d7b5acb14f5f9a59e063c2bb1bccdc350fa0fa370f85645b15c66d152846bb70f164dd9beadcf9e9ef5035af12841f4baa7ece1cbc6863dd41b2644b92708212ce514225e3d77f8131b04c56b875ce61e1633ff690873b5bdc9b49137640fbec556d5d7c2881d1a8dc6bc6cf15c89589e1281fc9cf60716359c2a33685c88f8f3ca94ed807b22737397f5f003bbf68392235d58d8ec20018ddb740289a3b9f233c3801d4e3b9a2b0599fa8e347046ed495d4bdf73757bd845f4caeba65ebb58d88caa82549", 0xd1}, {&(0x7f0000000700)="3d221aca19c98d295a1aa512306a2902b0f0cc811fe155f8ab8b4f9c663d177033f62625e36d18b08e813fd76d65b6dec51a89e67a84262ae840e71a03db53ef3074d9280b6d8b7382da9a6dfd64b9b0e28f21869bcc350b8a67ae5c570178181128fbc28afb7bc4cd2b82dec9cc50027d82cb1bfb701bef1efa8d6982d340d57307b4b7c93aba78a2cdbc1c9bad2defdcd7d45946bff43c7909c21912ab5a6653d1c7eeaab850b79a588cc3b82f5c4379eaa467c37a54f1cd920968da626b2d54dfcf4378192b3ace31617d29367aee8e48", 0xd2}, {&(0x7f0000000800)="ea5efaa493f46d64dd2632b496ac651842c13654c204ab", 0x17}, {&(0x7f0000000840)="2f0208e6156e8150079cbeb9971598185d4c579c6b7f07f4c47af1907b96e554bf009a1977d91c9ad4cd55f820e372545c294e383d4e65b355a4398b51963f3716a1e578985a903f44a839febd35cd9490aefeb525aa8ac50933a87e181a087756f9eb3739f6bab6250ec869278adffcb93e186ff4400141f7788a02b8cc73201d4d68c1946ed15b4e44b6cc805792ebb89843dffe7b3e40f7e927cc1caf1aed838f9e6bf9c3af63912d4f7e0b7b36070e539e92ef2522f404dd7441d19f7706702cc1e6ef", 0xc5}], 0x6}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) close(0xffffffffffffffff) (async) r1 = socket$kcm(0x29, 0x5, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) (async) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc854) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendfile(r1, r2, 0x0, 0xffffffff000) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, 0x0, 0x40000) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) (async, rerun: 32) r5 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) (async) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r2) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@delchain={0x2c, 0x65, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x5, 0x8}, {0x1f, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0xd76}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00"], 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) 573.769734ms ago: executing program 5 (id=16851): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000f148755"], 0x1c}}, 0x0) r1 = socket$kcm(0x11, 0xf, 0x300) sendmsg$sock(r1, &(0x7f0000000840)={&(0x7f0000000340)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x3, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000640)=[@mark={{0x14, 0x1, 0x24, 0x7}}], 0x18}, 0x40812) 549.092348ms ago: executing program 3 (id=16852): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="aa21aac457b8c883968e882cfe49f47b91f96c6d86865a253d453216160c8fea1c8eb4344037a839157fea98ff01d9cec7af770bf5e6012fe10ec79a0c2b36c9cd9ed63df04b8befbb2c79f6e043c40073595e4164afcc5cb1fdf05d8af68d910a0c8fca8c414e32c47c6daa63d3151d1da80dc71eab736cf6b2e3aed35dbd4fbe340cb87a05481642a8bb33678fdc4ed87cde1c22cf0926287b80ff0c51033f6e2e6088df6da8ab7c06bb80922499aca0bbddbb201c5ad7c6761102e9c7c033aba84c0054ada51e3ae6a90b6ffdc5f6467fff67855c373481adacf4cae1770f229332028cb4bf8d175c62183a75826123ca7f576a1a67f2c690f416d7ae312ec3eff0159572436c9eb20ab0ce5eef729961544f3dcc40f6a48f3645d9b209bc9226e27e2e9dc74b2e2e71f36d07e46225309197dd04dc61206f9fb990e66d285102283ed9ddb8b5038e8fa988dd"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x37, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async, rerun: 64) close(0x3) (rerun: 64) r2 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000280)={r1, 0x9, 0x7fffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x22, 0x0, &(0x7f0000000100)) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x1070bd27, 0x25dfdc01, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x404c080) 478.878352ms ago: executing program 5 (id=16853): r0 = socket$inet(0x2, 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x404, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r2) close(0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bind$inet(r0, &(0x7f0000000300)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 309.241896ms ago: executing program 3 (id=16854): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@security={'security\x00', 0xe, 0x4, 0x478, 0xffffffff, 0x0, 0x3f0, 0x0, 0xffffffff, 0xffffffff, 0x4e0, 0x4e0, 0x4e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff000000, 0xff], [0xff, 0x0, 0xffffffff, 0xffffffff], 'wg1\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x3a, 0x9, 0x1, 0x10}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe, 'system_u:object_r:unconfined_execmem_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "4d3a46e177abbed5001ef11bd2f0c66301c685c93d118e7c89799c396822"}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, [0xff000000, 0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'ipvlan0\x00', 'wg1\x00', {}, {}, 0x3a, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth1\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r2) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r2) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x1c, r3, 0x1c20df3d40b5e7, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa0, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x81}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00'}) 252.402923ms ago: executing program 3 (id=16855): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b20, &(0x7f0000000080)={'virt_wifi0\x00', @broadcast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x1e}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0xfffffffd}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xff}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x5}]}}]}, 0x78}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000380)={'veth0_macvtap\x00', 0x1}) r7 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYBLOB, @ANYBLOB="080003"], 0x78}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000040)=ANY=[@ANYRES8=r5], 0x16) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000100)={0x0, 0xd47, [0x7fffffffffffffff, 0x0, 0xff, 0x2, 0xffffffff, 0x10001]}) socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket(0x2b, 0x80801, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r10, 0x0, 0x1, &(0x7f0000000040)=0x8, 0x4) accept$nfc_llcp(r10, &(0x7f0000000200), &(0x7f0000000280)=0x60) connect$pppl2tp(r9, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x2, 0x4, 0x1, 0x0, {0xa, 0x4, 0xfff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}}, 0x32) ioctl$PPPIOCSFLAGS(r9, 0x40047459, 0x0) r11 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f00000000c0), &(0x7f00000001c0)=0x8) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000080)=0x9, 0x4) 162.901417ms ago: executing program 5 (id=16856): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@struct={0x6, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x4, 0x3}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f00000000c0)=""/2, 0x44, 0x2, 0x1}, 0x20) 139.151977ms ago: executing program 4 (id=16857): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="2e00000010008188040f6fec59acbc0435a181003f00000000060000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xbc}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0x800000) 72.460142ms ago: executing program 5 (id=16858): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1815000000000000ff12e4d08cc35b17850079ba776026b33695000000000007"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0010000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32, @ANYBLOB="08000400000058"], 0x4c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'c'}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x20004014}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0) 2.994921ms ago: executing program 4 (id=16859): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r0, 0x89f8, &(0x7f0000000080)="c2e972b80d5462f0ab0000000001b8ea3edb18e1bdf2a4a92760847850b510b440") r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) accept4(r3, 0x0, 0x0, 0x0) connect$rds(r1, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xa) 2.690155ms ago: executing program 6 (id=16860): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r1, 0xf1aad47e89fb43b5, 0x0, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x34040840}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x38}}, 0x0) 0s ago: executing program 3 (id=16861): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r0, &(0x7f00000005c0)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd095d7034b500b19e0d0524e7bf37b4cec2aad04aacfac1eeca892aa86fe2f21df0a4619b459cb53e0cadf8e3486c5506c18326e1a39911052c19fee16f57ff67c91e3576d08cbca1dbfbdf03bc42498ba5fe9316ab4a80fdaab89a6461775b8f4f23b0f528e97eadd7ca6308c637", 0x9d, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x80) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000040)={'pimreg\x00'}) close(r1) r4 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$NILFS_IOCTL_GET_CPINFO(r4, 0x80186e82, &(0x7f00000001c0)={&(0x7f00000000c0)=[{0x2, 0x0, 0x4, 0x7ff, 0x6, 0x1, 0x4f, 0x38000000000}, {0x1, 0x0, 0x3, 0x3, 0x401, 0x0, 0xffff, 0x9}, {0x0, 0x0, 0x4, 0x5, 0x0, 0x1, 0x1, 0x2}, {0x1, 0x0, 0x1, 0x3, 0x1, 0x10001, 0x3, 0x648}], 0x4}) kernel console output (not intermixed with test programs): 0 (retrying later): interface not active [ 1117.427390][T26620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1117.452098][T26620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1117.505375][T26620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1117.569539][T26723] xt_cgroup: xt_cgroup: no path or classid specified [ 1117.656806][T26620] hsr_slave_0: entered promiscuous mode [ 1117.673462][T26620] hsr_slave_1: entered promiscuous mode [ 1117.684116][T26620] debugfs: 'hsr0' already exists in 'hsr' [ 1117.696312][T26620] Cannot create hsr debugfs directory [ 1117.718972][T26725] bond12: invalid ARP target 0.0.0.0 specified for addition [ 1117.727870][T26725] bond12: option arp_ip_target: invalid value (0) [ 1117.737431][T26725] bond12 (unregistering): Released all slaves [ 1117.925806][T26739] bridge6: port 1(veth5) entered blocking state [ 1117.933458][T26739] bridge6: port 1(veth5) entered disabled state [ 1117.945947][T26739] veth5: entered allmulticast mode [ 1117.953690][T26739] veth5: entered promiscuous mode [ 1117.975318][T26742] bridge6: port 2(veth0_to_bond) entered blocking state [ 1117.982985][T26742] bridge6: port 2(veth0_to_bond) entered disabled state [ 1117.992753][T26742] veth0_to_bond: entered allmulticast mode [ 1118.000064][T26742] veth0_to_bond: entered promiscuous mode [ 1118.007308][T26742] bridge6: port 2(veth0_to_bond) entered blocking state [ 1118.014429][T26742] bridge6: port 2(veth0_to_bond) entered forwarding state [ 1118.086548][T16128] Bluetooth: hci2: command tx timeout [ 1118.103707][T26745] tipc: Failed to remove unknown binding: 66,0,0/0:1611195675/1611195678 [ 1118.129989][T26745] tipc: Failed to remove unknown binding: 66,0,0/0:1611195675/1611195677 [ 1118.151907][T26745] tipc: Failed to remove unknown binding: 66,0,0/0:1611195675/1611195676 [ 1118.184219][T26620] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1118.190081][T26747] tipc: Failed to remove unknown binding: 66,0,0/0:1611195675/1611195678 [ 1118.197088][T26620] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.214146][T26620] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1118.225132][T26747] tipc: Failed to remove unknown binding: 66,0,0/0:1611195675/1611195677 [ 1118.225162][T26747] tipc: Failed to remove unknown binding: 66,0,0/0:1611195675/1611195676 [ 1118.247034][T26620] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 1118.264920][T26751] netlink: 'syz.3.15051': attribute type 29 has an invalid length. [ 1118.333388][T26620] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1118.349096][T26620] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.360556][T26620] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1118.373061][T26620] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 1118.390226][T26763] veth0: entered promiscuous mode [ 1118.406835][T26761] veth0: left promiscuous mode [ 1118.445519][T26620] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1118.457867][T26620] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.471055][T26620] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1118.482347][T26620] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 1118.558505][T26620] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1118.592990][T26620] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.614193][T26620] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1118.625253][T26620] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 1118.870917][T26801] netlink: 'syz.2.15063': attribute type 10 has an invalid length. [ 1118.893855][T26802] IPVS: length: 239 != 24 [ 1118.911356][T26804] netlink: 'syz.3.15064': attribute type 13 has an invalid length. [ 1118.917813][T26620] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1118.928276][T26620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1118.937903][T26620] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1118.939550][T26805] __nla_validate_parse: 22 callbacks suppressed [ 1118.939565][T26805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15064'. [ 1118.947824][T26804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15064'. [ 1118.957647][T26805] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15064'. [ 1118.965038][T26620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1118.990037][T26620] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1119.000359][T26620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1119.036310][T26620] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1119.049110][T26620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1119.095092][T26817] tipc: Started in network mode [ 1119.100193][T26817] tipc: Node identity 080211000001, cluster identity 4711 [ 1119.108644][T26817] tipc: Enabled bearer , priority 0 [ 1119.123661][T26817] tipc: Resetting bearer [ 1119.242373][T26620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1119.257674][T26823] xt_ecn: cannot match TCP bits for non-tcp packets [ 1119.276161][T26620] 8021q: adding VLAN 0 to HW filter on device team0 [ 1119.290207][T12523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.297612][T12523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1119.316513][T12524] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.322658][T26828] Cannot find add_set index 0 as target [ 1119.323710][T12524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1119.349435][T26829] netlink: 'syz.2.15068': attribute type 29 has an invalid length. [ 1119.358660][T26829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15068'. [ 1119.376261][T26829] netlink: 'syz.2.15068': attribute type 29 has an invalid length. [ 1119.384924][T26829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15068'. [ 1119.404606][T26831] netlink: 'syz.3.15071': attribute type 1 has an invalid length. [ 1119.436535][T26831] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1119.464682][T26831] bond1: (slave gretap1): making interface the new active one [ 1119.474457][T26831] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1119.805991][T26859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15076'. [ 1119.891916][T26620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1119.950357][T26620] veth0_vlan: entered promiscuous mode [ 1119.980385][T26620] veth1_vlan: entered promiscuous mode [ 1119.990428][T26872] syzkaller1: entered promiscuous mode [ 1119.997001][T26872] syzkaller1: entered allmulticast mode [ 1120.060170][T26620] veth0_macvtap: entered promiscuous mode [ 1120.077999][T26620] veth1_macvtap: entered promiscuous mode [ 1120.112788][ T319] tipc: Node number set to 134418688 [ 1120.134383][T26620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1120.152048][T16128] Bluetooth: hci2: command tx timeout [ 1120.194840][T26620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1120.210189][T12524] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.233528][T12524] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.244444][T12524] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.272710][T12524] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.288894][T26891] netlink: 32 bytes leftover after parsing attributes in process `syz.3.15084'. [ 1120.394615][T26893] netlink: 'syz.2.15085': attribute type 11 has an invalid length. [ 1120.407452][T26893] netlink: 224 bytes leftover after parsing attributes in process `syz.2.15085'. [ 1120.407555][T12516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.448053][T12516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1120.484506][T12514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.494200][T12514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1120.610874][T26907] netlink: 556 bytes leftover after parsing attributes in process `syz.4.15090'. [ 1120.885543][T26921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15093'. [ 1121.043516][T26934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1121.050488][T26930] bond12: Unable to set up delay as MII monitoring is disabled [ 1121.069818][T26931] validate_nla: 1 callbacks suppressed [ 1121.069838][T26931] netlink: 'syz.2.15096': attribute type 1 has an invalid length. [ 1121.086537][T26931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1121.100645][T26930] bond12 (unregistering): Released all slaves [ 1121.450000][T26963] tipc: Enabled bearer , priority 10 [ 1121.790969][T26990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1121.935796][ T3988] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1121.948568][ T3988] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1121.956124][ T3988] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1121.966884][ T3988] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1121.975936][ T3988] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1122.078093][T27001] bridge1: entered promiscuous mode [ 1122.087456][T27001] bridge1: entered allmulticast mode [ 1122.127349][T16507] syz_tun (unregistering): left allmulticast mode [ 1122.234130][ T3988] Bluetooth: hci2: command tx timeout [ 1122.256361][T27013] sctp: [Deprecated]: syz.3.15118 (pid 27013) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1122.256361][T27013] Use struct sctp_sack_info instead [ 1122.387019][T26996] lo speed is unknown, defaulting to 1000 [ 1122.694976][T26996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.702253][T26996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.709685][T26996] bridge_slave_0: entered allmulticast mode [ 1122.717817][T26996] bridge_slave_0: entered promiscuous mode [ 1122.723913][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1122.736066][T26996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.744167][T26996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.751910][T26996] bridge_slave_1: entered allmulticast mode [ 1122.758939][T26996] bridge_slave_1: entered promiscuous mode [ 1122.784986][T26996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1122.797306][T26996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1122.822249][T26996] team0: Port device team_slave_0 added [ 1122.830203][T26996] team0: Port device team_slave_1 added [ 1122.850069][T26996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1122.857246][T26996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.885181][T26996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1122.898947][T26996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1122.906411][T26996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.933635][T26996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1122.971262][T26996] hsr_slave_0: entered promiscuous mode [ 1122.978012][T26996] hsr_slave_1: entered promiscuous mode [ 1122.984582][T26996] debugfs: 'hsr0' already exists in 'hsr' [ 1122.990335][T26996] Cannot create hsr debugfs directory [ 1123.064608][T26996] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1123.075390][T26996] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.086224][T26996] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1123.134300][T26996] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1123.145895][T26996] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.157399][T26996] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1123.186850][T26996] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1123.197819][T26996] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.208459][T26996] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1123.277040][T26996] netdevsim netdevsim4  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1123.287350][T26996] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.297863][T26996] netdevsim netdevsim4  (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1123.992982][T16128] Bluetooth: hci3: command tx timeout [ 1124.321950][T16128] Bluetooth: hci2: command tx timeout [ 1124.786347][T26990] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1124.800516][T26996] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1124.829967][T26996] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1124.852416][T26996] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1124.876871][T26996] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1124.893611][T26996] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1124.897556][T27042] IPv6: Can't replace route, no match found [ 1124.910236][T27047] __nla_validate_parse: 3 callbacks suppressed [ 1124.910255][T27047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15124'. [ 1124.928538][T26996] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1124.930285][T27047] openvswitch: netlink: Flow key attr not present in new flow. [ 1125.015810][T26996] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1125.026289][T26996] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1125.036558][T27042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15122'. [ 1125.080844][T27068] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15127'. [ 1125.116370][T27068] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15127'. [ 1125.209411][T26996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1125.240485][T27072] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1125.312256][T26996] 8021q: adding VLAN 0 to HW filter on device team0 [ 1125.332573][T12516] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.339749][T12516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1125.363605][T12516] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.370809][T12516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1125.380434][T27084] tipc: Enabling of bearer rejected, already enabled [ 1125.401915][T27084] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1125.407228][T27087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15134'. [ 1125.740198][T26996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1125.900570][T26996] veth0_vlan: entered promiscuous mode [ 1125.916382][T26996] veth1_vlan: entered promiscuous mode [ 1125.938516][T26996] veth0_macvtap: entered promiscuous mode [ 1125.948881][T26996] veth1_macvtap: entered promiscuous mode [ 1125.965575][T26996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1125.978053][T26996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1125.990705][T12523] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.002486][T12523] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.013793][T12523] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.023106][T12523] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.072649][T16128] Bluetooth: hci3: command tx timeout [ 1126.190785][T27120] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 1126.225740][T27123] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1126.236365][T27123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1126.278272][T27126] netlink: 264 bytes leftover after parsing attributes in process `syz.3.15139'. [ 1126.374078][T27131] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1126.374078][T27130] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1127.437190][ T3988] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1127.444880][ T3988] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1127.452493][ T3988] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1127.460242][ T3988] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1127.468540][ T3988] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1127.664420][T27135] lo speed is unknown, defaulting to 1000 [ 1127.856194][T27135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1127.863737][T27135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.871192][T27135] bridge_slave_0: entered allmulticast mode [ 1127.878223][T27135] bridge_slave_0: entered promiscuous mode [ 1127.887258][T27135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.894833][T27135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.903240][T27135] bridge_slave_1: entered allmulticast mode [ 1127.910263][T27135] bridge_slave_1: entered promiscuous mode [ 1127.935995][T27135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1127.948153][T27135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1127.970842][T27135] team0: Port device team_slave_0 added [ 1127.980082][T27135] team0: Port device team_slave_1 added [ 1128.004577][T27135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1128.012694][T27135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1128.040111][T27135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1128.052425][T27135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1128.059593][T27135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1128.088269][T27135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1128.119077][T27135] hsr_slave_0: entered promiscuous mode [ 1128.125681][T27135] hsr_slave_1: entered promiscuous mode [ 1128.132800][T27135] debugfs: 'hsr0' already exists in 'hsr' [ 1128.138569][T27135] Cannot create hsr debugfs directory [ 1128.152469][T16128] Bluetooth: hci3: command tx timeout [ 1128.564934][T27098] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1128.620370][T27135] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1128.640501][T27135] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1128.653756][T12514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1128.665577][T27135] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1128.677805][T12514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1128.683989][T27155] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15144'. [ 1128.697712][T27135] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1128.729091][T27135] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1128.739945][T27135] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1128.749119][T27135] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1128.749553][T27153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15143'. [ 1128.769534][T27135] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1128.783537][T27153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1128.803233][T27153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1128.822979][T12519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1128.830954][T12519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1128.938571][T27135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1128.979988][T27166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15114'. [ 1128.985698][T27171] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15147'. [ 1128.998071][T27135] 8021q: adding VLAN 0 to HW filter on device team0 [ 1129.018575][T12514] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.025774][T12514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1129.069046][T27178] xt_bpf: check failed: parse error [ 1129.088805][T12523] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.096010][T12523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1129.248604][T27187] xt_hashlimit: size too large, truncated to 1048576 [ 1129.512523][T16128] Bluetooth: hci4: command tx timeout [ 1129.647565][T27135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1129.840620][T27241] netlink: 'syz.1.15161': attribute type 11 has an invalid length. [ 1129.851401][T27241] netlink: 'syz.1.15161': attribute type 5 has an invalid length. [ 1129.934560][T27245] tipc: Started in network mode [ 1129.943357][T27245] tipc: Node identity e611afdc6d85, cluster identity 4711 [ 1129.950939][T27245] tipc: Enabled bearer , priority 0 [ 1129.960051][T27245] syzkaller0: entered promiscuous mode [ 1129.966596][T27245] syzkaller0: entered allmulticast mode [ 1129.987676][T27245] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1130.033826][T27245] tipc: Resetting bearer [ 1130.048237][T27244] tipc: Resetting bearer [ 1130.096227][T27244] tipc: Disabling bearer [ 1130.146730][T27135] veth0_vlan: entered promiscuous mode [ 1130.185920][T27135] veth1_vlan: entered promiscuous mode [ 1130.233744][T16128] Bluetooth: hci3: command tx timeout [ 1130.286796][T27135] veth0_macvtap: entered promiscuous mode [ 1130.323765][T27135] veth1_macvtap: entered promiscuous mode [ 1130.347373][T27135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1130.367157][T27135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1130.389445][T12517] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.425935][T12517] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.439207][T12517] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.450518][T12517] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.500184][T12516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.518015][T12516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1130.530649][T27277] netlink: 'syz.3.15169': attribute type 10 has an invalid length. [ 1130.544041][T27276] netlink: 'syz.3.15169': attribute type 10 has an invalid length. [ 1130.554016][T12516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.563662][T12516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1130.571999][T27277] __nla_validate_parse: 4 callbacks suppressed [ 1130.572015][T27277] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15169'. [ 1130.574857][T27276] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15169'. [ 1130.587839][T27277] team0: Port device geneve1 added [ 1130.869236][T27286] syzkaller0: entered promiscuous mode [ 1130.876615][T27286] syzkaller0: entered allmulticast mode [ 1130.923157][T27294] sctp: [Deprecated]: syz.3.15174 (pid 27294) Use of int in max_burst socket option deprecated. [ 1130.923157][T27294] Use struct sctp_assoc_value instead [ 1130.991193][T27296] sctp: [Deprecated]: syz.3.15174 (pid 27296) Use of int in max_burst socket option deprecated. [ 1130.991193][T27296] Use struct sctp_assoc_value instead [ 1131.176657][T27300] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1131.185081][T27300] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1131.528655][T27319] netlink: 'syz.5.15180': attribute type 21 has an invalid length. [ 1131.545003][T27323] netlink: 'syz.1.15181': attribute type 1 has an invalid length. [ 1131.591795][T16128] Bluetooth: hci4: command tx timeout [ 1131.630502][T27323] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1131.665098][T27327] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1131.715972][T27323] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15181'. [ 1131.856212][T27344] syzkaller0: entered promiscuous mode [ 1131.864328][T27344] syzkaller0: entered allmulticast mode [ 1132.200034][T27385] netlink: 'syz.5.15197': attribute type 30 has an invalid length. [ 1132.209400][T27383] netlink: 'syz.5.15197': attribute type 30 has an invalid length. [ 1132.257658][T27383] bond1: option arp_missed_max: invalid value (0) [ 1132.264507][T27383] bond1: option arp_missed_max: allowed values 1 - 255 [ 1132.274197][T27391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15198'. [ 1132.274980][T27383] bond1 (unregistering): Released all slaves [ 1132.299670][T27385] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1132.444770][T27386] tipc: Resetting bearer [ 1132.583421][T27386] tipc: Resetting bearer [ 1132.846309][T27426] tipc: Enabling of bearer rejected, failed to enable media [ 1132.925403][T27430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1132.940726][T27430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1133.048439][T27386] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1133.060803][T27386] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1133.110896][T27386] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1133.128174][T27386] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1133.150029][T27449] netlink: 104 bytes leftover after parsing attributes in process `syz.3.15213'. [ 1133.194774][T27386] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1133.212564][T27449] Bluetooth: MGMT ver 1.23 [ 1133.218494][T27386] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1133.247273][T27386] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1133.255206][T27386] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1133.467080][T27467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1133.540763][T27467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1133.542372][T27468] netlink: 'syz.3.15219': attribute type 4 has an invalid length. [ 1133.605515][T27466] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15219'. [ 1133.640888][T27466] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15219'. [ 1133.654364][T27466] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15219'. [ 1133.782014][T27490] netlink: 'syz.5.15227': attribute type 21 has an invalid length. [ 1133.783680][T27489] netlink: 'syz.5.15227': attribute type 21 has an invalid length. [ 1133.793198][T27490] netlink: 132 bytes leftover after parsing attributes in process `syz.5.15227'. [ 1133.855927][T27489] netlink: 132 bytes leftover after parsing attributes in process `syz.5.15227'. [ 1134.194318][T27528] syzkaller0: entered promiscuous mode [ 1134.200310][T27528] syzkaller0: entered allmulticast mode [ 1134.214588][T27533] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1134.222434][T31088] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1134.322184][T27538] tipc: Started in network mode [ 1134.327648][T27538] tipc: Node identity 9a26e68ef657, cluster identity 4711 [ 1134.336179][T27538] tipc: Enabled bearer , priority 0 [ 1134.398851][T27538] syzkaller0: entered promiscuous mode [ 1134.407779][T27538] syzkaller0: entered allmulticast mode [ 1134.414674][T27538] tipc: Resetting bearer [ 1134.435508][T27537] tipc: Resetting bearer [ 1134.466240][T27546] Bluetooth: MGMT ver 1.23 [ 1134.565010][T27537] tipc: Disabling bearer [ 1134.692746][T27559] bond2: entered promiscuous mode [ 1134.698338][T27559] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1134.827952][T27572] gtp1: entered allmulticast mode [ 1134.852369][T27572] team0: Device gtp1 is of different type [ 1134.945297][T27586] macsec1: entered promiscuous mode [ 1135.128534][T27601] validate_nla: 3 callbacks suppressed [ 1135.128555][T27601] netlink: 'syz.5.15258': attribute type 15 has an invalid length. [ 1135.376411][T27615] veth0: entered promiscuous mode [ 1135.403501][T27618] veth0: left promiscuous mode [ 1135.455016][T27623] netlink: 'syz.4.15267': attribute type 33 has an invalid length. [ 1135.507122][T27634] netlink: 'syz.1.15269': attribute type 1 has an invalid length. [ 1135.514775][T27623] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1135.535459][T27623] bond1 (unregistering): Released all slaves [ 1135.577387][T27634] bond3: entered promiscuous mode [ 1135.583772][T27634] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1135.642792][T27634] __nla_validate_parse: 14 callbacks suppressed [ 1135.642816][T27634] netlink: 120 bytes leftover after parsing attributes in process `syz.1.15269'. [ 1135.681718][T27634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15269'. [ 1135.710239][T27645] netlink: 'syz.4.15271': attribute type 8 has an invalid length. [ 1135.712497][T27646] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15272'. [ 1135.718378][T27645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15271'. [ 1135.743264][T27645] veth1_to_team: entered promiscuous mode [ 1135.750815][T27645] gretap0: entered promiscuous mode [ 1135.758654][T27645] dummy0: entered promiscuous mode [ 1135.766758][T27647] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15271'. [ 1135.800585][T27645] debugfs: 'hsr1' already exists in 'hsr' [ 1135.812100][T27645] Cannot create hsr debugfs directory [ 1135.823597][T27645] hsr1: entered promiscuous mode [ 1135.842981][T27646] macsec2: entered promiscuous mode [ 1135.856917][T27646] bridge0: entered promiscuous mode [ 1135.862950][T27646] macsec2: entered allmulticast mode [ 1135.868417][T27646] bridge0: entered allmulticast mode [ 1135.892515][T27646] bridge0: port 3(macsec2) entered blocking state [ 1135.912263][T27646] bridge0: port 3(macsec2) entered disabled state [ 1135.958502][T27646] bridge0: left allmulticast mode [ 1135.984663][T31088] bridge0: left promiscuous mode [ 1135.997942][T27661] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15276'. [ 1136.070524][T27661] team0: Port device team_slave_0 removed [ 1136.680125][T27675] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 1136.829089][T27684] syzkaller0: entered promiscuous mode [ 1136.842973][T27684] syzkaller0: entered allmulticast mode [ 1136.852722][T27686] syz.1.15285: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1136.911599][T27684] ipvlan2: entered allmulticast mode [ 1136.919399][T27684] batadv_slave_1: entered allmulticast mode [ 1136.922401][T27686] CPU: 0 UID: 0 PID: 27686 Comm: syz.1.15285 Not tainted syzkaller #0 PREEMPT(full) [ 1136.922427][T27686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1136.922438][T27686] Call Trace: [ 1136.922445][T27686] [ 1136.922453][T27686] dump_stack_lvl+0xe8/0x150 [ 1136.922478][T27686] warn_alloc+0x249/0x340 [ 1136.922502][T27686] ? __pfx_stack_trace_save+0x10/0x10 [ 1136.922528][T27686] ? __pfx_warn_alloc+0x10/0x10 [ 1136.922549][T27686] ? __resched_curr+0x23e/0x530 [ 1136.922576][T27686] ? __kasan_kmalloc+0x93/0xb0 [ 1136.922599][T27686] ? __kmalloc_cache_noprof+0x318/0x660 [ 1136.922621][T27686] ? xskq_create+0x56/0x170 [ 1136.922640][T27686] ? xsk_init_queue+0x8a/0xe0 [ 1136.922658][T27686] ? xsk_setsockopt+0x52a/0x960 [ 1136.922675][T27686] ? do_sock_setsockopt+0x17c/0x1b0 [ 1136.922699][T27686] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1136.922722][T27686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.922742][T27686] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1136.922776][T27686] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1136.922810][T27686] ? __kasan_kmalloc+0x93/0xb0 [ 1136.922835][T27686] vmalloc_user_noprof+0xad/0xe0 [ 1136.922857][T27686] ? xskq_create+0xbf/0x170 [ 1136.922877][T27686] xskq_create+0xbf/0x170 [ 1136.922898][T27686] xsk_init_queue+0x8a/0xe0 [ 1136.922918][T27686] xsk_setsockopt+0x52a/0x960 [ 1136.922939][T27686] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1136.922958][T27686] ? __pfx_aa_sk_perm+0x10/0x10 [ 1136.922983][T27686] ? lock_release+0x4b/0x3c0 [ 1136.923008][T27686] ? aa_sock_opt_perm+0xff/0x1a0 [ 1136.923026][T27686] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1136.923047][T27686] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1136.923066][T27686] do_sock_setsockopt+0x17c/0x1b0 [ 1136.923091][T27686] __x64_sys_setsockopt+0x13d/0x1b0 [ 1136.923114][T27686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.923132][T27686] do_syscall_64+0x174/0x580 [ 1136.923153][T27686] ? trace_irq_disable+0x3b/0x140 [ 1136.923175][T27686] ? clear_bhb_loop+0x40/0x90 [ 1136.923194][T27686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.923210][T27686] RIP: 0033:0x7fa7a5b9ce59 [ 1136.923226][T27686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1136.923241][T27686] RSP: 002b:00007fa7a6a43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1136.923261][T27686] RAX: ffffffffffffffda RBX: 00007fa7a5e15fa0 RCX: 00007fa7a5b9ce59 [ 1136.923274][T27686] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 1136.923285][T27686] RBP: 00007fa7a5c32e6f R08: 0000000000000004 R09: 0000000000000000 [ 1136.923296][T27686] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1136.923307][T27686] R13: 00007fa7a5e16038 R14: 00007fa7a5e15fa0 R15: 00007fff7e3689c8 [ 1136.923327][T27686] [ 1136.923334][T27686] Mem-Info: [ 1136.937475][T27684] batman_adv: batadv0: Adding interface: ipvlan2 [ 1136.975783][T27686] active_anon:6526 inactive_anon:0 isolated_anon:0 [ 1136.975783][T27686] active_file:2855 inactive_file:40531 isolated_file:0 [ 1136.975783][T27686] unevictable:768 dirty:80 writeback:0 [ 1136.975783][T27686] slab_reclaimable:16253 slab_unreclaimable:177514 [ 1136.975783][T27686] mapped:34563 shmem:1303 pagetables:3977 [ 1136.975783][T27686] sec_pagetables:0 bounce:0 [ 1136.975783][T27686] kernel_misc_reclaimable:0 [ 1136.975783][T27686] free:1196859 free_pcp:24280 free_cma:0 [ 1136.979529][T27684] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1136.991211][T27686] Node 0 active_anon:26104kB inactive_anon:0kB active_file:11420kB inactive_file:161916kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:15276kB dirty:316kB writeback:0kB shmem:3676kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:23216kB pagetables:15508kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1136.994195][T27684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1137.005017][T27686] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122976kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:400kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1137.008740][T27684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.050283][T27699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15287'. [ 1137.053617][T27684] batman_adv: batadv0: Interface activated: ipvlan2 [ 1137.053930][T27686] Node 0 [ 1137.155249][T27699] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1137.161051][T27686] DMA free:10228kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:128kB local_pcp:128kB free_cma:0kB [ 1137.442749][T27686] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1137.448930][T27686] Node 0 DMA32 free:1159728kB boost:2048kB min:36232kB low:44776kB high:53320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26204kB inactive_anon:0kB active_file:11420kB inactive_file:161924kB unevictable:1536kB writepending:308kB zspages:0kB present:3129332kB managed:2552580kB mlocked:0kB bounce:0kB free_pcp:33192kB local_pcp:16232kB free_cma:0kB [ 1137.490144][T27704] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1137.499851][T27686] lowmem_reserve[]: 0 0 0 0 0 [ 1137.504872][T27686] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:664kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:12kB free_cma:0kB [ 1137.538272][T27686] lowmem_reserve[]: 0 0 0 0 0 [ 1137.543324][T27686] Node 1 Normal free:3617552kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:61148kB local_pcp:28948kB free_cma:0kB [ 1137.576618][T27686] lowmem_reserve[]: 0 0 0 0 0 [ 1137.581563][T27686] Node 0 DMA: 3*4kB (U) 3*8kB (U) 3*16kB (U) 3*32kB (U) 3*64kB (U) 5*128kB (UE) 4*256kB (U) 4*512kB (U) 4*1024kB (UE) 1*2048kB (E) 0*4096kB = 10228kB [ 1137.597305][T27686] Node 0 DMA32: 9584*4kB (UME) 10960*8kB (UME) 6611*16kB (UM) 188*32kB (UM) 59*64kB (UME) 427*128kB (UM) 971*256kB (UME) 471*512kB (UME) 365*1024kB (UM) 0*2048kB 0*4096kB = 1159728kB [ 1137.616191][T27686] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1137.627929][T27686] Node 1 Normal: 71*4kB (UM) 75*8kB (UM) 77*16kB (U) 80*32kB (U) 80*64kB (UM) 76*128kB (U) 69*256kB (U) 63*512kB (U) 61*1024kB (U) 12*2048kB (UM) 845*4096kB (UM) = 3617604kB [ 1137.645830][T27686] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1137.655522][T27686] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1137.664990][T27686] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1137.676489][T27686] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1137.686051][T27686] 44687 total pagecache pages [ 1137.690791][T27686] 0 pages in swap cache [ 1137.695068][T27686] Free swap = 124996kB [ 1137.699239][T27686] Total swap = 124996kB [ 1137.720078][T27686] 2097051 pages RAM [ 1137.724639][T27686] 0 pages HighMem/MovableOnly [ 1137.729779][T27686] 427125 pages reserved [ 1137.735153][T27686] 0 pages cma reserved [ 1137.853601][T16128] block nbd8: Receive control failed (result -32) [ 1137.951623][T27723] bridge1: entered promiscuous mode [ 1137.957298][T27723] bridge1: entered allmulticast mode [ 1137.983952][T27723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15293'. [ 1138.047727][T27724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15293'. [ 1138.072066][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1138.093406][T27723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15293'. [ 1138.177491][T27737] xt_hashlimit: size too large, truncated to 1048576 [ 1138.203430][T27742] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.264981][T27742] bridge_slave_0 (unregistering): left allmulticast mode [ 1138.314956][T27742] bridge_slave_0 (unregistering): left promiscuous mode [ 1138.343212][T27742] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.417947][T27744] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1138.543839][T27768] netlink: 'syz.5.15304': attribute type 4 has an invalid length. [ 1138.575960][T27769] netlink: 'syz.5.15304': attribute type 4 has an invalid length. [ 1138.604058][T27768] netlink: 'syz.5.15304': attribute type 4 has an invalid length. [ 1138.628656][T27767] bond0: (slave bond_slave_1): Releasing backup interface [ 1138.765051][T27784] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1138.850550][T27793] netlink: 'syz.3.15312': attribute type 1 has an invalid length. [ 1138.860829][T27793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1139.171064][T27813] netlink: 'syz.3.15319': attribute type 1 has an invalid length. [ 1139.202958][T27813] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1139.235109][T27813] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1139.253802][T27813] macvlan2: entered promiscuous mode [ 1139.259148][T27813] macvlan2: entered allmulticast mode [ 1139.265669][T27813] bond3: entered promiscuous mode [ 1139.270726][T27813] veth0_to_bond: entered promiscuous mode [ 1139.278450][T27813] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1139.286957][T27813] bond3: left promiscuous mode [ 1139.293070][T27813] veth0_to_bond: left promiscuous mode [ 1139.477198][T27836] lo: entered promiscuous mode [ 1139.500660][T27836] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1139.650674][T27841] netlink: 'syz.3.15326': attribute type 6 has an invalid length. [ 1139.697052][T27846] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20001 [ 1139.707643][T27845] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20001 [ 1140.237651][T27887] nbd: couldn't find a device at index 0 [ 1140.319737][T27895] IPVS: Scheduler module ip_vs_sip not found [ 1140.350491][T27895] netlink: 'syz.1.15341': attribute type 10 has an invalid length. [ 1140.360109][T27901] veth5: entered allmulticast mode [ 1140.589802][T27913] syzkaller0: entered promiscuous mode [ 1140.608664][T27913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1140.654030][ T3988] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1140.665960][ T3988] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1140.673445][ T3988] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1140.681433][ T3988] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1140.684266][T27919] sctp: [Deprecated]: syz.5.15353 (pid 27919) Use of int in max_burst socket option. [ 1140.684266][T27919] Use struct sctp_assoc_value instead [ 1140.706332][ T3988] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1140.777527][T16128] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1140.788270][T16128] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1140.797701][T16128] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1140.808670][T16128] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1140.820189][T16128] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1140.959053][T27934] __nla_validate_parse: 21 callbacks suppressed [ 1140.959074][T27934] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15356'. [ 1140.980314][T27934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15356'. [ 1141.026562][T27934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15356'. [ 1141.158624][T27949] netlink: 68 bytes leftover after parsing attributes in process `syz.1.15359'. [ 1141.550527][T27916] lo speed is unknown, defaulting to 1000 [ 1141.586431][T27974] netlink: 'syz.1.15364': attribute type 10 has an invalid length. [ 1141.948835][T28001] netlink: 'syz.5.15373': attribute type 1 has an invalid length. [ 1141.960918][T28001] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15373'. [ 1142.070712][T27998] netlink: 'syz.3.15371': attribute type 10 has an invalid length. [ 1142.118983][T27998] 8021q: adding VLAN 0 to HW filter on device team0 [ 1142.132133][T28015] netlink: 'syz.4.15375': attribute type 4 has an invalid length. [ 1142.132327][T27998] bond0: (slave team0): Enslaving as an active interface with an up link [ 1142.344590][T28031] Cannot find add_set index 2 as target [ 1142.446883][T27916] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.470931][T27916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.480444][T27916] bridge_slave_0: entered allmulticast mode [ 1142.487834][T27916] bridge_slave_0: entered promiscuous mode [ 1142.507051][T27916] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.527301][T27916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.543776][T27916] bridge_slave_1: entered allmulticast mode [ 1142.561487][T27916] bridge_slave_1: entered promiscuous mode [ 1142.638821][T27916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1142.655156][T27916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1142.718020][T28059] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.15382'. [ 1142.767211][T27916] team0: Port device team_slave_0 added [ 1142.836716][T27916] team0: Port device team_slave_1 added [ 1142.855473][T28059] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1142.874127][ T3988] Bluetooth: hci6: command tx timeout [ 1142.885084][T28059] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.964171][T28059] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1142.977385][T28059] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.995736][T27916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1143.003834][T27916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1143.032335][T27916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1143.048738][T27916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1143.059224][T27916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1143.104147][T27916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1143.197098][T28059] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1143.206644][T28101] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15391'. [ 1143.218641][T28059] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.283277][T28059] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1143.299789][T28059] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.319801][T27916] hsr_slave_0: entered promiscuous mode [ 1143.329187][T27916] hsr_slave_1: entered promiscuous mode [ 1143.336870][T27916] debugfs: 'hsr0' already exists in 'hsr' [ 1143.343222][T27916] Cannot create hsr debugfs directory [ 1143.432120][T12517] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1143.445220][T12517] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.476630][T12523] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1143.505228][T12523] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.528050][T12523] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1143.547088][T12523] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.596410][T28113] netlink: 'syz.1.15394': attribute type 61 has an invalid length. [ 1143.600811][T12523] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1143.617434][T28113] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15394'. [ 1143.628657][T12523] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.976354][T28128] netlink: 9 bytes leftover after parsing attributes in process `syz.3.15398'. [ 1143.986409][T28128] netlink: 9 bytes leftover after parsing attributes in process `syz.3.15398'. [ 1144.951318][ T3988] Bluetooth: hci6: command tx timeout [ 1146.188548][T28101] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1146.207038][T27916] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1146.256023][T27916] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1146.306207][T27916] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1146.329193][T27916] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1146.349128][T27916] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1146.354991][T28137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15402'. [ 1146.368446][T27916] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1146.388753][T27916] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1146.400399][T27916] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1146.419232][T28130] syzkaller0: entered promiscuous mode [ 1146.426188][T28130] syzkaller0: entered allmulticast mode [ 1146.589309][T27916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1146.606113][T28156] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1146.613424][T28156] IPv6: NLM_F_CREATE should be set when creating new route [ 1146.649951][T27916] 8021q: adding VLAN 0 to HW filter on device team0 [ 1146.659734][T28160] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1146.682188][T12519] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.689371][T12519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1146.748694][T12519] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.755923][T12519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1146.814932][T28165] veth7: entered promiscuous mode [ 1146.827152][T28165] veth7: entered allmulticast mode [ 1147.033203][T16128] Bluetooth: hci6: command tx timeout [ 1147.175887][T28192] lo speed is unknown, defaulting to 1000 [ 1147.654276][T27916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1147.688219][T28243] netlink: 'syz.1.15426': attribute type 1 has an invalid length. [ 1147.717941][T28243] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1147.781062][T28243] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1147.823704][T28251] macvlan2: entered promiscuous mode [ 1147.850118][T28251] macvlan2: entered allmulticast mode [ 1147.872284][T28251] bond5: entered promiscuous mode [ 1147.877771][T28251] veth0_to_bond: entered promiscuous mode [ 1147.890138][T28251] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1147.909757][T28251] bond5: left promiscuous mode [ 1147.920914][T28251] veth0_to_bond: left promiscuous mode [ 1147.949879][T28257] batadv_slave_0: entered promiscuous mode [ 1148.036599][T27916] veth0_vlan: entered promiscuous mode [ 1148.049719][T27916] veth1_vlan: entered promiscuous mode [ 1148.079877][T27916] veth0_macvtap: entered promiscuous mode [ 1148.089591][T27916] veth1_macvtap: entered promiscuous mode [ 1148.108400][T27916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1148.122228][T27916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1148.136280][T12519] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.146512][T12519] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.158895][T12519] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.168218][T12519] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.567783][T28246] batadv_slave_0: left promiscuous mode [ 1149.112153][T16128] Bluetooth: hci6: command 0x0419 tx timeout [ 1150.263127][T28204] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1150.275899][T28247] netlink: 404 bytes leftover after parsing attributes in process `syz.4.15428'. [ 1150.400116][T12519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1150.438858][T12519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1150.486189][T12525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1150.500720][T12525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1150.749619][T28294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15437'. [ 1150.767063][T28293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15438'. [ 1150.783560][T28293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15438'. [ 1150.795472][T28293] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15438'. [ 1150.841943][T28293] syzkaller0: entered promiscuous mode [ 1150.847588][T28293] syzkaller0: entered allmulticast mode [ 1150.869373][T28293] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 1150.910918][T28304] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15441'. [ 1150.986764][T28304] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1151.007798][ T8368] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1151.085870][T28323] netlink: 104 bytes leftover after parsing attributes in process `syz.1.15445'. [ 1151.139226][T28327] netlink: 264 bytes leftover after parsing attributes in process `syz.6.15448'. [ 1151.144951][T28322] netlink: 'syz.3.15446': attribute type 1 has an invalid length. [ 1151.158560][T28327] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15448'. [ 1151.172712][T28326] syzkaller0: entered promiscuous mode [ 1151.180618][T28326] syzkaller0: entered allmulticast mode [ 1151.191434][T16128] Bluetooth: hci6: command 0x0419 tx timeout [ 1151.248646][T28329] vlan2: entered allmulticast mode [ 1151.260364][T28329] veth1_virt_wifi: entered allmulticast mode [ 1151.282524][T28326] batadv_slave_0: entered promiscuous mode [ 1151.321824][T28326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1151.347306][T28326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1151.367647][T28341] __nla_validate_parse: 3 callbacks suppressed [ 1151.367669][T28341] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15453'. [ 1151.413804][T28341] netlink: 'syz.6.15453': attribute type 1 has an invalid length. [ 1151.668886][T28367] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15460'. [ 1151.799831][T28372] netlink: 'syz.4.15462': attribute type 3 has an invalid length. [ 1151.815700][T28372] netlink: 224 bytes leftover after parsing attributes in process `syz.4.15462'. [ 1151.830973][T28374] netlink: 277 bytes leftover after parsing attributes in process `syz.1.15463'. [ 1152.000714][T28379] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15465'. [ 1152.290410][T28401] syzkaller1: entered allmulticast mode [ 1152.393963][T28410] netlink: 108 bytes leftover after parsing attributes in process `syz.4.15473'. [ 1152.418056][T28410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15473'. [ 1152.588187][T28418] netlink: 32 bytes leftover after parsing attributes in process `syz.5.15475'. [ 1152.769897][T28442] netlink: 'syz.1.15482': attribute type 1 has an invalid length. [ 1152.808858][T28442] netlink: 'syz.1.15482': attribute type 2 has an invalid length. [ 1152.879955][T28448] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15483'. [ 1152.903614][T28454] netlink: 'syz.1.15482': attribute type 1 has an invalid length. [ 1152.920444][T28454] netlink: 'syz.1.15482': attribute type 2 has an invalid length. [ 1152.985008][T28448] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15483'. [ 1153.258638][ T3194] IPVS: starting estimator thread 0... [ 1153.265143][T28484] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1153.358230][T28491] syzkaller0: entered promiscuous mode [ 1153.381328][T28486] IPVS: using max 57 ests per chain, 136800 per kthread [ 1153.391806][T28491] syzkaller0: entered allmulticast mode [ 1153.563536][T28502] macvlan2: entered promiscuous mode [ 1153.584199][T28502] macvlan2: entered allmulticast mode [ 1153.922140][T28526] veth1_to_bond: entered allmulticast mode [ 1154.006765][T28526] veth1_to_bond (unregistering): left allmulticast mode [ 1154.578253][T28554] syzkaller0: entered promiscuous mode [ 1154.589977][T28554] syzkaller0: entered allmulticast mode [ 1154.823444][T28568] bond1: option resend_igmp: invalid value (32767) [ 1154.837675][T28568] bond1: option resend_igmp: allowed values 0 - 255 [ 1154.932751][T28568] bond1 (unregistering): Released all slaves [ 1155.408311][T28605] tipc: Started in network mode [ 1155.429621][T28605] tipc: Node identity 3e248efe8609, cluster identity 4711 [ 1155.458310][T28605] tipc: Enabled bearer , priority 0 [ 1155.494602][T28617] syzkaller0: entered promiscuous mode [ 1155.520385][T28617] syzkaller0: entered allmulticast mode [ 1155.547383][T28605] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1155.588359][T28615] syzkaller0: entered promiscuous mode [ 1155.595156][T28615] syzkaller0: entered allmulticast mode [ 1155.613956][T28605] tipc: Resetting bearer [ 1155.620305][T28615] 0: reclassify loop, rule prio 0, protocol 800 [ 1155.687318][T28603] tipc: Resetting bearer [ 1155.713137][T28603] tipc: Disabling bearer [ 1155.740496][T28635] vxcan1: Master is either lo or non-ether device [ 1155.818513][T28639] netlink: 'syz.6.15537': attribute type 1 has an invalid length. [ 1155.899642][T28646] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 1155.933542][T28646] bond0: entered promiscuous mode [ 1155.953384][T28646] bond_slave_0: entered promiscuous mode [ 1155.965162][T28646] bond_slave_1: entered promiscuous mode [ 1155.986977][T28646] batadv0: entered promiscuous mode [ 1156.009692][T28646] debugfs: 'hsr1' already exists in 'hsr' [ 1156.028880][T28646] Cannot create hsr debugfs directory [ 1156.048985][T28646] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1156.059230][T28659] openvswitch: netlink: Message has -2 unknown bytes. [ 1156.079190][T28646] bond0: left promiscuous mode [ 1156.092262][T28646] bond_slave_0: left promiscuous mode [ 1156.097944][T28646] bond_slave_1: left promiscuous mode [ 1156.113157][T28646] batadv0: left promiscuous mode [ 1156.136688][T28664] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.257846][T28664] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.374574][T28664] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.395425][T28684] : entered promiscuous mode [ 1156.475898][T28664] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.629916][T12523] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.669572][T12524] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.715633][T12519] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.738878][T28715] __nla_validate_parse: 10 callbacks suppressed [ 1156.738899][T28715] netlink: 52 bytes leftover after parsing attributes in process `syz.5.15562'. [ 1156.745184][T12519] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.810324][T28721] syzkaller0: entered promiscuous mode [ 1156.821476][T28721] syzkaller0: entered allmulticast mode [ 1156.839289][T28721] netlink: 'syz.4.15564': attribute type 1 has an invalid length. [ 1156.902639][T28728] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15564'. [ 1159.390248][T28688] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1159.488408][T28733] netlink: 164 bytes leftover after parsing attributes in process `syz.1.15567'. [ 1159.499107][T28733] netlink: 164 bytes leftover after parsing attributes in process `syz.1.15567'. [ 1159.516486][T28733] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15567'. [ 1159.566038][T28737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15569'. [ 1160.030202][T28769] netlink: 52 bytes leftover after parsing attributes in process `syz.3.15577'. [ 1160.110372][T28771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15578'. [ 1160.189949][T28782] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1160.268864][T28799] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 1160.637521][T28832] veth0_to_bridge: entered promiscuous mode [ 1160.667647][T28831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1160.749872][T28829] veth0_to_bridge: left promiscuous mode [ 1168.151827][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1183.149975][T28849] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15593'. [ 1183.175780][T28849] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1183.279476][T28843] bond1: option all_slaves_active: invalid value (222) [ 1183.315128][T28843] bond1 (unregistering): Released all slaves [ 1183.346241][T28867] syzkaller0: entered promiscuous mode [ 1183.374718][T28867] syzkaller0: entered allmulticast mode [ 1183.400360][T28865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15601'. [ 1183.440933][ T8368] bridge0: entered promiscuous mode [ 1183.554297][T28875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15604'. [ 1183.615392][T28877] lo: left promiscuous mode [ 1183.624062][T28877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1184.016033][T28896] syzkaller0: entered promiscuous mode [ 1184.047944][T28896] syzkaller0: entered allmulticast mode [ 1184.073475][T28896] netlink: 16 bytes leftover after parsing attributes in process `syz.6.15608'. [ 1184.173867][T28916] SET target dimension over the limit! [ 1184.288583][T28926] netlink: 'syz.6.15620': attribute type 21 has an invalid length. [ 1184.297881][T28926] netlink: 'syz.6.15620': attribute type 6 has an invalid length. [ 1184.311850][T28926] netlink: 132 bytes leftover after parsing attributes in process `syz.6.15620'. [ 1184.333863][T28925] netlink: 'syz.5.15619': attribute type 1 has an invalid length. [ 1184.353990][T28925] netlink: 96 bytes leftover after parsing attributes in process `syz.5.15619'. [ 1184.370180][T28925] netlink: 1 bytes leftover after parsing attributes in process `syz.5.15619'. [ 1184.386602][T28925] netlink: 'syz.5.15619': attribute type 1 has an invalid length. [ 1184.409338][T28930] netlink: 68 bytes leftover after parsing attributes in process `syz.1.15622'. [ 1184.414429][T28925] netlink: 'syz.5.15619': attribute type 8 has an invalid length. [ 1184.435994][T28925] netlink: 606 bytes leftover after parsing attributes in process `syz.5.15619'. [ 1184.450355][T28935] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15624'. [ 1184.500378][T28941] netlink: 'syz.1.15622': attribute type 1 has an invalid length. [ 1184.577665][T28941] bond6: entered promiscuous mode [ 1184.590468][T28941] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1184.629298][T28954] sit2: entered promiscuous mode [ 1184.634894][T28954] sit2: entered allmulticast mode [ 1184.756835][T28961] netlink: 'syz.6.15628': attribute type 1 has an invalid length. [ 1184.804542][T28963] syzkaller0: entered promiscuous mode [ 1184.810515][T28963] syzkaller0: entered allmulticast mode [ 1184.917810][T28968] netlink: 'syz.6.15632': attribute type 1 has an invalid length. [ 1184.987531][T28972] tipc: Started in network mode [ 1184.997803][T28972] tipc: Node identity 3e4d4f7bc548, cluster identity 4711 [ 1185.014977][T28972] tipc: Enabled bearer , priority 0 [ 1185.050454][T28972] syzkaller0: entered promiscuous mode [ 1185.073710][T28972] syzkaller0: entered allmulticast mode [ 1185.160269][T28988] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1185.207715][T28988] tipc: Resetting bearer [ 1185.360135][T28971] tipc: Resetting bearer [ 1185.375123][T28971] tipc: Disabling bearer [ 1185.633818][T29033] openvswitch: netlink: EtherType 50a is less than min 600 [ 1185.829834][T29051] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 1185.868500][T29051] syzkaller0: entered promiscuous mode [ 1185.882350][T29051] syzkaller0: entered allmulticast mode [ 1186.160849][T29069] netlink: 'syz.5.15664': attribute type 1 has an invalid length. [ 1186.441784][T29093] netlink: 'syz.4.15670': attribute type 1 has an invalid length. [ 1186.494948][T29093] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1186.538878][T29094] bond2: (slave geneve2): making interface the new active one [ 1186.555084][T29094] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1186.613183][T29113] tipc: Enabling of bearer rejected, failed to enable media [ 1187.228541][T29152] Cannot find add_set index 3 as target [ 1187.587329][T29164] pim6reg: entered allmulticast mode [ 1187.662944][T29181] syzkaller0: entered promiscuous mode [ 1187.689378][T29181] syzkaller0: entered allmulticast mode [ 1187.799591][T29200] veth1_macvtap: left promiscuous mode [ 1187.836401][T29200] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 1187.871864][T29204] H: renamed from dummy0 (while UP) [ 1188.025363][T29218] syzkaller0: entered promiscuous mode [ 1188.031045][T29218] syzkaller0: entered allmulticast mode [ 1188.157048][T29226] __nla_validate_parse: 17 callbacks suppressed [ 1188.157070][T29226] netlink: 52 bytes leftover after parsing attributes in process `syz.1.15713'. [ 1188.276284][T29232] netlink: 128 bytes leftover after parsing attributes in process `syz.3.15716'. [ 1188.304342][T29234] lo speed is unknown, defaulting to 1000 [ 1188.315723][T29232] netlink: 3 bytes leftover after parsing attributes in process `syz.3.15716'. [ 1188.345200][T29237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1188.355414][T29230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15715'. [ 1188.428792][T29240] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.453014][T29240] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.609944][T29249] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15720'. [ 1188.695449][T29241] bridge0: port 1(bridge_slave_0) entered blocking state [ 1188.702857][T29241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1188.715818][T29241] bridge0: port 2(bridge_slave_1) entered blocking state [ 1188.723031][T29241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1188.899599][T29262] netlink: 80 bytes leftover after parsing attributes in process `syz.5.15724'. [ 1188.935511][T16128] Bluetooth: hci6: link tx timeout [ 1188.940902][T16128] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1189.016309][T29266] xt_nat: multiple ranges no longer supported [ 1189.023542][T29266] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15724'. [ 1189.056807][T29266] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1189.367500][T29286] validate_nla: 9 callbacks suppressed [ 1189.367516][T29286] netlink: 'syz.6.15729': attribute type 8 has an invalid length. [ 1189.616994][T29302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15732'. [ 1189.620273][T29303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15732'. [ 1189.659747][T29305] xt_cluster: node mask cannot exceed total number of nodes [ 1189.715581][T29307] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15735'. [ 1189.778128][T29305] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.785595][T29305] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.860768][T29305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1189.870372][T29315] netlink: 'syz.5.15737': attribute type 1 has an invalid length. [ 1189.876474][T29305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1190.005968][T29315] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1190.045132][T29321] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1190.062799][T29267] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1190.066136][T12553] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.107655][T29322] macvlan2: entered promiscuous mode [ 1190.119774][T29322] macvlan2: entered allmulticast mode [ 1190.126552][T29322] bond3: entered promiscuous mode [ 1190.133272][T29322] veth0_to_bond: entered promiscuous mode [ 1190.139723][T29322] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1190.156634][T29322] bond3: left promiscuous mode [ 1190.164689][T29322] veth0_to_bond: left promiscuous mode [ 1190.180920][T12517] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.190846][T12517] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.202309][T12517] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.284942][T29330] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1191.033179][T16128] Bluetooth: hci6: command 0x0419 tx timeout [ 1210.898192][T29354] __nla_validate_parse: 2 callbacks suppressed [ 1210.898221][T29354] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.15744'. [ 1210.914681][T29353] syzkaller0: entered promiscuous mode [ 1210.925790][T29353] syzkaller0: entered allmulticast mode [ 1210.953268][T29355] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 1211.059536][T29365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15746'. [ 1211.180305][T29370] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.15751'. [ 1211.217615][T29370] syzkaller1: entered promiscuous mode [ 1211.223547][T29370] syzkaller1: entered allmulticast mode [ 1211.327338][T29381] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15755'. [ 1211.367615][T29381] netlink: 68 bytes leftover after parsing attributes in process `syz.3.15755'. [ 1211.407209][T29381] netlink: 'syz.3.15755': attribute type 1 has an invalid length. [ 1211.527525][T29405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15765'. [ 1211.579055][T29405] syzkaller1: entered promiscuous mode [ 1211.606646][T29409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15763'. [ 1211.610914][T29405] syzkaller1: entered allmulticast mode [ 1211.628533][T29409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15763'. [ 1211.860903][T12553] tipc: Subscription rejected, illegal request [ 1212.058087][T29447] tipc: Failed to remove unknown binding: 66,0,0/0:1109253804/1109253805 [ 1212.106167][T29447] tipc: Failed to remove unknown binding: 66,0,0/0:1109253804/1109253805 [ 1212.188313][T29464] netlink: 'syz.1.15780': attribute type 1 has an invalid length. [ 1212.357627][T29478] batadv_slave_1: entered promiscuous mode [ 1212.382908][T29475] syzkaller0: entered promiscuous mode [ 1212.413644][T29475] syzkaller0: entered allmulticast mode [ 1212.479992][T29475] batadv_slave_1: left promiscuous mode [ 1212.495098][T29488] netlink: 48 bytes leftover after parsing attributes in process `syz.5.15786'. [ 1212.550106][T29496] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 1212.599380][T29500] netlink: 'syz.3.15789': attribute type 1 has an invalid length. [ 1212.671609][T29501] netlink: 'syz.3.15789': attribute type 21 has an invalid length. [ 1212.691989][T29501] netlink: 156 bytes leftover after parsing attributes in process `syz.3.15789'. [ 1212.778731][T29517] netlink: 'syz.5.15795': attribute type 15 has an invalid length. [ 1212.794660][T29500] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1212.851898][T29510] bond5: (slave geneve3): making interface the new active one [ 1212.863656][T29510] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 1213.693479][T29597] block nbd9: server does not support multiple connections per device. [ 1213.712056][T29597] block nbd9: shutting down sockets [ 1213.784586][T29606] bond6: Unable to set down delay as MII monitoring is disabled [ 1213.796596][T29606] bond6 (unregistering): Released all slaves [ 1214.059525][T29636] IPVS: set_ctl: invalid protocol: 59 172.20.20.38:20000 [ 1214.192207][T29645] netlink: 'syz.1.15831': attribute type 1 has an invalid length. [ 1214.205727][T29647] netlink: 'syz.6.15829': attribute type 24 has an invalid length. [ 1214.325597][T29658] : renamed from bond0 (while UP) [ 1214.413180][T29666] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1214.668883][T29692] xt_TCPMSS: Only works on TCP SYN packets [ 1215.784087][T29777] xt_nat: multiple ranges no longer supported [ 1215.908972][T29789] netlink: 'syz.1.15866': attribute type 10 has an invalid length. [ 1215.953602][T29795] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1216.033921][T29803] netlink: 'syz.4.15871': attribute type 7 has an invalid length. [ 1216.098372][T29807] __nla_validate_parse: 22 callbacks suppressed [ 1216.098392][T29807] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.15871'. [ 1216.125511][T29807] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 1216.127122][T29811] openvswitch: netlink: IP tunnel dst address not specified [ 1216.144057][T12553] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1216.162415][T29811] netlink: 'syz.3.15875': attribute type 1 has an invalid length. [ 1216.180557][T12553] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1216.194512][T29813] syzkaller0: entered promiscuous mode [ 1216.213851][T29813] syzkaller0: entered allmulticast mode [ 1216.229775][T12553] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1216.274174][T29811] bond6: entered promiscuous mode [ 1216.279661][T29811] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1216.293708][T12553] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1216.360701][T29821] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1216.380403][T29821] bond6: (slave vti0): The slave device specified does not support setting the MAC address [ 1216.390562][T29821] bond6: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1216.416860][T29821] bond6: (slave vti0): making interface the new active one [ 1216.425283][T29821] vti0: entered promiscuous mode [ 1216.434604][T29821] vti0: left promiscuous mode [ 1216.486820][T29830] vlan2: entered promiscuous mode [ 1216.504420][T29830] bridge0: entered promiscuous mode [ 1216.523573][T29831] tipc: Enabled bearer , priority 0 [ 1216.555526][T29808] tipc: Resetting bearer [ 1216.626451][T29808] tipc: Disabling bearer [ 1217.019470][T29861] netlink: 'syz.6.15887': attribute type 21 has an invalid length. [ 1217.047249][T29861] netlink: 152 bytes leftover after parsing attributes in process `syz.6.15887'. [ 1217.072359][T29860] gretap2: entered promiscuous mode [ 1217.079556][T29864] netlink: 'syz.6.15887': attribute type 1 has an invalid length. [ 1217.090920][T29860] batman_adv: batadv0: Adding interface: gretap2 [ 1217.116756][T29860] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 1217.182644][T29860] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 1217.239847][T29864] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1217.318781][T29866] bond1: (slave geneve3): making interface the new active one [ 1217.330185][T29866] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 1217.349424][T12553] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.390012][T12553] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.450561][T12553] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.479813][T12553] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.504172][T29883] netlink: 9 bytes leftover after parsing attributes in process `syz.1.15892'. [ 1217.532952][T29883] 0: renamed from hsr0 (while UP) [ 1217.559498][T29883] 0: entered allmulticast mode [ 1217.565316][T29883] hsr_slave_0: entered allmulticast mode [ 1217.571399][T29883] hsr_slave_1: entered allmulticast mode [ 1217.577788][T29883] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 1217.668561][T29890] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15894'. [ 1217.794301][T29903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15896'. [ 1217.995890][T29909] netlink: 248 bytes leftover after parsing attributes in process `syz.4.15900'. [ 1218.056360][T29909] syzkaller0: entered promiscuous mode [ 1218.085980][T29909] syzkaller0: entered allmulticast mode [ 1218.166421][T29916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15903'. [ 1218.276713][T29926] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15906'. [ 1218.354757][T29926] bond5: (slave veth0_to_bond): Releasing backup interface [ 1219.173595][T29979] netlink: 'syz.6.15921': attribute type 1 has an invalid length. [ 1219.176149][T29980] nbd: couldn't find a device at index 0 [ 1219.210803][T29979] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15921'. [ 1219.347885][T29989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1219.478197][T30002] netlink: 232 bytes leftover after parsing attributes in process `syz.6.15927'. [ 1219.954015][T30036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1220.341375][T30064] syzkaller1: entered promiscuous mode [ 1220.374922][T30064] syzkaller1: entered allmulticast mode [ 1220.415753][T30075] netlink: 'syz.1.15946': attribute type 3 has an invalid length. [ 1220.656826][T30085] xt_HMARK: proto mask must be zero with L3 mode [ 1220.843345][T30097] xt_socket: unknown flags 0x50 [ 1221.065844][ T30] audit: type=1107 audit(1782287423.388:34): pid=30114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='9DIoca5.' [ 1221.541975][T30133] __nla_validate_parse: 71 callbacks suppressed [ 1221.541999][T30133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15965'. [ 1221.576493][T31088] IPVS: starting estimator thread 0... [ 1221.584627][T30144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15967'. [ 1221.599014][T30137] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1221.637654][T30150] netlink: 340 bytes leftover after parsing attributes in process `syz.5.15969'. [ 1221.683551][T30146] IPVS: using max 42 ests per chain, 100800 per kthread [ 1221.835526][T30164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15973'. [ 1221.875732][T30164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15973'. [ 1221.892274][T30164] netlink: 2 bytes leftover after parsing attributes in process `syz.1.15973'. [ 1221.918675][T30164] veth1_to_bridge: entered allmulticast mode [ 1221.927893][T30166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15973'. [ 1221.929813][T30164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15973'. [ 1221.950495][T30164] netlink: 2 bytes leftover after parsing attributes in process `syz.1.15973'. [ 1222.126847][T30185] netlink: 204 bytes leftover after parsing attributes in process `syz.1.15980'. [ 1222.447449][T30215] syzkaller0: entered promiscuous mode [ 1222.453872][T30215] syzkaller0: entered allmulticast mode [ 1222.515450][T30226] netlink: 'syz.4.15988': attribute type 2 has an invalid length. [ 1222.527499][T30226] netlink: 'syz.4.15988': attribute type 1 has an invalid length. [ 1222.884321][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880360ec800: rx timeout, send abort [ 1222.893043][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880360ec800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1223.070567][T30257] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 1223.138763][T30261] netlink: 'syz.5.15999': attribute type 5 has an invalid length. [ 1223.150259][T30257] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 1223.265054][T30263] netlink: 'syz.5.16000': attribute type 1 has an invalid length. [ 1223.355558][T30263] bond0: (slave geneve2): making interface the new active one [ 1223.389435][T30263] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 1223.421816][T12519] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1223.477677][T12519] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1223.526675][T12519] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1223.573379][T12519] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1223.686497][T30275] netlink: 'syz.5.16003': attribute type 5 has an invalid length. [ 1224.200759][T30305] lo speed is unknown, defaulting to 1000 [ 1224.614160][T30329] tipc: Enabled bearer , priority 0 [ 1224.646503][T30329] syzkaller0: entered promiscuous mode [ 1224.653376][T30329] syzkaller0: entered allmulticast mode [ 1224.695949][T30329] tipc: Resetting bearer [ 1224.736813][T30328] tipc: Resetting bearer [ 1224.763694][T30328] tipc: Disabling bearer [ 1225.018157][T30336] netlink: 'syz.6.16014': attribute type 22 has an invalid length. [ 1225.083077][T30336] netlink: 'syz.6.16014': attribute type 22 has an invalid length. [ 1225.083433][T12520] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1225.154805][T12520] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1225.200832][T12528] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1225.241966][T12528] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1225.515069][T30358] bridge5: entered promiscuous mode [ 1225.534021][T30358] bridge5: entered allmulticast mode [ 1225.598666][T30361] smc: net device nr0 applied user defined pnetid SYZ2 [ 1226.170903][T30397] xt_hashlimit: size too large, truncated to 1048576 [ 1226.285354][T30399] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1226.304963][T30408] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1226.427072][T30417] netlink: 'syz.6.16037': attribute type 1 has an invalid length. [ 1226.454426][T30407] IPVS: set_ctl: invalid protocol: 47 172.30.1.2:20004 [ 1226.498141][T30417] netlink: 'syz.6.16037': attribute type 1 has an invalid length. [ 1226.530710][T30421] IPVS: set_ctl: invalid protocol: 94 100.1.1.1:20000 [ 1226.557911][T30417] __nla_validate_parse: 23 callbacks suppressed [ 1226.557932][T30417] netlink: 256 bytes leftover after parsing attributes in process `syz.6.16037'. [ 1226.696507][T30436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1227.006817][T30463] openvswitch: netlink: IP tunnel TTL not specified. [ 1227.057775][T30460] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1227.170042][T30479] netlink: 52 bytes leftover after parsing attributes in process `syz.4.16056'. [ 1227.187186][T30479] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.194563][T30479] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.248351][T30479] netlink: 76 bytes leftover after parsing attributes in process `syz.4.16056'. [ 1227.309335][T30479] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.316671][T30479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1227.324551][T30479] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.331699][T30479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1227.355534][T30479] netlink: 52 bytes leftover after parsing attributes in process `syz.4.16056'. [ 1227.356383][T30488] netlink: 'syz.6.16058': attribute type 12 has an invalid length. [ 1227.383580][T30488] netlink: 148 bytes leftover after parsing attributes in process `syz.6.16058'. [ 1227.394627][T30488] netlink: 35 bytes leftover after parsing attributes in process `syz.6.16058'. [ 1227.405449][T30479] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.412729][T30479] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.484298][T30493] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16060'. [ 1227.660558][T30508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16065'. [ 1227.677799][T30508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16065'. [ 1227.699079][T30508] erspan0: entered promiscuous mode [ 1227.707207][T30508] erspan0: left promiscuous mode [ 1227.713070][T30511] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 1227.743873][T30511] No such timeout policy "syz1" [ 1228.227689][T30551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16077'. [ 1228.298883][T30558] validate_nla: 4 callbacks suppressed [ 1228.298906][T30558] netlink: 'syz.3.16079': attribute type 1 has an invalid length. [ 1228.358253][T30558] netlink: 'syz.3.16079': attribute type 4 has an invalid length. [ 1228.473987][T30563] tipc: Enabled bearer , priority 0 [ 1228.494728][ T30] audit: type=1800 audit(1782287430.818:35): pid=30566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.16082" name="memory.events" dev="tmpfs" ino=1107 res=0 errno=0 [ 1228.500841][T30563] syzkaller0: entered promiscuous mode [ 1228.531902][ T30] audit: type=1804 audit(1782287430.818:36): pid=30566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.16082" name="/newroot/214/memory.events" dev="tmpfs" ino=1107 res=1 errno=0 [ 1228.556465][T30563] syzkaller0: entered allmulticast mode [ 1228.579423][T30570] IPv6: NLM_F_CREATE should be specified when creating new route [ 1228.579577][T30563] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1228.758143][T30580] tipc: Resetting bearer [ 1228.906261][T30591] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1228.912864][T30591] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1228.944494][T30563] tipc: Resetting bearer [ 1229.036122][T30563] tipc: Disabling bearer [ 1229.786247][T30643] netlink: 'syz.5.16107': attribute type 12 has an invalid length. [ 1229.853937][T12520] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1229.876648][T12520] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1229.909006][T12520] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1229.932496][T12520] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1230.018324][T30656] can: request_module (can-proto-0) failed. [ 1230.257188][T30668] netlink: 'syz.4.16115': attribute type 62 has an invalid length. [ 1230.465088][T30686] bond7: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1230.587473][T30696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1230.822685][T30714] netlink: 'syz.3.16128': attribute type 9 has an invalid length. [ 1231.109432][T30751] netlink: 'syz.6.16137': attribute type 23 has an invalid length. [ 1231.192203][T30753] netlink: 'syz.3.16138': attribute type 8 has an invalid length. [ 1231.370076][T30765] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1231.380655][T30765] bond0: (slave bond4): Enslaving as an active interface with an up link [ 1231.485636][T30775] syzkaller0: entered promiscuous mode [ 1231.493120][T30775] syzkaller0: entered allmulticast mode [ 1231.840969][T30795] __nla_validate_parse: 19 callbacks suppressed [ 1231.840990][T30795] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16152'. [ 1231.866133][T30795] netlink: 24 bytes leftover after parsing attributes in process `syz.5.16152'. [ 1231.899207][ T30] audit: type=1107 audit(1782287434.218:37): pid=30805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1232.133949][T30826] netlink: 'syz.1.16162': attribute type 49 has an invalid length. [ 1232.334849][T30840] syzkaller0: entered promiscuous mode [ 1232.340376][T30840] syzkaller0: entered allmulticast mode [ 1232.404913][T30840] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 1232.592347][T30871] netlink: 'syz.4.16170': attribute type 1 has an invalid length. [ 1232.664218][T30864] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1232.685429][T30864] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1232.790303][T30879] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16173'. [ 1232.835761][T30879] x_tables: duplicate underflow at hook 2 [ 1232.870918][T30880] x_tables: duplicate underflow at hook 2 [ 1232.937358][T30879] netlink: 'syz.5.16173': attribute type 1 has an invalid length. [ 1233.064796][T30879] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1233.106671][T30880] bond4: (slave geneve3): making interface the new active one [ 1233.118520][T30880] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 1233.209671][T30910] tipc: MTU too low for tipc bearer [ 1233.402712][T30928] netlink: 'syz.5.16183': attribute type 266 has an invalid length. [ 1233.610704][T30942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16187'. [ 1233.624880][T30943] netlink: 'syz.5.16186': attribute type 1 has an invalid length. [ 1233.666630][T30943] netlink: 228 bytes leftover after parsing attributes in process `syz.5.16186'. [ 1233.727895][T30946] dvmrp0: entered allmulticast mode [ 1233.757880][T30951] netlink: 'syz.4.16190': attribute type 1 has an invalid length. [ 1233.784241][T30953] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16190'. [ 1233.844892][ T30] audit: type=1800 audit(1782287436.168:38): pid=30959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.16192" name="memory.events" dev="tmpfs" ino=1029 res=0 errno=0 [ 1233.934430][T30952] bond5: (slave geneve3): making interface the new active one [ 1233.945475][T30952] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 1233.957702][T30953] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1233.975776][T12516] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1234.020046][T12516] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1234.059771][T12516] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1234.074218][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1234.158558][T12516] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1234.274812][T30988] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16196'. [ 1234.461897][T30994] syzkaller0: entered promiscuous mode [ 1234.493682][T30994] syzkaller0: entered allmulticast mode [ 1234.594487][ T319] IPVS: starting estimator thread 0... [ 1234.605481][T31014] IPVS: set_ctl: invalid protocol: 2682 0.0.0.40:28944 [ 1234.703717][T31017] IPVS: using max 42 ests per chain, 100800 per kthread [ 1235.023677][T31049] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16215'. [ 1235.035592][T31049] netlink: 14 bytes leftover after parsing attributes in process `syz.5.16215'. [ 1235.050112][T31052] netlink: 'syz.4.16217': attribute type 28 has an invalid length. [ 1235.064018][T31052] netlink: 'syz.4.16217': attribute type 3 has an invalid length. [ 1235.074466][T31052] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16217'. [ 1235.265179][T31061] syzkaller0: entered promiscuous mode [ 1235.270929][T31061] syzkaller0: entered allmulticast mode [ 1235.315458][T31064] syzkaller0: entered promiscuous mode [ 1235.321264][T31064] syzkaller0: entered allmulticast mode [ 1235.438274][T31064] tipc: Enabled bearer , priority 0 [ 1235.449534][T31063] tipc: Resetting bearer [ 1235.605334][T31063] tipc: Disabling bearer [ 1235.688004][T31085] syzkaller0: entered promiscuous mode [ 1235.695909][T31085] syzkaller0: entered allmulticast mode [ 1235.862955][T31101] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 1235.997203][T31114] netlink: 'syz.1.16230': attribute type 11 has an invalid length. [ 1236.215388][T31130] syzkaller0: entered promiscuous mode [ 1236.228077][T31130] syzkaller0: entered allmulticast mode [ 1236.952095][T31200] netlink: 'syz.4.16252': attribute type 4 has an invalid length. [ 1237.053124][T31208] netlink: 'syz.1.16255': attribute type 4 has an invalid length. [ 1237.065503][T31204] vlan3: entered promiscuous mode [ 1237.086074][T31204] gretap0: entered promiscuous mode [ 1237.100047][T31210] __nla_validate_parse: 5 callbacks suppressed [ 1237.100065][T31210] netlink: 164 bytes leftover after parsing attributes in process `syz.3.16256'. [ 1237.141976][T31210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16256'. [ 1237.155644][T31210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1237.414178][T31237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16265'. [ 1237.414544][T31241] netlink: 96 bytes leftover after parsing attributes in process `syz.4.16264'. [ 1237.510351][T31249] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.16264'. [ 1237.515375][T31251] netlink: 48 bytes leftover after parsing attributes in process `syz.1.16268'. [ 1237.532529][T31237] bond7: Invalid ad_actor_system MAC address. [ 1237.538835][T31237] bond7: option ad_actor_system: invalid value (1) [ 1237.548691][T31237] bond7 (unregistering): Released all slaves [ 1237.553635][T31252] netlink: 'syz.1.16268': attribute type 9 has an invalid length. [ 1237.564794][T31251] netlink: 'syz.1.16268': attribute type 9 has an invalid length. [ 1237.707320][T31261] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16271'. [ 1237.826335][T31265] syzkaller0: entered promiscuous mode [ 1237.838784][T31265] syzkaller0: entered allmulticast mode [ 1238.160822][T31300] syzkaller0: entered promiscuous mode [ 1238.182355][T31300] syzkaller0: entered allmulticast mode [ 1238.258713][T31311] netlink: 20 bytes leftover after parsing attributes in process `syz.5.16290'. [ 1238.274068][T31312] netlink: 20 bytes leftover after parsing attributes in process `syz.5.16290'. [ 1238.293473][T31309] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1238.449237][T31318] openvswitch: netlink: Flow actions attr not present in new flow. [ 1238.473305][T31327] nft_compat: unsupported protocol 0 [ 1238.497700][T31327] nft_compat: unsupported protocol 0 [ 1238.513984][T31331] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16295'. [ 1238.514893][T31327] nft_compat: unsupported protocol 0 [ 1238.529705][T31327] nft_compat: unsupported protocol 0 [ 1238.536516][T31327] nft_compat: unsupported protocol 0 [ 1238.542281][T31327] nft_compat: unsupported protocol 0 [ 1238.708105][T31328] bond5 (unregistering): Released all slaves [ 1238.819099][T31344] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1238.919915][T31344] bond8 (unregistering): Released all slaves [ 1238.989783][T31366] validate_nla: 1 callbacks suppressed [ 1238.989803][T31366] netlink: 'syz.4.16301': attribute type 2 has an invalid length. [ 1239.023751][T31366] netlink: 'syz.4.16301': attribute type 2 has an invalid length. [ 1239.178194][T31370] syzkaller0: entered promiscuous mode [ 1239.218654][T31373] can: request_module (can-proto-0) failed. [ 1239.224548][T31378] "syz.5.16308" (31378) uses obsolete ecb(arc4) skcipher [ 1239.249412][T31370] syzkaller0: entered allmulticast mode [ 1239.288663][T31379] xt_l2tp: wrong L2TP version: 0 [ 1239.990542][T31417] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1240.144082][T31433] xt_CONNSECMARK: invalid mode: 0 [ 1240.974177][T31469] netlink: 'syz.1.16334': attribute type 2 has an invalid length. [ 1241.023051][T31467] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1241.749033][T31494] tc action pedit 'at' offset 9 out of bounds [ 1242.135097][T31516] tipc: Enabled bearer , priority 0 [ 1242.144675][T31516] syzkaller0: entered promiscuous mode [ 1242.150573][T31516] syzkaller0: entered allmulticast mode [ 1242.173087][T31516] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1242.199742][T31516] tipc: Resetting bearer [ 1242.219906][T31515] tipc: Resetting bearer [ 1242.263413][T31515] tipc: Disabling bearer [ 1242.530706][T31537] __nla_validate_parse: 8 callbacks suppressed [ 1242.530728][T31537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16355'. [ 1242.597819][T31531] netlink: 'syz.1.16355': attribute type 12 has an invalid length. [ 1242.607248][T31531] netlink: 'syz.1.16355': attribute type 29 has an invalid length. [ 1242.618575][T31531] netlink: 148 bytes leftover after parsing attributes in process `syz.1.16355'. [ 1242.652656][T31531] netlink: 51 bytes leftover after parsing attributes in process `syz.1.16355'. [ 1242.839715][T31549] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 1242.910005][T31556] netlink: 27 bytes leftover after parsing attributes in process `syz.5.16360'. [ 1242.966070][T31551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.128351][T31568] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1243.157559][T31568] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1243.172771][T31568] gretap1: entered promiscuous mode [ 1243.184630][T31568] gretap1: entered allmulticast mode [ 1243.230265][T31578] netlink: 'syz.3.16367': attribute type 8 has an invalid length. [ 1243.270087][T31578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16367'. [ 1243.375256][T31578] veth1_to_team: entered promiscuous mode [ 1243.416622][T31578] gretap0: entered promiscuous mode [ 1243.435443][T31578] veth1_to_team: left promiscuous mode [ 1243.457473][T31578] gretap0: left promiscuous mode [ 1243.469136][T31584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1243.819066][T31600] syzkaller0: entered promiscuous mode [ 1243.826925][T31600] syzkaller0: entered allmulticast mode [ 1243.949615][T31612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16377'. [ 1244.019950][T31615] netlink: 'syz.6.16379': attribute type 1 has an invalid length. [ 1244.047597][T31615] netlink: 'syz.6.16379': attribute type 1 has an invalid length. [ 1244.092482][T31615] netlink: 'syz.6.16379': attribute type 1 has an invalid length. [ 1244.146883][T31615] netlink: 'syz.6.16379': attribute type 2 has an invalid length. [ 1244.183616][T31615] netlink: 76 bytes leftover after parsing attributes in process `syz.6.16379'. [ 1244.279896][T31635] veth9: entered promiscuous mode [ 1244.286106][T31635] veth9: entered allmulticast mode [ 1244.420190][T31641] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16385'. [ 1244.431818][T31638] syzkaller0: entered promiscuous mode [ 1244.442801][T31638] syzkaller0: entered allmulticast mode [ 1244.469506][T31649] netlink: 120 bytes leftover after parsing attributes in process `syz.4.16386'. [ 1244.625565][T31657] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1244.704111][T31657] bond2 (unregistering): Released all slaves [ 1244.815567][T31655] netlink: 'syz.1.16387': attribute type 12 has an invalid length. [ 1244.831278][T31655] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16387'. [ 1244.847430][T31673] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1245.480365][T31713] gtp0: entered allmulticast mode [ 1245.518037][T31713] team0: Device gtp0 is of different type [ 1245.543399][ T30] audit: type=1804 audit(1782287447.858:39): pid=31723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.16406" name="/newroot/285/memory.events" dev="tmpfs" ino=1465 res=1 errno=0 [ 1245.638337][ T30] audit: type=1800 audit(1782287447.858:40): pid=31723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.16406" name="memory.events" dev="tmpfs" ino=1465 res=0 errno=0 [ 1245.680181][T31724] tipc: Enabled bearer , priority 0 [ 1245.737343][T31720] tipc: Disabling bearer [ 1245.948827][T31745] netlink: 'syz.3.16414': attribute type 4 has an invalid length. [ 1246.012478][T31745] .`: renamed from bond0 (while UP) [ 1246.053640][T31750] GUP no longer grows the stack in syz.5.16417 (31750): 200000003000-20000000a000 (200000001000) [ 1246.072227][T31750] CPU: 0 UID: 0 PID: 31750 Comm: syz.5.16417 Not tainted syzkaller #0 PREEMPT(full) [ 1246.072257][T31750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1246.072270][T31750] Call Trace: [ 1246.072279][T31750] [ 1246.072286][T31750] dump_stack_lvl+0xe8/0x150 [ 1246.072324][T31750] __get_user_pages+0x238c/0x2720 [ 1246.072348][T31750] ? __gup_longterm_locked+0xc3b/0x15c0 [ 1246.072382][T31750] __gup_longterm_locked+0xd52/0x15c0 [ 1246.072406][T31750] ? gup_fast_fallback+0xbc4/0x20d0 [ 1246.072427][T31750] ? rcu_is_watching+0x15/0xb0 [ 1246.072449][T31750] ? rcu_is_watching+0x15/0xb0 [ 1246.072470][T31750] gup_fast_fallback+0x1d82/0x20d0 [ 1246.072512][T31750] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1246.072532][T31750] ? lock_release+0x4b/0x3c0 [ 1246.072560][T31750] ? __fget_files+0x2a/0x420 [ 1246.072580][T31750] ? is_valid_gup_args+0x11f/0x200 [ 1246.072601][T31750] ? get_user_pages_fast+0x4d/0xb0 [ 1246.072622][T31750] __iov_iter_get_pages_alloc+0x378/0xa40 [ 1246.072653][T31750] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1246.072680][T31750] iov_iter_get_pages2+0x5e/0xa0 [ 1246.072706][T31750] __se_sys_vmsplice+0x7b5/0x1660 [ 1246.072729][T31750] ? __futex_hash+0x416/0x750 [ 1246.072765][T31750] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 1246.072789][T31750] ? __pfx_futex_wait+0x10/0x10 [ 1246.072841][T31750] ? rcu_is_watching+0x15/0xb0 [ 1246.072861][T31750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.072881][T31750] do_syscall_64+0x174/0x580 [ 1246.072907][T31750] ? trace_irq_disable+0x3b/0x140 [ 1246.072932][T31750] ? clear_bhb_loop+0x40/0x90 [ 1246.072953][T31750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.072971][T31750] RIP: 0033:0x7ff8b659ce59 [ 1246.072990][T31750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1246.073006][T31750] RSP: 002b:00007ff8b74dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1246.073029][T31750] RAX: ffffffffffffffda RBX: 00007ff8b6815fa0 RCX: 00007ff8b659ce59 [ 1246.073043][T31750] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 1246.073056][T31750] RBP: 00007ff8b6632e6f R08: 0000000000000000 R09: 0000000000000000 [ 1246.073069][T31750] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1246.073081][T31750] R13: 00007ff8b6816038 R14: 00007ff8b6815fa0 R15: 00007fffc87fd048 [ 1246.073104][T31750] [ 1246.079199][T31750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1246.766969][T16128] block nbd9: Receive control failed (result -32) [ 1246.799603][T31783] netlink: 'syz.4.16426': attribute type 1 has an invalid length. [ 1246.808198][T31783] netlink: 'syz.4.16426': attribute type 11 has an invalid length. [ 1247.016910][T31795] veth0: entered promiscuous mode [ 1247.050784][T31798] tipc: Enabling of bearer rejected, failed to enable media [ 1247.379106][T31822] netlink: 'syz.3.16436': attribute type 4 has an invalid length. [ 1247.416230][T31794] veth0: left promiscuous mode [ 1247.598281][T31827] __nla_validate_parse: 13 callbacks suppressed [ 1247.598303][T31827] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16440'. [ 1247.942628][T31846] can: request_module (can-proto-0) failed. [ 1248.014489][T31859] netlink: 260 bytes leftover after parsing attributes in process `syz.3.16445'. [ 1248.060751][T31859] netlink: 'syz.3.16445': attribute type 1 has an invalid length. [ 1248.334625][T31874] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16451'. [ 1248.402633][T31879] tipc: Enabled bearer , priority 0 [ 1248.449170][T31879] netlink: 108 bytes leftover after parsing attributes in process `syz.3.16450'. [ 1248.527352][T31880] tipc: Resetting bearer [ 1248.646433][T31879] tipc: Disabling bearer [ 1248.751870][T31896] netlink: 168 bytes leftover after parsing attributes in process `syz.4.16455'. [ 1248.847967][T31918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16460'. [ 1248.863841][T31915] pim6reg: entered allmulticast mode [ 1248.864769][T31918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16460'. [ 1248.931717][T31920] veth1_macvtap: left promiscuous mode [ 1249.010058][T31922] syzkaller0: entered promiscuous mode [ 1249.030578][T31922] syzkaller0: entered allmulticast mode [ 1249.099341][T31930] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16465'. [ 1249.283589][T31937] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1249.313250][T31937] bond0: (slave lo): refused to change device type [ 1249.419542][T31944] syzkaller0: entered promiscuous mode [ 1249.439142][T31944] syzkaller0: entered allmulticast mode [ 1249.473392][T31943] : entered promiscuous mode [ 1249.640656][T31953] syzkaller0: entered promiscuous mode [ 1249.661267][T31953] syzkaller0: entered allmulticast mode [ 1250.225958][T31982] bond2: option resend_igmp: invalid value (32767) [ 1250.245317][T31990] validate_nla: 2 callbacks suppressed [ 1250.245337][T31990] netlink: 'syz.1.16482': attribute type 2 has an invalid length. [ 1250.275451][T31982] bond2: option resend_igmp: allowed values 0 - 255 [ 1250.304944][T31982] bond2 (unregistering): Released all slaves [ 1250.500313][T31970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16475'. [ 1250.513794][T31998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16483'. [ 1250.725015][T32015] xt_hashlimit: size too large, truncated to 1048576 [ 1251.020489][T32034] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1251.076742][T32032] syzkaller0: entered promiscuous mode [ 1251.122990][T32032] syzkaller0: entered allmulticast mode [ 1251.535356][T32071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1251.700244][T32075] syzkaller0: entered promiscuous mode [ 1251.737503][T32075] syzkaller0: entered allmulticast mode [ 1252.219591][T32107] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1252.610356][T32125] lo speed is unknown, defaulting to 1000 [ 1253.011049][T32152] __nla_validate_parse: 11 callbacks suppressed [ 1253.023494][T32152] netlink: 96 bytes leftover after parsing attributes in process `syz.6.16520'. [ 1253.042012][T32152] vlan3: entered allmulticast mode [ 1253.047358][T32152] erspan0: entered allmulticast mode [ 1253.152750][T32161] lo speed is unknown, defaulting to 1000 [ 1253.395770][T32189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16529'. [ 1253.459513][T32183] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.16529'. [ 1253.472793][T32194] netlink: 28 bytes leftover after parsing attributes in process `syz.5.16532'. [ 1253.497019][T32194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16532'. [ 1253.625025][T32210] netlink: 'syz.1.16535': attribute type 12 has an invalid length. [ 1253.639711][T32210] netlink: 'syz.1.16535': attribute type 29 has an invalid length. [ 1253.654575][T32215] netlink: 56 bytes leftover after parsing attributes in process `syz.3.16536'. [ 1253.656479][T32210] netlink: 148 bytes leftover after parsing attributes in process `syz.1.16535'. [ 1253.674847][T32210] netlink: 59 bytes leftover after parsing attributes in process `syz.1.16535'. [ 1253.797256][T32215] bond0 (unregistering): Released all slaves [ 1253.830556][T32224] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16540'. [ 1253.953692][T32222] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16539'. [ 1254.138845][T32243] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1254.543988][T32276] netlink: 'syz.3.16558': attribute type 1 has an invalid length. [ 1254.545127][T32279] xt_l2tp: wrong L2TP version: 0 [ 1254.571528][T32274] netlink: 'syz.1.16555': attribute type 4 has an invalid length. [ 1255.431869][T32332] x_tables: duplicate entry at hook 2 [ 1255.566228][T32341] netlink: 'syz.1.16579': attribute type 1 has an invalid length. [ 1255.574607][T32340] netlink: 'syz.1.16579': attribute type 1 has an invalid length. [ 1255.598095][T32341] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1255.617484][T32340] bond10: (slave ip6erspan0): making interface the new active one [ 1255.637348][T32340] bond10: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1255.757457][T32347] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1255.760879][ T30] audit: type=1804 audit(1782287458.068:41): pid=32345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.16580" name="/newroot/277/cgroup.controllers" dev="tmpfs" ino=1442 res=1 errno=0 [ 1255.789647][ T30] audit: type=1800 audit(1782287458.068:42): pid=32345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.16580" name="cgroup.controllers" dev="tmpfs" ino=1442 res=0 errno=0 [ 1256.759885][T32412] bridge11: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1257.023524][T32430] syzkaller0: entered allmulticast mode [ 1257.127481][T32442] netlink: 'syz.4.16611': attribute type 1 has an invalid length. [ 1257.177172][T32442] netlink: 'syz.4.16611': attribute type 4 has an invalid length. [ 1257.224723][T32447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1257.236970][T32451] netlink: 'syz.1.16614': attribute type 14 has an invalid length. [ 1257.454588][T32464] bond0: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 1257.469237][T32464] bond0 (unregistering): Released all slaves [ 1257.508558][T32467] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1257.527670][T32476] tipc: New replicast peer: 255.255.255.255 [ 1257.539785][T32476] tipc: Enabled bearer , priority 10 [ 1257.696825][T32487] .`: (slave team0): Releasing backup interface [ 1257.718826][T32487] bridge_slave_1: left allmulticast mode [ 1257.726853][T32487] bridge_slave_1: left promiscuous mode [ 1257.735350][T32487] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.806162][T32487] bond3: (slave veth0_to_bond): Releasing backup interface [ 1257.866451][T32487] .`: (slave bond_slave_0): Releasing backup interface [ 1257.886114][T32487] team0: Port device team_slave_1 removed [ 1257.895295][T32487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1257.903584][T32487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1257.926534][T32487] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1257.959990][T32504] vlan0: entered promiscuous mode [ 1257.973319][T32514] netlink: 'syz.5.16629': attribute type 21 has an invalid length. [ 1258.014406][T32504] team0: Port device vlan0 added [ 1258.230354][T32527] pim6reg1: entered promiscuous mode [ 1258.251396][T32527] pim6reg1: entered allmulticast mode [ 1258.274402][T32527] nbd: illegal input index 2958377 [ 1258.347787][T32543] veth1_to_bond: entered allmulticast mode [ 1258.354532][T32543] __nla_validate_parse: 69 callbacks suppressed [ 1258.354552][T32543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16637'. [ 1258.425553][T32543] veth1_to_bond (unregistering): left allmulticast mode [ 1258.475707][T32543] : (slave bond_slave_1): Releasing backup interface [ 1258.651994][T31088] tipc: Node number set to 3089993470 [ 1258.681542][T32570] netlink: 72 bytes leftover after parsing attributes in process `syz.4.16646'. [ 1258.923670][T32595] xt_hashlimit: size too large, truncated to 1048576 [ 1258.949087][T32579] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16647'. [ 1259.492400][T32628] syzkaller0: entered promiscuous mode [ 1259.505598][T32628] syzkaller0: entered allmulticast mode [ 1259.590756][T32642] netlink: 'syz.3.16661': attribute type 21 has an invalid length. [ 1259.628956][T32642] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16661'. [ 1260.007434][T32638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16660'. [ 1260.028911][T32638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16660'. [ 1260.087581][T32671] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16668'. [ 1260.167355][T32672] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1260.188806][T32672] bond7: (slave lo): Enslaving as an active interface with an up link [ 1260.234611][T32672] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1260.294748][T32668] sit0: left promiscuous mode [ 1260.324756][T32679] netlink: 32 bytes leftover after parsing attributes in process `syz.3.16667'. [ 1260.339713][T32679] netlink: 32 bytes leftover after parsing attributes in process `syz.3.16667'. [ 1260.381032][T32668] 8021q: adding VLAN 0 to HW filter on device .` [ 1260.419731][T32668] 8021q: adding VLAN 0 to HW filter on device team0 [ 1260.482968][T32688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16670'. [ 1260.529472][T32668] vlan0: left promiscuous mode [ 1260.554687][T32668] macvlan0: left promiscuous mode [ 1260.596478][T32668] veth1_macvtap: entered promiscuous mode [ 1260.668018][T32668] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1261.089040][T12522] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1261.115711][T12522] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.145402][T12522] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1261.172311][T12522] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.207811][T12522] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1261.240180][T12522] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.257520][T12522] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1261.268417][T12522] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.309875][T32725] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1261.440943][T16128] block nbd10: Receive control failed (result -32) [ 1261.440943][ T3988] block nbd11: Receive control failed (result -32) [ 1261.495104][T32741] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 1261.560190][T32745] netlink: 'syz.4.16688': attribute type 8 has an invalid length. [ 1261.677986][T32757] nbd: must specify an index to disconnect [ 1261.756722][T32764] 0XD: renamed from gretap0 (while UP) [ 1261.766615][T32764] 0XD: entered allmulticast mode [ 1261.805487][T32755] netlink: 'syz.5.16692': attribute type 10 has an invalid length. [ 1261.885965][ T303] sctp: [Deprecated]: syz.6.16697 (pid 303) Use of int in max_burst socket option deprecated. [ 1261.885965][ T303] Use struct sctp_assoc_value instead [ 1262.097754][ T321] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1262.208179][T31073] IPVS: starting estimator thread 0... [ 1262.268049][ T330] IPVS: length: 239 != 24 [ 1262.311277][ T331] IPVS: using max 47 ests per chain, 112800 per kthread [ 1262.340130][ T339] netlink: 'syz.1.16710': attribute type 1 has an invalid length. [ 1262.506051][ T342] x_tables: unsorted entry at hook 2 [ 1262.506374][ T351] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 1262.537949][ T351] team1: entered promiscuous mode [ 1262.543509][ T351] team1: entered allmulticast mode [ 1262.566570][ T353] x_tables: unsorted underflow at hook 1 [ 1262.653373][ T358] tipc: New replicast peer: 255.255.255.255 [ 1262.667966][ T358] tipc: Enabled bearer , priority 10 [ 1262.721665][ T362] netlink: 'syz.3.16718': attribute type 61 has an invalid length. [ 1262.728675][ T342] bond0: entered promiscuous mode [ 1262.737337][ T342] bond_slave_0: entered promiscuous mode [ 1262.755770][ T342] bond_slave_1: entered promiscuous mode [ 1262.762033][ T342] bond4: entered promiscuous mode [ 1262.770656][ T342] batadv0: entered promiscuous mode [ 1262.778709][ T342] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 1262.840760][ T368] sctp: [Deprecated]: syz.5.16719 (pid 368) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1262.840760][ T368] Use struct sctp_sack_info instead [ 1262.897606][ T371] netlink: 'syz.5.16719': attribute type 1 has an invalid length. [ 1262.920570][ T370] xt_connbytes: Forcing CT accounting to be enabled [ 1262.954572][ T371] bond8: entered promiscuous mode [ 1262.960173][ T371] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1262.966381][ T370] xt_bpf: check failed: parse error [ 1262.994091][ T368] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1263.013917][ T368] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1263.044696][ T368] bond8: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1263.057566][ T368] bond8: (slave ip6gre1): making interface the new active one [ 1263.065779][ T368] ip6gre1: entered promiscuous mode [ 1263.074473][ T368] bond8: (slave ip6gre1): Enslaving as an active interface with an up link [ 1263.106298][ T383] netlink: 'syz.4.16724': attribute type 9 has an invalid length. [ 1263.596988][ T417] netlink: 'syz.3.16737': attribute type 58 has an invalid length. [ 1263.608317][ T417] __nla_validate_parse: 14 callbacks suppressed [ 1263.608339][ T417] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16737'. [ 1263.634935][ T420] netlink: 'syz.5.16738': attribute type 1 has an invalid length. [ 1263.662408][ T420] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1263.726684][ T425] bond7 (unregistering): Released all slaves [ 1263.781519][ T6036] tipc: Node number set to 1819403918 [ 1263.798879][ T433] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1263.897542][ T440] netlink: 164 bytes leftover after parsing attributes in process `syz.1.16742'. [ 1263.908001][ T440] netlink: 164 bytes leftover after parsing attributes in process `syz.1.16742'. [ 1263.920811][ T440] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16742'. [ 1263.931878][ T439] sit0: entered promiscuous mode [ 1263.934204][ T442] netlink: 'syz.5.16744': attribute type 1 has an invalid length. [ 1263.952982][ T439] netlink: 'syz.3.16743': attribute type 1 has an invalid length. [ 1263.961001][ T439] netlink: 1 bytes leftover after parsing attributes in process `syz.3.16743'. [ 1263.987451][ T442] bond9: entered promiscuous mode [ 1263.995245][ T442] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1264.018100][ T444] bond9: (slave bridge2): making interface the new active one [ 1264.026255][ T444] bridge2: entered promiscuous mode [ 1264.033539][ T444] bond9: (slave bridge2): Enslaving as an active interface with an up link [ 1264.173621][ T453] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1264.262275][ T459] batadv_slave_0: entered promiscuous mode [ 1264.273207][ T461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16748'. [ 1264.283078][ T459] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16746'. [ 1264.283334][ T459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1264.304575][ T459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1264.305507][ T466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16748'. [ 1264.484454][ T482] xt_hashlimit: size too large, truncated to 1048576 [ 1264.549638][ T486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16756'. [ 1264.665676][ T493] bond11: entered promiscuous mode [ 1264.673508][ T493] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1264.708972][ T489] bond11: (slave bridge4): making interface the new active one [ 1264.719049][ T489] bridge4: entered promiscuous mode [ 1264.727294][ T489] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 1264.905561][ T516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16767'. [ 1264.916057][ T516] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1265.031486][ T520] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1265.617833][ T552] tipc: Enabling of bearer rejected, already enabled [ 1266.815170][ T658] validate_nla: 3 callbacks suppressed [ 1266.815192][ T658] netlink: 'syz.5.16806': attribute type 1 has an invalid length. [ 1266.901891][ T658] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1267.003812][ T668] bond10: (slave geneve4): making interface the new active one [ 1267.023505][ T668] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 1267.038707][T12517] netdevsim netdevsim5 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 1267.095495][T12517] netdevsim netdevsim5 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 1267.120949][T12517] netdevsim netdevsim5 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 1267.147243][T12517] netdevsim netdevsim5 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 1267.276911][ T693] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1267.383807][ T709] sctp: [Deprecated]: syz.4.16818 (pid 709) Use of int in max_burst socket option. [ 1267.383807][ T709] Use struct sctp_assoc_value instead [ 1267.583171][ T719] IPv6: sit2: Disabled Multicast RS [ 1267.730830][ T737] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1267.888504][ T754] syzkaller0: entered promiscuous mode [ 1267.906614][ T754] syzkaller0: entered allmulticast mode [ 1268.102027][ T764] netlink: 'syz.4.16838': attribute type 14 has an invalid length. [ 1268.122973][ T764] netlink: 'syz.4.16838': attribute type 13 has an invalid length. [ 1268.146522][ T772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1268.491044][ T807] bridge4: entered promiscuous mode [ 1268.501759][ T807] bridge4: entered allmulticast mode [ 1268.514435][ T807] team0: Port device bridge4 added [ 1268.537550][ T812] syzkaller1: entered promiscuous mode [ 1268.543325][ T812] syzkaller1: entered allmulticast mode [ 1268.601913][ T807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1268.757438][ T827] sit0: left promiscuous mode [ 1268.789086][ T829] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 1268.846480][ T827] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 1269.017575][ T835] __nla_validate_parse: 20 callbacks suppressed [ 1269.017596][ T835] netlink: 64 bytes leftover after parsing attributes in process `syz.3.16855'. [ 1269.087527][ T844] netlink: 'syz.4.16857': attribute type 13 has an invalid length. [ 1269.097884][ T844] macsec0: entered allmulticast mode [ 1269.277654][ T31] INFO: task syz.2.15135:27093 blocked for more than 143 seconds. [ 1269.295650][ T31] Not tainted syzkaller #0 [ 1269.300921][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1269.310059][ T31] task:syz.2.15135 state:D stack:26296 pid:27093 tgid:27092 ppid:17133 task_flags:0x400140 flags:0x00080002 [ 1269.325424][ T31] Call Trace: [ 1269.329026][ T31] [ 1269.358080][ T31] __schedule+0x17d9/0x56c0 [ 1269.376645][ T31] ? kernel_text_address+0xa5/0xe0 [ 1269.389838][ T31] ? unwind_get_return_address+0x4d/0x90 [ 1269.396619][ T31] ? stack_trace_save+0xa9/0x100 [ 1269.402028][ T31] ? __pfx___schedule+0x10/0x10 [ 1269.407077][ T31] ? rcu_is_watching+0x15/0xb0 [ 1269.413172][ T31] ? rcu_is_watching+0x15/0xb0 [ 1269.418129][ T31] ? lock_release+0x4b/0x3c0 [ 1269.422990][ T31] ? rcu_is_watching+0x15/0xb0 [ 1269.427925][ T31] schedule+0x164/0x360 [ 1269.433114][ T31] schedule_preempt_disabled+0x13/0x30 [ 1269.438633][ T31] __mutex_lock+0x7bf/0x1550 [ 1269.444774][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1269.449660][ T31] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 1269.456267][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1269.463161][ T31] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 1269.468838][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 1269.475675][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1269.483208][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1269.489820][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 1269.496522][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1269.502980][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1269.507721][ T31] ? security_capable+0x7e/0x2c0 [ 1269.514563][ T31] genl_rcv_msg+0x614/0x7a0 [ 1269.519881][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1269.526423][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 1269.534927][ T31] ? __netlink_lookup+0xc6/0x8b0 [ 1269.553600][ T31] ? rcu_is_watching+0x15/0xb0 [ 1269.558500][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1269.569046][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1269.575532][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1269.580926][ T31] ? down_read+0x2be/0x330 [ 1269.586699][ T31] genl_rcv+0x28/0x40 [ 1269.590775][ T31] netlink_unicast+0x7bb/0x940 [ 1269.607483][ T31] netlink_sendmsg+0x813/0xb40 [ 1269.613634][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1269.619048][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1269.624476][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1269.629851][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1269.636710][ T31] ____sys_sendmsg+0x9b9/0xa20 [ 1269.642487][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1269.647867][ T31] ? lock_release+0x4b/0x3c0 [ 1269.652997][ T31] ? import_iovec+0x73/0xa0 [ 1269.657615][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1269.663645][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1269.669128][ T31] ? futex_wake+0x51b/0x5f0 [ 1269.675564][ T31] ? __fget_files+0x2a/0x420 [ 1269.680337][ T31] ? __fget_files+0x3a2/0x420 [ 1269.685423][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1269.690448][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1269.697403][ T31] ? rcu_is_watching+0x15/0xb0 [ 1269.703193][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.709351][ T31] do_syscall_64+0x174/0x580 [ 1269.714608][ T31] ? trace_irq_disable+0x3b/0x140 [ 1269.719755][ T31] ? clear_bhb_loop+0x40/0x90 [ 1269.726053][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.733152][ T31] RIP: 0033:0x7ffa6f99ce59 [ 1269.737663][ T31] RSP: 002b:00007ffa707e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1269.746469][ T31] RAX: ffffffffffffffda RBX: 00007ffa6fc15fa0 RCX: 00007ffa6f99ce59 [ 1269.756409][ T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003 [ 1269.765658][ T31] RBP: 00007ffa6fa32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1269.774130][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1269.784141][ T31] R13: 00007ffa6fc16038 R14: 00007ffa6fc15fa0 R15: 00007ffde6c74698 [ 1269.793485][ T31] [ 1269.796764][ T31] INFO: lockdep is turned off. [ 1269.802928][ T31] NMI backtrace for cpu 0 [ 1269.802944][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1269.802965][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1269.802977][ T31] Call Trace: [ 1269.802984][ T31] [ 1269.802993][ T31] dump_stack_lvl+0xe8/0x150 [ 1269.803017][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1269.803115][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1269.803146][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1269.803169][ T31] sys_info+0x135/0x170 [ 1269.803185][ T31] watchdog+0xfd7/0x1030 [ 1269.803212][ T31] ? watchdog+0x1c7/0x1030 [ 1269.803239][ T31] kthread+0x388/0x470 [ 1269.803257][ T31] ? __pfx_watchdog+0x10/0x10 [ 1269.803279][ T31] ? __pfx_kthread+0x10/0x10 [ 1269.803297][ T31] ret_from_fork+0x514/0xb70 [ 1269.803317][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1269.803334][ T31] ? __switch_to+0xc89/0x1420 [ 1269.803361][ T31] ? __pfx_kthread+0x10/0x10 [ 1269.803378][ T31] ret_from_fork_asm+0x1a/0x30 [ 1269.803408][ T31] [ 1269.803425][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1269.924797][ C1] NMI backtrace for cpu 1 [ 1269.924818][ C1] CPU: 1 UID: 0 PID: 12516 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 1269.924837][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1269.924847][ C1] Workqueue: krds_cp_wq#25/0 rds_connect_worker [ 1269.924966][ C1] RIP: 0010:__inet_dev_addr_type+0x402/0x560 [ 1269.925010][ C1] Code: 89 c6 31 ff 89 c6 e8 bd 61 9e f7 45 85 f6 74 1a e8 33 51 83 f7 84 c0 74 22 e8 6a 5d 9e f7 49 be 00 00 00 00 00 fc ff df eb 76 59 5d 9e f7 49 be 00 00 00 00 00 fc ff df eb 65 e8 a8 61 80 01 [ 1269.925024][ C1] RSP: 0018:ffffc9000510f620 EFLAGS: 00000246 [ 1269.925047][ C1] RAX: ffffffff8a2798a3 RBX: 0000000000000001 RCX: 0000000000000000 [ 1269.925062][ C1] RDX: ffff8880aa67be00 RSI: 0000000000000000 RDI: 0000000000000000 [ 1269.925072][ C1] RBP: ffffc9000510f778 R08: ffffffff903114f7 R09: 1ffffffff206229e [ 1269.925084][ C1] R10: dffffc0000000000 R11: fffffbfff206229f R12: ffff888097c95410 [ 1269.925095][ C1] R13: ffff888097c95400 R14: 0000000000000000 R15: 1ffff92000a21ec8 [ 1269.925106][ C1] FS: 0000000000000000(0000) GS:ffff88812537b000(0000) knlGS:0000000000000000 [ 1269.925119][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1269.925131][ C1] CR2: 00007ff8b749aff8 CR3: 000000007516a000 CR4: 00000000003526f0 [ 1269.925147][ C1] Call Trace: [ 1269.925154][ C1] [ 1269.925163][ C1] ? __inet_dev_addr_type+0x159/0x560 [ 1269.925180][ C1] ? __pfx___inet_dev_addr_type+0x10/0x10 [ 1269.925206][ C1] ? __sanitizer_cov_trace_const_cmp4+0x36/0x90 [ 1269.925226][ C1] ? ret_from_fork+0x514/0xb70 [ 1269.925240][ C1] ? l3mdev_fib_table_by_index+0x7f/0x2d0 [ 1269.925308][ C1] __inet_bind+0x132/0xaa0 [ 1269.925345][ C1] ? kernel_bind+0xf0/0x1c0 [ 1269.925363][ C1] kernel_bind+0x13e/0x1c0 [ 1269.925379][ C1] ? __pfx_kernel_bind+0x10/0x10 [ 1269.925403][ C1] rds_tcp_conn_path_connect+0x53b/0x920 [ 1269.925490][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 1269.925513][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1269.925535][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 1269.925553][ C1] ? rcu_is_watching+0x15/0xb0 [ 1269.925569][ C1] ? lock_acquire+0x5f/0x350 [ 1269.925592][ C1] rds_connect_worker+0x1d8/0x290 [ 1269.925612][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 1269.925630][ C1] process_scheduled_works+0xa8e/0x14e0 [ 1269.925659][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1269.925677][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1269.925697][ C1] ? assign_work+0x3cf/0x5d0 [ 1269.925717][ C1] worker_thread+0xa47/0xfb0 [ 1269.925746][ C1] kthread+0x388/0x470 [ 1269.925761][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1269.925778][ C1] ? __pfx_kthread+0x10/0x10 [ 1269.925793][ C1] ret_from_fork+0x514/0xb70 [ 1269.925809][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1269.925823][ C1] ? __switch_to+0xc89/0x1420 [ 1269.925845][ C1] ? __pfx_kthread+0x10/0x10 [ 1269.925859][ C1] ret_from_fork_asm+0x1a/0x30 [ 1269.925883][ C1] [ 1270.244877][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1270.251874][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1270.261043][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1270.271121][ T31] Call Trace: [ 1270.274445][ T31] [ 1270.277393][ T31] vpanic+0x56c/0xa60 [ 1270.281399][ T31] ? __pfx___schedule+0x10/0x10 [ 1270.286278][ T31] ? __pfx_vpanic+0x10/0x10 [ 1270.290801][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1270.296963][ T31] panic+0xc5/0xd0 [ 1270.300968][ T31] ? __pfx_panic+0x10/0x10 [ 1270.305392][ T31] ? preempt_schedule_common+0x82/0xd0 [ 1270.310861][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 1270.316299][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1270.322479][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1270.328651][ T31] watchdog+0x1030/0x1030 [ 1270.333027][ T31] ? watchdog+0x1c7/0x1030 [ 1270.337453][ T31] kthread+0x388/0x470 [ 1270.341532][ T31] ? __pfx_watchdog+0x10/0x10 [ 1270.346235][ T31] ? __pfx_kthread+0x10/0x10 [ 1270.350825][ T31] ret_from_fork+0x514/0xb70 [ 1270.355420][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1270.360543][ T31] ? __switch_to+0xc89/0x1420 [ 1270.365230][ T31] ? __pfx_kthread+0x10/0x10 [ 1270.369852][ T31] ret_from_fork_asm+0x1a/0x30 [ 1270.374626][ T31] [ 1270.378021][ T31] Kernel Offset: disabled [ 1270.382343][ T31] Rebooting in 86400 seconds..