last executing test programs: 3m53.34826582s ago: executing program 3 (id=1132): r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0xb, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20008824}, 0x4800) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000580)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000640)={r2, r1, 0x0, r2}, 0x10) (async, rerun: 32) getsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000680), &(0x7f00000006c0)=0x4) (rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d23210000000000000000084"], 0x4a) 2m45.731852456s ago: executing program 3 (id=1135): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0xc, [@decl_tag={0xe, 0x0, 0x0, 0x11, 0x5, 0x3}, @const={0x10}, @struct={0xa, 0x6, 0x0, 0x4, 0x1, 0xe361, [{0x9, 0x4}, {0x2, 0x5, 0xc}, {0xe, 0x2, 0x5}, {0x1, 0x3, 0xf6}, {0x7, 0x3}, {0x0, 0x1, 0x4}]}, @var={0xd, 0x0, 0x0, 0xe, 0x2}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x1}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x4, 0x2}, @float={0x2, 0x0, 0x0, 0x10, 0xc}, @typedef={0x3, 0x0, 0x0, 0x8, 0x3}, @enum={0xf, 0x1, 0x0, 0x6, 0x4, [{0x10, 0x3fb3}]}]}, {0x0, [0x30, 0x2e, 0x0, 0x51, 0x30, 0x5f, 0x2e, 0x0, 0x0, 0x30]}}, &(0x7f0000000880)=""/174, 0xf8, 0xae, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0x19, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x4, &(0x7f0000000580)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) write(r3, &(0x7f0000000340), 0x11000) vmsplice(r3, &(0x7f0000000280)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000000)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000080)=[{{&(0x7f00000003c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000600)=[{&(0x7f00000006c0)=""/100, 0x365}, {&(0x7f0000000780)=""/85, 0x7c}, {&(0x7f0000000e40)=""/4096, 0x197}, {&(0x7f0000001e40)=""/106, 0x645}, {&(0x7f0000001ec0)=""/73, 0x1b}, {&(0x7f0000001f40)=""/77, 0x14}, {&(0x7f0000001fc0)=""/154, 0x21}, {&(0x7f0000002080)=""/17, 0x1d8}], 0x21, &(0x7f00000020c0)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000002180)={0x77359400}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f00000021c0)={@mcast2, 0x10}) 2m45.710597347s ago: executing program 3 (id=1146): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x38}}, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x40d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, 0x69b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="dd6da0a49ebc8b9d2dbe0c34f82e176968521d6dc6717cf31a6f9a9815204ac00510fd27176798c69d0167eb3868851d379ac289", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x10, 0x8, &(0x7f0000000b80)=ANY=[@ANYBLOB="beaa00000000000079ba0800000000001812", @ANYRES32, @ANYBLOB="0000000000000000bf03000000000000850000006b000000b70000000000000095"], 0x0, 0xe, 0x0, 0x0, 0x41000}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x5, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x1, 0x18}, 0xc) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xdb5a, '\x00', r2, 0xffffffffffffffff, 0x1, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x1a, &(0x7f0000000fc0)=ANY=[@ANYBLOB="89422000fcffffffb7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000900)='syzkaller\x00', 0x6, 0xc8, &(0x7f0000000940)=""/200, 0x41100, 0x14, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000e80)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r9, r10, 0xffffffffffffffff, r11], &(0x7f0000000ec0)=[{0x1, 0x4, 0x1, 0x5}, {0x3, 0x5, 0x4, 0x1}], 0x10, 0x4}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x68, 0x16, 0x107, 0x70bd2e, 0x25dfdbfb, {0x11, 0x7c}, [@nested={0x53, 0x1, 0x0, 0x1, [@generic="c79c46eaf14d3be87313dab56b70cb432ccd897fc2bab0999444110b0321a05b3803dffcec7670673dc550cba8c038c18e1eab7b546b29306631f70709c1d0247f85a31c03d421353d60249be3598e"]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048011}, 0x4880) r12 = socket$kcm(0x10, 0x2, 0x0) r13 = socket(0x1, 0x803, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r15], 0x54}}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000700)={"2be645007fb88e42106a28b368870cbb", 0x0, 0x0, {0x976, 0x4}, {0x0, 0x9}, 0x0, [0x2, 0x61cb, 0xffffffffffffffff, 0xe3f, 0x8, 0x6, 0x8, 0xd1, 0x8, 0x7, 0x7fffffffffffffff, 0xbc2a, 0x3, 0x1, 0x6, 0x4bd8]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r8, 0x50009418, &(0x7f0000001180)={{r12}, r16, 0x10, @inherit={0x60, &(0x7f0000000800)={0x0, 0x3, 0xb9, 0x8, {0x0, 0x8000000000000001, 0x4ea, 0x0, 0xffffffffffffffff}, [0x6c1b, 0x8, 0x5]}}, @subvolid=0xe}) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 2m45.157544961s ago: executing program 3 (id=1156): r0 = socket(0x2b, 0x80801, 0x1) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000600)='bridge0\x00') r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000880)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000008c0)=0x14) setsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r1, 0x84, 0x84, &(0x7f0000000900)={r2, @in={{0x2, 0x4e20, @empty}}, 0x4e21}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000640)={@private0, 0x0}, &(0x7f0000000680)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=@deltclass={0x68, 0x29, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0xa}, {0xd, 0xb}, {0x1, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x8a}}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x51, 0x4}}, @TCA_RATE={0x6, 0x5, {0x7, 0x6}}, @TCA_RATE={0x6, 0x5, {0x2, 0x8}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000040) sendmmsg(r5, &(0x7f0000000600), 0x40000000000009f, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {0xfff1, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@deltfilter={0x34, 0x2d, 0x1, 0x78bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r9, {0xb, 0xfff2}, {0xf, 0xffff}, {0x10, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x24044010) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket$packet(0x11, 0x5, 0x300) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtfilter={0xbc, 0x2c, 0xd27, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x0, 0x4}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x20000000, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xee, 0xfe}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="dbaa00fe50000000711016000000000018160000", @ANYRES32=r3, @ANYBLOB="00011c00000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 2m44.327257339s ago: executing program 3 (id=1163): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x19}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0x0, 0x1}}]}}]}, 0x44}}, 0x4084) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', 0x1}) r4 = socket$inet(0x2, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000540)='syzkaller0\x00', 0xb) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x2, 0x4e21, @multicast2}, 0x10) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$BTRFS_IOC_SCRUB_CANCEL(r5, 0x941c, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="55116878cec666ce40016ac603fad0edf22b05cc9ab62e6a8c2e482e4f6e5e2d2b00"/49, 0x31}], 0x1, &(0x7f0000000100)=[@ip_tos_int={{0x2b, 0x0, 0x1, 0x101}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}], 0x30}, 0x8000) openat$tun(0xffffffffffffff9c, 0x0, 0x42082, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NILFS_IOCTL_GET_VINFO(r8, 0xc0186e86, &(0x7f00000005c0)={&(0x7f0000000600)=[{0x3, 0x720a, 0x8}, {0x100, 0x5, 0x2, 0x9}, {0x1, 0x101, 0xf, 0x7ff}, {0x2, 0xb22, 0x3, 0x5}, {0x4, 0x4, 0xf2, 0x5}, {0xfffffffffffffffe, 0x0, 0x4, 0x3}], 0x6, 0x20, 0x5}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x1e0f}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xb}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xd}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r7, 0x8914, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000900)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000940), 0x56) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000980)={'ip_vti0\x00'}) 2m43.903667653s ago: executing program 3 (id=1173): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x20040051) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x14, 0x0, 0x6, 0x401}, 0x14}}, 0x0) 2m30.9068271s ago: executing program 4 (id=1306): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4073, 0xff0, 0x1, 0x0}, &(0x7f0000001700)=0x53) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000000)=0x10, 0x4) bind$inet(r1, &(0x7f00000006c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000440)=0x200, 0x5f) sendmmsg$inet(r1, &(0x7f00000051c0)=[{{&(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}], 0x1, 0x4000004) 2m30.778797016s ago: executing program 4 (id=1307): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="010b000000000000000011"], 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRES32=r2], 0x38}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000014) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f0000000280)={0x1d, r8}, 0x10) sendmsg$can_bcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="0500"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="050000"], 0x48}}, 0x4) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000200)=[{0x7}, {0x6}]}, 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000080)="9364ce1c76bc5e7255070800", 0x10) 2m30.693300903s ago: executing program 4 (id=1309): syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x1c, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x42, 0x0, 0x0, 0x0, {[@nop, @exp_fastopen={0xfe, 0x4}, @nop]}}}}}}}}, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, r3, 0x5, 0xfffffffd, 0x2, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4810) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES8=r1, @ANYBLOB="8b04000200060008000300"/25], 0x40}}, 0x0) (rerun: 32) 2m30.5356497s ago: executing program 4 (id=1311): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000f7ac3cb87e8aae883264e872f920a6181a4d4a87f90262fb17ca57b924236a72219a0871f4eddf61a9f1f78002ac83cc56113e4baeee4932c992401fa71efd9569924d946c99c98da3", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095", @ANYRESHEX=r2], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) (async) listen(r0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) socket$kcm(0x29, 0x2, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000f7ac3cb87e8aae883264e872f920a6181a4d4a87f90262fb17ca57b924236a72219a0871f4eddf61a9f1f78002ac83cc56113e4baeee4932c992401fa71efd9569924d946c99c98da3", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095", @ANYRESHEX=r2], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 2m30.311541311s ago: executing program 4 (id=1315): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="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"], 0x270}}, 0x0) sendmmsg(r2, &(0x7f0000000440), 0x0, 0xfc) (async) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='devices.list\x00', 0x0, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) (async) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r7, 0x89eb, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0x134, r6, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xb, 0x77}}}}, [@NL80211_ATTR_FRAME_MATCH={0x114, 0x5b, "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"}]}, 0x134}}, 0x640080d1) (async) syz_emit_ethernet(0x20, &(0x7f0000000040)={@multicast, @remote, @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, "0f", "b30800", 0x8828, "ed2810b6294bab4e2bbd"}}}}}, 0x0) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m30.048846946s ago: executing program 4 (id=1317): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000002700090025bd7800fddbdf25070000001d3bb34670f9f0f31fa023ad6d1a1cf06bb1353e8762e09c5cbffcaaddf3c845cfd5fe1b151b5d921d28fa7efa00fa16525c10d5fbec20c4630b87c006f2e9920f4bf8dd3cceb6ae7e498080de1d01690b6dd5a7df577eb816376420b6491db1d5f613c8472d6836b0b7bdff3228dbcc3d5d5e04fac7655dc04f55057905dd2ebe4dd4"], 0x14}}, 0x4000880) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x80, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}, @local, 0x0, 0x7800, 0x4, 0x7}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="31032cbd7000fbdbdf250b00000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0xc0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x0, 0x96, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x38, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000780)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000840)={'gre0\x00', &(0x7f00000007c0)={'erspan0\x00', 0x0, 0x10, 0x8000, 0x3, 0x7, {{0xa, 0x4, 0x2, 0x8, 0x28, 0x66, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@noop, @noop, @noop, @rr={0x7, 0xf, 0xa4, [@broadcast, @broadcast, @remote]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000980)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x94, r1, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00U\a', 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0xc001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x7ffe}}}}}}}, 0x0) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r11, &(0x7f0000000000)={0x1a, 0x7, 0x7, 0xf7, 0x10, 0x6, @random="2017f2c71cc2"}, 0x10) sendmsg$NFC_CMD_DISABLE_SE(r9, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x14, r10, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20044110}, 0x20000010) 2m27.937611021s ago: executing program 32 (id=1173): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x20040051) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x14, 0x0, 0x6, 0x401}, 0x14}}, 0x0) 2m14.871766951s ago: executing program 33 (id=1317): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000002700090025bd7800fddbdf25070000001d3bb34670f9f0f31fa023ad6d1a1cf06bb1353e8762e09c5cbffcaaddf3c845cfd5fe1b151b5d921d28fa7efa00fa16525c10d5fbec20c4630b87c006f2e9920f4bf8dd3cceb6ae7e498080de1d01690b6dd5a7df577eb816376420b6491db1d5f613c8472d6836b0b7bdff3228dbcc3d5d5e04fac7655dc04f55057905dd2ebe4dd4"], 0x14}}, 0x4000880) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x80, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}, @local, 0x0, 0x7800, 0x4, 0x7}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="31032cbd7000fbdbdf250b00000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0xc0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x0, 0x96, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x38, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000780)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000840)={'gre0\x00', &(0x7f00000007c0)={'erspan0\x00', 0x0, 0x10, 0x8000, 0x3, 0x7, {{0xa, 0x4, 0x2, 0x8, 0x28, 0x66, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@noop, @noop, @noop, @rr={0x7, 0xf, 0xa4, [@broadcast, @broadcast, @remote]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000980)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x94, r1, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00U\a', 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0xc001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x7ffe}}}}}}}, 0x0) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r11, &(0x7f0000000000)={0x1a, 0x7, 0x7, 0xf7, 0x10, 0x6, @random="2017f2c71cc2"}, 0x10) sendmsg$NFC_CMD_DISABLE_SE(r9, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x14, r10, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20044110}, 0x20000010) 3.640043798s ago: executing program 1 (id=1869): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3.52493473s ago: executing program 5 (id=1871): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket(0x1e, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000740)=@gcm_256={{0x304}, "a3d46c6d5f4cedff", "ddfe05063dde6d08d6faa9d283c5ef6ad4f3f267190891749a9c34c0c4efebea", "394566e5", "a5010cebb96de47e"}, 0x38) (async, rerun: 64) recvmsg$can_bcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x40) (async, rerun: 64) connect$tipc(r1, &(0x7f0000000880)=@id, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0x0) shutdown(r1, 0x2) (async) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000600)={0x2, 0x4e22, @multicast1}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x10, 0x1c, &(0x7f0000000a40)=ANY=[@ANYRES16=r4, @ANYRES8=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf0000000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000a}, 0x94) sendto$inet(r0, &(0x7f0000000400)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000005c0)='nv', 0x2) recvfrom$inet(r0, &(0x7f0000000600), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) (async, rerun: 64) r6 = accept4$alg(r5, 0x0, 0x0, 0x80000) (rerun: 64) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000006c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) recvmsg(r6, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x40000002) (async, rerun: 32) sendmmsg$alg(r6, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040}], 0x1, 0x40) (async, rerun: 32) shutdown(r6, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) r8 = socket$kcm(0x2, 0xa, 0x2) (async) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000b80)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r9, &(0x7f0000000bc0)='io.max\x00', 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', @link_local}) (async) recvmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001800)=""/4128, 0x1020}, {&(0x7f0000002b80)=""/4094, 0xffe}, {&(0x7f0000000280)=""/242, 0xf2}, {&(0x7f00000001c0)=""/180, 0xb4}, {&(0x7f0000000040)=""/100, 0x64}], 0x5}, 0x22) 3.359018901s ago: executing program 1 (id=1875): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x568, 0x3c8, 0x12, 0x600, 0x0, 0x202, 0x498, 0x2e8, 0x2e8, 0x498, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00', {0xff}}, 0x0, 0x398, 0x3c8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa0318236000000c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b50700", 0x2}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x3f, 0x0, [{0x8, 0xb, 0x7}, {0x1, 0x4, 0x80, 0x2}, {0x9, 0x4, 0xf8, 0xfffffff5}, {0x3, 0x8d, 0x5, 0xfffffc93}, {0x3, 0x0, 0x0, 0x4}, {0xa, 0x60, 0xee, 0xb}, {0x81, 0x0, 0xf3, 0x100}, {0x0, 0xff, 0x81, 0xed65}, {0x1bd4, 0x0, 0x6, 0xa}, {0x800, 0x1, 0xf1, 0x1}, {0x8000, 0x82, 0x9, 0x3}, {0x617, 0x9, 0xb9, 0x864}, {0x2, 0x5, 0x10, 0x1}, {0xdb8b, 0xb, 0x9, 0x2}, {0x8, 0x40, 0x8}, {0xfff1, 0x2, 0x5, 0x2}, {0x10, 0xc7, 0x2, 0x8}, {0x6, 0x0, 0xd, 0x80}, {0x95f1, 0x8, 0x2, 0x600000}, {0x1, 0x2f, 0xfb, 0x6}, {0x6, 0x4c, 0xfc, 0x80}, {0x4c24, 0x83, 0x7, 0xcbf4d91}, {0x3, 0x7, 0x9, 0xc9}, {0x3, 0x2, 0x7, 0x7fff}, {0x9, 0x6, 0x3, 0x6a9}, {0x3, 0x3, 0x10, 0x7}, {0x400, 0x1, 0x7, 0x8000}, {0x5a8a, 0x3, 0x5, 0x8}, {0x9d5, 0xff, 0xb, 0xedc6}, {0x9, 0xc, 0xfa, 0x1}, {0x2, 0x9, 0xae, 0xb478}, {0x5, 0x9, 0x0, 0x3}, {0x7fff, 0xd, 0x2, 0x9}, {0x1, 0x96, 0x5, 0xfffffffe}, {0x4, 0xeb, 0x10}, {0x8, 0x4, 0x0, 0x5}, {0x9, 0x0, 0xd, 0x4}, {0x6, 0xd6, 0xe, 0x3}, {0x5, 0xc, 0xc, 0x3}, {0x0, 0x6, 0x3, 0x3}, {0xd90, 0x2, 0x0, 0x1}, {0x2, 0xfd, 0x7f, 0x400000}, {0xaa0, 0xc, 0xff}, {0x7, 0x9, 0x1, 0xa6c}, {0x8, 0x9, 0x3, 0x5}, {0x7db0, 0xf6, 0x4, 0x6}, {0x7, 0x3, 0x8, 0xfffff6d9}, {0x8e35, 0x0, 0x5, 0x3ff}, {0xcfa6, 0x9, 0x9, 0x7}, {0x4be, 0x7, 0x1, 0x3ff}, {0x16bd, 0xff, 0xa, 0x47c}, {0xd8b, 0x3, 0x6, 0xd635}, {0x5, 0x3, 0x0, 0x6}, {0x2, 0x9, 0x5, 0x49}, {0x8, 0x3, 0x31, 0x3de}, {0xaa7, 0x0, 0xff, 0xfffffc4a}, {0x400, 0x81, 0xc, 0x1}, {0x1, 0x9, 0x4, 0x81}, {0x30, 0x6, 0x9, 0x6}, {0x8, 0x81, 0xd, 0x149}, {0x7f, 0x7, 0x3, 0x59b}, {0x9, 0x1d, 0x7, 0x3}, {0xf, 0x4d, 0x1, 0x6}, {0x6, 0x3, 0x1, 0xfffffffb}], {0x8}}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x74}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x46, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffd}, 0x5}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_PARMS={0x0, 0x2, {{0x0, 0x0, 0x0, 0xc5, 0x2}, 0x4}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x7c}}, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x7, @loopback, 0x4}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "ad8efa05fd9614ff"}, 0x28) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000c40)={0x2, 0x4001, @remote}, 0x10) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f0000000c80)=0x47a, 0x4) (async) poll(&(0x7f00000009c0)=[{r4, 0xa200}], 0x1, 0x3) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x5, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x42) (async, rerun: 64) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) (rerun: 64) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x8000}, 0x1c) socket(0x1, 0x5, 0x6) listen(r1, 0x7c2) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000b40)=0x4, 0x4) (async, rerun: 64) sendmsg$netlink(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c00)=ANY=[@ANYBLOB="1c00000022000106000200ea6356b50000000000000000000000aa"], 0x1c}], 0x1}, 0x0) (async, rerun: 64) accept$inet6(r1, 0x0, &(0x7f00000000c0)) (async) syz_emit_ethernet(0x46, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x38, 0x4000, 0x0, 0x4, 0x6, 0x0, @empty, @empty}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xf5b439e5fa041319, 0xc3, 0x0, 0x0, {[@fastopen={0x22, 0xf, "dd8ca2c85cf4816b9545c7dc65"}]}}}}}}}, 0x0) 3.30819083s ago: executing program 0 (id=1876): socket$netlink(0x10, 0x3, 0xc) (async) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000003c0)) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000003c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f00000004c0)=0x8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000500)=0x4) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)="00214500002800000000400600000a0000010a000002005000500000000100000001501003e800000000", 0x2a}], 0x1, 0x0, 0x0) pwritev(r1, &(0x7f00000005c0)=[{&(0x7f0000000600)="00214500002800004000400600000a0000010a000002005000500000000100000001501003e800000000", 0x2a}], 0x1, 0x4, 0xfffffffd) (async) pwritev(r1, &(0x7f00000005c0)=[{&(0x7f0000000600)="00214500002800004000400600000a0000010a000002005000500000000100000001501003e800000000", 0x2a}], 0x1, 0x4, 0xfffffffd) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r3) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000840)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt(r5, 0x84, 0x7f, &(0x7f00000008c0)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000900), 0x4) recvmsg(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000054000180060001000a00000006000200110000001400030000000000000000000000000000000001060004001f900000070006007272000008000800000000000c00070000000000000000000800090080"], 0x68}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000054000180060001000a00000006000200110000001400030000000000000000000000000000000001060004001f900000070006007272000008000800000000000c00070000000000000000000800090080"], 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r4, @ANYBLOB="0100000000000000d9eb0325000030000180060001000a00000006000200110000001400030000000000000000000000000000000001060004001f90"], 0x8c}}, 0x24000884) (async) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r4, @ANYBLOB="0100000000000000d9eb0325000030000180060001000a00000006000200110000001400030000000000000000000000000000000001060004001f90"], 0x8c}}, 0x24000884) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x20, 0x3, &(0x7f0000000700)=@framed, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000007c0)={r7, r6, 0x4, r6}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='memory.events\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000840)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x1ff}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x800}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 2.917201793s ago: executing program 2 (id=1877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000006c0)={0x0, 0x9002}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000700)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb08004500005c000040020511"], 0x0) syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="0180c20000030180c20000000800452100240000e0000111"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) pread64(r0, &(0x7f0000000680)=""/27, 0x1b, 0xa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002b00)={0x3, 0x8, &(0x7f0000002bc0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000003c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000003c80)={@cgroup=r4, r4, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003cc0)={@fallback=r4, 0x2f, 0x0, 0x0, &(0x7f0000003d00)=[0x0], 0x1, 0x0, &(0x7f0000003d40), 0x0, 0x0}, 0x40) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000002a80)={{r0, &(0x7f0000000140)='syz1\x00', 0x800, &(0x7f0000000180)={@_ha_fsid={[0xf2a, 0xfffffff7]}, {0x1000, 0x3, 0x5, 0x9}}, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x6}, 0x6, &(0x7f00000029c0)=[{0x1, 0xa59f, &(0x7f0000000340)='syz1\x00', &(0x7f00000003c0)="309bc0ecd01676e1d6c847995fe2028b7312937e46f724e812fc4b05", 0x1c, 0x10}, {0x1, 0x4, &(0x7f0000000440)='syz1\x00', &(0x7f0000000480)="9c9f73a5eac8c14c84daaeadde5877bf8bc1e698b725ac3e251ba1036fdbb5789f8e82ba2fe01c5b464395e2c8f750be9b0c9493274eb47e699ba7a3641dddfaac2968fb58112940e0ebd420e1d4fdc09f1e9713eedcc89caeba38f8926e026cf87cce92882c571e9095f86370f30ea0f721f199d440496db271d3ce3a5330b8f58a56b613e6b93f4894c7ccb1ea0c1663e2f3ba82999b05194acfbc09467e9ade494b4b0bda094af5bcf1f9df5f7d23559e80b8", 0xb4, 0x12}, {0x3, 0x80000001, &(0x7f0000000540)='syz1\x00', &(0x7f0000000580)="3aedb8b76958672c36e6003d85b2ca809805665e3a5c6f40463783953df342beb083a08e08d30c2bc9537b49755b2c8c7a1487882edfbea31e62faded4d1ca6853fe11b1971598fa87da2b82b52c7e0ab8330ab115bf4a9c6b28ee914344b358abb362c43433ee9225f6e31197cbb619a30d0d9c8b355544d168d5b1fe580757bb4740473ab2bbeeb3c86ea3f6ca03a30ae2c041a49a", 0x96, 0x20}, {0x2, 0xffff687d, &(0x7f0000000640)='\'\xf4\x00', &(0x7f0000000900)="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", 0x1000, 0x8}, {0x1, 0x1, &(0x7f0000001900)='.\x00', &(0x7f0000001940)="6436223da4d852ff41", 0x9, 0x30}, {0x3, 0x40000, &(0x7f0000001980)='syz1\x00', &(0x7f00000019c0)="d37bf86abac1bf135d2999fae4b3777a11b40581fb2c0bb328a72bb13e7edbda4f53ef84ff48a30072d98298600b177e4dcde92519a9a37cf4730e30e20a7811ec5b43f505fae29030017a06e84075256e19fcfd9687bb0f551b2c892edbfb3f9e25617dc07228cad0695b767428a96724547ce52720a2d58d3bdd49130e708805d47c49442879e5db2e5374b54a473d915f8674a6ba2853441851f90dbd61200c22bee48621217f41d4a3290531bc7fa77397d77a098a9d4f2df8f28b6af0476fc1796d54b4a5feb3d91dde4d1be8577e2185926592149918be928ac0235d9aa38cf45b2eb18a794473c63dedbf472ca10e62692fd142547d62d59d016bc7cbe1f40322469b95cede05de346d25c616ad57135fd63c2cf9dbbaf8d1511ae7b3ba3b94e8905864d79f10b1ef3b23aa6ef7f6b171db9e79bd974096e690bb1e1b4c47387bc45db411a6eeab51f533375bf12b078632e91555f276b6f1e3433de6f0768bbc8c061093dea4849f8ebd131631d15cf19ae5189fe700a63b6086d4a7c1c50bc261a289b518f30b6a8611017a47f4b43d859c26be4336da306a80387f4be6ac6d974e5dc265c505ee9939f31ef0f3b4c6cd03535c2e5135a4a4838b997b17741849056be73f4c353ccd3de0751dc5910c14a3ba893c2fff30daafafa2df61af507473bd0870c3d31c37b9604c758e763a22ad7e8d70f39354eddb427c8f72b770ca0c31f579de2f48bd2efa54302147ede8cf312fb3eb79c67c950374176f105952d9396fce3a0cb4752537d50fe18589f1f58f871443e804ee7c786941d20ef3b24601e531b201db61bdc165a5232c464f1b68940619b80f399bf60bd7e995c248f1fc727e8b709aa45abe4e9bf6f886e998b9393a0955c21d6a97626921555b3a3de58a786a98074677042275aaeb256b041f7e292624ed74fe23edd58ae9ba38672c56c0bd3cc270e0a5a69848e343f5535db3dd914e33ca9578924452707538f6ce24c589c7a9cc4deaafeef8fd9b38ebdaf8231d95494b3dc5e549990fd6358e8995b78fa3b57b22ed410266d5560a9cc60121c1bde1d998d96d6e3473fd5b442dc061131c9885aa5ae9ef264a327a54a9812371d0bbb2ae756a16a98e9ba28dcee509d1cac7e164ed81969c0275eb6673512e60c5cdd7d2c0da62033db43b7c6fd3fadb81d5c335a81a78a43b3ec5f59a7f47064f02462988a35aa84673e1e5e94799e54e253500b1a362ea486cff74ead82c775dc2b58c0d788a2fde89de4e6f5949ecf990e6c8d88f591b9231fab3fb7dcb0f5029c26493516aad25b0822015c66dd4771a21ac5a1419dd111ba34dbc1fcc76ae1f06adc7961d2305704905e63c576130ddf0ddabaa63a0440b5a5195b6246cc4282fa1f4ab74faba5e3ec2a1f3eb2f881c5b4cb70ddafdd794735b4dcccc92c00e35b4a13827aed36da5685e2bc626af571acdb7ca6023fa4001aea05b1297b8c11c1044d601643e9437e53ce9cd59ae9df893239330a8b6a33f5c170a150802a5769007cce246ed76e9a86fe315027cfc86381e3569d93d6062b909dfc68e2f6fb105b2388d2f14054bf7eb145d774e0d30417eb8c4a1952e4213149c3312abcabb3874c91373439a4638e4b913392bd2e7ec621c5a10b8d07e6dd5849c32f0e70d5f311a62680f4577fb992c2fccebb2e684ca397596f375cbebb41ce025e3b1b517b831feae9f590c9fc03baa3c10537ac4fc628c15a9ee08033e2046ad244e47884015cbb9fc7e4940dc0d20bd730aa034c46956601f26635d40ca19101cfd1a7e3a8d97c3b710fc9fb10d89085430eeda5a3a810af1c8c0021c3cbc155a7aec925ffc1cd1983236cfd265e5d940850e06bf32cffeff777f12dd5f0662a2f9dbbe796d2d3f7feb32c8f1ce9ab8bd7ec764d20933b89cf812afaa90a5d2e3569560a68d69dcd699a48f7a6bf3e327b4190cefa25fd7628e5af5780e852e3201bca6ac9462533d37bc10f81d6efdd98d2fa8b90b6515e92f01b9891319d80603a5a7c6c42097c4f34ced41d05f1e07b41db67aaabe9da6d53a127be0337fcf32dc6e2724e1bc09d55ab4324d012e4b18b166bb1a1b471b9ecef777ecb308ffc6df873d86916b9e883d785c880c3f3e0b161f1899315eeaf63244bea81d71e6366f34862e177b10a1467924ad9f912a3ea97493536aa8df5b5eb9be7d8338285bdeb571775d867b3bcea63e749eedf24b57983dc39c60ddf384cb85f7d2a902702602b1342c895d3e392105c88e8e7ffd4592cb536b05d4f2467f95bd605ac6f232699df9b70625416071db70b75429fe234d2a06b0641dd74844ea8c02aca443c55ee3f0069d6c9a7497de456833cb2b94e03adc3c18f67c93d31a0e2670a3501e36759b52538cd2d8719d9f1696d48d3bc4dd2f9d5df726ad56cd085f8e8eb9bad0ee07d9d3a3f2cc2626d858828d00735a27ebc677ea4ce86e516660acf90651262fce8e5fe261d7b2b08a25dedbe6b241a497974a3c1df613fcf9bafc264b6a483a7a0140a362f1cb71ee750823cdba3a6dfcc40af1db8cfb9504d38342df5661a691020a02ecfb1ef569ba948ba220db17fd8c0775833e0dc68421c33c3ad397ae087c98df263360d9a6b445b4a2a5ea6c07944cb0c19c7aec1fd9ab8c997c7f2063162315d091f88d1fc6b58bb5cd8ca31e04a9cfe5447dad988611ce1691834947d8489753a71baad0664331b3498491b2ef0615ebac51f6e4a80b2ca6e90d4d671cbb04284585a2b5c6e3ef6ab4f040a853ee4b9f8282014271f9ec69ede151470c74f79bb528c1c1ec8643a7c5a9724ddf3c62fde74535ac068b8349a720ee893e04afa65ce18cbf64393a29af0a3295e4778ee31a61c6ca632ce2808e7905c42e5b3d880b37e35c17c2b14402e5f2f818a816dd746daca46e443aff3be15f4fb8cedf4b8fbf4897331e9bf446117cc2d81da9d0e3730aa871b95b6b2a5d62a9692b90b2fc9a95d3c460ce535aec31df66678e116af208f6179b7b24d62c198383a4edf73ac0288bb103ea350e10d38a0cf57e738a50761157ef11696a3e0301a47fe49e8b83f14c86795c26afce46e5a8b53b1b1f2d127c7968b357b6fbb9be3c4d454f0db21a857327097239b460b96df0ae4aa8db43020f8dd621d451e9f8af7830ac105ef3b9979bf80fb618e802ab294b3fe0a0b4c46d91ca0806a89a79eb4bd6d694c58b9de0d2b61829e1fc2ba13581437a77efb230078a586025a584e9704a6754b800dc6037b91e456ca9a3222682ebded94043eba57b6b14f1eccccbbb9ae3049b450427fb45ae5a63cd25c6a31ac8bae026a9442c25ec1a76e00a21bb7e808394fe30874ca00daccff4f9f3a54886c5f89350cfeaab399b9467332009c980dddce07dff3b68355e4328de8e74807af2d0c5fb0ef3e34097b4a2d5950ee27a917fba31a6e3923144823c90091a0322ab5208130fc2b330bd5dd6c37e87dc6f7cf9d3c7c22e0a584222034e0aed0ee1caf9d2f331ffc185f2591877dc82c13f4335fa0ab89a43a4ae776feea17f5e742abef679ca66b28993ff60c14a437df35a8b701a079e44138d975b8a80013783278baa33a80c79a026774919e7a55dc6c81c2cb6961f723e48a0cdf972350fcce956fb71d64ca0a70097b3b51719c23713a09a2cc92e4d4014873ecc082eb8812839474c90ab45ecce49ec0c29764a77a946a08ae37e55d5f74d0cc482b09e99e14a5f615d69cd2f87b2932354312e54bea955ab12802fae1e8e8d7fdb36e73eed89804ec2393ba417bd93e1ac6ec00f3a3b67f819aae8295214777bf33edfc5ed9c272bea014fbd8ea62ba6bb99ccffbd4125cc73dd150e1def3c3d2a0d98476184f0ea633d52e1855ca687f2f8e448a2f28583f61b35cf96c5e4246d5bf64b90b94652f9c904aee3b179146d861de9f81b0a7df2278c6157d9e50877865e9d206d07ea83bbf6fa0f465597d7c551453541111d5bb17fb2558630b60995f005a10c1f3c436d40468f31987d71a3e2202bdc0f920dce5c57c0e9995fdf6359a3d8c86408bd943754e9af002a18df044d47b3d6271f47c36ececb748e42aab9c4ef99f8d0916dd6b6fa9cd1f535cc17f351e226bf981688139b3056b64ad61c0c2dfeec40518eec439f0b5b593a7619ecd9338ea84a07e89508e5e35a85c7367af060e4ab253f9703a0321f983671bf625aebcdaf788b0ffb8c839f1f4b041f91f85191f5b71f17b1a284225c47f48e75234202ef26cc73b125ad3a34fc7273d61967ed9477da5bcd84389b7a324fd688cb4aeaec358bfb48302042822e70a8c83c002f1a3fa6584abf2e9c648f53f5da96f334c9198e14381c13955f84e6a61b3e0735421d1c37710c6dfe0d39cad5333b9c16d7d68711efbeff1f39fcd0180cdf2256daf8c057ef5720aae4a35c56b32e49e36ca601a7c5eb443a802c4f622cd9f1e77f3498e7e9e517e45b34a07182e01b4f8ff004ab1e56c796442b4499014a4c54fd0c39be88aa4fe66dcf0c0e30adc82ab66e9fcf01caddd86387f3f8412520801e538ff3b6def4f20dd0cf3edfc190ebc7297b148e50acf7a249d40ba0acb94c2a1945ba96ae1fa6f4507958dd3b4dfda476e6cd36403004fd932f337cffa491c42961718b6fb88fe7a2bc82ad11805f073e5f04aee2fcb38eb81115c324f376d5ee84498aef5cc6fd1cfb6f660961cda2f755b47639fb6bc771289b575f87de98076c6f9994c39a8758692f480dc48b2c5e52eccd36f1916c692f1666ed81ee10a1db35f5a038138dbf19b91027ea9f48028421aec93d28226b01f97720353466279cfbb70c41dc11467d94986eea0f4231b34a3d7016ceeef124a6138e005893fc314a3b50ee4508e70d65c4de5adf61cb68917e7144afc5d128afe7f811d0e74aa6f3b8b0cb08f0438c413ff5fc489f6517fec282528334b889942d79ba617c34ff310e2b21a22c6f61c85d82d379e541a15955c604d5f0cb6d8686db278d4e32622a6c419b893e74ac1b0caf8d4cdbcc11f67970521214aed936730ef62b8446d662a4e10195e900777470aff2a2ee60fd80d50d8f7b11023c8d68b79b5684c20f0757fa5b58b2bc009ebe9a617604647a1d9547cff796facb3f48affb580206ba207106d16bc4bb3fb7e1b0d76e249c9c236515e3ba41fe68e2f6115704dfef5bcee1dc65a1b87661dc906b55ff4df43bd518caa1a160f8ec98d3a0a32d2c5e692457aa6f2407b9c658e1b0a5d72f1a0e20093a702841d8ff1944e63434d7212358e89e1c29522128dcde30db7e77e9f26bdffcea4c3540a5b81a31dc7b7c374d01e4d966aeb7d4290b7449c8495181e01d87d6c265cd71086212aad7d1851eff2903a5ac71a5fdda9e334e06defcee0163f54a1aff10326dee402d2faca06bc0c8d46e6360e2e4edb9f804f9bd55ff5a65b251d8a4debe0b18212afb1cbb341b932ff4b484cc8b5a19c8b5b43fcd6b8f454787fe59ebe1ef7c9e632b26a066d5058c4dd6b69a527d7951c80f0297610a68026db95f23d5d103dcd427ad5ca9e52613c2dbe0d73c6eceec57defafc34a3d107dd482c13e111b83c1749ee06b964d56adb6428f9c92735a6982bcf8b7f4b365b483cdb8e37cf2d46639eb5780a4f03c0414dfde85a9210412e867d375c43d22125c63e94541b9ffd136542a514e4a97720d8fc92b2d53d2705401eac30828a71faa854a0dc7a3d9a74a25b4682cb1b6e761bca4cdad7cd416c89389ceeaf7d9a47547143ceadc197451fed28a2e2b914c0530a42", 0x1000, 0x40}]}) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x28) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2.837622742s ago: executing program 2 (id=1878): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x80) 2.727669815s ago: executing program 2 (id=1879): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000004010500ac1414bb000000000000000000000000000000006c00000000000000ac141408000000000000000000000000000000000000ff00000000000000000001000000fc020000000000000000000000000000000000003200000000000000fe8000000000000000000000000000bb023500000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb00000000000000000000000000000000010300000000000000000000000000002001000000000000000000000000000100000000ff00000002bbae00fe8800000000000000000000000000010000000004"], 0x1bc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newsa={0xf8, 0x1a, 0x1, 0x0, 0x25dfdbfd, {{@in=@local, @in6=@empty, 0x4000, 0x0, 0x3, 0x3}, {@in=@broadcast, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@tfcpad={0x8, 0x23, 0xd19}]}, 0xf8}}, 0x20000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000004c0), 0x43) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)=""/59, 0x3b}], 0x1, 0x0, 0xc00}, 0x80) r5 = socket$kcm(0x1e, 0x4, 0x0) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000005c0), 0x43) write$cgroup_subtree(r5, &(0x7f0000000600)=ANY=[], 0xfdef) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x3, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3000}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x93}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8000000000000000}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x24}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) sendmsg$nl_crypto(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000100001002dbd7000fddbdf257874732874776f6669736829", @ANYRES16=r0], 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x80) 2.521309513s ago: executing program 5 (id=1880): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f0000000000)='{,\xd6\x00', 0x289c0, &(0x7f0000000080)={@align=0x3, {0x2, 0xff, 0x0, 0xa3}}, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0xfffffffb}) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400600027c035c9cc652bdcea3ea5a7134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecb84ec95ee5de6ccd40dd6e4f1ef3d93452a92782f9ffcdb020e6f3baf432b25a55e08", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4c000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x96}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000c7e3bbd65386e614002100000000d6a6a3a6000000000023"], 0x18}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r6, &(0x7f0000000840)=[{{&(0x7f0000000880)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000900)="99", 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r6, &(0x7f0000000940)="ab", 0x1, 0x0, &(0x7f0000000980)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)="4c875ca1829a", 0x6}], 0x1, &(0x7f0000000a80)=[@sndinfo={0x20, 0x84, 0x2, {0x807, 0x41}}], 0x20, 0x4048801}, 0x6050) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000200)) r7 = socket$inet6(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010018000000000000001000000014000000"], 0x0, 0x36, 0x0, 0x1}, 0x20) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f00000004c0)=0xccde, 0x4) listen(r7, 0x50) sendmsg$inet(r7, &(0x7f0000000540)={&(0x7f0000000580)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000600)="8cefbb785a", 0x5}], 0x1}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x3}]}}}]}, 0x3c}}, 0x0) 2.512972044s ago: executing program 2 (id=1881): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000000000c0007800500150003000000050001000600"/40], 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r1) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000cc0), r1) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000420}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x30, r3, 0x302, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r6, 0x0, 0xc9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000b40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030027bd7000fddbdf251b00000008000300", @ANYRES32=r7, @ANYBLOB="10c212"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x6, 0x3, 0x4, 'syz0\x00', 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x138, 0x158, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @common=@unspec=@physdev={{0x68}, {'veth0_virt_wifi\x00', {}, 'pimreg\x00', {}, 0x1, 0xfa375c9ca979672a}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x1b, 0x5, 0x570, 0xf0, 0x0, 0xffffffff, 0x208, 0x2f8, 0x4a0, 0x4a0, 0xffffffff, 0x4a0, 0x4a0, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x2, @ipv4=@loopback, @ipv4=@private=0xa010102, @port=0x4e24, @port=0x4e24}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0xff, 0xffffffff], [0xffffffff, 0xffffff00, 0x0, 0xff000000], 'pimreg0\x00', '\x00', {0xff}, {0xff}, 0x33, 0x0, 0x0, 0x67}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0xd, "efd4", 0x1}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv6=@loopback, @ipv4=@multicast2, @gre_key=0x2, @gre_key=0x5}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x19}, @mcast1, [0x0, 0xffffffff, 0xf37c40d982e9d614, 0xffffffff], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'nicvf0\x00', 'hsr0\x00', {}, {}, 0x1d, 0x5, 0x7, 0x6b}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x9, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv6=@dev={0xfe, 0x80, '\x00', 0x24}, @port=0x4e21, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "ba44"}}, @common=@srh1={{0x90}, {0x8, 0x0, 0xaa, 0x6, 0xc, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, [0xff, 0xff000000, 0x0, 0xff], [0xff000000, 0x0, 0xffffffff, 0xff], [0xff000000, 0xffffffff, 0xffffff00, 0xff], 0x500, 0x502}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x6, @ipv6=@mcast2, @ipv4=@private=0xa010102, @icmp_id=0x66, @port=0x4e24}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) syz_genetlink_get_family_id$nfc(&(0x7f0000000c40), r1) 2.415876573s ago: executing program 6 (id=1882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x4801}, 0x0) 2.279179667s ago: executing program 6 (id=1883): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x141) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect(r1, &(0x7f0000000100)=@isdn={0x22, 0x7, 0x2, 0xc0, 0x2}, 0x80) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3d2b759b20bf2636, 0x8010, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 2.261443552s ago: executing program 0 (id=1884): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000500)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r3, @ANYBLOB="01000000000000047fc9010000000400048008000200010000000800010000000000d00008802c00078008000600c500000008000500aee6633708000600d9000000080005002d7c9172080005006d67491d0c0007800800050024da98751c00078008000500878f000008000600df0000de"], 0x10c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0x6, &(0x7f0000000680)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@map=r1, r4, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r1, &(0x7f0000000780), &(0x7f00000007c0)=@tcp=r0}, 0x20) shutdown(r0, 0x1) 2.127764651s ago: executing program 0 (id=1885): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x880) 2.112981587s ago: executing program 6 (id=1886): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xc}]}, 0x40}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x5}}}}]}, 0x30}}, 0x0) 2.061087053s ago: executing program 2 (id=1887): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000e8e73acbf367b1c7b4b4c124f91fbe3d1c1000010400", @ANYRES32=0x0, @ANYBLOB="622004000010020024001280090001007866726d000000001400028008000200ea00000008000100040000001800348014003500776c616e3100"/68], 0x5c}}, 0x0) 2.012424972s ago: executing program 1 (id=1888): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100001040300"/20, @ANYRES32=0x0, @ANYBLOB="00010000000000001c00128009000100626f0764000000000c00028005001f"], 0x3c}}, 0x54) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x7, 'veth0_macvtap\x00', {0x6}, 0x4}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x10, &(0x7f0000000400), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@typedef={0x0, 0x0, 0x0, 0x10, 0x2}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x3e, 0x0, 0x2}, 0x20) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000440)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmsg(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x1) sendmmsg(r3, &(0x7f00000004c0), 0x3fffffffffffeed, 0x0) r4 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f00000000c0)={@dev, @local, @broadcast}, &(0x7f0000000200)=0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) r5 = accept4$inet(r4, 0x0, &(0x7f0000000240), 0x800) getsockopt$inet_mreqsrc(r5, 0x0, 0x26, &(0x7f0000000280)={@rand_addr, @multicast1, @remote}, &(0x7f00000002c0)=0xc) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616ec524382eb7430f0a877d025c00645bdfcf206781a3437b7ba1fb68066a7b5b14d317e9b3240bec5b16e0f6b11ae48a417a2e3ed185c3c7eef37fb017d2977c4b4b81726ff22f3a9415ac33c2bc4f98b100c8a7"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 1.906571718s ago: executing program 2 (id=1889): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000780)={&(0x7f00000007c0), 0x0, 0x0, 0x0, 0x5, r2}, 0x38) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000640)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0x4010) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000440)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000480)=ANY=[@ANYBLOB='b 75:*\tr'], 0xa) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000024000180060005004e23000006000100f991b2fb0ff80200000008000300ac1414aa0800"], 0x38}}, 0x0) pipe(&(0x7f0000000240)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="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"/293], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1.820223291s ago: executing program 5 (id=1890): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000004001b0000000c00228059fe0080040000800600210030"], 0x28}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x1fffffff, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000380)='GPL\x00', 0x9, 0xa733, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) 1.768116497s ago: executing program 0 (id=1891): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000003000000850000001300000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @sched_cls=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xfdef, &(0x7f00000008c0)=ANY=[@ANYBLOB="aaaaaaaaaabb00002200000088a8260081000e0000ffffffff"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r0, 0x0, 0x88, 0xe40, &(0x7f0000000a40)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000a80)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'tunl0\x00', &(0x7f00000006c0)={'gretap0\x00', 0x0, 0x700, 0x1, 0x6700, 0x11, {{0x11, 0x4, 0x0, 0x1, 0x44, 0x68, 0x0, 0xd7, 0x29, 0x0, @multicast1, @private=0xa010101, {[@end, @ssrr={0x89, 0x17, 0xa6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @private=0xa010101, @remote, @loopback]}, @timestamp_addr={0x44, 0xc, 0x73, 0x1, 0x5, [{@remote, 0x6}]}, @generic={0x94, 0xc, "7c7eb52e12d0d8fb0a90"}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002d40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002d80)=ANY=[@ANYBLOB="d0190000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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"], 0x19d0}}, 0x801) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000900)={0x0, 0x8001}, 0x8) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000c00)=0x26, 0xffffffffffffff34) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r6, 0x84, 0x7f, &(0x7f0000001300)=""/4057, &(0x7f0000002300)=0xfd9) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtaction={0x10c, 0x30, 0x53b, 0x0, 0x0, {}, [{0xf8, 0x1, [@m_simple={0xf4, 0x1, 0x0, 0x0, {{0xb}, {0xc8, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xc2, 0x3, 'ext4_writepages_resu\x00\x00\x00dQ\xc6yYR\xfd\\\xbf\x1c\xcesb\xe8\xed\xba@\xe6\xf7\xd8\"\xc6\xc0\x192\xd4:\xfd\x1d\x92\xe8BM\xe6\xb4\x8a\x19U\x18\x0f\x1f\xdf%\xd8}\xf5\xd9~\fd7\xc6\xf4\xd0;&!\x9c\xc89\xb2\x03\xfbE1\xed\xfe\xa1PN\xcdoQV\xd3[\\j\x0e\xfb\x88S`C\xa3\xb0\xa7`\x0evH\t+\xcb=\xe6d\xfe\x9c\xee\x88\x94#{\x8fTG\xa5Qz\x17\x05aW=\x94\xd4\xea\xfb+\xa0x\xda\x83d@\xdcq\xbd\x82\x9e<\xff&\xdd\xb3z\xb5\xd7\xcc\x8f\x1di\x18H\xe8\x13\xfaU\a)g5\xae\xd3!\xbc~\xfc\x11\xa8\xe2\xb2\xe6\xaeU\x85'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x10c}}, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) r9 = socket$inet(0x2, 0x800, 0x3) ioctl$XFS_IOC_FSINUMBERS(r9, 0xc0205867, &(0x7f0000000640)={&(0x7f0000000040)=0x200000000004, 0x81, &(0x7f0000000280)=[{}, {}, {}, {}], &(0x7f0000000600)}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r10, {0x2, 0xfff0}, {}, {0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x452, 0xf5, 0x4, 0x1}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x34000844}, 0x0) 1.6425258s ago: executing program 1 (id=1892): ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f00000000c0)={0x1, 0x0, 0x4a95, 0x7, 0x80000000, 0x2}) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000200)={r0, &(0x7f0000000100)='+\a--))/@\x00', 0x80040, &(0x7f0000000140)={@_ha_fsid={[0x4, 0x1000]}, {0x5, 0x1, 0xffffffff, 0x4}}, 0xfffffffc, &(0x7f0000000180), &(0x7f00000001c0)=0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000c0) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000380)='\x00', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x2, &(0x7f00000003c0)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffe}], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x6f, &(0x7f0000000440)=""/111, 0x40f00, 0x60, '\x00', r2, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x1, 0x5, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r1], 0x0, 0x10, 0x3}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r4, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x44810) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f00000007c0)="788bd1c13d1171a12f8a13d02c6b2111501f167ba39aed", &(0x7f0000000800)=@udp=r1}, 0x20) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000008c0), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000900)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000940)=0x0) sendmsg$NFC_CMD_DISABLE_SE(r3, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r7, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x34}}, 0x20004080) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c00)=@bpf_tracing={0x1a, 0x21, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x2}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b80)='GPL\x00', 0x4, 0x1000, &(0x7f0000000bc0)=""/4096, 0x41000, 0x50, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2e3cd, r1, 0x3, 0x0, &(0x7f0000001bc0)=[{0x5, 0x3, 0x6, 0x2}, {0x4, 0x4, 0x10, 0x7}, {0x2, 0x4, 0x1, 0xa}], 0x10, 0x10}, 0x94) r11 = syz_genetlink_get_family_id$team(&(0x7f0000001d00), r10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001d40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001f80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001f40)={&(0x7f0000001d80)={0x190, r11, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r12}, {0x174, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x190}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) setsockopt$sock_int(r0, 0x1, 0x54, &(0x7f0000001fc0)=0x1, 0x4) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002040), r1) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x24, r13, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4c084) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000002180), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000002300)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000022c0)={&(0x7f00000021c0)={0xec, r14, 0x0, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xec}, 0x1, 0x0, 0x0, 0x804}, 0x20004001) close(r10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000002680)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002640)={&(0x7f00000023c0)={0x250, r11, 0x300, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r12}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r12}, {0x158, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xc38}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x2, 0x0, 0x9, 0x1}, {0x6, 0xfe, 0xb, 0xfffffffd}, {0x1, 0x8e, 0x1, 0x7}, {0x7, 0x9, 0xa8}, {0xd, 0xff, 0xa, 0x8}, {0x7a1b, 0x2, 0x6, 0xd004}, {0x9, 0x3, 0x81, 0x1}, {0x7, 0x2, 0x0, 0x1}]}}}]}}, {{0x8}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xc, 0x1, 0x4, 0x8}, {0x9, 0x4, 0x8, 0x1}]}}}]}}]}, 0x250}, 0x1, 0x0, 0x0, 0x844}, 0x44024) 1.597782509s ago: executing program 6 (id=1893): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00cd67d7927b81ffff745013643c00b100000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES64=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x60, 0x30}, &(0x7f0000000280)=0xc) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000340)=0x4, 0x4) r5 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_route(r5, 0x0, 0x48094) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000380)=0x100000001, 0x4) connect$inet6(r6, &(0x7f00000003c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000400), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x304}, "00e1ffffff00", "5985e81ad0d9585bc175cbecd3f55eb699e3ee0bc206f3ba527c85bde06fbf19", '\x00', '\x00\x00\x00\f\x00'}, 0x38) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuacct.usage_all\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f00000004c0)=ANY=[], 0x3261e) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x44, r8, 0x1, 0x400, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "8fee3964c3184d0f3541446704"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac04}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000405}, 0x0) bind$tipc(r7, &(0x7f0000000680)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x3}}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x4, &(0x7f0000000500)=@gcm_128={{0x304}, "cdbef90c18b633a0", "fa07b3a2d40586d364f360be6df53598", "7eb00b44", "e598980949a58c71"}, 0x28) setsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(r3, 0x84, 0x7d, &(0x7f0000000300)={r4, 0x41}, 0x8) 1.367203925s ago: executing program 5 (id=1894): syz_emit_ethernet(0xa8, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaa95aaaaffffffffffffc9c48100300086dd604dd31806000600fc010000000000000000000000000000000000000000000000000000000000aa0000d1ff8640e13cba51c298ce5d9a9e30c06295172f1b61ad748addea934f0bcfff620763cf8f461826f104b8be3496fa46ef4fdc7ab28721912873bd47d032076eec79f50a52d5be3239494c28db565222ee66815627d6d28062da85ce613dd89603bb23712b75f19e390efce3ad0b872473312303b8135b80cdaba4", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7002000090780000fe07f989ee142800537e2df2d5c4237b7d8f2f0abc04445dfc6d8bb0d56dc8ce86a6deaef5aa94a6e022c6e1b2e66327bcda5907f8981289de5cfd520ce7f0e2c37ab0c2d4a206ede1c1627dc869f5e50dfcebdabb55e48793c4"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20, 0x2d, 0x107, 0x0, 0x25dfdbff, {0x9, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x5, 0x3, 0x2}) sendmsg$nl_route_sched(r1, &(0x7f0000002a40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002a00)={&(0x7f0000000880)=@newtaction={0x2160, 0x30, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [{0x640, 0x1, [@m_police={0x538, 0x11, 0x0, 0x0, {{0xb}, {0x458, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x7}], [@TCA_POLICE_RATE={0x404, 0x2, [0xc, 0x5, 0x10001, 0x0, 0x4, 0x10000, 0x6, 0x6, 0x7, 0xa6c, 0x9, 0x9, 0x800, 0x2, 0x153, 0x4, 0xffffff8e, 0x70, 0x3df0, 0x9, 0x4, 0x7d1, 0x50, 0x5, 0x9, 0xf, 0x8, 0xffff, 0xfffffffd, 0x6, 0x1, 0x9, 0x9, 0x80, 0x4, 0x7, 0x1000, 0x6, 0x200, 0x3, 0x9, 0xffffff80, 0xa, 0x9, 0x9, 0xf, 0x1, 0x2, 0xc629, 0x6, 0x2b, 0x8, 0x8, 0x8, 0x8, 0xb, 0x6, 0x7, 0x2, 0x0, 0x1, 0x4, 0x80000001, 0x1, 0x0, 0x1000, 0x0, 0x7fffffff, 0x9, 0x80, 0x8, 0x0, 0x0, 0xffff7fff, 0x80000001, 0x3, 0x5, 0x5b1, 0x7, 0x7fffffff, 0x2, 0x2, 0x2, 0xe, 0x8, 0x5a, 0xee29, 0x8, 0x3, 0xfe3, 0x7, 0x0, 0x78, 0x4, 0x40, 0x8001, 0x800, 0x50, 0x9, 0x3, 0x8, 0x3, 0x6, 0x0, 0x8, 0x6, 0x1ff00, 0x6, 0x200, 0x1, 0x1, 0x5, 0x24fc, 0x10, 0x7, 0x0, 0x3, 0x7f, 0x1, 0x4, 0x5, 0xb29, 0x200, 0x6, 0x4, 0x5, 0x3, 0x6, 0x2, 0x9, 0x10001, 0x1000, 0x7f, 0x9, 0xffffb90b, 0xb57, 0x1, 0x3, 0x5, 0x6, 0x8, 0x6, 0x9, 0x50118bcc, 0x5, 0x8ce, 0x4, 0x0, 0xe94, 0x4, 0x0, 0x1a229889, 0x9, 0xc0, 0x8, 0x200, 0x2, 0x7, 0x4, 0x8, 0x80, 0x0, 0x3fe, 0x80, 0x7, 0x4e8d, 0x10001, 0x5, 0x3, 0x0, 0x5, 0x6f, 0x9d, 0x8, 0x1, 0x4, 0x7, 0x4, 0x2, 0x7fd, 0xb, 0x1, 0x0, 0x2, 0x8, 0x6, 0x7, 0x45d1e5b6, 0xfff, 0x7f, 0x6107, 0x7, 0x9, 0x7, 0x7f, 0x3, 0x42, 0x800, 0x10000, 0x60f6, 0x4, 0x202, 0x8, 0x3, 0x9, 0xc, 0x99, 0x29f, 0xa5ceec8, 0xd2a0, 0xaf7, 0x1, 0x43d, 0x3, 0x7, 0xf52, 0x10001, 0x4, 0x2, 0xffff8000, 0x6, 0x3, 0x1000, 0x0, 0x9, 0x0, 0x9b1, 0x2, 0xffffff7f, 0x6, 0x7ff, 0xf7, 0x5, 0x1, 0x3, 0x1b1e6c7a, 0xffffffff, 0x3d, 0xe2, 0x339, 0x7, 0x9, 0x43c, 0x3, 0x1, 0x2141, 0x9d0, 0x7, 0x100, 0x100, 0x6, 0x5, 0x81, 0x6, 0x5, 0xfff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x62b30afb, 0x1, 0x7ff, 0x4, 0x8, {0x5e, 0x1, 0x5, 0x7, 0x68ab, 0x800}, {0xab, 0x1, 0x1, 0x9, 0x1, 0x6}, 0x0, 0x0, 0x4}}]]}, {0xb5, 0x6, "93e94ed6e042405275456478f914420a3f0cedaf663ab6055573d289b9d753d3eb8dc39cbd81291ece90a268805a0afbea044480d2631a4b54315ab890fe64f929da6cc9c23f3f17a9b78242db024049aec893154a01ffe9641cce1c7587c399c598991b8d4552d29422b9d3975a3a102b60c9048984e07de792253ff9ca5a123ea736cf7087d21284769d3733c5099af0c7b939eaf4cea0795302430888ab8f2dada263cf9775e12f431878bd992dced1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbmod={0x104, 0x11, 0x0, 0x0, {{0xb}, {0xd0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xffff}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8001}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7f, 0x401, 0xffffffffffffffff, 0xcaf, 0x401}, 0xf}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8001, 0x4, 0x20000000, 0x4d1f, 0x1}, 0x10}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x51}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x5, 0x7, 0x157c, 0x8}, 0x9}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0xffffe744, 0x6, 0xb28, 0x5e6e}, 0xc}}]}, {0x9, 0x6, "9d437cc5c1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0x3dc, 0x1, [@m_gact={0x188, 0x13, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1a3, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1ffe, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x2, 0x10000000, 0x1, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1, 0x1, 0x6acb}}, @TCA_GACT_PARMS={0x18, 0x2, {0xe011, 0x9, 0x3, 0xffffbeac, 0x4}}]}, {0xfb, 0x6, "914d0a3e28faf012225029b99501c8a42d1cc63567ee009bd18c6f7d07ed1e6c732b75b2569269cab4b26793cf7137303cee324bf416b6504c9f3106353578940477667ca7899e375f0a0a1305095569920a023d4dc1a4f24d13730d54b8c120a95fecb687c07733251d76a96e825f764a69ad1ed4f0b7fe839aaa24c7f11498bce31fe0af08e000c94a1354c130bfaee1c8061721571c7132933bcd24be5fb9fadc910e8137f9aeb267419814b30f4350e85899f0347a9ca5a748367a77e0898c729a3285eee21372626c4e54ea6d1727b673643a1d2c737088b7dd86b1b965a45ed6ad94546ea020db51efaee42a54550a231ab8e60a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_sample={0xfc, 0x10, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x2cf, 0x0, 0xffff0087, 0xf64f}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xf}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffffffd, 0x100, 0x1, 0x5, 0x2}}]}, {0x75, 0x6, "ef3256e4059c5b4ba1a6605e6b0cfd1f28c5db565112de7d8da79d89c33f81edc6462a6622588a357e2a51fbcec0f810f0bb1fc0927565e3545c8f51426cc9e95377841109f9f0b28cc1f0fa64e8e7847a7f8ef7474002396d909d5b489a137fc9bf77c82fe41cfb1930de0f0f4792cd36"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0x154, 0x12, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0x3ff, 0x0, 0x8, 0x200}}, @TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0xa8d8, 0x8, 0x0, 0x8, 0xf}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xfffd}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x14b4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x80000000}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}]}, {0xb7, 0x6, "c5143232c1e06310afd785f649413401c4fc2095b10da8ac9f3fa1417d45e31ea7a3a6039d899834408b282b510c23bf552bc889a6473e745b1f06c978fce81ff8def45c4d23c21aa8cf621f199797bfd726468abf7256c27330bd2f1f6a5820ce2b29aa0ba0dfa8cf0d1f1e88cfaa872e2406afecec34b41caed66ed1fe5dac2fd238ed311c2c35c52a27832746f6c8bcdc0f9afdb52e8fddbb7694adbca3a56a1df4df2adf96c3b7068bd83518527550fa91"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, {0x12ec, 0x1, [@m_nat={0x1c8, 0x5, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x3, 0x7, 0x4, 0x4}, @dev={0xac, 0x14, 0x14, 0xd}, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x1ff, 0x0, 0x6, 0x9}, @multicast1, @dev={0xac, 0x14, 0x14, 0x14}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x4, 0xffffffffffffffff, 0x7}, @empty, @multicast1, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0x0, 0x5, 0x7}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x101, 0x1, 0x5, 0x2409}, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x16}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5fcb, 0x4, 0x3, 0x6, 0x8001}, @local, @private=0xa010101, 0xff, 0x1}}]}, {0xb0, 0x6, "cd60db80f91ea2e475f505026fddd4ce384102bc9cf8b4e305ca185669e4fbc31dc6299a4667b1fd1529910d12730b7a48a9be09510ff9483a988684b4e16e578a80fc84e8a132e3d8850539f8b8689adbeedf56ad2418c505c1722e8a9986e6da3b994c435bcdb625472368f6926e8c1814357d2d9259efe304581cf4d4e6c54a1cb33672dac7e3b22d67d4905d87dafbd5ba6e30158473601428dc16014efb1e57e315bef629f5d7b60b69"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0x7c, 0x20, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xffffffff, 0x6, 0x20000000, 0x9, 0x2}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010102}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x1f, 0x6, "61b74783a43c18a131350b51e8b80ec3760cf48833341ed70350ad"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0x10a4, 0x2, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @random="d077f2a7fd10"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8000, 0x3, 0xffffffffffffffff, 0xd0, 0x3}, 0x10}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x444, 0x1, [@m_simple={0xfc, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, '-.-\x00'}]}, {0xc7, 0x6, "d9398f2ec0253d8f3458b224c0d4b1c75dc4b7c75528ea8973b29ccca7defc8a10814e754b0f356f22c7ac633eba0e3636f8a409a3f50be114da15c94d77df45220708401a838eba95e28458c58909de86bd6fcdf9744efa04ffde2ee88573452c58a6b65462b82f3c77ddeeaf9dde1fa2bfe9b7e15c0082b9ba0e377917d59db1477cd14e6914455b330d6cd0be6d18b8d777529507010170d0ca46466f856892f1cf0be20cd7d32c4900b1f4231344250ff505d2c9b0ebd0300ae6506033243b852d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_csum={0x16c, 0x1f, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xac3f, 0x2, 0x2, 0x8}, 0x5}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x800, 0x2, 0xfffffffb, 0x9}, 0x4c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x81, 0x1, 0x81, 0x5}, 0x4c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x9, 0x0, 0x9, 0x9}, 0x1}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x1, 0x3, 0xd, 0xe8bd}, 0x22}}]}, {0xb2, 0x6, "52cdb7694669f858623e9266a0a9978e6b346b68858ede48a7493a72e48c4f6caa7b71e5b52a5c2a3a06756da4e0af66c79697ed1134de8b23c7f2294baa4d808068bf738ee45cfcae19a5d18c23cc39ae227a16db8e0e24da4298c038689bb4365a9c54706e9de9f12f76be878fc038c8aa6571168331e453f0ddff84eeadbfbf6f268f4cf121e65724fa4adf1361744b73f0d2a6bc883e743c845ed5229e13724bd1d895e97f47f0804d787013"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x84, 0x1b, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x19d5, 0x6, 0x20000000, 0x3, 0x10}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5000}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}]}, {0x1f, 0x6, "056641482db9628678c53f7f61a87b10b16ed4df4e6e6464c9e68c"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0xd0, 0x18, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x92, 0xfffffffb, 0x7, 0xe, 0xffffff8d}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x2e}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7fffffff}]}, {0x5e, 0x6, "a3a73be81256066ad5a7c74472342a2239411566f1f89ebdd210360337f2d481d671f12f8cb31aa4f61f2c5231562e784fdc66061199f85bd20df1063ca794fb5fc8990f0471a671bd9e74a5ddb2c3fa273119cc47c98094aa4e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0x84, 0xe, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1000}]}, {0x50, 0x6, "dea1f7230256b56ed95ef06e65c20a5a44f2f070398c7bc714f557bfd7d2951d02e5b704062915af7167854c5203f63d02756f59ddca0ce2e8f0c8749e3206fe75b7762d175e18d647f648b7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x2160}, 0x1, 0x0, 0x0, 0x4}, 0x1) 1.025550079s ago: executing program 5 (id=1895): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x7, 0x700, 0x9, 0x4, {{0x15, 0x4, 0x1, 0xe, 0x54, 0xe8, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @dev={0xac, 0x14, 0x14, 0x34}, {[@rr={0x7, 0x7, 0x70, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x1f, 0x3b, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @rand_addr=0x64010102, @loopback, @rand_addr=0x64010102, @private=0xa010102]}, @end, @cipso={0x86, 0xf, 0xfffffffffffffffd, [{0x0, 0x5, "5e807e"}, {0x2, 0x2}, {0x2, 0x2}]}, @timestamp={0x44, 0x8, 0x10, 0x0, 0x1, [0x7f]}]}}}}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x2e}, 0xa}, 0x1a) ioctl$NILFS_IOCTL_SET_SUINFO(r1, 0x40186e8d, &(0x7f0000000240)={&(0x7f0000000180)=[{0xfa, 0x0, 0x0, {0x0, 0x100, 0x1}}, {0x7, 0x1, 0x0, {0x5, 0x10001, 0x2}}, {0x6, 0x0, 0x0, {0x9, 0x7, 0x2}}, {0x6, 0x2, 0x0, {0x5, 0xd, 0x2}}, {0xb, 0x2, 0x0, {0x3807, 0x6}}], 0x5, 0x20, 0x8ff, 0x9}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000a00)={@loopback, 0x0}, &(0x7f0000000a40)=0x14) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000a80)={0x0, 0x0, 0x3, r3, 0xbb}, 0xc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='io.stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x2c}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000ac0), 0x82c03, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000b00)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) close(r8) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000b80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000c80)={'syzkaller0\x00', @multicast}) r11 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000cc0)={'syzkaller0\x00', 0x0}) r13 = socket$kcm(0x11, 0x3, 0x0) r14 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5dad36ec, 0x20c, 0x5, 0x7, 0x2}, 0x3, r12}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r13, 0x107, 0xf, &(0x7f0000000e40), 0x56) sendmsg$kcm(r13, &(0x7f0000000e80)={&(0x7f0000000ec0)=@xdp={0x2c, 0x0, r12, 0x42}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000f80)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r15, 0x0, 0x1) 747.791506ms ago: executing program 0 (id=1896): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@migrate={0x50, 0x21, 0xd39, 0x0, 0x0, {{@in=@dev, @in6=@mcast2}}}, 0x50}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@migrate={0x50, 0x21, 0xd39, 0x0, 0x0, {{@in=@dev, @in6=@mcast2}}}, 0x50}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x6, &(0x7f0000000340)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@map_fd={0x18, 0x1, 0x1, 0x0, r2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1e, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1e, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) recvmmsg(r0, &(0x7f0000005240)=[{{&(0x7f00000003c0)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f00000007c0)=""/226, 0xe2}, {&(0x7f00000008c0)=""/202, 0xca}], 0x3, &(0x7f0000000a00)=""/85, 0x55}, 0xe3}, {{&(0x7f0000000a80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000b00)=""/130, 0x82}, {&(0x7f0000000bc0)=""/181, 0xb5}, {&(0x7f0000000c80)=""/14, 0xe}, {&(0x7f0000000cc0)=""/85, 0x55}, {&(0x7f0000000d40)=""/12, 0xc}], 0x5, &(0x7f0000000e00)=""/111, 0x6f}, 0x2}, {{&(0x7f0000000e80)=@phonet, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000f00)=""/123, 0x7b}, {&(0x7f0000000f80)=""/36, 0x24}, {&(0x7f0000000fc0)=""/255, 0xff}], 0x3, &(0x7f0000001100)=""/163, 0xa3}, 0xffffffff}, {{&(0x7f00000011c0)=@alg, 0x80, &(0x7f0000002340)=[{&(0x7f0000001240)=""/51, 0x33}, {&(0x7f0000001280)=""/105, 0x69}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/20, 0x14}], 0x4, &(0x7f0000002380)=""/183, 0xb7}, 0x2}, {{&(0x7f0000002440)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f00000026c0)=[{&(0x7f00000024c0)=""/36, 0x24}, {&(0x7f0000002500)=""/102, 0x66}, {&(0x7f0000002580)=""/75, 0x4b}, {&(0x7f0000002600)=""/155, 0x9b}], 0x4}, 0x6}, {{&(0x7f0000002700)=@nfc_llcp, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002780)=""/129, 0x81}, {&(0x7f0000002840)=""/172, 0xac}, {&(0x7f0000002900)=""/238, 0xee}, {&(0x7f0000002a00)=""/211, 0xd3}, {&(0x7f0000002b00)=""/215, 0xd7}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/129, 0x81}], 0x7, &(0x7f0000003d40)=""/26, 0x1a}, 0x80000000}, {{&(0x7f0000003d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003e00)=""/53, 0x35}, {&(0x7f0000003e40)=""/204, 0xcc}], 0x2}, 0x7}, {{&(0x7f0000003f80), 0x80, &(0x7f0000004200)=[{&(0x7f0000004000)=""/254, 0xfe}, {&(0x7f0000004100)=""/209, 0xd1}], 0x2, &(0x7f0000004240)=""/4096, 0x1000}, 0x7}], 0x8, 0x3, &(0x7f0000005440)={0x77359400}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000005480)="58f6", 0x2, 0x0, &(0x7f00000054c0)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x9}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000005500)={0x0, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x3, 0x0, 0x3}, 0xe) shutdown(r4, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000005540)=0x41dc, 0x4) recvmmsg(r4, &(0x7f0000005580)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) (async) recvmmsg(r4, &(0x7f0000005580)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2b}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 599.575991ms ago: executing program 1 (id=1897): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x0, 0x82, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000580)={0x0, 0x10, &(0x7f00000005c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000600)=0x10) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000640)=""/4102, &(0x7f0000001680)=0x1006) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) socket$inet(0x2, 0x800, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000400000008000700ac1414aa05000800e000000106000b00020000000800020005"], 0x34}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8b1c}]}, 0x44}}, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020027bd7000fddbdf25070000000f0001006e657462696f732d6e730000080000050001000000000006000b002900000014000600fe8000000000000000000000000000420800020005000000080007007f0000010800040002000000"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x44040) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001940)={0x24, 0x7, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040009}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x6c, 0x0, 0x110, 0x0, 0x1f8, 0x258, 0x258, 0x1f8, 0x258, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x43}, @empty, [0xffffffff, 0x0, 0x0, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff], 'erspan0\x00', 'lo\x00', {}, {}, 0x84, 0xf1, 0x4}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7fffffff, 0x0, 0x8001, 0x401, 0x800, 0x7, 0x8, 0xfffffff9]}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x328) 599.279939ms ago: executing program 6 (id=1898): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x4}}, {{0x8, 0x1, r3}, {0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000008000000000000800d0000850000001800"/32], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 270.067071ms ago: executing program 5 (id=1899): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$AUTOFS_IOC_READY(r0, 0x400442c8, 0x200000f3) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newsa={0x160, 0x10, 0x5, 0x0, 0x0, {{@in6=@mcast1, @in=@loopback, 0x1f90, 0xffff, 0x1f90, 0xffff, 0x2, 0x20, 0x20}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'cbc(aes)\x00'}}}, @sa_dir={0x5, 0x21, 0x2}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd29, 0x70bd27, 0x70bd2d, 0x70bd25, 0x7f}}]}, 0x160}}, 0x0) writev(r1, &(0x7f0000000680)=[{&(0x7f00000006c0)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x4000, 0x4c, &(0x7f00000003c0)="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", &(0x7f0000000500)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000000580)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000000600)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) pipe(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000009c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r7, &(0x7f0000000a00)="4ede", 0x2) splice(r7, &(0x7f0000000a40), r6, 0x0, 0x800000000ff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)={@cgroup=r6, r5, 0x36, 0x8, 0x0, @void, @value=r5}, 0x20) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@flushpolicy={0x40, 0x12, 0x105, 0x6, 0x25dfdbff, "", [@proto={0x5, 0x19, 0xff}, @address_filter={0x28, 0x1a, {@in=@private=0xa010102, @in6=@mcast1, 0x2, 0xd}}]}, 0x40}}, 0x20040840) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@multicast, @multicast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @multicast, @multicast1, @broadcast, @multicast2}}}}, &(0x7f0000000100)={0x0, 0x4, [0xf90, 0xeb8, 0xfb0, 0x72b]}) 245.435124ms ago: executing program 0 (id=1900): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="d60a0000000000006111a000000000001800000001000000000000000000000095000000000000009f2df8e87abb1a540c40170189e113c536ba0c55d0857051fbe39a70744b2b3b311f307df2b46fc25991e3c9ac33fc1ec4bb491bb7fd3c51347a394dc9eca4c41667c625d2b60bae0f2ef881fe0b9f7882b69875260f5b0d09085a3e9ec34e9d231e5d5b7c8803fe9ebe853ac1a2e67cd189353b57ab26eb6d6a2cc4b2b6c40451164b786e86a464a2027e27adb316d8232e047e9ba9ca7fb9312c17a7f3b1a016f40894e575136a56337b38ca97a2f056a27d63bafecec14b3dff2f921dfe2b"], &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 245.008045ms ago: executing program 6 (id=1901): r0 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="01154e00010000112233445588fbca010001160cbfbcd16470adc14fd446ccc8e55e", 0x22, 0x44011, &(0x7f0000000040)={0x11, 0x0, r1, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 0s ago: executing program 1 (id=1902): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e22, 0xe05c, @remote, 0x5}, {0xa, 0x4e24, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ffc00}, 0x1, {[0xa072, 0x8, 0x1, 0x80000000, 0x8bf3, 0x5, 0x2, 0x7]}}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e0000009c0a0000000000002500001b000000009500000d00001d00"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) kernel console output (not intermixed with test programs): 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.420319][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.88'. [ 84.672867][ T6204] sch_fq: defrate 0 ignored. [ 84.794793][ T6212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.94'. [ 84.794822][ T6212] block nbd0: Unsupported socket: should be TCP or UNIX. [ 85.103063][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.98'. [ 85.537752][ T6243] netlink: 'syz.1.101': attribute type 1 has an invalid length. [ 85.823584][ T6268] netlink: 24 bytes leftover after parsing attributes in process `syz.3.105'. [ 86.015439][ T6276] x_tables: duplicate underflow at hook 1 [ 86.157169][ T6289] syzkaller1: entered promiscuous mode [ 86.157191][ T6289] syzkaller1: entered allmulticast mode [ 86.677672][ T968] cfg80211: failed to load regulatory.db [ 87.080136][ T6314] ieee802154 phy0 wpan0: encryption failed: -22 [ 87.333822][ T6334] netlink: 148 bytes leftover after parsing attributes in process `syz.0.120'. [ 87.559440][ T6343] netlink: 20 bytes leftover after parsing attributes in process `syz.0.123'. [ 87.569726][ T6344] netlink: 'syz.4.124': attribute type 12 has an invalid length. [ 87.611316][ T6351] netlink: 20 bytes leftover after parsing attributes in process `syz.0.123'. [ 87.631417][ T6354] netlink: 60 bytes leftover after parsing attributes in process `syz.4.124'. [ 87.939226][ T6371] netlink: 'syz.0.127': attribute type 1 has an invalid length. [ 88.219132][ T6384] netlink: 40 bytes leftover after parsing attributes in process `syz.0.130'. [ 88.735120][ T6412] netlink: 'syz.2.136': attribute type 49 has an invalid length. [ 88.811933][ T6417] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 88.825201][ T6418] netlink: 'syz.1.139': attribute type 1 has an invalid length. [ 88.880636][ T6418] bond1: entered promiscuous mode [ 88.881000][ T6418] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.953492][ T6418] bond1: (slave bridge2): making interface the new active one [ 88.953514][ T6418] bridge2: entered promiscuous mode [ 88.969711][ T6418] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 89.008910][ T6429] netlink: 'syz.2.142': attribute type 10 has an invalid length. [ 89.049545][ T6434] netlink: 'syz.3.143': attribute type 10 has an invalid length. [ 89.052751][ T6429] team0: Device wg2 is of different type [ 89.131718][ T6434] team0: Port device dummy0 added [ 89.142405][ T6436] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.366014][ T6451] netlink: 216 bytes leftover after parsing attributes in process `syz.1.150'. [ 89.366067][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'. [ 89.382183][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.148'. [ 89.382257][ T6453] bridge_slave_1: left allmulticast mode [ 89.382276][ T6453] bridge_slave_1: left promiscuous mode [ 89.382537][ T6453] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.414081][ T6453] bridge_slave_0: left allmulticast mode [ 89.414104][ T6453] bridge_slave_0: left promiscuous mode [ 89.414311][ T6453] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.684296][ T6473] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 89.764505][ T6477] netlink: 60 bytes leftover after parsing attributes in process `syz.0.158'. [ 89.771091][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.158'. [ 89.781265][ T6478] smc: removing ib device rxe0 [ 89.900593][ T6478] smbdirect: ib_dev[rxe0] removed [ 90.088140][ T6493] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 90.678631][ T6516] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 90.764618][ T6520] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 91.050517][ T6530] netlink: 'syz.2.174': attribute type 10 has an invalid length. [ 91.116334][ T6530] team0: Port device dummy0 added [ 91.339025][ T6538] IPVS: rr: SCTP 127.0.0.1:20000 - no destination available [ 91.431226][ T6549] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 92.001555][ T6573] Cannot find set identified by id 0 to match [ 92.028429][ T6573] xt_IDLETIMER: label is empty or not nul-terminated [ 92.960445][ T6618] IPv6: NLM_F_CREATE should be specified when creating new route [ 92.960722][ T6618] __nla_validate_parse: 2 callbacks suppressed [ 92.960736][ T6618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.195'. [ 93.032034][ T6623] netlink: 220 bytes leftover after parsing attributes in process `syz.4.196'. [ 93.037073][ T6624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.124127][ T6630] block nbd0: not configured, cannot reconfigure [ 93.200239][ T6636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.204732][ T6637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.213539][ T6636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.262494][ T6636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.264527][ T6636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.277269][ T6636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.283127][ T6637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.293774][ T6636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.295217][ T6636] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 93.302475][ T6637] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 93.311402][ T6637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.368134][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.202'. [ 93.489681][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.206'. [ 93.489700][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.206'. [ 93.551923][ T6656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.575755][ T6657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.578281][ T6657] bond1: (slave bond0): making interface the new active one [ 93.579982][ T6657] bond1: (slave bond0): Enslaving as an active interface with an up link [ 93.601402][ T6667] netlink: 'syz.0.208': attribute type 3 has an invalid length. [ 93.626104][ T6660] bond1 (unregistering): (slave bond0): Releasing active interface [ 93.631811][ T6660] bond1 (unregistering): Released all slaves [ 93.712870][ T6671] netlink: 'syz.1.209': attribute type 32 has an invalid length. [ 94.072083][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.216'. [ 94.072104][ T6689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'. [ 94.324840][ T6705] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 94.432547][ T6705] netlink: 24 bytes leftover after parsing attributes in process `syz.2.218'. [ 94.544463][ T6705] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 94.792031][ T6732] pimreg: entered allmulticast mode [ 94.891430][ T6742] netlink: 56 bytes leftover after parsing attributes in process `syz.0.226'. [ 94.913632][ T6739] netlink: 'syz.4.225': attribute type 1 has an invalid length. [ 94.994664][ T6739] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 95.021821][ T6739] bond4 (unregistering): Released all slaves [ 95.036736][ T6747] netlink: 28 bytes leftover after parsing attributes in process `syz.4.225'. [ 95.095301][ T6757] netlink: 'syz.3.229': attribute type 1 has an invalid length. [ 95.171790][ T6761] bridge1: entered promiscuous mode [ 95.181162][ T6761] bond3: (slave bridge1): making interface the new active one [ 95.181631][ T6761] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 95.306198][ T6757] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.375755][ T6778] warning: `syz.4.234' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.496641][ T6791] Bluetooth: MGMT ver 1.23 [ 95.689497][ T6803] bond0: option ad_select: unable to set because the bond device is up [ 95.816636][ T6818] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 95.840201][ T6811] gretap2: entered promiscuous mode [ 95.840221][ T6811] gretap2: entered allmulticast mode [ 96.026346][ T5618] Bluetooth: hci0: command 0x0c3a tx timeout [ 96.027505][ T5611] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 96.663318][ T6872] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 97.009922][ T6890] xt_TPROXY: Can be used only with -p tcp or -p udp [ 97.491945][ T6913] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 97.539335][ T6917] netlink: 'syz.4.274': attribute type 12 has an invalid length. [ 98.243019][ T6959] __nla_validate_parse: 14 callbacks suppressed [ 98.243036][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 98.342032][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'. [ 98.342129][ T6969] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 98.342139][ T6969] IPv6: NLM_F_CREATE should be set when creating new route [ 98.342199][ T6969] IPv6: NLM_F_CREATE should be set when creating new route [ 98.475879][ T6980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.479648][ T6980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.522147][ T6987] netlink: 24 bytes leftover after parsing attributes in process `syz.4.290'. [ 98.644412][ T6994] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 99.354138][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.295'. [ 99.368770][ T7004] netlink: 'syz.0.294': attribute type 1 has an invalid length. [ 99.384479][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.298'. [ 99.434882][ T7021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.480965][ T7025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.294'. [ 99.509708][ T7004] bond1: (slave veth0_to_bond): making interface the new active one [ 99.510839][ T7004] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 99.525821][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.299'. [ 99.537314][ T7025] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.554628][ T7012] x_tables: duplicate underflow at hook 1 [ 99.554851][ T7029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.300'. [ 99.554901][ T7029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.300'. [ 99.565963][ T7004] ip_tables: iptables: counters copy to user failed while replacing table [ 99.610116][ T7032] netlink: 60 bytes leftover after parsing attributes in process `syz.2.300'. [ 99.665301][ T7032] netlink: 'syz.2.300': attribute type 1 has an invalid length. [ 99.875648][ T6062] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.875779][ T6062] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.875810][ T6062] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.875839][ T6062] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.957029][ T7048] netlink: 'syz.2.306': attribute type 9 has an invalid length. [ 100.099805][ T7057] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 100.099829][ T7057] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 100.123774][ T7050] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 100.310775][ T7070] Bluetooth: hci0: unsupported parameter 5135 [ 100.310796][ T7070] Bluetooth: hci0: unsupported parameter 8192 [ 100.310807][ T7070] Bluetooth: hci0: unsupported parameter 5135 [ 100.310818][ T7070] Bluetooth: hci0: unsupported parameter 8192 [ 100.418237][ T7072] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 100.534257][ T7081] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 100.669781][ T7086] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 100.674415][ T7086] netlink: NAT attribute has 8 unknown bytes [ 100.674454][ T7086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.869571][ T7098] syz_tun: entered allmulticast mode [ 100.885294][ T7098] netlink: NAT attribute has 4 unknown bytes [ 100.885322][ T7098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.892920][ T7097] syz_tun: left allmulticast mode [ 101.252201][ T7124] gretap0: entered promiscuous mode [ 101.254315][ T7124] gretap0: left promiscuous mode [ 101.422278][ T7129] netlink: 'syz.4.336': attribute type 3 has an invalid length. [ 101.439808][ T7129] netlink: 'syz.4.336': attribute type 2 has an invalid length. [ 101.668788][ T7146] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 101.668833][ T7146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.248477][ T7173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.278744][ T7173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.388090][ T7178] raw_sendmsg: syz.2.345 forgot to set AF_INET. Fix it! [ 102.601547][ T7194] netlink: 'syz.2.349': attribute type 1 has an invalid length. [ 102.695066][ T7195] bond3: entered promiscuous mode [ 102.695105][ T7195] bond3: entered allmulticast mode [ 102.697569][ T7195] 8021q: adding VLAN 0 to HW filter on device bond3 [ 102.939796][ T7207] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 103.000992][ T7205] bond4: entered promiscuous mode [ 103.001083][ T7205] bond4: entered allmulticast mode [ 103.001447][ T7205] 8021q: adding VLAN 0 to HW filter on device bond4 [ 103.032772][ T7194] veth3: entered promiscuous mode [ 103.046909][ T7194] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 103.185009][ T7238] ksmbd: Unknown IPC event: 1, ignore. [ 103.360477][ T7243] bond0: entered promiscuous mode [ 103.360497][ T7243] bond_slave_0: entered promiscuous mode [ 103.360691][ T7243] bond_slave_1: entered promiscuous mode [ 103.372556][ T7243] batadv0: entered promiscuous mode [ 103.393425][ T7243] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 103.402363][ T7243] bond0: left promiscuous mode [ 103.402380][ T7243] bond_slave_0: left promiscuous mode [ 103.402604][ T7243] bond_slave_1: left promiscuous mode [ 103.422944][ T7243] batadv0: left promiscuous mode [ 103.471998][ T7262] __nla_validate_parse: 15 callbacks suppressed [ 103.472017][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.364'. [ 103.534545][ T7264] netlink: 'syz.3.363': attribute type 1 has an invalid length. [ 103.534566][ T7264] netlink: 'syz.3.363': attribute type 1 has an invalid length. [ 103.536502][ T7264] ip6t_srh: unknown srh match flags 5F28 [ 103.582861][ T7268] netlink: 'syz.1.365': attribute type 1 has an invalid length. [ 103.628016][ T7268] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.000609][ T7302] nbd: must specify a device to reconfigure [ 104.158422][ T7313] sch_tbf: peakrate 8 is lower than or equals to rate 16 ! [ 104.164213][ T7310] syzkaller0: entered promiscuous mode [ 104.164232][ T7310] syzkaller0: entered allmulticast mode [ 104.194405][ T7318] netlink: 'syz.1.383': attribute type 4 has an invalid length. [ 104.194424][ T7318] netlink: 152 bytes leftover after parsing attributes in process `syz.1.383'. [ 104.204636][ T7315] sctp: [Deprecated]: syz.0.381 (pid 7315) Use of int in max_burst socket option. [ 104.204636][ T7315] Use struct sctp_assoc_value instead [ 104.207882][ T7315] ebt_among: wrong size: 2080 against expected 1044, rounded to 1048 [ 104.213934][ T7315] ebt_limit: overflow, try lower: 4278190080/255 [ 104.240987][ T7318] .`: renamed from bond0 (while UP) [ 104.399394][ T7326] netlink: 52 bytes leftover after parsing attributes in process `syz.0.384'. [ 104.451776][ T7331] netlink: 20 bytes leftover after parsing attributes in process `syz.2.385'. [ 104.695029][ T7346] netlink: 92 bytes leftover after parsing attributes in process `syz.1.386'. [ 104.808195][ T7351] netlink: 28 bytes leftover after parsing attributes in process `syz.4.388'. [ 104.808227][ T7351] netlink: 28 bytes leftover after parsing attributes in process `syz.4.388'. [ 104.816075][ T7336] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 105.018356][ T6868] udevd[6868]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 105.052136][ T6868] udevd[6868]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 105.111885][ T7375] netlink: 24 bytes leftover after parsing attributes in process `syz.1.393'. [ 105.157906][ T7380] netlink: 24 bytes leftover after parsing attributes in process `syz.1.393'. [ 105.279012][ T7385] team0: Port device macvlan0 added [ 105.369484][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.402'. [ 105.369505][ T7399] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 105.394105][ T7399] netlink: 'syz.4.402': attribute type 12 has an invalid length. [ 105.394123][ T7399] netlink: 'syz.4.402': attribute type 29 has an invalid length. [ 106.087931][ T7454] netlink: 'syz.2.417': attribute type 1 has an invalid length. [ 106.146205][ T7454] bond2: (slave gretap2): making interface the new active one [ 106.146982][ T7454] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 106.226406][ T7461] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 106.238984][ T7457] netlink: 'syz.0.418': attribute type 1 has an invalid length. [ 106.299725][ T7457] bond2: option mode: invalid value (7) [ 106.302349][ T7457] bond2 (unregistering): Released all slaves [ 107.066654][ T6062] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.067786][ T6065] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.067822][ T6065] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.070335][ T7508] ip_tables: iptables: counters copy to user failed while replacing table [ 107.087230][ T6060] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.179123][ T7514] veth3: entered promiscuous mode [ 107.179144][ T7514] veth3: entered allmulticast mode [ 107.300660][ T7521] IPVS: set_ctl: invalid protocol: 108 172.30.0.3:20000 [ 107.491484][ T7528] nftables ruleset with unbound chain [ 107.532468][ T7529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.011667][ T7559] openvswitch: netlink: Multiple metadata blocks provided [ 108.114751][ T7572] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 108.491572][ T7592] xt_ipcomp: unknown flags 1D [ 108.509872][ T7595] netlink: 'syz.3.453': attribute type 1 has an invalid length. [ 108.668828][ T7600] syzkaller0: entered promiscuous mode [ 108.668848][ T7600] syzkaller0: entered allmulticast mode [ 108.723758][ T7605] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 108.983999][ T7619] IPVS: set_ctl: invalid protocol: 22 10.1.1.0:20001 [ 109.214962][ T7639] netlink: 'syz.0.469': attribute type 15 has an invalid length. [ 109.232336][ T7642] smc: net device team0 applied user defined pnetid SYZ2 [ 109.233765][ T7642] __nla_validate_parse: 8 callbacks suppressed [ 109.233779][ T7642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.467'. [ 109.284341][ T7635] netlink: 16 bytes leftover after parsing attributes in process `syz.3.467'. [ 109.300529][ T7643] netlink: 'syz.4.470': attribute type 8 has an invalid length. [ 109.321583][ T42] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 109.321864][ T42] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 109.346620][ T3107] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 109.348120][ T7643] xt_limit: Overflow, try lower: 536871034/0 [ 109.396577][ T7650] netlink: 24 bytes leftover after parsing attributes in process `syz.0.471'. [ 109.473149][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.471'. [ 109.473182][ T7650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.471'. [ 109.519825][ T7659] netlink: 1 bytes leftover after parsing attributes in process `syz.3.474'. [ 109.588024][ T7650] netlink: 24 bytes leftover after parsing attributes in process `syz.0.471'. [ 109.638317][ T3107] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 109.957239][ T7677] tipc: Started in network mode [ 109.957267][ T7677] tipc: Node identity ac14142f, cluster identity 4711 [ 109.958509][ T7677] tipc: Enabled bearer , priority 10 [ 109.958814][ T7692] netlink: 52 bytes leftover after parsing attributes in process `syz.2.480'. [ 109.963890][ T7677] tipc: Enabling of bearer rejected, already enabled [ 109.971187][ T7677] tipc: Enabling of bearer rejected, already enabled [ 109.982466][ T7677] tipc: Enabling of bearer rejected, already enabled [ 110.005480][ T7677] tipc: Enabling of bearer rejected, already enabled [ 110.006950][ T7677] tipc: Enabling of bearer rejected, already enabled [ 110.034813][ T7677] tipc: Enabling of bearer rejected, already enabled [ 110.095293][ T7677] tipc: Enabling of bearer rejected, already enabled [ 110.113279][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 110.160855][ T7677] tipc: Enabling of bearer rejected, already enabled [ 110.162385][ T7677] tipc: Enabling of bearer rejected, already enabled [ 110.163835][ T7677] tipc: Enabling of bearer rejected, already enabled [ 110.165327][ T7677] tipc: Enabling of bearer rejected, already enabled [ 110.190200][ T3107] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 110.211859][ T7677] tipc: Enabling of bearer rejected, already enabled [ 110.213310][ T7677] tipc: Enabling of bearer rejected, already enabled [ 110.215327][ T7677] tipc: Enabling of bearer rejected, already enabled [ 110.240064][ T7677] tipc: Enabling of bearer rejected, already enabled [ 110.241564][ T7677] tipc: Enabling of bearer rejected, already enabled [ 110.243045][ T7677] tipc: Enabling of bearer rejected, already enabled [ 110.244370][ T7677] tipc: Enabling of bearer rejected, already enabled [ 110.292694][ T7677] tipc: Enabling of bearer rejected, already enabled [ 110.294143][ T7677] tipc: Enabling of bearer rejected, already enabled [ 110.311112][ T7677] tipc: Enabling of bearer rejected, already enabled [ 110.320316][ T7677] tipc: Enabling of bearer rejected, already enabled [ 110.321872][ T7677] tipc: Enabling of bearer rejected, already enabled [ 110.323377][ T7677] tipc: Enabling of bearer rejected, already enabled [ 110.324809][ T7677] tipc: Enabling of bearer rejected, already enabled [ 110.370435][ T7677] tipc: Enabling of bearer rejected, already enabled [ 110.382792][ T7677] tipc: Enabling of bearer rejected, already enabled [ 110.480812][ T7677] tipc: Enabling of bearer rejected, already enabled [ 110.484927][ T7677] tipc: Enabling of bearer rejected, already enabled [ 110.502081][ T7677] tipc: Enabling of bearer rejected, already enabled [ 110.503566][ T7677] tipc: Enabling of bearer rejected, already enabled [ 110.506193][ T7677] tipc: Enabling of bearer rejected, already enabled [ 110.552340][ T7710] netlink: 'syz.4.485': attribute type 64 has an invalid length. [ 110.552637][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.554091][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.604804][ T7710] netlink: 'syz.4.485': attribute type 64 has an invalid length. [ 110.604953][ T7710] netlink: 'syz.4.485': attribute type 64 has an invalid length. [ 110.605080][ T7710] netlink: 'syz.4.485': attribute type 64 has an invalid length. [ 110.605210][ T7710] netlink: 'syz.4.485': attribute type 64 has an invalid length. [ 110.663744][ T7710] netlink: 'syz.4.485': attribute type 64 has an invalid length. [ 110.663933][ T7710] netlink: 'syz.4.485': attribute type 64 has an invalid length. [ 110.906093][ T7735] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 110.959002][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.491'. [ 111.066086][ T7747] bridge0: port 3(gretap0) entered blocking state [ 111.066199][ T7747] bridge0: port 3(gretap0) entered disabled state [ 111.066313][ T7747] gretap0: entered allmulticast mode [ 111.067262][ T7747] gretap0: entered promiscuous mode [ 111.067812][ T7747] bridge0: port 3(gretap0) entered blocking state [ 111.067865][ T7747] bridge0: port 3(gretap0) entered forwarding state [ 111.077403][ T3107] tipc: Node number set to 2886997039 [ 111.315181][ T30] audit: type=1804 audit(1792322413.262:2): pid=7757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.495" name="/newroot/101/cgroup.controllers" dev="tmpfs" ino=537 res=1 errno=0 [ 111.319979][ C1] vcan0: j1939_tp_rxtimer: 0xffff888034559400: rx timeout, send abort [ 111.336469][ T30] audit: type=1800 audit(1792322413.262:3): pid=7757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.495" name="cgroup.controllers" dev="tmpfs" ino=537 res=0 errno=0 [ 111.336512][ T30] audit: type=1800 audit(1792322413.272:4): pid=7756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.495" name="cgroup.controllers" dev="tmpfs" ino=537 res=0 errno=0 [ 111.820065][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803455a800: rx timeout, send abort [ 111.820512][ C1] vcan0: j1939_tp_rxtimer: 0xffff888034559400: abort rx timeout. Force session deactivation [ 111.987071][ T7767] veth3: left promiscuous mode [ 112.082435][ T7771] syz_tun: entered allmulticast mode [ 112.083808][ T7770] syz_tun: left allmulticast mode [ 112.138840][ T7776] batman_adv: batadv0: Adding interface: veth0 [ 112.138855][ T7776] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.138878][ T7776] batman_adv: batadv0: Interface activated: veth0 [ 112.139592][ T7778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.139607][ T7778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.220381][ T7778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.220402][ T7778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.220916][ T7778] batman_adv: batadv0: Interface deactivated: veth0 [ 112.220931][ T7778] batman_adv: batadv0: Removing interface: veth0 [ 112.320116][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803455a800: abort rx timeout. Force session deactivation [ 113.475642][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 113.662786][ T7724] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 113.978486][ T7814] validate_nla: 28 callbacks suppressed [ 113.978513][ T7814] netlink: 'syz.4.510': attribute type 9 has an invalid length. [ 114.027451][ T7825] ip6t_frag: unknown flags 6 [ 114.297348][ T7838] syzkaller0: entered allmulticast mode [ 114.388768][ T7850] __nla_validate_parse: 8 callbacks suppressed [ 114.388787][ T7850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.519'. [ 114.572985][ T7866] ip_tables: iptables: counters copy to user failed while replacing table [ 114.856483][ T7885] openvswitch: netlink: Message has 8 unknown bytes. [ 114.856516][ T7885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.861002][ T7885] syzkaller1: entered promiscuous mode [ 114.861020][ T7885] syzkaller1: entered allmulticast mode [ 114.873205][ T7886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.528'. [ 115.245175][ T7910] x_tables: duplicate underflow at hook 1 [ 115.280617][ T7910] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 115.280693][ T7910] gretap3: entered promiscuous mode [ 115.280707][ T7910] gretap3: entered allmulticast mode [ 115.314480][ T7911] netlink: 20 bytes leftover after parsing attributes in process `syz.2.538'. [ 115.314499][ T7911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.538'. [ 115.352282][ T7920] ip_tables: iptables: counters copy to user failed while replacing table [ 115.697341][ T7938] netlink: 104 bytes leftover after parsing attributes in process `syz.1.544'. [ 115.890841][ T7954] netlink: 284 bytes leftover after parsing attributes in process `syz.1.547'. [ 115.890865][ T7954] openvswitch: netlink: Flow key attr not present in new flow. [ 116.084808][ T7967] netlink: 'syz.1.547': attribute type 1 has an invalid length. [ 116.084830][ T7967] netlink: 224 bytes leftover after parsing attributes in process `syz.1.547'. [ 116.102612][ T7956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.549'. [ 116.690100][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.556'. [ 116.691495][ T7995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.556'. [ 116.736555][ T7996] macvtap1: entered promiscuous mode [ 116.736577][ T7996] hsr0: entered promiscuous mode [ 116.736876][ T7996] macvtap1: entered allmulticast mode [ 116.736889][ T7996] hsr0: entered allmulticast mode [ 116.736900][ T7996] hsr_slave_0: entered allmulticast mode [ 116.736914][ T7996] hsr_slave_1: entered allmulticast mode [ 116.881049][ T8006] nbd: couldn't find device at index 15663104 [ 116.929321][ T8005] netlink: 'syz.2.560': attribute type 1 has an invalid length. [ 117.140170][ T8019] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 117.261439][ T8036] openvswitch: netlink: Unexpected mask (mask=40010, allowed=10058) [ 117.297704][ T8038] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 117.348298][ T6060] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.349445][ T42] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.349482][ T42] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.349510][ T42] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.436675][ T6065] IPVS: starting estimator thread 0... [ 117.510220][ T8044] IPVS: Scheduler module ip_vs_mh not found [ 117.513427][ T8043] IPVS: set_ctl: invalid protocol: 135 100.1.1.0:20001 [ 117.545483][ T8047] IPVS: using max 27 ests per chain, 64800 per kthread [ 117.606193][ T8060] ipvlan2: entered allmulticast mode [ 117.606214][ T8060] virt_wifi0: entered allmulticast mode [ 117.968829][ T8081] geneve2: entered promiscuous mode [ 117.968851][ T8081] geneve2: entered allmulticast mode [ 118.019053][ T8088] ip_tables: iptables: counters copy to user failed while replacing table [ 118.050396][ T8091] bond0: (slave ip6tnl0): refused to change device type [ 118.308028][ T8113] IPv6: NLM_F_REPLACE set, but no existing node found! [ 118.312853][ T8113] netlink: 'syz.2.585': attribute type 1 has an invalid length. [ 118.730007][ T8130] netlink: 'syz.2.591': attribute type 39 has an invalid length. [ 119.065156][ T8151] netlink: 'syz.1.599': attribute type 1 has an invalid length. [ 119.095099][ T8152] veth0_to_bond: left allmulticast mode [ 119.104264][ T8152] bond0: (slave veth0_to_bond): making interface the new active one [ 119.105231][ T8152] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 119.122669][ T8155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.215748][ T8162] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 119.913860][ T8208] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 119.914300][ T8208] team0: Device ipvlan2 is already an upper device of the team interface [ 120.060956][ T8221] __nla_validate_parse: 20 callbacks suppressed [ 120.060974][ T8221] netlink: 60 bytes leftover after parsing attributes in process `syz.2.614'. [ 120.084548][ T8214] pimreg: left allmulticast mode [ 120.144575][ T8223] net_ratelimit: 1 callbacks suppressed [ 120.144595][ T8223] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 120.218788][ T8203] veth3: entered allmulticast mode [ 120.474197][ T8241] netlink: 36 bytes leftover after parsing attributes in process `syz.0.622'. [ 120.635841][ T8252] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 28 bytes [ 120.636695][ T8253] SET target dimension over the limit! [ 120.643012][ T8252] gre2: entered promiscuous mode [ 120.866029][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'. [ 120.870913][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.631'. [ 120.873059][ T8270] openvswitch: netlink: Invalid VLAN frame [ 120.907172][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.634'. [ 121.027333][ T8274] 8021q: adding VLAN 0 to HW filter on device team1 [ 121.101399][ T8280] netlink: 'syz.3.636': attribute type 178 has an invalid length. [ 121.256577][ T8277] netlink: 20 bytes leftover after parsing attributes in process `syz.1.635'. [ 121.286686][ T8295] xt_HMARK: proto mask must be zero with L3 mode [ 121.340338][ T8296] syzkaller0: entered promiscuous mode [ 121.340360][ T8296] syzkaller0: entered allmulticast mode [ 121.762481][ T8333] nbd: must specify at least one socket [ 121.769850][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.649'. [ 121.802489][ T8333] bond2: option xmit_hash_policy: invalid value (64) [ 121.804036][ T8333] bond2 (unregistering): Released all slaves [ 121.837506][ T8336] veth1_macvtap: left promiscuous mode [ 121.875562][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 121.943173][ T8343] netlink: 40 bytes leftover after parsing attributes in process `syz.0.652'. [ 121.945031][ T8343] netlink: 40 bytes leftover after parsing attributes in process `syz.0.652'. [ 122.004910][ T8346] netlink: 36 bytes leftover after parsing attributes in process `syz.0.653'. [ 122.137909][ T8299] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 122.144960][ T8349] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 122.145017][ T8349] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 122.201047][ T8351] x_tables: duplicate underflow at hook 2 [ 122.256522][ T8356] netlink: Conntrack attr has 8 unknown bytes [ 122.256553][ T8356] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.347068][ T8360] netlink: 'syz.0.659': attribute type 7 has an invalid length. [ 122.347088][ T8360] netlink: 'syz.0.659': attribute type 8 has an invalid length. [ 122.374026][ T8360] erspan0: entered promiscuous mode [ 122.383861][ T8360] gretap0: entered promiscuous mode [ 122.392210][ T8360] erspan0: left promiscuous mode [ 122.393401][ T8360] gretap0: left promiscuous mode [ 122.907954][ T8386] netlink: 'syz.4.668': attribute type 13 has an invalid length. [ 122.976609][ T8393] tipc: Enabled bearer , priority 10 [ 123.024491][ T8397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.045838][ T8397] netlink: NAT attribute has 8 unknown bytes [ 123.045867][ T8397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.088752][ T8397] 8021q: adding VLAN 0 to HW filter on device bond3 [ 123.385754][ T5611] Bluetooth: hci4: command 0x0401 tx timeout [ 124.042541][ T8430] netlink: 'syz.4.682': attribute type 10 has an invalid length. [ 124.057591][ T8430] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.057707][ T8430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.058055][ T8430] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.058177][ T8430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.062780][ T8430] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 124.119296][ T8428] syzkaller0: entered promiscuous mode [ 124.119316][ T8428] syzkaller0: entered allmulticast mode [ 124.165786][ T8439] lo: entered allmulticast mode [ 124.201212][ T8442] netlink: 'syz.3.686': attribute type 1 has an invalid length. [ 124.222102][ T8440] bridge_slave_1: left allmulticast mode [ 124.222126][ T8440] bridge_slave_1: left promiscuous mode [ 124.222346][ T8440] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.229599][ T8440] bridge_slave_0: left allmulticast mode [ 124.229620][ T8440] bridge_slave_0: left promiscuous mode [ 124.229851][ T8440] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.268920][ T8440] bond0: (slave bridge0): Releasing backup interface [ 124.321938][ T8444] 8021q: adding VLAN 0 to HW filter on device bond6 [ 124.324004][ T8444] bond5: (slave bond6): making interface the new active one [ 124.324466][ T8444] bond5: (slave bond6): Enslaving as an active interface with an up link [ 124.331854][ T8445] gtp0: entered promiscuous mode [ 124.331869][ T8445] gtp0: entered allmulticast mode [ 124.349405][ T8442] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 124.350148][ T8435] lo: left allmulticast mode [ 124.573813][ T8461] netlink: 'syz.2.691': attribute type 1 has an invalid length. [ 124.631225][ T8461] 8021q: adding VLAN 0 to HW filter on device bond3 [ 124.787140][ T8476] syzkaller1: entered promiscuous mode [ 124.787162][ T8476] syzkaller1: entered allmulticast mode [ 125.054899][ T8487] veth4: entered promiscuous mode [ 125.054920][ T8487] veth4: entered allmulticast mode [ 125.131766][ T8496] netlink: 'syz.3.701': attribute type 1 has an invalid length. [ 125.192664][ T8496] 8021q: adding VLAN 0 to HW filter on device bond7 [ 125.222365][ T8496] __nla_validate_parse: 15 callbacks suppressed [ 125.222384][ T8496] netlink: 36 bytes leftover after parsing attributes in process `syz.3.701'. [ 125.241096][ T8496] bond7: (slave veth0_to_bond): making interface the new active one [ 125.244101][ T8496] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 125.308855][ T8496] macvlan2: entered promiscuous mode [ 125.308874][ T8496] macvlan2: entered allmulticast mode [ 125.310311][ T8496] bond7: entered promiscuous mode [ 125.310329][ T8496] veth0_to_bond: entered promiscuous mode [ 125.311787][ T8496] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 125.312434][ T8506] netlink: 48 bytes leftover after parsing attributes in process `syz.4.703'. [ 125.312998][ T8506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.703'. [ 125.316301][ T8496] bond7: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 125.316510][ T8496] bond7: left promiscuous mode [ 125.316523][ T8496] veth0_to_bond: left promiscuous mode [ 125.384490][ T8513] netlink: 'syz.0.706': attribute type 1 has an invalid length. [ 125.470862][ T8525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.707'. [ 125.491908][ T8513] bond2 (unregistering): Released all slaves [ 125.537576][ T8514] bond2 (unregistering): Released all slaves [ 125.872882][ T8547] netlink: 40 bytes leftover after parsing attributes in process `syz.3.713'. [ 125.872907][ T8547] netlink: 40 bytes leftover after parsing attributes in process `syz.3.713'. [ 125.984049][ T8554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.715'. [ 126.052542][ T8565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.715'. [ 126.072124][ T8557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.716'. [ 126.090753][ T8554] bond4: Invalid ad_actor_system MAC address. [ 126.090770][ T8554] bond4: option ad_actor_system: invalid value (1) [ 126.108377][ T8554] bond4 (unregistering): Released all slaves [ 126.213898][ T8565] bond4: Invalid ad_actor_system MAC address. [ 126.213918][ T8565] bond4: option ad_actor_system: invalid value (1) [ 126.220018][ T8565] bond4 (unregistering): Released all slaves [ 126.248876][ T8592] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 126.294389][ T8579] team0: Device gtp0 is up. Set it down before adding it as a team port [ 126.334938][ T8588] netlink: 52 bytes leftover after parsing attributes in process `syz.4.723'. [ 126.334957][ T8588] tipc: Invalid UDP bearer configuration [ 126.334995][ T8588] tipc: Enabling of bearer rejected, failed to enable media [ 126.714117][ T8619] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 126.740804][ T8621] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 126.998816][ T8583] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 127.262229][ T8658] syzkaller0: entered promiscuous mode [ 127.262243][ T8658] syzkaller0: entered allmulticast mode [ 128.185412][ T5611] Bluetooth: hci0: command 0x0c3a tx timeout [ 129.720991][ T8624] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.081827][ T8699] team0: Port device dummy0 removed [ 130.101807][ T8699] bridge_slave_0: left allmulticast mode [ 130.101832][ T8699] bridge_slave_0: left promiscuous mode [ 130.102051][ T8699] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.134557][ T8699] bridge_slave_1: left allmulticast mode [ 130.134580][ T8699] bridge_slave_1: left promiscuous mode [ 130.134780][ T8699] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.166865][ T8699] bond7: (slave veth0_to_bond): Releasing active interface [ 130.184897][ T8714] netlink: 'syz.4.750': attribute type 4 has an invalid length. [ 130.199636][ T8699] bond0: (slave bond_slave_0): Releasing backup interface [ 130.227789][ T8699] bond0: (slave bond_slave_1): Releasing backup interface [ 130.270947][ T8699] team0: Port device team_slave_0 removed [ 130.302541][ T8699] team0: Port device team_slave_1 removed [ 130.308597][ T8699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.308616][ T8699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.319103][ T8699] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 130.319173][ T8705] veth1_to_bond: entered allmulticast mode [ 130.437581][ T8719] veth1_macvtap: left promiscuous mode [ 130.520837][ T8732] __nla_validate_parse: 6 callbacks suppressed [ 130.520855][ T8732] netlink: 20 bytes leftover after parsing attributes in process `syz.3.753'. [ 130.547224][ T8736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.754'. [ 130.584271][ T8740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.755'. [ 130.604316][ T8740] bond2: option xmit_hash_policy: invalid value (64) [ 130.609268][ T8740] bond2 (unregistering): Released all slaves [ 130.756445][ T8745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.756'. [ 130.862316][ T8704] veth1_to_bond: left allmulticast mode [ 130.940170][ T8755] netlink: 132 bytes leftover after parsing attributes in process `syz.1.760'. [ 130.956437][ T8755] netlink: 28 bytes leftover after parsing attributes in process `syz.1.760'. [ 133.164869][ T8722] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.406761][ T8773] netlink: 'syz.0.764': attribute type 1 has an invalid length. [ 133.448703][ T8786] netlink: 28 bytes leftover after parsing attributes in process `syz.4.767'. [ 133.448735][ T8786] netlink: 28 bytes leftover after parsing attributes in process `syz.4.767'. [ 133.458132][ T8773] bond2: entered promiscuous mode [ 133.458987][ T8773] 8021q: adding VLAN 0 to HW filter on device bond2 [ 133.475250][ T8772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.763'. [ 133.476238][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.763'. [ 133.491037][ T8786] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 133.493055][ T8786] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 133.496155][ T8786] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 133.528322][ T8786] sctp: [Deprecated]: syz.4.767 (pid 8786) Use of int in maxseg socket option. [ 133.528322][ T8786] Use struct sctp_assoc_value instead [ 133.569872][ T8774] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 133.666590][ T8792] erspan0: entered promiscuous mode [ 133.669276][ T8792] vlan1: entered promiscuous mode [ 133.789853][ T8794] bond2: (slave bridge0): making interface the new active one [ 133.789876][ T8794] bridge0: entered promiscuous mode [ 133.793776][ T8794] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 133.847161][ T8799] netlink: 'syz.3.771': attribute type 3 has an invalid length. [ 134.501769][ T8826] syzkaller0: entered promiscuous mode [ 134.501790][ T8826] syzkaller0: entered allmulticast mode [ 134.506373][ T8826] tipc: Started in network mode [ 134.506397][ T8826] tipc: Node identity 6e32965d42a2, cluster identity 4711 [ 134.506656][ T8826] tipc: Enabled bearer , priority 0 [ 134.512382][ T8826] tipc: Resetting bearer [ 134.545214][ T8825] tipc: Resetting bearer [ 134.575285][ T8825] tipc: Disabling bearer [ 134.742319][ T8843] ip6t_rt: address list match requested but addrnr is 0 [ 134.797256][ T6066] IPVS: starting estimator thread 0... [ 134.797999][ T8845] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 134.799759][ T8843] netlink: 'syz.1.782': attribute type 9 has an invalid length. [ 134.832564][ T8843] netlink: 'syz.1.782': attribute type 9 has an invalid length. [ 134.833977][ T6064] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.834187][ T6064] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.834338][ T6064] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.836982][ T6066] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.895445][ T8847] IPVS: using max 30 ests per chain, 72000 per kthread [ 135.020965][ T8867] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 135.238659][ T8873] xfrm1: entered promiscuous mode [ 135.238678][ T8873] xfrm1: entered allmulticast mode [ 135.344861][ T8885] openvswitch: netlink: IPv4 frag type 132 is out of range max 2 [ 135.414151][ T8894] netlink: 'syz.3.795': attribute type 1 has an invalid length. [ 135.414173][ T8894] netlink: 'syz.3.795': attribute type 1 has an invalid length. [ 135.598174][ T8911] __nla_validate_parse: 18 callbacks suppressed [ 135.598193][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.799'. [ 135.598205][ T8911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.799'. [ 135.598227][ T8911] netlink: 'syz.2.799': attribute type 15 has an invalid length. [ 135.624440][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.799'. [ 135.624459][ T8911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.799'. [ 135.624481][ T8911] netlink: 'syz.2.799': attribute type 15 has an invalid length. [ 135.626640][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.799'. [ 135.626656][ T8912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.799'. [ 135.626675][ T8912] netlink: 'syz.2.799': attribute type 15 has an invalid length. [ 135.639135][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.799'. [ 135.639150][ T8912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.799'. [ 135.639169][ T8912] netlink: 'syz.2.799': attribute type 15 has an invalid length. [ 135.657760][ T6066] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 135.657797][ T6066] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 135.657826][ T6066] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 135.657854][ T6066] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 135.764434][ T8917] netlink: 'syz.1.801': attribute type 2 has an invalid length. [ 135.841288][ T8923] netlink: 260 bytes leftover after parsing attributes in process `syz.3.804'. [ 135.910352][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.803'. [ 135.952314][ T8934] netlink: 'syz.2.806': attribute type 15 has an invalid length. [ 136.088301][ T8940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.113398][ T8944] 8021q: VLANs not supported on ip_vti0 [ 136.231576][ T8956] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 136.700608][ T8961] netlink: 'syz.3.813': attribute type 33 has an invalid length. [ 137.385810][ T5611] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 137.386414][ T5618] Bluetooth: hci0: command 0x0c3a tx timeout [ 137.494693][ T9008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.538510][ T9008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.505544][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 138.523835][ T9061] openvswitch: netlink: IP tunnel TTL not specified. [ 138.523866][ T9061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.767835][ T9063] hsr_slave_1 (unregistering): left promiscuous mode [ 138.835850][ T9072] syzkaller1: entered promiscuous mode [ 138.835870][ T9072] syzkaller1: entered allmulticast mode [ 139.297892][ T9108] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20002 [ 139.392550][ T9113] netlink: 'syz.2.856': attribute type 1 has an invalid length. [ 139.447413][ T9113] 8021q: adding VLAN 0 to HW filter on device bond5 [ 139.567766][ T9130] block nbd0: Unsupported socket: should be TCP or UNIX. [ 139.573553][ T9130] block nbd0: shutting down sockets [ 140.292337][ T9196] x_tables: duplicate underflow at hook 2 [ 140.315316][ T9196] x_tables: duplicate underflow at hook 2 [ 140.405923][ T9193] veth1_macvtap: entered promiscuous mode [ 140.414041][ T9193] batman_adv: batadv0: Interface activated: gretap1 [ 140.443595][ T9193] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.460544][ T9193] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.495716][ T9203] syzkaller1: entered promiscuous mode [ 140.495736][ T9203] syzkaller1: entered allmulticast mode [ 140.790735][ T9219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.047174][ T9229] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 141.143418][ T9238] netlink: 'syz.3.893': attribute type 1 has an invalid length. [ 141.163201][ T9236] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 141.163270][ T9236] syzkaller1: Refused to change device type [ 141.163744][ T9236] ip_tables: iptables: counters copy to user failed while replacing table [ 141.394103][ T9252] __nla_validate_parse: 50 callbacks suppressed [ 141.394122][ T9252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.897'. [ 141.532401][ T9254] netlink: 604 bytes leftover after parsing attributes in process `syz.4.898'. [ 142.063532][ T9296] netlink: 604 bytes leftover after parsing attributes in process `syz.4.898'. [ 142.338520][ T9304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.908'. [ 142.467072][ T9307] netlink: 'syz.2.909': attribute type 8 has an invalid length. [ 142.468509][ T9307] netlink: 'syz.2.909': attribute type 12 has an invalid length. [ 142.487028][ T9308] netlink: 'syz.2.909': attribute type 4 has an invalid length. [ 142.617217][ T9315] batadv0: entered promiscuous mode [ 142.618788][ T9315] macsec1: entered promiscuous mode [ 142.621154][ T9315] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 142.720553][ T9315] batadv0: left promiscuous mode [ 143.115684][ T9341] netlink: 64 bytes leftover after parsing attributes in process `syz.1.918'. [ 143.138438][ T9343] netlink: 164 bytes leftover after parsing attributes in process `syz.4.917'. [ 143.148813][ T9345] netlink: 164 bytes leftover after parsing attributes in process `syz.4.917'. [ 143.495731][ T9366] netlink: 'syz.2.924': attribute type 2 has an invalid length. [ 143.571051][ T9359] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.646153][ T9371] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:0 [ 143.728634][ T9377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.929'. [ 144.165657][ T9407] netlink: zone id is out of range [ 144.165673][ T9407] netlink: set zone limit has 4 unknown bytes [ 144.261494][ T9416] netlink: 'syz.1.942': attribute type 5 has an invalid length. [ 144.277212][ T9417] netlink: 'syz.1.942': attribute type 5 has an invalid length. [ 144.398019][ T9426] netlink: 16 bytes leftover after parsing attributes in process `syz.4.945'. [ 144.479769][ T9435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.948'. [ 144.730137][ T9450] bond4: option all_slaves_active: invalid value (179) [ 144.735826][ T9450] bond4 (unregistering): Released all slaves [ 145.014284][ T9472] Bluetooth: ISO socket layer initialized [ 145.023355][ T5611] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 145.089838][ T9475] Bluetooth: MGMT ver 1.23 [ 145.112062][ T9475] veth2: entered promiscuous mode [ 145.112083][ T9475] veth2: entered allmulticast mode [ 145.158595][ T9476] netlink: 'syz.2.962': attribute type 5 has an invalid length. [ 145.333681][ T9492] netlink: 'syz.4.966': attribute type 16 has an invalid length. [ 145.387984][ T9503] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 145.754976][ T9527] tipc: Started in network mode [ 145.755003][ T9527] tipc: Node identity ac14140f, cluster identity 4711 [ 145.767091][ T9527] tipc: New replicast peer: 255.255.255.255 [ 145.767874][ T9527] tipc: Enabled bearer , priority 10 [ 145.935026][ T9537] syzkaller0: entered promiscuous mode [ 145.935048][ T9537] syzkaller0: entered allmulticast mode [ 146.298828][ T9561] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 146.410293][ T9563] __nla_validate_parse: 11 callbacks suppressed [ 146.410311][ T9563] netlink: 64 bytes leftover after parsing attributes in process `syz.0.989'. [ 146.411997][ T9566] netlink: 28 bytes leftover after parsing attributes in process `syz.1.990'. [ 146.796768][ T9588] netlink: 72 bytes leftover after parsing attributes in process `syz.2.998'. [ 146.796998][ T9589] netlink: 72 bytes leftover after parsing attributes in process `syz.2.998'. [ 146.885454][ T5752] tipc: Node number set to 2886997007 [ 146.907509][ T9601] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.907531][ T9601] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.907545][ T9601] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.907559][ T9601] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.907572][ T9601] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.907585][ T9601] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.907599][ T9601] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.907613][ T9601] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.907626][ T9601] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.907640][ T9601] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.907653][ T9601] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.907666][ T9601] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.907680][ T9601] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.907693][ T9601] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.907706][ T9601] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.907720][ T9601] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.907733][ T9601] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.907746][ T9601] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.907760][ T9601] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.907773][ T9601] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.907787][ T9601] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.907800][ T9601] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.907813][ T9601] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.907827][ T9601] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.907840][ T9601] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.907854][ T9601] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.907867][ T9601] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.907881][ T9601] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.907894][ T9601] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.907907][ T9601] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.907921][ T9601] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.907947][ T9601] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.907961][ T9601] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.930953][ T9603] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1003'. [ 146.993844][ T9605] netlink: Unknown conntrack attr (type=12294, max=9) [ 146.993881][ T9605] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.026576][ T9605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1002'. [ 147.165141][ T9609] ip_tables: iptables: counters copy to user failed while replacing table [ 147.213305][ T9607] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1004'. [ 147.339268][ T9616] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1006'. [ 147.699858][ T9636] syzkaller1: entered promiscuous mode [ 147.737404][ T9642] xt_IDLETIMER: label is empty or not nul-terminated [ 147.741223][ T9635] syzkaller1 (unregistering): left promiscuous mode [ 147.763950][ T9641] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1013'. [ 147.884006][ T9657] sctp: [Deprecated]: syz.1.1017 (pid 9657) Use of int in max_burst socket option deprecated. [ 147.884006][ T9657] Use struct sctp_assoc_value instead [ 147.884370][ T9657] openvswitch: netlink: Tunnel attr 13 has unexpected len 4 expected 16 [ 147.919912][ T9657] netlink: 'syz.1.1017': attribute type 10 has an invalid length. [ 147.939009][ T9657] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.940751][ T9657] .`: (slave team0): Enslaving as an active interface with an up link [ 147.972344][ T9658] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1011'. [ 148.187278][ T9675] netlink: 'syz.3.1023': attribute type 10 has an invalid length. [ 148.210612][ T9675] team0: Device veth0_macvtap failed to register rx_handler [ 148.223951][ T9675] netlink: 'syz.3.1023': attribute type 10 has an invalid length. [ 148.284668][ T9675] team0: Device veth0_macvtap failed to register rx_handler [ 148.290327][ T9675] netlink: 'syz.3.1023': attribute type 10 has an invalid length. [ 148.294085][ T9675] team0: Device veth0_macvtap failed to register rx_handler [ 148.296646][ T9681] wlan1 speed is unknown, defaulting to 1000 [ 148.296741][ T9681] wlan1 speed is unknown, defaulting to 1000 [ 148.297964][ T9675] netlink: 'syz.3.1023': attribute type 10 has an invalid length. [ 148.360769][ T9675] team0: Device veth0_macvtap failed to register rx_handler [ 148.365455][ T9681] wlan1 speed is unknown, defaulting to 1000 [ 148.366455][ T9681] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 148.366483][ T9681] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 148.366517][ T9681] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 148.389741][ T9681] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 148.418554][ T9675] netlink: 'syz.3.1023': attribute type 10 has an invalid length. [ 148.421686][ T9681] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 148.452297][ T9675] team0: Device veth0_macvtap failed to register rx_handler [ 148.458662][ T9675] netlink: 'syz.3.1023': attribute type 10 has an invalid length. [ 148.478523][ T9675] team0: Device veth0_macvtap failed to register rx_handler [ 148.486400][ T9675] netlink: 'syz.3.1023': attribute type 10 has an invalid length. [ 148.512346][ T9675] team0: Device veth0_macvtap failed to register rx_handler [ 148.522735][ T9675] netlink: 'syz.3.1023': attribute type 10 has an invalid length. [ 148.529786][ T9675] team0: Device veth0_macvtap failed to register rx_handler [ 148.532569][ T9675] netlink: 'syz.3.1023': attribute type 10 has an invalid length. [ 148.540587][ T9675] team0: Device veth0_macvtap failed to register rx_handler [ 148.550049][ T9675] team0: Device veth0_macvtap failed to register rx_handler [ 148.572420][ T9681] wlan1 speed is unknown, defaulting to 1000 [ 148.578118][ T9675] team0: Device veth0_macvtap failed to register rx_handler [ 148.592965][ T9681] wlan1 speed is unknown, defaulting to 1000 [ 148.596746][ T9675] team0: Device veth0_macvtap failed to register rx_handler [ 148.622240][ T9675] team0: Device veth0_macvtap failed to register rx_handler [ 148.624147][ T9681] wlan1 speed is unknown, defaulting to 1000 [ 148.644422][ T9675] team0: Device veth0_macvtap failed to register rx_handler [ 148.655135][ T9675] team0: Device veth0_macvtap failed to register rx_handler [ 148.666370][ T9681] wlan1 speed is unknown, defaulting to 1000 [ 148.676046][ T9675] team0: Device veth0_macvtap failed to register rx_handler [ 148.680795][ T9675] team0: Device veth0_macvtap failed to register rx_handler [ 148.685927][ T9681] wlan1 speed is unknown, defaulting to 1000 [ 148.718421][ T9675] team0: Device veth0_macvtap failed to register rx_handler [ 148.723994][ T9675] team0: Device veth0_macvtap failed to register rx_handler [ 148.743471][ T9675] team0: Device veth0_macvtap failed to register rx_handler [ 148.752723][ T9675] team0: Device veth0_macvtap failed to register rx_handler [ 148.763997][ T9675] team0: Device veth0_macvtap failed to register rx_handler [ 148.778118][ T9696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.781178][ T9675] team0: Device veth0_macvtap failed to register rx_handler [ 148.783019][ T9675] team0: Device veth0_macvtap failed to register rx_handler [ 148.805891][ T9675] team0: Device veth0_macvtap failed to register rx_handler [ 148.810739][ T9675] team0: Device veth0_macvtap failed to register rx_handler [ 148.811827][ T9694] ip_tables: iptables: counters copy to user failed while replacing table [ 148.832372][ T9675] team0: Device veth0_macvtap failed to register rx_handler [ 148.839399][ T9675] team0: Device veth0_macvtap failed to register rx_handler [ 148.883006][ T9675] team0: Device veth0_macvtap failed to register rx_handler [ 148.886704][ T9675] team0: Device veth0_macvtap failed to register rx_handler [ 148.909109][ T9675] team0: Device veth0_macvtap failed to register rx_handler [ 148.916822][ T9675] team0: Device veth0_macvtap failed to register rx_handler [ 148.922909][ T9675] team0: Device veth0_macvtap failed to register rx_handler [ 149.006912][ T9703] Driver unsupported XDP return value 0 on prog (id 319) dev N/A, expect packet loss! [ 149.381508][ T9729] IPVS: lblc: UDP [fe80::aa]:8080 - no destination available [ 149.814242][ T9700] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 151.076243][ T5611] Bluetooth: hci1: command 0x0401 tx timeout [ 153.334646][ T9767] __nla_validate_parse: 4 callbacks suppressed [ 153.334665][ T9767] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1049'. [ 153.345854][ T9772] validate_nla: 24 callbacks suppressed [ 153.345870][ T9772] netlink: 'syz.4.1053': attribute type 19 has an invalid length. [ 153.616507][ T9796] syzkaller0: entered promiscuous mode [ 153.616528][ T9796] syzkaller0: entered allmulticast mode [ 153.655055][ T5611] Bluetooth: hci2: ISO packet for unknown connection handle 2723 [ 153.983061][ T9821] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1066'. [ 154.279508][ T9837] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1071'. [ 154.637450][ T9864] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1081'. [ 154.642774][ T9864] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1081'. [ 154.656363][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1082'. [ 154.760645][ T9872] syzkaller1: entered promiscuous mode [ 154.760666][ T9872] syzkaller1: entered allmulticast mode [ 155.070040][ T9887] tipc: Bearer : already 2 bearers with priority 10 [ 155.070059][ T9887] tipc: Bearer : trying with adjusted priority [ 155.073653][ T9887] tipc: New replicast peer: 172.20.20.187 [ 155.074464][ T9887] tipc: Enabled bearer , priority 9 [ 155.503925][ T9929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.621345][ T9937] xt_limit: Overflow, try lower: 536871034/0 [ 155.627398][ T9937] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1100'. [ 155.688179][ T9935] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1098'. [ 155.688227][ T9935] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1098'. [ 156.095936][ T9960] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1105'. [ 156.120522][ T9954] hsr0: entered allmulticast mode [ 156.120543][ T9954] hsr_slave_0: entered allmulticast mode [ 156.120561][ T9954] hsr_slave_1: entered allmulticast mode [ 156.315059][ T9973] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 156.333618][ T9980] ip_tables: iptables: counters copy to user failed while replacing table [ 156.516998][ T9982] bond9: option mode: invalid value (10) [ 156.518147][ T9982] bond9 (unregistering): Released all slaves [ 156.577607][ T9986] bond9: option mode: invalid value (10) [ 156.579030][ T9986] bond9 (unregistering): Released all slaves [ 156.662810][ T9995] openvswitch: netlink: Duplicate or invalid key (type 0). [ 156.719748][ T9999] tipc: Enabling of bearer rejected, already enabled [ 157.014416][T10026] netlink: 'syz.1.1124': attribute type 15 has an invalid length. [ 157.390555][T10049] netlink: 'syz.3.1132': attribute type 1 has an invalid length. [ 157.390581][T10049] netlink: 'syz.3.1132': attribute type 2 has an invalid length. [ 157.426216][T10048] syzkaller0: left promiscuous mode [ 157.426236][T10048] syzkaller0: left allmulticast mode [ 157.618147][T10059] batman_adv: batadv0: Adding interface: syzkaller0 [ 157.618169][T10059] batman_adv: batadv0: Interface activated: syzkaller0 [ 157.620588][T10059] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 157.623358][T10058] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 157.676729][T10058] batman_adv: batadv0: Removing interface: syzkaller0 [ 157.940810][T10082] netlink: 'syz.1.1138': attribute type 1 has an invalid length. [ 158.007750][T10082] 8021q: adding VLAN 0 to HW filter on device bond4 [ 173.065880][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 191.153324][ T4933] Bluetooth: hci0: command 0x0c3a tx timeout [ 191.153364][ T4933] Bluetooth: hci2: command 0x0406 tx timeout [ 191.153386][ T4933] Bluetooth: hci1: command 0x0401 tx timeout [ 191.153407][ T4933] Bluetooth: hci3: command 0x0406 tx timeout [ 225.068913][T10130] bond8: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 225.077730][T10130] bond8 (unregistering): Released all slaves [ 225.118430][T10143] __nla_validate_parse: 10 callbacks suppressed [ 225.118501][T10143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1143'. [ 225.139845][T10137] bond9: entered allmulticast mode [ 225.140253][T10137] 8021q: adding VLAN 0 to HW filter on device bond9 [ 225.158095][T10145] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 225.160505][T10145] macvlan2: entered allmulticast mode [ 225.160522][T10145] bond0: entered allmulticast mode [ 225.162708][T10142] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1144'. [ 225.171284][T10145] bond9: (slave macvlan2): Enslaving as a backup interface with a down link [ 225.267942][T10145] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1146'. [ 225.269899][T10137] ip6gretap1: entered allmulticast mode [ 225.271925][T10137] bond9: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 225.274051][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1148'. [ 225.314090][T10145] bond0 (unregistering): left allmulticast mode [ 225.319350][ T6062] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 225.352231][T10145] bond9: (slave macvlan2): Releasing backup interface [ 225.352254][T10145] bond9: (slave macvlan2): the permanent HWaddr of slave - aa:41:ce:04:01:e9 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 225.354750][T10145] macvlan2 (unregistering): left allmulticast mode [ 225.392864][T10145] bond0 (unregistering): Released all slaves [ 225.425243][T10160] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1152'. [ 225.429492][ T6062] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 225.682742][T10178] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1158'. [ 225.682950][T10178] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1158'. [ 225.777880][T10181] xt_l2tp: invalid flags combination: 0 [ 225.854269][T10184] dvmrp0: entered allmulticast mode [ 225.947744][T10191] netlink: 'syz.4.1164': attribute type 4 has an invalid length. [ 225.947765][T10191] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1164'. [ 226.063077][T10191] netlink: 'syz.4.1164': attribute type 4 has an invalid length. [ 226.063099][T10191] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1164'. [ 226.066479][T10191] netlink: 'syz.4.1164': attribute type 4 has an invalid length. [ 226.066493][T10191] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1164'. [ 226.068124][T10191] netlink: 'syz.4.1164': attribute type 4 has an invalid length. [ 226.068351][T10191] netlink: 'syz.4.1164': attribute type 4 has an invalid length. [ 226.069096][T10191] netlink: 'syz.4.1164': attribute type 4 has an invalid length. [ 226.069283][T10191] netlink: 'syz.4.1164': attribute type 4 has an invalid length. [ 226.069484][T10191] netlink: 'syz.4.1164': attribute type 4 has an invalid length. [ 226.073009][T10191] netlink: 'syz.4.1164': attribute type 4 has an invalid length. [ 226.073199][T10191] netlink: 'syz.4.1164': attribute type 4 has an invalid length. [ 226.135309][T10205] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 226.985488][T10239] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.987289][T10239] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.048568][T10243] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.048821][T10243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.049099][T10243] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.049224][T10243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.049770][T10243] bridge0: entered promiscuous mode [ 227.049795][T10243] bridge0: entered allmulticast mode [ 227.215184][T10239] 8021q: adding VLAN 0 to HW filter on device bond5 [ 227.710363][T10257] veth1_macvtap: left promiscuous mode [ 227.761745][T10257] veth1_macvtap: entered promiscuous mode [ 227.818562][T10257] bond0: (slave macsec0): Enslaving as an active interface with an up link [ 227.886811][T10243] bond5: (slave ip6erspan0): making interface the new active one [ 227.890082][T10243] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 228.120701][T10276] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 228.120780][T10276] gretap1: entered promiscuous mode [ 228.120794][T10276] gretap1: entered allmulticast mode [ 228.234878][T10287] ip_tables: iptables: counters copy to user failed while replacing table [ 228.311544][T10284] xt_CT: No such helper "snmp_trap" [ 228.466948][T10298] sctp: [Deprecated]: syz.4.1180 (pid 10298) Use of int in maxseg socket option. [ 228.466948][T10298] Use struct sctp_assoc_value instead [ 229.403755][T10327] : entered promiscuous mode [ 229.938717][T10358] bond6: entered promiscuous mode [ 229.938779][T10358] bond6: entered allmulticast mode [ 229.939304][T10358] 8021q: adding VLAN 0 to HW filter on device bond6 [ 231.131443][T10426] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 231.142931][T10427] __nla_validate_parse: 71 callbacks suppressed [ 231.142947][T10427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1210'. [ 231.150155][T10427] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1210'. [ 231.612738][T10448] validate_nla: 61 callbacks suppressed [ 231.612758][T10448] netlink: 'syz.4.1217': attribute type 1 has an invalid length. [ 231.648672][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1217'. [ 231.648704][T10448] netlink: 'syz.4.1217': attribute type 5 has an invalid length. [ 231.648717][T10448] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1217'. [ 231.688349][T10448] geneve2: entered promiscuous mode [ 231.688370][T10448] geneve2: entered allmulticast mode [ 231.690039][ T6065] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 231.690862][ T6065] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 231.690922][ T6065] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 231.690952][ T6065] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 231.775434][T10451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.846768][T10455] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!00000000000000000000003ÿÿÿ [ 232.004290][T10460] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1224'. [ 232.097865][T10462] nbd: must specify a size in bytes for the device [ 232.182932][T10466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1225'. [ 232.271564][T10474] gtp0: entered promiscuous mode [ 232.271587][T10474] gtp0: entered allmulticast mode [ 232.389005][T10480] xt_hashlimit: size too large, truncated to 1048576 [ 232.572593][T10485] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1229'. [ 232.587985][T10485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1229'. [ 232.723346][T10487] netlink: 'syz.2.1229': attribute type 4 has an invalid length. [ 232.828562][T10490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1230'. [ 232.998461][T10500] bridge0: port 3(dummy0) entered blocking state [ 232.998573][T10500] bridge0: port 3(dummy0) entered disabled state [ 232.998725][T10500] dummy0: entered allmulticast mode [ 233.003878][T10500] dummy0: entered promiscuous mode [ 233.005438][T10500] bridge0: port 3(dummy0) entered blocking state [ 233.005550][T10500] bridge0: port 3(dummy0) entered forwarding state [ 233.136083][T10511] netlink: NAT attribute has 8 unknown bytes [ 233.136113][T10511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.167019][T10507] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1234'. [ 233.529549][T10527] hsr0 (unregistering): left allmulticast mode [ 234.194972][T10555] netlink: 'syz.1.1246': attribute type 1 has an invalid length. [ 235.003744][T10569] netlink: 'syz.2.1252': attribute type 1 has an invalid length. [ 235.099663][T10569] bond8: entered promiscuous mode [ 235.102873][T10569] 8021q: adding VLAN 0 to HW filter on device bond8 [ 235.664617][T10602] x_tables: duplicate underflow at hook 1 [ 235.677913][T10603] x_tables: duplicate underflow at hook 1 [ 236.004365][T10622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.122320][T10622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.189808][T10634] __nla_validate_parse: 11 callbacks suppressed [ 236.189828][T10634] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1267'. [ 236.223354][T10628] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1266'. [ 236.429050][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1264'. [ 236.429240][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1264'. [ 236.429406][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1264'. [ 236.442885][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1264'. [ 236.443067][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1264'. [ 236.443248][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1264'. [ 236.443401][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1264'. [ 236.443578][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1264'. [ 236.880163][T10655] netlink: 'syz.0.1273': attribute type 4 has an invalid length. [ 237.352193][T10673] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 237.512253][T10677] macvlan0: entered promiscuous mode [ 238.002189][T10693] bond3: entered allmulticast mode [ 238.002710][T10693] 8021q: adding VLAN 0 to HW filter on device bond3 [ 238.142128][T10693] ip6gretap1: entered allmulticast mode [ 238.142705][T10693] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 238.217328][ T6062] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 238.229979][T10699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.270885][T10699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.280013][T10699] bond0 (unregistering): Released all slaves [ 238.338097][ T143] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 238.390475][ T6064] bond1: (slave veth0_to_bond): link status definitely down, disabling slave [ 238.401390][ T6064] bond1: now running without any active interface! [ 238.864624][T10727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.891694][T10727] openvswitch: netlink: Duplicate or invalid key (type 0). [ 238.978360][T10731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.031514][T10727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.045967][T10727] netlink: 'syz.0.1296': attribute type 14 has an invalid length. [ 239.680206][T10759] netlink: 'syz.1.1303': attribute type 4 has an invalid length. [ 239.957213][T10767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.122279][T10776] netlink: 'syz.1.1310': attribute type 1 has an invalid length. [ 240.840445][T10820] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 241.302893][T10837] syzkaller0: entered promiscuous mode [ 241.302915][T10837] syzkaller0: entered allmulticast mode [ 241.768680][T10856] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 241.835841][T10857] netlink: 'syz.2.1325': attribute type 21 has an invalid length. [ 241.835866][T10857] IPv6: NLM_F_CREATE should be specified when creating new route [ 241.835947][T10857] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 241.835956][T10857] IPv6: NLM_F_CREATE should be set when creating new route [ 241.835997][T10857] IPv6: NLM_F_CREATE should be set when creating new route [ 241.836020][T10857] IPv6: NLM_F_CREATE should be set when creating new route [ 243.051470][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 243.055167][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 243.071746][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 243.082258][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 243.082854][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 243.706030][T10856] netlink: 'syz.2.1325': attribute type 21 has an invalid length. [ 243.706104][T10856] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.360854][T10892] __nla_validate_parse: 73 callbacks suppressed [ 244.360873][T10892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1331'. [ 244.470267][T10889] netlink: 'syz.0.1332': attribute type 2 has an invalid length. [ 244.470288][T10889] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1332'. [ 244.569236][T10859] wlan1 speed is unknown, defaulting to 1000 [ 245.081790][T10913] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1335'. [ 245.147033][ T5618] Bluetooth: hci5: command tx timeout [ 245.149263][T10920] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 1, id = 0 [ 245.150424][T10919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1335'. [ 245.191365][T10922] IPVS: length: 100 != 24 [ 245.200132][T10917] ªªªªª»: renamed from dummy0 (while UP) [ 245.386337][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 245.555979][T10944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1339'. [ 245.634915][T10859] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.635768][T10859] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.644252][T10859] bridge_slave_0: entered allmulticast mode [ 245.651736][T10859] bridge_slave_0: entered promiscuous mode [ 245.656406][T10859] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.658225][T10859] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.658341][T10859] bridge_slave_1: entered allmulticast mode [ 245.661799][T10859] bridge_slave_1: entered promiscuous mode [ 245.750931][T10859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.758070][T10859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.833430][T10859] team0: Port device team_slave_0 added [ 245.838069][T10859] team0: Port device team_slave_1 added [ 245.907077][T10859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.907093][T10859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.907114][T10859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.913817][T10859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.913831][T10859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.913853][T10859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.036743][T10859] hsr_slave_0: entered promiscuous mode [ 246.040860][T10859] hsr_slave_1: entered promiscuous mode [ 246.224833][T10955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1342'. [ 246.299834][T10959] netlink: 'syz.0.1342': attribute type 9 has an invalid length. [ 246.299854][T10959] netlink: 'syz.0.1342': attribute type 4 has an invalid length. [ 246.885945][T10859] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 246.898592][T10859] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 246.899950][T10859] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 246.908390][T10859] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 246.910041][T10859] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 246.924705][T10859] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 246.929977][T10859] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 246.934766][T10859] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 247.224355][T10859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.232393][ T5618] Bluetooth: hci5: command tx timeout [ 247.247505][T10985] ip_tables: iptables: counters copy to user failed while replacing table [ 247.264183][T10859] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.283736][ T6067] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.283867][ T6067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.301737][ T6062] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.301860][ T6062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.460621][T10991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1348'. [ 247.626664][T10997] netlink: 'syz.2.1349': attribute type 3 has an invalid length. [ 247.663150][T11000] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1350'. [ 247.663172][T11000] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1350'. [ 247.663187][T11000] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1350'. [ 248.615664][T11040] Bluetooth: hci0: unsupported parameter 5134 [ 248.615685][T11040] Bluetooth: hci0: unsupported parameter 8192 [ 248.615696][T11040] Bluetooth: hci0: unsupported parameter 5134 [ 248.615707][T11040] Bluetooth: hci0: unsupported parameter 8192 [ 248.880026][T10859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.307026][ T5618] Bluetooth: hci5: command tx timeout [ 249.507959][T10859] veth0_vlan: entered promiscuous mode [ 249.533783][T11080] pim6reg: entered allmulticast mode [ 249.540130][T10859] veth1_vlan: entered promiscuous mode [ 249.561215][T11080] pim6reg: left allmulticast mode [ 249.644510][T10859] veth0_macvtap: entered promiscuous mode [ 249.663910][T10859] veth1_macvtap: entered promiscuous mode [ 249.714695][T10859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.734261][T10859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.791562][ T6060] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.794774][ T6065] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.795112][ T6065] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.795732][ T6065] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.858107][T11082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.000582][ T6065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.000605][ T6065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.123607][ T6065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.123629][ T6065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.294750][T11087] netlink: 'syz.0.1367': attribute type 1 has an invalid length. [ 250.484687][T11090] bond7: (slave bond_slave_0): Device is not our slave [ 250.484708][T11090] bond7: option active_slave: invalid value (bond_slave_0) [ 250.487847][T11090] bond7 (unregistering): Released all slaves [ 250.613929][T11104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.661341][T11096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1369'. [ 250.675057][T11087] bridge4: entered promiscuous mode [ 250.691128][T11087] bond0: (slave bridge4): making interface the new active one [ 250.693636][T11087] bond0: (slave bridge4): Enslaving as an active interface with an up link [ 251.015327][T11115] netlink: 'syz.0.1372': attribute type 1 has an invalid length. [ 251.167910][T11123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1374'. [ 251.183003][T11123] netlink: 524 bytes leftover after parsing attributes in process `syz.0.1374'. [ 251.194194][T11124] netlink: 524 bytes leftover after parsing attributes in process `syz.0.1374'. [ 251.198189][T11121] dvmrp0: entered allmulticast mode [ 251.377226][T11129] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1375'. [ 251.395132][ T5618] Bluetooth: hci5: command tx timeout [ 251.397767][T11135] netlink: 'syz.0.1376': attribute type 1 has an invalid length. [ 251.428747][T11132] netlink: 'syz.5.1377': attribute type 1 has an invalid length. [ 251.428767][T11132] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1377'. [ 251.463795][T11135] 8021q: adding VLAN 0 to HW filter on device bond5 [ 251.493991][T11138] bond1: (slave veth0_to_bond): Releasing active interface [ 251.528727][T11138] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 251.533257][T11135] bond5: entered promiscuous mode [ 251.533278][T11135] bond5: entered allmulticast mode [ 251.733933][T11146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1381'. [ 251.990616][T11159] netlink: 'syz.0.1383': attribute type 1 has an invalid length. [ 251.990637][T11159] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1383'. [ 251.990651][T11159] netlink: 'syz.0.1383': attribute type 2 has an invalid length. [ 251.990663][T11159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1383'. [ 252.045016][T11149] 8021q: adding VLAN 0 to HW filter on device bond1 [ 252.117432][T11163] netlink: NAT attribute has 8 unknown bytes [ 252.117467][T11163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.495271][T11169] netlink: 'syz.2.1388': attribute type 13 has an invalid length. [ 252.495946][T11169] netlink: 'syz.2.1388': attribute type 13 has an invalid length. [ 252.496156][T11169] netlink: 'syz.2.1388': attribute type 13 has an invalid length. [ 252.496341][T11169] netlink: 'syz.2.1388': attribute type 13 has an invalid length. [ 252.784734][T11180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1390'. [ 252.796265][T11180] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 253.182021][T11197] ip_tables: iptables: counters copy to user failed while replacing table [ 255.649256][T11224] validate_nla: 29 callbacks suppressed [ 255.649276][T11224] netlink: 'syz.5.1402': attribute type 1 has an invalid length. [ 255.803817][T11224] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.954924][T11235] __nla_validate_parse: 6 callbacks suppressed [ 255.954943][T11235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1404'. [ 255.995284][T11243] xt_socket: unknown flags 0xc [ 256.220816][T11250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1407'. [ 256.428421][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 256.431696][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 256.433967][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 256.465758][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 256.466900][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 256.529971][T11269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1411'. [ 256.537511][T11269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1411'. [ 256.538289][T11269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1411'. [ 256.539101][T11269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1411'. [ 256.539896][T11269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1411'. [ 256.540660][T11269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1411'. [ 256.541427][T11269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1411'. [ 256.542202][T11269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1411'. [ 257.021142][T11291] xt_IDLETIMER: timeout value is zero [ 257.027981][T11292] xt_IDLETIMER: timeout value is zero [ 257.180037][T11294] syzkaller0: entered promiscuous mode [ 257.180060][T11294] syzkaller0: entered allmulticast mode [ 257.641528][T11314] netlink: 'syz.5.1421': attribute type 1 has an invalid length. [ 257.641572][T11314] netlink: 'syz.5.1421': attribute type 7 has an invalid length. [ 257.641584][T11314] netlink: 'syz.5.1421': attribute type 8 has an invalid length. [ 257.641599][T11314] NCSI netlink: No device for ifindex 65584 [ 258.587940][ T5618] Bluetooth: hci6: command tx timeout [ 259.694649][T11262] wlan1 speed is unknown, defaulting to 1000 [ 259.841856][T11323] No such timeout policy "syz1" [ 260.405942][T11344] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 260.665833][ T5618] Bluetooth: hci6: command tx timeout [ 260.824548][T11356] C: renamed from lo [ 260.851969][T11356] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 260.953394][T11355] gretap0: entered promiscuous mode [ 260.973563][T11365] netlink: 'syz.5.1434': attribute type 3 has an invalid length. [ 260.973581][T11365] netlink: 'syz.5.1434': attribute type 2 has an invalid length. [ 261.107094][T11372] __nla_validate_parse: 65 callbacks suppressed [ 261.107114][T11372] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1436'. [ 261.219064][T11262] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.221737][T11262] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.221868][T11262] bridge_slave_0: entered allmulticast mode [ 261.260008][T11262] bridge_slave_0: entered promiscuous mode [ 261.279362][T11262] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.281263][T11262] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.281400][T11262] bridge_slave_1: entered allmulticast mode [ 261.312088][T11262] bridge_slave_1: entered promiscuous mode [ 261.469308][T11387] netlink: 'syz.1.1440': attribute type 1 has an invalid length. [ 261.558819][T11391] netlink: 'syz.1.1440': attribute type 1 has an invalid length. [ 261.618675][T11387] 8021q: adding VLAN 0 to HW filter on device bond7 [ 261.635228][T11262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.652608][T11262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.675795][T11391] netlink: 'syz.1.1440': attribute type 10 has an invalid length. [ 261.675812][T11391] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1440'. [ 261.758540][T11387] bridge0: port 3(dummy0) entered disabled state [ 261.774398][T11387] dummy0: left allmulticast mode [ 261.774603][T11387] dummy0: left promiscuous mode [ 261.774813][T11387] bridge0: port 3(dummy0) entered disabled state [ 261.825591][T11391] dummy0: entered promiscuous mode [ 262.059124][T11262] team0: Port device team_slave_0 added [ 262.062550][T11262] team0: Port device team_slave_1 added [ 262.196186][T11262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.196204][T11262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.197189][T11262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.261124][T11262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.261139][T11262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.261162][T11262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.435749][T11262] hsr_slave_0: entered promiscuous mode [ 262.436688][T11262] hsr_slave_1: entered promiscuous mode [ 262.437348][T11262] debugfs: 'hsr0' already exists in 'hsr' [ 262.437380][T11262] Cannot create hsr debugfs directory [ 262.573700][ T52] Bluetooth: hci1: unexpected cc 0x2040 length: 2 > 1 [ 262.573743][ T52] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 262.745563][ T52] Bluetooth: hci6: command tx timeout [ 262.827647][ T52] Bluetooth: hci4: command 0x0401 tx timeout [ 262.904711][T11419] ip_tables: iptables: counters copy to user failed while replacing table [ 262.923643][T11262] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 262.943042][T11262] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 263.051167][T11420] bond9: option resend_igmp: invalid value (32767) [ 263.051190][T11420] bond9: option resend_igmp: allowed values 0 - 255 [ 263.425259][T11420] bond9 (unregistering): Released all slaves [ 263.457085][T11262] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 263.461313][T11262] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 263.598927][T11262] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 263.629415][T11262] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 263.633435][T11262] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 263.694057][T11262] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 263.980049][T11476] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 264.194074][T11262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.225605][T11485] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1461'. [ 264.225628][T11485] netlink: 54 bytes leftover after parsing attributes in process `syz.1.1461'. [ 264.225643][T11485] netlink: 54 bytes leftover after parsing attributes in process `syz.1.1461'. [ 264.360261][T11262] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.375013][T11482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1462'. [ 264.378847][T11487] xt_bpf: check failed: parse error [ 264.407226][T11482] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1462'. [ 264.412235][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.412354][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.484047][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.484224][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.824073][T11496] veth1_vlan: entered allmulticast mode [ 264.826282][ T5618] Bluetooth: hci6: command tx timeout [ 264.898742][T11496] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1465'. [ 264.959701][ T156] IPVS: starting estimator thread 0... [ 265.056106][T11509] IPVS: using max 36 ests per chain, 86400 per kthread [ 265.074357][T11499] syzkaller0: entered promiscuous mode [ 265.074379][T11499] syzkaller0: entered allmulticast mode [ 265.101848][T11505] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 268.780496][T11552] netlink: 'syz.5.1473': attribute type 2 has an invalid length. [ 268.783887][T11551] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1475'. [ 268.793596][T11550] ip6t_srh: unknown srh match flags 4000 [ 268.797195][T11550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1474'. [ 268.916574][T11559] netlink: 'syz.5.1473': attribute type 2 has an invalid length. [ 268.916594][T11559] netlink: 67 bytes leftover after parsing attributes in process `syz.5.1473'. [ 269.075289][T11565] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1477'. [ 269.161289][T11567] netlink: 'syz.0.1479': attribute type 32 has an invalid length. [ 269.403741][T11573] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1480'. [ 269.420443][T11571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.423903][T11573] veth4: entered promiscuous mode [ 269.424082][T11573] veth4: entered allmulticast mode [ 269.485390][T11576] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1480'. [ 269.529548][T11262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.889279][T11262] veth0_vlan: entered promiscuous mode [ 269.903255][T11262] veth1_vlan: entered promiscuous mode [ 269.937618][T11262] veth0_macvtap: entered promiscuous mode [ 269.942035][T11262] veth1_macvtap: entered promiscuous mode [ 269.990598][T11262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.007580][T11262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.152735][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.152756][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.159808][ T6066] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.167097][ T6064] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.168329][ T6064] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.168361][ T6064] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.240474][ T6066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.240494][ T6066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.341258][T11587] xt_hashlimit: size too large, truncated to 1048576 [ 270.634479][T11589] netlink: 'syz.6.1406': attribute type 64 has an invalid length. [ 341.011905][T11600] bridge0: left allmulticast mode [ 341.062494][T11608] lo speed is unknown, defaulting to 1000 [ 341.062557][T11608] lo speed is unknown, defaulting to 1000 [ 341.063325][T11608] lo speed is unknown, defaulting to 1000 [ 341.073323][T11608] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 341.073356][T11608] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 341.073393][T11608] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 341.114362][T11608] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 341.214709][T11608] lo speed is unknown, defaulting to 1000 [ 341.268208][T11608] lo speed is unknown, defaulting to 1000 [ 341.282482][T11608] lo speed is unknown, defaulting to 1000 [ 341.295219][T11608] lo speed is unknown, defaulting to 1000 [ 341.306776][T11608] lo speed is unknown, defaulting to 1000 [ 341.308599][T11608] lo speed is unknown, defaulting to 1000 [ 341.310348][T11608] lo speed is unknown, defaulting to 1000 [ 341.613406][T11633] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1489'. [ 341.613442][T11633] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 345.027597][T11678] lo: entered promiscuous mode [ 345.031536][T11678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 345.248107][T11678] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1501'. [ 345.405411][T11686] syzkaller0: entered promiscuous mode [ 345.405435][T11686] syzkaller0: entered allmulticast mode [ 345.470031][T11686] openvswitch: netlink: IPv4 tun info is not correct [ 345.506563][T11693] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 345.851487][T11707] digital: digital_start_poll: Unknown protocol [ 345.945675][T11729] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1512'. [ 346.072538][T11733] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1512'. [ 346.614909][T11748] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1516'. [ 348.673568][T11707] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 348.724221][T11731] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1509'. [ 348.931925][T11750] team0 (unregistering): Port device team_slave_0 removed [ 348.993526][T11756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1519'. [ 349.015080][T11750] team0 (unregistering): Port device team_slave_1 removed [ 349.138949][T11752] bond1: Unable to set up delay as MII monitoring is disabled [ 349.143478][T11752] bond1 (unregistering): Released all slaves [ 349.298892][T11753] bond1: Unable to set up delay as MII monitoring is disabled [ 349.302009][T11753] bond1 (unregistering): Released all slaves [ 349.357045][T11756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1519'. [ 349.360293][T11765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1522'. [ 349.510796][T11777] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1524'. [ 349.560428][T11777] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 349.600625][T11777] netlink: 'syz.1.1524': attribute type 1 has an invalid length. [ 349.653621][T11777] bond8: (slave gretap1): making interface the new active one [ 349.665274][T11777] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 349.730344][T11787] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1525'. [ 349.856161][T11790] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1523'. [ 349.857229][T11781] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1527'. [ 349.909924][T11777] syz.1.1524 (11777) used greatest stack depth: 16128 bytes left [ 350.003123][T11781] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1527'. [ 350.100428][T11781] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1527'. [ 350.194885][T11791] ovs-s: entered promiscuous mode [ 350.861464][T11817] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 350.876843][T11816] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 350.883980][T11816] netlink: 'syz.2.1532': attribute type 3 has an invalid length. [ 351.078362][T11826] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 351.127632][T11827] syzkaller1: entered promiscuous mode [ 351.127655][T11827] syzkaller1: entered allmulticast mode [ 351.373958][T11837] netlink: 'syz.2.1540': attribute type 16 has an invalid length. [ 351.827723][T11861] netlink: 'syz.1.1544': attribute type 2 has an invalid length. [ 351.840419][T11863] lo: entered promiscuous mode [ 351.841049][T11863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.259888][T11882] bridge1: entered promiscuous mode [ 352.259909][T11882] bridge1: entered allmulticast mode [ 352.294335][T11885] Bluetooth: hci0: unsupported parameter 5161 [ 352.294355][T11885] Bluetooth: hci0: unsupported parameter 8192 [ 352.294367][T11885] Bluetooth: hci0: unsupported parameter 5161 [ 352.294377][T11885] Bluetooth: hci0: unsupported parameter 8192 [ 352.359755][T11882] team0: Port device bridge1 added [ 352.422192][ T59] nci: nci_ntf_packet: unknown ntf opcode 0x133 [ 352.474367][T11887] bridge0: port 3(team0) entered blocking state [ 352.474459][T11887] bridge0: port 3(team0) entered disabled state [ 352.491282][T11887] team0: entered allmulticast mode [ 352.491301][T11887] team_slave_0: entered allmulticast mode [ 352.491338][T11887] team_slave_1: entered allmulticast mode [ 352.515782][T11887] team0: entered promiscuous mode [ 352.515802][T11887] team_slave_0: entered promiscuous mode [ 352.515964][T11887] team_slave_1: entered promiscuous mode [ 352.519234][T11887] bridge0: port 3(team0) entered blocking state [ 352.519354][T11887] bridge0: port 3(team0) entered forwarding state [ 352.981293][T11920] syzkaller0: entered promiscuous mode [ 352.981315][T11920] syzkaller0: entered allmulticast mode [ 355.262030][T11885] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 355.723228][T11942] smbdirect: ib_dev[syz1] removed [ 355.756634][T11952] __nla_validate_parse: 23 callbacks suppressed [ 355.756684][T11952] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1569'. [ 355.759077][T11952] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1569'. [ 355.940250][T11959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.959289][T11962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.142646][T11971] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 356.142681][T11971] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 356.142715][T11971] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 356.247148][T11971] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 356.287905][T11979] veth1_macvtap: left promiscuous mode [ 356.289240][T11979] macsec0: entered allmulticast mode [ 356.361550][T11982] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 356.754644][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1584'. [ 356.778964][T11995] netlink: 'syz.1.1584': attribute type 1 has an invalid length. [ 356.869449][T11999] netlink: 'syz.6.1585': attribute type 3 has an invalid length. [ 356.869471][T11999] netlink: 666 bytes leftover after parsing attributes in process `syz.6.1585'. [ 357.120790][T12014] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1587'. [ 357.241092][T12015] batman_adv: batadv0: Adding interface: syzkaller0 [ 357.241111][T12015] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.241140][T12015] batman_adv: batadv0: Interface activated: syzkaller0 [ 358.305027][T12015] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 358.379374][T12015] batman_adv: batadv0: Removing interface: syzkaller0 [ 358.753509][ T5618] Bluetooth: hci6: unexpected event 0x0f length: 0 < 4 [ 358.917708][T12055] ip_tables: iptables: counters copy to user failed while replacing table [ 359.071411][T12055] ipt_ECN: cannot use operation on non-tcp rule [ 359.111816][T12065] netlink: 'syz.6.1603': attribute type 1 has an invalid length. [ 359.321347][T12079] netlink: 'syz.2.1604': attribute type 4 has an invalid length. [ 359.322781][T12079] netlink: 'syz.2.1604': attribute type 4 has an invalid length. [ 359.417504][T12086] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1608'. [ 359.497341][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1604'. [ 359.497365][T12079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1604'. [ 359.722907][T12092] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1611'. [ 359.739172][T12094] bridge0: port 4(veth0) entered blocking state [ 359.740195][T12094] bridge0: port 4(veth0) entered disabled state [ 359.741749][T12094] veth0: entered allmulticast mode [ 359.750947][T12094] veth0: entered promiscuous mode [ 359.753960][T12094] bridge0: port 4(veth0) entered blocking state [ 359.754093][T12094] bridge0: port 4(veth0) entered forwarding state [ 360.168727][T12117] netlink: 136 bytes leftover after parsing attributes in process `syz.6.1617'. [ 360.975999][T12145] __nla_validate_parse: 2 callbacks suppressed [ 360.976018][T12145] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1623'. [ 360.978081][T12114] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 361.128800][T12157] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1623'. [ 361.129022][T12157] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1623'. [ 361.129272][T12157] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1623'. [ 361.129470][T12157] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1623'. [ 361.129669][T12157] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1623'. [ 361.129863][T12157] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1623'. [ 361.130057][T12157] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1623'. [ 361.212607][T12157] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1623'. [ 361.212879][T12157] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1623'. [ 362.007172][T12194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.164167][T12199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.187597][T12200] veth1_macvtap: left promiscuous mode [ 362.187782][T12200] macsec0: entered promiscuous mode [ 362.237389][T12203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.784651][T12192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.425639][ T52] Bluetooth: hci0: command 0x0c3a tx timeout [ 364.571154][T12286] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 364.571193][T12286] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 364.914274][T12296] netlink: Failed to add %pB helper -22 [ 364.914334][T12296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.225547][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 365.664084][T12326] netlink: 'syz.6.1659': attribute type 4 has an invalid length. [ 366.070001][T12345] veth0: entered promiscuous mode [ 366.289332][T12352] __nla_validate_parse: 59 callbacks suppressed [ 366.289354][T12352] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1664'. [ 366.397094][T12325] veth0: left promiscuous mode [ 367.039142][T12382] syzkaller0: entered promiscuous mode [ 367.039165][T12382] syzkaller0: entered allmulticast mode [ 367.042329][T12383] tipc: Started in network mode [ 367.042356][T12383] tipc: Node identity ee504ac9f2d2, cluster identity 4711 [ 367.075038][T12383] tipc: Enabled bearer , priority 0 [ 367.251246][T12380] tipc: Resetting bearer [ 367.411045][T12399] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1675'. [ 367.434962][T12380] tipc: Disabling bearer [ 367.639032][T12414] xt_l2tp: v2 doesn't support IP mode [ 367.850026][T12423] netlink: 'syz.5.1682': attribute type 1 has an invalid length. [ 367.851068][T12423] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1682'. [ 368.290045][T12438] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1687'. [ 368.292418][T12439] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 368.452906][T12446] tls_set_device_offload: netdev not found [ 368.658426][T12455] netlink: 'syz.6.1693': attribute type 23 has an invalid length. [ 368.792784][T12459] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1697'. [ 369.044015][T12471] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1698'. [ 369.116705][T12475] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1698'. [ 369.295307][T12483] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1696'. [ 369.399549][T12483] openvswitch: netlink: Duplicate key (type 0). [ 370.114813][T12502] netlink: 'syz.5.1704': attribute type 5 has an invalid length. [ 370.255208][T12513] sctp: [Deprecated]: syz.0.1707 (pid 12513) Use of int in maxseg socket option. [ 370.255208][T12513] Use struct sctp_assoc_value instead [ 370.702524][T12535] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1713'. [ 370.703901][T12536] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1713'. [ 370.799719][T12536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.800196][T12536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.102329][T12556] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 372.009063][T12581] lo: left promiscuous mode [ 372.009714][T12581] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.060460][T12584] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1726'. [ 372.177606][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1730'. [ 372.409497][T12584] hsr_slave_1 (unregistering): left promiscuous mode [ 372.434418][T12585] tipc: Enabling of bearer rejected, failed to enable media [ 372.991958][T12618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1738'. [ 373.137491][T12620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1739'. [ 373.266707][T12629] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1741'. [ 373.355308][T12641] Cannot find add_set index 4 as target [ 373.427623][T12632] netlink: 'syz.5.1741': attribute type 12 has an invalid length. [ 373.544305][T12648] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1745'. [ 373.544331][T12648] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1745'. [ 373.677094][T12653] x_tables: unsorted underflow at hook 1 [ 373.982719][T12657] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1748'. [ 374.043326][T12657] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1748'. [ 374.071228][T12657] syzkaller1: entered promiscuous mode [ 374.071248][T12657] syzkaller1: entered allmulticast mode [ 374.194332][T12668] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1751'. [ 375.214097][T12707] netlink: 'syz.0.1764': attribute type 5 has an invalid length. [ 376.097422][T12738] ip6erspan1: entered allmulticast mode [ 376.228615][T12748] erspan0: entered promiscuous mode [ 376.461244][T12765] xt_CT: You must specify a L4 protocol and not use inversions on it [ 376.761785][T12769] netlink: 'syz.0.1776': attribute type 1 has an invalid length. [ 376.859855][T12769] bond6: entered promiscuous mode [ 376.861285][T12769] 8021q: adding VLAN 0 to HW filter on device bond6 [ 377.301543][T12800] nbd: must specify a size in bytes for the device [ 377.301898][T12801] nbd: must specify a size in bytes for the device [ 377.524826][T12804] netlink: 'syz.5.1785': attribute type 1 has an invalid length. [ 377.677283][T12811] __nla_validate_parse: 4 callbacks suppressed [ 377.677302][T12811] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1785'. [ 377.735081][T12815] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1787'. [ 377.803642][T12809] bond3: (slave veth0_to_bond): making interface the new active one [ 377.804542][T12809] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 377.828749][T12811] 8021q: adding VLAN 0 to HW filter on device bond3 [ 377.835020][T12817] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1787'. [ 377.908643][T12824] ip_tables: iptables: counters copy to user failed while replacing table [ 378.779520][T12862] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1797'. [ 378.837235][T12862] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 378.852544][T12868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1799'. [ 378.854963][T12868] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20000 [ 378.876845][T12868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1799'. [ 379.160732][T12884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1801'. [ 379.191817][T12875] macsec3: entered promiscuous mode [ 379.191844][T12875] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 379.192044][T12875] macsec3: entered allmulticast mode [ 379.192062][T12875] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 379.192461][T12875] 8021q: adding VLAN 0 to HW filter on device macsec3 [ 379.193950][T12875] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 379.193975][T12875] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 380.255594][T12917] tipc: Bearer : already 2 bearers with priority 10 [ 380.255614][T12917] tipc: Bearer : trying with adjusted priority [ 380.255623][T12917] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 380.590148][ T52] Bluetooth: hci6: command 0x0406 tx timeout [ 381.624019][T12952] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1814'. [ 381.756951][T12947] 8021q: adding VLAN 0 to HW filter on device bond10 [ 382.126197][T12963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1817'. [ 382.129229][T12963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.244409][T12970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1817'. [ 382.281619][T12963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.758197][T12982] __nla_validate_parse: 2 callbacks suppressed [ 382.758217][T12982] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1822'. [ 382.791522][ T30] audit: type=1804 audit(1792322684.742:5): pid=12982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1822" name="/newroot/362/cgroup.controllers" dev="tmpfs" ino=1875 res=1 errno=0 [ 382.796656][ T30] audit: type=1800 audit(1792322684.742:6): pid=12982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1822" name="cgroup.controllers" dev="tmpfs" ino=1875 res=0 errno=0 [ 382.920541][T12988] netlink: 6024 bytes leftover after parsing attributes in process `syz.5.1824'. [ 382.943935][T12989] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1825'. [ 383.046236][T12988] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1824'. [ 383.081783][T12989] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1825'. [ 383.116589][T12992] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1827'. [ 383.182722][T12992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1827'. [ 383.260352][T12997] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1825'. [ 383.261290][T12997] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1825'. [ 383.583045][ T995] IPVS: starting estimator thread 0... [ 383.585311][T13025] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 383.667188][T13026] IPVS: using max 28 ests per chain, 67200 per kthread [ 384.660817][T13074] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1841'. [ 384.796235][T13073] vlan3: entered promiscuous mode [ 384.796257][T13073] hsr0: entered promiscuous mode [ 384.796519][T13073] vlan3: entered allmulticast mode [ 384.796530][T13073] hsr0: entered allmulticast mode [ 384.796541][T13073] hsr_slave_0: entered allmulticast mode [ 384.796555][T13073] hsr_slave_1: entered allmulticast mode [ 384.958217][T13081] xt_l2tp: invalid flags combination: 0 [ 385.127916][T13086] netlink: 'syz.6.1845': attribute type 1 has an invalid length. [ 385.425256][T13091] 8021q: adding VLAN 0 to HW filter on device bond2 [ 386.302598][T13143] x_tables: duplicate underflow at hook 3 [ 386.319501][T13143] sctp: [Deprecated]: syz.2.1858 (pid 13143) Use of struct sctp_assoc_value in delayed_ack socket option. [ 386.319501][T13143] Use struct sctp_sack_info instead [ 386.598517][T13152] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 387.282386][T13181] netlink: 'syz.1.1869': attribute type 1 has an invalid length. [ 387.454390][T13204] xt_bpf: check failed: parse error [ 387.461728][T13204] xt_bpf: check failed: parse error [ 387.471341][T13204] xt_bpf: check failed: parse error [ 387.473180][T13204] xt_bpf: check failed: parse error [ 387.473508][T13204] xt_bpf: check failed: parse error [ 387.473798][T13204] xt_bpf: check failed: parse error [ 387.474093][T13204] xt_bpf: check failed: parse error [ 387.474383][T13204] xt_bpf: check failed: parse error [ 387.511627][T13204] xt_bpf: check failed: parse error [ 387.512008][T13204] xt_bpf: check failed: parse error [ 387.684230][ T12] IPVS: starting estimator thread 0... [ 387.766004][T13213] IPVS: using max 31 ests per chain, 74400 per kthread [ 388.039357][T13221] __nla_validate_parse: 14 callbacks suppressed [ 388.039379][T13221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1879'. [ 388.318175][T13230] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1881'. [ 388.381197][T13230] x_tables: duplicate underflow at hook 1 [ 388.475131][T13235] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1884'. [ 388.475154][T13235] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1884'. [ 388.475197][T13235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1884'. [ 388.557285][T13237] netlink: 'syz.6.1883': attribute type 4 has an invalid length. [ 388.749583][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 389.113321][T13257] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1890'. [ 390.006709][T13283] syzkaller0: entered promiscuous mode [ 390.006733][T13283] syzkaller0: entered allmulticast mode [ 390.354736][T13254] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1889'. [ 390.354762][T13254] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1889'. [ 390.471805][T13291] xt_CT: No such helper "netbios-ns" [ 390.667159][ T31] INFO: task syz.4.1317:10817 blocked for more than 143 seconds. [ 390.667183][ T31] Not tainted syzkaller #0 [ 390.667193][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 390.667202][ T31] task:syz.4.1317 state:D stack:27136 pid:10817 tgid:10816 ppid:5622 task_flags:0x400040 flags:0x00080002 [ 390.667271][ T31] Call Trace: [ 390.667357][ T31] [ 390.667490][ T31] __schedule+0x17db/0x58f0 [ 390.668549][ T31] ? __pfx___schedule+0x10/0x10 [ 390.668622][ T31] ? schedule+0x90/0x2b0 [ 390.668646][ T31] schedule+0x164/0x2b0 [ 390.668669][ T31] schedule_preempt_disabled+0x13/0x30 [ 390.668689][ T31] __mutex_lock+0x7c1/0x1550 [ 390.668717][ T31] ? __mutex_lock+0x5d4/0x1550 [ 390.668743][ T31] ? nfsd_nl_listener_get_doit+0x104/0x610 [ 390.668864][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 390.668895][ T31] ? __nlmsg_put+0xef/0x1b0 [ 390.668984][ T31] ? genlmsg_put+0x137/0x2e0 [ 390.669086][ T31] nfsd_nl_listener_get_doit+0x104/0x610 [ 390.669116][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 390.669144][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 390.669178][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 390.669209][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 390.669260][ T31] genl_rcv_msg+0x614/0x7a0 [ 390.669290][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.669316][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 390.669357][ T31] netlink_rcv_skb+0x226/0x4a0 [ 390.669380][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.669408][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 390.669445][ T31] ? down_read+0x2be/0x330 [ 390.669471][ T31] genl_rcv+0x28/0x40 [ 390.669500][ T31] netlink_unicast+0x8ef/0xa80 [ 390.669538][ T31] netlink_sendmsg+0x813/0xb40 [ 390.669570][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.669607][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 390.669703][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.669725][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 390.669831][ T31] ____sys_sendmsg+0x54e/0x850 [ 390.669862][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.669892][ T31] ? import_iovec+0x73/0xa0 [ 390.669984][ T31] ___sys_sendmsg+0x2a5/0x360 [ 390.670002][ T31] ? __lock_acquire+0x747/0x2de0 [ 390.670054][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.670077][ T31] ? futex_wait+0x2a2/0x390 [ 390.670140][ T31] ? __fget_files+0x2a/0x420 [ 390.670181][ T31] ? __fget_files+0x3a2/0x420 [ 390.670208][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 390.670232][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.670274][ T31] do_syscall_64+0x166/0x520 [ 390.670332][ T31] ? trace_irq_disable+0x3b/0x140 [ 390.670360][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.670396][ T31] ? clear_bhb_loop+0x70/0xc0 [ 390.670418][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.670434][ T31] RIP: 0033:0x7fcca5f9e559 [ 390.670459][ T31] RSP: 002b:00007fcca6e27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.670503][ T31] RAX: ffffffffffffffda RBX: 00007fcca6225fa0 RCX: 00007fcca5f9e559 [ 390.670517][ T31] RDX: 0000000004000880 RSI: 0000200000000040 RDI: 0000000000000003 [ 390.670528][ T31] RBP: 00007fcca6035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 390.670540][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.670551][ T31] R13: 00007fcca6226038 R14: 00007fcca6225fa0 R15: 00007fff2989bb68 [ 390.670583][ T31] [ 390.670627][ T31] [ 390.670627][ T31] Showing all locks held in the system: [ 390.670636][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 390.670718][ T31] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 390.670807][ T31] locks held by kworker/u8:4/59: 5, last CPU#1: [ 390.670820][ T31] #0: ffff88807930f140 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 390.670886][ T31] #1: ffffc9000200fc40 ((work_completion)(&(&bat_priv->bla.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 390.670937][ T31] #2: ffff888055c90018 (key#19){+.-.}-{3:3}, at: batadv_bla_periodic_work+0x336/0xb40 [ 390.671029][ T31] #3: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0xf8a/0x18b0 [ 390.671132][ T31] #4: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 390.671192][ T31] locks held by kworker/u8:8/995: 4, last CPU#1: [ 390.671205][ T31] #0: ffff888031408140 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 390.671259][ T31] #1: ffffc90004f4fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 390.671310][ T31] #2: ffff88803674d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 390.671416][ T31] #3: ffff88807a2ca0e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 390.671488][ T31] locks held by getty/5366: 2, on CPU#1: [ 390.671501][ T31] #0: ffff888036df90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 390.671625][ T31] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 390.671676][ T31] locks held by syz-executor/5614: 1, last CPU#1: [ 390.671688][ T31] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: is_module_text_address+0x1d/0x1e0 [ 390.671750][ T31] locks held by kworker/1:4/5733: 3, last CPU#1: [ 390.671763][ T31] #0: ffff88801c06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 390.671813][ T31] #1: ffffc90004df7c40 (drain_vmap_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 390.671862][ T31] #2: ffffffff8fe8bde0 (vmap_purge_lock){+.+.}-{4:4}, at: drain_vmap_area_work+0x17/0x40 [ 390.671925][ T31] locks held by syz.3.1173/10248: 2, on CPU#1: [ 390.671943][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 390.671993][ T31] #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 390.672043][ T31] locks held by syz.4.1317/10817: 2, on CPU#0: [ 390.672055][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 390.672103][ T31] #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x104/0x610 [ 390.672157][ T31] locks held by syz.2.1889/13254: 1, last CPU#1: [ 390.672169][ T31] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 390.672216][ T31] locks held by syz.6.1901/13303: 2, last CPU#0: [ 390.672228][ T31] #0: ffff888030e37180 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 390.672277][ T31] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 390.672326][ T31] locks held by syz.5.1899/13298: 2, last CPU#0: [ 390.672338][ T31] #0: ffff88807bce8340 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 390.672377][ T31] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 390.672426][ T31] locks held by syz.0.1900/13302: 2, last CPU#1: [ 390.672439][ T31] #0: ffff888030e33440 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 390.672475][ T31] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 390.672518][ T31] [ 390.672523][ T31] ============================================= [ 390.672523][ T31] [ 390.672538][ T31] NMI backtrace for cpu 0 [ 390.672560][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 390.672577][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 390.672586][ T31] Call Trace: [ 390.672592][ T31] [ 390.672599][ T31] dump_stack_lvl+0xe8/0x150 [ 390.672646][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 390.672706][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 390.672735][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 390.672765][ T31] sys_info+0x135/0x170 [ 390.672814][ T31] watchdog+0xfd7/0x1030 [ 390.672847][ T31] ? watchdog+0x1c7/0x1030 [ 390.672871][ T31] kthread+0x38b/0x480 [ 390.672890][ T31] ? __pfx_watchdog+0x10/0x10 [ 390.672906][ T31] ? __pfx_kthread+0x10/0x10 [ 390.672925][ T31] ret_from_fork+0x514/0xb70 [ 390.672962][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 390.672980][ T31] ? __switch_to+0xc89/0x1420 [ 390.673007][ T31] ? __pfx_kthread+0x10/0x10 [ 390.673035][ T31] ret_from_fork_asm+0x1a/0x30 [ 390.673068][ T31] [ 390.673075][ T31] Sending NMI from CPU 0 to CPUs 1: [ 390.673143][ C1] NMI backtrace for cpu 1 [ 390.673157][ C1] CPU: 1 UID: 0 PID: 5614 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 390.673178][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 390.673189][ C1] RIP: 0010:rcu_is_watching+0x56/0xb0 [ 390.673217][ C1] Code: c7 73 8e 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 9b 52 8c 00 48 c7 c3 18 4a 97 94 49 03 1e 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 35 8b 03 65 48 ff 0d c7 71 e9 12 74 11 83 [ 390.673234][ C1] RSP: 0018:ffffc900047e7540 EFLAGS: 00000a02 [ 390.673251][ C1] RAX: 1ffff110170a6743 RBX: ffff8880b8533a18 RCX: 8000000000000001 [ 390.673266][ C1] RDX: 00000000f4e1a60c RSI: ffffffff8c6ddb60 RDI: ffffffff8c6ddb20 [ 390.673280][ C1] RBP: 1ffff920008fcec8 R08: ffffffff817811df R09: 0000000000000000 [ 390.673295][ C1] R10: ffffc900047e7658 R11: ffffffff81b2c5e0 R12: dffffc0000000000 [ 390.673310][ C1] R13: ffffffff817811df R14: ffffffff8e73c7d8 R15: dffffc0000000000 [ 390.673324][ C1] FS: 000055558f48c500(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 390.673341][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 390.673355][ C1] CR2: 000055558f4a7a38 CR3: 000000005e9ac000 CR4: 00000000003526f0 [ 390.673372][ C1] Call Trace: [ 390.673379][ C1] [ 390.673386][ C1] ? tomoyo_path_unlink+0xaa/0xf0 [ 390.673440][ C1] unwind_next_frame+0xbe/0x2550 [ 390.673466][ C1] ? tomoyo_path_perm+0x283/0x560 [ 390.673516][ C1] ? unwind_next_frame+0x8f/0x2550 [ 390.673541][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 390.673562][ C1] arch_stack_walk+0x11b/0x150 [ 390.673587][ C1] ? tomoyo_path_unlink+0xaa/0xf0 [ 390.673609][ C1] stack_trace_save+0xa9/0x100 [ 390.673629][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 390.673647][ C1] ? kasan_save_track+0x4f/0x80 [ 390.673680][ C1] ? __lock_acquire+0x747/0x2de0 [ 390.673703][ C1] kasan_save_track+0x3e/0x80 [ 390.673726][ C1] ? kasan_save_track+0x3e/0x80 [ 390.673747][ C1] ? kasan_save_free_info+0x40/0x50 [ 390.673766][ C1] ? __kasan_slab_free+0x5c/0x80 [ 390.673789][ C1] ? kfree+0x1c5/0x650 [ 390.673811][ C1] ? tomoyo_realpath_from_path+0x605/0x640 [ 390.673830][ C1] ? tomoyo_path_perm+0x283/0x560 [ 390.673854][ C1] ? tomoyo_path_unlink+0xaa/0xf0 [ 390.673899][ C1] kasan_save_free_info+0x40/0x50 [ 390.673918][ C1] __kasan_slab_free+0x5c/0x80 [ 390.673942][ C1] kfree+0x1c5/0x650 [ 390.673959][ C1] ? tomoyo_encode+0x533/0x570 [ 390.673975][ C1] ? tomoyo_realpath_from_path+0x605/0x640 [ 390.673997][ C1] tomoyo_realpath_from_path+0x605/0x640 [ 390.674023][ C1] tomoyo_path_perm+0x283/0x560 [ 390.674048][ C1] ? tomoyo_path_perm+0x251/0x560 [ 390.674076][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 390.674113][ C1] ? __lock_acquire+0x747/0x2de0 [ 390.674144][ C1] ? __pfx_current_check_access_path+0x10/0x10 [ 390.674200][ C1] ? __d_lookup+0x66/0x790 [ 390.674224][ C1] ? __d_lookup+0x6f3/0x790 [ 390.674246][ C1] tomoyo_path_unlink+0xaa/0xf0 [ 390.674266][ C1] ? __pfx_tomoyo_path_unlink+0x10/0x10 [ 390.674290][ C1] ? d_lookup+0x80/0xa0 [ 390.674312][ C1] security_path_unlink+0x15f/0x330 [ 390.674375][ C1] filename_unlinkat+0x349/0x610 [ 390.674404][ C1] ? __pfx_filename_unlinkat+0x10/0x10 [ 390.674433][ C1] ? do_getname+0x151/0x250 [ 390.674461][ C1] __se_sys_unlink+0x2e/0x140 [ 390.674487][ C1] do_syscall_64+0x166/0x520 [ 390.674509][ C1] ? trace_irq_disable+0x3b/0x140 [ 390.674531][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.674550][ C1] ? clear_bhb_loop+0x70/0xc0 [ 390.674572][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.674591][ C1] RIP: 0033:0x7f8c03d9d647 [ 390.674625][ C1] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 390.674641][ C1] RSP: 002b:00007ffed485bc38 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 390.674659][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8c03d9d647 [ 390.674679][ C1] RDX: 00007ffed485bc60 RSI: 00007ffed485bcf0 RDI: 00007ffed485bcf0 [ 390.674693][ C1] RBP: 00007ffed485bcf0 R08: 00007ffed485ccf0 R09: 00000000ffffffff [ 390.674707][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffed485cd80 [ 390.674720][ C1] R13: 00007f8c03e34efb R14: 000000000005f565 R15: 00007ffed485cdc0 [ 390.674743][ C1] [ 390.675109][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 391.907680][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 391.916777][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.926820][ T31] Call Trace: [ 391.930086][ T31] [ 391.933005][ T31] vpanic+0x56d/0xa60 [ 391.936990][ T31] ? __pfx_vpanic+0x10/0x10 [ 391.941497][ T31] ? console_srcu_read_unlock+0x3a/0x60 [ 391.947042][ T31] panic+0xc5/0xd0 [ 391.950771][ T31] ? __pfx_panic+0x10/0x10 [ 391.955184][ T31] ? wq_watchdog_touch+0xf9/0x160 [ 391.960205][ T31] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 391.966359][ T31] watchdog+0x1030/0x1030 [ 391.970692][ T31] ? watchdog+0x1c7/0x1030 [ 391.975110][ T31] kthread+0x38b/0x480 [ 391.979173][ T31] ? __pfx_watchdog+0x10/0x10 [ 391.983839][ T31] ? __pfx_kthread+0x10/0x10 [ 391.988419][ T31] ret_from_fork+0x514/0xb70 [ 391.993000][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 391.998100][ T31] ? __switch_to+0xc89/0x1420 [ 392.002779][ T31] ? __pfx_kthread+0x10/0x10 [ 392.007360][ T31] ret_from_fork_asm+0x1a/0x30 [ 392.012121][ T31] [ 392.015281][ T31] Kernel Offset: disabled [ 392.019596][ T31] Rebooting in 86400 seconds..