last executing test programs: 2.406494325s ago: executing program 0 (id=4001): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async, rerun: 32) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x800) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async, rerun: 32) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000240), 0x0}, 0x20) (rerun: 32) 2.152259607s ago: executing program 0 (id=4005): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000100039042cbd7000eaffffff000003e4", @ANYRES32=r2, @ANYBLOB="83000400000000004800128008000100736974003c0002800500090029000000190010"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) pwritev(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)="a976cc", 0x3}], 0x1, 0x1e9b, 0x5) select(0x40, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x700, 0x0, 0x0, 0x0, 0x400}, 0x0, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, &(0x7f0000000100)) 1.945409557s ago: executing program 0 (id=4009): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) connect$l2tp6(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r7}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x11, 0x10d, 0x0, 0x1, [@generic="905176c518740da397a9423603"]}]}]}, 0x3c}], 0x1}, 0x0) sendmsg$nl_route(r4, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=@ipv6_newroute={0x188, 0x18, 0x300, 0x70bd2a, 0x25dfdbfd, {0xa, 0x80, 0x0, 0x8, 0x0, 0x2, 0xfd, 0x7, 0x1000}, [@RTA_METRICS={0x89, 0x8, 0x0, 0x1, "ddafc7bf98a8afbf64d15dcaee42c39c5774fb519d0d8cf38ac97f839fa86fa49fe4ccd77cd49a322f7a01aaef4ea80d824fc505afbb789ea4907825907c4e1f04de78828c17aac1622f5d0def497f22f96593dcd639473c0a5af3d56d37c2044119587216618cfa1c25f96e5cdc945815056720e8a98306c5b380aca0b34867442d46d1ad"}, @RTA_PRIORITY={0x8, 0x6, 0x9}, @RTA_UID={0x8, 0x19, r7}, @RTA_METRICS={0xc6, 0x8, 0x0, 0x1, "2a60f7e768c12dcd5a5fd1fccf57f20a28b408b0d2fb68ee427ffe5f0755b3ce999c0969804e84bea0c4a32d93ed5d7d81811819107668a5a837bf31eef9f3c1a13d988ec638cb4b6f95c46a907da62dad5e484f0a5b91ba0a2696cdaa17bb6294723dbb11e16f8181a7d45821a5576c81f4d50cb0daaa3efd6790bfd146ddc8dae07957496548184438a5cfa5e0d75fccf0cd544d6de245a231b19ea34171177a484a1336ff447e4662463b8a891f0b65ac806edd2b475900a14bdcaf745e71607c"}, @RTA_EXPIRES={0x8, 0x17, 0x5}]}, 0x188}}, 0x0) 1.866292208s ago: executing program 3 (id=4011): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000f40)={0xfd, 0x0, 0x0, @empty}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000380)={@empty, @empty, @void, {@canfd={0xd, {{0x1, 0x1}, 0x24, 0x2, 0x0, 0x0, "ecdd677d43b9eaf3dad3bc6d8164f6fb3d9fd174924ea1f26ecdd54f4ab766c9b7519ab2ca4c8bf1a9ea1b9a2bc7e99c5fe8a77211cbd1dc5587e8c8abd083c1"}}}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e22, @private=0xa030100}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='dctcp-reno', 0xa) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, 0x0, 0xb0d, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0xc, 0x4, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x74, 0x3, 0x8, 0x200, 0x0, 0x0, {0x1}, [@CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x7ff}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0xcda}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_DCCP_CLOSING={0x8}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x568d65fa}]}]}, 0x74}}, 0x4004000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "92fcad6e4f9709fa", "50a0de7e53115b2a7a28c71779327d6f512f056ebc5022e922858a2c1ff5c39d", "c736df31", "e93638594b8ef1cd"}, 0x38) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x0, 0x9, 0x0, 0x7}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004c40)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x10}}, 0xa4}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r9, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r10, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) 1.828799546s ago: executing program 2 (id=4012): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000200)=@can={{}, 0x8, 0x2, 0x4, 0x0, "000000cef4a89800"}, 0x10}, 0x2, 0x0, 0x0, 0x48058}, 0x4000855) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x3, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x2004c880) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000000)={0x9, 'vlan1\x00'}) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) syz_emit_ethernet(0x6a, &(0x7f0000000280)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x73, 0x0, @remote, @dev, {[@cipso={0x86, 0x29, 0x0, [{0x0, 0x5, "66d281"}, {0x0, 0xd, "6f03057a91f875ccf5bd5d"}, {0x0, 0xf, "6253659c41d7cea461f45f9d37"}, {0x0, 0x2}]}]}}}}}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r7, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x24}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500190002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000001000010400000000ffdbdf0000000000", @ANYRES32=0x0, @ANYBLOB="00000000000005001c0012800b00010067656e65766500000c00028005000a00000000001400030067656e6576653100"], 0x50}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x9c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7f}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2f22960e}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) bind$inet(r10, 0x0, 0x0) setsockopt$sock_int(r10, 0x1, 0x9, &(0x7f0000000200), 0x4) r13 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r13, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200048c0) sendmsg$kcm(r13, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(0x3) 1.704583053s ago: executing program 4 (id=4014): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x140, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbff, {}, [{0x12c, 0x1, [@m_nat={0x128, 0x17, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8, 0x7, 0x3, 0x80000000}, @private=0xa010101, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x3, 0xffffffffffffffff, 0x3, 0x4}, @remote, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x3, 0x2, 0x128, 0x4}, @broadcast, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x3, 0xfce3, 0xf0}, @multicast2, @private=0xa010101, 0xffffffff, 0x1}}]}, {0x60, 0x6, "b7e5307681464d8557d780071307f7c6a1d3bec6226e063b395b3cd3cc6acbf3f57c019041a22a7fc6709a114f627684942cab7868f369b56956160b81c6d053c8d2219598f2e3d34c0212052e2b133f828d5344be697c8a1e248c0c"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) (async) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x7, 0xa, 0x9, 0x2, @private0, @private1, 0x7, 0x10, 0x1, 0x1}}) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=@delqdisc={0x190, 0x25, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x5, 0x2}, {0xa, 0xffff}, {0xfff1, 0x4}}, [@q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xffff}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x17}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xf}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x401}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x30}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5902}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xffff}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4de}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x36}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6ea5}]}}]}, 0x190}, 0x1, 0x0, 0x0, 0xc880}, 0x10) 1.63001999s ago: executing program 0 (id=4015): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'sit0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x40010}, 0x804) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000240)={@loopback, 0x0}, &(0x7f0000000280)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x108, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20008040}, 0x4) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000004c0)=[{0x3, 0x1, {0x1, 0xff}, {0x1, 0xff, 0x4}, 0x1, 0x3}, {0x3, 0x1, {0x2, 0x1, 0x3}, {0x0, 0x0, 0x1}, 0xff}, {0x0, 0x1, {0x1, 0x0, 0x2}, {0x2, 0xff}, 0x2, 0x1}], 0x60) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x7c, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), r1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xe4, r5, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x60}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$nl_route_sched_retired(r1, &(0x7f0000001380)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001340)={&(0x7f00000008c0)=@newtclass={0xa5c, 0x28, 0x4, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xffe0, 0x8}, {0x4, 0x6}, {0xffe0, 0x3}}, [@c_atm={{0x8}, {0x84, 0x2, [@TCA_ATM_HDR={0x29, 0x3, "a7c3a1df256ee73087f2bc20211ba37e7d5f146617b19fe293bc7fc4c927cb9f1dc3d9e341"}, @TCA_ATM_HDR={0x10, 0x3, "a1017cd8b0ed58793b202a17"}, @TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_HDR={0x32, 0x3, "8acd22d84516a68d26f7149bb6fac17704c9673eaf7158d60774933dee0166ee22be2b537edc3f7125b8c419e7df"}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0xb}}}, @c_atm={{0x8}, {0x54, 0x2, [@TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff2, 0x9}}, @TCA_ATM_HDR={0x36, 0x3, "5d4bc1a583306ae4ef2a49be84f9c67d9c87dc19a73296346f28fce02ed9e777ed89f263de87ba737d28815106a4b9e084fa"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff3, 0x4}}]}}, @c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x320, 0x7, 0xd8, 0xc25c, 0x3, 0xfffffffd, 0xd, 0x1, 0x3, 0x1, 0x3, 0x0, 0xffff8001, 0x3, 0x3f8735a3, 0x4, 0xf39, 0x7, 0x8, 0x2, 0xa, 0x9e0e, 0x4, 0x3, 0x81, 0x100, 0xffffffff, 0x7fff, 0x9, 0x1, 0x6, 0x1000, 0xcaa, 0x5, 0x3, 0x2, 0x3, 0x8000, 0x80000001, 0x1, 0x3, 0x1, 0xb, 0xde, 0x7f, 0x9, 0x0, 0x6, 0x8, 0x9d, 0x2, 0x1966, 0xfff, 0x19, 0x7, 0x2, 0x2, 0x4, 0xffff7fff, 0x80000001, 0xf8, 0x5, 0xb86f, 0x2, 0x4, 0xa36, 0x3ff, 0x6, 0xfff, 0x7fffffff, 0x5, 0x8, 0x1, 0xc, 0x5, 0x66, 0x63e4, 0x6, 0x1000, 0x8000, 0x2, 0x1, 0x80000000, 0x1000, 0xb, 0xa5, 0x4, 0x400, 0x0, 0x2, 0x5, 0x8, 0x3, 0x9, 0xcc4, 0x7, 0x6, 0x9, 0x2, 0x6e06, 0x4, 0x7fff, 0x7, 0x9, 0x100, 0x10, 0x7, 0x4, 0x4, 0x4, 0x0, 0x7, 0x2, 0x6, 0x3, 0x101, 0x8, 0x40, 0x7, 0x7, 0x6, 0x0, 0x1, 0x56, 0x6, 0x5, 0xdd, 0x800, 0x31dc, 0xa, 0x80000000, 0x7, 0x1, 0x400, 0x9, 0xfffffffe, 0x7, 0x0, 0x6, 0x3, 0x7ff, 0x7fff, 0xda7d, 0x4, 0x0, 0x0, 0x3, 0xe, 0x1, 0x1, 0x3, 0x65, 0x6, 0xc, 0x6, 0x3973, 0x2, 0x3, 0x3, 0x5, 0x10001, 0x3, 0x0, 0x8, 0xe, 0x180, 0xc, 0x4, 0x5e, 0x7, 0x7ff, 0xae3, 0x9, 0x4, 0x0, 0x6, 0x6, 0xf, 0x2f, 0x6, 0x9, 0x38f203ba, 0x4, 0x5, 0x3, 0x41, 0x5, 0x744, 0x200, 0xdf53, 0xf0, 0x7fffffff, 0x1, 0x6, 0x7, 0x4, 0x80000000, 0xe8, 0x50, 0x7, 0x4, 0x9, 0x9, 0xff, 0x5000000, 0x8, 0x8000000, 0x29, 0xf, 0xffffe45c, 0x9, 0x5, 0x7f, 0x7, 0x7f, 0xfffffffd, 0x2, 0x4, 0xffff, 0x9, 0x0, 0x401, 0xc8, 0x9d, 0x2, 0x1, 0x7, 0x6, 0x7, 0x5, 0xd0, 0x6, 0x5, 0xffff, 0x1, 0x9, 0x6, 0x10000, 0xff, 0x6e, 0x9, 0x2, 0x3, 0x400, 0x4, 0x6, 0x8, 0xa58, 0xfd, 0x81, 0x1ff, 0xfffffff9, 0x0, 0x80000001, 0x86, 0xffff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x9, 0x2d, 0x8, 0x80000001, 0x80, 0x0, 0xff, 0xfff, 0xa, 0xce, 0x3, 0xffffffff, 0x100, 0xff, 0xffffffff, 0x9, 0x0, 0x4, 0x3, 0x2, 0x565b, 0x2dc3, 0x5, 0x10, 0xa, 0x7ff, 0x6, 0x0, 0x2, 0x101, 0x984c, 0x3440, 0x5, 0x80000001, 0x400, 0x81, 0x4, 0xfa81, 0x200, 0xb5a, 0x40, 0x6, 0x7, 0x2, 0x6, 0x0, 0x6, 0x9, 0x7ff, 0xb2fa, 0x2, 0x1000, 0x4, 0x2, 0x9, 0x5, 0xc, 0x9, 0x1, 0x7, 0x0, 0x10, 0x0, 0x1, 0xc, 0xc000, 0x1a0, 0xfffffff7, 0xb, 0x6, 0x8000, 0x8, 0x6, 0x8, 0x6, 0x80000001, 0xf8, 0x9, 0x2, 0x0, 0x5fc, 0x9, 0x7ff, 0x7, 0x2, 0x2, 0xfffffffd, 0x61, 0x2, 0xd, 0x13e, 0x8bd3, 0x2, 0xd048, 0x4, 0xa281490, 0x101, 0x2, 0x3a, 0xad75, 0x4, 0x3, 0x0, 0x8, 0x8, 0x40, 0x6, 0x3, 0x40, 0x3, 0x7ff, 0x1, 0x4, 0x80000000, 0x1, 0x6, 0x6, 0x1, 0xbe1, 0x80000000, 0xffff9776, 0x7ff, 0x3, 0xf, 0x1, 0x5, 0x7, 0x9, 0xa4c, 0x3, 0x6, 0xb4, 0x8, 0x5, 0x3, 0x8, 0x6, 0x3, 0x7, 0x5, 0x10001, 0x79b32bfe, 0x4, 0x2, 0x0, 0x264c, 0x101, 0x6, 0x130a, 0x10, 0xfffffffe, 0x2, 0x9, 0x2, 0xfffff800, 0x4, 0x8, 0xfc3, 0x8, 0x5a38986c, 0x9, 0x8, 0x9, 0x2, 0x0, 0x3996, 0x5, 0x6, 0x80, 0x7f, 0x3, 0x7, 0xfffffff7, 0x1ab, 0x4a, 0x40, 0xcb2c, 0x5, 0x1, 0x9, 0xe877, 0x369, 0x8, 0x5, 0x80000000, 0xfffffffd, 0xe90, 0x3, 0x5, 0x3, 0xae5, 0xfffffff8, 0x7, 0xffffffff, 0x3, 0x5e43, 0x8, 0x0, 0x5, 0x401, 0x80000000, 0x8, 0x4, 0x5, 0x5, 0x1, 0xffffffff, 0x8c8, 0x7f, 0x6, 0x91, 0x3ff, 0x6cc, 0x3, 0x7, 0x100, 0x1, 0x9, 0x0, 0x10000, 0x4c38, 0x2108, 0x2, 0x1000, 0x5, 0xfffffffa, 0x8, 0x9, 0xd232, 0x400, 0xfff, 0x5544, 0x65d, 0x9, 0xc0000000, 0x2, 0x0, 0x172, 0x8, 0xca, 0xf4e, 0xe, 0x2, 0x18, 0x2, 0x50, 0x3, 0x6, 0x7, 0x46a, 0xfffffffd, 0xbd6, 0x2c2a, 0x10001]}]}}, @c_cbq={{0x8}, {0x74, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x3, 0x1, 0x9, 0xe, 0x1ff}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xfffc, 0x3}, 0xdb, 0x2}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x3, 0x5, 0x6, 0x1, 0x4, 0x9}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x8, 0x4}, 0x1, 0x9}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x5, 0x1, 0xf5, 0x2, 0x7ff, 0x695d}}, @TCA_CBQ_RATE={0x10, 0x5, {0x92, 0x1, 0xa, 0x9938, 0x8cc, 0x60}}, @TCA_CBQ_RATE={0x10, 0x5, {0xe, 0x0, 0x8, 0x0, 0x3, 0x4}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x4}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0xc5}}}, @c_atm={{0x8}, {0x3c, 0x2, [@TCA_ATM_HDR={0x2e, 0x3, "6abedd8415350a2c4c2ddcac272c6854e7c0c21c6b6d82bfb5f3da005f0e60fbefc0334dfde6d090fa35"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0x9}}]}}, @c_atm={{0x8}, {0x14, 0x2, [@TCA_ATM_HDR={0xf, 0x3, "6dce12c17888bcdf01e1c2"}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5}}}]}, 0xa5c}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000001c80)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001c40)={&(0x7f0000001480)={0x794, r6, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3ff, 0xb}}}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @mgmt_frame=@disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x4}, @broadcast, @device_a, @from_mac=@device_b, {0x3, 0x5}, @value=@ver_80211n={0x0, 0x1855, 0x2, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x22, @val={0x8c, 0x18, {0x6fa, "d5833c26a0a9", @long="7f93ede644b6740dca3bce4094742d46"}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xa01}, @NL80211_ATTR_FRAME={0x4f1, 0x33, @data_frame={@msdu=@type00={{0x0, 0x2, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x6}, @broadcast, @device_a, @from_mac, {0x0, 0x9}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x1fe, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1}, {0x6}, @device_a, @device_b, @from_mac, {0x8, 0x4}}, 0x14b99d66, @random=0x1, 0x2000, @void, @void, @void, @val={0x4, 0x6, {0x2, 0x6, 0xb, 0x8}}, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0x9, 0x61}}, [{0xdd, 0x9a, "2fba434ba28dbe7782462c3672457add7e2161fdb127b8a2e1841b06ea4744f0bc1c176699e02dc93ede6deab0dfbf316a2a2e0b244bfac292f530a8bb17b4ac0441663f52249d882f5a58fc987e885afbcd0e8ddf2cb84b5576e6b884b7492fa93751755968768384658b5bfe5f5afa1a2d6961124e4aacd2b8fa3b2a54d845f442939aa91a75295a8a62cd3bbd93bbe3993fd2ffad6fcd79c3"}, {0xdd, 0x9a, "621b2022d14cbf2c1b8b1e210a82e23d6c71df14850f68cdc2279f2d7c5bd28f499e12522e6a0dcb214b09b2acd6091861787f01a285b5e3753c6782a9425c1ab7ca4ec0210ac352f8531151605191d1a344adb4d043d7b06081b781e73a38b294cdffa2b6d61590a29fc544d80dd435f42bf4ebb3bcac0f4121fa74217d5d284edfefb489467f1e14d4aa8c4d7055623155dc8b067a8df9b787"}, {0xdd, 0x8b, "44d41c503c4937a5b4f899aef527837307da94d085d788640c16ae2b3ecb9f7741e8cf7e8fdd121c826c9624d362b43e1bfb472b514ce1ab0dd8c959289497ec125fd7dcee94e7c01b326b5ad8895ba00d79f2549fe26773a307d2e637f5b6bd6572e707a077ebaa8c09d3b0a240b9f80f35cb56262daeff42e96db74b3f032c12d41d301dcdfe6977d8d7"}]}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x794}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000001cc0)={0x1}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001d40), r1) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000001d00), 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x14, r8, 0x400, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x48090) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001e80), r4) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001ec0)=0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001f00)=0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001f40)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001f80)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f0000002080)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x44, r10, 0x50c, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r11}, @NL802154_ATTR_PID={0x8, 0x1c, r12}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x44}}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000020c0)={'wlan0\x00'}) syz_open_procfs$namespace(r12, &(0x7f0000002100)='ns/pid\x00') syz_genetlink_get_family_id$nfc(&(0x7f0000002140), r9) socketpair(0x22, 0x1, 0x9, &(0x7f0000002180)={0xffffffffffffffff}) sendmsg$NFQNL_MSG_VERDICT(r15, &(0x7f0000002380)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002340)={&(0x7f0000002200)={0x13c, 0x1, 0x3, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFQA_VLAN={0x24, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x4}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xfffd}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1000}, @NFQA_PAYLOAD={0xbb, 0xa, "c3bfb5aa02d73f55f9d6fab655876e07cb9d9ee0413321946c899e06a252907d35240490512a6ccd1a0225dc878eda77b6fe59262e18d8a77d45ac9b4d90e2306b4433ef71aea276fbd656825459deebe161350b54ca6bb13f96590831cb74cf79409ba950f63a5229785b11eb538a36dd89e3a326bdaf0841a7dfb140f58b516cabda74574a30fc452ccb1055b7de87cdc62b4dda8c4625d2d98e4ce7d3fbfa1e57bcd5817bd8dd83db4ccb608d19913318e0ebd6927a"}, @NFQA_EXP={0x14, 0xf, 0x0, 0x1, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8805}, 0x40044) 1.530007825s ago: executing program 3 (id=4016): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x5, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) (async) getpeername$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) 1.44838813s ago: executing program 4 (id=4017): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async, rerun: 32) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32], 0x48) (rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0d00000069000000040000000500000000000000", @ANYRES32=r5, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000ab00"/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r6, &(0x7f0000000080), 0x0}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (async) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) splice(r10, 0x0, r9, 0x0, 0x10000008ebc, 0x0) splice(r8, 0x0, r11, 0x0, 0x80000025a5, 0x0) close(0x3) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r12, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x0) (async) close(r13) (async, rerun: 64) close(0x4) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x34}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) (rerun: 32) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000300)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x12, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0xa0}}, 0x0) 1.446484002s ago: executing program 2 (id=4018): r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r1}, 0x20) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, 0x0, &(0x7f00000000c0)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e22, @local}], 0x1) accept(r0, &(0x7f00000001c0)=@in={0x2, 0x0, @loopback}, &(0x7f00000002c0)=0x80) sendmmsg$inet6(r1, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000085c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x67e6}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x24}, {0x7d, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f8035", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000000900)={r10, 0xffffffffffffffff, 0x7fff, 0x0, 0x0, 0x6, 0xe, 0xc, 0x8, 0x800, 0x0, 0x1, 'syz1\x00'}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket$unix(0x1, 0x1, 0x0) close(r12) 1.283029427s ago: executing program 3 (id=4019): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) splice(r4, 0x0, r7, 0x0, 0x1000, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4e23, @private=0xfffffffc}}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) 1.041079767s ago: executing program 0 (id=4021): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) socket$pptp(0x18, 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x0) r2 = socket$nl_generic(0x11, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB='.\x00'/12, @ANYRES32, @ANYBLOB="23c34bc6d31e21cb2a3a36d7cf3d2a8a5ac3f47f4c81b863cb0b89820539bc8fa6c9b53df6b152c0eedfb2d7ee57a019b7ffc6d73632d0dbeff8d1af641e21d6624da1f9f29470a57c4782d43b9ed6fbdf936fe17ab8ee02e8b12d21b3ba1e772bd7cc0000000000abde9c80168dc8a87051d3f5a9072fc5174c2029859446251853b7c89e28", @ANYRES64=0x0], 0x20) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x109, &(0x7f00000001c0)=ANY=[], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800733268000100030010000000008000000000000000000c00020002000000150000000c000c800800030007"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e20ac1414bb000000000000000002000100000000000000070c00000000030005000000000002004e20ac1e01010000000000000000010014"], 0x70}, 0x1, 0x7}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @loopback, @initdev}, &(0x7f0000002900)=0xc) sendmsg$inet(r2, &(0x7f00000029c0)={&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000002880)=[{&(0x7f0000001540)="e741429110808094343e14aa32ab4c0daa3568ef638153fd16b3cb16560d959ad7e0e13ead7dd4a38f8137d7d8b42c03fb2c9aa9533bab932699e919b4732a8529cb0995ff102d6a2ced8524eafc79f5b0791866", 0x54}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="484f5fe97cf1780adfa7ce3af88778d1f6e914751b6894423e5e9eebbce7af6c4d963241adacff61ee3d5d173676b1d4a9ea880f5574945d743c99aacd6144a907ab57d03c7ad17ed435e228e36dcd2d33990b08ea9e67a2a540b7205514ec91f79aaa1fd7895d287edd56093457459b95bee77bf8950777bb65f20687dd0e02ce4719f4dd43f40b88f084f58d60b04b63efa9c7fa3b723c2875bd66bcd203fb6c19a5aba227baf53bede9", 0xab}, {&(0x7f0000000140)="4ff13ff23053cf2c24d5", 0xa}, {&(0x7f0000002680)="2cc8a7bcaf70ed1c2283d70a957a2facf5be95942119ab4b3141e8c6544dd56bd5025537db85d5ca9755a517a40c1fc3b12e1440e8ae189226443cbeec4f95d3af2a658e089ec0978440cd14526348c6acaf85a3165fe1d3edf0c24864e8e402ed8af9f28a91c2f43f3d2e42e9dcc0d00d110d0042725632f990e720de463607f2872b272639c66921d8a39e91b7", 0x8e}, {&(0x7f0000002740)="7aa94ecd9bc207c8469bdd9989cbb8588611c978a506f3a598607ceea3227b561a8a1ced0aaae9fc225eee814899ffef39678108b25c7a222b77f3e213a48e3b5d955a4b804c884ee6980fa9b342b7bb9c74374911f8a6dc2eef5c967c39ee1cd46941a3009999d66a47753c284f36abf941bc44a45d58b11e6307253f3dc8831b738655616a546e68f104c5284bc372a91e174b5ab7d195ec5898f0bb95aca62940906c29c355b904c48e3f89", 0xad}, {&(0x7f00000002c0)="169e7ead17ec415fe880721f55c3c95cb3fb39590097ec8b29c46f6d987b6951e972a80d60cfea7da24942e9484540b97a9a", 0x32}, {&(0x7f0000002800)="acab71a66448e38b45d6e2e9c24d29aa2238afeeb694f816d89252db8030fe81447f279504a6b7a17d2d47a42154971dfaac83b9bea6bc405805b0e0fee2c062ba7c0f0e2da2bb4c420e383ecaf769833deb96a921c0ddbfa5b03566ea3c2af33b6bd096bfd4681ead4f5b9ca23e61f6d81dc5", 0x73}], 0x8, &(0x7f0000002940)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffe}}], 0x80}, 0x10) 1.027368713s ago: executing program 4 (id=4022): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200081, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@ipv4={""/10, ""/2, @loopback}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) ioctl$TUNSETOWNER(r0, 0x400454cc, r2) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@mpls_getroute={0x24, 0x1a, 0x100, 0x70bd29, 0x25dfdbfb, {0x1c, 0x80, 0x14, 0x4, 0x0, 0x3, 0xfe, 0x11, 0x1a00}, [@RTA_TTL_PROPAGATE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040011}, 0x20000000) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x18) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={r6, 0x7, 0xffff, 0x9, 0xbd3, 0x5}, 0x14) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000340)={r5, 0x40}, 0x8) (async) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@ipv4_deladdr={0x58, 0x15, 0x400, 0x70bd28, 0x25dfdbff, {0x2, 0x38, 0x14, 0x0, r1}, [@IFA_LABEL={0x14, 0x3, 'dummy0\x00'}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0xff, 0x1ff, 0x8, 0x59a7}}, @IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xf}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x24040808) (async) getsockopt$EBT_SO_GET_INFO(r7, 0x0, 0x80, &(0x7f00000004c0)={'broute\x00', 0x0, 0x0, 0x0, [0x6, 0x6, 0x9, 0x4, 0x1, 0x10000]}, &(0x7f0000000540)=0x78) (async) sendto$inet(r7, &(0x7f0000000580)="f057f36c2a0b19be01a3d037b849c4f6960b4222540f69e021713e48bb04ff45f073308685dd6a345f8245397d177541e7faf8d5286c276214f109263fdc1722e5a7ab3dab64255ec79945ccfe3844c3b58ce26655bb9289c90b97779b8d3091749e6243c24790ff4a46f22a06ed9cc82b0c8ba49c6af8cc0abb926bebb20fff9aa73ddfa248489e3547989839c3990cf4545a7f3ecee22480219ad4f179a5106068daedd50622a337825d2df900eef3ae34620abe371ac4a42dce624d3be181eae001df83499eb8282622919584537f0db6cfbec5438f0cd395ba2d04386351", 0xe0, 0x4000, &(0x7f0000000680)={0x2, 0x4e20, @multicast2}, 0x10) (async) r8 = accept(r3, 0x0, &(0x7f00000006c0)) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000700)={r4, 0x5}, &(0x7f0000000740)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000780)=@sack_info={r9, 0x2, 0x81}, 0xc) (async) r10 = accept$inet(r7, &(0x7f00000007c0)={0x2, 0x0, @local}, &(0x7f0000000800)=0x10) r11 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000840)={'macsec0\x00'}) (async) setsockopt$inet_opts(r10, 0x0, 0x0, &(0x7f0000000880)="9e745ffa493fb089afcdb151a9e092209cee1ac0cd9850b4d901db506ea5b31bc7b4b000e15cb67202e5d4ae043a0468c05efab313c977438ee2ba", 0x3b) (async) setsockopt$RDS_GET_MR_FOR_DEST(r8, 0x114, 0x7, &(0x7f0000000940)={@phonet={0x23, 0x5, 0x9, 0xc}, {&(0x7f00000008c0)=""/53, 0x35}, &(0x7f0000000900), 0x12}, 0xa0) (async) splice(r7, &(0x7f0000000a00), r0, &(0x7f0000000a40)=0x3, 0x0, 0x4) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) recvmsg$can_bcm(r8, &(0x7f0000000e80)={&(0x7f0000000a80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000b00)=""/250, 0xfa}, {&(0x7f0000000c00)=""/21, 0x15}, {&(0x7f0000000c40)=""/175, 0xaf}, {&(0x7f0000000d00)=""/47, 0x2f}], 0x4, &(0x7f0000000d80)=""/209, 0xd1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2, 0x0) (async) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000f00)={'virt_wifi0\x00'}) setsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000f40)={0x3, 0x8, 0x2, 0x0, 0x3, 0x9, 0xc, 0x9, 0x16, 0x10, 0x77, 0x6, 0x7, 0xef}, 0xe) (async) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000f80)={0x0, 0x2, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @remote]}) (async) r13 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x8914, &(0x7f0000000fc0)={'pimreg1\x00', 0x800}) sendmsg$ETHTOOL_MSG_WOL_SET(r12, &(0x7f0000001300)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001080)={0x220, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_MODES={0x1f0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x59, 0x4, "1d94a77d95bdcd080fd21df5b3fc236d8895b47dc3088c8707ea0a636fed93733507ae99fb5ec0fa10f2552d1627a433a50bd6dfb2c9af62884db7475f2afb315666cfced3e2680d1afdcd3bd47764a50e81a7e23c"}, @ETHTOOL_A_BITSET_MASK={0xa8, 0x5, "78ec38a158204347aadd12117fa7b9aa31d79b28886abdef5efe81a0b8a53bb039f5025dd9b38a5b20f6e29d4b6338b60b140aec928cf0e13c02e976c4dd1b0accded0f72fae0c30499f75b272f700a7fdf6d28ba1a5040a8f4b7c83e8ac55c55f628a95007585bc2397e4292f7caa329608b763db2eb0e31c9c4f11329be690d75d2671c8a60a723cb7b1742fa57a6a28c3ef0907a7b59b7bf3e4b0e67837abf94b2bad"}, @ETHTOOL_A_BITSET_VALUE={0xbf, 0x4, "30065a8591929bfd21083dd8adc08dc05b7876d477c5263034bb2beaaa6aee677dc5e41919e3e1b447018db41e9ef5bdb8b8542ae1469cc965b8b52f44fb933463c38211d3e3623fcb668ef950b2eee4b4cb17997a2c75e03448299bc6012061f0d21a1d81ca2eba6b982f0487c3ddcbc169ed9b552a8e54113a8d80d7c0dff47a0b238bb0b7902d92be16cb556b58922b5d501277c936fc0aca1e428b9aab10888daf905071c9f1cfb041225b100c64d140044460579918fc9097"}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'macsec0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_SOPASS={0x1b, 0x3, "8fdb4bce2a3e573d0e9788d8e888b06f1c14e134105aaf"}]}, 0x220}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.025957639s ago: executing program 2 (id=4023): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000002020101000000000000000002000000240002800c000280040001ff00000000140001800800010000000000080002"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0xfffffffffffffe66}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xc3}, 0x1, 0x100000000000000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x4010, r3, 0x4000) 884.405327ms ago: executing program 1 (id=4024): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 64) close(0x4) (async, rerun: 64) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x206) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000001000000000000000000000000000800010000", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) (async) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000640)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) r9 = gettid() syz_open_procfs$namespace(r9, &(0x7f0000000100)='ns/cgroup\x00') (async, rerun: 32) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000700)=0xe8) (rerun: 32) r11 = getgid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfb, 0x80000000}, 0xc, &(0x7f0000000140)=[{&(0x7f0000000780)={0x368, 0x1f, 0x1, 0x70bd26, 0x25dfdbfc, "", [@nested={0x2d2, 0x62, 0x0, 0x1, [@generic="a8ac449fb1665e4f2ff22f6246e960366bc67a426917aab13b5244e7c04ae6f42737b7aa64eccb4dea88fb1cab01c7b064e41e1ac1dbf0cbf7994f3d76f168ec82aa376f1606757ed09c8619a30435ce7a2b8c0f915e8dd4348953b1574a591aca4161fc6a1fbc2eb905a13a63ba33bd764fb05639679e8802c4b5e21ff0b7a0ece3461463b305777f473a71b8eb201e06179f5f8deb1fd24c5a6f900c06d10cb4b8a1473f051225f53b06de2196e303d739d4d3a45f96ae09ccb8004d8dc8d1fe44a9635a275e69c97ca8d108adbca8fc4ee24ed7446b7517d686b12c7117e1ea989c8522e0d12ad1", @generic="7dd6ffb2a3ddb04c7e5261c50e53b224dc4f4710976e26d440f8fe68f0ad574e3e71563d3695c60623cad66e5599d0f2c4fcb98bf05da12abb78714985751b3bc6d8c155c754f6c63d3e51387bfe05dfef96cd5d21fc35c6bf32b63b4de03bc4dff69fd382c33cf243cf9a3b7cd2d3768bb97d7748b8c25edea872bbaab3c4028b85053ff37050ff690246a906d861e5a2dc08b97ecf5140f4c5fe50dd3702636ead99c109e0b000b0a4d6a36ff5", @nested={0x4, 0x149}, @typed={0x8, 0x18, 0x0, 0x0, @pid}, @nested={0x4, 0x55}, @generic="9c215fe1fe22d527afe8676ce6c9a45d70711474594a04fd2663923b1c4e7d8c6241cc99269b7fcac243cb3c809070ae8b7b1137cc1b28e799239731917872df2e7716695a7f83763cba64d2a0021f2470114eaccec253a58e7204d06c974df17269defa1a2759b546331da610dc4345c1d946b683fc738e21c9236f245ec7dfb3dc5399835bfaf3b9251a6988c063ba42e0477fc762ee59a21fc92dab341a60ebf0e93dc3fb2c758859ae0def9b844d72", @generic="ab1ab4ec3550303201f50de7698d6d9d9de9121be490f6ea2c757854d7991b6c404fc7072522a740f60f84ba956e3428e2a200fdd380b954db773c5aaebd2a155053d080e68d8a82357d56c5842125e06d79a2ce2197320ea248bbee683c0e43281386892c2667aea75781907e8e782c13b9d7f01cf8"]}, @generic="5d6ef5843a6edb85dde73806425eb106928f534b0ba0bf887d472c64e992c600a800765b13bddaaad5a584e07a710acce0180d9c8f1c9a9710048adb561ec4be0953547697a04a398771058b2bbe591944737c2467d07ac5efe7d77721493a1727c373c1bf579cf3f22215c7c0d6fed4118017dd46cd85b92f107563fd9ef9171977e1"]}, 0x368}], 0x1, &(0x7f0000000c00)=[@rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, r3, r0, r3]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xffffffffffffffff, r8}}}, @rights={{0x28, 0x1, 0x1, [r3, r1, 0xffffffffffffffff, r1, r3, r2]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}], 0x110, 0x800}, 0x800) (async) syz_emit_ethernet(0x50, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaa158100000086dd60010100001e11fffe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22001690780203000000000000301ce6020000"], 0x0) (async, rerun: 64) r12 = socket$phonet_pipe(0x23, 0x5, 0x2) (rerun: 64) getsockopt$PNPIPE_HANDLE(r12, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async, rerun: 64) unshare(0x6a040100) (async, rerun: 64) r13 = socket(0x8, 0x3, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x20000800) ioctl$sock_netrom_SIOCADDRT(r13, 0x61f0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) close(0x4) 883.149714ms ago: executing program 2 (id=4025): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000080)=""/129, 0x81}, {0x0}], 0x2, 0x80000001, 0x1) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="dd500e2f241f0000b37e5125a0d94e4a6be8ecf01b97a15f28e8a5f93202dafc92c2ab", @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf250500000005000700050000000500070002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r5, 0xd7735000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3f}, {0x4}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0x11, &(0x7f0000000100)=0xfffffffe, 0x4) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYRES16=r2], 0x28}}, 0x20000000) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 838.449403ms ago: executing program 3 (id=4026): r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @dev, @bcast, 0x1, @rose}, &(0x7f0000000040)=0x1c, 0x80800) connect$rose(r0, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x0, [@default, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) getpeername$packet(0xffffffffffffffff, &(0x7f0000002880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000028c0)=0x14) sendmmsg$sock(r0, &(0x7f0000003bc0)=[{{&(0x7f00000000c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'tgr160\x00'}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)="6661ddc6a04e", 0x6}, {&(0x7f0000000180)="b2b1f1d5448cea238936c5183362833383ffe4fd5f378d0fc495e354916dfa1d8c420a3c836011c3f89874e4f676347fab6bb6732b9a6b58a7b62073c85c7d368e617d94878d840276794103cdfa2ad2f11bea0fabf07b9091f71e0371ecf65b3cdd8f813d50f417957a6b9b83be78b6e04fabcfd9bf8f9a6dd57eea93ea", 0x7e}, {&(0x7f0000000200)="5aacf9dc758482abba08a14889ce79541443c8f4972c4c1d531f27b8f2fd715a6b92b61ff8a49c9c2669ae63edefcb3aaacefa88fafacad4f475a387c4dbe42c7840741dc2ed86d3f91191521419affb1f24431b37618aecc9ae5e833415d17ecf5260b45aa6b0cbd6e519b4733078572ebf09d5466e79c2dd823b7c304ab27049ed0d156566fe5a20e91976e1efda426d6aff984be976fa0566a9511c6d64990eb265df68a5dd1b33b6198da2d22bf340e1fef16cb5615605e41810f3cf89c0", 0xc0}], 0x3, &(0x7f0000000300)=[@mark={{0x14, 0x1, 0x24, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x6ed}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x1000}}], 0x60}}, {{&(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x1, 0x2, {0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0x5}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)="60a4da99bc04d1491d3dd22e4c991e79adc35923f338bac45ed0aafeabfabac79d122eab956c7583e31758ee939e4e51ffd34d5cfb5a9a00d4d7ff2420fea087bdb05188268cf91177f89ae8fea7c97687b5326ffdd504cae12eb70c15be5fbece04365d0d8fdb35a9cd8d9eed739b2053252822994220d8deda7836a42f69577179e428c566c7297ec4bc7414ef5dab7fe6d2844cf64109ee079e23aa56945c50f9d9d275ec9591f03f61a962ab462b159eea580b7ccae23f6799cf1cf526059e", 0xc1}], 0x1, &(0x7f0000000540)=[@mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x812}}], 0x78}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f00000005c0)="e3c4dc85d3e7d498c3f56c7475eeb5d61c1d6528124754546e5bfe39ffc0e9f008d92aa7534348ab6f50ca154d96c86721afbe25a8d6fc082e00aa180acd3530f954687662db0a726cecee3b30d94a02cdaa43c2715ea8fef8afc2e17d065508752089f29a53b4cb85a4e8b472aa4c319eb18ce56f0235083ed52a139a712b349092a4fce1f9098dc98d3158d764d0aa4c555279d29f1361c742ea0f1f1619e96f2c8d4f532b897cb4951c8a4f5391d8dd47f08ae56d2dfddf9b", 0xba}, {&(0x7f0000000680)="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", 0xfd}, {&(0x7f0000000780)="61ca8a72c54597535bf5e32f4f99012fc7a346a614d1cfb3e27cc753b8dcb01b235841a0caaa0690356fb440454d92dfe2b5c5458f82aa294ea90d54c625ae16c64317deba88fc65ed2448bec72eccdc8f5e1bb8805428d1d85c6c36ae62f55225130d3d7c5663f23aa98119a2d387a05c2c1d98ca1d8a00825d020891d2cd107c72ed97", 0x84}, {&(0x7f0000000840)="4c192c4cc45f33ebc848f07996d0c7c298d95791b1b582d6416f0aafc772d07c8bb3dcedc8b1ea7d24f0bda0be72a19942099ba7d86de8accc3b1c133a6199f51e680623aa7034af844f23e939c2f2a5fdfff1def90c79d230038fc9504705a07ac11b0208aab05377185e159245fe5a4e702297967106bb4bfe2860127286e7dfa4a66edeb5f12f52d093683bffabb59a886433b85a6333735afc33d84b10b3c8bd6f45548510b414ebcda497f3437ca6a39637f72b546da8f9cc24f2d2", 0xbe}, {&(0x7f0000000900)="b2ca5ea370517502a79e215fcf446e6992eb04e3ebf22b8ef57e66d7c9d477d694f5b63c57ef50a4c53940c9cf716a808153cd366a61dd5e8b2985fb138914c193f1fb6250df6f91639eb861a4c88163ad056f2f9afab95bdc624e22680e43cd0b36347eb97116f90f4bdda3801ee0116ee226b5d387656bdaefb7a0524c1e587c15c852db2fa78297e24376eb5b7a4367bf70ae4057185ce1b58960e32850209314a02e0386f123fc072414f9ece4e4a594607911dfeb3afab86a8e1940b3a287ed9046437e58e7575f5f53b44da64392fe4c8d40", 0xd5}, {&(0x7f0000000a00)="1a5a97363926ae9e4981c79580bd31924356dbc216eac75b5fda2cba7723de105cd3d0e07fe30ba0458b455c3471fe8c93ebb6b8405dceb0beec989b5f19d5d6cc3111e6a46798ca5f751b547ded21f3313b247ba899885a535b496e19070a74fc07da0a73d501a0ef36931384fc41c014516e147dbeb2626ba146c187fff536d57a7d72e9a02d6f88f6c4375d67d748baf81bce7691df1c29786de2e0afc33c0d1c885af9e4101abaf0fcc8895b28c198f78881bddc4ca0b57e1e5924a83f23f5847904b6a9a8946fb483cfe22b20604d5a4c5928a5c02a7824c655b0dac8602eabcf96e5767898c1935d", 0xeb}, {&(0x7f0000000b00)="04dbf79a77dc2fb283bd3e2fc6fd2eef4a93036b99c1ecaa6c0e49b6a9bcc2ef27c70f03945a28df23ae90287bd30f53ee35210ca723c7b665897662e2d66bcb9af66e726616deda327bc2dd22b762f0bdfcb4f4fd293e283c73562cca4e8d8e6ba669356d10915a01202e922e75b7b0607cef65146f8c5b6245ca99b0ce7fcd1cf642a19ecd4eef7ba537262dbf67f1a53a8c384440f25393652dc944b713fc019dd4f6d94db7580abf5a8dd9af2a89f5ccc621cfe5a2ee687411e0b4c5d1315389764de558cb6464916d8826662966bab3eb1df39c0bd19edf92b0e16e39943aa3c2aee61ecc380d569adfe31eca9b87fcc39b7db5686b73cb61aca280c6c7d4d7ac0b4f4fb5c587e67be7483099c9fadecbae3ac9284e0affd20681a12dd672e27547e1851d67eed4ceba65ea14db4b087d9864778279ffb6c330577f590176ea3c4621a010ac9a0a1dd7dbf4b6560594afd8007f57927cba6952236535bad7145c1447b277e46bcf72a2ba0bf105798600016ba63740f84ba2f628af33e842a4d2cb272a5954b7c220f65428f15ddd79ca13821db15a8fc1307c836230667e392542f0849ec1035151c664a3d0e9d3cecfe6dd7eb44f22693575e1569c4b7c2708ea9c777f2a49bbcf5a4fceccdca650905158592ecc0553c7019baa636a26ce055931715abd340a80d872686d2eca0f1e4021cfbff9a8964c5e174186a1e341f4df69f44647889d43cf8f832f8a04e2f335664833c5df42d677afd28cc18b92d65330f8a674eec07ef060a64a6dfa6866ef4b982fc5fc5e89518a4716343c9963c9f28c1c42a378db898607592161a5950cdd061688455c9d7ae93f83ba31fd2f26b53031da4fbae92f505155804ddb7ff6d6345de3f3b5861b5f7dfa18cc898a945b94855aef88741dc93702211e64b079eeeee1bfdd2e2402ccbff48b534ceb302960f8e3d6519e5233e552ed63332d236b2facdb345a7d1b14f1323c8f3d043cf66ed9b57051fc63eb9807fdc86c8c1c5a29d3e27014558029ce9be8d3e8f22e1fa749a9713c7af5c1039c08a5b307499a24c4ee2262d3c59086656fcc9e05f88dd827c9b90223260e41cb7b6eaa62c3c50ce3aebc997df89461b483137a2fd98d31ad97574dcafdddd939477576b0c9f03bca455481715f5f993a8411bc174c0d18d13c1b963e6c6f54e29d310034e07e5af8900e04257e094dcf2ef90eb0e45b92cb9e6fc043e6ab83087e98fcab6af0dd7e3cda22c16bd17e27c862c323617bf39b4cb8c16feb05735846214921ee0cdd0d8511b2b9cb9c2338790c5baad11afe9b7cc9fb0500f78315fa200324ebb081f2749d3fa4c1b868a02902bf4774d6e21317aba7fd382706f6acc3903e70e32dafd200124724131f814aa19b38b347b47d8aa4900aa9a81a2b79619dfc744cd001d96aa2b8fd57f1691a42cbf5f8ce39e6c83f74283869606f393d9b84e27741274a33ee77047dab8d48a37694ff3b44372c6a8cf4cdc6613e5ad3a3cb8833bbfeb2eb1f4f66a840445f167bd0e23a4af9fe4fd559e3c7cdc804942ffd381ccd1279d268f556aef5f6c6de25df9ed5c4a2802d52d4b40138d7d310ed43172d8e57abe04637f3b8384593106e50db6297526dfd581221121beb2131c9b26ff9abb997aa4113f9321ca894df8512147b2920b0fdec3c3fd3f6459a1ea16787d83187e0d86775ee3f7a3d47f74f29da1ce15c422f866ff5130de8ee0581b61ea933c607cd32c35db5211ec3354d259a0468889e5b7530105c15409fae521427a228735bb9c893d7689ca67ec54dce26d544b3d72b09f4ece3a9dfcc4d6fee61277a151b23bd903d299b9dfe7641d87b5150f7979b2f52639c84a956b53093ef280f27a840bf0c1d9b624a1143c5d1ea307c6570ef651410694449e9131dc56a06ff381b61229ae96a2d3c94a399278b104497cb7cf68e04987a71647041e9a5abb8735e1aab4b6815b6bcea4d40c6d149db26aef8ab4315cdf17fba0ac13740172cdca6ee6eb772ba4ca0fcde4815c087cbe8d52ee9ae834d15b9d9951466916e73b92eb5226a458ca2243ea9cf86c219a3cff6a01c4e217148f8d544a3b91ab79b1e3664f0f240743bd64bb128e23112447f7ec83c1dc9d00d68400c573c317811ee99511440cc34958f4cfa58242f263ea53d56bec98b5a7e96c782ea397ea7c7b95017cfcbad5483d3e18c95e4c4433b92c1c220f5b7432048608fb5b2bba90122f8a9e25465821ece4bf1ede4daa3a69acb394b68b538c6dcacaf403a1dba3155d012a7626b01d35e8bb5081693a4edc878908a5b044ad9667930287c9fcd388ecabaf4fa0baf25c215db054025eae3e4deea0e7812c953118f8e19c8f98c478e11cd4711eb5611519536daa3728b102b2c7b48527f3f8351342cdc81328e9944bb3d243f5c7944db98ff75b33b5611f4e7818ad76c7e6475352cece6b451714eaf3dd80f0759b6dc0943947f1cb20a081b8e7612045c605d07146497dcdccbdc2abfdb3550e579a247c51f6cb85a98c2ec868d5413c37930adee61e0fc60ad1e7da4ccad080597c58e17acc45560030ae9d786c5deba3d71d86242b38df809435ff3857daad862e47eadb44fb624319f7d6ddaf3b07bc3bd7d9d0514860316015394cd22d152df45a1f97e660f626e0980d907934515e1a0abfba3693d0dba08eb3520c7859fe7d8ddbb08a3ceefc4cf29f90d579790587b77456ef46934118b259df62c1474136555555f04f876f2b77d77e2577b2f9ffb65b3fb45aa72c42c8c4f1632bcac7b17f4ce546792772565c0b1cc28d7d6eba84bd9e91a5ff3c96f0e92ccf2ec223b4ec375f2be2f907820475a80eeddf9d971e6ca7bd596488eb0f78a45e9cd51fc5d3c502a251ea7c4a00b136d5f83659e53385c2cb0da2c14c7780ef1d3e1b5e7b8d97d7524f9a02fa4bf99f3ed1f51fe6d0a31d1c67cf17f396edacac7391a918922014574c5d278870b9c114e4eb840a2f0d5eae5c7c812cbf192ada627460a10b8d6c2353ac4a85357115d587d4fe8a6c78c32fc0dd71bbe2050a4b4e8c9e8c32d41e068ad79a07bca0c2bd70ba5e84767936ec44dcf12bd790c4d72d9b55fa46d642949970fcedcc57006ac65da50bf14958f7dbf2acbc2ca25da4d594e8e2bb06dc98ee9973a3cbc17aa1a7c9513f5481c4bf334ca05ef1fb4abd8d8fd990083501a0e0442d8a85a1c0bdebc4034cadcdd3eec4a771e89ed8e6b6c44ee4a6ea8c06dee61a673bb2c3fdcc42850a2308918d15cb3b8ec7fde2f52cad8c7403652ad106707ec20fb4802e65d52452b1ce5c6642a756beedfe198a9fa47d62d07b19eb0ed7886f99bc8e5ecce239a77989d8798215191afa347e7d26133c85b88681041a240608bff517ee6c16aa176b8ff19b6bf95e7e326f823bf665d151577be7350885d11e10596a716836f263ac1266ff46d61b6bc006e4f8ad6b06d8966f51be324e87e6f8f2a53fffeee9c72dd427378b04dad1021719293d7fe4420f2b993fb9edf2d334c9cd1b920623bef3a2654d7079ca39f2572dcde2fba646df1b151c019e2f99a2fe92c0c426831791046f244834315cefd4551491f53d0a5891f3ce137633d2e9c00cfe6e79ce4eaaf22a305186025d2000a43729971a46896ffdd7f63d3d91dac31aa582aa1c3708b103bc76f5ad15b2e8d15f5d3808d94ef92d78493baee8b3639628686f3214813d22d7447350737f1250dceba1f1ff7b3e9c8acb7c81631bbb6b54755c6d21b93e594c11cce5428030e4352c876525a5035743eb05fc58ca2c0eb11deb75c821fa88f3acd79dc4b4fdf606e509e00af5dc26be4ba40da3ec89c7f9ed98ff1107a3ce001abedfb4a6022d8fa2744f9ad2ab304a8b375f6016833ceea1127e7ebe87eec8f0975fbeb549d4185a1e94afe1c7b06bd84803d1f69319eb4e9d5a2acd5851f150de8f5b6143c379fe5f7c8d5e675703bdb9311f1936e4cfdaef9a390ba1eafbaa0612ffff8c1da1d40352a0f9b1deb32efaf9a628e17b45eee2e8599b1b34ad1b42ed9c83c61dc8330273ac3f4dc2a4acbb23379b64b99f3b113b45871ccd0c4cf0bd97779c5a5cfcb753e90f0d3401bd5eda9c2643002d2f60ac15080cbba246070b49610eb097f1f1d07096d40f5fcc809ef4f7106f4a0a50ea26f3f16999fb31b4ea46d3b69e659b4e46334be597cb35473781334cc2e91ea15994de55b8c354bf07d86b06ee1d2a1ea79798a7e83410b78fa9cde099965c9bab1ac446ac33e9b591cfa8cf23548263c5ea95bcf74ed1a570082fbb3c4f4c8230c248c6f741e3b3d3d8db9bb7464575f09a2f06844fd8c5784e0683c358d826aa51759ed218889a43363250224fbf31a96494d1a4e99cd957b9bca7afa7f7b246435eff4f2cf934ec0d56bf6e418539c774b027463b4adc809b2696e1feb61a04b0ae620ae8de08031bf0794b84782b93e78aead08280c39767848ab8c6baf60eeb294d8587cfbc0aacca7a29b449a73584f5e4b1ef8398d61c7bb433321e28e9319a907645799651ddd86fbc72132a29101179b2d59a2a684ded0c1f0d97afcf7366132a1b2ba8b649d2103864eb1e1c982159213554c7dab333bf7c4a8a4bc7e5f0e4b9b5295347c08df31d110b7240be721821b230427fcdce69dd1eca4a95c0738969ceeca66a6e0e26a0362f57881cf8f702ab5f87906da0d5894035567da4582f11331f9d6b8a7b963637a872f95581b01a1967f8b0c673110134be2de021535dd23c495b9ea19dc4f1ce4ca7940df3cac79730db2b8f2731fe0b9bb0071fc6a17814ca963dd46e9085317b43686c07a22fc419fd2139f0b0543b2ea12745d27684e6a570c32375366ebc296befb0b9dc6c808175d4fc1810591cac934240c9a2fff4cd202cac3a33e735a5ca6826f44f3d3168a121b68767aaddbd68b145dd2dc6b3833191f49849f8c66170aecca767d088e5b7df0959ff3fa91100262943d3af2830ae28d963dbb16e2afad2abe540a14a441e5a582fd80d6dfb226632181c0363671a8953746ccf785d008de1a61b549f0614279dbac11fbee788fc6662a1ca675a57600b649ee2a36eecfe164c405331faaf47396b053c82c3438dcd9c3df3f3cf09b85995966593a8841885ee4aacb3e1b963ce6cca144e507d79dcd4fb1cbb4b14b3f72aee8843719c5a26264ae150ea42e4445821f96d681594de0ae9bab86e5d23539a1300036cc815cc27776021bffd3a8fcb24ee567e7fbf4eb0090965b56d733bab7651ee566407f2680fde3ac15dcb53431c22ad5fba7b06990f381b497bbd222fd2fc12f951503c20bda047872a99268f5110b3bc606bc81a3cff9034f054a97383b3795046852c1e05b332c116ba948d970dcf97042c7d4c6b961ad095ec32c7dc4a1098243277bbdaf1ad8ddf68765f837a57182c83f3f4c0267047cc6df9ade3260add04111dbf83d71f2f250aa3bae0e96cef36d2eefb05f58c95326fd52c881637f513f20fd5cde024463ec786b362a53fde3e448c1f4819895a4c2761e50d004395d88a62d3d7a66c42eb7254dca43ecd99ff30b255377e00ee55cd5fda9e5991e0617b269e14f322a11f239674ab57be315cf9692a09b3a97d5eaec854cce32b0e028da31977a03a30d0fc9a7da981fdae5d83ce93e024a8c0ff3229f3d85dade0b81682a8b8c342086ab5bde2841e1ac420a722b2b59445c84a5e1e5cee0d3a1fac2125a476bd710619ec7cb9dca0501c92975ecf0dfa8052fdc2e4d864dcb389ff2b20bc8", 0x1000}, {&(0x7f0000001b00)="c024c73aa62b9f789496a0f95829e84df2fd3f0c05859dbd7c6f93b5bc5491c2826c5c7f8ed9c370af32d64f16ebc17bd57fe7e7f6c5f0467c1d2b83f9c40399aef9a9fad39e6015a5b461a1bd921474edf923be372eb02406c1fea9763e72fad71e9d22304cbf7cc923efd049e3ef0b3a2e6e6f3bf579dba98057cf2b86978b0358f385507112ce56e2f07549218c22c6978b93cea3ef03259e2d7a3c6cd9552e11d1b92690b43a877ef52ae2632eb5ee4d8177905ecf389f883aa1985310eebb5438a4bed45b5b37596216c637131af3bce5fd0e2877ae2d9fcceaa12d75442f2da29334b448ba9ceead13", 0xec}, {&(0x7f0000001c00)="2ee794597f31bbb06b424850f5e9d48cbee1e5106010b022c6e0505b42fe494e67a89247c469685a358d9759abd35ca15bf78465351d11c163c338f03785b658e0c8cc0495bac66ec8d901f3b6ab4917d2e77fc8c158d2bf608943f2f23c5b720df7722527be75a7e359cd301f50d76bf26a745f1bf5dd9f33ec45014bacdd42efc1b7b97c5591fa8fbedaffe70ebbd6e25ce46a1d7dd2c36c48d76f082f834feab100abbb06b3f1630e76df4d544c65f00e3e03c2be22a1d3e86d5f21fcd5017e17a430218a2a", 0xc7}, {&(0x7f0000001d00)="2dab32a448275d6c149a4cba7c386e2baaad8e197962f64a9051e28958f26172eac34366f861250c2d242fb2890c8d7dc4316d85dbc44a2e1cb2ee62666528e3771f458dee81d43db13c3417509696447f328ef834619cb104844ee5ea8f2e48487ae7cf3369d51203706f064b159d3f00c3840517b82600d96a3415f1b3bb25d59238a35cc6b97f8f98a160bfc737f14eeee496544f47af16cc4e0e230b5e533b4fba8c0c473231bfaccb525eed3c79f9c7884838255defaa8164a1939a1ca280fbbe", 0xc3}], 0xa, &(0x7f0000001ec0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x8000}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0x90}}, {{&(0x7f0000001f80)=@pptp={0x18, 0x2, {0x1, @broadcast}}, 0x80, &(0x7f0000002500)=[{&(0x7f0000002000)="52e931fd3af06f46a894e617d6606fcfd99cb5c7616e49a79335b2fef5169454628bdb83d5413458e1ef8379d814b004654e3d15a2539c27494463600c65f21a27bc98c0f3d3a28d312caa3f6ed95f30f25cffd5d87f16a1eda6d8a202a8bba37021bf29cc92e788351e7e20cbe109221cf0eaa843224146c788aa5f411ee24d5c92f7007f987dfa423c0bea64b17a5be853a36c9fe95eac4faad3e87d166a8bae4ed80fc95d102b09804144d8b82312302cc076ddff31e9ecafae7d4e03db74", 0xc0}, {&(0x7f00000020c0)="841634ac937bd4d3a59ae5ea931de255df9e7562f75e5493b78074f81d689160b3f20dc4e1dbabb64cd55feaa31f2a2a042333a1cea2837c6797c43f4014700981b8f3014a2264488f68744b5b2bc7484df31790a233ed9631c3b3a35e909156321df268d9666e35990db1ed76b146f5f800a805a1a0b95e8b", 0x79}, {0xfffffffffffffffd}, {&(0x7f0000002140)="65f9f91c56440035bf24b1b458cbe22966bf5b7f157475759f8ccc3b43dbde48978d2160034a28641b520b474ad0190f84bc0be449ca56b4dfcb0c394543ff6cac42cc329b14a3b9b14beec5397f085a89b627b308a50b77076d796f3f76c58a040592cf064f868fc7ca18766b983fc8608a0c261af3a67088b3d03d0c1abfc434b00e5cc88e60323529964d816cb086f336e98a614949d27b9757aab29e1094f64d8af590281d1c34e7cb5bdd3bb29cf82a0213b2d4", 0xb6}, {&(0x7f0000002200)="999ae229ae315235f77913473f0021ddd336f3a40b7172d31dd5d417e13ec41c2bd1d8a19aa94bd548ad", 0x2a}, {&(0x7f0000002240)="ac45b3e954d1005468baaec89d8836f4129bfb994b6cdde898d8f51256db6ec1452b1514c758db78637f116078538420dc18a5d8c1911d191dcc5b63fa4cef5b1c0a5cb6622daa13b47bfd5fee90a9abde5e16194821db9f32a5ea07914c18a1ac453759a421ea49a94eaac2e520cec25de71d115853b854a7c4f34aaafb5596d7372246db52cf7069228adade11e6a73c2d686accc0310e08608789579f0da329c4eea87fb1462e36b0aeddf4309d0e55e8", 0xb2}, {&(0x7f0000002300)="b42fcfc9427ef4b581085c8c85de65fb09250e86643763ec74533c78c7f01c64e1c568e9007507f46023ddde7c156f7153063cdf5e12acd47845302bafd05b213ace18fb37eb57330980aa5c1298c1c6b6c235b78ca0b4e723517d1001d86b6ac9ca1dbcfa1a61baaa4c", 0x6a}, {&(0x7f0000002380)="51476faa568107c303fa36897c3c63c9a87cab8b971c8cd48893186b55cf424061354136dc7944e514a85712dc918e0aa08d7a16d009a346d12f7ce1f983114d93b027f90f5250789be3083a51b94265a3c202008685000e48a3df3b65cff81d0bcec6b11e9b7d0d844ecabf70ca0b76c4ef811f2eadb901afac3ae25c0f0b577f73b116904b1e8c1c926da06963570890fbe2c4f5469be3f27b0f904540c80734ca5aa434372a53f9a6a7be2713d393f357d53b80ea988b6aca32f3c4d9", 0xbe}, {&(0x7f0000002440)="0892cf7a0431498b812e0e54ca4e672fe5ac7e6dc500140f21089c07a56361d966a8a3a77f9fee6dd4e19553ca7dd7aaef6c7854d2c9add92baa774c6e9a44e8a4c648047cbab5241c756c7f47ecfa58ec2a985988d33dba7c0d7ec87d5d409cdf6f5097098e5ff15d67304d93945f6c330de2d086c41a2ec297dec589d742f3f55f7a6a38c3520e6eb8b3d60b1e0ce6df", 0x91}], 0x9}}, {{&(0x7f00000025c0)=@in6={0xa, 0x4e22, 0x2, @private2, 0x3}, 0x80, &(0x7f0000002840)=[{&(0x7f0000002640)="3c67d8717f9ab91b8cd5682d261c2c32e328b6609d3ce48d3a6d2171c8958db6c2f00994aedf854116a98e61341dcc0e9e9546a6d79bde53a327e5198d1e13f8dcfc1e9ea3a1fd54fe4bf6d9ceaaa5acea0c236548dc199a000734ab5dc8c4de8265b8d3e2203cb17d8f3c10ae97f3aca475aff10352a5ab5c8e3ff5441bd77371c11ee22256e9f1df505b3da6f99187db370110c6a0fdb4c4368a614d868cb0ee7c2fbd187c994a5ec4016ac93f30d538e6e6e98ff552aef42d2d9cbe193e68924079b72567e7daa9a62c", 0xcb}, {&(0x7f0000002740)="d018881265cf15e5e85bd68bb0ae5ebe2a982732deb3c91904cba6ca7054558a7386ea6b2e3fc27b3bb25e608dd326f7b2fa05bd8ea4872c4c339e8249d437033c5d0f227b81c891774ba99775f5a73ced35d629f9e6dd7f35679f8701d199c1a4df063b8bec9ce9313f847c4d516435a3520eadddea851301ae4bc133b3df3e3dae76ea816c686211c860750fe65beed85265ebbccf9f2b3828a55887a75c745910fc0e824b40828aa008861f38f2738c3a4887682a019397e57364c20a50e8500f9ec4bac489e07dfdc57343b312e1797c1f66a1cb43b964d78105c892f41d0091e23808b1ec26d1", 0xe9}], 0x2}}, {{&(0x7f0000002900)=@xdp={0x2c, 0x0, r1, 0x2a}, 0x80, &(0x7f0000003a80)=[{&(0x7f0000002980)="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", 0x1000}, {&(0x7f0000003980)="da1dd1f4ead1321c20400d36c6d52c99e45188f2656739e355247ac46a1dc53517f6c289bd9e53f5b0dc051883f23299bdb6", 0x32}, {&(0x7f00000039c0)="9c75a713617b3cd9181b20ef6c39adbff4e02ebc7f5becae595be014954b34b0075d95c28505566bd1efb0afc4267765af23decda9a1441b847a3f0997dcf7a8520afd3dab6a2bdaee67f5e3a6daca1ad4870faf18a15409cb", 0x59}, {&(0x7f0000003a40)="27340cd77435d74c3640dbbf9d7c66caeebdff7ee028a7bbbba676db3bcce5e1bf4275a673e8b7023e6dd029", 0x2c}], 0x4, &(0x7f0000003ac0)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x85}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x2f6}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x48}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14}}], 0xd8}}], 0x6, 0x90) r2 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000003d40)) r3 = accept$ax25(r2, &(0x7f0000003d80)={{0x3, @bcast}, [@netrom, @bcast, @default, @null, @netrom, @null, @null, @bcast]}, &(0x7f0000003e00)=0x48) r4 = socket$netlink(0x10, 0x3, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000003f00)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x60000084}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x1c, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48004}, 0x8000) r5 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000003f40)='cpu.pressure\x00', 0x2, 0x0) write(r5, &(0x7f0000003f80)="ca16542fe9df3ab05c9b9eae32399f70995603ed16daf9d7dfcdd7f26a5731b1fc05b35347ea56423e4a39078e826e62948ca5cd68541a7053b43c3744b56a2f3cbc4ae5dcaa786a451cad804110f43bbed22e3b321870d9a6545b97444f09d8e38428a0eef44ff04af1152b6587d5279bc1ec49d906c9bfa5d617dedc33fde12ffb4a7648cb9b75ab2e94cf4a01796b43d2b994df", 0x95) bind$netlink(r4, &(0x7f0000004040)={0x10, 0x0, 0x25dfdbfe, 0x4000}, 0xc) write(r2, &(0x7f0000004080)="808287526997faa23cee22fdc910465b6dc7f104d6667a35615707b1bacfaa97539e8f34427b08f86c0809c07f026ab965", 0x31) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f00000040c0), &(0x7f0000004100)=0x30) r6 = socket$netlink(0x10, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000004140)) write$cgroup_pressure(r5, &(0x7f0000004180)={'full', 0x20, 0x4, 0x20, 0x6}, 0x2f) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000004280)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004240)={&(0x7f0000004200)={0x20, 0x9, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) syz_emit_ethernet(0xf2, &(0x7f00000042c0)={@random="bfa6c54cf154", @broadcast, @val={@val={0x88a8, 0x7, 0x0, 0x3}, {0x8100, 0x3, 0x1, 0x3}}, {@llc={0x4, {@snap={0xaa, 0x1, "f4", "97e8aa", 0xa00, "b70706c8fbca5b893a5c9bdd6cb1be83314089e694cee62eefce8dfc67afd4566853d5827f273912ab858ed7223de177dc81cf0b6547aaeb2e9593f108ef9d4c529d3f60852f968dd7ece7d85d200722681b69bedd86c4b38a9e48375b80c74570562f16cb41d61f60db35fd6c9024b18d35567dfa72b0a76a31a84518136d7a7b5886e1d7375c087b224163c0afc6679eedd990f97caa668030c98a2e77e10cb15651112d00941669c2eb49e7aa410a6295c3ee5179045b6feb6189d0fa5721e89002fefec107b2171dc015306916ceb2e5700b"}}}}}, &(0x7f00000043c0)={0x1, 0x4, [0x7c7, 0x2c, 0xe, 0x8cd]}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004440), r4) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000004540)={&(0x7f0000004400)={0x10, 0x0, 0x0, 0xd00300}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)={0x58, r7, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffff5d2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x200010d0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ppoll(&(0x7f0000004580)=[{r4, 0x2212}, {r8, 0x680}, {r5, 0x8400}, {r0, 0x2448}, {r5, 0x70}, {r5, 0x2620}, {r3, 0x5234}, {r4, 0x8008}, {0xffffffffffffffff, 0x2}], 0x9, &(0x7f0000004600)={0x0, 0x3938700}, &(0x7f0000004640)={[0x2]}, 0x8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000004680)=0x800, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f00000046c0)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004740), r6) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f00000048c0)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004880)={&(0x7f0000004780)={0xd4, r9, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0xd4}}, 0x44000) r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r10, 0x400448c9, &(0x7f0000004900)={@none, 0x5}) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000004a80)={&(0x7f0000004980)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004a40)={&(0x7f0000004a00)={0x1c, 0x0, 0x110, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4) 793.789649ms ago: executing program 0 (id=4027): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1a63b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x6a, 0x15, 0x800, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x80, 0x20, 0x1ff, 0x7}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r6, 0xff06, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x3, 0x4, 0x3, 0x10001, 0x280, r3, 0x7, '\x00', r4, r6, 0x3, 0x5, 0x3}, 0x50) r7 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffc}, {0x16}]}, 0x10) sendto$inet6(r7, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) r9 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r9, 0x1, 0x1, &(0x7f00000000c0)={0x5}, 0x4) 640.474026ms ago: executing program 4 (id=4028): r0 = socket(0x2a, 0x2, 0x9) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001004000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x0, 0x0}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x40, 0x1}, &(0x7f0000000000)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r3, 0x5}, &(0x7f00000001c0)=0x8) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r5, 0x29, 0x42, 0x0, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000600)={'veth1_to_bridge\x00'}) sendto$inet6(r0, &(0x7f0000000080)="7800a50018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600008d07000b000a00070849935ade4a460cfd8ebe4c1589b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x7d, 0x220080c1, 0x0, 0x0) 639.815338ms ago: executing program 1 (id=4029): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x79}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x1e}, 0x94) 598.884869ms ago: executing program 3 (id=4030): socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) sendto$inet6(r0, 0x0, 0x0, 0x20044080, &(0x7f0000000040)={0xa, 0x4e22, 0x7fffff7c, @private1, 0xd}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x15, 0x0, &(0x7f0000000000)) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x24, r4, 0x1, 0xfffffffe, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r5, 0x890c, &(0x7f0000000000)={0x4d1ca74502bab1aa, @default, @netrom={'nr', 0x0}, 0x4, 'syz0\x00', @bcast, 0x4, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 570.05032ms ago: executing program 2 (id=4031): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}]}, 0x70}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000100)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x60, 'syz0\x00', "52e140292bc4ac011cf5760b0ac479d265bbbb60494da73e69c8fa63169f6e83", "1b3bc6e5422991791f49e4dd04d6e6cdd7a25ddbfb6786a7fb5e5a79c1005143", [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, {0x0, 0x7}}, {0x0, 0x0, {0x0, 0x2}}]}}}]}, 0x268}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast1, 0x4e23, 0x6, 0x4e20, 0x9, 0xa, 0x80, 0x20, 0x2f, 0x0, 0xee01}, {0x0, 0xffffffffffffffff, 0x2, 0x10, 0x3, 0x7ff, 0xff, 0x16723589}, {0x1, 0x4, 0x2, 0x4}, 0x0, 0x6e6bb5, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast1, 0x4d6, 0xff}, 0xa, @in=@loopback, 0x3501, 0x3, 0x2, 0xb, 0x5, 0x8, 0x29ad}}, 0xe8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6}}]}, 0x30}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x4c, &(0x7f0000000440)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e21, 0x0, @remote}, @in={0x2, 0x0, @empty}]}, &(0x7f0000000280)=0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@updsa={0x104, 0x1a, 0x231, 0x0, 0x0, {{@in6=@private0, @in=@multicast2}, {@in6=@local, 0x1, 0x3c}, @in=@multicast1, {}, {}, {}, 0x0, 0x8000, 0xa}, [@coaddr={0x14, 0xe, @in6=@dev}]}, 0x104}}, 0x4840) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0xf, 0x0, 0x0, 0xfffc]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x10000}]}}]}, 0x98}}, 0x48004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x10) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r10, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000122b000128bd7000fedbdf250800010001000000080015000400000008020300020000000800010000000000"], 0x30}, 0x1, 0x0, 0x0, 0x48008}, 0x4) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000400", @ANYRES32, @ANYBLOB="8c977f33561ea49e9ff2de4178c8eb1643ffe1dac0a26b5b129f456622158743008501e5bd28e3a10eb363b833a9fd6ed6e977514f22d27aab859dadb49494f9e6dd8b6f881a33edca5b89fbaf493989da668b057c9f5bfc00d64f81954e6bce7d54efaf86300f08426277e000c0721d"], 0x1c}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xe}, {0xe, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 500.357689ms ago: executing program 4 (id=4032): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1, &(0x7f0000000400)=ANY=[@ANYRES16=0x0], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000001a80)={0x0, 0x0, {}, {0x0, @struct}}) getsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000180), &(0x7f00000000c0)=0x10) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r4, 0x89f0, &(0x7f0000000000)) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000540)=r0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, r3, 0x25, 0x4, @val=@tcx={@void, @value=r0}}, 0x1c) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000880)=@newqdisc={0x224, 0x24, 0x4, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x10, 0x8}, {0xffe0, 0xfff1}, {0x7, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0xffff, 0x5, 0x2, 0x3, 0x101, 0x2}}, {0x8, 0x2, [0xfe00, 0x800]}}, {{0x1c, 0x1, {0x0, 0x40, 0x9, 0xc, 0x0, 0x6, 0x7, 0x8}}, {0x14, 0x2, [0x4, 0x80, 0x101, 0x7, 0x8, 0x6, 0x8, 0x1f1a]}}, {{0x1c, 0x1, {0x5, 0x9, 0x80, 0x5, 0x0, 0x7, 0x7f, 0x4}}, {0xc, 0x2, [0xc461, 0x7ff, 0x101, 0xbb]}}]}, @TCA_STAB={0x168, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1f, 0xfe, 0xd, 0x4a00000, 0x0, 0x8001, 0x1}}, {0x4}}, {{0x1c, 0x1, {0xff, 0x5, 0x6, 0x2, 0x1, 0x7, 0xf5}}, {0x4}}, {{0x1c, 0x1, {0x2, 0x3, 0x9, 0x5, 0x2, 0x10001, 0x4, 0x8}}, {0x14, 0x2, [0x65b, 0x8, 0x3ff, 0x8, 0x100, 0x400, 0x7, 0x8001]}}, {{0x1c, 0x1, {0xef, 0x0, 0x2, 0x0, 0x1, 0x1, 0xc850, 0x4}}, {0xc, 0x2, [0x7, 0xfff7, 0x7, 0xfff7]}}, {{0x1c, 0x1, {0x0, 0x9, 0x7f, 0x2, 0x2, 0x54, 0xb, 0x8}}, {0x14, 0x2, [0x1, 0x100, 0x6, 0x2, 0x6, 0x81, 0x8, 0x7]}}, {{0x1c, 0x1, {0x40, 0xf9, 0x4, 0xe06, 0x0, 0x3, 0x5881, 0x2}}, {0x8, 0x2, [0x1fce, 0x4a]}}, {{0x1c, 0x1, {0x1, 0xf8, 0x3, 0x8, 0x0, 0x3, 0x4, 0x3}}, {0xa, 0x2, [0x2, 0x9, 0xad]}}, {{0x1c, 0x1, {0x2, 0x8, 0x8001, 0x4, 0x3, 0x6, 0x8, 0x3}}, {0xa, 0x2, [0x2, 0x7, 0x3]}}, {{0x1c, 0x1, {0x6, 0x7f, 0x7f, 0x8, 0x2, 0xd, 0x9, 0x3}}, {0xa, 0x2, [0x2, 0xb, 0x5]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x400}]}, 0x224}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYBLOB="500200059078"], 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x40000001, 0x8, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000c40)={'wpan0\x00', 0x0}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r12, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010025bd7000d11bfbb80823497b08000300", @ANYRES32=r11, @ANYBLOB="04002f80"], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x9}}}}}}}, 0x0) 460.412565ms ago: executing program 1 (id=4033): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x4e) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x44000) 376.916086ms ago: executing program 3 (id=4034): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0xe1a8, @remote, 0x2}}, 0x923, 0x1, 0x3, 0x7, 0x8, 0x5, 0xe}, &(0x7f00000000c0)=0x9c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r1, 0xfff}, 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x20, 0x7800, 0x1, 0x5, {{0xa, 0x4, 0x3, 0xe, 0x28, 0x67, 0x0, 0x9, 0x4, 0x0, @multicast1, @rand_addr=0x64010102, {[@rr={0x7, 0x13, 0xa0, [@empty, @multicast1, @loopback, @empty]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0xe, 0x9, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x7, 0x8, 0x3}}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x120, r3, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x8004) sendto(r2, &(0x7f0000000540)="191fa727709536cbaabaa93e74bcb5cecd53a829bd35ccbf79b5611d64f37835358202c1a71424314d51eb87afbbba3df1b385f1ba6300cac233f50817b08d845bc9648fd64de9bb3386b02b01a8b820f5f7df1a4d6724347f5136297aca02327f74230a25c999bd4eea569a00c67efdce8a174bd6a1086870f333a50c332fdf2518a8bc7f3d1e46128c65ba7d1de2edbf313899ddc9abc0e8791ecad821cc4608a4b3e03b342637bad8297f7d8e690c0f19bd254cf384ac890279f7ba9671aa", 0xc0, 0x10, &(0x7f0000000600)=@pptp={0x18, 0x2, {0x2, @broadcast}}, 0x80) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000001740)={'nat\x00', 0x0, 0x3, 0x1000, [0x4, 0x6, 0xff, 0xe, 0x2, 0x9], 0xa, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000740)=""/4096}, &(0x7f00000017c0)=0x78) r7 = socket$key(0xf, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001840)={r0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000001800), r8) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000001880)=0x1, 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), r8) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x20, r9, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5d}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000001a00)=0x40000) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x68, r10, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '#/].::\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'syztnl1\x00'}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '^\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r11 = accept4$ax25(r8, &(0x7f0000001bc0)={{}, [@rose, @default, @null, @remote, @netrom, @rose, @default, @default]}, &(0x7f0000001c40)=0x48, 0x1000) connect$ax25(r11, &(0x7f0000001c80)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001d40), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(r12, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x2c, r13, 0x804, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000810) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001e80), r12) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000001ec0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r14, &(0x7f0000001fc0)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x60, r15, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x73}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xfb}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x60}}, 0x800) 239.581504ms ago: executing program 1 (id=4035): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x7, @none, 0x73, 0x1}, 0xe) (async, rerun: 64) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x7ff, 0xe1b3, 0x8000, 0x3, 0x3, 0xe, 0xcf}, 0xc) (async, rerun: 64) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) (async, rerun: 64) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000000), 0x4) 160.657902ms ago: executing program 4 (id=4036): syz_emit_ethernet(0x149, &(0x7f00000005c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x13b, 0xffff, 0x0, 0x8, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x5, 0x1]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "994ac449958560879abdc5d2bd70376105891ed5a3a8b8024479a985f4ac824fa2282717740e7a3aa2b37684da48b46e7ca42769c7e632357c8c25234f9512ae0af7bfc92965a2d09ba057f796d2dbc5a6ebd61d4c7c701dd93fdd1720dac0218e58458e8da4a959fbc43bd6c141cfb5afac89cc3f8fdd5a6827b7864c129c249577d8d48ebfa7b272be74499e846b5e7f3274373033689f75caf599de317b8598b47bb3c3287901a669844d7732ed756be044a8eecd37de2f582661f81eb97dad2232fb81390c99bc3d0186b804e26b41e89647f4e567b700000000000000"}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x57}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}}}}}}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xffffff, 0x0, 0x0, 0x4}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="a69c2ec659a3"], 0xfdef) write(r1, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000000000200000800040001000000", 0x24) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x3, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000100)={0x2c, 0x1, '\x00', [@pad1, @pad1, @ra]}, 0x18) r4 = socket(0x27, 0x80805, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x84c1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001140)=@delneigh={0x30, 0x1d, 0x1, 0x70bd2b, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x80}, [@NDA_DST_IPV6={0x14, 0x1, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x804) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000000)=0x4e) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r8}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r7, 0x44e9}, &(0x7f0000000040)=0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32, @ANYBLOB="080001"], 0x48}}, 0x0) 131.040656ms ago: executing program 2 (id=4037): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) (async) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100040000002c0004800500030080ff00000500030080ffffff05000380ff0000000400030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 80.2959ms ago: executing program 1 (id=4038): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@can_newroute={0x164, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "29f764864ce3536c"}}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "38286370efac9bdd"}, 0x1}}, @CGW_CS_CRC8={0x11e, 0x6, {0x4b, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "19bc3340488836aaa131694a4cb097b6acc6773e"}}]}, 0x164}}, 0x0) (async, rerun: 64) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x2}) (rerun: 64) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) (async) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x20}, 0x10) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) sendmmsg$inet6(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001700)='y', 0x1}], 0x1}}], 0x1, 0x0) (async, rerun: 32) close(r1) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) 0s ago: executing program 1 (id=4039): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfb, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'vlan0\x00', 0x1000}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="014054fad7a0bea92d18724097af10810b0829bd70b2424ec1264f1f9f000b6ea10000000000070000000500130c09000000140e08000000000000000000eb000005000000cb14c282ca65466167241c9a3ab4afc345560625aa37bbd46b6f67f3c0dab5c56724dd059db2e97132eded82634e806fcfdc8f06060857e4bf8c6e1fde0c6186bd258eaa83c30ce08bdca5692ec213e3330935d4d06cad07362ccc08a7bead89c9a3422f88f4f2935a00d67210ad55a7ccd00f47c3754408d3d5d67f3ab4fc"], 0x30}}, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r9 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000001380)={'veth0\x00', &(0x7f0000001340)=@ethtool_cmd={0x9, 0x1ff, 0xffff38ce, 0x5, 0x9, 0x7f, 0x2, 0x3, 0x3, 0x3, 0x9, 0x2, 0x6, 0xb4, 0x3, 0x6, [0x9, 0x1]}}) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="9f", 0x1}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x80) kernel console output (not intermixed with test programs): mode [ 329.221240][T14390] team_slave_0: entered promiscuous mode [ 329.226982][T14390] team_slave_1: entered promiscuous mode [ 329.232793][T14390] geneve0: entered promiscuous mode [ 329.272426][T14390] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 329.307806][T14399] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 329.308996][T14390] team0: Device macvtap1 is already an upper device of the team interface [ 329.366991][T14390] team_slave_0: left promiscuous mode [ 329.372613][T14390] team_slave_1: left promiscuous mode [ 329.378234][T14390] geneve0: left promiscuous mode [ 329.881402][T14430] netlink: 'syz.4.2293': attribute type 2 has an invalid length. [ 329.898766][T14430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2293'. [ 330.536946][T14473] 8021q: VLANs not supported on ip_vti0 [ 330.756546][T14479] netlink: 'syz.3.2308': attribute type 1 has an invalid length. [ 331.416241][T14524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2317'. [ 331.599587][T14531] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2319'. [ 331.995599][T14546] netlink: 'syz.4.2322': attribute type 10 has an invalid length. [ 332.023309][T14546] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.043823][T14549] netlink: 'syz.2.2323': attribute type 1 has an invalid length. [ 332.073893][T14546] bond0: (slave team0): Enslaving as an active interface with an up link [ 332.280548][T14557] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2326'. [ 332.458746][T14573] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2331'. [ 332.704238][T14589] tls_set_device_offload_rx: netdev not found [ 332.981614][T14601] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2336'. [ 333.042249][T14604] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2336'. [ 333.137253][T14610] netlink: 'syz.2.2338': attribute type 3 has an invalid length. [ 333.432070][T14620] netlink: 'syz.3.2343': attribute type 2 has an invalid length. [ 333.558945][T14625] __nla_validate_parse: 4 callbacks suppressed [ 333.558970][T14625] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2342'. [ 333.690494][T14632] netlink: 'syz.1.2344': attribute type 10 has an invalid length. [ 333.734855][T14632] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2344'. [ 333.779727][T14632] batadv0: entered promiscuous mode [ 333.835747][T14632] batadv0: entered allmulticast mode [ 333.880094][T14632] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 334.889641][T14677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2356'. [ 334.904394][T14680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2355'. [ 335.123071][T14692] netlink: 'syz.2.2360': attribute type 1 has an invalid length. [ 335.232550][T14692] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2360'. [ 335.280635][T14697] bond13: (slave gretap3): making interface the new active one [ 335.289588][T14697] bond13: (slave gretap3): Enslaving as an active interface with an up link [ 335.315044][T14692] 8021q: adding VLAN 0 to HW filter on device bond13 [ 335.634604][T14709] syzkaller1: entered promiscuous mode [ 335.647202][T14709] syzkaller1: entered allmulticast mode [ 335.719665][T14732] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2367'. [ 335.762595][T14728] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2368'. [ 335.995145][T14747] macvtap4: entered allmulticast mode [ 336.018026][T14747] veth0_macvtap: entered allmulticast mode [ 336.090107][T14752] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2373'. [ 336.135485][T14752] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2373'. [ 336.275439][T14768] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2380'. [ 336.377317][T14774] sch_tbf: burst 88 is lower than device veth9 mtu (1514) ! [ 336.998077][T14818] netlink: 'syz.1.2391': attribute type 62 has an invalid length. [ 337.007527][T14818] netlink: 'syz.1.2391': attribute type 1 has an invalid length. [ 337.087761][T14825] bond23: (slave gretap3): making interface the new active one [ 337.116901][T14825] bond23: (slave gretap3): Enslaving as an active interface with an up link [ 337.145036][T14831] netlink: 'syz.2.2396': attribute type 3 has an invalid length. [ 337.166633][T14831] netlink: 'syz.2.2396': attribute type 3 has an invalid length. [ 337.175290][T14831] netlink: 'syz.2.2396': attribute type 3 has an invalid length. [ 337.184105][T14831] netlink: 'syz.2.2396': attribute type 3 has an invalid length. [ 337.192647][T14831] netlink: 'syz.2.2396': attribute type 3 has an invalid length. [ 337.201098][T14831] netlink: 'syz.2.2396': attribute type 3 has an invalid length. [ 337.211843][T14831] netlink: 'syz.2.2396': attribute type 3 has an invalid length. [ 338.435605][T14882] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.488099][T14882] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.511524][T14882] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 338.756652][T14887] bond0: (slave wlan1): Releasing backup interface [ 338.816294][T14882] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.827238][T14882] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.838517][T14882] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 339.061243][T14882] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.072048][T14882] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.083708][T14882] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 339.161720][T14920] __nla_validate_parse: 4 callbacks suppressed [ 339.161739][T14920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2420'. [ 339.219179][T14882] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.231305][T14882] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.243230][T14882] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 339.396217][T14931] tipc: Enabled bearer , priority 0 [ 339.406950][T14931] syzkaller0: entered promiscuous mode [ 339.413018][T14937] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2424'. [ 339.442789][T14931] syzkaller0: entered allmulticast mode [ 339.514345][T14943] syz_tun: entered allmulticast mode [ 339.586058][ T7040] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.603407][ T7040] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.612544][ T7040] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 339.629712][T14948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2428'. [ 339.661441][T14931] tipc: Resetting bearer [ 339.692413][T14948] veth0_macvtap: left promiscuous mode [ 339.730226][ T7040] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.739357][ T7040] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.747567][ T7040] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 339.757528][T14930] syz_tun: left allmulticast mode [ 339.778686][T14930] tipc: Resetting bearer [ 339.809719][T14930] tipc: Disabling bearer [ 339.821921][ T7037] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.841314][ T7037] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.850210][ T7037] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 339.889673][T14949] macvtap1: entered promiscuous mode [ 339.896130][T14949] macvtap1: entered allmulticast mode [ 339.902216][T14949] team0: Device macvtap1 is already an upper device of the team interface [ 339.929388][T14955] batadv_slave_0: entered promiscuous mode [ 339.935724][ T7037] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.944348][ T7037] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.959723][ T7037] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 340.080863][T14965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2432'. [ 340.113330][ T7037] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 340.130236][T14965] validate_nla: 21 callbacks suppressed [ 340.130260][T14965] netlink: 'syz.3.2432': attribute type 15 has an invalid length. [ 340.148544][ T7037] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 340.160414][T14965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2432'. [ 340.166301][T14968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2433'. [ 340.191638][ T7037] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 340.218488][ T7037] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 340.303674][T14972] tipc: Enabled bearer , priority 0 [ 340.325962][T14972] syzkaller0: entered promiscuous mode [ 340.335289][T14972] syzkaller0: entered allmulticast mode [ 340.364150][T14972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2435'. [ 340.460752][T14954] batadv_slave_0: left promiscuous mode [ 340.487213][T14984] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2439'. [ 340.514828][T14985] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2439'. [ 340.552814][T14972] tipc: Resetting bearer [ 340.576948][T14971] tipc: Resetting bearer [ 340.651846][T14971] tipc: Disabling bearer [ 340.830875][T15002] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2444'. [ 341.052523][T15008] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 341.353224][T15027] netlink: 'syz.1.2452': attribute type 1 has an invalid length. [ 341.444013][T15027] bond24: entered promiscuous mode [ 341.450794][T15027] 8021q: adding VLAN 0 to HW filter on device bond24 [ 341.506423][T15039] 8021q: adding VLAN 0 to HW filter on device bond25 [ 341.522301][T15039] bond24: (slave bond25): making interface the new active one [ 341.530076][T15039] bond25: entered promiscuous mode [ 341.538772][T15039] bond24: (slave bond25): Enslaving as an active interface with an up link [ 341.579908][T15038] IPv6: NLM_F_CREATE should be specified when creating new route [ 341.592599][T15038] netlink: 'syz.4.2454': attribute type 10 has an invalid length. [ 341.622331][T15049] tipc: Enabling of bearer rejected, failed to enable media [ 341.696744][T15053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.719872][T15053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.737169][T15053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.753812][T15053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.771246][T15053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.804345][T15053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.837543][T15053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.855249][T15053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.871388][T15053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.924977][T15053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 342.002589][T15062] netlink: 'syz.3.2464': attribute type 10 has an invalid length. [ 342.054783][T15062] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.075222][T15062] bond0: (slave team0): Enslaving as an active interface with an up link [ 342.138422][ T30] audit: type=1804 audit(1759591933.828:2): pid=15066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2465" name="/newroot/483/memory.events" dev="tmpfs" ino=2484 res=1 errno=0 [ 342.204526][ T30] audit: type=1800 audit(1759591933.828:3): pid=15066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2465" name="memory.events" dev="tmpfs" ino=2484 res=0 errno=0 [ 342.238800][T15069] netlink: 'syz.3.2467': attribute type 1 has an invalid length. [ 342.676615][T15100] 8021q: VLANs not supported on gre0 [ 343.563153][T15149] syzkaller0: entered promiscuous mode [ 343.573675][T15149] syzkaller0: entered allmulticast mode [ 344.631812][T15163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.882578][T15197] __nla_validate_parse: 11 callbacks suppressed [ 344.882601][T15197] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2508'. [ 344.904103][T15163] vlan0: left allmulticast mode [ 344.912211][T15163] veth0_vlan: left allmulticast mode [ 344.918147][T15163] vlan0: left promiscuous mode [ 345.017480][T15203] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2508'. [ 345.175353][ T7043] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.206796][ T7043] netdevsim netdevsim3 eth0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 345.237935][ T7043] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.276830][ T7043] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.286887][ T7043] netdevsim netdevsim3 eth1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 345.301828][ T7043] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.317002][ T7043] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.326894][ T7043] netdevsim netdevsim3 eth2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 345.335442][ T7043] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.360634][T15210] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 345.411270][T15214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2511'. [ 345.475261][T15216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2511'. [ 345.574403][ T7043] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.593356][ T7043] netdevsim netdevsim3 eth3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 345.602747][ T7043] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.660443][T15214] 8021q: adding VLAN 0 to HW filter on device bond10 [ 345.699585][T15232] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 345.706901][T15232] IPv6: NLM_F_CREATE should be set when creating new route [ 345.714258][T15232] IPv6: NLM_F_CREATE should be set when creating new route [ 345.721568][T15232] IPv6: NLM_F_CREATE should be set when creating new route [ 345.760104][T15232] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 345.835008][T15226] netlink: 'syz.2.2515': attribute type 1 has an invalid length. [ 345.982426][T15249] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2517'. [ 346.030243][T15243] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2517'. [ 346.216645][T15243] bond11 (unregistering): Released all slaves [ 346.291751][T15268] unsupported nlmsg_type 40 [ 346.314322][T15249] bond11 (unregistering): Released all slaves [ 346.353512][T15259] tipc: Enabled bearer , priority 10 [ 346.384383][T15262] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2520'. [ 346.405681][T15262] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2520'. [ 346.415359][T15262] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2520'. [ 346.676731][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2524'. [ 346.923480][T15281] net_ratelimit: 25 callbacks suppressed [ 346.923504][T15281] IPv4: Oversized IP packet from 127.202.26.0 [ 347.207067][T15313] netlink: 'syz.4.2533': attribute type 7 has an invalid length. [ 347.220423][T15313] netlink: 'syz.4.2533': attribute type 8 has an invalid length. [ 347.236038][T15307] sctp: [Deprecated]: syz.2.2531 (pid 15307) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.236038][T15307] Use struct sctp_sack_info instead [ 347.837982][ T7037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.853287][ T7037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.219104][T15357] netlink: 'syz.4.2546': attribute type 10 has an invalid length. [ 348.227071][T15357] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 348.245524][T15357] wlan1: mtu greater than device maximum [ 348.254843][T15357] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 348.504217][T15379] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 348.513485][T15379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.832259][T15389] bond9: ARP target 1.0.0.0 is already present [ 348.869896][T15389] bond9: option arp_ip_target: invalid value (1) [ 348.926981][T15389] bond9 (unregistering): Released all slaves [ 348.945582][T15405] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 349.268952][T15426] netlink: 'syz.3.2567': attribute type 2 has an invalid length. [ 349.281619][T15426] netlink: 'syz.3.2567': attribute type 2 has an invalid length. [ 349.577606][T15443] netlink: 'syz.4.2573': attribute type 29 has an invalid length. [ 349.677657][T15450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.732015][T15454] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 350.166955][T15477] bond26: entered allmulticast mode [ 350.212388][T15477] bond27: entered allmulticast mode [ 350.245421][T15477] bond28: entered allmulticast mode [ 350.309969][T15491] __nla_validate_parse: 9 callbacks suppressed [ 350.309989][T15491] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2587'. [ 350.311439][T15477] bond29: entered allmulticast mode [ 350.420619][T15477] bond30: entered allmulticast mode [ 350.426466][T15497] veth0: entered promiscuous mode [ 350.433014][T15503] tipc: Enabling of bearer rejected, failed to enable media [ 350.490647][T15477] bond31: entered allmulticast mode [ 350.501610][T15497] tipc: Enabling of bearer rejected, already enabled [ 350.512469][T15503] netlink: 'syz.3.2590': attribute type 1 has an invalid length. [ 350.533586][T15512] netlink: 'syz.4.2592': attribute type 13 has an invalid length. [ 350.538246][T15503] netlink: 'syz.3.2590': attribute type 1 has an invalid length. [ 350.561370][T15477] bond32: entered allmulticast mode [ 350.589722][T15477] bond33: entered allmulticast mode [ 350.596092][T15512] macvtap0: refused to change device tx_queue_len [ 350.602780][T15497] veth0: left promiscuous mode [ 350.618788][T15497] netlink: 'syz.0.2589': attribute type 11 has an invalid length. [ 350.649321][T15477] bond34: entered allmulticast mode [ 350.679625][T15477] bond35: entered allmulticast mode [ 350.698412][T15524] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2593'. [ 350.726247][T15477] bond36: entered allmulticast mode [ 350.815590][T15477] bond37: entered allmulticast mode [ 350.848872][T15477] bond38: entered allmulticast mode [ 350.900130][T15477] bond39: entered allmulticast mode [ 350.984697][T15477] bond40: entered allmulticast mode [ 351.001399][T15538] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2597'. [ 351.093962][T15550] netlink: 'syz.3.2600': attribute type 1 has an invalid length. [ 351.102924][T15550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2600'. [ 351.234310][T15554] sock: sock_set_timeout: `syz.2.2602' (pid 15554) tries to set negative timeout [ 351.433930][T15570] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2605'. [ 351.567646][T15560] team_slave_0: left promiscuous mode [ 351.574043][T15560] team_slave_1: left promiscuous mode [ 351.827410][T15560] team0 (unregistering): Port device team_slave_0 removed [ 351.843979][T15560] team0 (unregistering): Port device team_slave_1 removed [ 352.114437][T15583] bond11: entered promiscuous mode [ 352.130714][T15589] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2611'. [ 352.168283][T15583] bond11: entered allmulticast mode [ 352.187647][T15583] 8021q: adding VLAN 0 to HW filter on device bond11 [ 352.321422][T15601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2613'. [ 352.335482][T15594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2612'. [ 352.347860][T15601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2613'. [ 352.533099][T15608] xt_l2tp: wrong L2TP version: 0 [ 352.632921][T15614] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2617'. [ 352.750528][T15625] gtp0: entered promiscuous mode [ 352.755533][T15625] gtp0: entered allmulticast mode [ 352.853457][T15633] netlink: 'syz.2.2621': attribute type 12 has an invalid length. [ 352.907511][T15633] bond15: option primary_reselect: invalid value (255) [ 352.917484][T15633] bond15 (unregistering): Released all slaves [ 352.945937][T15636] netlink: 'syz.1.2622': attribute type 1 has an invalid length. [ 353.281716][T15652] netlink: 'syz.1.2626': attribute type 83 has an invalid length. [ 353.460877][T15666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.608025][T15667] syzkaller1: entered promiscuous mode [ 353.613810][T15667] syzkaller1: entered allmulticast mode [ 353.767255][T15678] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 353.974653][T15689] netlink: 'syz.4.2637': attribute type 5 has an invalid length. [ 354.179621][T15706] netlink: 'syz.3.2642': attribute type 3 has an invalid length. [ 354.229730][T15706] netlink: 'syz.3.2642': attribute type 2 has an invalid length. [ 354.238255][T15706] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.913447][T15749] netlink: 'syz.4.2654': attribute type 3 has an invalid length. [ 356.126738][T15743] __nla_validate_parse: 11 callbacks suppressed [ 356.126758][T15743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2652'. [ 356.295469][T15760] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2656'. [ 356.328161][T15760] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2656'. [ 356.554011][T15775] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2660'. [ 356.693608][T15774] bond9: option lp_interval: invalid value (0) [ 356.701431][T15774] bond9: option lp_interval: allowed values 1 - 2147483647 [ 356.720586][T15774] bond9 (unregistering): Released all slaves [ 356.931885][T15798] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2667'. [ 356.998457][T15802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2669'. [ 357.135901][ T7043] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 357.478501][T15832] netlink: 'syz.2.2674': attribute type 39 has an invalid length. [ 357.763526][T15850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.112903][T15862] netlink: 'syz.0.2681': attribute type 5 has an invalid length. [ 358.154340][T15862] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2681'. [ 358.204547][T15862] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2681'. [ 358.223512][T15870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2683'. [ 358.258387][T15864] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2681'. [ 359.167608][T15911] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 359.738597][T15934] netlink: 'syz.2.2703': attribute type 2 has an invalid length. [ 359.764649][T15934] netlink: 'syz.2.2703': attribute type 1 has an invalid length. [ 359.772856][T15934] netlink: 'syz.2.2703': attribute type 2 has an invalid length. [ 359.821554][T15934] netlink: 'syz.2.2703': attribute type 2 has an invalid length. [ 359.852678][T15943] netlink: 'syz.4.2706': attribute type 10 has an invalid length. [ 359.922957][T15943] bond0: (slave team0): Releasing backup interface [ 360.812986][T15985] netlink: 'syz.0.2717': attribute type 1 has an invalid length. [ 360.851977][T15985] netlink: 'syz.0.2717': attribute type 1 has an invalid length. [ 360.861258][T15990] 8021q: VLANs not supported on ip_vti0 [ 360.909225][T15987] tipc: New replicast peer: 255.255.255.255 [ 360.921530][T15987] tipc: Enabled bearer , priority 10 [ 360.928075][T15983] tipc: Enabling of bearer rejected, already enabled [ 361.084782][T15994] netlink: 'syz.3.2720': attribute type 6 has an invalid length. [ 361.712900][T16041] __nla_validate_parse: 11 callbacks suppressed [ 361.712922][T16041] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2732'. [ 361.745625][T16045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.019604][T16049] syz.3.2737 uses old SIOCAX25GETINFO [ 362.086438][T16052] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2738'. [ 362.126406][T16052] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2738'. [ 362.160963][T16052] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2738'. [ 362.216390][T16058] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2738'. [ 362.242149][T16055] netem: change failed [ 362.446278][T16064] pimreg: left allmulticast mode [ 362.574152][T16072] team_slave_0: entered promiscuous mode [ 362.579926][T16072] team_slave_1: entered promiscuous mode [ 362.585619][T16072] geneve0: entered promiscuous mode [ 362.663767][T16072] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 362.703794][T16072] team0: Device macvtap0 is already an upper device of the team interface [ 362.724140][T16072] team_slave_0: left promiscuous mode [ 362.729714][T16072] team_slave_1: left promiscuous mode [ 362.735177][T16072] geneve0: left promiscuous mode [ 362.790646][T16073] team_slave_0: entered promiscuous mode [ 362.796445][T16073] team_slave_1: entered promiscuous mode [ 362.803167][T16073] geneve0: entered promiscuous mode [ 362.829233][T16073] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 362.850942][T16073] team0: Device macvtap0 is already an upper device of the team interface [ 362.902883][T16073] team_slave_0: left promiscuous mode [ 362.908421][T16073] team_slave_1: left promiscuous mode [ 362.913928][T16073] geneve0: left promiscuous mode [ 363.088059][T16090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2747'. [ 363.097131][T16090] openvswitch: netlink: Flow actions attr not present in new flow. [ 363.414180][T16102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2750'. [ 363.469778][T16105] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2751'. [ 363.606796][T16109] syzkaller0: create flow: hash 3529585502 index 1 [ 363.736702][ T7040] syzkaller0: tun_net_xmit 76 [ 363.742455][ T7040] syzkaller0: tun_net_xmit 48 [ 363.753815][T16120] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2755'. [ 363.764851][T10794] syzkaller0: tun_net_xmit 76 [ 363.784372][T16120] tc_dump_action: action bad kind [ 363.833611][T16122] bridge8: entered promiscuous mode [ 363.859954][T16122] bridge8: entered allmulticast mode [ 364.030839][T16125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2757'. [ 364.048706][T16125] validate_nla: 5 callbacks suppressed [ 364.048726][T16125] netlink: 'syz.0.2757': attribute type 12 has an invalid length. [ 364.063606][T16125] netlink: 'syz.0.2757': attribute type 11 has an invalid length. [ 364.081024][T16127] netlink: 'syz.3.2758': attribute type 11 has an invalid length. [ 364.128253][T10794] syzkaller0: tun_net_xmit 76 [ 364.146814][T16107] syzkaller0: delete flow: hash 3529585502 index 1 [ 364.221674][ T30] audit: type=1107 audit(1759591955.928:4): pid=16132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='©ÁmhåÝþ×ÈåédŸåS¢sý6éž\”Ä•B¹éŸÆsŠ*?™îØ·…§iðF-,xyßX?ÊBdK=HëQÙµ/%ï@{ÅðN¢o#À¹‡CÝ#E:²¡Ûp©–‘s“Xb䉥ñdö¶WP´+Û‹1(«æ›à4œM˜àÖ‘L_ü¸¹­FËêOŠx΃±ÈK+=Aún"ÐŽ%*ˆÉÄ…š†¬=$Úç¯ÇZ³7¦E¥ßã|s'ôŸ€œÖ3' [ 364.460500][T16142] nbd: must specify a device to reconfigure [ 366.108183][T16170] bond41: (slave vcan0): The slave device specified does not support setting the MAC address [ 366.120546][T16170] bond41: (slave vcan0): Error -95 calling set_mac_address [ 366.155690][T16174] bond41: (slave vcan0): The slave device specified does not support setting the MAC address [ 366.172265][T16174] bond41: (slave vcan0): Error -95 calling set_mac_address [ 366.502484][T16195] tipc: Enabling of bearer rejected, already enabled [ 366.783578][T16205] wg2: left promiscuous mode [ 367.240570][T16231] __nla_validate_parse: 3 callbacks suppressed [ 367.240591][T16231] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2790'. [ 367.345371][T16236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2791'. [ 367.532164][T16248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2793'. [ 367.701493][ T5848] block nbd1: Receive control failed (result -32) [ 367.785731][T16264] netlink: 'syz.1.2797': attribute type 1 has an invalid length. [ 367.805352][T16264] netlink: 'syz.1.2797': attribute type 2 has an invalid length. [ 367.840323][T16266] IPv6: NLM_F_CREATE should be specified when creating new route [ 367.853836][T16266] netlink: 'syz.3.2798': attribute type 1 has an invalid length. [ 367.862325][T16266] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2798'. [ 367.903178][T16266] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2798'. [ 367.975414][T16271] tipc: Enabled bearer , priority 0 [ 368.000630][T16271] syzkaller0: entered promiscuous mode [ 368.021406][T16271] syzkaller0: entered allmulticast mode [ 368.174484][T16271] tipc: Resetting bearer [ 368.231818][T16269] tipc: Resetting bearer [ 368.290274][T16269] tipc: Disabling bearer [ 368.328492][T16287] openvswitch: netlink: Missing key (keys=40, expected=100) [ 368.447472][T16289] netlink: 'syz.0.2805': attribute type 4 has an invalid length. [ 368.474483][T16290] netlink: 'syz.0.2805': attribute type 4 has an invalid length. [ 369.055637][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 369.066013][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 369.085038][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 369.095115][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 369.103680][T16330] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2815'. [ 369.112146][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 369.514546][T16344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2818'. [ 369.850761][T16323] chnl_net:caif_netlink_parms(): no params data found [ 370.316679][T16386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2827'. [ 370.345025][T16378] bond12: Removing last ns target with arp_interval on [ 370.404114][T16381] netlink: 'syz.1.2829': attribute type 11 has an invalid length. [ 370.412501][T16381] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2829'. [ 370.432987][T16323] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.442634][T16323] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.450157][T16323] bridge_slave_0: entered allmulticast mode [ 370.458760][T16323] bridge_slave_0: entered promiscuous mode [ 370.593194][T16378] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2827'. [ 370.625031][T16323] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.641712][T16323] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.649938][T16323] bridge_slave_1: entered allmulticast mode [ 370.659854][T16323] bridge_slave_1: entered promiscuous mode [ 370.794699][T16407] vlan3: entered promiscuous mode [ 370.801586][T16407] gretap0: entered promiscuous mode [ 370.874753][T16323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.931131][T16323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.173863][T16323] team0: Port device team_slave_0 added [ 371.189391][ T5848] Bluetooth: hci4: command tx timeout [ 371.206035][T16424] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 371.206722][T16323] team0: Port device team_slave_1 added [ 371.221129][T16424] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 371.230564][T16424] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 371.333448][T16323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.343088][T16323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.388940][T16323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.409723][T16323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.417362][T16323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.466165][T16323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.543984][T16440] netlink: 'syz.2.2850': attribute type 21 has an invalid length. [ 371.635292][T16440] bond15: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 371.648890][T16440] bond15 (unregistering): Released all slaves [ 371.758942][T16323] hsr_slave_0: entered promiscuous mode [ 371.778423][T16323] hsr_slave_1: entered promiscuous mode [ 371.792734][T16323] debugfs: 'hsr0' already exists in 'hsr' [ 371.807647][T16323] Cannot create hsr debugfs directory [ 372.254983][T16479] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20004 [ 372.291703][T16480] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20004 [ 372.466754][T16489] __nla_validate_parse: 5 callbacks suppressed [ 372.466775][T16489] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2864'. [ 372.563396][T16494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2866'. [ 372.735184][T16499] bond42: option arp_all_targets: invalid value (18446744073709551613) [ 372.776915][T16499] bond42 (unregistering): Released all slaves [ 372.824052][T16512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2871'. [ 372.837575][T16512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2871'. [ 372.850018][T16512] netlink: 'syz.0.2871': attribute type 20 has an invalid length. [ 372.860755][T16512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2871'. [ 372.870914][T16512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2871'. [ 372.885192][T16512] netlink: 'syz.0.2871': attribute type 20 has an invalid length. [ 373.110089][T16527] netlink: 'syz.4.2873': attribute type 4 has an invalid length. [ 373.211792][T16323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 373.269265][ T5848] Bluetooth: hci4: command tx timeout [ 373.276469][T16323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 373.349175][T16323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 373.369351][T16541] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 373.419715][T16323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 373.699143][T16560] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2878'. [ 373.891771][T16323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.982611][T16323] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.013666][T16579] netlink: 'syz.2.2883': attribute type 1 has an invalid length. [ 374.040851][ T7037] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.048119][ T7037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.060525][T16579] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2883'. [ 374.096151][ T7037] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.103443][ T7037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.122040][T16583] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2887'. [ 374.197070][T16323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 374.278921][T16587] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2888'. [ 374.646312][T16596] netlink: 'syz.1.2889': attribute type 12 has an invalid length. [ 375.040906][T16323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.103042][T16623] netlink: 'syz.0.2895': attribute type 1 has an invalid length. [ 375.270292][T16323] veth0_vlan: entered promiscuous mode [ 375.303164][T16323] veth1_vlan: entered promiscuous mode [ 375.355823][ T5848] Bluetooth: hci4: command tx timeout [ 375.427291][T16323] veth0_macvtap: entered promiscuous mode [ 375.463774][T16641] netlink: 'syz.0.2903': attribute type 1 has an invalid length. [ 375.480793][T16323] veth1_macvtap: entered promiscuous mode [ 375.561826][T16323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.617623][T16323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.666789][ T7043] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.708062][ T7043] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.763151][ T7043] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.790198][ T7043] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.996675][ T7040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.010698][ T7040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.113329][ T7043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.140651][ T7043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.261908][T16684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.803545][T16709] netlink: 'syz.1.2920': attribute type 1 has an invalid length. [ 377.155878][T16729] openvswitch: netlink: EtherType 53b is less than min 600 [ 377.429062][ T5848] Bluetooth: hci4: command tx timeout [ 377.502282][T16748] __nla_validate_parse: 8 callbacks suppressed [ 377.502302][T16748] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2932'. [ 377.614755][T16755] tipc: Enabled bearer , priority 0 [ 377.646391][T16750] syzkaller0: entered promiscuous mode [ 377.672981][T16750] syzkaller0: entered allmulticast mode [ 377.790496][T16751] tipc: Resetting bearer [ 377.986780][T16776] nbd: must specify a device to reconfigure [ 378.056618][T16749] tipc: Resetting bearer [ 378.098614][T16749] tipc: Disabling bearer [ 378.169458][T16792] netlink: 'syz.0.2947': attribute type 1 has an invalid length. [ 378.187971][T16792] netlink: 'syz.0.2947': attribute type 2 has an invalid length. [ 378.198390][T16791] syzkaller1: entered promiscuous mode [ 378.204031][T16791] syzkaller1: entered allmulticast mode [ 378.209811][T16792] netlink: 'syz.0.2947': attribute type 1 has an invalid length. [ 378.222750][T16792] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2947'. [ 378.235808][T16792] netlink: 'syz.0.2947': attribute type 1 has an invalid length. [ 378.571688][ T9221] udevd[9221]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 378.593140][T16808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2952'. [ 378.627744][T16808] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2952'. [ 378.652320][T16811] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2953'. [ 378.661730][T16814] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2955'. [ 378.662941][T16811] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2953'. [ 378.682571][T16814] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2955'. [ 378.691850][T16814] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2955'. [ 378.710517][T16817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2953'. [ 378.749797][T16811] ip6gretap0: entered promiscuous mode [ 378.756903][T16811] syz_tun: entered promiscuous mode [ 378.791460][T16811] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 378.815752][T16820] Bluetooth: MGMT ver 1.23 [ 378.840281][T16811] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 378.854542][T16830] netlink: 'syz.3.2958': attribute type 1 has an invalid length. [ 378.902104][T16817] bond42 (unregistering): Released all slaves [ 379.299966][T16851] netlink: 'syz.3.2961': attribute type 4 has an invalid length. [ 379.641699][T16873] atomic_op ffff88804ee1d198 conn xmit_atomic 0000000000000000 [ 380.115257][T16885] netlink: 'syz.3.2972': attribute type 27 has an invalid length. [ 380.162495][T16885] netlink: 'syz.3.2972': attribute type 4 has an invalid length. [ 383.169722][T16910] __nla_validate_parse: 6 callbacks suppressed [ 383.169743][T16910] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2979'. [ 383.193309][T16907] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 383.212261][T16911] netlink: 'syz.3.2980': attribute type 11 has an invalid length. [ 383.313311][T16910] netlink: 'syz.4.2979': attribute type 16 has an invalid length. [ 383.321326][T16910] netlink: 'syz.4.2979': attribute type 3 has an invalid length. [ 383.329222][T16910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2979'. [ 383.378826][T16916] netlink: 'syz.0.2981': attribute type 1 has an invalid length. [ 383.392918][T16916] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2981'. [ 383.590196][T16928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2983'. [ 383.706338][T16935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2984'. [ 383.746198][T16935] netlink: 'syz.1.2984': attribute type 1 has an invalid length. [ 383.792663][T16935] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2984'. [ 383.842835][T16935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2984'. [ 383.881074][T16944] netlink: 'syz.4.2990': attribute type 1 has an invalid length. [ 384.365490][T16963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 384.454561][T16963] netlink: 'syz.1.2995': attribute type 10 has an invalid length. [ 384.535960][T16969] netlink: 'syz.3.2997': attribute type 4 has an invalid length. [ 384.564473][T16969] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2997'. [ 384.636164][T16969] `: renamed from bond0 (while UP) [ 384.649864][T16973] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2998'. [ 384.690928][T16977] netlink: 'syz.1.2999': attribute type 6 has an invalid length. [ 384.719203][T16977] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2999'. [ 385.089459][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 385.113261][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 385.123764][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 385.137766][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 385.161936][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 385.285941][ T7028] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.321354][ T7028] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.331568][ T7028] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 385.401077][T17015] netlink: 'syz.3.3009': attribute type 1 has an invalid length. [ 385.432845][ T7028] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.492025][ T7028] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.537640][ T7028] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 385.847144][ T7028] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.863443][ T7028] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.881581][ T7028] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 385.993380][T17036] pimreg: entered allmulticast mode [ 386.020417][ T7028] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.059354][ T7028] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.090553][ T7028] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 386.178874][T17047] netlink: 'syz.2.3019': attribute type 11 has an invalid length. [ 386.440935][T17063] IPv4: Oversized IP packet from 127.202.26.0 [ 386.637216][T17068] bond13: (slave gretap3): making interface the new active one [ 386.648248][T17068] bond13: (slave gretap3): Enslaving as an active interface with an up link [ 386.745994][T17077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.928773][T16998] chnl_net:caif_netlink_parms(): no params data found [ 387.182180][ T7028] bridge_slave_1: left allmulticast mode [ 387.192582][ T7028] bridge_slave_1: left promiscuous mode [ 387.201847][ T7028] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.213832][ T7028] bridge_slave_0: left allmulticast mode [ 387.221756][ T7028] bridge_slave_0: left promiscuous mode [ 387.227587][ T7028] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.268046][ T5848] Bluetooth: hci0: command tx timeout [ 387.565764][ T7028] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 387.587288][ T7028] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 387.597812][ T7028] geneve1 (unregistering): left promiscuous mode [ 387.604551][ T7028] geneve1 (unregistering): left allmulticast mode [ 388.102566][ T7028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.113609][ T7028] bond_slave_0: left promiscuous mode [ 388.119457][ T7028] bond_slave_0: left allmulticast mode [ 388.127471][ T7028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.137317][ T7028] bond_slave_1: left promiscuous mode [ 388.143392][ T7028] bond_slave_1: left allmulticast mode [ 388.152177][ T7028] bond0 (unregistering): (slave ÿ): Releasing backup interface [ 388.160551][ T7028] mac80211_hwsim hwsim3 ÿ: left promiscuous mode [ 388.167632][ T7028] mac80211_hwsim hwsim3 ÿ: left allmulticast mode [ 388.182830][ T7028] bond0 (unregistering): Released all slaves [ 388.197258][ T7028] bond1 (unregistering): Released all slaves [ 388.212925][ T7028] bond2 (unregistering): Released all slaves [ 388.227756][ T7028] bond3 (unregistering): Released all slaves [ 388.244089][ T7028] bond4 (unregistering): Released all slaves [ 388.258181][ T7028] bond5 (unregistering): Released all slaves [ 388.276964][ T7028] bond6 (unregistering): Released all slaves [ 388.295226][ T7028] bond7 (unregistering): Released all slaves [ 388.309604][ T7028] bond8 (unregistering): Released all slaves [ 388.326009][ T7028] bond9 (unregistering): Released all slaves [ 388.586038][T16998] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.611864][T16998] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.619315][T16998] bridge_slave_0: entered allmulticast mode [ 388.628865][T16998] bridge_slave_0: entered promiscuous mode [ 388.686073][T16998] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.703803][T16998] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.732824][T16998] bridge_slave_1: entered allmulticast mode [ 388.742104][T16998] bridge_slave_1: entered promiscuous mode [ 388.803620][ T7028] tipc: Disabling bearer [ 388.836709][ T7028] tipc: Disabling bearer [ 388.854406][ T7028] tipc: Left network mode [ 388.966348][ T7028] IPVS: stopping backup sync thread 13487 ... [ 389.069309][T17147] sctp: [Deprecated]: syz.2.3043 (pid 17147) Use of int in max_burst socket option. [ 389.069309][T17147] Use struct sctp_assoc_value instead [ 389.174768][T16998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.233983][T17155] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 389.273992][T16998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.358025][ T5848] Bluetooth: hci0: command tx timeout [ 389.484216][T16998] team0: Port device team_slave_0 added [ 389.510024][T17165] team_slave_0: mtu greater than device maximum [ 389.659240][T16998] team0: Port device team_slave_1 added [ 389.665370][T17174] tipc: Started in network mode [ 389.677501][T17174] tipc: Node identity 667e9077fe7c, cluster identity 4711 [ 389.715203][T17174] tipc: Enabled bearer , priority 0 [ 389.793378][T17165] syzkaller0: entered promiscuous mode [ 389.828021][T17165] syzkaller0: entered allmulticast mode [ 389.973179][T17185] tipc: Resetting bearer [ 390.028308][T17162] tipc: Resetting bearer [ 390.076211][T17162] tipc: Disabling bearer [ 390.095000][T16998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.102645][T16998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.201548][T17192] __nla_validate_parse: 8 callbacks suppressed [ 390.201573][T17192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3053'. [ 390.220275][T16998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.387463][T17191] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 390.500584][T17192] bond15: Invalid ad_actor_system MAC address. [ 390.507087][T17192] bond15: option ad_actor_system: invalid value (1) [ 390.532741][T17192] bond15 (unregistering): Released all slaves [ 390.547715][T17206] validate_nla: 2 callbacks suppressed [ 390.547735][T17206] netlink: 'syz.1.3057': attribute type 32 has an invalid length. [ 390.593657][T16998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.606601][T16998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.642871][T16998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.677298][T17208] netlink: 'syz.4.3058': attribute type 1 has an invalid length. [ 390.964021][T17232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3064'. [ 391.207209][T17232] bond15: Invalid ad_actor_system MAC address. [ 391.214312][T17232] bond15: option ad_actor_system: invalid value (1) [ 391.224672][T17232] bond15 (unregistering): Released all slaves [ 391.260841][T16998] hsr_slave_0: entered promiscuous mode [ 391.267421][T16998] hsr_slave_1: entered promiscuous mode [ 391.276051][T16998] debugfs: 'hsr0' already exists in 'hsr' [ 391.283671][T16998] Cannot create hsr debugfs directory [ 391.309428][ T7028] hsr_slave_0: left promiscuous mode [ 391.316224][ T7028] hsr_slave_1: left promiscuous mode [ 391.324306][ T7028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.333083][ T7028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.346287][ T7028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.356898][ T7028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.372952][ T7028] veth1_macvtap: left promiscuous mode [ 391.379943][ T7028] veth0_macvtap: left promiscuous mode [ 391.428788][ T5848] Bluetooth: hci0: command tx timeout [ 391.524679][ T7028] pim6reg (unregistering): left allmulticast mode [ 392.546808][ T7028] IPVS: stop unused estimator thread 0... [ 392.708102][T16998] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 392.721640][T16998] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 392.736039][T16998] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 392.750667][T16998] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 392.874071][T16998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.898636][T16998] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.914543][ T7026] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.921749][ T7026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.942287][ T7026] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.949476][ T7026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.271289][T16998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.333303][T16998] veth0_vlan: entered promiscuous mode [ 393.354421][T16998] veth1_vlan: entered promiscuous mode [ 393.396140][T16998] veth0_macvtap: entered promiscuous mode [ 393.407692][T16998] veth1_macvtap: entered promiscuous mode [ 393.436532][T16998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.456622][T16998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.475577][ T7028] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.487667][ T7028] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.497606][ T7028] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.510125][ T5848] Bluetooth: hci0: command tx timeout [ 393.528025][ T7028] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.630025][ T7040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.649244][ T7040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.693171][ T7040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.705077][ T7040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.379440][T17299] netlink: 'syz.4.3069': attribute type 1 has an invalid length. [ 413.412593][T17303] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3067'. [ 413.842267][T17318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3073'. [ 414.047193][T17332] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 414.085992][T17334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3077'. [ 414.165074][ T5834] syz_tun (unregistering): left promiscuous mode [ 414.196189][T17337] veth0: entered promiscuous mode [ 414.228696][T17334] bond0: entered promiscuous mode [ 414.243346][T17334] bond_slave_0: entered promiscuous mode [ 414.257400][T17334] bond_slave_1: entered promiscuous mode [ 414.267764][T17334] bond0: left promiscuous mode [ 414.278756][T17334] bond_slave_0: left promiscuous mode [ 414.292942][T17334] bond_slave_1: left promiscuous mode [ 414.316693][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 414.328045][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 414.336419][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 414.344885][T17333] veth0: left promiscuous mode [ 414.385047][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 414.403052][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 414.527572][T17358] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3083'. [ 414.576750][T17359] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3084'. [ 415.397029][T17384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3090'. [ 415.557743][T17384] syzkaller0: entered promiscuous mode [ 415.567177][T17384] syzkaller0: entered allmulticast mode [ 416.478792][ T5848] Bluetooth: hci1: command tx timeout [ 417.204984][T17415] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 417.319403][T17346] chnl_net:caif_netlink_parms(): no params data found [ 417.350127][T17420] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.3101'. [ 417.378904][T17420] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.3101'. [ 417.504734][T17423] tipc: Enabled bearer , priority 0 [ 417.510005][T17429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3104'. [ 417.522972][T17429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3104'. [ 417.576980][T17422] syzkaller0: entered promiscuous mode [ 417.585689][T17422] syzkaller0: entered allmulticast mode [ 417.673983][T17346] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.689433][T17346] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.701303][T17346] bridge_slave_0: entered allmulticast mode [ 417.734726][T17346] bridge_slave_0: entered promiscuous mode [ 417.793595][T17346] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.817926][T17346] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.838124][T17346] bridge_slave_1: entered allmulticast mode [ 417.846191][T17346] bridge_slave_1: entered promiscuous mode [ 417.881821][T17421] tipc: Resetting bearer [ 417.915587][T17421] tipc: Disabling bearer [ 417.946923][T17346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.000625][T17444] bond1 (unregistering): Released all slaves [ 418.059815][T17346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.077604][T17447] gtp0: entered promiscuous mode [ 418.092652][T17447] gtp0: entered allmulticast mode [ 418.240262][T17346] team0: Port device team_slave_0 added [ 418.266524][T17346] team0: Port device team_slave_1 added [ 418.362744][T17346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.376216][T17346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.441071][T17471] __nla_validate_parse: 4 callbacks suppressed [ 418.441093][T17471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3111'. [ 418.444872][T17346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.490358][T17346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.504690][T17346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.551305][ T5848] Bluetooth: hci1: command tx timeout [ 418.576922][T17346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.748918][T17346] hsr_slave_0: entered promiscuous mode [ 418.755861][T17478] netlink: 165 bytes leftover after parsing attributes in process `syz.4.3114'. [ 418.782686][T17346] hsr_slave_1: entered promiscuous mode [ 418.800640][T17346] debugfs: 'hsr0' already exists in 'hsr' [ 418.812895][T17346] Cannot create hsr debugfs directory [ 418.989186][T17492] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3118'. [ 419.049756][T17500] vxcan1: tx address claim with dest, not broadcast [ 419.124548][T17499] vxlan0: entered promiscuous mode [ 419.138207][T17499] vxlan0: entered allmulticast mode [ 419.156401][ T7028] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.205908][ T7028] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.313826][ T7028] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.442679][ T7028] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.483822][T17525] netlink: 'syz.4.3124': attribute type 13 has an invalid length. [ 419.596544][T17530] netlink: 'syz.0.3127': attribute type 1 has an invalid length. [ 419.735517][T17525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.994982][T17525] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.009466][T17525] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 420.037633][T17512] tipc: Enabled bearer , priority 0 [ 420.055612][T17531] syzkaller0: entered promiscuous mode [ 420.063057][T17531] syzkaller0: entered allmulticast mode [ 420.074114][T17544] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 420.154686][T17548] tipc: Resetting bearer [ 420.221974][T17346] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.246940][T17510] tipc: Resetting bearer [ 420.263527][T17510] tipc: Disabling bearer [ 420.391774][T17346] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.602497][T17346] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.603066][T17559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3134'. [ 420.636766][ T5848] Bluetooth: hci1: command tx timeout [ 420.654248][T17559] netlink: 'syz.3.3134': attribute type 13 has an invalid length. [ 420.654249][T17561] vlan0: entered promiscuous mode [ 420.670639][T17559] netlink: 'syz.3.3134': attribute type 58 has an invalid length. [ 420.729322][T17559] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3134'. [ 420.745875][T17346] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.915133][T17578] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.964732][T17578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3139'. [ 421.029767][ T5926] af_packet: tpacket_rcv: packet too big, clamped from 96 to 4294967272. macoff=96 [ 421.147282][T17576] syzkaller0: entered promiscuous mode [ 421.153774][T17576] syzkaller0: entered allmulticast mode [ 421.542684][ T7037] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 422.220244][T17614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.289932][T17615] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3146'. [ 422.715225][ T5848] Bluetooth: hci1: command tx timeout [ 422.786029][T17605] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 422.903458][T17346] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 422.967194][T17346] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 422.983296][T17623] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3147'. [ 422.989183][T17346] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 423.045891][T17346] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 423.132713][T17630] tipc: Enabled bearer , priority 0 [ 423.140413][T17630] syzkaller0: entered promiscuous mode [ 423.155483][T17630] syzkaller0: entered allmulticast mode [ 423.238267][T17630] tipc: Resetting bearer [ 423.276385][T17629] tipc: Resetting bearer [ 423.329464][T17629] tipc: Disabling bearer [ 423.538107][T17346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.606844][T17346] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.665531][ T7021] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.672774][ T7021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.805339][ T7037] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.812633][ T7037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.078590][T17346] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 424.099997][T17684] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 424.114928][T15201] IPVS: starting estimator thread 0... [ 424.218235][T17686] IPVS: using max 24 ests per chain, 57600 per kthread [ 424.530745][T17346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.632178][T17346] veth0_vlan: entered promiscuous mode [ 424.656363][T17709] tipc: Enabled bearer , priority 0 [ 424.679767][T17709] syzkaller0: entered promiscuous mode [ 424.695712][T17709] syzkaller0: entered allmulticast mode [ 424.714123][T17709] tipc: Resetting bearer [ 424.728488][T17708] tipc: Resetting bearer [ 424.762834][T17708] tipc: Disabling bearer [ 424.802944][T17346] veth1_vlan: entered promiscuous mode [ 424.876935][T17346] veth0_macvtap: entered promiscuous mode [ 424.890193][T17346] veth1_macvtap: entered promiscuous mode [ 424.918173][T17346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.951965][T17346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.984438][ T7040] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.008524][ T7040] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.020835][T17724] netlink: 'syz.3.3172': attribute type 4 has an invalid length. [ 425.034934][ T7040] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.053382][ T7040] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.227313][T17735] netlink: 'syz.4.3174': attribute type 1 has an invalid length. [ 425.279617][T17735] 8021q: adding VLAN 0 to HW filter on device bond15 [ 425.281295][T17738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3174'. [ 425.290796][T17734] !€ÿ: renamed from bond_slave_0 (while UP) [ 425.312754][ T7043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.323652][ T7043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.564118][T17738] bond15 (unregistering): Released all slaves [ 425.718555][ T7041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.728609][T17754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3181'. [ 425.744691][ T7041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.119983][T17778] vlan2: entered allmulticast mode [ 426.254491][T17787] veth1_macvtap: left promiscuous mode [ 426.268012][T17787] macsec0: entered promiscuous mode [ 426.385411][T17789] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3189'. [ 426.437345][T17794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.543854][T17800] netlink: 'syz.4.3193': attribute type 83 has an invalid length. [ 426.555497][T17801] netlink: 'syz.4.3193': attribute type 5 has an invalid length. [ 426.641860][T17798] netem: unknown loss type 0 [ 426.646907][T17798] netem: change failed [ 426.823915][T17810] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3195'. [ 426.855551][T17813] netlink: 'syz.0.3198': attribute type 12 has an invalid length. [ 426.955414][T17813] bond1: option primary_reselect: invalid value (255) [ 427.010134][T17813] bond1 (unregistering): Released all slaves [ 427.082262][T17822] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3200'. [ 427.125692][T17821] xfrm1: entered allmulticast mode [ 427.141735][T17824] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3200'. [ 427.182150][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 427.192055][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 427.202164][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 427.224780][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 427.233058][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 427.670603][T17843] sctp: [Deprecated]: syz.3.3207 (pid 17843) Use of int in maxseg socket option. [ 427.670603][T17843] Use struct sctp_assoc_value instead [ 427.783430][T17847] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3209'. [ 428.026483][T17851] netlink: 'syz.1.3211': attribute type 10 has an invalid length. [ 428.060126][T17851] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.068841][T17851] bridge_slave_1: left allmulticast mode [ 428.074604][T17851] bridge_slave_1: left promiscuous mode [ 428.080797][T17851] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.104404][T17851] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 428.153758][T17858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3214'. [ 428.193543][T17858] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3214'. [ 428.249754][T17864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3214'. [ 428.441704][ T7043] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.452679][ T7043] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.502542][ T7043] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.512692][ T7043] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.596119][T17826] chnl_net:caif_netlink_parms(): no params data found [ 428.646005][T17877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.785052][T17885] xt_policy: too many policy elements [ 428.812234][T17885] netlink: 'syz.1.3219': attribute type 11 has an invalid length. [ 428.841274][T17826] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.850674][T17826] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.877587][T17826] bridge_slave_0: entered allmulticast mode [ 428.900490][T17826] bridge_slave_0: entered promiscuous mode [ 428.924950][T17826] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.971420][T17826] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.995599][T17826] bridge_slave_1: entered allmulticast mode [ 429.026918][T17826] bridge_slave_1: entered promiscuous mode [ 429.104218][T17901] vlan2: entered allmulticast mode [ 429.156153][T17903] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 429.168373][T17903] bond1: option packets_per_slave: allowed values 0 - 65535 [ 429.179204][T17903] bond1 (unregistering): Released all slaves [ 429.285203][T17826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.350723][ T5848] Bluetooth: hci3: command tx timeout [ 429.366361][T17826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.515669][T17826] team0: Port device team_slave_0 added [ 429.597508][T17826] team0: Port device team_slave_1 added [ 429.777157][T17826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.808879][T17826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.913371][T17826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.941082][T17826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.963680][T17955] netlink: 'syz.1.3238': attribute type 10 has an invalid length. [ 429.968553][T17826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.045630][T17826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.084224][T17955] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 430.200520][T17963] 8021q: adding VLAN 0 to HW filter on device bond1 [ 430.230937][T17955] bond_slave_0: entered promiscuous mode [ 430.236884][T17955] bond_slave_1: entered promiscuous mode [ 430.243550][T17955] bridge_slave_1: entered promiscuous mode [ 430.249594][T17955] syz_tun: entered promiscuous mode [ 430.277544][T17955] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 430.300992][T17955] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 430.474925][T17979] __nla_validate_parse: 2 callbacks suppressed [ 430.474947][T17979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3242'. [ 430.517763][T17979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3242'. [ 430.622571][T17988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3243'. [ 430.658928][T17988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3243'. [ 430.697609][T17826] hsr_slave_0: entered promiscuous mode [ 430.721297][T17826] hsr_slave_1: entered promiscuous mode [ 430.732284][T17991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3244'. [ 430.738002][T17826] debugfs: 'hsr0' already exists in 'hsr' [ 430.757137][T17826] Cannot create hsr debugfs directory [ 431.054662][T18007] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3248'. [ 431.103725][T18007] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3248'. [ 431.361035][T18017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3251'. [ 431.428502][ T5848] Bluetooth: hci3: command tx timeout [ 431.684139][T18043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3255'. [ 431.708832][T18043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3255'. [ 431.861659][T17826] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.874346][T17826] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.919463][T17826] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 431.938741][T18051] netlink: 'syz.4.3258': attribute type 1 has an invalid length. [ 432.123356][T17826] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode [ 432.174244][T17826] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.229512][T17826] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.258868][T17826] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 432.467351][T17826] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.512821][T18081] netlink: 'syz.0.3265': attribute type 2 has an invalid length. [ 432.521652][T17826] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.547092][T17826] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 433.193191][T17826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 433.254446][T17826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 433.293370][T17826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 433.355718][T17826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 433.425350][T18131] x_tables: ip6_tables: TEE.1 target: invalid size 40 (kernel) != (user) 56 [ 433.464687][T18131] !: renamed from dummy0 (while UP) [ 433.508338][ T5848] Bluetooth: hci3: command tx timeout [ 433.802971][T17826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.887374][T17826] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.931368][ T7040] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.938592][ T7040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.002483][ T7028] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.009806][ T7028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.529145][T18184] bond0: option ad_select: unable to set because the bond device is up [ 434.552694][T17826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.632336][T18184] bond1: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 434.647751][T18184] bond1: entered promiscuous mode [ 434.655482][T18184] bond1: entered allmulticast mode [ 434.662132][T18184] 8021q: adding VLAN 0 to HW filter on device bond1 [ 434.760941][T18185] bond2: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 434.805780][T18185] bond2: entered promiscuous mode [ 434.822494][T18185] bond2: entered allmulticast mode [ 434.830485][T18185] 8021q: adding VLAN 0 to HW filter on device bond2 [ 435.075715][T17826] veth0_vlan: entered promiscuous mode [ 435.209592][T17826] veth1_vlan: entered promiscuous mode [ 435.317527][T17826] veth0_macvtap: entered promiscuous mode [ 435.347475][T17826] veth1_macvtap: entered promiscuous mode [ 435.409312][T17826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.462788][T17826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.549383][ T7041] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.571279][ T7041] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.588322][ T5848] Bluetooth: hci3: command tx timeout [ 435.627148][ T7041] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.646570][ T7041] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.933732][T18244] __nla_validate_parse: 9 callbacks suppressed [ 435.933752][T18244] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3298'. [ 435.952060][ T7043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.968850][ T7043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.994145][T18244] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3298'. [ 436.036597][T18244] gretap1: entered promiscuous mode [ 436.044233][T18244] gretap1: entered allmulticast mode [ 436.112492][ T7043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.141585][ T7043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.276989][T18297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.333179][T18297] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3314'. [ 437.520811][T18310] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3318'. [ 437.582178][T18315] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3318'. [ 437.656599][T18310] gretap0: entered promiscuous mode [ 437.776264][T18315] 0ªî{X¹¦: renamed from gretap0 [ 437.813010][T18315] 0ªî{X¹¦: left promiscuous mode [ 437.841230][T18315] 0ªî{X¹¦: entered allmulticast mode [ 437.881362][T18315] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 437.925672][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 437.935077][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 437.943013][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 437.959733][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 437.967546][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 438.091953][T18332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3324'. [ 438.144174][T18332] bridge_slave_1: left allmulticast mode [ 438.181016][T18332] bridge_slave_1: left promiscuous mode [ 438.187352][T18332] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.245833][T18341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3326'. [ 438.290496][T18342] netlink: 'syz.3.3326': attribute type 8 has an invalid length. [ 438.320647][T18332] bridge_slave_0: left promiscuous mode [ 438.326503][T18332] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.344909][T18341] netlink: 'syz.3.3326': attribute type 8 has an invalid length. [ 438.425933][T18348] IPVS: ip_vs_add_dest(): server weight less than zero [ 438.439818][T10794] IPVS: starting estimator thread 0... [ 438.529642][T18351] IPVS: using max 26 ests per chain, 62400 per kthread [ 438.610598][T18355] nbd3: detected capacity change from 0 to 127 [ 438.626432][ T5848] block nbd3: Receive control failed (result -32) [ 438.641431][T17307] block nbd3: Dead connection, failed to find a fallback [ 438.669852][T17307] block nbd3: shutting down sockets [ 438.677763][T18357] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3330'. [ 438.707033][T17307] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 438.738929][T17307] Buffer I/O error on dev nbd3, logical block 0, async page read [ 438.752476][T17307] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 438.762766][T17307] Buffer I/O error on dev nbd3, logical block 1, async page read [ 438.772675][T17307] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 438.783895][T17307] Buffer I/O error on dev nbd3, logical block 2, async page read [ 438.796339][T17307] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 438.807014][T17307] Buffer I/O error on dev nbd3, logical block 3, async page read [ 438.821807][T18365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3331'. [ 438.825386][T17307] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 438.846385][T17307] Buffer I/O error on dev nbd3, logical block 0, async page read [ 438.855273][T17307] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 438.865532][T17307] Buffer I/O error on dev nbd3, logical block 1, async page read [ 438.879987][T17307] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 438.890910][T17307] Buffer I/O error on dev nbd3, logical block 2, async page read [ 438.903259][T17307] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 438.924466][T17307] Buffer I/O error on dev nbd3, logical block 3, async page read [ 438.944987][T17307] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 438.966304][T17307] Buffer I/O error on dev nbd3, logical block 0, async page read [ 438.987567][T17307] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 439.003944][T17307] Buffer I/O error on dev nbd3, logical block 1, async page read [ 439.013306][T18365] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3331'. [ 439.015811][T17307] ldm_validate_partition_table(): Disk read failed. [ 439.043302][T17307] Dev nbd3: unable to read RDB block 0 [ 439.052410][T17307] nbd3: unable to read partition table [ 439.074284][T17307] ldm_validate_partition_table(): Disk read failed. [ 439.092645][T17307] Dev nbd3: unable to read RDB block 0 [ 439.103943][T17307] nbd3: unable to read partition table [ 439.216454][T18327] chnl_net:caif_netlink_parms(): no params data found [ 439.990299][ T5848] Bluetooth: hci2: command tx timeout [ 440.054534][T18327] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.062064][T18327] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.071474][T18327] bridge_slave_0: entered allmulticast mode [ 440.080821][T18327] bridge_slave_0: entered promiscuous mode [ 440.162514][T18415] tc_dump_action: action bad kind [ 440.169738][T18327] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.177002][T18327] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.200281][T18327] bridge_slave_1: entered allmulticast mode [ 440.213049][T18327] bridge_slave_1: entered promiscuous mode [ 440.236952][T18421] netlink: 'syz.3.3341': attribute type 1 has an invalid length. [ 440.439317][T18434] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 3, id = 0 [ 440.462792][T18327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.497315][T18327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.599702][T18431] netlink: 'syz.2.3345': attribute type 10 has an invalid length. [ 440.726868][T18327] team0: Port device team_slave_0 added [ 440.751485][T18327] team0: Port device team_slave_1 added [ 440.812011][T18327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.819755][T18327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.851233][T18327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.872546][T18438] tipc: Enabled bearer , priority 0 [ 440.886055][T18441] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode [ 440.894032][T18441] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode [ 440.902845][T18327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.910229][T18327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.939908][T18327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.970079][T18438] tipc: Resetting bearer [ 441.080152][T18327] hsr_slave_0: entered promiscuous mode [ 441.087169][T18327] hsr_slave_1: entered promiscuous mode [ 441.094281][T18327] debugfs: 'hsr0' already exists in 'hsr' [ 441.100748][T18327] Cannot create hsr debugfs directory [ 441.223851][T18451] __nla_validate_parse: 7 callbacks suppressed [ 441.223872][T18451] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3352'. [ 441.329098][T18454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3353'. [ 441.393208][T18458] lo speed is unknown, defaulting to 1000 [ 441.421569][T18458] lo speed is unknown, defaulting to 1000 [ 441.459159][T18454] netlink: 'syz.2.3353': attribute type 7 has an invalid length. [ 441.459924][T18458] lo speed is unknown, defaulting to 1000 [ 441.467162][T18454] netlink: 'syz.2.3353': attribute type 7 has an invalid length. [ 441.497202][T18454] netlink: 'syz.2.3353': attribute type 7 has an invalid length. [ 441.511067][T18454] netlink: 'syz.2.3353': attribute type 7 has an invalid length. [ 441.520252][T18454] netlink: 'syz.2.3353': attribute type 7 has an invalid length. [ 441.535119][T18454] netlink: 'syz.2.3353': attribute type 7 has an invalid length. [ 441.949731][T10794] tipc: Node number set to 2550304887 [ 442.072689][ T5848] Bluetooth: hci2: command tx timeout [ 442.137502][T18458] infiniband syz0: set active [ 442.142760][ T5926] lo speed is unknown, defaulting to 1000 [ 442.154746][T18475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3361'. [ 442.176107][T18458] infiniband syz0: added lo [ 442.190468][T18458] syz0: rxe_create_cq: returned err = -12 [ 442.210999][T18458] infiniband syz0: Couldn't create ib_mad CQ [ 442.227440][T18458] infiniband syz0: Couldn't open port 1 [ 442.393616][T18458] RDS/IB: syz0: added [ 442.466481][T18458] lo speed is unknown, defaulting to 1000 [ 442.595914][T18327] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 442.624356][T18327] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 442.632188][T18486] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3364'. [ 442.671389][T18327] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 442.712215][T18488] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3365'. [ 442.720835][T18327] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 443.066198][T18507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3369'. [ 443.181553][T18327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.249666][T18327] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.285639][T18520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3372'. [ 443.301976][ T996] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.309196][ T996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.323661][T18458] lo speed is unknown, defaulting to 1000 [ 443.491420][ T7041] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.498670][ T7041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.711178][T18542] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3377'. [ 443.845844][T18546] validate_nla: 27 callbacks suppressed [ 443.845864][T18546] netlink: 'syz.3.3380': attribute type 32 has an invalid length. [ 443.874669][T18546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3380'. [ 443.925585][T18552] netlink: 'syz.2.3379': attribute type 4 has an invalid length. [ 443.962341][T18546] bond2: option coupled_control: invalid value (52) [ 443.972835][T18546] bond2 (unregistering): Released all slaves [ 444.051163][T18458] lo speed is unknown, defaulting to 1000 [ 444.151791][ T5848] Bluetooth: hci2: command tx timeout [ 444.360714][T18565] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3385'. [ 444.430563][T18561] netlink: 'syz.1.3383': attribute type 10 has an invalid length. [ 444.445303][T18327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.497428][T18561] mac80211_hwsim hwsim39 wlan1: entered promiscuous mode [ 444.506121][T18561] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 444.532852][T18558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.816077][T18458] lo speed is unknown, defaulting to 1000 [ 445.799677][T18327] veth0_vlan: entered promiscuous mode [ 445.832574][T18458] lo speed is unknown, defaulting to 1000 [ 445.876653][T18327] veth1_vlan: entered promiscuous mode [ 446.027132][T18327] veth0_macvtap: entered promiscuous mode [ 446.055113][T18327] veth1_macvtap: entered promiscuous mode [ 446.167296][T18327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.229807][ T5848] Bluetooth: hci2: command tx timeout [ 446.238921][T18327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.265409][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.335769][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.360535][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.430335][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.566329][T18458] lo speed is unknown, defaulting to 1000 [ 446.742356][ T7041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.770525][ T7041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.835517][T18646] netlink: 'syz.2.3402': attribute type 1 has an invalid length. [ 446.925717][T18646] 8021q: adding VLAN 0 to HW filter on device bond1 [ 446.947527][ T7028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.967250][ T7028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.006367][T18653] veth3: entered promiscuous mode [ 447.022548][T18653] bond1: (slave veth3): Enslaving as an active interface with an up link [ 447.074454][T18458] lo speed is unknown, defaulting to 1000 [ 447.112163][T18656] __nla_validate_parse: 3 callbacks suppressed [ 447.112185][T18656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3404'. [ 447.149916][T18656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3404'. [ 447.629723][T18458] lo speed is unknown, defaulting to 1000 [ 447.743129][T18683] netlink: 'syz.4.3413': attribute type 1 has an invalid length. [ 447.780220][T18685] delete_channel: no stack [ 447.964307][T18691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3416'. [ 448.046474][T18458] lo speed is unknown, defaulting to 1000 [ 448.309784][ T5848] Bluetooth: hci2: command tx timeout [ 448.501561][T18718] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3419'. [ 448.586633][T18725] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3420'. [ 448.641777][T18725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3420'. [ 448.692962][T18728] netlink: 'syz.3.3421': attribute type 30 has an invalid length. [ 448.967932][T18738] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3423'. [ 448.996581][T18742] openvswitch: netlink: Message has 4 unknown bytes. [ 449.028173][T18744] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3427'. [ 449.124099][T18753] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3429'. [ 449.176872][T18754] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3428'. [ 449.680763][T18784] netlink: 'syz.0.3439': attribute type 10 has an invalid length. [ 450.062643][T18802] syzkaller1: entered promiscuous mode [ 450.092221][T18802] syzkaller1: entered allmulticast mode [ 450.344167][T18808] dvmrp0: entered allmulticast mode [ 450.561145][T18816] lo: entered allmulticast mode [ 450.572747][T18816] lo: left allmulticast mode [ 451.278895][T18797] lo speed is unknown, defaulting to 1000 [ 452.226499][T18888] !: renamed from dummy0 (while UP) [ 452.380870][T18900] __nla_validate_parse: 4 callbacks suppressed [ 452.380891][T18900] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3474'. [ 452.860428][T18923] dvmrp0: entered allmulticast mode [ 452.897268][T18909] dvmrp0: left allmulticast mode [ 452.932933][T18931] IPVS: length: 233 != 8 [ 453.061407][T18938] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3481'. [ 453.082197][T18938] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3481'. [ 453.105231][T18938] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3481'. [ 453.418511][T18945] netlink: 'syz.1.3483': attribute type 1 has an invalid length. [ 453.455961][T18945] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3483'. [ 453.508486][T18949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3486'. [ 453.877152][T18980] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3493'. [ 453.892193][T18981] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3493'. [ 453.997712][T18985] netlink: 'syz.1.3494': attribute type 32 has an invalid length. [ 454.038254][T18985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3494'. [ 454.085528][T18988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3495'. [ 454.194806][T18985] bond2: Setting coupled_control to off (0) [ 454.203716][T18993] netlink: 'syz.2.3496': attribute type 1 has an invalid length. [ 454.296903][T18993] bond2: entered promiscuous mode [ 454.328303][T18993] 8021q: adding VLAN 0 to HW filter on device bond2 [ 454.405947][T18996] 8021q: adding VLAN 0 to HW filter on device bond3 [ 454.417247][T18996] bond2: (slave bond3): making interface the new active one [ 454.427208][T18996] bond3: entered promiscuous mode [ 454.433433][T18996] bond2: (slave bond3): Enslaving as an active interface with an up link [ 454.443346][T18999] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 454.543189][T19004] syzkaller1: entered promiscuous mode [ 454.550002][T19004] syzkaller1: entered allmulticast mode [ 454.569993][T19008] netlink: 'syz.2.3499': attribute type 3 has an invalid length. [ 454.586502][T19010] netlink: 'syz.2.3499': attribute type 3 has an invalid length. [ 454.703920][T19013] openvswitch: netlink: Flow actions attr not present in new flow. [ 456.213389][T19036] lo speed is unknown, defaulting to 1000 [ 456.555193][T19094] netlink: 'syz.0.3523': attribute type 1 has an invalid length. [ 456.592242][T19094] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 456.797736][T19107] netlink: 'syz.4.3528': attribute type 1 has an invalid length. [ 456.905301][T19108] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 456.924040][T19057] lo speed is unknown, defaulting to 1000 [ 457.634974][T19143] sctp: [Deprecated]: syz.2.3538 (pid 19143) Use of int in maxseg socket option. [ 457.634974][T19143] Use struct sctp_assoc_value instead [ 457.952493][T19156] __nla_validate_parse: 4 callbacks suppressed [ 457.952517][T19156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3542'. [ 458.224190][T19160] netlink: 'syz.4.3544': attribute type 3 has an invalid length. [ 458.253776][T19160] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3544'. [ 458.817696][T19180] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3550'. [ 458.902792][T19183] xfrm1: entered allmulticast mode [ 459.420750][T19217] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.3560'. [ 459.734684][T19229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.057214][T19247] bond3: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 460.074978][T19247] bond3: entered promiscuous mode [ 460.081657][T19247] bond3: entered allmulticast mode [ 460.087457][T19247] 8021q: adding VLAN 0 to HW filter on device bond3 [ 460.182419][T19259] C: renamed from lo (while UP) [ 460.203993][T19261] netlink: 'syz.3.3571': attribute type 12 has an invalid length. [ 460.218068][T19261] netlink: 'syz.3.3571': attribute type 29 has an invalid length. [ 460.242284][T19261] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3571'. [ 460.266681][T19261] netlink: 59 bytes leftover after parsing attributes in process `syz.3.3571'. [ 460.426534][T19272] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3575'. [ 460.606757][T19274] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.614370][T19274] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.723583][T19274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.740450][T19274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.874743][T19274] veth3: left promiscuous mode [ 460.883782][T19274] bond2: left promiscuous mode [ 460.889894][T19274] bond3: left promiscuous mode [ 460.909416][T19268] IPv6: sit1: Disabled Multicast RS [ 460.917233][T19268] sit1: entered allmulticast mode [ 460.973934][ T7037] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.995855][ T7037] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.018208][ T7037] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.052505][ T7037] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.089135][T19287] veth1_to_bond: entered allmulticast mode [ 461.209581][T19295] netlink: 'syz.0.3582': attribute type 1 has an invalid length. [ 461.220496][T19287] veth1_to_bond: left allmulticast mode [ 461.228398][T19295] netlink: 'syz.0.3582': attribute type 1 has an invalid length. [ 461.297460][T19300] netlink: 'syz.2.3584': attribute type 28 has an invalid length. [ 461.307398][T19300] netlink: 'syz.2.3584': attribute type 3 has an invalid length. [ 461.316141][T19300] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3584'. [ 461.470150][T19313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3588'. [ 461.487616][T19314] netlink: 'syz.1.3589': attribute type 10 has an invalid length. [ 461.497415][T19313] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 461.506091][T19313] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3588'. [ 461.636133][T19326] netlink: 'syz.4.3592': attribute type 9 has an invalid length. [ 461.937096][T19339] netlink: 'syz.4.3596': attribute type 10 has an invalid length. [ 462.060490][T19344] 8021q: adding VLAN 0 to HW filter on device bond4 [ 462.291468][T19360] GUP no longer grows the stack in syz.2.3603 (19360): 200000006000-200000008000 (200000005000) [ 462.305691][T19312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.317565][T19360] CPU: 0 UID: 0 PID: 19360 Comm: syz.2.3603 Not tainted syzkaller #0 PREEMPT(full) [ 462.317597][T19360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 462.317620][T19360] Call Trace: [ 462.317629][T19360] [ 462.317638][T19360] dump_stack_lvl+0x189/0x250 [ 462.317675][T19360] ? __pfx_dump_stack_lvl+0x10/0x10 [ 462.317703][T19360] ? __pfx__printk+0x10/0x10 [ 462.317735][T19360] ? find_vma+0xe7/0x160 [ 462.317782][T19360] __get_user_pages+0x24d0/0x2ce0 [ 462.317804][T19360] ? __lock_acquire+0xab9/0xd20 [ 462.317854][T19360] ? __gup_longterm_locked+0xc63/0x1660 [ 462.317887][T19360] __gup_longterm_locked+0xde4/0x1660 [ 462.317928][T19360] ? sanity_check_pinned_pages+0x123a/0x1300 [ 462.317962][T19360] gup_fast_fallback+0x1e6a/0x2010 [ 462.318026][T19360] ? __pfx_gup_fast_fallback+0x10/0x10 [ 462.318051][T19360] ? __pfx_css_rstat_updated+0x10/0x10 [ 462.318077][T19360] ? rcu_read_lock_sched_held+0x89/0x100 [ 462.318112][T19360] ? pin_user_pages_fast+0x4d/0xb0 [ 462.318139][T19360] iov_iter_extract_pages+0x35a/0x5e0 [ 462.318176][T19360] extract_iter_to_sg+0xe46/0x24e0 [ 462.318229][T19360] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 462.318265][T19360] ? __local_bh_enable_ip+0x12d/0x1c0 [ 462.318289][T19360] ? lockdep_hardirqs_on+0x9c/0x150 [ 462.318326][T19360] ? __local_bh_enable_ip+0x12d/0x1c0 [ 462.318348][T19360] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 462.318378][T19360] ? __asan_memset+0x22/0x50 [ 462.318409][T19360] hash_sendmsg+0x4f4/0x11d0 [ 462.318463][T19360] ? __pfx_hash_sendmsg+0x10/0x10 [ 462.318491][T19360] __sock_sendmsg+0x219/0x270 [ 462.318528][T19360] ____sys_sendmsg+0x52d/0x830 [ 462.318561][T19360] ? __pfx_____sys_sendmsg+0x10/0x10 [ 462.318599][T19360] ? import_iovec+0x74/0xa0 [ 462.318627][T19360] ___sys_sendmsg+0x21f/0x2a0 [ 462.318657][T19360] ? __pfx____sys_sendmsg+0x10/0x10 [ 462.318726][T19360] ? __fget_files+0x2a/0x420 [ 462.318754][T19360] ? __fget_files+0x3a0/0x420 [ 462.318796][T19360] __sys_sendmmsg+0x227/0x430 [ 462.318829][T19360] ? __pfx___sys_sendmmsg+0x10/0x10 [ 462.318853][T19360] ? do_futex+0x333/0x420 [ 462.318893][T19360] ? fd_install+0x97/0x540 [ 462.318944][T19360] ? rcu_is_watching+0x15/0xb0 [ 462.318977][T19360] __x64_sys_sendmmsg+0xa0/0xc0 [ 462.319006][T19360] do_syscall_64+0xfa/0x3b0 [ 462.319027][T19360] ? lockdep_hardirqs_on+0x9c/0x150 [ 462.319060][T19360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.319082][T19360] ? clear_bhb_loop+0x60/0xb0 [ 462.319109][T19360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.319130][T19360] RIP: 0033:0x7f9b06f8eec9 [ 462.319150][T19360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.319171][T19360] RSP: 002b:00007f9b07ef9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 462.319195][T19360] RAX: ffffffffffffffda RBX: 00007f9b071e5fa0 RCX: 00007f9b06f8eec9 [ 462.319211][T19360] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000007 [ 462.319225][T19360] RBP: 00007f9b07011f91 R08: 0000000000000000 R09: 0000000000000000 [ 462.319239][T19360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.319252][T19360] R13: 00007f9b071e6038 R14: 00007f9b071e5fa0 R15: 00007ffd3dd8ca78 [ 462.319287][T19360] [ 463.185289][T19400] netlink: 'syz.2.3614': attribute type 1 has an invalid length. [ 463.212518][T19404] __nla_validate_parse: 5 callbacks suppressed [ 463.212539][T19404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3615'. [ 463.388814][T19411] bond5: (slave gretap1): making interface the new active one [ 463.397382][T19411] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 463.438616][T19420] netlink: 'syz.4.3619': attribute type 25 has an invalid length. [ 463.630448][T19429] syzkaller0: refused to change device tx_queue_len [ 463.685771][T19436] Bluetooth: MGMT ver 1.23 [ 463.922792][T19455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3627'. [ 463.941864][T19456] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3630'. [ 463.969694][T19456] netlink: 21 bytes leftover after parsing attributes in process `syz.1.3630'. [ 463.997167][T19456] netlink: 21 bytes leftover after parsing attributes in process `syz.1.3630'. [ 464.036957][T19464] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3630'. [ 464.347535][T19476] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3636'. [ 464.347667][T19480] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3639'. [ 464.451067][ T7026] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 464.470106][ T7026] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 464.479553][ T5926] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 464.638668][T10794] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 464.732347][T19504] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 464.732387][T19504] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 464.767518][T19509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3643'. [ 464.791136][T19508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3645'. [ 464.876765][T19509] macvtap1: entered promiscuous mode [ 464.882382][T19509] vlan0: entered promiscuous mode [ 464.888612][T19509] macvtap1: entered allmulticast mode [ 464.894527][T19509] vlan0: entered allmulticast mode [ 464.900697][T19509] veth0_vlan: entered allmulticast mode [ 465.341630][T19536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.354683][T10794] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 465.385178][T19538] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 465.916065][T19559] Bluetooth: MGMT ver 1.23 [ 465.956147][T19565] netlink: 'syz.4.3664': attribute type 1 has an invalid length. [ 465.967433][T19564] sctp: [Deprecated]: syz.2.3663 (pid 19564) Use of struct sctp_assoc_value in delayed_ack socket option. [ 465.967433][T19564] Use struct sctp_sack_info instead [ 466.005090][T19566] sctp: [Deprecated]: syz.2.3663 (pid 19566) Use of struct sctp_assoc_value in delayed_ack socket option. [ 466.005090][T19566] Use struct sctp_sack_info instead [ 466.346313][T19543] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 466.829534][T10787] C speed is unknown, defaulting to 1000 [ 467.740126][T19658] netlink: 'syz.0.3694': attribute type 10 has an invalid length. [ 467.773668][T19658] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.803409][T19658] bond0: (slave team0): Enslaving as an active interface with an up link [ 467.858953][T19658] netlink: 'syz.0.3694': attribute type 3 has an invalid length. [ 467.879737][T19664] netlink: 'syz.0.3694': attribute type 10 has an invalid length. [ 468.135504][T19686] netlink: 'syz.0.3700': attribute type 5 has an invalid length. [ 468.135925][T19678] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 468.173687][T19678] bond2 (unregistering): Released all slaves [ 468.228245][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 468.293262][T19688] team0: Port device geneve2 added [ 468.306814][ T996] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.333714][ T996] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.342797][ T996] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.365050][ T996] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.492588][T19702] netlink: 'syz.1.3706': attribute type 10 has an invalid length. [ 468.514827][T19702] veth1_macvtap: left promiscuous mode [ 468.594725][T19693] syz.3.3702 (19693) used greatest stack depth: 17864 bytes left [ 468.656027][T19709] __nla_validate_parse: 20 callbacks suppressed [ 468.656048][T19709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3709'. [ 468.767128][T19717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3710'. [ 468.796925][T19717] bridge_slave_0: left promiscuous mode [ 468.834763][T19717] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.019226][T19722] macvtap1: entered promiscuous mode [ 469.024940][T19722] vlan0: entered promiscuous mode [ 469.032251][T19722] macvtap1: entered allmulticast mode [ 469.039485][T19722] vlan0: entered allmulticast mode [ 469.044737][T19722] veth0_vlan: entered allmulticast mode [ 469.058985][T19730] C: renamed from lo [ 469.142598][T19735] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3716'. [ 469.405020][T19745] can: request_module (can-proto-5) failed. [ 469.515363][ T996] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xcc [ 469.542595][T19764] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3725'. [ 469.616782][T19768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3725'. [ 469.654196][T19768] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3725'. [ 469.784234][T19772] syzkaller0: entered promiscuous mode [ 469.790052][T19772] syzkaller0: entered allmulticast mode [ 471.546006][T19782] tipc: Enabling of bearer rejected, already enabled [ 471.950966][T19821] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3739'. [ 472.400339][T19843] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3744'. [ 472.499897][T19849] pimreg: entered allmulticast mode [ 472.676647][T19861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3752'. [ 472.952224][T19862] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 473.027722][T19862] bond2: (slave vcan1): Error -95 calling set_mac_address [ 473.279250][T19885] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3759'. [ 473.427472][T19895] netlink: 'syz.1.3763': attribute type 29 has an invalid length. [ 473.463260][T19896] netlink: 'syz.1.3763': attribute type 29 has an invalid length. [ 473.483440][T19896] netlink: 'syz.1.3763': attribute type 29 has an invalid length. [ 473.506916][T19896] netlink: 'syz.1.3763': attribute type 29 has an invalid length. [ 473.534582][T19896] netlink: 'syz.1.3763': attribute type 29 has an invalid length. [ 473.559376][T19896] netlink: 'syz.1.3763': attribute type 29 has an invalid length. [ 473.689780][T19910] netlink: 'syz.0.3768': attribute type 11 has an invalid length. [ 473.697655][T19910] __nla_validate_parse: 3 callbacks suppressed [ 473.697674][T19910] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3768'. [ 474.147086][T19950] ip6gre2: entered allmulticast mode [ 474.390867][T19965] netlink: 'syz.3.3785': attribute type 10 has an invalid length. [ 474.419092][T19965] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3785'. [ 474.449011][T19965] dummy0: entered promiscuous mode [ 474.454999][T19965] bridge0: port 3(dummy0) entered blocking state [ 474.496588][T19965] bridge0: port 3(dummy0) entered disabled state [ 474.509840][T19965] dummy0: entered allmulticast mode [ 474.522312][T19965] bridge0: port 3(dummy0) entered blocking state [ 474.528916][T19965] bridge0: port 3(dummy0) entered forwarding state [ 474.544423][T19974] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3788'. [ 474.884281][T20001] netlink: 'syz.4.3796': attribute type 1 has an invalid length. [ 475.144558][T20013] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3800'. [ 475.178353][T20016] netlink: 'syz.1.3801': attribute type 4 has an invalid length. [ 475.609169][T20043] netlink: 'syz.2.3808': attribute type 13 has an invalid length. [ 475.631330][T20043] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3808'. [ 475.652993][T20046] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3809'. [ 475.759228][T20052] siw: device registration error -23 [ 475.989913][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 476.112659][T20081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3817'. [ 476.449414][ T7040] tipc: Subscription rejected, illegal request [ 476.675793][T20097] syzkaller0: entered promiscuous mode [ 476.690279][T20097] syzkaller0: entered allmulticast mode [ 476.726991][T20108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3826'. [ 476.830789][T20121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3828'. [ 478.329505][ T7037] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.338020][T20108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3826'. [ 478.349335][ T996] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.378638][ T996] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.411536][ T996] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.769038][T20147] validate_nla: 4 callbacks suppressed [ 478.769058][T20147] netlink: 'syz.3.3838': attribute type 9 has an invalid length. [ 478.788967][T10787] IPVS: starting estimator thread 0... [ 478.833321][T20147] netlink: 'syz.3.3838': attribute type 6 has an invalid length. [ 478.849823][T20147] netlink: 'syz.3.3838': attribute type 7 has an invalid length. [ 478.868692][T20147] netlink: 'syz.3.3838': attribute type 8 has an invalid length. [ 478.902464][T20148] IPVS: using max 25 ests per chain, 60000 per kthread [ 479.271625][T20172] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3843'. [ 479.311587][T20178] netlink: 'syz.0.3848': attribute type 64 has an invalid length. [ 479.323342][T20172] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3843'. [ 479.338671][T20178] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3848'. [ 479.360636][T20178] netlink: 'syz.0.3848': attribute type 1 has an invalid length. [ 479.384718][T20178] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3848'. [ 479.434598][T20185] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3851'. [ 479.437301][T20176] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3847'. [ 479.863249][T20203] netlink: 'syz.1.3855': attribute type 10 has an invalid length. [ 479.883798][T20203] batman_adv: batadv0: Adding interface: team0 [ 479.891889][T20203] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.917943][T20203] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 480.109098][T20219] netlink: 'syz.3.3860': attribute type 2 has an invalid length. [ 480.134963][T20220] pimreg: entered allmulticast mode [ 480.181096][T20219] : entered promiscuous mode [ 480.403000][T20230] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3862'. [ 480.613536][T20250] tipc: Enabling of bearer rejected, failed to enable media [ 480.634390][T20252] ipvlan0: default FDB implementation only supports local addresses [ 481.015683][T20264] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 481.031555][T20264] bond3 (unregistering): Released all slaves [ 481.082066][T20268] geneve3: entered promiscuous mode [ 481.089340][T20268] geneve3: entered allmulticast mode [ 481.255972][T20272] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.273747][T20272] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.378143][ T996] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 481.395832][ T996] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 481.436492][ T996] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 481.596939][T20296] netlink: 'syz.4.3876': attribute type 10 has an invalid length. [ 481.616930][T20296] openvswitch: netlink: Flow key attr not present in new flow. [ 481.623891][T20300] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3877'. [ 481.860883][T20307] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3879'. [ 481.918673][T20307] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3879'. [ 482.020812][T20312] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 482.033564][T20316] 8021q: VLANs not supported on ip6tnl0 [ 482.041080][T20315] 8021q: VLANs not supported on ip6tnl0 [ 482.275844][T20332] netlink: 'syz.1.3886': attribute type 1 has an invalid length. [ 482.706619][T20361] Unsupported ieee802154 address type: 0 [ 482.719206][T20354] macvtap1: entered promiscuous mode [ 482.740977][T20354] vlan0: entered promiscuous mode [ 482.746562][T20354] macvtap1: entered allmulticast mode [ 482.752415][T20354] vlan0: entered allmulticast mode [ 482.757749][T20354] veth0_vlan: entered allmulticast mode [ 483.023487][T20378] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 483.254523][T20272] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.266818][T20272] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.305080][T20272] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 483.502673][T20272] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.513963][T20272] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.524830][T20272] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 483.622087][T20272] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.653958][T20272] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.696532][T20272] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 483.942659][T20419] bond3: invalid ARP target 0.0.0.0 specified for addition [ 483.951406][T20419] bond3: option arp_ip_target: invalid value (0) [ 483.961651][T20419] bond3 (unregistering): Released all slaves [ 484.088869][ T7040] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.097112][ T7040] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 484.130861][ T7040] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 484.167098][ T7040] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.176672][ T7040] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 484.190603][ T7040] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 484.226082][ T7040] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.240955][ T7040] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 484.250535][ T7040] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 484.280170][T20435] validate_nla: 7 callbacks suppressed [ 484.280195][T20435] netlink: 'syz.2.3915': attribute type 1 has an invalid length. [ 484.314163][ T7040] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.323755][ T7040] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 484.332977][ T7040] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 484.450051][T20436] bond6 (unregistering): Released all slaves [ 484.566635][T20435] bond6: entered promiscuous mode [ 484.573363][T20435] 8021q: adding VLAN 0 to HW filter on device bond6 [ 485.389945][T20502] __nla_validate_parse: 11 callbacks suppressed [ 485.389966][T20502] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3932'. [ 486.950704][T20493] tipc: Started in network mode [ 486.955624][T20493] tipc: Node identity ca096f174856, cluster identity 4711 [ 486.963717][T20493] tipc: Enabled bearer , priority 0 [ 486.971666][T20498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3934'. [ 486.991780][T20490] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3932'. [ 487.002138][T20503] syzkaller0: entered promiscuous mode [ 487.007662][T20503] syzkaller0: entered allmulticast mode [ 487.100177][T20503] tipc: Resetting bearer [ 487.180143][T20503] tipc: Disabling bearer [ 487.340348][T20537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3942'. [ 487.427197][T20542] bridge2: entered promiscuous mode [ 487.439543][T20542] bridge2: entered allmulticast mode [ 487.631166][T20552] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3949'. [ 487.661540][T20552] netlink: 25 bytes leftover after parsing attributes in process `syz.0.3949'. [ 487.699447][T20552] gretap0: entered allmulticast mode [ 487.866759][T20567] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3953'. [ 487.889475][T20569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.898806][T20572] tipc: Enabling of bearer rejected, failed to enable media [ 488.137279][T20587] netlink: 'syz.2.3961': attribute type 23 has an invalid length. [ 488.236863][T20589] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3963'. [ 488.297043][T20589] syzkaller1: entered promiscuous mode [ 488.303955][T20589] syzkaller1: entered allmulticast mode [ 488.565005][T20604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3967'. [ 488.663051][T20610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3969'. [ 488.960107][T20629] tipc: Started in network mode [ 488.971771][T20629] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 489.004398][T20629] tipc: Enabled bearer , priority 12 [ 489.012462][T20629] netlink: 'syz.1.3974': attribute type 1 has an invalid length. [ 489.074773][T20632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.313334][T20651] netlink: zone id is out of range [ 489.319151][T20651] netlink: zone id is out of range [ 489.324302][T20651] netlink: zone id is out of range [ 489.347854][T20651] netlink: zone id is out of range [ 489.360529][T20651] netlink: get zone limit has 8 unknown bytes [ 489.463789][T20651] bridge_slave_1: left allmulticast mode [ 489.469921][T20651] bridge_slave_1: left promiscuous mode [ 489.486000][T20651] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.526559][T20651] bridge_slave_0: left allmulticast mode [ 489.552286][T20651] bridge_slave_0: left promiscuous mode [ 489.614205][T20651] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.774235][T20680] netlink: 'syz.3.3988': attribute type 2 has an invalid length. [ 489.783203][T20680] netlink: 'syz.3.3988': attribute type 1 has an invalid length. [ 490.118247][ T5974] tipc: Node number set to 10070698 [ 490.445330][T20721] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.833380][T20741] netlink: 'syz.0.4005': attribute type 16 has an invalid length. [ 490.879876][T20741] __nla_validate_parse: 4 callbacks suppressed [ 490.879900][T20741] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4005'. [ 490.932298][T20752] netlink: 'syz.1.4008': attribute type 1 has an invalid length. [ 491.013355][T20752] 8021q: adding VLAN 0 to HW filter on device bond3 [ 491.199220][T20766] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4012'. [ 491.348441][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 491.373299][T20776] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4013'. [ 491.436029][T20776] team0: Device gtp0 is of different type [ 491.939574][T20807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4023'. [ 492.656564][T20851] sctp: [Deprecated]: syz.3.4034 (pid 20851) Use of struct sctp_assoc_value in delayed_ack socket option. [ 492.656564][T20851] Use struct sctp_sack_info instead [ 492.883015][T20865] [ 492.885405][T20865] ====================================================== [ 492.892438][T20865] WARNING: possible circular locking dependency detected [ 492.899488][T20865] syzkaller #0 Not tainted [ 492.903918][T20865] ------------------------------------------------------ [ 492.910946][T20865] syz.2.4037/20865 is trying to acquire lock: [ 492.917024][T20865] ffffffff8f21a298 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 492.926378][T20865] [ 492.926378][T20865] but task is already holding lock: [ 492.933764][T20865] ffff88803a9dc670 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 492.943111][T20865] [ 492.943111][T20865] which lock already depends on the new lock. [ 492.943111][T20865] [ 492.953517][T20865] [ 492.953517][T20865] the existing dependency chain (in reverse order) is: [ 492.962554][T20865] [ 492.962554][T20865] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 492.970570][T20865] lock_acquire+0x120/0x360 [ 492.975600][T20865] _raw_spin_lock_bh+0x36/0x50 [ 492.980899][T20865] nr_rt_device_down+0x12a/0x720 [ 492.986359][T20865] nr_device_event+0x137/0x150 [ 492.991656][T20865] notifier_call_chain+0x1b6/0x3e0 [ 492.997308][T20865] __dev_notify_flags+0x18d/0x2e0 [ 493.002868][T20865] netif_change_flags+0xe8/0x1a0 [ 493.008344][T20865] dev_change_flags+0x130/0x260 [ 493.013729][T20865] dev_ioctl+0x7b4/0x1150 [ 493.018577][T20865] sock_do_ioctl+0x22c/0x300 [ 493.023700][T20865] sock_ioctl+0x576/0x790 [ 493.028568][T20865] __se_sys_ioctl+0xfc/0x170 [ 493.033681][T20865] do_syscall_64+0xfa/0x3b0 [ 493.038705][T20865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.045140][T20865] [ 493.045140][T20865] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 493.052967][T20865] lock_acquire+0x120/0x360 [ 493.057991][T20865] _raw_spin_lock_bh+0x36/0x50 [ 493.063282][T20865] nr_rt_device_down+0xa9/0x720 [ 493.068654][T20865] nr_device_event+0x137/0x150 [ 493.073944][T20865] notifier_call_chain+0x1b6/0x3e0 [ 493.079577][T20865] __dev_notify_flags+0x18d/0x2e0 [ 493.085127][T20865] netif_change_flags+0xe8/0x1a0 [ 493.090583][T20865] dev_change_flags+0x130/0x260 [ 493.095964][T20865] dev_ioctl+0x7b4/0x1150 [ 493.100812][T20865] sock_do_ioctl+0x22c/0x300 [ 493.105930][T20865] sock_ioctl+0x576/0x790 [ 493.110786][T20865] __se_sys_ioctl+0xfc/0x170 [ 493.115920][T20865] do_syscall_64+0xfa/0x3b0 [ 493.121037][T20865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.127452][T20865] [ 493.127452][T20865] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 493.135380][T20865] validate_chain+0xb9b/0x2140 [ 493.140668][T20865] __lock_acquire+0xab9/0xd20 [ 493.145861][T20865] lock_acquire+0x120/0x360 [ 493.150880][T20865] _raw_spin_lock_bh+0x36/0x50 [ 493.156174][T20865] nr_remove_neigh+0x25/0xe0 [ 493.161287][T20865] nr_add_node+0x1d9f/0x2570 [ 493.166397][T20865] nr_rt_ioctl+0xc12/0xd50 [ 493.171336][T20865] sock_do_ioctl+0xdc/0x300 [ 493.176378][T20865] sock_ioctl+0x576/0x790 [ 493.181248][T20865] __se_sys_ioctl+0xfc/0x170 [ 493.186363][T20865] do_syscall_64+0xfa/0x3b0 [ 493.191390][T20865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.197804][T20865] [ 493.197804][T20865] other info that might help us debug this: [ 493.197804][T20865] [ 493.208031][T20865] Chain exists of: [ 493.208031][T20865] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 493.208031][T20865] [ 493.221859][T20865] Possible unsafe locking scenario: [ 493.221859][T20865] [ 493.229305][T20865] CPU0 CPU1 [ 493.234663][T20865] ---- ---- [ 493.240025][T20865] lock(&nr_node->node_lock); [ 493.244790][T20865] lock(nr_node_list_lock); [ 493.251904][T20865] lock(&nr_node->node_lock); [ 493.259186][T20865] lock(nr_neigh_list_lock); [ 493.263868][T20865] [ 493.263868][T20865] *** DEADLOCK *** [ 493.263868][T20865] [ 493.272007][T20865] 1 lock held by syz.2.4037/20865: [ 493.277116][T20865] #0: ffff88803a9dc670 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 493.286884][T20865] [ 493.286884][T20865] stack backtrace: [ 493.292776][T20865] CPU: 0 UID: 0 PID: 20865 Comm: syz.2.4037 Not tainted syzkaller #0 PREEMPT(full) [ 493.292802][T20865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 493.292815][T20865] Call Trace: [ 493.292823][T20865] [ 493.292832][T20865] dump_stack_lvl+0x189/0x250 [ 493.292861][T20865] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.292885][T20865] ? __pfx__printk+0x10/0x10 [ 493.292912][T20865] ? stack_trace_save+0x9c/0xe0 [ 493.292946][T20865] print_circular_bug+0x2ee/0x310 [ 493.292973][T20865] check_noncircular+0x134/0x160 [ 493.293001][T20865] validate_chain+0xb9b/0x2140 [ 493.293025][T20865] ? kernel_text_address+0xa5/0xe0 [ 493.293054][T20865] ? __kernel_text_address+0xd/0x40 [ 493.293082][T20865] ? unwind_get_return_address+0x4d/0x90 [ 493.293107][T20865] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 493.293132][T20865] ? arch_stack_walk+0xfc/0x150 [ 493.293163][T20865] __lock_acquire+0xab9/0xd20 [ 493.293185][T20865] ? nr_remove_neigh+0x25/0xe0 [ 493.293206][T20865] lock_acquire+0x120/0x360 [ 493.293224][T20865] ? nr_remove_neigh+0x25/0xe0 [ 493.293248][T20865] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 493.293273][T20865] ? do_raw_spin_unlock+0x122/0x240 [ 493.293299][T20865] ? nr_remove_neigh+0x25/0xe0 [ 493.293319][T20865] _raw_spin_lock_bh+0x36/0x50 [ 493.293346][T20865] ? nr_remove_neigh+0x25/0xe0 [ 493.293363][T20865] nr_remove_neigh+0x25/0xe0 [ 493.293380][T20865] nr_add_node+0x1d9f/0x2570 [ 493.293398][T20865] ? nr_call_to_digi+0x126/0x1b0 [ 493.293415][T20865] nr_rt_ioctl+0xc12/0xd50 [ 493.293434][T20865] ? kasan_quarantine_put+0xdd/0x220 [ 493.293452][T20865] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 493.293472][T20865] ? apparmor_capable+0x137/0x1b0 [ 493.293492][T20865] ? capable+0x89/0xe0 [ 493.293509][T20865] ? nr_ioctl+0x1b1/0x3b0 [ 493.293531][T20865] sock_do_ioctl+0xdc/0x300 [ 493.293556][T20865] ? __pfx_sock_do_ioctl+0x10/0x10 [ 493.293577][T20865] ? __lock_acquire+0xab9/0xd20 [ 493.293603][T20865] sock_ioctl+0x576/0x790 [ 493.293625][T20865] ? __pfx_sock_ioctl+0x10/0x10 [ 493.293647][T20865] ? __fget_files+0x2a/0x420 [ 493.293669][T20865] ? __fget_files+0x3a0/0x420 [ 493.293689][T20865] ? __fget_files+0x2a/0x420 [ 493.293711][T20865] ? bpf_lsm_file_ioctl+0x9/0x20 [ 493.293728][T20865] ? __pfx_sock_ioctl+0x10/0x10 [ 493.293750][T20865] __se_sys_ioctl+0xfc/0x170 [ 493.293767][T20865] do_syscall_64+0xfa/0x3b0 [ 493.293784][T20865] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.293809][T20865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.293825][T20865] ? clear_bhb_loop+0x60/0xb0 [ 493.293843][T20865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.293858][T20865] RIP: 0033:0x7f9b06f8eec9 [ 493.293873][T20865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.293888][T20865] RSP: 002b:00007f9b07ed8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 493.293905][T20865] RAX: ffffffffffffffda RBX: 00007f9b071e6090 RCX: 00007f9b06f8eec9 [ 493.293917][T20865] RDX: 0000200000000280 RSI: 000000000000890b RDI: 0000000000000008 [ 493.293927][T20865] RBP: 00007f9b07011f91 R08: 0000000000000000 R09: 0000000000000000 [ 493.293937][T20865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.293947][T20865] R13: 00007f9b071e6128 R14: 00007f9b071e6090 R15: 00007ffd3dd8ca78 [ 493.293966][T20865] [ 493.629210][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 493.660219][T20862] netlink: 'syz.2.4037': attribute type 3 has an invalid length. [ 493.677675][T20869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4039'.