last executing test programs: 4m5.256661291s ago: executing program 3 (id=2972): r0 = socket$inet(0xa, 0x801, 0x6) listen(r0, 0xffffffff) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e3b, 0x4, @mcast2, 0x3}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$inet_tcp_int(r2, 0x6, 0x2b, &(0x7f0000000100)=0x6, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x3, @random="728abcf834f0", 'lo\x00'}}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r1, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) accept4(r1, 0x0, 0x0, 0x80000) 4m4.829180792s ago: executing program 3 (id=2975): r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) epoll_create1(0x0) (async) epoll_create1(0x0) accept4(r0, 0x0, 0x0, 0x800) (async) r2 = accept4(r0, 0x0, 0x0, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x3ff, 0x4) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x3ff, 0x4) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd26, 0x2, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_taprio={{0x4}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xffffffffffffffff}]}}]}, 0x40}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x48, 0x10, 0x439, 0x70bd2b, 0x4000, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x48, 0x10, 0x439, 0x70bd2b, 0x4000, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r5, 0x400, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4008001) sendmmsg$inet_sctp(r2, &(0x7f0000005f00), 0x0, 0x800) r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket$kcm(0x2, 0x3, 0x2) (async) r7 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e0000001000000001c0000000000000000000000070000002029991b440c09c20949e0afc65b00000000fe763d4eaad59d40875e72864b2222a1c16936fb436cb47c"], 0x40}, 0x20002800) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x20004044}, 0x10) bind$packet(r2, &(0x7f0000000080)={0x11, 0xf7, r10, 0x1, 0xfd, 0x6, @broadcast}, 0x14) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r11 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom(r11, 0x0, 0x0, 0x60, 0x0, 0x0) (async) recvfrom(r11, 0x0, 0x0, 0x60, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r13, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000000104030000000000000000000a000022eeedc8e2a5251c74e405573ed7369f078444046fcbf79d1ddd233b6b13cd2bbd75ae236c28085720564e12a08bc08685523f154ee21656e2fa7cc31d45c6884c293af89a299f8e2156abbac103b64fd532211d34db6a4526ee6692f236b9bc9f1d8d4fbfb0749dcdb9647b9c8469d499921c778a423756a782f17d"], 0x14}, 0x1, 0x0, 0x0, 0x4041}, 0x44) (async) sendmsg$NFULNL_MSG_CONFIG(r13, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000000104030000000000000000000a000022eeedc8e2a5251c74e405573ed7369f078444046fcbf79d1ddd233b6b13cd2bbd75ae236c28085720564e12a08bc08685523f154ee21656e2fa7cc31d45c6884c293af89a299f8e2156abbac103b64fd532211d34db6a4526ee6692f236b9bc9f1d8d4fbfb0749dcdb9647b9c8469d499921c778a423756a782f17d"], 0x14}, 0x1, 0x0, 0x0, 0x4041}, 0x44) sendmsg$nl_route(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r12, @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) 4m4.396078467s ago: executing program 3 (id=2977): unshare(0xc040480) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) (async) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x100}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x8) 4m4.078396233s ago: executing program 3 (id=2980): r0 = socket(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0xfe, 0xfffffffffffffffc}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x40003, @private2, 0x52}]}, &(0x7f0000000440)=0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)="0000000000000002", 0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') r10 = getpid() bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @none}, 0x8) r11 = socket$kcm(0x2, 0xa, 0x2) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendto$packet(r12, &(0x7f0000000040)="18", 0x1, 0x20048884, &(0x7f0000000140)={0x11, 0xd, r13, 0x1, 0xfd, 0x6, @random='\x00 \x00'}, 0x14) r14 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r14, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x5, @vifc_lcl_ifindex, @empty}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x40, r7, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, r10}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xea722a5c44d485df}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002bbd7000fcdbdf250b6c19550c00ffff000000000800c9fe95d524e49f04597cd920ae2ed99d41d9d6a4c3023b720b64d03d9c90b8a2b4ffc8838d12cb12e680eed9a1a70f8aa5e3f4eb8fddb3bbdd3a96ea235899adc0b1bbd66bf8d772f097351598a64654c28c66fb92ac5ed1effcc720e3c89ac305003e63761f4cce8ad3ade39475928ec074d254daef7041e1c8006a6640e489fb27a4bd2f83a11a2d6c4b26a133afd5cac3ef6e839543e6f466192c166a355361e8ece6e5b4d931d8b0f7298b304fc5e3fc4581e03d2162a9bf17069d0e1f8a900c1f9a349285738fcf265d33134bb8d849a6c9ce3f70aa9fe8e03124e147d2c6202c1bf3d03375610169db8eae42645fd50a1119abb2bad3", @ANYRES32=r8, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4004091}, 0x800) 4m2.806300812s ago: executing program 3 (id=2986): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="101000000000000008000d7fff000000e4031680e0030180"], 0x40c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000020)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001800050000000000000000002d6000000000000100fffffff7000100110000000c000500000000000a000000300000001800050000000000000000002d000000000020000000000005000100110000000c000500000000000a0000"], 0xe1c}}, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20088844}, 0x40) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), r4) 4m2.408533015s ago: executing program 3 (id=2988): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000040)="54000000270001000000000000000000060100002000018008000200096370001400010002000801000000000000000000000000200001800800020074637000140001000200080200"/84, 0x54) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xe000)=nil, 0xe000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r2, 0x852ac000) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000100001002bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8a430100000000001c0016801800018014000a00ffffffff00000000020000000000000014000300776c616e3000000000000000000000003a370ed908c498c6ce2c6970171b930246faa2ccac45666dc8d746aa1034b55fd56952f6a186fcc7878b7329a7d007356b11c1b4a9d9716067a4fabc63bd110f0d8f6fbb200edf871ba75bb1b630de9f1c2a8467189b7a75c551343e90833073d32a20c052cb9c16c7037882b3b64e51661b"], 0x50}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x3ff, r3, 0x1000000}, 0x38) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000000), 0x2, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r5, 0x40406f06, &(0x7f0000000040)={0x8000000000000001, 0x101, 0x200, 0x3, 0x2}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@multicast1, @multicast1}, &(0x7f00000002c0)=0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56749, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0x8}, {}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x14, r6, 0x10, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x4003) socket$nl_generic(0x10, 0x3, 0x10) (async) write(r0, &(0x7f0000000040)="54000000270001000000000000000000060100002000018008000200096370001400010002000801000000000000000000000000200001800800020074637000140001000200080200"/84, 0x54) (async) socket$nl_route(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000001000/0xe000)=nil, 0xe000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r2, 0x852ac000) (async) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000100001002bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8a430100000000001c0016801800018014000a00ffffffff00000000020000000000000014000300776c616e3000000000000000000000003a370ed908c498c6ce2c6970171b930246faa2ccac45666dc8d746aa1034b55fd56952f6a186fcc7878b7329a7d007356b11c1b4a9d9716067a4fabc63bd110f0d8f6fbb200edf871ba75bb1b630de9f1c2a8467189b7a75c551343e90833073d32a20c052cb9c16c7037882b3b64e51661b"], 0x50}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x3ff, r3, 0x1000000}, 0x38) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_type(r4, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$OCFS2_IOC_MOVE_EXT(r5, 0x40406f06, &(0x7f0000000040)={0x8000000000000001, 0x101, 0x200, 0x3, 0x2}) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@multicast1, @multicast1}, &(0x7f00000002c0)=0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56749, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0x8}, {}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x14, r6, 0x10, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x4003) (async) 3m46.898058975s ago: executing program 32 (id=2988): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000040)="54000000270001000000000000000000060100002000018008000200096370001400010002000801000000000000000000000000200001800800020074637000140001000200080200"/84, 0x54) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xe000)=nil, 0xe000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r2, 0x852ac000) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000100001002bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8a430100000000001c0016801800018014000a00ffffffff00000000020000000000000014000300776c616e3000000000000000000000003a370ed908c498c6ce2c6970171b930246faa2ccac45666dc8d746aa1034b55fd56952f6a186fcc7878b7329a7d007356b11c1b4a9d9716067a4fabc63bd110f0d8f6fbb200edf871ba75bb1b630de9f1c2a8467189b7a75c551343e90833073d32a20c052cb9c16c7037882b3b64e51661b"], 0x50}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x3ff, r3, 0x1000000}, 0x38) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000000), 0x2, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r5, 0x40406f06, &(0x7f0000000040)={0x8000000000000001, 0x101, 0x200, 0x3, 0x2}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@multicast1, @multicast1}, &(0x7f00000002c0)=0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56749, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0x8}, {}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x14, r6, 0x10, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x4003) socket$nl_generic(0x10, 0x3, 0x10) (async) write(r0, &(0x7f0000000040)="54000000270001000000000000000000060100002000018008000200096370001400010002000801000000000000000000000000200001800800020074637000140001000200080200"/84, 0x54) (async) socket$nl_route(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000001000/0xe000)=nil, 0xe000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r2, 0x852ac000) (async) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000100001002bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8a430100000000001c0016801800018014000a00ffffffff00000000020000000000000014000300776c616e3000000000000000000000003a370ed908c498c6ce2c6970171b930246faa2ccac45666dc8d746aa1034b55fd56952f6a186fcc7878b7329a7d007356b11c1b4a9d9716067a4fabc63bd110f0d8f6fbb200edf871ba75bb1b630de9f1c2a8467189b7a75c551343e90833073d32a20c052cb9c16c7037882b3b64e51661b"], 0x50}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x3ff, r3, 0x1000000}, 0x38) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_type(r4, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$OCFS2_IOC_MOVE_EXT(r5, 0x40406f06, &(0x7f0000000040)={0x8000000000000001, 0x101, 0x200, 0x3, 0x2}) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@multicast1, @multicast1}, &(0x7f00000002c0)=0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56749, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0x8}, {}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x14, r6, 0x10, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x4003) (async) 1m40.554939705s ago: executing program 2 (id=3310): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x2, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff01010000260000000019e1b6950000000000000018100000", @ANYRES32, @ANYBLOB="100000000000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x1, 0x138, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff75, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4720}, 0x37) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000180)={'wlan1\x00', @link_local}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x1, {0x0, 0xff}, 0xfe}, 0x18) 1m40.249766708s ago: executing program 2 (id=3312): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8000}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xac515b7cf1454000, 0x10000}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000840}, 0x4000) writev(r0, &(0x7f0000000880)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a000d000500000000000072080003000500000000", 0x39}], 0x1) 1m40.040848602s ago: executing program 2 (id=3316): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0xd, &(0x7f0000000140)="02eaff0000000000", 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xa, &(0x7f0000000380)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @cb_func, @cb_func={0x18, 0x5, 0x4, 0x0, 0x7}, @jmp={0x5, 0x1, 0x3, 0x1, 0x1, 0x40, 0x4}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r4, 0x0, &(0x7f0000001700)=""/43}, 0x77) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m39.687287483s ago: executing program 2 (id=3319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1070000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100cb000014000380100000800c00018006000100d123"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000080)={r8, 0x81}, &(0x7f00000000c0)=0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) r10 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r10, 0x6a, 0x5, 0x20000000, 0x22f819be) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x502, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x0, 0x7ffe}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x12, 0x2, {{0x6, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x7, 0x17, 0x2, 0x1e, 0x0, 0x800000e, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) 1m39.226362566s ago: executing program 2 (id=3324): r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) bind(r0, &(0x7f0000000240)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x1}, 0x80) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@acquire={0x128, 0x17, 0x200, 0x70bd24, 0x0, {{@in6=@mcast1}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, {@in=@remote, @in6=@mcast2, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x56befe125658cb64}, {{@in=@rand_addr=0x64010101, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x2e, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x40000000100000}, {0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9, 0x38, 0x400, 0xfffffffc}}, 0x128}, 0x1, 0x0, 0x0, 0x400c801}, 0x24008050) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000004000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000bbffffffb702000008000000b70300000000000085000000cf00000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) syz_emit_ethernet(0x56, &(0x7f0000002140)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60020000000000000000000000000ffff0a010100fe8000000000000000000000000000aa080200000000000005020002010400"/86], 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x7c2fba45b18d7499}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) 1m38.957729727s ago: executing program 2 (id=3328): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002700010308000000ffffffff0d"], 0x14}}, 0x40088c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001840)={0x70, r2, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @val={0x3, 0x1, 0x68}, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0xa, 0x4}}, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @beacon=[@NL80211_ATTR_IE={0x4}]]}, 0x70}}, 0x39db77225c63fa4c) r4 = socket(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x1, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x400000000000000, 0x0, 0xc010}, 0x4044040) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200000c5}, 0x90) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) 1m23.704572456s ago: executing program 33 (id=3328): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002700010308000000ffffffff0d"], 0x14}}, 0x40088c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001840)={0x70, r2, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @val={0x3, 0x1, 0x68}, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0xa, 0x4}}, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @beacon=[@NL80211_ATTR_IE={0x4}]]}, 0x70}}, 0x39db77225c63fa4c) r4 = socket(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x1, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x400000000000000, 0x0, 0xc010}, 0x4044040) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200000c5}, 0x90) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) 51.367991825s ago: executing program 6 (id=3668): socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) listen(r0, 0x5) accept(r0, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 50.330251028s ago: executing program 6 (id=3680): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001400010401000000000000002d8d000001000000050002"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4040) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback, 0x10, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440025006adfcce5df88d6fa7d524f965dd5a1b64815235af1928c57972b1455391787b52a19875dc5fc00"/55, @ANYRES32=0x0, @ANYBLOB="4200000021200000240012800c0001006d6163766c616e0014000280040005800a000400aaaaaaaaaaaa0000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_emit_ethernet(0x66, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa110800450200580064ff01000090780a010101ffffffff0c21880b000000000c000800010086dd080088be000000001304e1020100000000000005080022eb0000000226cb290a020000000000000a07ff90070800655800000004"], 0x0) sendto$inet6(r6, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f0000000a00)={0x0, 0x826, 0x2}, 0x8) write(r5, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={'ipvlan0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}}) 50.033532382s ago: executing program 6 (id=3683): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x4e, 0x7ff, 0x7ff, 0x1, 0xc, 0x6}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e00)={&(0x7f0000001c80)=ANY=[@ANYBLOB="9feb0100180000000051a296d8952d0fb0000000080000000c0000000000040e0400000a01000000100000000000000837312a9e443104000000000000000000000300000000010000000400000000000000002e"], &(0x7f0000001d00)=""/236, 0x54, 0xec, 0x1, 0x10001, 0x10000}, 0x28) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002180)={0xffffffffffffffff, 0xe0, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001ec0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000001f00)=[0x0], &(0x7f0000001f40)=[0x0, 0x0], 0x0, 0xba, &(0x7f0000001f80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001fc0), &(0x7f0000002000), 0x8, 0x8a, 0x8, 0x8, &(0x7f0000002040)}}, 0x10) (async) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000021c0), 0x4) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="ff0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="f8ffffff00000000040000000000000000001a35c4faf53d3f1be0e2b2a5d342377ac2ad25aabcfdc8c2d00701a505ff2f413512738bb24c1df9c7eaa5ca9f251755a7d6f4d3a420ec7b6117c8a389ed2fb498f33646d1bd0323e8e450e8965f8c6b4a17679d8511adcc5ddc77466bedca46aba4916dd94f936be9c78b"], 0x50) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000100000000010"], 0x48) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf81"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x94) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f0000000c000280060001000000000008000500", @ANYRESDEC=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT=0x0, @ANYBLOB="130004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002300)={{0x1, 0xffffffffffffffff}, &(0x7f0000002280), &(0x7f00000022c0)}, 0x20) (async) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) r12 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_route_sched(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x61, 0x0, 0x2}, {0x4}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0x1a, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="18410000060000c87802fdff000000000f30b4fe89922221a846ae35666335ab8fc5b38e17458a8d61cc4f6313ec5e2e87e2ffb27718952e1c779c68818e128ed088e911020000c8b77db47a60a18c5c7d6c9105efed"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000c80)=""/4096, 0x41100, 0x48, '\x00', r3, @tracing=0x1a, r4, 0x8, &(0x7f0000001e40)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000001e80)={0x4, 0x4, 0xd5f4}, 0x10, r5, r6, 0x6, &(0x7f00000023c0)=[r7, r10, r11, r13], &(0x7f0000002400)=[{0x4, 0x3, 0xd, 0xb}, {0x5, 0x1, 0xa, 0x4}, {0x2, 0x2, 0x6}, {0x2, 0x2, 0xf, 0x1}, {0x1, 0x4, 0x0, 0x8}, {0x3, 0x5, 0xc, 0x5}], 0x10, 0x10001}, 0x94) r14 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r14, 0x1, 0x43, 0x0, &(0x7f0000000180)) 49.427320472s ago: executing program 6 (id=3684): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x8, &(0x7f0000000300)=@raw=[@generic={0x7b, 0xa, 0x1, 0xfff8}, @generic={0x79, 0x1, 0xa, 0xfff8}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3f}, @generic={0x95, 0x0, 0x0, 0x4}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 49.118478793s ago: executing program 6 (id=3687): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002", 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ff000016000000000300000000000000000000000000000d0000001a000000000000000a"], 0x0, 0x4a, 0x0, 0x1, 0x7}, 0x28) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r8, 0x731, 0x70bd28, 0x0, {0x38}, [{{@pci={{0x8}, {0xfffffffffffffee1}}, {0x8, 0x3, 0x3}}}]}, 0x38}, 0x1, 0x2}, 0x4c880) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r11, {0x2, 0xffff}, {}, {0xd, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x801, 0x70bd2c, 0x25dfdb00, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) (async) setsockopt(r4, 0x7, 0xe48, &(0x7f0000000340)="d8ce2c135cb1d7ff78d537f49ac51623ec38f53b8dd0c64982fc319e9b4c1d4b43229ac9763c2a9423fe41eb8cf6f1970a9ab65e4e180dce2cc5b7b2efe9485343dbb281442f37a188067beb2d91050d9e94343d0589518d7944aff967d5e1a6992fd91154e8130621069b75", 0x6c) (async) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6de9608e9ceab21f}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x6}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x6de5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2}, 0x20044018) 48.668747365s ago: executing program 6 (id=3692): sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = epoll_create(0x2040) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x0, &(0x7f0000000180), 0x8) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x4048841}, 0xc810) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3}, 0xa) (async) shutdown(r3, 0x1) (async) r4 = socket$inet6(0xa, 0x80000, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in=@remote, 0x4e23, 0x0, 0x3, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x1000080000000, 0x95, 0xfffffffffffffffa}, {0x40, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2684c3, 0x0) (async, rerun: 64) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0], 0x10}}, 0x44090) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f0000000800010001000000e25578e32fa9381b73ddfa471714a86098a6837b25612717d7646d4a150d8afbbee72e4a53c178a3c50e16b7980adc8f8a02adfdee9de1d5a7fe20bc4f22f2ed3b1ab711a42248fb29de4516"], 0x1c}}, 0x4000080) (async) r8 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast2, 0x100}}}, 0x88) (async) sendmsg$netlink(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x114}], 0x1}, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) (async) socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="00008000", @ANYRES16=0x0, @ANYBLOB="090325bd7000fcdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4090}, 0x24000890) 33.605338401s ago: executing program 34 (id=3692): sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = epoll_create(0x2040) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x0, &(0x7f0000000180), 0x8) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x4048841}, 0xc810) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3}, 0xa) (async) shutdown(r3, 0x1) (async) r4 = socket$inet6(0xa, 0x80000, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in=@remote, 0x4e23, 0x0, 0x3, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x1000080000000, 0x95, 0xfffffffffffffffa}, {0x40, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2684c3, 0x0) (async, rerun: 64) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0], 0x10}}, 0x44090) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f0000000800010001000000e25578e32fa9381b73ddfa471714a86098a6837b25612717d7646d4a150d8afbbee72e4a53c178a3c50e16b7980adc8f8a02adfdee9de1d5a7fe20bc4f22f2ed3b1ab711a42248fb29de4516"], 0x1c}}, 0x4000080) (async) r8 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast2, 0x100}}}, 0x88) (async) sendmsg$netlink(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x114}], 0x1}, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) (async) socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="00008000", @ANYRES16=0x0, @ANYBLOB="090325bd7000fcdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4090}, 0x24000890) 7.118630437s ago: executing program 0 (id=4038): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x3) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 6.943742615s ago: executing program 0 (id=4041): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0x98, 0x11c0, 0x11c0, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01080000000000000000050000000900010073797a30000000000900030073797a310000000054000000060a010400000000000000000500000008000b40000000002c0004802800018008000100667764001c0002800800034000000001080001400000000d080002400000000d0900010073797a300000"], 0xc8}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[], 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="300000009e0bd08829c8a4ac08fabf9252483b530da8f42061ad807782a74c2d4564fdd1f753d318158e18c1918920638184e88e0cbba953f19bf1c8b11aa39b55523b00b438bf0e815cc3bb4755a37a2ef407898578c8e79e160e91c825f5cace3dc49aec2db44dafa5a0bc342397bfb9c853ce0df44cfb23fec8da11d50cfa3812d036f6db58dfa6093d55e37eb7c1d68dc98f555e", @ANYRES16=r2, @ANYBLOB="070012000000ffffffff0500000008000500620000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="050006000d000000"], 0x30}, 0x1, 0x3000000, 0x0, 0x4060850}, 0x400d4) r4 = socket(0x1e, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0xd0, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xa}, {0x0, 0x7}, {0xd, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xa4, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xc, 0xf, 0x8, 0x3, 0x5, 0x3, 0x4, 0x7, [{0x7, 0x0, 0x6, 0x6}, {0x4, 0xa, 0x14000000, 0x84}, {0x1, 0x95, 0x7, 0x1}, {0x1037, 0x0, 0x6, 0xd}, {0x2, 0x8, 0x1, 0x8}]}}, @TCA_U32_LINK={0x8, 0x3, 0x8ae4}, @TCA_U32_HASH={0x8, 0x2, 0x4}, @TCA_U32_FLAGS={0x8, 0xb, 0x7}, @TCA_U32_POLICE={0x1c, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe5b}, @TCA_POLICE_RESULT={0x8, 0x5, 0x27}]}, @TCA_U32_FLAGS={0x8, 0xb, 0x6}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x450, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r14, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x424, 0x2, [@TCA_FW_POLICE={0x420, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x2, 0x8, 0x0, 0xfffffffb, 0x7, 0x6, 0x5, 0x6, 0x2, 0x8, 0xeb88, 0x9, 0xb, 0x8, 0x8, 0x80, 0x5, 0x7f, 0x6, 0xe78, 0x6, 0x8, 0xd00, 0x5, 0x1, 0x77f, 0x3, 0x7, 0x45fa, 0x80000001, 0x4, 0x81, 0x17e3, 0x28000000, 0x9, 0x1, 0x1, 0x3, 0x10001, 0x1, 0x5, 0x1, 0xa3, 0x5f02, 0x6, 0x2, 0x76f, 0x1, 0xffff, 0x238, 0x10000, 0xff, 0x4, 0x5, 0x6, 0x80, 0x200, 0x3, 0x0, 0x7f, 0x5606, 0xb71, 0xfffffffc, 0x5, 0x1, 0x3, 0x6, 0x8, 0x9, 0xc, 0x4, 0x1, 0x6e6ca12, 0x800, 0x1, 0x1, 0x1, 0x5, 0x4, 0xfff, 0x3db51c91, 0x2, 0x9, 0x5, 0x8, 0x0, 0x4, 0x1, 0x5, 0x5, 0x1, 0x2, 0x81, 0x7, 0xb, 0x6, 0x6, 0x7, 0x5, 0xffff, 0xa, 0x6, 0xc858, 0x7, 0x32, 0x401, 0x6, 0xe, 0xffff, 0x6, 0xfffffff9, 0x7, 0x5, 0x8, 0x0, 0x0, 0x100, 0x8, 0x7, 0xf38, 0xffff0001, 0x7, 0x0, 0x80000000, 0x0, 0x4, 0x4, 0xad, 0xffffffff, 0x3, 0x70b1, 0x4e, 0x6, 0xf0ee, 0x2, 0x6, 0x1, 0x40, 0x80, 0x0, 0x6, 0x1, 0xc4ce, 0x6, 0x9, 0x0, 0x80000001, 0x2, 0x101, 0x8, 0x59, 0xe0f, 0x8f9, 0x0, 0xdf, 0x101, 0x80, 0x5, 0x7, 0x8, 0x3, 0x13e, 0x1, 0x5, 0x3, 0x8000000, 0x4c, 0xb5, 0x9, 0xffff, 0x32e5, 0x9, 0xd, 0x8, 0x2, 0x3, 0x2, 0x2, 0x40, 0x8001, 0x3, 0xd, 0xdc7, 0x3, 0x4, 0x4, 0x3, 0xb0b, 0x9, 0x5, 0x1, 0x4, 0xa, 0x9, 0x3, 0x80000000, 0x0, 0x80000000, 0xe, 0x5, 0x7, 0x2, 0x4, 0x4, 0x81, 0xf, 0x80000001, 0xf160, 0x5f596db1, 0x6, 0xf, 0xfffffffb, 0x9, 0x8, 0xf5dd, 0x5, 0x7, 0x5, 0x9, 0x0, 0xcc8, 0xfffffc01, 0x1, 0x8, 0xfffffffa, 0xffff, 0x37, 0x8, 0xd, 0x40, 0x7ff, 0x9, 0x200, 0x8, 0x9, 0xcff, 0x31f, 0x6, 0x401, 0x3, 0x8, 0x9, 0xd, 0x2, 0x10, 0x0, 0x4, 0x3800, 0xfe7, 0x0, 0x7, 0x4, 0x1d, 0x6, 0x22]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80000001}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}]}]}}]}, 0x450}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000400)=@gcm_256={{0x304}, "db51d352f333850c", "d0f5807ac5aa3e15baaad148e63e8ccb6470603c24c6c91b76cde72fa45c20ed", "5114ad09", "c74b1b34092986ba"}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1226, [{0xa00, 0x800000000000000}, {0x800000000, 0x100000000000000}]}, 0xa50) 6.021356299s ago: executing program 0 (id=4050): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x439, 0x70bd2b, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x13, 0x618c4}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, {0xa, 0x4, @multicast}]}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r3, &(0x7f0000000940)=[{{0x0, 0xffffff07, &(0x7f0000000540), 0x2}, 0x3b61}], 0x4000048, 0x0, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 4.995900811s ago: executing program 1 (id=4056): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 64) write(r0, &(0x7f0000000000)="4c000000110006000011000200000a0002000000200000", 0x17) (async, rerun: 64) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000002a80)=[{}], 0x1, 0xfffeffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8040002a}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)={0x118, 0x1, 0x9, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x25}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_TUPLE={0x6c, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1002}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1000}, @NFCTH_TUPLE={0x1c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}]}, 0x118}, 0x1, 0x0, 0x0, 0x41}, 0x8080) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200008affffff0000000000000080850000003697694c72f21ef5cf000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x9d32f4b2e0c65377}) (async) r5 = socket(0x1d, 0x3, 0x8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000008000000010000008000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6}, 0x4) (async, rerun: 32) r7 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) close(0x3) (async, rerun: 64) r8 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r8, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/30, 0x1e) r9 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000900)="e8700ed16f425954ab3c431fd34e4330729ff15c2240503c412ea74e8478d45f717e010e8f3ceceb1d4b1260b42db628589049508bac07fd2d50da93dc0e33080fd228878d41ac0b73b368de6d3e60976c384cab06aeee054ffd2df674f2a978229affed9072f64db683db59c5b62892dff3d5b94a7c5e4d667ba7de97717bc83a067d", 0x83}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20040004}], 0x1, 0x40800) (async, rerun: 64) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x8, 0x42, 0x40, 0xc2, 0x1}, 0x50) (rerun: 64) unshare(0x2a020480) (async) close(0x3) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0) (async, rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1003, r10}, 0x38) (async, rerun: 32) recvmsg(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/81, 0xffffff98}, {&(0x7f00000002c0)=""/94, 0x53}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@getchain={0x24, 0x66, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xe, 0x4}, {0xc, 0xfff3}, {0xfff1, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 4.921646062s ago: executing program 7 (id=4057): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fefdffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b70500002a0000006a0a00fe00000000850000000b000000b70000005920000095000000000000006c8457920ba0fad478e86823cc07b88f5d76781dcb7729f41726a067818b990b13bfdd5db1b7ef826f015cd03018d546fa9b6827767c171a4f0720596bb3b4d821d976f5843061cc2e3afbae82d7932d4f91f718f0e56315040148e11bac31821236192321fa3b3042"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0x10, 0x18, &(0x7f0000000100)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x19) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0xc044054) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2100, &(0x7f0000000140)={&(0x7f0000000280)={0x54, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 4.921126938s ago: executing program 4 (id=4058): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x18100, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000011) 4.920513091s ago: executing program 0 (id=4059): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x2, 0x6, 0x628, 0x488, 0x290, 0x488, 0x0, 0x0, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xff, 0xff000000, 0xffffff00], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x168, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x400, 0x5}}, @common=@srh1={{0x90}, {0x6, 0x81, 0x3, 0x1, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, @private2, [0xffffff, 0xffffffff, 0xffffff00, 0xffffff00], [0xff, 0xffffffff, 0xff000000, 0xffffff00], [0xffffffff, 0xffff00, 0xff, 0xffffff00], 0x800, 0x4000}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xffffff00], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0xffff, 0x44, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@loopback, 0x1, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="6fc00801d778822a080004000005000008001b0000"], 0x30}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0104000000000000000001dd00000800010000000000040004800800020001000000240008800c00078008000600caeb"], 0x4c}}, 0x0) write$cgroup_int(r2, &(0x7f0000000140), 0xfffffdef) getsockname$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000100)=0x1c) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 3.974235215s ago: executing program 1 (id=4062): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000080)={0x0, r0, r0, 0x6, 0x10000, '\x00', {0x8405, 0x7f, 0x80, 0x9, 0x9, 0x3, 0x0, 0x2, {0x5, 0x8}, {0x87a, 0x8}, {0x80, 0x1}, 0x4, 0x5, 0x8, 0xd34, 0x0, 0x7ff, 0x3, 0x7, 0x6e, 0x2, '\x00', 0x65e, 0xb, 0x0, 0x4ded}}) (async) ioctl(r0, 0x8915, &(0x7f0000000180)='wpan0') (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet(0x2, 0x4, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) (async) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xb}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x3}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xc, 0xb}}]}}]}, 0x4c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 3.973500044s ago: executing program 7 (id=4063): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@local, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x9, 0x10000000, 0x1}, {0x0, 0x2, 0x7}, {0x40000, 0xffffffff, 0x80ae8}, 0x0, 0x3504, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000005}, 0x890) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newsa={0x10c, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@private0, @in6=@empty, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x6c}, @in6=@private0, {0x5a, 0x6b8f, 0x1ff, 0x4, 0x0, 0x60000, 0x1}, {0x0, 0xfff, 0x7, 0xfffffffffffffffd}, {0x8001, 0xff, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@remote}, @sa_dir={0x5, 0x21, 0x1}]}, 0x10c}}, 0x8000) 3.730812561s ago: executing program 0 (id=4064): r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001980)=""/96, 0x60}], 0x1, 0x0, 0x18}, 0x9}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002280)=""/58, 0x3a}], 0x1, &(0x7f0000002300)=""/12, 0xfffffffffffffe55}, 0x90}], 0x2, 0x40002122, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xe}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0xacbf}, @TCA_PIE_LIMIT={0x8, 0x2, 0x6}, @TCA_PIE_ALPHA={0x8, 0x4, 0x1d}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000300)="e83e716ab85a0d00000000000000012fe479362345a66e3ed6", 0x19}], 0x1}, 0x4800) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e0000003400028008000800060000000300030000000000080006000001000005000d00010000000800"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001c0001000000000000000000020000005dc8287583", @ANYRES32=0x0, @ANYBLOB="00001800140001002001000000000000000000000000000008000f0001000000"], 0x38}}, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="34dc3f32bb419d2f6506261e960a45722c39b5b972170d8e70077ba3263aef35f9d645359ab589abde6f031d1e6cf83c8781f967c66fe35c2246357b51db5121b154e5e71a8121b5741d5bef056be38b9d6bbb460307ee20866eea2bf0bb5029843304bf86417520d122822d58eb17bce7d37320cafeceb9475a930361b997f73508533a0cd2e9adc9fa1122c1490fffdc33f6a7d9fda62cb03c8f6240d7301903d2612360cb2bc1d56a1d467e536013f60ea9", 0xb3) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r4) read$nci(r3, 0x0, 0x5b) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r8, r7, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c) syz_emit_ethernet(0x11dc0, &(0x7f0000000080)=ANY=[], 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x840) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRESDEC=r10, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r11 = socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @multicast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="0c8a3033bac4", @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @remote}}}}, 0x0) sendmsg$key(r11, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300fbdbdf25"], 0x10}, 0x17, 0x7}, 0x0) sendmmsg$inet(r10, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r10, 0x1, 0x53, &(0x7f0000000040)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000000c0)=0x2c) 3.697650965s ago: executing program 7 (id=4065): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="e82b22886b"], 0x48) r1 = socket$inet6(0xa, 0x3, 0x84) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000280)={0x4403, 0x7, 0xffff, 0x4, 0xe, 0x0, 0x40}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000003c40)=@newtaction={0x14, 0x30, 0x216822a75a8bdd29}, 0x14}}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1d}, 0x160) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x5, 0x0, 0x5, 0x2, 0x0, 0x0, 0x10000, 0xffffffff}}) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x58}}, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x4, @empty, 0x3}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x190) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000140), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000c000000000000000000008018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300003f0000008500000083000000bf092000000000005509014d75286fc6360d1b00000000029500000000000000bf91000000000000b7020000000000408500000085000000b70018d90000009952f8681379325a533dee7b869815"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x1011, &(0x7f0000000840)=""/4113, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) 3.459104669s ago: executing program 1 (id=4066): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x9, 0xc00}, [@RTA_NH_ID={0x8, 0x1e, 0x4a78}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0xd1}}}}]}, 0x38}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="24005a8020000180140003000000200000000000010000000000000004000200040003"], 0x40}}, 0x0) 3.458499168s ago: executing program 4 (id=4067): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(0xffffffffffffffff, &(0x7f00000012c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x1c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0xfac, 0x0, @opaque="171f8e3983221de099729fb43b80fc37f1bbcc3559fb34425b1077954aaadd1ca0c00e9c4b8c78b183b1d84db49c162abfddef0e7f6ca1398cae7949c3607855d2303b9890542ec60620594736d608078f6daa6231ac06d499b32dff93d44c2bbfd6c85843f933f6592bbe40b4868b79b5ea7f3653d82ac3cf80f813d794b7b09f71511b51fd09b75ce69658dcd4a55d4bfb0a1606f2188d598b37d8090c564a80607ddb5d79fd2a18de2313cbdbc1af98cb6d3020b23ce4c547f1bd8f610922fe08dbc02b4b37a44fadcb0806408fdeb93f8e143a963b8120a5ac26e4ccb57ee244ab78ab1b3f4183cfd9fc7f9b258d5170d524d780228339f96fe0c09eaed410796e8be78522f32df8855534b332cf24d98b6056970a58c831a85c811afbdd2b333c96cd2e0d7b54cccdeca1e6c937983966dcfeb1afbe28750dd831092be23cc1ffbff89041b28c19584af222692529f3c8ae659275105296c8032a01b484fc246f3e292d10e53392b39ba0af2ac2e0deb76caecda2167300cc68a2426526fd9e134d1525ee5d9e424f64b59b888e7c540418265db1907c710ed8334a8e436728ab5343be7eee19c5145fb323295db5210ae93ead29c42dfe3b3bd1fc4e8240ac1f87c237f61ea3af837dda2502bd1faeeb544fd017828640398a0e678c313815cd0e730cb748355b01494c056fd19ffb97537059ccaa4379e25129d35c9f83ba987a35854f4d17c5ecca26597076c1d4141754dca2cbcd4659772ad2640a6441adab38e057cba77c1f0f543ca7f20309b9cbb5a9171e4c05fadaf3eb33c8268fa0cc35508239c02014c1685aea7a1943e6366f03d62be5a2b6fc76a8db8044b72c4cd082720e82f24b03832638a540c859c93a5d706cf5ab28fd457ecbca82ee7a03f8267e26c84b4d8104b86d2403edac93b9b75f7b0c178b12c42ef15abfb8ec956d5524b7b1d6b945af3c511db0128addff4a9218a246c5a733004ee9337e7a4de271a383efec3ef0c25d75036dbfe27360ecfac59e9bc25b1191d6a12e71ca3c52588873681c98165fb3c4d82c422bd3008c9911d46c340a55a250f0321dd6f4cd6d83e489678dad2deb83f46af1eab92c7269159409827c2c307c6e7f9d9440628c81f279994f5fb8b9b01d4af256e8417462787053a203dc09ba8937ae8165e6f4ea9aed2601797518788438fcb3784c58d4bb322f00d560172efbf387cfcebb92f603236af7eaafa978ff5ad01883e4dbda3a402b4ecc1d7e0464d87c5f27f748d9c438c397cae30eb56403e9cb79b4a7e5a79bd5247e8a309aa9e602aca523fa6aec9564617e342e531a4e88665127e266774e79d9e34663c04e422051b30b0f30c6ab55e265575dc22fc7eaea281a85881783bc55e033278373a2810df8994e4a9908ed0078f6992053f53389f19a03e905e577f5cc60edf62c00d8956e927f7bb3d6e8cce72d7fff06123c0615a2f732b0e2c4a35ea97b6dc3a08978acf023900dc418865da12eed9c1d6af2e3107a0e0732b2245dc745ebe8331701caf4f9bd97d4719dee094bdb5a85ce02f2beb39f2e13d0782b4cd1b7fb3ed076e9fd9ca5ec811ff9272fd08df0cf079e23ab5e5ec44a7de222bc14b3dc41087b50643ca782b75f3ba209c571076d924714d00e6626ca329e8bb517d7dcf3a4b500c937e1a5c7af968dd874aab4edcd391ca8fa254f8e4b61d82710ae98d17bd437d49af1e869997d5d0a7f0900179ce98b117b7b2571d35328e32328451e42eee34f99ab5063d03d5a98a04c86604f14c6aff8ca56b09400c5a6e7f4df0be2c8f646bebb9adb9ebca408b20ba73f8bb595b825971df99b90ffe77c6933858c89e987467a229d20b565bb1f7edb8383fdd899ebe92fa9877397ee77d01c0de7a7443c98ed7724cbc983108b1d182b5eea01568e0a9104087cf3915a3c0d775cc3cf6041972895a07da516cfc622ec298aa35b67b13af5049b2557ab3f0c8d634701b02d50d75d99dc9adb6c32fecf98f0bdc4c6b517d65a6217acc44fa8b6eff82e09bba9534ccbab14a42d9c0fd9a71c02599ef214d4c785f7a4076f9e3bbc9bf5af9ffe49ba853511819f100968eafeb912afd53114b8669bdb0fe4e27d77c3e1d3eb40b4e9099e373799872c2fe9bba38b34404725884ec78a334a32890df438c01ae55fbb121335f3f90242677134f0d9ac360a14b4820207c9014ec7913fc0a4e8eb4273dc01e85daaab311e70b5a46e0f5efddef200e88d3f92215c907b9627e384f11da9ff69310ecac64f97d84148259dd3ee1997297107b81df0c0cc7d80d141e17ad0efa97291604e497d7165c692f27aed38ff2720849366ac64d67ac6eb7475527b613d5445485c777f47587cbf34838981f6a3dfc7556515d062e4b6815e898973486c63871ed477b8e1b6e1a9e9bd23c5f7f8e65b28dbe04f901a9eff8a7433ceefb4c832f73fa6dae046530d6449c69ca7f225357b5211e33b63f6b9328d904f5b6f604d175274c58b94f03a110ae68895534e0e767bd0e5ea85da6dda08f7bc15273c35e738ffc3299d33e66974aa1ceb3a46a292d4be3ca8088bca95a0a392128c8211ca19eab11d503b200e5d16c704e50c86f0c9730c53043e1a5fc1cd1b4c9989d9c5f37071562b8ff13a35861d6ea65125edd6a8188e1f0003c07971aabda0dc7caff8a9a65685a218ef3a7d0bd0d725dcc4e5dbd366f8ac40b4909aa29ebb469f5f16e9a93c6f66af1b1efcc5134fb5246155441ec383f16936594e5204072ffde080c300d2b972c11363910567dac69f9595303b8842f878d17e5da16a0dc8ac7e15046bf3eb8150398078cff44760073f85a2eedc9073a4e4c1e3a337835f57334bea02a0002aabd108e7f3670734aff5cd416df3954f998e5dd6929c3980eb1e4f22ede74324cd81aed07cb3ba2facd323f49ab8d83d323024f9e02e6cd956abfabebdf5bbb861fca9580a2ded9c66f34790ae92f13b7cd4f867b4fe3b7f94b21fb32fafdf397f6185491ce3d7ccd40c4f0064aa17457450f6489953629f53685547dc0967cc360dd52ef3adc56adecb7689e866fa6e8e5b63177ff32e82d10de2559077d5080a3e93839b8b2bfad9c0bca7653f6353eaa138c7fc2f445e80eab1ed1d600ca98f3d2472e67c750fe81bd1418f7d538bb3a38d3481afda6b27eede13a2a14fd4ebf3bfb75dc98b915c122a79dbe5b9d7f5c58bfcda0c488da864b604ea465850a8276e43d946174bb4bc491c4de6578188345b7c2f60ca8f52846d862323d43e3856b222cd8b8295a9c6ff9fb2078642af41b57dbf307bec27eb7afed5e10ce6a17bf6c0a1d253a155a9bddef920eb74eaee8df9b4798d3bb3b8680c1c43822b4d86ba80fc084d4af50f83059db5894c138758425f44200cb40c0b122a02defeafe8fb1333d3990432272691f0e5943262d7b16740802fd634f7b627a639a21b7ceb712a1b64ffb4739a80eea995b5ef67cc0cafcf351505c0cd312efd91cf558d1f285636a281694c5693c97b3d61106a08aecf308659f2bee0c47797151f6b7aee21980459d4b62f0dc9b17a9b4d90897b8d6256180f2bf172fbd3b64a4b69f214c2510f2ac16deffea8d5c86e38c2860176c048e176142b357f49ee07591895ecc560e309266a24e8b4a80f651c4d10b7b4538dda532e13beca6a929e89d67b2fba84710791832bac8e68da6554b0ca635e99f82532aad5a194bf7ff94a9646f2d58060bbad3d3181fad500b1921bb9aa5c4d1c36883869453171ece1da56cec257d4f61973cde0d701a6cb033f102ed3e2dc419fadefb02ce6e387ab9df52e0c2fbb942e1c96ca7c8764ba97751eef7553262857e49366924eb09e89ce3551ed152992a701e9110fcd96d815d743a58467c1a99842d5d1a19d70d2e309981e3f36a17df6f037bd3469acde9283adc6de05a08c33dba5c312635a294fa357ce1cfe29ee8112e9ebad1961131a9e360b2adbbf8053884257a0ecc635d517c8ffab745d3dbdf05e2ffd770fc741920cbc22204710bd754d5803fb57495e3a0740d06f111c196baf403d38a5504c767f9c072c9490b99439e7e2b178af33b6fdd838a638e00f71e7671ebde1a6d67bd3cba16f05e12b4b00c19e071df9d5f0cb726bcd29d89fcb32fe68e4e47973238998833f170572069bb95bd5d688d7e9e18b249484af944103996e0ae003721f87e3bb05e3352269cf4e3289a3a73cc2c2a4aaf5502e75a2d9a3e997ec6627d5e2bca92f756db3b4b5f61d22f898b713862ca1979b95429c74fdf7328d5667156c6fcfa67722accd252f735c10e680ad0099380821058ce74e4044000cefdf3f0b24dbcbce5e0386d2b61ddb17f2e26f2c563380116101bdd598eb69670396e582d0ad7ba5e397b0af3ff4740f24e6ac0dfbddbb25a0e573a45a22b475f297efc383ce32c5292c445d223c11eff09cb568935f583bbf5226833890b779e7e8f53cfe4ff9ee1956249d1de668abe9ffef10bf9102520e079570e8764717831523018226be5b042ccddff1c9d3778302499fb95207b11e96f5324747c3b03cdc87b444e9be8caae13f17a42d2e89d94e09667ab93c669fe3609a50490789553a587c6d01f71286b7ae0b1fd55b84cd407ea4a5147e268fe180958df8c4edfcd8c7425a0f7dd83a42324da0e3dbb939f35d44789f8b3ba53e4397a1b7d816a75b9f9d75ec5e3079e91f4ee18ff49e95be1490f839045e7660ed98e284b3b42dc92615b0bef42aaaa4d68e76365b3c4b0d2e03c1074ff89bd4cf6ee3a8a052a2a89473eb017d47587c8b37b6be7cdec595efbde082f821473b15300a3c9e25098fd2c1936e1ed98f47947e232456ed4effb0f5e873ac37ac0ab5549a94f62fec7b0cab33e0d812108355ee73e4cd9076bd1d63d2f237db7470dc0e1c296e24c3f981e6a6e5e7986bb2d0dd14f8c073e4f2da5fecea229e9c1cc8a735610ed4605521d507e9be1d91ebe321385866015e4605cae73a2ad0b152e9ac7403bad4f8f0ca1727e52b8398967d39f063cf4cc4e6b95267ee932c6d7c45cbbbabc3de2c597b40007e82c15d0e0d92c92a5a80536a1d43476b3d8da61bc3c338797b5bc66ba1d03928af72122a16e3b6057d4b6b405052b64759896c4718d486a9c4b1a361799dd3677f71a568fafee240b887d350a82eabf32283d340cbcc7bb7ca6cbd04a11398ac515724cd0ecc4de654900779bb29f4148080db4c1d2c698d8c5a83348181a3631890ce5db9f4480fa41b1599890788ef0579f78428b0112859c0286581a13205b76108b8cdfe4b2e195fc079621445ff21a6eb9236086dcc72a75bda2fd8afe5d93bf5c1b9e58d9d0df8d44f66e1660a3ccd25275bcc987f70ea17814888f0a6952efc7f31da75477b3dd6418f83692f964a198ec8c481b4140c294c9afe3c257b3e0dad93eaf8e9359d2d36bff6fa3de522a4bda85edbd1b4b0baabe68a443f7dc4455426e29893fe489b451046e5b74e3e5492c0a3dc7af279233383aa61342093cc9e94b9b76163fda501a5f23d5ea224b0e8ff9bb5bb5760e272ed1d1a0a249b6df38ead5b7056602bd194994d9d0bc7b71166f150009b815a2e8e6be7e93e2b24b2db9363c5cad767b2374289f35bb3649ecb9d9de96246c3aa0c"}}}, 0xfce) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) 3.43164886s ago: executing program 5 (id=4068): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r2, &(0x7f00000006c0)="3b000300010006", 0x7) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='veno', 0x4) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r4, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x3c}}, 0x20000000) sendmmsg(r1, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="b2d6", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000002240)="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", 0x222}], 0x1}}], 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="b4000000000201040000000000000000020000003400018014000180080001000102030408000200050607081c000a800500010006000000060002002710000006000300001500003400028014000180080001000102030508000200050607081c00028005000100060000000600020000000000060003004e200000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff00"], 0xb4}}, 0x0) 3.401603958s ago: executing program 1 (id=4069): unshare(0x24060400) (async, rerun: 64) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) (rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_newvlan={0x18, 0x70, 0x1, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r1}}, 0x18}, 0x1, 0x0, 0x0, 0x40c4}, 0x4040) 3.253080709s ago: executing program 7 (id=4070): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000ec0), 0xffffffffffffffff) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x2b, "04000787b600eca6aa0825471829a00700e54b93e70b65949906a13b76078a07f95f5e8bc0e7b3635240e82fa543d570618759f1f1f349"}}) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYRES16=r1], 0x24}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) (async) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r4, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="02032000130000bd05ee566014423400040003000300000000000000000000000000000000030006000000000002004e206401010000000000080000000400040000000000feffffffffff1eff00000000000000000000400000000000020001000000000000000000ce91c42f030005000000000003441e91ac74edafa9a100ff183935666a1058d4a49376ce6002004e21ffd227a03626be5c16cad338176faf0ba39bee0dfebf771b3596d10a00000000000000000000006f4f2e89758383fe49dca058a50c147f57b9fd5bf21fb1db1868207438229694d2e2f5503a06a0f90709ea3ba69526557ba99b484c557960567a80813ac528226883574fa00b1daa36d84fbd5e8c76204aab4211c4ad24d93bc3b5e26ce8fb1979470b0bef7c47008fe733fb1f8adedc7b5399e6081613d3e63e70fa17c94ca71ffce65873fb6c715586e435ad355279e2ddffe2e11ddcad9a9e87fae7548cf8c96400fe2577d010aa48a24bc297e964a1290d31fb8010af8fdc728f4672da5a6646ab01ce33f04c81a589e66dac78eece904310d968b3c1ee1fc8330c6fceada6f1b39fb007285c722e6e87c9ccec71134c131205d6fa7c2c3752fa7630c9e5b9f82ea8c1e4a00a44cf1b8ce68046"], 0x98}}, 0x8001) (async) bind(r3, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000002c0)={0x18, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x804) (async) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000003000000000000000000000a00030076657468300000003400128009000100766574680000000024000280200001"], 0x60}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000028c0)={0x1c, r8, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xf040}, 0x0) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r10) (async) sendmsg$inet6(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="a0f5879526a1d3cde9494c9c527b6f770d3c74f055edd65d3bbd22ec3a7db3589b85d7b8a8d1e6fa0f957aaa7f70bc8f7080c1afe679986a19361e36756e12a306096b76f508f58158620dcc829552fb58d7e5bb29fbef90547bb3c33ad1ac3cb7f7d0762ff7a54d53128d6f7cd876830bae6b400a00291bd42e56099a92364cba0b0befaff023e2b5c7e57847abe65d1f2373ed589dbf644621", 0x9a}, {&(0x7f0000000440)="d0bbda35eca8288c205348374de57027a5db1ecb65794cf702748b9c0ec48677caf212309665eed1ebe3819f92891d82c90ebcd61088185173cad1064ff51065ee79109c87aeb3a06a06eca580e47e32ec8ee3a2ce77a68a14c9042dcb1469ef88c70eaaa636ff16bad1de26625b6c1b16", 0x71}], 0x2, &(0x7f0000000500)=[@hoplimit={{0x14, 0x29, 0x34, 0xdc44}}], 0x18}, 0x10) (async) syz_emit_ethernet(0x6a, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde08084500005c0000000000019078ac200001ac1414aa05009078e00000e0430800000000000000110000e02c000300003d00000000000000000010000000000014007e000000000014bb003c2000000000000000000058f5491d94992f9e55e53acf50c04baf84e605953128bf110b4a35da93da736c0e0fe436dbe9d7dd734f265df849236f533d8099ff4d35fb666ccf5ffde62fc0e446ccd6e01519de628c6e02000000000000b09c87af7ceb7faf55ffb00371ff1c84cb4571707d6b040048d4bc56d8a02b0cbb4e6b8696680af21b58b9446679a8f1467ee0a1c738f8166b93e5247c7731807e0c4fcf6d"], 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) sendmsg$NL80211_CMD_DEL_PMK(r6, &(0x7f0000000880)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000005c0)={0x64, r11, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x63}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}}, 0x4000014) (async) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r8, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffff4bef, 0x68}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x84000}, 0x4c020) 3.057376152s ago: executing program 4 (id=4071): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000018000105010000000000000002180000fe03fd0100000000080001000af000001400090008000000010000000800000001000000"], 0x38}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @remote={0xa, 0xf0, 0x0, 0x1}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000001}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) r4 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e21, 0x46b1e844, @loopback, 0xb}, 0x1c) sendto$inet6(r4, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 2.963137382s ago: executing program 4 (id=4072): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f00000028c0)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdc01}, 0x14}, 0x1, 0x0, 0x0, 0x161b060f1436d4f2}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @local}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x6, 0x6, "0a73d9", 0x10, 0x11, 0x7e, @empty, @private2, {[@routing={0x3c, 0x0, 0x1, 0x2}], {0x4e22, 0x4e20, 0x8}}}}}}, 0x0) 2.888014393s ago: executing program 1 (id=4073): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x8e) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x2400c801) sendmsg$netlink(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000002f80)={0x10, 0x26, 0x20, 0x70bd29, 0x25dfdbfb}, 0x10}, {0x0}], 0x2, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) 2.434532835s ago: executing program 5 (id=4074): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x8, &(0x7f0000000300)=@raw=[@generic={0x7b, 0xa, 0x1, 0xfff8}, @generic={0x79, 0x1, 0xa, 0xfff8}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3f}, @generic={0x95, 0x0, 0x0, 0x4}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, 0x94) 2.374448616s ago: executing program 5 (id=4075): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000200000000000020000008500000020000000850000000500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x89ca}, 0x94) r1 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0xf00, 0x0, 0x1}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x48d0}, 0x4054) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x12, &(0x7f00000001c0)=0x5, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.367506994s ago: executing program 5 (id=4076): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async, rerun: 32) connect$inet6(r0, &(0x7f0000002100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8d}, 0x1c) (rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async, rerun: 32) recvmmsg$unix(r1, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002980)=""/253, 0xfd}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001980)=""/4096, 0xfffffffffffffe5d}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x122a1, 0x0) (async, rerun: 32) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 502.487949ms ago: executing program 7 (id=4077): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x5, 0x4e23, 0x0, 0xa}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010102, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a000000021000100000000000000e0ff00000000000000000000000000000000ffffffff000000000000000000000000fffc0000000100000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100ac141440000000000000000000000011fe8000000000000000000000000000aae0000001000000000000000000000000fe8000000000000000000000000000bb3c05"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0xffd3}], 0x1}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000e020010100000000000000000a00000305000100070000000e0003006269746d61703a6970000000050005000100000043b77c5a126cf7df08c9bbab48d69e36c07c0196fb2f2c3fb84bed83d10400bac30b6ca02ed9cee4b9"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x7c}}, 0x4004) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0802034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d10300000700064043b2010014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x9, 0x10}, &(0x7f0000000440)=0xc) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000480)=@assoc_value={r7, 0x7}, 0x8) (async) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000103000000000000001c0a4f0000ee00000000798131000000000900010073797a310000000050650887131deb17f88916aab7f42204a8bec3824d765484172d0bca6077e311fc57886b689169acaaf621fe2da04d57b9015581a944f53cb09eef1978819a0652e026b0499fd41e62fcf638fdeb3f5eb67ce3b6b41d25d29d86e79ec088570a2c8d794dbf8ac24a104bde91fe8c3e303fc926c191abf611feb404fb3e23000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0xc010) 501.379277ms ago: executing program 4 (id=4078): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r4, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x5c}, 0x1, 0x0, 0x0, 0xe5}, 0x18040) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb0, r1, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:fsadm_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:udev_tbl_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team0\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x800}, 0x801) syz_emit_ethernet(0xc2, &(0x7f0000000000)={@local, @local, @void, {@llc={0x4, {@llc={0x80, 0xf8, "84", "783b671c564ff79035205b765e4ba8d5aa5d747ed5106010604b7ab7acc4e2d8ac0c69bb7ffebc5c35772a199fcbb63a6d2e11b0c59ec98ca6222c2cad24d95fd77cbf4007ceef36bc1a0dd608edc310d4f313169f21f16d4d23c7c410e63c499c57c6bad68205d5ab935e4058e834a3b0841ef6b03d901539c93091f7d68bb0d4b53841405d19291aec7c24873a957fee2d9d13ef50ed2fa3ce5eab6bf592e8db5ba05e7c26c91bbdc3493bab2d3a8ff8"}}}}}, 0x0) 483.370039ms ago: executing program 1 (id=4079): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005a0001ff7f000000000000000400fd80080003"], 0x1c}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}, @alu={0x7, 0x0, 0x4, 0x6, 0x9, 0x4}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x100, 0x44, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r5, 0x0, 0xe, 0x0, &(0x7f0000000140)="410c49bc3c388e38d0da5a20564e", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5500040000000104000000000000000000000404", @ANYRES32=r4, @ANYBLOB="00000000000000001800128008000100677265000c00028006000e0012000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newchain={0x0, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xa, 0xffff}, {0x5, 0x10}, {0x3}}, [@filter_kind_options=@f_cgroup={{}, {0x0, 0x2, [@TCA_CGROUP_POLICE={0x0, 0x2, [@TCA_POLICE_RATE64, @TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x2}, @TCA_POLICE_AVRATE={0x0, 0x4, 0x6}]}, @TCA_CGROUP_POLICE={0x0, 0x2, [@TCA_POLICE_AVRATE={0x0, 0x4, 0x80000000}]}]}}, @filter_kind_options=@f_flow={{}, {0x0, 0x2, [@TCA_FLOW_DIVISOR={0x0, 0x8, 0x4}, @TCA_FLOW_BASECLASS={0x0, 0x3, {0x1, 0x6}}, @TCA_FLOW_RSHIFT={0x0, 0x4, 0x5}]}}, @filter_kind_options=@f_flower={{}, {0x0, 0x2, [@TCA_FLOWER_KEY_IPV6_DST_MASK={0x0, 0x11, [0x0, 0xff000000, 0x0, 0xffffff00]}, @TCA_FLOWER_KEY_VLAN_PRIO={0x0, 0x18, 0x1}, @TCA_FLOWER_KEY_IP_TOS={0x0, 0x49, 0x4}, @TCA_FLOWER_KEY_CT_STATE={0x0, 0x5b, 0x3}, @TCA_FLOWER_KEY_SCTP_DST]}}, @TCA_CHAIN={0x0, 0xb, 0x401}, @filter_kind_options=@f_flower={{}, {0x0, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x0, 0x1e, 0xffffff00}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x0, 0x4f, 0x933db4b8681eeefb}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x0, 0x50, 0x1}, @TCA_FLOWER_KEY_FLAGS={0x0, 0x2f, 0x7fff}, @TCA_FLOWER_KEY_VLAN_PRIO]}}, @TCA_RATE={0x0, 0x5, {0x0, 0x8}}, @TCA_RATE={0x0, 0x5, {0x3, 0x7f}}, @TCA_CHAIN={0x0, 0xb, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20048844) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r7 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000300)={0x2, 0x7, 0x2, 0x80, 0x2066, 0x6f, 0x6}, 0x20) r8 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x22020400) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r9, 0x1, 0x34, &(0x7f0000000040), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000005f00)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4000840}, 0x28010) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x80) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f) socket$inet_sctp(0x2, 0x5, 0x84) 409.659946ms ago: executing program 5 (id=4080): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r2, &(0x7f0000000100), 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x6, 0x7}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000b00)="e097566f5bec64466cf0925782dd", 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000010000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r6, 0x0, 0x0}, 0x10) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000000017000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001414163384030000000000008500000083000000bf0900000000000055090100000000009500001000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xc}, 0x94) 337.28383ms ago: executing program 0 (id=4081): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000002c0), &(0x7f0000000240)=r1}, 0x20) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f0000000400000054c49d3d1000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r2}, @generic={0xb7, 0x3, 0x0, 0x0, 0xfffffffd}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$unix(0x1, 0x1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000d4}, 0x0) (async) r3 = socket(0xa, 0x1, 0x0) getsockopt(r3, 0x1, 0x2f, 0x0, &(0x7f0000000040)=0x700) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, 'team_slave_1\x00'}}, 0x1e) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x38}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="05003300000000000000060088a8", 0x0, 0xb7a2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) 120.664779ms ago: executing program 4 (id=4082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x30, 0xffffffffffffffff, 0x20000000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a28000000000a010300000000000000000100000008000240000000030900010073797a310000000054000000030a01020000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d615376746170000000080001400000000514"], 0xf0}}, 0x0) recvfrom$inet(r1, &(0x7f00000001c0)=""/244, 0xf4, 0x22, 0x0, 0x0) 2.491114ms ago: executing program 5 (id=4083): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, r3, 0x701, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) (async, rerun: 32) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r4, 0x10e, 0xb, 0x0, &(0x7f0000000800)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=@ipv4_newrule={0x24, 0x20, 0xc15, 0x70bd28, 0x25dfdbfb, {0x2, 0x80, 0x0, 0xd, 0x2, 0x0, 0x0, 0x0, 0x1f}, [@FRA_SRC={0x8, 0x2, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x80) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000000080)={0x7, 'macvlan0\x00', {0x10}, 0x62}) 0s ago: executing program 7 (id=4084): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0xf, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x80000000000000a, 0x2, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) r5 = socket(0x80000000000000a, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0163014030d9"}) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r4) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0xffff, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "010400cd00000000000000004000"}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003340)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x700, 0x7, 0xc270, 0x59, {{0x11, 0x4, 0x3, 0x25, 0x44, 0x66, 0x0, 0x5, 0x61c0ea4f8593989c, 0x0, @rand_addr=0x64010101, @empty, {[@generic={0x89, 0xf, "712bfed2452b56fab19e6f5cd5"}, @noop, @ssrr={0x89, 0xf, 0x40, [@multicast2, @loopback, @remote]}, @generic={0x182c8c33f7e56035, 0xe, "9b7c11cf993fa55378576d91"}]}}}}}) bind$packet(r1, &(0x7f0000000340)={0x11, 0xc, r8, 0x1, 0x7, 0x6, @broadcast}, 0x14) r9 = socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r10, 0x40107447, &(0x7f00000000c0)={0xfe55, 0xfffffffffffffffc}) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r9], 0x50) kernel console output (not intermixed with test programs): vsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 519.586584][ T8243] netdevsim netdevsim3 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 519.586604][ T8243] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.586625][ T8243] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 519.586645][ T8243] netdevsim netdevsim3 netdevsim1: unset [1, 2] type 2 family 0 port 34495 - 0 [ 519.586711][ T8243] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 519.586732][ T8243] netdevsim netdevsim3 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 519.586752][ T8243] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.586773][ T8243] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 519.586793][ T8243] netdevsim netdevsim3 netdevsim0: unset [1, 2] type 2 family 0 port 34495 - 0 [ 519.587667][T18181] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 519.694923][T18189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2894'. [ 520.030890][T18206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2898'. [ 520.044476][T18207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2897'. [ 520.044513][T18207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2897'. [ 520.167584][T18210] vlan0: entered promiscuous mode [ 520.188351][T18214] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 520.225648][T18214] tipc: Resetting bearer [ 520.678023][T18246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2905'. [ 520.737833][T18246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2905'. [ 520.814464][T18256] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2905'. [ 520.951906][T18268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2908'. [ 520.951937][T18268] block nbd4: Unsupported socket: should be TCP or UNIX. [ 521.260046][T18280] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 521.279579][T18280] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2912'. [ 521.279979][T18280] syzkaller0: Caught tx_queue_len zero misconfig [ 521.373401][T18280] xt_limit: Overflow, try lower: 0/0 [ 521.726220][T18314] SET target dimension over the limit! [ 521.760114][T18306] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 521.760150][T18306] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 522.107567][T18326] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2918'. [ 522.348641][T18343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2923'. [ 522.360444][T18343] xt_TCPMSS: Only works on TCP SYN packets [ 522.437960][T18336] bridge_slave_0: left allmulticast mode [ 522.437992][T18336] bridge_slave_0: left promiscuous mode [ 522.438262][T18336] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.474020][T18336] bridge_slave_1: left allmulticast mode [ 522.474050][T18336] bridge_slave_1: left promiscuous mode [ 522.489489][T18336] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.524696][T18336] bond0: (slave bond_slave_0): Releasing backup interface [ 522.547213][T18336] bond0: (slave bond_slave_1): Releasing backup interface [ 522.575910][T18336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.575941][T18336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.580631][T18336] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 522.580813][T18343] syz_tun: left allmulticast mode [ 522.580844][T18343] syz_tun: left promiscuous mode [ 522.581132][T18343] bridge0: port 1(syz_tun) entered disabled state [ 522.822210][T18358] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 523.025915][T18365] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2931'. [ 523.150953][T18372] netlink: 'syz.1.2932': attribute type 12 has an invalid length. [ 523.150980][T18372] netlink: 'syz.1.2932': attribute type 29 has an invalid length. [ 523.150995][T18372] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2932'. [ 523.180922][T18364] xt_CT: You must specify a L4 protocol and not use inversions on it [ 523.271889][T18375] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2933'. [ 523.392192][T18382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2929'. [ 523.686382][T18394] netlink: 'syz.4.2934': attribute type 46 has an invalid length. [ 523.838867][T18401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2935'. [ 523.839070][T18401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2935'. [ 523.839263][T18401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2935'. [ 524.187463][T18410] netlink: 'syz.4.2939': attribute type 8 has an invalid length. [ 525.181089][ T4933] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 525.201476][ T4933] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 525.204475][ T4933] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 525.219421][ T4933] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 525.234664][ T4933] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 525.588786][T18457] xt_policy: output policy not valid in PREROUTING and INPUT [ 526.623327][T18469] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 526.852940][T18447] wg2 speed is unknown, defaulting to 1000 [ 527.130461][T18501] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 527.281355][ T53] block nbd4: Receive control failed (result -32) [ 527.316539][ T53] Bluetooth: hci5: command tx timeout [ 527.403145][T18516] netlink: 'syz.2.2964': attribute type 11 has an invalid length. [ 527.658256][T18522] v: renamed from veth0_vlan [ 527.790187][T18525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 528.135662][T18447] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.136029][T18447] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.136220][T18447] bridge_slave_0: entered allmulticast mode [ 528.139925][T18447] bridge_slave_0: entered promiscuous mode [ 528.151618][T18447] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.151732][T18447] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.151837][T18447] bridge_slave_1: entered allmulticast mode [ 528.167691][T18447] bridge_slave_1: entered promiscuous mode [ 528.497460][T18447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.520337][T18447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.657870][T18447] team0: Port device team_slave_0 added [ 528.662931][T18447] team0: Port device team_slave_1 added [ 528.725623][T18447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.725642][T18447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.725667][T18447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.728312][T18447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.728332][T18447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.728358][T18447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.914588][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 528.981614][T18447] hsr_slave_0: entered promiscuous mode [ 528.983458][T18447] hsr_slave_1: entered promiscuous mode [ 529.007403][T18447] debugfs: 'hsr0' already exists in 'hsr' [ 529.007430][T18447] Cannot create hsr debugfs directory [ 529.394829][ T53] Bluetooth: hci5: command tx timeout [ 530.276472][T18447] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 530.298803][T18447] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 530.299864][T18447] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 530.304099][T18447] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 530.326774][T18447] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 530.354982][T18447] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 530.359751][T18447] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 530.398602][T18447] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 530.444086][T18608] __nla_validate_parse: 20 callbacks suppressed [ 530.444113][T18608] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2982'. [ 530.707894][T18622] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 530.798213][T18625] netlink: 988 bytes leftover after parsing attributes in process `syz.3.2986'. [ 530.849455][T18625] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2986'. [ 530.901130][T18620] wg2 speed is unknown, defaulting to 1000 [ 531.226070][T18447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.475787][ T53] Bluetooth: hci5: command tx timeout [ 531.568359][T18447] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.619177][T13437] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.619333][T13437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.700203][T13436] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.700325][T13436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.488754][T18674] syzkaller1: entered promiscuous mode [ 532.488778][T18674] syzkaller1: entered allmulticast mode [ 532.534698][T18676] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3000'. [ 532.708685][T18683] netlink: 'syz.1.3002': attribute type 1 has an invalid length. [ 532.712012][T18683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3002'. [ 532.744881][T18683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3002'. [ 532.889181][T18683] veth0_virt_wifi (unregistering): left allmulticast mode [ 532.889292][T18683] bridge0: port 2(veth0_virt_wifi) entered disabled state [ 533.554663][ T53] Bluetooth: hci5: command tx timeout [ 533.595683][T18447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.695793][T18447] veth0_vlan: entered promiscuous mode [ 533.711670][T18447] veth1_vlan: entered promiscuous mode [ 533.952401][T18447] veth0_macvtap: entered promiscuous mode [ 533.970151][T18447] veth1_macvtap: entered promiscuous mode [ 534.041371][T18447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.079121][T18447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.134858][ T8243] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.136139][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.136225][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.136260][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.217472][T18717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3012'. [ 534.592719][T18730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3014'. [ 534.592744][T18730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3014'. [ 534.592770][T18730] netlink: 'syz.2.3014': attribute type 14 has an invalid length. [ 534.592783][T18730] netlink: 'syz.2.3014': attribute type 13 has an invalid length. [ 534.692821][T18725] syzkaller0: entered promiscuous mode [ 534.692861][T18725] syzkaller0: entered allmulticast mode [ 535.089342][T18742] netlink: 'syz.2.3015': attribute type 11 has an invalid length. [ 535.172634][T18746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3015'. [ 535.203460][T18749] netlink: 'syz.2.3015': attribute type 11 has an invalid length. [ 539.073517][ T8238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.073535][ T8238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.331876][T13437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.331901][T13437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.000703][T18799] netlink: 'syz.0.3028': attribute type 1 has an invalid length. [ 540.015785][T18799] __nla_validate_parse: 5 callbacks suppressed [ 540.015811][T18799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3028'. [ 540.032970][T18803] ip_tables: iptables: counters copy to user failed while replacing table [ 540.585936][ T4933] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 540.605487][ T4933] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 540.612952][ T4933] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 540.638547][ T4933] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 540.643819][ T4933] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 541.503269][ T8243] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.503311][ T8243] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.723923][T18848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3035'. [ 541.880802][ T8243] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.880842][ T8243] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.070914][T18813] wg2 speed is unknown, defaulting to 1000 [ 542.191230][ T8243] bond0: (slave netdevsim1): Releasing backup interface [ 542.208394][ T8243] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.208438][ T8243] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.316557][T18868] tun0: tun_chr_ioctl cmd 1074025677 [ 542.316673][T18868] tun0: linktype set to 0 [ 542.390463][T18869] netlink: 'syz.0.3039': attribute type 4 has an invalid length. [ 542.449289][ T8243] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.449328][ T8243] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.535528][T18875] sctp: [Deprecated]: syz.2.3043 (pid 18875) Use of int in maxseg socket option. [ 542.535528][T18875] Use struct sctp_assoc_value instead [ 542.538238][T18875] netlink: 'syz.2.3043': attribute type 39 has an invalid length. [ 542.587692][T18877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3042'. [ 542.655401][T18880] xt_hashlimit: size too large, truncated to 1048576 [ 542.721759][T18884] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3043'. [ 542.755235][ T53] Bluetooth: hci4: command tx timeout [ 542.940405][T18878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3042'. [ 543.138173][T13435] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 543.701763][ T8243] pim6reg: left allmulticast mode [ 543.718150][ T8243] pimreg: left allmulticast mode [ 544.229134][ T8243] bond6 (unregistering): (slave gretap1): Releasing active interface [ 544.308112][ T8243] batman_adv: batadv0: Interface deactivated: macvlan2 [ 544.308227][ T8243] batman_adv: batadv0: Interface deactivated: macvlan3 [ 544.313352][ T8243] batman_adv: batadv0: Removing interface: macvlan2 [ 544.338480][ T8243] batman_adv: batadv0: Removing interface: macvlan3 [ 544.411394][ T8243] bond2 (unregistering): (slave bridge1): Releasing active interface [ 544.427643][ T8243] bond5 (unregistering): (slave bridge2): Releasing backup interface [ 544.499194][ T8243] bond0 (unregistering): Released all slaves [ 544.503914][ T8243] bond1 (unregistering): Released all slaves [ 544.534061][ T8243] bond2 (unregistering): Released all slaves [ 544.549608][ T8243] bond3 (unregistering): Released all slaves [ 544.565700][ T8243] bond4 (unregistering): Released all slaves [ 544.583982][ T8243] bond5 (unregistering): Released all slaves [ 544.602635][ T8243] bond6 (unregistering): Released all slaves [ 544.625969][ T8243] bond7 (unregistering): Released all slaves [ 544.635517][ T8243] bond8 (unregistering): Released all slaves [ 544.650917][ T8243] bond9 (unregistering): Released all slaves [ 544.668695][ T8243] bond10 (unregistering): Released all slaves [ 544.728402][ T8224] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 544.731138][ T8224] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 20001 - 0 [ 544.731197][ T8224] netdevsim netdevsim4 eth5: set [1, 0] type 2 family 0 port 20001 - 0 [ 544.836588][ T53] Bluetooth: hci4: command tx timeout [ 544.836775][T18813] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.836972][T18813] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.837137][T18813] bridge_slave_0: entered allmulticast mode [ 544.839487][T18813] bridge_slave_0: entered promiscuous mode [ 544.858576][T18813] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.858692][T18813] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.858862][T18813] bridge_slave_1: entered allmulticast mode [ 544.879136][T18813] bridge_slave_1: entered promiscuous mode [ 545.069380][T18915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3048'. [ 545.161457][T18813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.211853][ T8243] ovs-dp0: left promiscuous mode [ 545.347785][T18813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.347953][ T8243] : left promiscuous mode [ 545.486644][T18813] team0: Port device team_slave_0 added [ 545.490514][T18813] team0: Port device team_slave_1 added [ 545.529698][ T8243] : left promiscuous mode [ 545.609666][T18813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.609687][T18813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.609712][T18813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.612032][T18813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.612047][T18813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.612074][T18813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.712182][T18929] xt_MASQUERADE: bad MAP_IPS. [ 545.781198][ T8243] tipc: Disabling bearer [ 545.808938][ T8243] tipc: Disabling bearer [ 545.812813][ T8243] tipc: Left network mode [ 545.996429][T18813] hsr_slave_0: entered promiscuous mode [ 545.997789][T18813] hsr_slave_1: entered promiscuous mode [ 545.998791][T18813] debugfs: 'hsr0' already exists in 'hsr' [ 545.998813][T18813] Cannot create hsr debugfs directory [ 546.030376][ T8243] IPVS: stopping master sync thread 7289 ... [ 546.392399][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880532ebc00: rx timeout, send abort [ 546.393744][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880532ebc00: 0x10100: (3) A timeout occurred and this is the connection abort to close the session. [ 546.915034][ T53] Bluetooth: hci4: command tx timeout [ 547.165676][ T4933] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 547.183957][ T4933] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 547.213571][ T4933] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 547.231188][ T4933] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 547.232246][ T4933] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 547.531425][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 547.538546][T18975] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3059'. [ 547.778803][T18981] bond1 (unregistering): Released all slaves [ 547.995908][T18813] netdevsim netdevsim4 eth5 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 548.592016][T19017] ip_tables: iptables: counters copy to user failed while replacing table [ 548.711463][T18813] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 548.937083][T18813] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 548.994697][ T53] Bluetooth: hci4: command tx timeout [ 549.307017][T18813] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 549.316360][ T53] Bluetooth: hci2: command tx timeout [ 549.498203][T18967] wg2 speed is unknown, defaulting to 1000 [ 550.080785][T19055] ip_vti0: left promiscuous mode [ 550.407481][ T6943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.407514][ T6943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.633820][ T8243] hsr_slave_0: left promiscuous mode [ 550.635552][ T8243] batman_adv: batadv0: Removing interface: virt_wifi0 [ 550.816447][ T8243] veth1_vlan: left promiscuous mode [ 550.816644][ T8243] veth0_vlan: left promiscuous mode [ 550.889454][T19087] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 550.889475][T19087] IPv6: NLM_F_CREATE should be set when creating new route [ 550.889524][T19087] IPv6: NLM_F_CREATE should be set when creating new route [ 551.379151][T19089] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3078'. [ 551.394623][ T53] Bluetooth: hci2: command tx timeout [ 551.913747][T19104] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3080'. [ 552.317665][T19116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3083'. [ 552.473365][T18813] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 552.485099][T19121] netlink: 'syz.2.3082': attribute type 1 has an invalid length. [ 552.485143][T19121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 552.493510][T19113] netlink: 'syz.2.3082': attribute type 1 has an invalid length. [ 552.493553][T19113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 552.510798][T18813] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 552.518751][T18813] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 552.645694][T18813] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 552.696436][T18813] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 552.722311][T18813] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 552.728261][T18813] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 552.789067][T18813] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 552.888067][T19135] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3085'. [ 552.963936][ T8243] IPVS: stop unused estimator thread 0... [ 553.282576][T19150] netlink: 'syz.0.3087': attribute type 10 has an invalid length. [ 553.329243][T19150] team0 (unregistering): Port device team_slave_0 removed [ 553.362417][T19150] team0 (unregistering): Port device team_slave_1 removed [ 553.404079][T19155] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3089'. [ 553.474764][ T53] Bluetooth: hci2: command tx timeout [ 553.854542][T18967] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.854731][T18967] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.854905][T18967] bridge_slave_0: entered allmulticast mode [ 553.857742][T18967] bridge_slave_0: entered promiscuous mode [ 553.899622][T18967] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.899749][T18967] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.899903][T18967] bridge_slave_1: entered allmulticast mode [ 553.902159][T18967] bridge_slave_1: entered promiscuous mode [ 554.116121][T19175] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 554.189383][T18967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.235882][T18967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.239761][T19177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3090'. [ 554.323401][T19182] netlink: 'syz.2.3090': attribute type 30 has an invalid length. [ 554.323433][T19182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3090'. [ 554.403963][T18967] team0: Port device team_slave_0 added [ 554.418709][T18967] team0: Port device team_slave_1 added [ 554.558604][T19187] bridge_slave_1: Caught tx_queue_len zero misconfig [ 554.578528][T18967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.578550][T18967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.578578][T18967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.590165][T19187] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3093'. [ 554.622897][T18967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.622925][T18967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.622949][T18967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.777384][T18813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.801846][T18967] hsr_slave_0: entered promiscuous mode [ 554.811811][T18967] hsr_slave_1: entered promiscuous mode [ 554.818849][T18967] debugfs: 'hsr0' already exists in 'hsr' [ 554.818875][T18967] Cannot create hsr debugfs directory [ 555.084743][T19205] macvtap1: entered promiscuous mode [ 555.084769][T19205] bridge0: entered promiscuous mode [ 555.113121][T19209] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3097'. [ 555.303326][T18813] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.393216][T19209] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3097'. [ 555.554402][ T53] Bluetooth: hci2: command tx timeout [ 555.600546][ T8238] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.600673][ T8238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.651753][ T8224] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.651874][ T8224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.089449][T18967] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 556.117418][T18967] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 556.121800][T18967] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 556.185318][T18967] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 556.189495][T18967] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 556.202280][T18967] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 556.211587][T18967] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 556.258584][T18967] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 556.308638][T19235] netlink: Invalid conntrack helper [ 556.308673][T19235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.469631][T19251] __nla_validate_parse: 3 callbacks suppressed [ 556.469655][T19251] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3102'. [ 556.752204][T18967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.829387][T18967] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.868321][ T6943] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.868573][ T6943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.899745][ T6943] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.899809][ T6943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.269614][T18813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.487059][T19281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3106'. [ 557.487099][T19281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3106'. [ 558.413989][T18813] veth0_vlan: entered promiscuous mode [ 558.474894][T18813] veth1_vlan: entered promiscuous mode [ 558.483186][T19284] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3109'. [ 558.729202][T18813] veth0_macvtap: entered promiscuous mode [ 558.752046][T18813] veth1_macvtap: entered promiscuous mode [ 558.802655][T18967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.897176][T18813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.986894][T18813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.068165][T19313] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3111'. [ 559.096673][ T6943] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.117647][ T8238] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.117697][ T8238] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.117727][ T8238] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.241477][T19311] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3111'. [ 559.244085][T19311] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3111'. [ 559.575718][ T8238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.575742][ T8238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.660718][T19329] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3113'. [ 559.753023][T19341] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3114'. [ 559.793333][ T8241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.793375][ T8241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.801845][T19346] netlink: 5376 bytes leftover after parsing attributes in process `syz.1.3116'. [ 559.801869][T19346] openvswitch: netlink: Flow key attr not present in new flow. [ 560.227091][T18967] veth0_vlan: entered promiscuous mode [ 560.251062][T18967] veth1_vlan: entered promiscuous mode [ 560.380446][T18967] veth0_macvtap: entered promiscuous mode [ 560.399641][T18967] veth1_macvtap: entered promiscuous mode [ 560.458247][T18967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.487659][T18967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.628653][ T8238] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.628698][ T8238] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.628730][ T8238] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.638545][T13436] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.947246][ T8224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.947273][ T8224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.101482][ T8241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.101508][ T8241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.266093][ T4933] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 562.293326][ T4933] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 562.325045][ T4933] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 562.331494][ T4933] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 562.332220][ T4933] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 563.291114][T19445] siw: device registration error -23 [ 563.389409][T19440] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 563.391875][T19440] batman_adv: batadv0: Adding interface: gretap2 [ 563.391894][T19440] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.391924][T19440] batman_adv: batadv0: Interface activated: gretap2 [ 563.699991][T19462] __nla_validate_parse: 3 callbacks suppressed [ 563.700019][T19462] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3141'. [ 563.807120][T19401] wg2 speed is unknown, defaulting to 1000 [ 564.003438][T19467] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3142'. [ 564.169589][T19481] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3146'. [ 564.193179][T19481] gretap0: entered promiscuous mode [ 564.220272][T19476] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3146'. [ 564.220384][T19476] 0{X: renamed from gretap0 [ 564.238114][T19479] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3146'. [ 564.265658][T19476] 0{X: left promiscuous mode [ 564.265682][T19476] 0{X: entered allmulticast mode [ 564.270008][T19476] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 564.318601][T19479] 1{X: renamed from 30{X (while UP) [ 564.335076][T19479] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 564.435326][ T4933] Bluetooth: hci6: command tx timeout [ 564.872444][T19507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.944017][T19401] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.969459][T19401] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.969704][T19401] bridge_slave_0: entered allmulticast mode [ 564.978883][T19401] bridge_slave_0: entered promiscuous mode [ 564.999779][T19401] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.000149][T19401] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.000424][T19401] bridge_slave_1: entered allmulticast mode [ 565.005516][T19401] bridge_slave_1: entered promiscuous mode [ 565.197147][T19401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.219832][T19401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.310806][T19401] team0: Port device team_slave_0 added [ 565.327157][T19401] team0: Port device team_slave_1 added [ 565.408002][T19401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.408022][T19401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.408046][T19401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.410560][T19401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.410578][T19401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.410604][T19401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.496976][T19401] hsr_slave_0: entered promiscuous mode [ 565.499215][T19401] hsr_slave_1: entered promiscuous mode [ 565.501669][T19401] debugfs: 'hsr0' already exists in 'hsr' [ 565.501697][T19401] Cannot create hsr debugfs directory [ 565.860867][T19401] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.910277][T19531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3158'. [ 565.931107][T19531] netlink: 'syz.0.3158': attribute type 1 has an invalid length. [ 565.931133][T19531] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3158'. [ 566.018804][T19534] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3159'. [ 566.018834][T19534] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3159'. [ 566.123139][T19401] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.203950][T19536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3160'. [ 566.246945][T19538] openvswitch: netlink: Geneve opt len 66 is not a multiple of 4. [ 566.333172][T19536] netlink: 'syz.4.3160': attribute type 23 has an invalid length. [ 566.333201][T19536] netlink: 'syz.4.3160': attribute type 11 has an invalid length. [ 566.524742][ T4933] Bluetooth: hci6: command tx timeout [ 566.537441][T19401] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.712440][T19401] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.367012][T13439] tipc: Subscription rejected, illegal request [ 567.917821][T19605] wg2 speed is unknown, defaulting to 1000 [ 568.420521][T19623] sch_fq: defrate 8 ignored. [ 568.604265][ T4933] Bluetooth: hci6: command tx timeout [ 569.760203][T19552] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 569.785328][T19401] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 569.820649][T19401] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 569.824072][T19401] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 569.892424][T19401] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 569.909437][T19401] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 569.961895][T19401] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 569.962867][T19401] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 569.998568][T19401] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 570.143081][T19401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.217572][T19401] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.250868][T13439] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.251001][T13439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.291471][ T6934] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.291583][ T6934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.674622][ T53] Bluetooth: hci6: command tx timeout [ 570.991993][T19665] __nla_validate_parse: 3 callbacks suppressed [ 570.992018][T19665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3187'. [ 571.112501][T19675] netlink: 'syz.5.3188': attribute type 2 has an invalid length. [ 571.112729][T19675] netlink: 'syz.5.3188': attribute type 2 has an invalid length. [ 571.136261][T19675] netlink: 'syz.5.3188': attribute type 2 has an invalid length. [ 571.136530][T19675] netlink: 'syz.5.3188': attribute type 2 has an invalid length. [ 571.136734][T19675] netlink: 'syz.5.3188': attribute type 2 has an invalid length. [ 571.136944][T19675] netlink: 'syz.5.3188': attribute type 2 has an invalid length. [ 571.137518][T19675] netlink: 'syz.5.3188': attribute type 2 has an invalid length. [ 571.137710][T19675] netlink: 'syz.5.3188': attribute type 2 has an invalid length. [ 571.165078][T19675] netlink: 'syz.5.3188': attribute type 2 has an invalid length. [ 571.165278][T19675] netlink: 'syz.5.3188': attribute type 2 has an invalid length. [ 571.666632][T19686] bond21: (slave bridge4): Enslaving as a backup interface with an up link [ 571.707524][T19681] bond21: (slave bridge5): Enslaving as a backup interface with a down link [ 571.766151][T19681] bond21: (slave bridge6): Enslaving as a backup interface with a down link [ 571.788661][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880329d3400: rx timeout, send abort [ 571.788962][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880329d3400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 571.947709][T19694] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3193'. [ 571.947739][T19694] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3193'. [ 572.286278][T19714] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not  [ 572.577140][T19401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.921032][T19401] veth0_vlan: entered promiscuous mode [ 573.058692][T19401] veth1_vlan: entered promiscuous mode [ 573.243159][T19401] veth0_macvtap: entered promiscuous mode [ 573.275730][T19401] veth1_macvtap: entered promiscuous mode [ 573.277471][T19752] block nbd5: Unsupported socket: should be TCP or UNIX. [ 573.417929][T19401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.428143][T19751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3201'. [ 573.902891][T19401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.903071][T19755] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3200'. [ 573.990603][T19775] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3203'. [ 574.005997][ T8238] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.008737][ T8224] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.050781][ T8224] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.066106][ T6934] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.497586][T19784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3207'. [ 574.561569][T19784] macsec0: entered promiscuous mode [ 574.561837][T19784] macsec0: entered allmulticast mode [ 574.561854][T19784] gretap0: entered allmulticast mode [ 574.562918][T19787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3205'. [ 574.585237][T19786] netlink: 284 bytes leftover after parsing attributes in process `syz.0.3205'. [ 574.623612][T19784] gretap0: left allmulticast mode [ 574.699196][T19791] batadv_slave_1: entered promiscuous mode [ 574.699543][ T6934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.699562][ T6934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.791086][T19789] batadv_slave_1: left promiscuous mode [ 574.902863][ T8238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.902888][ T8238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.047585][T19803] PKCS7: Unknown OID: [4] (bad) [ 575.047620][T19803] PKCS7: Only support pkcs7_signedData type [ 575.334102][T19803] wg2 speed is unknown, defaulting to 1000 [ 575.361619][T19814] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 576.727881][ T4933] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 576.731785][ T4933] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 576.733911][ T4933] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 576.770988][ T4933] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 576.775704][ T4933] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 576.980781][ T5614] bond17: (slave syz_tun): Removing an active aggregator [ 576.981294][ T5614] bond17: (slave syz_tun): Releasing backup interface [ 577.027288][ T9348] infiniband s`z1: ib_query_port failed (-19) [ 577.030977][ T8238] smbdirect: ib_dev[s`z1] removed [ 577.280508][T19839] wg2 speed is unknown, defaulting to 1000 [ 577.558753][T19839] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.558940][T19839] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.559254][T19839] bridge_slave_0: entered allmulticast mode [ 577.560855][T19839] bridge_slave_0: entered promiscuous mode [ 577.565365][T19839] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.565484][T19839] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.565651][T19839] bridge_slave_1: entered allmulticast mode [ 577.568233][T19839] bridge_slave_1: entered promiscuous mode [ 577.626875][T19839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.629436][T19839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.669585][T19839] team0: Port device team_slave_0 added [ 577.671657][T19839] team0: Port device team_slave_1 added [ 577.698172][T19839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.698203][T19839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.698227][T19839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.699892][T19839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.699911][T19839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.699936][T19839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.815309][T19839] hsr_slave_0: entered promiscuous mode [ 577.816543][T19839] hsr_slave_1: entered promiscuous mode [ 577.817338][T19839] debugfs: 'hsr0' already exists in 'hsr' [ 577.817357][T19839] Cannot create hsr debugfs directory [ 577.999285][T19839] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.999314][T19839] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.999330][T19839] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 577.999347][T19839] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 58865 - 0 [ 578.096029][T19839] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.096057][T19839] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.096073][T19839] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 578.096088][T19839] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 58865 - 0 [ 578.186211][T19839] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.186239][T19839] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.186254][T19839] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 578.186269][T19839] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 58865 - 0 [ 578.271457][T19839] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.271484][T19839] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.271499][T19839] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 578.271514][T19839] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 58865 - 0 [ 578.444855][T19839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 578.447843][T19839] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 578.449012][T19839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 578.451573][T19839] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 578.452437][T19839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 578.484002][T19839] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 578.503491][T19839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 578.517850][T19839] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 578.616166][T19839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.647720][T19839] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.652868][ T6943] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.653041][ T6943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.677131][ T8224] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.677251][ T8224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.844903][ T4933] Bluetooth: hci3: command tx timeout [ 579.202465][T19839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.251582][T19839] veth0_vlan: entered promiscuous mode [ 579.259575][T19839] veth1_vlan: entered promiscuous mode [ 579.293905][T19839] veth0_macvtap: entered promiscuous mode [ 579.301017][T19839] veth1_macvtap: entered promiscuous mode [ 579.326648][T19839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 579.335652][T19839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.395965][ T8242] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.397249][ T8242] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.397294][ T8242] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.404867][ T8224] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.492914][ T8224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.492939][ T8224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.541700][ T8238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.541724][ T8238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.914965][ T4933] Bluetooth: hci3: command tx timeout [ 582.994924][ T4933] Bluetooth: hci3: command tx timeout [ 585.074954][ T4933] Bluetooth: hci3: command tx timeout [ 585.234703][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 648.754567][ T4933] Bluetooth: hci5: command 0x0406 tx timeout [ 661.638702][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 0 < 9 [ 661.641259][T19892] xt_hashlimit: size too large, truncated to 1048576 [ 661.668035][T19893] openvswitch: netlink: IP tunnel dst address not specified [ 661.706706][T19894] tipc: Started in network mode [ 661.706732][T19894] tipc: Node identity 5, cluster identity 4711 [ 661.706745][T19894] tipc: Node number set to 5 [ 661.708058][T19894] tipc: Enabled bearer , priority 0 [ 661.758251][T19895] Bluetooth: MGMT ver 1.23 [ 662.154811][T19906] syzkaller0: entered promiscuous mode [ 662.154838][T19906] syzkaller0: entered allmulticast mode [ 662.188433][T19906] tipc: Started in network mode [ 662.188467][T19906] tipc: Node identity 6a6cbc7b9656, cluster identity 4711 [ 662.188795][T19906] tipc: Enabled bearer , priority 0 [ 662.221554][T19905] tipc: Resetting bearer [ 662.259112][T19905] tipc: Disabling bearer [ 662.480547][T19919] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3231'. [ 662.499589][T19924] ipvlan0: entered allmulticast mode [ 662.499614][T19924] veth0_vlan: entered allmulticast mode [ 662.597735][T19928] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3234'. [ 662.661288][T19936] validate_nla: 19 callbacks suppressed [ 662.661315][T19936] netlink: 'syz.1.3237': attribute type 1 has an invalid length. [ 663.677205][T19972] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3243'. [ 663.761044][T19979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3243'. [ 663.852147][T19972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3243'. [ 664.114670][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 664.250095][T19999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3248'. [ 664.322976][T20003] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3249'. [ 664.323005][T20003] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3249'. [ 664.348780][T19991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3248'. [ 664.391418][T19991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3248'. [ 664.649548][T20014] netlink: 'syz.1.3252': attribute type 10 has an invalid length. [ 664.709574][T20014] team0: Port device veth0 added [ 665.028134][T20020] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 665.098017][T20020] bond1 (unregistering): Released all slaves [ 665.201261][T20039] tipc: Started in network mode [ 665.201295][T20039] tipc: Node identity ac14140f, cluster identity 4711 [ 665.201581][T20039] tipc: New replicast peer: 255.255.255.255 [ 665.202406][T20039] tipc: Enabled bearer , priority 5 [ 665.383225][ T30] audit: type=1804 audit(1790942539.373:18): pid=20044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3259" name="/newroot/57/cgroup.controllers" dev="tmpfs" ino=313 res=1 errno=0 [ 665.383466][ T30] audit: type=1800 audit(1790942539.373:19): pid=20044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3259" name="cgroup.controllers" dev="tmpfs" ino=313 res=0 errno=0 [ 665.681798][T20058] sctp: [Deprecated]: syz.0.3261 (pid 20058) Use of struct sctp_assoc_value in delayed_ack socket option. [ 665.681798][T20058] Use struct sctp_sack_info instead [ 665.683180][T20059] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 665.722990][T20057] sctp: [Deprecated]: syz.0.3261 (pid 20057) Use of struct sctp_assoc_value in delayed_ack socket option. [ 665.722990][T20057] Use struct sctp_sack_info instead [ 666.227852][T20076] netlink: 'syz.5.3266': attribute type 30 has an invalid length. [ 666.228412][T20078] netlink: 'syz.5.3266': attribute type 30 has an invalid length. [ 666.258028][T20076] vxlan0: entered promiscuous mode [ 666.258054][T20076] vxlan0: entered allmulticast mode [ 666.291006][T20078] vxlan1: entered promiscuous mode [ 666.291110][T20078] vxlan1: entered allmulticast mode [ 666.296192][ T6943] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 666.296241][ T6943] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 666.296272][ T6943] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 666.296302][ T6943] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 666.314716][ T9367] tipc: Node number set to 2886997007 [ 666.683736][T20093] netlink: 'syz.5.3270': attribute type 1 has an invalid length. [ 667.025996][T20112] openvswitch: netlink: Duplicate or invalid key (type 0). [ 667.252566][T20123] tipc: Invalid UDP bearer configuration [ 667.252621][T20123] tipc: Enabling of bearer rejected, failed to enable media [ 668.077100][ T8242] IPVS: starting estimator thread 0... [ 668.078104][T20160] __nla_validate_parse: 11 callbacks suppressed [ 668.078116][T20160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3283'. [ 668.078250][T20158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3283'. [ 668.174565][T20161] IPVS: using max 49 ests per chain, 117600 per kthread [ 670.200173][T20134] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 670.211085][T20121] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 670.498458][T20171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3288'. [ 670.638146][T20181] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3287'. [ 671.357217][T20206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3291'. [ 671.551942][T20219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3291'. [ 671.598972][T20224] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 671.807934][T20230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3295'. [ 672.208176][T20247] netlink: 'syz.1.3297': attribute type 2 has an invalid length. [ 672.260724][T20247] : entered promiscuous mode [ 672.682814][ T8243] tipc: Subscription rejected, illegal request [ 673.030602][T20298] hsr0: entered promiscuous mode [ 673.040213][T20298] hsr_slave_0: left promiscuous mode [ 673.043186][T20298] hsr_slave_1: left promiscuous mode [ 673.078556][T20298] hsr0 (unregistering): left promiscuous mode [ 673.370938][T20316] sit0: entered promiscuous mode [ 673.381105][T20316] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3312'. [ 673.464532][T20322] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3315'. [ 673.464800][T20322] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3315'. [ 673.465018][T20322] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3315'. [ 673.465227][T20322] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3315'. [ 673.465434][T20322] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3315'. [ 673.465650][T20322] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3315'. [ 673.467214][T20322] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3315'. [ 673.467473][T20322] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3315'. [ 673.467682][T20322] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3315'. [ 674.301935][T20354] syzkaller0: entered promiscuous mode [ 674.301977][T20354] syzkaller0: entered allmulticast mode [ 674.556990][T20372] ip_tables: iptables: counters copy to user failed while replacing table [ 677.510198][T20482] batman_adv: batadv0: Adding interface: macvlan2 [ 677.510220][T20482] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.510253][T20482] batman_adv: batadv0: Interface activated: macvlan2 [ 677.935058][T18138] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 677.994590][T20505] syzkaller0: entered promiscuous mode [ 677.994618][T20505] syzkaller0: entered allmulticast mode [ 678.421359][T20522] sctp: [Deprecated]: syz.1.3363 (pid 20522) Use of struct sctp_assoc_value in delayed_ack socket option. [ 678.421359][T20522] Use struct sctp_sack_info instead [ 678.449874][T20522] __nla_validate_parse: 43 callbacks suppressed [ 678.449900][T20522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3363'. [ 678.754818][T18138] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 678.756039][ T6943] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 679.027510][T20539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 679.123185][T20546] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3368'. [ 679.123889][T20546] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3368'. [ 679.186537][T20548] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3369'. [ 679.269279][T20551] tipc: Resetting bearer [ 679.302866][T20551] tipc: Disabling bearer [ 679.493108][T20562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3373'. [ 679.797302][ T8243] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 679.797561][ T8243] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 679.927928][T20583] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3376'. [ 680.021615][T20570] tipc: Enabling of bearer rejected, failed to enable media [ 680.037848][T20577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.401481][T20599] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3381'. [ 680.428143][T20599] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3381'. [ 680.460574][T20602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3383'. [ 680.472766][T20598] bond1: option miimon: invalid value (18446744073357230079) [ 680.472800][T20598] bond1: option miimon: allowed values 0 - 2147483647 [ 680.491277][T20598] bond1 (unregistering): Released all slaves [ 680.518024][T20604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3383'. [ 680.612870][ T9367] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 680.856139][T20617] can: request_module (can-proto-5) failed. [ 681.378471][T20650] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:0 [ 681.436960][T20652] syzkaller1: entered allmulticast mode [ 681.500607][T20654] nbd: illegal input index 65508 [ 681.644964][T20658] xt_CT: No such helper "snmp" [ 681.844515][T20669] netlink: 'syz.0.3403': attribute type 1 has an invalid length. [ 681.957044][T20669] 8021q: adding VLAN 0 to HW filter on device bond1 [ 682.027663][T20672] bond1: (slave veth3): Enslaving as an active interface with a down link [ 682.075100][T20669] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 682.075442][T20669] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 682.169558][T20676] netlink: 'syz.1.3405': attribute type 8 has an invalid length. [ 682.224987][T20678] macsec1: entered promiscuous mode [ 682.471827][T20683] syzkaller0: entered promiscuous mode [ 682.471853][T20683] syzkaller0: entered allmulticast mode [ 682.903247][T20702] IPv6: NLM_F_CREATE should be specified when creating new route [ 683.229144][T20717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.590143][T20733] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.634389][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 683.785094][T20740] __nla_validate_parse: 7 callbacks suppressed [ 683.785118][T20740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3422'. [ 683.956575][T20747] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3422'. [ 684.168791][T20753] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3427'. [ 684.173284][T20753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3427'. [ 684.262287][T20753] bond0: (slave bond_slave_0): Releasing backup interface [ 684.604515][T15219] Bluetooth: hci2: command 0x0406 tx timeout [ 684.605369][T15219] Bluetooth: hci6: command 0x0406 tx timeout [ 684.606174][T20764] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3430'. [ 684.781730][T20768] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3431'. [ 684.781763][T20768] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3431'. [ 684.781779][T20768] netlink: 'syz.0.3431': attribute type 5 has an invalid length. [ 684.781793][T20768] netlink: 'syz.0.3431': attribute type 6 has an invalid length. [ 684.781807][T20768] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3431'. [ 684.876141][T20772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3432'. [ 684.889802][T20772] ip_tables: iptables: counters copy to user failed while replacing table [ 684.905299][T18813] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 684.905338][T18813] CPU: 0 UID: 0 PID: 18813 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 684.905360][T18813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 684.905373][T18813] Call Trace: [ 684.905382][T18813] [ 684.905391][T18813] dump_stack_lvl+0xe8/0x150 [ 684.905430][T18813] dump_header+0xd3/0x4b0 [ 684.905497][T18813] oom_kill_process+0x3ab/0x9e0 [ 684.905530][T18813] out_of_memory+0x1064/0x1480 [ 684.905551][T18813] ? try_charge_memcg+0xc32/0x15e0 [ 684.905594][T18813] ? __pfx_out_of_memory+0x10/0x10 [ 684.905615][T18813] ? do_raw_spin_unlock+0xf5/0x200 [ 684.905656][T18813] try_charge_memcg+0xcdf/0x15e0 [ 684.905701][T18813] ? __pfx_try_charge_memcg+0x10/0x10 [ 684.905756][T18813] ? charge_memcg+0x47/0x310 [ 684.905784][T18813] charge_memcg+0x1dd/0x310 [ 684.905808][T18813] ? mem_cgroup_swapin_charge_folio+0x2b/0x390 [ 684.905832][T18813] mem_cgroup_swapin_charge_folio+0x25a/0x390 [ 684.905861][T18813] swap_cache_alloc_folio+0x4de/0x990 [ 684.905918][T18813] swap_cache_read_folio+0x44/0x120 [ 684.905951][T18813] swap_cluster_readahead+0x392/0x630 [ 684.905989][T18813] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 684.906047][T18813] swapin_readahead+0x1a3/0xc50 [ 684.906091][T18813] ? __pfx_swapin_readahead+0x10/0x10 [ 684.906127][T18813] ? swap_table_get+0x1e/0x260 [ 684.906154][T18813] ? swap_table_get+0x1e/0x260 [ 684.906177][T18813] ? swap_table_get+0x1e/0x260 [ 684.906212][T18813] ? swap_table_get+0x216/0x260 [ 684.906242][T18813] ? swap_cache_get_folio+0x2e7/0x2f0 [ 684.906277][T18813] do_swap_page+0x3fb/0x4c10 [ 684.906333][T18813] ? __lock_acquire+0x747/0x2de0 [ 684.906353][T18813] ? do_swap_page+0x126/0x4c10 [ 684.906379][T18813] ? __pfx_do_swap_page+0x10/0x10 [ 684.906403][T18813] ? __pte_offset_map+0x1ae/0x240 [ 684.906434][T18813] ? pte_offset_map_rw_nolock+0xea/0x160 [ 684.906465][T18813] handle_mm_fault+0x1398/0x3750 [ 684.906505][T18813] ? handle_mm_fault+0xf1/0x3750 [ 684.906545][T18813] ? __pfx_handle_mm_fault+0x10/0x10 [ 684.906568][T18813] ? lock_vma_under_rcu+0x45a/0x500 [ 684.906630][T18813] do_user_addr_fault+0xa4f/0x1340 [ 684.906742][T18813] ? trace_page_fault_user+0x84/0x1e0 [ 684.906798][T18813] exc_page_fault+0x6a/0xc0 [ 684.906833][T18813] asm_exc_page_fault+0x26/0x30 [ 684.906853][T18813] RIP: 0033:0x7fb7a095e98e [ 684.906874][T18813] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 684.906888][T18813] RSP: 002b:00007ffcb6ce43d8 EFLAGS: 00010246 [ 684.906908][T18813] RAX: 0000000000000000 RBX: 000055555a499500 RCX: 00007fb7a095e98e [ 684.906922][T18813] RDX: 00007ffcb6ce4430 RSI: 0000000000000000 RDI: 0000000000000000 [ 684.906935][T18813] RBP: 00007ffcb6ce449c R08: 0000000000000000 R09: 0000000000000000 [ 684.906947][T18813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 684.906959][T18813] R13: 00000000000927c0 R14: 00000000000a6f29 R15: 00007ffcb6ce44f0 [ 684.906996][T18813] [ 684.928915][T18813] memory: usage 307200kB, limit 307200kB, failcnt 949 [ 684.928936][T18813] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 684.928948][T18813] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 684.928959][T18813] Memory cgroup stats for /syz4: [ 684.929183][T18813] cache 0 [ 684.929192][T18813] rss 0 [ 684.929199][T18813] rss_huge 0 [ 684.929206][T18813] shmem 0 [ 684.929212][T18813] mapped_file 0 [ 684.929218][T18813] dirty 0 [ 684.929224][T18813] writeback 0 [ 684.929231][T18813] workingset_refault_anon 21 [ 684.929238][T18813] workingset_refault_file 197 [ 684.929245][T18813] swap 184320 [ 684.929251][T18813] swapcached 294912 [ 684.929257][T18813] pgpgin 97579 [ 684.929263][T18813] pgpgout 97573 [ 684.929270][T18813] pgfault 163775 [ 684.929276][T18813] pgmajfault 15 [ 684.929283][T18813] inactive_anon 4096 [ 684.929289][T18813] active_anon 20480 [ 684.929296][T18813] inactive_file 0 [ 684.929302][T18813] active_file 0 [ 684.929308][T18813] unevictable 0 [ 684.929315][T18813] hierarchical_memory_limit 314572800 [ 684.929322][T18813] hierarchical_memsw_limit 9223372036854771712 [ 684.929329][T18813] total_cache 0 [ 684.929336][T18813] total_rss 0 [ 684.929342][T18813] total_rss_huge 0 [ 684.929348][T18813] total_shmem 0 [ 684.929355][T18813] total_mapped_file 0 [ 684.929362][T18813] total_dirty 0 [ 684.929368][T18813] total_writeback 0 [ 684.929375][T18813] total_workingset_refault_anon 21 [ 684.929382][T18813] total_workingset_refault_file 197 [ 684.929389][T18813] total_swap 184320 [ 684.929395][T18813] total_swapcached 294912 [ 684.929402][T18813] total_pgpgin 97579 [ 684.929408][T18813] total_pgpgout 97573 [ 684.929415][T18813] total_pgfault 163775 [ 684.929422][T18813] total_pgmajfault 15 [ 684.929429][T18813] total_inactive_anon 4096 [ 684.929436][T18813] total_active_anon 20480 [ 684.929443][T18813] total_inactive_file 0 [ 684.929450][T18813] total_active_file 0 [ 684.929456][T18813] total_unevictable 0 [ 684.929463][T18813] anon_cost 0 [ 684.929469][T18813] file_cost 0 [ 684.929476][T18813] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3416,pid=20712,uid=0 [ 684.932679][T18813] Memory cgroup out of memory: Killed process 20712 (syz.4.3416) total-vm:230336kB, anon-rss:1248kB, file-rss:21788kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 685.267569][T20773] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 685.971186][T20792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3440'. [ 689.331532][T20796] netlink: 'syz.0.3441': attribute type 49 has an invalid length. [ 689.446893][T20797] netlink: 4704 bytes leftover after parsing attributes in process `syz.5.3443'. [ 689.446925][T20797] netlink: 'syz.5.3443': attribute type 1 has an invalid length. [ 690.462162][ T4933] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 690.475057][ T4933] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 690.483853][ T4933] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 690.501044][ T4933] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 690.503142][ T4933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 691.014348][T20827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3446'. [ 691.303225][T20837] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3447'. [ 691.472740][T20845] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 691.476861][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 691.533759][T20837] netlink: 'syz.5.3447': attribute type 1 has an invalid length. [ 691.541541][T20837] netlink: 'syz.5.3447': attribute type 23 has an invalid length. [ 691.541566][T20837] netlink: 'syz.5.3447': attribute type 11 has an invalid length. [ 691.705910][T20851] x_tables: duplicate underflow at hook 3 [ 691.798640][T20856] netlink: 'syz.0.3452': attribute type 1 has an invalid length. [ 691.798668][T20856] netlink: 'syz.0.3452': attribute type 4 has an invalid length. [ 691.798680][T20856] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3452'. [ 691.973522][T20820] wg2 speed is unknown, defaulting to 1000 [ 692.312242][T20871] netlink: 'syz.5.3454': attribute type 10 has an invalid length. [ 692.348587][T20871] team0: Device dummy0 failed to register rx_handler [ 692.410582][T20871] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 692.597519][ T53] Bluetooth: hci1: command tx timeout [ 692.648168][T20887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3457'. [ 692.648192][T20887] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3457'. [ 692.691584][T20881] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 692.695514][T20881] bond2 (unregistering): Released all slaves [ 693.167558][T20820] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.167752][T20820] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.167890][T20820] bridge_slave_0: entered allmulticast mode [ 693.169851][T20820] bridge_slave_0: entered promiscuous mode [ 693.201943][T20820] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.202050][T20820] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.202505][T20820] bridge_slave_1: entered allmulticast mode [ 693.226431][T20820] bridge_slave_1: entered promiscuous mode [ 693.305512][T20820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.309359][T20820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.380755][T20820] team0: Port device team_slave_0 added [ 693.415731][T20820] team0: Port device team_slave_1 added [ 693.485193][T20820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 693.485214][T20820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.485240][T20820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 693.487659][T20820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 693.487676][T20820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.487702][T20820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 693.731675][T20820] hsr_slave_0: entered promiscuous mode [ 693.738840][T20820] hsr_slave_1: entered promiscuous mode [ 693.746279][T20820] debugfs: 'hsr0' already exists in 'hsr' [ 693.746307][T20820] Cannot create hsr debugfs directory [ 694.361568][T20932] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 694.675251][ T53] Bluetooth: hci1: command tx timeout [ 694.796943][T20951] syzkaller1: entered promiscuous mode [ 694.796969][T20951] syzkaller1: entered allmulticast mode [ 694.894861][T20820] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 694.905315][T20820] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 694.906697][T20820] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 694.947293][T20820] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 694.948981][T20820] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 694.962997][T20820] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 694.986461][T20820] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 694.991506][T20820] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 695.319536][T20964] netlink: 'syz.0.3470': attribute type 21 has an invalid length. [ 695.319567][T20964] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3470'. [ 695.398643][T20964] netlink: 'syz.0.3470': attribute type 4 has an invalid length. [ 695.398670][T20964] netlink: 'syz.0.3470': attribute type 3 has an invalid length. [ 695.398682][T20964] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3470'. [ 695.461001][T20820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.501663][T20820] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.530983][T13438] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.531131][T13438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.642259][T20974] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 695.729961][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.730089][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.063455][T13438] IPVS: starting estimator thread 0... [ 696.256448][T20979] IPVS: Scheduler module ip_vs_mh not found [ 696.256546][T20980] IPVS: using max 27 ests per chain, 64800 per kthread [ 696.641627][T20974] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 696.774785][ T53] Bluetooth: hci1: command tx timeout [ 696.867184][T20976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3474'. [ 696.867590][T20976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3474'. [ 697.443484][T20820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.599204][T21004] ip_tables: iptables: counters copy to user failed while replacing table [ 698.163615][T21023] netlink: 'syz.1.3481': attribute type 1 has an invalid length. [ 698.163643][T21023] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3481'. [ 698.235066][T21029] netlink: 'syz.4.3482': attribute type 10 has an invalid length. [ 698.302016][T21029] team0: Port device dummy0 added [ 698.311581][T21025] syzkaller1: entered promiscuous mode [ 698.311609][T21025] syzkaller1: entered allmulticast mode [ 698.380812][T21030] netlink: 'syz.4.3482': attribute type 10 has an invalid length. [ 698.502564][T21030] team0: Port device dummy0 removed [ 698.600977][T20820] veth0_vlan: entered promiscuous mode [ 698.639297][T20820] veth1_vlan: entered promiscuous mode [ 698.820935][T20820] veth0_macvtap: entered promiscuous mode [ 698.835813][ T53] Bluetooth: hci1: command tx timeout [ 698.842150][T20820] veth1_macvtap: entered promiscuous mode [ 698.885243][T20820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.908556][T20820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.950259][T21040] netlink: 'syz.0.3486': attribute type 1 has an invalid length. [ 698.983611][T21039] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 699.092794][T21040] 8021q: adding VLAN 0 to HW filter on device bond2 [ 699.105281][ T8243] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.106463][ T8243] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.106511][ T8243] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.106545][ T8243] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.241975][T21048] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3488'. [ 699.251086][T21048] netlink: 'syz.4.3488': attribute type 1 has an invalid length. [ 699.251109][T21048] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3488'. [ 699.489120][T21040] bond2: (slave gretap1): making interface the new active one [ 699.506720][T21040] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 699.719009][ T6943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.719033][ T6943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.808016][ T6943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.808040][ T6943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.815876][T21054] netlink: 'syz.4.3489': attribute type 11 has an invalid length. [ 700.068719][T21061] 1{X: entered promiscuous mode [ 700.156068][T21067] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3492'. [ 700.202993][T21067] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3492'. [ 700.222109][T21069] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3492'. [ 700.233041][T21073] IPVS: set_ctl: invalid protocol: 9 172.20.20.15:21 [ 700.868189][T21104] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3500'. [ 700.968347][T21111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3501'. [ 701.022426][T21112] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3501'. [ 701.136059][T21120] netlink: 'syz.6.3503': attribute type 1 has an invalid length. [ 701.229030][T21126] netlink: 165 bytes leftover after parsing attributes in process `syz.6.3505'. [ 701.229277][T21126] netlink: 165 bytes leftover after parsing attributes in process `syz.6.3505'. [ 701.229487][T21126] netlink: 165 bytes leftover after parsing attributes in process `syz.6.3505'. [ 701.262966][T21126] netlink: 165 bytes leftover after parsing attributes in process `syz.6.3505'. [ 701.263239][T21126] netlink: 165 bytes leftover after parsing attributes in process `syz.6.3505'. [ 701.263459][T21126] netlink: 165 bytes leftover after parsing attributes in process `syz.6.3505'. [ 701.263644][T21126] netlink: 165 bytes leftover after parsing attributes in process `syz.6.3505'. [ 701.669135][T21146] xt_hashlimit: size too large, truncated to 1048576 [ 701.982350][T21159] xt_hashlimit: size too large, truncated to 1048576 [ 701.994729][T21158] xt_hashlimit: size too large, truncated to 1048576 [ 702.487697][T21174] netlink: 'syz.0.3519': attribute type 17 has an invalid length. [ 703.351521][T21207] IPv6: addrconf: prefix option has invalid lifetime [ 703.701568][T21196] bond0: option packets_per_slave: invalid value (868050663) [ 703.701601][T21196] bond0: option packets_per_slave: allowed values 0 - 65535 [ 704.510409][T21250] netlink: NAT attribute has 4 unknown bytes [ 704.510453][T21250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 704.821636][T21268] netlink: 'syz.0.3547': attribute type 12 has an invalid length. [ 704.821661][T21268] netlink: 'syz.0.3547': attribute type 29 has an invalid length. [ 704.928934][T21278] netlink: 'syz.6.3549': attribute type 1 has an invalid length. [ 705.522248][T21286] bond2 (unregistering): Released all slaves [ 705.637662][T21287] ip6gretap0: entered promiscuous mode [ 705.867594][T21287] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 705.914635][T21313] netlink: 'syz.1.3553': attribute type 1 has an invalid length. [ 705.917521][T21289] team0: Port device team_slave_1 removed [ 706.062828][T21307] __nla_validate_parse: 70 callbacks suppressed [ 706.062853][T21307] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3552'. [ 706.098454][ T8224] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 706.098764][ T8224] bond1: (slave veth3): making interface the new active one [ 706.102845][ T8224] bond1: active interface up! [ 706.110501][ T9372] gretap1: entered promiscuous mode [ 706.228424][T21318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3554'. [ 706.403404][T21333] netlink: 'syz.1.3555': attribute type 1 has an invalid length. [ 706.543706][T21334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3555'. [ 706.557298][T21333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3555'. [ 706.798218][T21354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 706.834408][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 706.858250][T21354] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3561'. [ 707.074036][T21359] sctp: [Deprecated]: syz.4.3564 (pid 21359) Use of int in maxseg socket option. [ 707.074036][T21359] Use struct sctp_assoc_value instead [ 707.374830][T13436] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.374876][T13436] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.408673][T21384] netlink: 'syz.1.3570': attribute type 11 has an invalid length. [ 707.533360][T21388] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3570'. [ 707.568561][T21392] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3569'. [ 707.568588][T21392] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3569'. [ 707.568602][T21392] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3569'. [ 707.601110][T21393] netlink: 'syz.4.3569': attribute type 21 has an invalid length. [ 707.644710][T21384] 8021q: adding VLAN 0 to HW filter on device bond1 [ 707.647124][T21384] 8021q: adding VLAN 0 to HW filter on device bond2 [ 707.683718][T21393] netlink: 'syz.4.3569': attribute type 3 has an invalid length. [ 707.683744][T21393] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3569'. [ 709.127144][T21436] netlink: 'syz.1.3578': attribute type 9 has an invalid length. [ 709.591364][T21452] netlink: 'syz.6.3584': attribute type 11 has an invalid length. [ 709.936390][T21467] geneve3: entered promiscuous mode [ 709.992902][T21473] tipc: Started in network mode [ 709.992936][T21473] tipc: Node identity ac14140f, cluster identity 4711 [ 710.007757][T21473] tipc: New replicast peer: 255.255.255.255 [ 710.008221][T21473] tipc: Enabled bearer , priority 5 [ 710.588842][T21500] openvswitch: netlink: Message has 2 unknown bytes. [ 710.759136][ T53] Bluetooth: hci2: SCO packet too small [ 710.963488][T21510] pimreg: entered allmulticast mode [ 711.014619][ T9382] tipc: Node number set to 2886997007 [ 711.291791][T21523] ip_tables: iptables: counters copy to user failed while replacing table [ 712.433104][T21554] sctp: [Deprecated]: syz.5.3615 (pid 21554) Use of struct sctp_assoc_value in delayed_ack socket option. [ 712.433104][T21554] Use struct sctp_sack_info instead [ 712.435942][T21554] sctp: [Deprecated]: syz.5.3615 (pid 21554) Use of struct sctp_assoc_value in delayed_ack socket option. [ 712.435942][T21554] Use struct sctp_sack_info instead [ 712.556372][T21554] __nla_validate_parse: 6 callbacks suppressed [ 712.556399][T21554] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3615'. [ 713.017703][T21572] bond3: option min_links: invalid value (18446744073709551612) [ 713.017733][T21572] bond3: option min_links: allowed values 0 - 2147483647 [ 713.066298][T21572] bond3 (unregistering): Released all slaves [ 713.338030][T21575] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3619'. [ 713.338055][T21575] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3619'. [ 713.379774][T21575] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3619'. [ 713.716476][T21604] tc_dump_action: action bad kind [ 713.952967][T21616] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 714.009842][T21619] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3630'. [ 714.011724][T21618] netlink: 'syz.6.3629': attribute type 1 has an invalid length. [ 714.086837][T21618] bond2: entered promiscuous mode [ 714.088093][T21618] 8021q: adding VLAN 0 to HW filter on device bond2 [ 714.135434][T21626] macvtap1: entered allmulticast mode [ 714.163149][T21627] macvtap2: entered allmulticast mode [ 714.350827][T21628] bond2: (slave bridge1): making interface the new active one [ 714.350854][T21628] bridge1: entered promiscuous mode [ 714.377262][T21628] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 714.716628][T21644] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3631'. [ 714.735764][T21644] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3631'. [ 714.996048][T21654] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3636'. [ 715.132069][T21656] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 715.289757][T21672] syzkaller0: entered promiscuous mode [ 715.289784][T21672] syzkaller0: entered allmulticast mode [ 715.338129][T21672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3637'. [ 715.468362][T21679] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3638'. [ 715.609360][T21684] netlink: 'syz.6.3639': attribute type 11 has an invalid length. [ 718.396825][T18634] svc: failed to register nfsdv3 RPC service (errno 512). [ 718.415415][T18634] svc: failed to register nfsaclv3 RPC service (errno 512). [ 719.765582][T21685] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3640'. [ 719.765630][T21685] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 720.105054][T21709] netlink: 'syz.4.3644': attribute type 12 has an invalid length. [ 720.105080][T21709] netlink: 'syz.4.3644': attribute type 29 has an invalid length. [ 720.105095][T21709] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3644'. [ 720.473087][T21729] syzkaller0: entered promiscuous mode [ 720.473114][T21729] syzkaller0: entered allmulticast mode [ 720.897761][T21747] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3654'. [ 720.898037][T21747] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3654'. [ 720.898261][T21747] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3654'. [ 720.898477][T21747] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3654'. [ 720.898685][T21747] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3654'. [ 720.898924][T21747] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3654'. [ 720.899105][T21747] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3654'. [ 720.937882][T21747] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3654'. [ 721.186211][T21737] bridge2: entered promiscuous mode [ 721.186239][T21737] bridge2: entered allmulticast mode [ 721.451160][T21768] xt_bpf: check failed: parse error [ 721.778088][T21776] tipc: Enabling of bearer rejected, failed to enable media [ 721.903314][T21793] syzkaller0: left promiscuous mode [ 721.903353][T21793] syzkaller0: left allmulticast mode [ 722.492097][T21821] syzkaller0: entered promiscuous mode [ 722.492124][T21821] syzkaller0: entered allmulticast mode [ 722.912438][T21839] netlink: 'syz.1.3678': attribute type 1 has an invalid length. [ 723.059085][T21839] 8021q: adding VLAN 0 to HW filter on device bond3 [ 723.182593][T21841] bond3: (slave erspan1): making interface the new active one [ 723.197626][T21841] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 723.303881][T21843] tc_dump_action: action bad kind [ 723.584617][T21857] Bluetooth: MGMT ver 1.23 [ 723.584661][T21857] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 724.572701][T21871] bridge1: entered promiscuous mode [ 724.609872][T21871] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 724.814986][T21892] __nla_validate_parse: 41 callbacks suppressed [ 724.815011][T21892] netlink: 284 bytes leftover after parsing attributes in process `syz.4.3690'. [ 724.897791][T21899] openvswitch: netlink: Tunnel attr 4 has unexpected len 0 expected 1 [ 725.012398][T21912] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 725.272128][T21925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3695'. [ 725.288506][T21922] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3694'. [ 725.322203][T13436] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.322361][T13436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.337903][T21922] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.370129][T21928] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3696'. [ 725.391489][T21931] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3697'. [ 725.913267][T21953] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3702'. [ 726.020421][T21957] netlink: 10056 bytes leftover after parsing attributes in process `syz.5.3703'. [ 726.269265][T21967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 726.269807][T21969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 726.817090][T21987] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 726.995070][ T4933] Bluetooth: hci1: command 0x0405 tx timeout [ 727.089266][T21994] netlink: 'syz.0.3714': attribute type 5 has an invalid length. [ 727.393189][T22000] syzkaller0: entered promiscuous mode [ 727.393220][T22000] syzkaller0: entered allmulticast mode [ 727.736378][T21999] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3716'. [ 732.531804][T22020] wg2 speed is unknown, defaulting to 1000 [ 732.718194][T22042] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3725'. [ 732.807211][T22045] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3726'. [ 732.894038][T22042] IPVS: stopping master sync thread 20932 ... [ 733.271275][T22059] netlink: 'syz.5.3729': attribute type 12 has an invalid length. [ 733.810851][T22070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3732'. [ 733.948687][T22090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3735'. [ 734.393935][T22110] : renamed from team_slave_1 (while UP) [ 734.643826][T22120] netlink: 'syz.5.3744': attribute type 1 has an invalid length. [ 734.643853][T22120] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3744'. [ 734.667991][T22120] openvswitch: netlink: IP tunnel dst address not specified [ 735.107997][T22153] syzkaller0: entered promiscuous mode [ 735.108023][T22153] syzkaller0: entered allmulticast mode [ 735.134821][T22149] syzkaller0: entered promiscuous mode [ 735.134846][T22149] syzkaller0: entered allmulticast mode [ 735.324438][T22160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3754'. [ 735.353874][ T8243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.353892][ T8243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.667229][T22175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3759'. [ 735.667248][T22175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3759'. [ 735.906687][T22185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3761'. [ 736.141249][T22197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3764'. [ 736.534623][T22209] netlink: 'syz.5.3766': attribute type 9 has an invalid length. [ 736.534650][T22209] netlink: 'syz.5.3766': attribute type 1 has an invalid length. [ 736.888010][T22219] tipc: Enabling of bearer rejected, failed to enable media [ 737.408113][T22238] veth4: entered allmulticast mode [ 737.759538][T22261] netlink: 'syz.0.3784': attribute type 1 has an invalid length. [ 737.798190][T22265] tipc: Enabling of bearer rejected, already enabled [ 737.808789][T22265] syzkaller1: entered allmulticast mode [ 737.850560][T22266] __nla_validate_parse: 3 callbacks suppressed [ 737.850583][T22266] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3784'. [ 737.850709][T22266] netlink: 'syz.0.3784': attribute type 8 has an invalid length. [ 737.919807][T22266] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 737.919859][T22266] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 738.051483][T22271] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3787'. [ 738.082410][T22277] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3787'. [ 738.333532][T22287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3791'. [ 738.478210][T22292] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3793'. [ 738.801255][T22303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3797'. [ 738.829937][T22302] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 738.837100][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 739.145949][T22322] ip6erspan0: entered allmulticast mode [ 739.429428][T22330] ip_tables: iptables: counters copy to user failed while replacing table [ 739.559373][T22339] syzkaller1: entered promiscuous mode [ 739.559400][T22339] syzkaller1: entered allmulticast mode [ 739.598979][T22338] syzkaller0: entered promiscuous mode [ 739.599007][T22338] syzkaller0: entered allmulticast mode [ 739.620933][T22337] tipc: Started in network mode [ 739.620953][T22337] tipc: Node identity , cluster identity 4711 [ 739.620967][T22337] tipc: Failed to obtain node identity [ 739.620994][T22337] tipc: Enabling of bearer rejected, failed to enable media [ 739.850445][T22350] netlink: 'syz.0.3808': attribute type 15 has an invalid length. [ 739.853440][T22349] netlink: 'syz.0.3808': attribute type 15 has an invalid length. [ 739.947954][T22355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 740.122108][T22366] netlink: 'syz.5.3813': attribute type 1 has an invalid length. [ 740.123687][ T4933] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 740.143307][ T4933] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 740.154658][ T4933] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 740.160279][ T4933] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 740.163439][ T4933] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 740.216550][T22366] 8021q: adding VLAN 0 to HW filter on device bond2 [ 740.324010][T22372] netlink: 'syz.4.3814': attribute type 2 has an invalid length. [ 740.342414][T22366] bond2: (slave veth5): Enslaving as an active interface with a down link [ 740.392873][T22370] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 740.393033][T22370] bond2: (slave batadv3): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 740.482817][T22376] tipc: Enabling of bearer rejected, failed to enable media [ 741.044991][T22392] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.3820'. [ 741.153113][T22397] bond0: Error: CAN devices cannot be enslaved [ 741.382497][T22405] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.404972][T22405] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.455561][T22408] netlink: 59 bytes leftover after parsing attributes in process `syz.1.3823'. [ 741.538308][T22361] wg2 speed is unknown, defaulting to 1000 [ 741.878997][T22421] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3825'. [ 742.000776][T22424] batman_adv: batadv0: Adding interface: syzkaller0 [ 742.000797][T22424] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.000827][T22424] batman_adv: batadv0: Interface activated: syzkaller0 [ 742.050231][T22418] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 742.121849][T22418] batman_adv: batadv0: Removing interface: syzkaller0 [ 742.195010][ T53] Bluetooth: hci7: command tx timeout [ 742.275214][T22434] netlink: 'syz.5.3828': attribute type 3 has an invalid length. [ 742.895913][T22448] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3831'. [ 743.304020][T22467] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3836'. [ 743.393633][T22361] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.393870][T22361] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.415582][T22361] bridge_slave_0: entered allmulticast mode [ 743.418130][T22361] bridge_slave_0: entered promiscuous mode [ 743.441372][T22361] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.441500][T22361] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.441655][T22361] bridge_slave_1: entered allmulticast mode [ 743.443814][T22361] bridge_slave_1: entered promiscuous mode [ 743.645957][T22361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.672614][T22361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.718446][T22477] vlan2: entered allmulticast mode [ 743.718473][T22477] macvtap0: entered allmulticast mode [ 743.718485][T22477] veth0_macvtap: entered allmulticast mode [ 743.719004][T22477] bridge0: port 3(vlan2) entered blocking state [ 743.719225][T22477] bridge0: port 3(vlan2) entered disabled state [ 743.723108][T22477] vlan2: entered promiscuous mode [ 743.723131][T22477] macvtap0: entered promiscuous mode [ 743.841127][T22361] team0: Port device team_slave_0 added [ 743.865705][T22361] team0: Port device team_slave_1 added [ 743.972925][T22361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.972946][T22361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.972971][T22361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.981590][T22361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.981611][T22361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.981636][T22361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 744.014306][T22488] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 744.014925][T22488] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 744.213398][T22498] x_tables: unsorted entry at hook 2 [ 744.239566][T22361] hsr_slave_0: entered promiscuous mode [ 744.240699][T22361] hsr_slave_1: entered promiscuous mode [ 744.241557][T22361] debugfs: 'hsr0' already exists in 'hsr' [ 744.241580][T22361] Cannot create hsr debugfs directory [ 744.275672][T22495] netlink: 'syz.4.3841': attribute type 11 has an invalid length. [ 744.286677][ T53] Bluetooth: hci7: command tx timeout [ 744.489370][T22501] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3843'. [ 744.723373][T22508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3846'. [ 744.723486][T22508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3846'. [ 744.777230][T22361] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 744.801044][T22361] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 744.803717][T22361] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 744.829345][T22361] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 744.830764][T22516] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 744.831348][T22361] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 744.891147][T22361] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 744.913217][T22361] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 744.951938][T22519] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3849'. [ 744.956915][T22361] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 745.247142][T22531] batman_adv: batadv0: Adding interface: syzkaller0 [ 745.247205][T22531] batman_adv: batadv0: Interface activated: syzkaller0 [ 745.482393][T22540] : renamed from ip6gre0 (while UP) [ 745.608129][T22361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.661147][T22361] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.683026][ T6934] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.683155][ T6934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.693621][T22542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3854'. [ 745.823266][ T6943] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.823416][ T6943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.898510][T22550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3857'. [ 745.898548][T22550] netlink: 'syz.4.3857': attribute type 20 has an invalid length. [ 745.898562][T22550] netlink: 'syz.4.3857': attribute type 21 has an invalid length. [ 746.275621][T22565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3860'. [ 746.355375][ T4933] Bluetooth: hci7: command tx timeout [ 746.521280][T22578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3862'. [ 746.629198][T22582] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 747.020694][ T4933] Bluetooth: hci4: connection err: -111 [ 747.154990][ T53] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 747.471947][T22361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.912645][T22629] vlan2: left promiscuous mode [ 747.912671][T22629] macvtap0: left promiscuous mode [ 747.913496][T22629] bridge0: port 3(vlan2) entered disabled state [ 747.942011][T22629] bridge_slave_1: left allmulticast mode [ 747.942041][T22629] bridge_slave_1: left promiscuous mode [ 747.942291][T22629] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.981048][T22629] bridge_slave_0: left allmulticast mode [ 747.981079][T22629] bridge_slave_0: left promiscuous mode [ 747.981489][T22629] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.997060][T22644] netlink: 'syz.4.3878': attribute type 11 has an invalid length. [ 748.061701][T22646] tipc: Enabling of bearer rejected, already enabled [ 748.287036][T22652] netlink: 'syz.4.3881': attribute type 1 has an invalid length. [ 748.359263][T22652] __nla_validate_parse: 8 callbacks suppressed [ 748.359288][T22652] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3881'. [ 748.359648][T22660] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3881'. [ 748.435517][ T53] Bluetooth: hci7: command tx timeout [ 748.437760][T22652] bond4: (slave veth0_to_bond): making interface the new active one [ 748.439003][T22652] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 748.609920][T22361] veth0_vlan: entered promiscuous mode [ 748.649641][T22361] veth1_vlan: entered promiscuous mode [ 748.859359][T22361] veth0_macvtap: entered promiscuous mode [ 748.903559][T22675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3886'. [ 748.927999][T22361] veth1_macvtap: entered promiscuous mode [ 748.979597][T22361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 749.006705][T22361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 749.054946][ T6934] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.054993][ T6934] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.055022][ T6934] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.055050][ T6934] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.126084][T22691] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3890'. [ 749.189144][T22696] openvswitch: netlink: Tunnel attr 4 has unexpected len 0 expected 1 [ 749.202911][T22700] openvswitch: netlink: Tunnel attr 4 has unexpected len 0 expected 1 [ 750.093512][ T6943] IPVS: starting estimator thread 0... [ 750.128566][ T53] Bluetooth: hci6: ISO packet for unknown connection handle 3684 [ 750.174630][T22715] IPVS: using max 27 ests per chain, 64800 per kthread [ 750.200722][T22720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3897'. [ 750.238988][ T6943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.239014][ T6943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.410667][T22726] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 750.438750][ T6943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.438775][ T6943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.712817][T22735] Cannot find set identified by id 2 to match [ 750.883768][T22745] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3904'. [ 750.883797][T22745] nbd: illegal input index 65508 [ 751.078928][T22747] netlink: 67 bytes leftover after parsing attributes in process `syz.4.3904'. [ 751.399350][T22747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 751.403098][T22747] mac80211_hwsim hwsim48 wlan0: entered promiscuous mode [ 751.536524][T22760] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3907'. [ 751.565027][T22747] 8021q: adding VLAN 0 to HW filter on device bond1 [ 751.588448][T22747] 8021q: adding VLAN 0 to HW filter on device bond2 [ 751.655252][T22747] 8021q: adding VLAN 0 to HW filter on device bond3 [ 751.733275][T22747] 8021q: adding VLAN 0 to HW filter on device bond4 [ 751.752592][T20819] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 751.753739][T20819] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 751.754303][T20819] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 751.788477][T22762] tipc: Started in network mode [ 751.788509][T22762] tipc: Node identity e0000002, cluster identity 4711 [ 751.788562][T22762] tipc: Enabling of bearer rejected, failed to enable media [ 751.923889][T20819] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 751.964905][ T6943] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.015393][T22781] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 752.441797][ T8243] IPVS: starting estimator thread 0... [ 752.534251][T22796] IPVS: using max 28 ests per chain, 67200 per kthread [ 752.565093][T22795] netlink: 'syz.7.3913': attribute type 1 has an invalid length. [ 752.951221][T22813] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3920'. [ 752.971068][T22813] netlink: 388 bytes leftover after parsing attributes in process `syz.7.3920'. [ 753.043044][T22805] netlink: 'syz.1.3916': attribute type 10 has an invalid length. [ 753.327464][T22830] netlink: 'syz.5.3924': attribute type 5 has an invalid length. [ 753.448214][T22835] ipvlan2: entered allmulticast mode [ 753.448241][T22835] macvlan1: entered allmulticast mode [ 753.448257][T22835] veth1_vlan: entered allmulticast mode [ 753.451182][T22835] batman_adv: batadv0: Adding interface: ipvlan2 [ 753.451199][T22835] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.451229][T22835] batman_adv: batadv0: Interface activated: ipvlan2 [ 753.639199][T22841] netlink: 'syz.4.3929': attribute type 2 has an invalid length. [ 753.662375][T22841] : entered promiscuous mode [ 753.680806][T22841] __nla_validate_parse: 2 callbacks suppressed [ 753.680861][T22841] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3929'. [ 753.839265][T22851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3931'. [ 753.908706][T22853] debugfs: '.P'G!DES' already exists in 'ieee80211' [ 754.194877][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 754.849210][T22871] netlink: 'syz.1.3940': attribute type 7 has an invalid length. [ 754.900147][T22875] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3939'. [ 755.243261][T22887] netlink: 'syz.5.3945': attribute type 1 has an invalid length. [ 755.243287][T22887] netlink: 'syz.5.3945': attribute type 6 has an invalid length. [ 755.243300][T22887] netlink: 'syz.5.3945': attribute type 3 has an invalid length. [ 755.293206][T22888] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3943'. [ 755.293235][T22888] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3943'. [ 755.293251][T22888] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3943'. [ 755.632411][T22907] netlink: 'syz.1.3947': attribute type 2 has an invalid length. [ 755.632439][T22907] netlink: 'syz.1.3947': attribute type 2 has an invalid length. [ 755.711276][T22905] wg2 speed is unknown, defaulting to 1000 [ 756.355264][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 757.416338][T22967] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3967'. [ 757.422813][T22962] syzkaller0: entered promiscuous mode [ 757.422874][T22962] syzkaller0: entered allmulticast mode [ 757.460258][T22963] tipc: Enabled bearer , priority 0 [ 757.460556][T22968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3966'. [ 757.690527][T22963] tipc: Resetting bearer [ 757.741955][T22981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3972'. [ 757.758525][T22981] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3972'. [ 757.770208][T22959] tipc: Resetting bearer [ 757.829095][T22959] tipc: Disabling bearer [ 758.730637][T23038] ip_tables: iptables: counters copy to user failed while replacing table [ 758.926974][T23047] __nla_validate_parse: 4 callbacks suppressed [ 758.927000][T23047] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3986'. [ 759.036947][T23053] netlink: 'syz.5.3986': attribute type 10 has an invalid length. [ 759.125677][T23060] netlink: 'syz.0.3989': attribute type 1 has an invalid length. [ 759.214028][T23034] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.338806][T23049] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3986'. [ 759.362325][T23053] syz_tun: entered promiscuous mode [ 759.387202][T23053] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 759.565019][T23034] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.693696][T23077] syzkaller1: entered promiscuous mode [ 759.693725][T23077] syzkaller1: entered allmulticast mode [ 759.952816][T23034] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.111007][T23087] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3998'. [ 760.219302][T23034] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.352616][T23102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4002'. [ 760.352947][T23104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4002'. [ 760.469436][T23101] syzkaller0: left promiscuous mode [ 760.469461][T23101] syzkaller0: left allmulticast mode [ 760.880686][T23121] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4007'. [ 760.880949][T23121] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4007'. [ 760.881115][T23121] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4007'. [ 760.881267][T23121] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4007'. [ 760.881437][T23121] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4007'. [ 761.237035][T20813] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.237934][T20813] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.389500][T13439] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.451388][T23168] netlink: 'syz.0.4013': attribute type 1 has an invalid length. [ 761.625265][T23172] bond3: (slave geneve2): making interface the new active one [ 761.628671][T23172] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 761.633010][T23168] bond3: entered promiscuous mode [ 761.633037][T23168] geneve2: entered promiscuous mode [ 761.649792][T23168] 8021q: adding VLAN 0 to HW filter on device bond3 [ 761.660350][T20813] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.668729][T20814] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 761.672011][ T8242] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 761.672057][ T8242] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 761.672088][ T8242] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 761.882821][T23182] netlink: 'syz.7.4015': attribute type 30 has an invalid length. [ 762.487613][T23188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 762.811947][T23180] netlink: 'syz.5.4014': attribute type 32 has an invalid length. [ 763.380644][T23196] ip_tables: iptables: counters copy to user failed while replacing table [ 763.709656][T23209] netlink: 'syz.1.4020': attribute type 16 has an invalid length. [ 763.709695][T23209] netlink: 'syz.1.4020': attribute type 17 has an invalid length. [ 763.939239][T23195] __nla_validate_parse: 34 callbacks suppressed [ 763.939265][T23195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4020'. [ 764.012363][T23217] x_tables: duplicate underflow at hook 3 [ 764.129736][T23209] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.129883][T23209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.216158][T23209] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.216306][T23209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.428068][T23226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 764.467821][T23209] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 764.489401][T23228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 764.550203][T23226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 764.570646][T23209] 8021q: adding VLAN 0 to HW filter on device bond4 [ 764.609383][T13439] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.074486][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 765.082955][T23252] netlink: 'syz.1.4031': attribute type 1 has an invalid length. [ 765.154468][T23253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4031'. [ 765.710265][T23236] veth1: entered promiscuous mode [ 765.820820][T23252] bond5: entered promiscuous mode [ 765.821509][T23252] 8021q: adding VLAN 0 to HW filter on device bond5 [ 765.855626][T23260] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4032'. [ 765.855654][T23260] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4032'. [ 765.855678][T23260] netlink: 'syz.7.4032': attribute type 15 has an invalid length. [ 765.874716][T23253] bond5 (unregistering): Released all slaves [ 765.964005][T23262] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4032'. [ 765.972269][T23262] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4032'. [ 766.045313][ T8242] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 256 - 0 [ 766.051326][ T8242] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 256 - 0 [ 766.051374][ T8242] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 256 - 0 [ 766.051404][ T8242] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 256 - 0 [ 766.122458][T23269] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4035'. [ 766.272623][T23269] sctp: [Deprecated]: syz.5.4035 (pid 23269) Use of int in maxseg socket option. [ 766.272623][T23269] Use struct sctp_assoc_value instead [ 766.702376][T23288] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4043'. [ 766.732352][T23281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 766.797914][T23290] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4043'. [ 766.938189][T23296] netlink: 164 bytes leftover after parsing attributes in process `syz.7.4044'. [ 767.467692][T23308] IPv6: sit1: Disabled Multicast RS [ 767.773063][T23313] bond5: option arp_interval: invalid value (18446744073709551615) [ 767.773094][T23313] bond5: option arp_interval: allowed values 0 - 2147483647 [ 768.001911][T23313] bond5 (unregistering): Released all slaves [ 768.669256][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.669549][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.669795][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.670051][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.670290][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.670539][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.685145][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.685436][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.685651][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.685861][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.686076][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.686294][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.686533][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.690198][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.690441][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.690651][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.690861][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.691070][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.691282][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.691518][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.696211][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.696481][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.696694][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.696926][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.697142][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.697364][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.697603][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.702165][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.702387][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.702596][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.702821][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.703038][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.703244][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.703484][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.763547][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.763788][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.769624][T23347] ip6t_srh: unknown srh invflags 4000 [ 768.770437][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.770694][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.770965][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.771171][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.773290][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.778567][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.778808][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.779129][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.779481][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.779743][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.781834][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.782100][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.782312][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.784698][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.784985][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.785199][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.785461][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.785673][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.785879][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.786097][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.786314][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.786521][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.786730][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.786972][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.787185][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.787392][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.787606][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.787823][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 768.788047][T23344] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 769.287839][T23349] tipc: Started in network mode [ 769.287876][T23349] tipc: Node identity ac14142f, cluster identity 4711 [ 769.288164][T23349] tipc: New replicast peer: 127.0.0.1 [ 769.288737][T23349] tipc: Enabled bearer , priority 5 [ 769.518250][T23367] Bluetooth: hci0: unsupported parameter 5134 [ 769.518270][T23367] Bluetooth: hci0: unsupported parameter 8192 [ 769.518279][T23367] Bluetooth: hci0: unsupported parameter 5134 [ 769.518286][T23367] Bluetooth: hci0: unsupported parameter 8192 [ 770.008552][T23388] __nla_validate_parse: 5 callbacks suppressed [ 770.008581][T23388] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4064'. [ 770.063989][T23386] netlink: 'syz.7.4065': attribute type 5 has an invalid length. [ 770.190881][T23404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4068'. [ 770.190925][T23404] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4068'. [ 770.271807][T23388] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4064'. [ 770.350141][T23411] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4070'. [ 770.350490][T23411] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4070'. [ 770.414943][T23156] tipc: Node number set to 2886997039 [ 770.631798][T23419] xt_hashlimit: size too large, truncated to 1048576 [ 772.897722][T23394] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 773.248947][T23445] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4077'. [ 773.281705][T23442] sctp: [Deprecated]: syz.7.4077 (pid 23442) Use of struct sctp_assoc_value in delayed_ack socket option. [ 773.281705][T23442] Use struct sctp_sack_info instead [ 773.645572][T23468] xt_hashlimit: size too large, truncated to 1048576 [ 773.738836][T23477] @0: renamed from bond_slave_1 (while UP) [ 774.694864][T23501] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.746069][T23501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4090'. [ 774.831310][T23007] nci: nci_rx_work: unknown MT 0x6 [ 777.650524][T23502] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 782.995467][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 805.395204][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 819.474436][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 819.478263][ T31] INFO: task syz.2.3328:20371 blocked for more than 143 seconds. [ 819.478293][ T31] Not tainted syzkaller #0 [ 819.478303][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 819.478313][ T31] task:syz.2.3328 state:D stack:26048 pid:20371 tgid:20370 ppid:19839 task_flags:0x400140 flags:0x00080002 [ 819.478373][ T31] Call Trace: [ 819.478382][ T31] [ 819.478398][ T31] __schedule+0x17db/0x58f0 [ 819.478482][ T31] ? __pfx___schedule+0x10/0x10 [ 819.478520][ T31] ? schedule+0x90/0x2b0 [ 819.478550][ T31] schedule+0x164/0x2b0 [ 819.478578][ T31] schedule_preempt_disabled+0x13/0x30 [ 819.478609][ T31] __mutex_lock+0x7c1/0x1550 [ 819.478643][ T31] ? __mutex_lock+0x5d4/0x1550 [ 819.478675][ T31] ? nfsd_nl_expkey_get_reqs_dumpit+0xfb/0xd60 [ 819.478838][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 819.478877][ T31] ? net_generic+0x1e/0x240 [ 819.478899][ T31] ? net_generic+0x1e/0x240 [ 819.478926][ T31] nfsd_nl_expkey_get_reqs_dumpit+0xfb/0xd60 [ 819.478963][ T31] ? rcu_is_watching+0x16/0xb0 [ 819.479000][ T31] ? trace_kmalloc+0x2a/0xf0 [ 819.479033][ T31] ? __pfx_nfsd_nl_expkey_get_reqs_dumpit+0x10/0x10 [ 819.479058][ T31] ? __kmalloc_node_track_caller_noprof+0x4d2/0x720 [ 819.479080][ T31] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 819.479100][ T31] ? netlink_dump+0x1e7/0xee0 [ 819.479134][ T31] ? netlink_dump+0x1e7/0xee0 [ 819.479174][ T31] genl_dumpit+0x10b/0x1b0 [ 819.479207][ T31] netlink_dump+0x711/0xee0 [ 819.479251][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 819.479293][ T31] ? genl_start+0x497/0x6d0 [ 819.479329][ T31] __netlink_dump_start+0x589/0x7b0 [ 819.479369][ T31] genl_family_rcv_msg_dumpit+0x213/0x310 [ 819.479400][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 819.479444][ T31] ? __pfx_genl_start+0x10/0x10 [ 819.479473][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 819.479551][ T31] ? __pfx_genl_done+0x10/0x10 [ 819.479582][ T31] ? bpf_lsm_capable+0x9/0x20 [ 819.479612][ T31] ? security_capable+0x7e/0x2c0 [ 819.479646][ T31] genl_rcv_msg+0x5e1/0x7a0 [ 819.479679][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 819.479702][ T31] ? __pfx_nfsd_nl_expkey_get_reqs_dumpit+0x10/0x10 [ 819.479744][ T31] netlink_rcv_skb+0x226/0x4a0 [ 819.479776][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 819.479828][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 819.479878][ T31] ? down_read+0x2be/0x330 [ 819.479911][ T31] genl_rcv+0x28/0x40 [ 819.479933][ T31] netlink_unicast+0x7bd/0x940 [ 819.479975][ T31] netlink_sendmsg+0x813/0xb40 [ 819.480006][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 819.480037][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 819.480064][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 819.480082][ T31] sock_sendmsg_nosec+0x14e/0x190 [ 819.480119][ T31] ____sys_sendmsg+0x54e/0x850 [ 819.480153][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 819.480191][ T31] ? import_iovec+0x73/0xa0 [ 819.480223][ T31] ___sys_sendmsg+0x2a5/0x360 [ 819.480248][ T31] ? __lock_acquire+0x747/0x2de0 [ 819.480275][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 819.480308][ T31] ? futex_wait+0x2a2/0x390 [ 819.480373][ T31] ? __fget_files+0x2a/0x420 [ 819.480400][ T31] ? __fget_files+0x3a2/0x420 [ 819.480447][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 819.480477][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 819.480529][ T31] do_syscall_64+0x166/0x520 [ 819.480556][ T31] ? trace_irq_disable+0x3b/0x140 [ 819.480576][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.480599][ T31] ? clear_bhb_loop+0x70/0xc0 [ 819.480625][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.480647][ T31] RIP: 0033:0x7f12bdf9e159 [ 819.480666][ T31] RSP: 002b:00007f12bc1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 819.480689][ T31] RAX: ffffffffffffffda RBX: 00007f12be225fa0 RCX: 00007f12bdf9e159 [ 819.480704][ T31] RDX: 00000000040088c0 RSI: 0000200000000300 RDI: 0000000000000003 [ 819.480717][ T31] RBP: 00007f12be03506b R08: 0000000000000000 R09: 0000000000000000 [ 819.480730][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 819.480743][ T31] R13: 00007f12be226038 R14: 00007f12be225fa0 R15: 00007ffd71277658 [ 819.480780][ T31] [ 819.480852][ T31] [ 819.480852][ T31] Showing all locks held in the system: [ 819.480864][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 819.480879][ T31] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 819.480962][ T31] locks held by getty/5374: 2, on CPU#1: [ 819.480978][ T31] #0: ffff8880361170a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 819.481122][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 819.481182][ T31] locks held by kworker/u8:15/6936: 4, last CPU#1: [ 819.481197][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 819.481262][ T31] #1: ffffc9000454fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 819.481317][ T31] #2: ffff88807cb9e258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 819.481435][ T31] #3: ffff8880339f70e0 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x19e/0xb40 [ 819.481505][ T31] locks held by syz.3.2988/18634: 2, on CPU#1: [ 819.481518][ T31] #0: ffffffff902b8e28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 819.481569][ T31] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 819.481650][ T31] locks held by syz.2.3328/20371: 3, on CPU#0: [ 819.481663][ T31] #0: ffffffff902b8e28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 819.481700][ T31] #1: ffff888033f5d6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 819.481734][ T31] #2: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_get_reqs_dumpit+0xfb/0xd60 [ 819.481767][ T31] locks held by syz.6.3692/21900: 2, on CPU#1: [ 819.481775][ T31] #0: ffffffff902b8e28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 819.481827][ T31] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 819.481865][ T31] [ 819.481869][ T31] ============================================= [ 819.481869][ T31] [ 819.481874][ T31] NMI backtrace for cpu 0 [ 819.481883][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 819.481897][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 819.481904][ T31] Call Trace: [ 819.481909][ T31] [ 819.481914][ T31] dump_stack_lvl+0xe8/0x150 [ 819.481937][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 819.482001][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 819.482028][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 819.482044][ T31] sys_info+0x135/0x170 [ 819.482055][ T31] watchdog+0xfd7/0x1030 [ 819.482071][ T31] ? watchdog+0x1c7/0x1030 [ 819.482086][ T31] kthread+0x38b/0x480 [ 819.482097][ T31] ? __pfx_watchdog+0x10/0x10 [ 819.482107][ T31] ? __pfx_kthread+0x10/0x10 [ 819.482118][ T31] ret_from_fork+0x514/0xb70 [ 819.482144][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 819.482160][ T31] ? __switch_to+0xc89/0x1420 [ 819.482186][ T31] ? __pfx_kthread+0x10/0x10 [ 819.482197][ T31] ret_from_fork_asm+0x1a/0x30 [ 819.482221][ T31] [ 819.482226][ T31] Sending NMI from CPU 0 to CPUs 1: [ 819.482279][ C1] NMI backtrace for cpu 1 [ 819.482293][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 819.482317][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 819.482327][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 819.482354][ C1] Code: ec 87 02 e9 83 08 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 31 24 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 819.482369][ C1] RSP: 0018:ffffc900001a7e40 EFLAGS: 00000246 [ 819.482386][ C1] RAX: 00000000002a1ebd RBX: ffffffff819bbcb0 RCX: 8000000000000001 [ 819.482400][ C1] RDX: 0000000000000001 RSI: ffffffff8e403b81 RDI: ffffffff8c6dac80 [ 819.482412][ C1] RBP: ffffc900001a7f10 R08: ffff8880b8733a1b R09: 1ffff110170e6743 [ 819.482425][ C1] R10: dffffc0000000000 R11: ffffed10170e6744 R12: 0000000000000000 [ 819.482437][ C1] R13: 1ffff11003cd2bb8 R14: 1ffff92000034fd0 R15: dffffc0000000000 [ 819.482451][ C1] FS: 0000000000000000(0000) GS:ffff888124dde000(0000) knlGS:0000000000000000 [ 819.482466][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 819.482479][ C1] CR2: 00007f1e1c68694b CR3: 000000000eb48000 CR4: 00000000003526f0 [ 819.482497][ C1] Call Trace: [ 819.482504][ C1] [ 819.482511][ C1] default_idle+0x9/0x20 [ 819.482536][ C1] default_idle_call+0x72/0xb0 [ 819.482561][ C1] do_idle+0x2e0/0x540 [ 819.482602][ C1] ? __pfx_do_idle+0x10/0x10 [ 819.482629][ C1] ? do_idle+0x4d8/0x540 [ 819.482655][ C1] cpu_startup_entry+0x43/0x60 [ 819.482680][ C1] start_secondary+0x101/0x110 [ 819.482705][ C1] common_startup_64+0x13e/0x157 [ 819.482734][ C1] [ 819.483246][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 820.605924][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 820.616390][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 820.629910][ T31] Call Trace: [ 820.635675][ T31] [ 820.640086][ T31] vpanic+0x56d/0xa60 [ 820.646422][ T31] ? __pfx_vpanic+0x10/0x10 [ 820.655492][ T31] ? console_srcu_read_unlock+0x3a/0x60 [ 820.665047][ T31] panic+0xc5/0xd0 [ 820.671111][ T31] ? __pfx_panic+0x10/0x10 [ 820.678112][ T31] ? __pfx_preempt_count_add+0x10/0x10 [ 820.685533][ T31] ? wq_watchdog_touch+0xf9/0x160 [ 820.691321][ T31] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 820.701944][ T31] watchdog+0x1030/0x1030 [ 820.708937][ T31] ? watchdog+0x1c7/0x1030 [ 820.715159][ T31] kthread+0x38b/0x480 [ 820.720450][ T31] ? __pfx_watchdog+0x10/0x10 [ 820.725839][ T31] ? __pfx_kthread+0x10/0x10 [ 820.731487][ T31] ret_from_fork+0x514/0xb70 [ 820.736613][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 820.742497][ T31] ? __switch_to+0xc89/0x1420 [ 820.748548][ T31] ? __pfx_kthread+0x10/0x10 [ 820.757009][ T31] ret_from_fork_asm+0x1a/0x30 [ 820.763574][ T31] [ 820.769096][ T31] Kernel Offset: disabled [ 820.774974][ T31] Rebooting in 86400 seconds..