last executing test programs: 41.17328387s ago: executing program 1 (id=3652): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000000)=""/26, &(0x7f0000000080)=0x1a) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710421000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 41.042724372s ago: executing program 1 (id=3654): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0xffffffff}, 0x20) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000003400)={0x2, 0x4e22, @broadcast}, 0x10) r3 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0xcb9df377, @local, 0x7, 0x3}, 0x20) sendfile(r3, r1, &(0x7f00000000c0)=0x6, 0x7) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @loopback, 0xffeffff9, 0x3}, 0x20) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x40440d0}, 0x24048800) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000104000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b03000000840000140035006d616376000000050027000000000008de1a00ff0700"/44], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) sendto$packet(r7, &(0x7f0000000140)="ba", 0x1, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendmmsg$inet6(r3, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="aa0c76194dcd224b7f110b0f0d029ddc022420918f63c72fffa4ce2dc6f120d46fd2984ffa523a1e83ea79eda5635c4b5ce897d37fcf547d9fb53f63a3d7fc69a0981a5d84b204a6f09086d3570007855157dc364bb6b2f2093441b7f572883c89f55fb1a4bc504dea6ad0896f0c454afd79", 0x72}, {&(0x7f0000000180)="04d83c8df9de20d16809dddf8793aa6c1b91de1cd4baa0e5e5eedd9e8f429eebcf4a94817bf90f9c5df2507c9e34", 0x2e}, {&(0x7f00000002c0)="8c9fdee097fa9d3e11a875a8dc108917265ef370cb285a761667c1648f6eef8784c1b2eaf50c88ba58128f4e9560ddee7cff6f798fda1ef0822515e7289892e30f7623446ca5220be6eb22686adb131fc8c15898359bba64633c3c60f04f391318d61876fdbb5c637b84ff20e53f62435a96c2c87bc0cb24917491753087389e0abe97cf476b25c1ba1314e77baead9a3a1566e689d4038dcd365223379b5969e72b605bfbeaac97a2a94879f2426fb15645b8071f0c215fdee76eed00d916c2b30c6fa6da7f9fc890a630087e5b30423df097208ba15b635fc53c58e91c1964fa197fa1e72fd60a329e8fb51d57a7cc6d0fc516c9e196629874e210b09e3d069149b7c5ed886e3da6c43c75b4fa322771274724d637fff479ab5bd8c06fb8b950ed59d0c7f526a03e94c49540832a7ef316d685e30d08967161b6897e275fec72e40eccd1c8343cfa328c5d6685f2fec9abd91b195f6678793b5136ffa3ffb029d2b249ac105e10d483222dddcade285d813ac3c1cae5a33f0390515e416e4e0a52ade60f07cdfe3936a658b8ee490ec143b8f64fd2571d27cec0426ed4557c9d1310f10e0b81a51b8064d4feb837c14567dece3bfde00e0a4cb6be933f0f92fcd656c3172d0ebe3be10c8e7f903ddef2b3b13dd4a171c09d0078c85778ad6b61c0db110e3004b7aebcadd32b68eb6ee199cfbf048a07d374d236a912a209ab725d9f4be921e29ee7eacbbe46fc54f0f99a7df87ce3fbf77a30ba9b2659b782755b9218ae4544453f7625fc10ee7391f5dee737f1985d2f7d1e1b583fad9fbb5d0feb9126c9f3f7740ff0f92869f7aa81f35f07dc6d25278d76d0c111e2d57f9da88b7115b69d7821eee42e4688ba260e1d427d720787757895e8b29bcc5262ea0f6b30cf49843eb6ce5125b13b2feb4e7acb3cc12df750244e1dcef14ad15884e487249c71de3d0949372a1d81f41e3df5ac468cc96fe4e258e1542437cc50985ededc8998605c93096d9bfdf5826a29bf9ed284e2529f32cc563d16b82e479d8a82f8a9f9622bd4b2e7f4770413e880c7a764e511bed1ee01dfe56f85d2d29941f4caa9b122aa7cbc4c28eb825360f02a65bf580b80c08656d8cb985dbf07fd694157771cac8b9daa3838f7579cf5730c7c1eb90aa8a40a7bce0f182a536daa757fce67c7a38fcd0cd339afe7790ccb2226b572bd2b8b6b561fa197657089f338b94d904babccebcaeb85bc440a46a7e5cc62a915ab17237cc6a49dff410a1467ed0a7298a8c5093d2a2835c54b4679c0954f3ed7e0f69f6d58d04d1128a1cf5c479d05f56af183b0ab8354e4499a045effa18302ea57795a7f36cd1d321df0ef3e5956ebd944680485bf1f025f29d2d2219fa66f3c9f60245acbdc6c448dbcd7a5aed952e18bd6d8250e2b60c7ef8a5580d1cb001789f994f455c8cd80b0fb91b9b66f66b7d95252d5de9ea746183a780f30c88ac02cf6337bdf67fb144f3647ee7ded66c9bba192e5585bd53bb1baaea616f9e8dd498b16738fb0a5c2fdb64e1d8a4fbec15760b84ffa7804993407793484596e9a176203b6e6dbb992eb6a6b6e10d6545c13763615669dec566a24703136318b4225fca66512de74c77fa139fe7ba7ed5aeb8d4979d693109037e8fb9fdea3d0c825e324956ad5d581a8566451bb1831cf54069067803a45bbaa952f64230b2a1cf8685372bd662963e64290cf1457217a0c455d88c6bf8844403b326db060de6152d950b7208b72654a383d03f0e82badf26eb24a0c060b579308881366dcd0a205daf3a71659fdb84cd412791c43a93e20d331be12d7bdebbea6a7d7467fdf4b993134a7fa156af7df76195499c928e6533663ce79d5ea653e0fd51973604006fb88f8cffb118a1cd93b3ca74f105b14b1fb730aeb93c48d42c55eb2029c0d90b058409ebe7f4ad73276fc44de367c1817d4ae2ca2682e198315d02bc61b5615e2694f01aec35cf354d366c8a952dd17dfcf34de5d6a7a693a8b1d57b885509165675c589201e67e3bac68ca06a6465f9532b75d44514ee24dcb7d19c47944bd3aab2531ffe6abceaee24f7cf56eb6f608c253d92f0170700acc0ff2782a03389e890b0225c5009358a7293ce04909a36a8f0378ede6d7b9de0ace8c41c8c8224d60c682971e2fad27ef4f25185c47c226b68677fbfaa298bcaad3b3fc1f2d00b77b53678c2f09dadbaee5012e325923b49eb7f3c6fd7593c9b198b8fb0805c84678902faae61a782115b583f2c541ccddd4ad06fb5bd87aa72ebc0e725027e50e45f0c8d3b8147589d47f14226953e7e2022e1e3c65c66311aa862c0c68f7a80f4a4f8e939d7d7e4fcb044d182de412b7754ea85d83ff0eae03797cc2923027a3f543c38f022c782089a9a8a67647a7f21eb657d0969a1b86b5e1ed2374415ec199e89d39fee4394db83a8def19d5573371c18ccfeb3d15f31f1485ad81b1dbf3ae2866b8a3c8f01243ca8b996684eec6e802e2953656387b544608dfb0112e868f256e4ec268800f435c8aa573971d28dec747bdddd9d9435654723043793f2a7a2843de255e89da4c7ae80b1d9a3a4615031a26147449160e1b96620c93abfc0555d87f3962bfcc07b589a126b6f837f8c29d36b63ead80a9291c60c36847a6d17bc460f814254eb9a7d9511b8f48b93f04029f90a3d31b31abc59302b4ed1916aa2934a75da5d92bff20f6354f4bdf7319c8637e03bc8e25e477ad5933e09aaf454ab9e7a0d84aebaac98c1ea6e22316002e5753906f3e7e3cab44b406f70032bc74d61b6ecd9282fabf249f8d593270c58a066717684f1de300a8462fb7c183726f502cde91e859e8bdd88b9890aa278d86d0330d037b309b8210eaf7ea55234195e47cb591e5e41e4dae2610a7613eed6abf9ca4b54b8c5c2003e930d2c84e10c62d68ac88bc92d249e1e63a82027e5357454f956955ea3ff3120e5639c3511829e027a7cdf13f4afbe06baffe3b007d42bf56f241ca9a94f7516a490358fe7b59bb6564659dd0cf4278a7858efd2d4876bf0290d1d0216da4f97f1c46c30ca69032a96b7f810132daf8ed25698cd0097026a93a275772e3fa28fbfe95c370a2c4ae7ef725d143a8d73cef2511b448b640a59261470706f91d1ab403b52714dfd3e66cc81943bd925e14989be9fa2e50f9da9d7e807819ae07281b489da481fe592884e66733546afc2e8d58e62d102bd0f24f3a8d9462d5aa5008b33c86eeeb1c88fdab2d8c24d841f95891e9080c7a122c7e973b47c6d242c1f084d14149db2668a4d6f16e86194c3ad94163438adadfb16a7d9fa8d01780ca92c12d312ae50bfb0e3fa7ac2076d85997fd1c21c634ae60365f232138472aacf199368d616ecc0527d601842624396ae98771e11f453937953ea7bbf142ff85f2e6b0082671279c1e8c6b1e4a0a78c293ba625cc726cda4a6f2818d9c9894e68b98226ee1a888aa8869072f0dfb8521def4368e850dd97aed2b78cffa5f099aa536cce2300d1639bab7af01aee04b39a9fdbcf42b167f648a3fe44aef832661c985b5ffa45784a0384358ab7739a43d77662710bd4a62d82c40748c17cb1855626ef295725ae4b7922885783f2c62c8f6ead653871c426f196ce9acc8d01cf5ff50921cc581512d9a4c2abd4186f6e24f49b64207d4e28e800c260f5187c292699003e7b6f92a0b90fb66f8908eef0c63236c55beb0b53e0811bbd748a287c25181523f625b192a15c845074085f650bc99fa757acb2e69a9dd228ee14728239abb50bff1e672a1e31dfb3a8e3b24e5c075e92e5c7eb6763187e2565d3d1c8718cc7db475f006f54c73e4c1d79878ff9689d423ec2467df9cc933a2c3044cef6ae24d340adfc93ede52c8489e3cd8b0203334f92ba7cc19ca8b87d16e53d9cb56f0c0c99bbc4928cf09c0e57cc97b138733118609157e2eda5f9bca8f7161a03b0d2997b381f9e0cf5112b835ef08077a73223b4cb2007619da2f8b725d4616ccab12ea325a03af3832b0a73e27e5b591e84ac16cbe5beeac1ac4436c48ae122aeced374061fd6674e73f7a7a4db550eb4fbe131286ec7a461d90c8ce3adef8bfa0a95a40db39b2ea369ee0b0899bdf543b8a5fb9748798c2510f0cda8347e6d48edb4451a134d33f9b4ba9a82e820164feffdb99d197dc1f83c5cb510f06b7a6eda613136779c5b6d93402cc3697b48435ee44e923503d556f951c0902446a99cd173692b8298fb69d4e5ac7fd6f3677dbc46d7943165e7d860dba8a9dc2cb97d03c5a6b5243eba535a9d2dce7156c86b84d87f06960ef1b51965d7e11b007acaaa1f32e92bf0697e28ea8c514924095719baea58cfbe60b47200d183e8aad3e4755524862ecba2ec9dcde6cbe97f01389a03e01b2bf8dee1c7d9f2a6489ae3a47e8ef19f05e933205c53c7c1185267852fdaa82a23a29a7e974574592a218bedee5306ef63e7fa3cb96d0f53003d5e296f33176834b521fd4e267b0cd7f9b2fe7574fe00aa221e4ec0e5192d06596308ad0e219332fb4df66ab9d306bc1eb9267e5b5d4c4dd28d8867b565a411b6ada124365c4c9a682d771b17ca553f8e835d674519f024d65069a77d6a1ff52010494429201c121d36dd92b2fa2ef2009f2c89ab553ebe5fa7c78c09cf6af82824080ff98d822c97472878c0710f86e2d39046dc277f75eac63ff136ef6f610479180cd8d1796715cd0cb8452ad1203fc23e2a6a68e6ecbda38d48fbe49f0efaae1724080fa157cb646b59a4b31458aede0d4533bfa4ada8f97af02f969a57810e14ccdf105971f39f3cdcf54addeb2c133a2e9b02c7b83097ab9a1aa474e9a1d8be11931e36e6d5759d357082e3b47cf81f580268b79328385cf7b218f958211847aa8c40d3bf94f3ca92f7b9941e28f831ec21144169aa49c1fe025eae6bbac3b507bf73bc03f2346694e4a90393adb0b846c8340fe7c91b87551610641324d24c0352ec6269a10b616a6515ae9e6278fdfd893333594616fb882d45d24f08507f1a33487ebc8057d424412abfd672970e694120052e77f4ea689583da7adf262284857e5c835b31cf91b1c703a61a914a8b75f46412628f91e264b4f1c497bd8e74f1feaa4cd4960468f1a5b0cbc867b1dcdabd33d0121ebf088773246b210a62e5b43a55b3af6e12e0d800b19ac24ba833ffc84c59eb71b82759569401e4733cf518f3d27618e519bc6b9e9d1fbd964e0346294cf299b2135b2c3c7c52c5b58213382d94b0721a0026ea5861844bd586c6ac1b46ccf2b5402e5ac8c1f675be280c844b37e40428d117726b88dfe7a8a2080e9ee7a3fe3efdc3a437a940e1d71feb5e3068c519b659bdc012f86dc62347b0f153968487ffcc5673922bf8017b260c2f2c762ea73c71a56b33f1e0f82ededa677f96413a18bf9989f53c667413cb34c58dca6d4bef0ff232fac3690e3c9d779e759332e3b4d93d0bd1bc33b653e573ab82068149301254ec93b70253b43729da20ad09f49c121e285cade8ffc067ab5a6ce9cb273a977f79870a174ec1413f0d33b03079ef5f49c03771b603da588115792f6216e82a0d422a86c3d4229d975dffd08029a63e15a10aad87bdd4ba5612e7811857051bc80e30951b20c2fab5d2dccb4da9ed1a3fcd84bfe282609265d6f59d4a5c3f82456928a3ee09afdcb30f5c03688bbfb2fbcbe7453aa895ca45263585cd299b647e5687fc2639012f225415c3810d66ae1bc6b97b19760dcdd3f1d5132b884282c40007a054f03357471060861078793a84040", 0x1000}, {&(0x7f00000012c0)="4ad368e4e23839875a0ada4429d88ea172c6a8368c5758378d3341612970de83b4a3ff053f0ef443e451f4e42aa702eacb4416ea6eeeb5c9844c84faaced2bf52d2ce6a7248ed3d51d8b06338d823108ffe39a8db6f8b51b001a33d034401d93d7145c6ad69c70b6249811100d3ed8c575e65ce85798b81e1b8da9ec233ff1e8152979f86084ca5263e0f2fcb61d675ef6fa1951346b79327160da33b32abb62583b8bef028807aabbccde2407f1f822e3aa4922e235f78bc1456eb9bfd3a98513694e5a6e1c21c5d956", 0xca}, {&(0x7f00000013c0)="8f702c0e6a9006e73282f8f3cf680aac2eab1dbcb24574ff8d645ab0d9d9874283dc6ef0cc469ef489215e0c860ed8cd20e2603183feb9248449a395980acff9cd9775556b5352d35c781c7736451ebebde7ab12717c8c3d19a8f39d28104390af4c41b830b3153fa8567440aab82d07ea27199d2b0608b2d1d929919ea23739cafdaee21ad35ea188a274611723a58754ea7344b32ff3695ccd740b003d627c6bd0005dae", 0xa5}, {&(0x7f0000001480)="09caac04b769cf2cd17a3d03cc211509bfad4c2041dc722793642d2b88c61b033023141384c278c794ac636571b0bf1fd01eeddce95772a3549fa8776c2b5f2a0690a5a0b069e29c235236c76bbba1b4d857660e611991622c10ebafecdf2d58771fbb29bbb1d3947e0b4d78b4ccbf7ff8b8f249af4f4c14fee0b84c68107341b367022b54d5b1d240ac0378162ab6f7c82ee45630dda1620b007c5efdb4f3795b0c049fc554c8444c7821d1f9beb7ab2f2e11d3be1bad9e802177bd0597bee975297f5e", 0xc4}, {&(0x7f0000001580)="db4247ad1e9570d0677160db9c6cebb9a70c392a4e129c0d1114d860bc3adfe2d0339548814bffb596da10fc7f3b5b4c7e15f65d3aedeabc4bc1945aa84d6266d25bef85a35cb4ce52b94daffdf89c94762ebc45821ab78f03be893198a43b88605289925a122feaaad606419f1ab850fbf89cac47fffe66b7d4eb", 0x7b}], 0x7, &(0x7f0000001680)=[@tclass={{0x14, 0x29, 0x43, 0x7ff}}, @tclass={{0x14, 0x29, 0x43, 0x401}}, @flowinfo={{0x14, 0x29, 0xb, 0x178}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001700)="f672f4b74e3cd05414251428e43fb223c9829c1cb867f0fbdd02489105002bf82b295223e20377d06039f3d85713fc485d23ce0a78dda3cb638fadc1380cecef54f029c4ea9d740b9113e6ad5822109b21e65b62aefa58b479878b6200a6e92d2722e03cc9c8dc499edd290379", 0x6d}, {&(0x7f0000001780)="d0d958380627ffb7b1387a6534645a88cf6d61aa45b8d9896d6bae4ccbc1915bb86df8c609d8b068a9ebb4d59ed3120ff68732c45a1a0a65c009cfb67927d5f3b53283b890f3151f9ca7b65671", 0x4d}, {&(0x7f0000001800)="2d8e59b625a37e9e48597189236960dde71bd03adb74535d016cad2d70d0724c4b6758c3c03fa4e66ce05f77f367c38449f71e447135f884c045254a189b0bc548c06ca781ec489bb2ed943d385cd2e7b917b4d02a75d0348140adda44e870d537dd075f957ffb9c5f4273f95024d149e60712aa9685571778d7a61f3782198deefdd338ec1400f5012afb6862ede54355625143554cca84f74100c5dbb19a2f574aa20c3542786302", 0xa9}, {&(0x7f00000018c0)="217f9ea22071d13088ddc6bd02ea463976ba49b34ffb2e2eead868acba294ea41b2c2d886d269d3e4ca8c4da06cb68633f451d9e5f57334d8f4d2529897ae4728c49034120c9454e72f89a2bdd7e0e6675629dff7314b1", 0x57}], 0x4, &(0x7f0000001980)=[@tclass={{0x14, 0x29, 0x43, 0xb}}, @dstopts={{0xe0, 0x29, 0x37, {0x33, 0x18, '\x00', [@generic={0x7, 0x6b, "0d96357d393da355b01daca8e9a582b7ade307aa8248caa3b3103e559a43a6ce49343e2958dff14481ab4491e70964a1da196b54597445b9083bf71b04e034084bcd3c1a5b1951bbf0588ac859c7dc52ddc5eebe7616d7f7bfaf90779848a642716008f9bc68ed17cc3749"}, @calipso={0x7, 0x38, {0x2, 0xc, 0x4, 0x5, [0x4, 0x40, 0xa, 0x3, 0x0, 0x4d34]}}, @jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x4}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @flowinfo={{0x14}}], 0x128}}, {{&(0x7f0000001ac0)={0xa, 0x4e23, 0x9, @private0, 0x6e}, 0x1c, &(0x7f0000001f40)=[{&(0x7f0000001b00)="09078187fdc0af6dd8cc4cb7903423e795461f728b81613545e67540fd4a571d2377e337cf289036a7366a5e89ce1451d459585680f516a10a", 0x39}, {&(0x7f0000001b40)="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", 0xfd}, {&(0x7f0000001c40)="abaef79eccb8cce4a08437376b50ca01f668468294b279d2a90e09a5f33bcadd40a91e2fe8cce6e2eb3368994ce2136dac5b725ff9c9605360336657a5cc9aaa440d958d4c7d22ecca58ba84d48122abf655efba8a47f15274027c6c33f808ddcd9317d76b268e992f6e866cac50b70f289cfb8970df9d29c4c6a99d66ae5a72ceddaa22ff7234ab9c8cec7ae43779028c51080b43da4aa4dc5ee6fe4be9aa54757fcba65bab1b372d3f3c431d553f06ff45f741c445864beacf7201b9fe6a5a677685eeb600d4b8e14683312bf0823c156115b050142bc44adc81e40a31e8668f9a06023be6ed8e6b45ef4b1e6eae07c434c51c45fb6b9d43", 0xf9}, {&(0x7f0000001d40)="65466a01819c17134a614d60725d2c4cac48bbcbe1ad4da7b3a99de55a18ae9a39705fe14f38a14f8915397793597ce27240f35a126390b375083e71644c68ad7fc12310b7037895d6dd002f7bf1690d8d102a2378595f69e7a4d4a3e2e1fac500637fefc69b6b93cde78e625da6e106ceddcd7c9e30c0a69726395c2944f06d3ba92e", 0x83}, {&(0x7f0000001e00)="ff59dc2e0b5357dec82088f346bf1eb7a770970835e2e2d896cae97fef7957033581b3611022c869a09a857d72ac844385505adb6f346425a5d2f3f186c0fda880ce9320cd31996ee3656bd34280aac299a5469caea22d4453c3eb7eec5bacd8fead8994e890eee03b53c2275d21f2a7c105a051e00ef46c3694f67560691448d9bc531549e0348e291e4e3f883fa7c647ae02fdb5c080f295b5747437df8b2cb2de931fa7019c73af4bcf6cff4cc05b7dc59fca0d7bbe0759e5e96d7783", 0xbe}, {&(0x7f0000001ec0)="a1976044dd296e1bc490a4830bd1dc616122b1007d1c42e1f7e71109d6d270f72c21b489742719186515ca6475580c1dff4547b93871664cd54299bb0e26bc5fa9", 0x41}], 0x6, &(0x7f0000001fc0)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x15}, r6}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1ff}}, @rthdr={{0x28, 0x29, 0x39, {0x62, 0x2, 0x0, 0xc9, 0x0, [@empty]}}}, @flowinfo={{0x14}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}], 0xb0}}], 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x3, 0x4) 40.865166521s ago: executing program 1 (id=3658): syz_emit_ethernet(0x4a, &(0x7f0000000540)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaeaaaaaa0b88a80700810042000806000186dd06100003000000000000ff020000000000000000000000000001aaaaaaaaaaaaff010000000000000000000000000001"], 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000000)={'wlan1\x00', 0x1ff}) (async, rerun: 64) r1 = socket(0x10, 0x3, 0x0) (rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x3}, 0xe) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) (async) r8 = accept4(r7, 0x0, 0x0, 0x800) write$nbd(r8, &(0x7f0000000400)=ANY=[], 0xb4) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r9, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r2, @ANYBLOB="000229bd7000fedbdf255200000008000300", @ANYRES32=r6, @ANYBLOB="0c009900ffff00004e0000009c002a884bf355003c04010278032a0102847602080008021100000008000000120000080211000000080000002c00000802110000000000000018004008021100000108000000080211000000270000086846a39062403a9a00160000ffffffffffff0300000026000008021100000104000000170040ffffffffffff09000000ffffffffffff2d007e150e0607ffffffffffffa0c3641f99cb0000"], 0xc4}}, 0x40004) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x2c, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x60}}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x240000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="605518ee774ef3753369f6d11ed4c1003753b9515abbe72743", @ANYRES16=r2, @ANYBLOB="00052cbd7000fedbdf250b00000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000200000012000000050008000400000004000b00110007003b7c157b455cf857b1f5ae51dd00000005000a008a0000000a000a00dd7b46167c9a000004000b00"], 0x60}, 0x1, 0x0, 0x0, 0x4004040}, 0x4008011) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800dd85000000000000000002001000fe04000100000020"], 0x1c}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) (async) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000480)={'wlan0\x00', &(0x7f0000000200)=@ethtool_stats={0x1d, 0x37}}) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[], 0x2c}}, 0x0) (async) close(r1) 40.736512293s ago: executing program 1 (id=3660): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@multicast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000040)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@private, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000080)=0xe8) sendmsg$nl_generic(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000b00)={0x15e8, 0x10, 0x100, 0x70bd25, 0x25dfdbff, {0xb}, [@typed={0x8, 0x9, 0x0, 0x0, @uid=r4}, @nested={0x1150, 0xe9, 0x0, 0x1, [@nested={0x4, 0x47}, @generic="92e600771c45dd142bd1554b40b8570157e75cf73e8c7b9930b5f40ecedef176fd3ccdda391f8d18156ec6f9f586dfcfd841bc7b99ba1c56e28214e919838b25af188dba763b13c57606095e428baefcf66d0b9d8a61026df4a99a626d6afa6bcdab60f2457e820e291a351cdb80d0689d4d05fabf40c695f87b337652949b1bc1604983e30851ab20162509893ca87c53057daf4af7753e309f6c834f669147dd5a2af0e4fafb41dc8a04e2e0457838d62a2a02b29f", @generic="450dc7cb48a2d8d3fc5d65e11cfb4364bd4cd612637a89558087779689a6e3af66726b16799cf3c6e79914427a7a765fc4778f78f2f352e42f59f01ae2d5da81315515f458a684b0fb7468ef639746190941663f3779554f7baa", @typed={0x8, 0xd3, 0x0, 0x0, @uid}, @generic="7bd94ac69a96e5f7ef19b829452ef0b1e0b66985fb9ea8a6fae4045a9aaed73413cb7f2ac2106ebfd7496de8317edf79", @generic="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"]}, @nested={0x1c, 0x89, 0x0, 0x1, [@nested={0x4, 0xd4}, @nested={0x4, 0xf5}, @typed={0x8, 0x4c, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0xc1, 0x0, 0x0, @uid=r5}]}, @generic="3759b59cbb3d7ebe8a8f3c565e8636dacc", @typed={0x8, 0xcd, 0x0, 0x0, @fd=r1}, @nested={0x12e, 0x39, 0x0, 0x1, [@typed={0x8, 0xec, 0x0, 0x0, @u32=0x8}, @nested={0x4, 0x66}, @nested={0x4, 0x74}, @typed={0x8, 0x139, 0x0, 0x0, @u32=0x481}, @generic="40e8da4014f11f3871ada248cccc13a630906663e6508f0b021b791194c35926e4752227738b43d77e430570be2517cb58c8c32fc354512e098699bbade5eb408c53eaa320bc4c91bc707908e6aa4dd1db8005f3204d561ab7821334d5be20cf6a2f16a86a820396318be4b47bc97b12e3efccfd632fa0e93b0afbaabed922a832fc3674f728f1ca5b820c1ab3f909c827ce34d1409f019235ce5f4177b0c3f00f90212c1586614b", @nested={0x4, 0x2a}, @generic="71905547fffb8f6f2a83c372dc4c678b71cb42828fe2fd644d2228f1eb2d16ff82c4f9e1ad18d504f1df4d8db2ed8698e079138b6ae66cf16d37ccf6c13504baad41c41e4f70434fd79dd7388636389ba2d9213e18c1e3347d9dc0262b2179510acf2d6b9ebf"]}, @generic="7c10aeef97cf27321ca7cb8e684eee99e6a96d5c403998b518fa1a8da50d3995614c235f39f0f8e4a26f20e8fbd7236bb603043e8def", @nested={0xfd, 0xc2, 0x0, 0x1, [@nested={0x4, 0xb3}, @nested={0x4, 0x8b}, @generic="50c972a84b0f5831ce77864070700fa58ab3046aef251e1b66ea59761096cfbca4818d42ecea8e83f0fa579fd3cbae8512220a5a1b6c3384716a7de86da33cd9edd5ded511fe7968978b8742ddcb1279b1b016da29831359d48460e591a8b681fdd29fec6fb1ffa7b9ff071f0f3726ebb5e2ae9dde5f9393e10522755ea84a07e59ca13f218d28754ab44cc540100cc8faf81cb4ef5f3fa1a712b35a7fa156854ea41d08390b75aa9af88efb5401ce6aa800a5260bce217321", @generic="122f333ad9717c1116f6f74ba54355ce", @typed={0x8, 0x10c, 0x0, 0x0, @u32=0x3}, @nested={0x4, 0xa5}, @generic="f55dc661657c0a845a966795b7c2c1936c25f74719415c09", @nested={0x4, 0xd4}]}, @nested={0x1e0, 0x5b, 0x0, 0x1, [@generic="182c236fb250da66ab6e508e79335c288b2c1e8973ec39bb6a04f6ed78ed2ae566082556df183c3b9db48713e86b71396e65d28a599e8c115c576488ea717db54e83ad5ad4b44c2c45550af9580d8373120409ec53e6797a2676edd047bf11c95bba1523254da24fa324023137fbc0f4107a52e4513e46c06086fe7fb337d16653c8f5878bde7222b17ef4793fcb4ae4d91531a182565c346695c70e8d7d", @generic="18c1d6a917ea1bae250e57def18b43bfa4bfdd6e7e4ec2ed0ddb48107bcc02564836fab7d0829fb1a319e4585e38328dfe7c3719017c21ca432ebf4922c58b32ff258477f562bc9e11c770b12a3b4d2963c10cea71c63f3c5f0063cc0407492855f86fc7d7da9d711246b5068385b982bb9b4458ae27fed1627155cc072214014ee4ab0d35516017c8b11183643128aeb17dd94e5cac1d0ee505ca8183292b8a37d87ad668f7bedfd4dea4f95b81233f", @generic="49fad3679230af8109eedd401793914cd93e74fc6a20cd8c", @generic="96db7dc56f3f928127c00da2eb9fdb389ae1e55827f550b7ae58ec0d405d7f4a4b1703ded0b10ff2ccf736dfd90be881cce1abb41d11345504ed659de71ec5a303b192c65eb509aa7efcb34883b6873c93285c46fffffba7c30da25aa189218795fd4f65ebea16102347c3577363", @nested={0x4, 0x12b}, @nested={0x4, 0xd7}]}]}, 0x15e8}, 0x1, 0x0, 0x0, 0x94}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000000c0)='target_cmd_complete\x00', r2, 0x0, 0x1000203}, 0x18) 40.617154337s ago: executing program 1 (id=3662): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a117436c379020000000000030058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000a000000224e0000", 0x58}], 0x1) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x3f7, 0x200, 0x70bd25, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20040014) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) 40.598848421s ago: executing program 1 (id=3663): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x1411, 0x1, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x3}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1e, 0x1, 0xfffffffc, 0x0, {0x7, 0x0, 0x0, r8}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x9}]}, 0x30}}, 0x48000) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1404, 0x1, 0x70bd2c, 0x2, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r9, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r8, 0x2f, 0x8, 0x8, 0x7, 0x26, @dev={0xfe, 0x80, '\x00', 0x2b}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x8000, 0x100000, 0x1}}) connect$packet(r9, &(0x7f00000001c0)={0x11, 0x15, r10, 0x1, 0x0, 0x6, @local}, 0x14) getsockopt$sock_timeval(r1, 0x1, 0x42, 0x0, &(0x7f0000000040)) 25.542710269s ago: executing program 32 (id=3663): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x1411, 0x1, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x3}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1e, 0x1, 0xfffffffc, 0x0, {0x7, 0x0, 0x0, r8}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x9}]}, 0x30}}, 0x48000) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1404, 0x1, 0x70bd2c, 0x2, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r9, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r8, 0x2f, 0x8, 0x8, 0x7, 0x26, @dev={0xfe, 0x80, '\x00', 0x2b}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x8000, 0x100000, 0x1}}) connect$packet(r9, &(0x7f00000001c0)={0x11, 0x15, r10, 0x1, 0x0, 0x6, @local}, 0x14) getsockopt$sock_timeval(r1, 0x1, 0x42, 0x0, &(0x7f0000000040)) 2.812279981s ago: executing program 2 (id=4256): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000000840)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0xa, 0x8800}, 0x40000c4) 2.444697865s ago: executing program 5 (id=4263): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r6, @ANYBLOB="000014000a000100000000000000000008000f0004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 2.288724976s ago: executing program 5 (id=4267): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000120001000000000000000000100000000c40000000000000000000000c001d"], 0x2c}], 0x1}, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x891d, 0x0) 2.02551995s ago: executing program 5 (id=4273): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x2}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r1, 0x0, 0x0}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x2}, 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r1, 0x0, 0x0}, 0x20) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) (async) 2.024424497s ago: executing program 3 (id=4275): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', 0x0}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x5, 0xf}}]}, 0xfffffffffffffe09}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1.93758003s ago: executing program 5 (id=4276): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0xb2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='xprtrdma_marshal_failed\x00', r4, 0x0, 0x9}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="19000000040000000400000009"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_80211_inject_frame(&(0x7f0000000640)=@broadcast, &(0x7f0000000800)=@ctrl_frame=@cts={{}, {0x9}, @device_b}, 0xa) socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r5) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r7], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket(0x9, 0x803, 0x6) sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0) sendto$packet(r9, &(0x7f0000000080)="39c394e534ecf02e7e0e9ca208004b54", 0x10, 0x0, &(0x7f0000000440)={0x11, 0x0, r11, 0x1, 0x95, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x18, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@alu={0x4, 0x1, 0x2, 0x6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7af0e66, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x9, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x5, 0x4c, &(0x7f0000000380)=""/76, 0x41100, 0x38, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000840)=[r2], &(0x7f0000000580)=[{0x3, 0x4, 0xa, 0x8}, {0x0, 0x3, 0x9, 0x7}], 0x10, 0x401}, 0x94) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x60, r1, 0x1, 0x0, 0x0, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}}, 0x0) 1.935662079s ago: executing program 3 (id=4277): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 1.85543838s ago: executing program 2 (id=4280): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x20, &(0x7f0000000400)="170000000200020000ffbe8c", 0xc) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x2, 0x146, [0x2000000025c0, 0x0, 0x0, 0x2000000025f0, 0x200000002620], 0x0, 0x0, &(0x7f00000025c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x9, 0x8, 0xc, 'batadv0\x00', 'netdevsim0\x00', 'ipvlan1\x00', 'veth1_to_bond\x00', @remote, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], @random="d685fc5d0114", [0x7f, 0x0, 0x101, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xb6, [], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x5a, 0x6, {0x6}}}}}]}]}, 0x1be) 1.785748944s ago: executing program 4 (id=4281): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x810) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x4, 0x12}]}, 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) 1.629240004s ago: executing program 0 (id=4282): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x40) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) socket$kcm(0x2, 0x3, 0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) 1.574165205s ago: executing program 2 (id=4283): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d8000000100081044881f782db44b904021d080b01000000000000001800150006001500000000120800030043000000a800160037fcb659362e2e55e799aac5525ffa000400c020db2d47782a462c9c801f298225c506000d00036010fab94dcf1c0461c1d67f6f94007134cf66e08000a0e40852a9d7c7c0b7c4a700002a76549eae02ede8359f79d073d37af66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa27e8ddc64193071e9f8775730d16a4683f1aeb4edbb5", 0xd8}], 0x1}, 0x8040) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gre0\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r4 = socket$key(0xf, 0x3, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f56943ee822155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5b5eb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44854}, 0x2000000) 1.560515939s ago: executing program 4 (id=4284): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="6000508011000a004abee339084eeef16f162471f4000000080003000dac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000001d80)={@link_local, @empty, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "062111", 0x0, 0x3c, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2}}}}, 0x0) 1.554590045s ago: executing program 0 (id=4285): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x312}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@newnexthop={0x2c, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x4}, {0x2, 0x7}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 1.469383818s ago: executing program 3 (id=4286): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff}, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000002"], 0x8) r2 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@allocspi={0x120, 0x16, 0x1, 0x0, 0x0, {{{@in6=@remote, @in6=@mcast2, 0xe21, 0x0, 0x4e23, 0x0, 0x0, 0xa0, 0x0, 0x1d}, {@in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x0, 0x6c}, @in6=@mcast2, {0x10000, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}, {0x0, 0x6, 0xfff, 0xffffffffffffffff}, {0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, 0x1032}, [@address_filter={0x28, 0x1a, {@in6=@private0, @in6=@mcast2, 0x1e, 0x3, 0x3}}]}, 0x120}}, 0x0) close(r6) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}}, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) syz_init_net_socket$ax25(0x3, 0x5, 0xcd) r9 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x800}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x5, 0x1a, 0xfffffffb, 0x7f, 0x5, 0x4, 0x9, r10}, &(0x7f0000000240)=0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000080000000000000003000000007ac300000300000002000000000000000000000203000000060400000000000c000000000000610000006100000000"], 0x0, 0x50}, 0x28) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0) 1.467189371s ago: executing program 4 (id=4287): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket(0x6, 0x800, 0x800000) (rerun: 32) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r6], 0x44}}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 64) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x2}, 0x1c) (async, rerun: 64) r8 = socket(0x10, 0x803, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) socket(0x1e, 0x1, 0x0) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r9, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r10, 0x1}, 0x1c}}, 0x0) (async, rerun: 32) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r11], 0x5c}}, 0x40) 1.400997632s ago: executing program 0 (id=4288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000000)=0xfffffffc, 0x4) recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0) close(r2) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_emit_ethernet(0x20e, &(0x7f0000000540)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x1d8, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @loopback, @empty, [@fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x3, 0x68}, @hopopts={0x0, 0x33, '\x00', [@ra, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @generic={0x1, 0x52, "08f1390b0c74cba47ed1dbe3290dbd16fe15f3802c8f12d8687cb72f6783172e63fafc0bc19fc7ea5e20fe65290cc5531784929dd4b5c8ff0df008542d00f6159b80595da8d72872864da820552af488c1ce"}]}]}}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001740)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x80001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x99, 0xfffffffd, 0x9, 0x80000000, 0x8001, 0x2}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffff8, 0x5}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)) 1.294984987s ago: executing program 2 (id=4289): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001a40)=0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000002780)=""/4096, 0x1000}], 0x1, 0x5b3d2934, 0xfffffff8) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000002c80), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002cc0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002d00)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002d40)=0x0) r13 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r14 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r14, 0x0, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xffffffff, 0xffffffff, 0xe8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x5, 0x2}, {0x0, 0x1, 0x2}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0xff000000, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x41}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x0, 0x3, 0x2, 0x7, 0x6], 0x4, 0x7}, {0xbfff, [0x3, 0x5, 0x5, 0x4, 0x1, 0x1], 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) ioctl$IOCTL_GET_NCIDEV_IDX(r13, 0x0, &(0x7f00000000c0)=0x0) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r16) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r17, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r15], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000002e40)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002d80)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="080028bd7000ffdbdf250200000008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB], 0x64}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c00)=@newtfilter={0x3c, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x9, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) sendmmsg$sock(r0, &(0x7f0000002a00)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10001, 0x2}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000080)="0abcded18302f210b5e28095839b85a194051d91b817c402004db1ae026fd407fc8c622cea7e4f318bfe64a1617dc940905a5881e63cffd8750ab8c59516c7a902c148f1526a73a140c7ba4264114a29c947f56ee520284b04d459cd68f3f3303e00323bb1989a1e6867cec1f7565efac963e8de2d8f8e08ce501581916a7e2d163bebeabe835f1dda600a", 0x8b}, {&(0x7f0000000140)="a87d31b1e89ddba530d7993716e2188fbfa031d111aa290e3c9061fe07471c31c506db4feefa691b6bde7147751227030bcd540f6bc9b9a4ef8723ec8ae52d679e70e3e0242eb87d24388f077394fe9e2bf35caa976c84fa523b8678c44dd7311f02b782bced0f1bd4ccae9240c1a1ddb768593971ed78bea0ae142887b18398bd0d211b2607ffe78cb5df13f567321022524977fdb19ae1488e19fb10f71a3aa555bb615549c3089081da859e5c07c9a71d115078458dc6725b5fc3731be4f78f36808096bcb824ae11eae4a50ee4dbc1c539310913ff1e52fdff4fc47026b08659991da62aba290b3be8565a06b80c056634c9a99796e4c0706f66d71e700eb249d01c410e124a41810b65e661f31d1a3e29cfa77bf157523c8c5c2b42c5b15c2f7707c575da44f79118f49cd63acaae386bc02654ef86ccde57ff41a37005e7e40ed818c7f0d7c91c1508bc1a3068a1c81a10ab33c5a0180baa3614c04359804921ef0538ccf9a439537b55d920f48fd6649fa1391aa7b15c2cf4c9a7214705a268048e90bd4beb717b4b344235e7b1755eee6d05d98e48eaa9693985e72fb303c5cf26cdfc1c1b02681d8bdbe292d2362073e0092a07dbe0a4402ff26d8a20e6176e0e86ce9e8877277399113bf5839af25f511abeab3463f36a7a29a9697d55ca56c3c22bc420534ab1fdc7dffbb882e5fb4990a80a5a963a4cf8bb84814d96c08d4a90d395bc367a282b6d3537b8b40b180d937886ec8249c5a84b723e46e3851e3e8d9b19a35610e52a9336b9e19a30a943760d746360f8e7b5942d99c4779c549e54e37d8e9b2e6c80d20eee33fe20fac3d64b4ff5a47d20f9d6f7d8e6d27a02ad87d8f678b143c0192c5003fab21b329a2e46098905375ac3720be6fb6b2653990a54858522a4a106f1ab2d1559b1d3ce4735add20f5e063162a9d4589556831d2682fec7d8f21cfd3823132310ad5d3babc84e58a27b2d6b620c01948ab8dc61ef25fed48a72e401d1cf24f37a20885c86446e4c9ca0af241da9f903a4b5196750024b601376e9d2ac39ccbcc7cdc8085da374523a4e5ba81802855173e43a450d98398b341bd9a8ff852b9f5ee639d2d75746f11cf9ee430f65c56d3934a2d4c5b72797d767eed48c26330380148e323eaced17a2a6d4565044bc127bb7d6d4fd9f19b04bb752ed6da032fff94045eb3438a4edfe01068bf0e1c038031a6108d6218cd1000a6481edf311160fa2227d9ede2b32040e6e02dedeac3371bae0a875733e9aa2f9d431fd3cba1e662b4da789902163dd21e54476f692112332c99bbe1ffecae8171a2061cb4b9d72a502b6e3c69a09710f07dd4192a45d4500b29508a46c87ab1dd1078c579bd8f82959157b97d65b007e3b8b2318d4c75b7eae1919d230e0c8e7d5f25a045b6f6193221f40de4a36097cb06ebadbedcf8296f495057abf76bb58da368baad4bb71e6c5446f1474192f754bcb168aa612b6cdf4c0a175dfbd198f93ff7f04e95f609885bc9370ec8a8b41e1177ef6a489ced7d7505e03cd416253a49c364cfc3ff87701667c08faafea97af0e72efedc9c0868bd6becaf4da68262c74c1289975431b28f5815c0d0f1ac6b2aff42b3af59c2ee1b018b8818143ea38023898c047631bfd57b6e9d69e9289af685e960032babacaa18a061ebc924aa2b853652a90321ef6a0e60e14a3470811f0183ab11e177452898fda3f4c4d3128342d448c5678789ae1dc112e71bf05e04312735206ff4bc2646a001cf9ffa1842d36502e2e782f4cf64ec7a53f3ece19389c2e5df0c5e4b149a23ea62329267ae992cefffd7de0d29f5e53d261f1e8c43c428c3f5f744e47b56a6ee8fe8c14761c9b3a7d20323f297b0410c27b5ec9b3b0a978078e147affd5bedfd1ff0074148d514ab36b5696e035f4d2550890bdfcbc9ebb9d6f2333bc0effb6932fcbc340af939e8e4caffa59622d04bc10d456693bd98696d3a9e5f0eeaca8f4e476099b3fd6282ebb092a611f5c06cf242818408946f4aa3cff39effbf7cf992156e5771d089196fa7300a5ffd92ff41cbe99d6939a149d2dab9326ccc172e015adab8afee42a50c1c03af2f168ba0c435abc340613da78fe1059200f541aabd16b9336dd7fcd92b9324cf34cf48c64f91be5e6fb24c962526142ca0b164d918d5759ee7a03e7cccf95c79b94103d4817323103bc7b372b44fe3076db44cbdb7d7fc2f05094de653788cd63c24c41c9e87cc89f9a357002d99fe159434d35f08a6333bb0eb505e76921379940b40915da7cb1e3cf693e1935024a2ce5afb34811606af3876773770f56e8782c2373cfc3a5168f56393ab14519a4bafad80cc2d59f6756e840c2e5f66b2fa2835f98327f26582119367ab1fd92e07bbf2329473278ccb476d64233a3b300a06c03f27f84b905f3ea0cf65a5681fed664cace095d43ea0d97bc3389e049d388a828cf82fbdc5f5b7e2a1e1fecefa1ea0aaaea3c502d93be6c9ed321db190eb1d6f92ab93e5b1afc957480ff4c73fcee7e521348f743be9e39604e59947057e3b0192af0d896694906b4b505e344e8502a6e4f8995495a653100088da4bd981152ec733d9b835f0502c4e7e464834b31cec3683bc98a01f5d6eb639f7b08ecd8a80af2752f587c6b573d12f5ac4dd3813c7f5a2c3f00f79a759d693c9615d5e98a3982153afa24a73614a6d2eb5d9d9ee29a0c725cd71c322a91b75ae485431fbf0a9b88219e531700614750fa706b056063309833f43be57363e9e60893731670917831d8ef7588533273b257d6700fa02296224a47f9b487889b430a51da60046886deddb4ac26e61d520633c539c135501cb4f805779f31a659da281751c147117a0e64686e1d0561491021150909a9a6934c0f24d33804260a7a724d19fbc7ad473006901951384dfd7b05289724a523fa409e8420682d300576c61e37dab9e57b93e4527e61780b79069efedda8656d9844a82fb93d85d056a016b17697265a286256ae70fc199f4db500bdd3f7eef59b80cd8947f76f3f09e28b74e9689179c7725e7004b316acc8ae3ac68bb02e5515ff94fcea753b147ade5ab9c160ea2364f5ee2477b6679a9390f9c5de866df5fb25ec555a62cd0548b072310aabb96a780a15e5d80a4fb17c1fe852bf58c523da8a9242e3fcf0c6a983083f4e9d3213f25ac760d650eec139e05dae0cd439112b5c7e450a9566a90348726268bd20ce839cdb512690d5ab57566c099310e47059ac87301ce5f34895edc421b6750d9b2517061517bd44fb8160fc70247dc695b6a473f19db10d6cd7dec5d8b13f4c75a5f51dfee09e924c50f26667094284a321cbc17810eb004c2d5420adafb4a29026d79fc32b4eb105cfa213129ff4ea3aa31fa6154daa5c67f9e22558a1841119e6741636d24dac2545ed2774c513d7e1025dbcb9d535b41f3a6c6bd3d8de9ca192b083f402ed3922f8df62a6ea9024535e2d7ff01a4ea1cb390e98e59d86915f6a2a7e68c1b29fe0fbf5fe45b2462b1497b80b0c804da7b8ee1335bd3c4a9247391484b6ea1911969894e1a6dd31383e864e31e39301e1a51c1d65a0ceccded4994cfbd25c0bf6aef9fdb9dd68c9205067b791163699f4bf915fe9e01f03a25da2319bfcb96f1767faecc435305697a3be6f5e00c99f46df3e8bb2d6d128e64c749459201784ce60730aa4fe99e79069299efa949d1144ec27790ab7285053feb186332f95164c4a5d4e6a29b6585a35dd36fb73fb3075bb8041f02d0e67a1316aaab0c06785f85ae3ff0abc7c46a80b5985f9369f007eb19c0b0b5f4e7ef85274e7b03a1a4e412d26d96a487c3e4b35e53bdf3c3288bd8fc20f90d83d11ea4cb5b5dcf0ec34edef803acc6cdd8c7c2ddf37b4c66030f1a8c28669e7ad44bff387f5280fbf97fa706728dac16d6a9fa747cd116f2c252e8b75f34da207c8549c347573a999fb9c753616e344273bc1d9fa86a156352a103f5f6b2ec4892133995b7c9c6920864b70de7ab2a939e5277ce734747ef9aa36c0ea032c12d2636a8afe85d03550b8617fc09b39beaa0b3911a9f3d963b67e2dd1a9e56d0cbcbab5140604ef212573bd9c4293839dc80dc0adaa39b75014895ee2372170209ec3f47f4ce34b1330402bf61c7cb214aad4fd58d6de9b4d7175f1cf38a8d7bcfcc9bb4e007783d9d4324dcea4037214a1d3211a1e3560c0251a9b6f8246861afd1ece720c85fe0b8be48d8c32d62230cd284b8e6c5bca299a499be7d1a6936df0eea563a1f66e86140c563695eafb2efb8425c25143aefe4574b635ddd2fcb29f0a0b3258cac2145c6648276ad79938322b1bb3c9b3658df73bc6d583cffc81cbb89b2b0479ef6208d40a0c345eb1e10bb436ca5167881db7c83f39841437eff3cb2d60916ceb5e980a40ce54cbaa0a430aa2f0d82f686337325e7e9d253c088a88dfd35ea4c6366fac2d26ce63c3d6d5dd0a1ccc971b26bb19334ffc2c74a3a16a6a63de463571c02bf059cefb56a1763667b2efabe315b3761f6981cf52843c902172ec30feb3d240d565dadda771a38d32e5ecfb0c21ea191e7448aebb9b64f5d2d3a05265f5d77264f8beec703d735754aca807f8fa3b009f0ece220331986f5ab5381c1c31af93a47fe6dc6310b498f9ffe99a2c0d8792bdf242a14949acf4d799aa017ec84d87a1dc0f481b78f0eb3ff16d3807f49c1af50b36fbb0d7491d77d068a6a352c1e52a4610503bd90d48e57b63b83f4f93f97dcd929d465f26cba8bdc07a7748b4b238a6625ed5a5599373742ea3db1784c795b5c2a26eb1d298a7d6654bd9025fd3a79494816a63434b62da59fffbfb607feb8c92fd274df70876669968013bad068a12c9afd5ad88c8e6529753c52f1bf6ecda5cfb0e2804e1c06538bfe134cd14f6df05bb8dfd8f76a2cb65c594b532ff117e4a48e9632b59a139eadc1c3194a8b66108cb4c83a925a27c0c57a37a7e35549b1a2e0d0f0168d7a090f41b293a66f7bc8b8137ae0695c73094d46a8da6a163dd27be985fd96fe6fa766c74003fd56162f5b5b5eb1dce0ef6cf0ac2a4e3e9f7232396621897bf5d4c766c4392d82aa728e1592b7dff95ace32c33d03e9c5dcdfceda3bd2bc7b2ac8771d13f535be93013b78dcc41e44b8ef9016e78bdbc6ae815785f1174b065c5cc3ef0b7377dccee008d5bdaa1dced4b708acad9d03d25a92b639002361cdf776753486203d06a8b20ea44df33012ed3c8cd2286b804ed400e26019ec978b52978be83b15e395bc540a506055233a7d19995a02318662b93940541c318866e4a00702cfb03615f26e0e10e1ebe4036756dd10503d74bc8f7b38d7c6eeded138881c342c863a66f8f239770d08445691bc64c7309cea059d0788cde05743e2708b46092883ccd7b063ebacf2f3cec0c55d3f5828d5f1a5d49aa10b0501ae0efa1af493500991647e2b51094d4d670eb6b06546e667f937839764be58ac4ed594ae50049647fd240ddb4d850b471c4c1b295229ddec6e619dc73b401d77836bce538fa7f37c5445e47f75d94d80160f056330545e4545273d825fb3d3224bf54beb4172e1d9bb5686cb97b9e690f7e025bda1f9298f6fd4d371ebd30a305fea9eb9342456a3a6b3c93a36dfba6f85cec2a581b999a3625cf1187e214b8d8eada7d36e56ea382eb0dc0271570a50764e849a3006b275b834debb9de095b16c7b79d0fd6d241b1ded6dac0626329f7b6d46620d48871e45a9249ec1ea599d46506cf53862ea8d7e39739d63419", 0x1000}], 0x2, &(0x7f0000001180)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14}}], 0x48}}, {{&(0x7f0000001200)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @local}, 0x4, 0x3, 0x0, 0x4}}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001280)="8293905ab58adeb96ad60b20351d057271af8de1abbc2801969e1e9c477bd1286aecf44644b2b543bc231baf3b826b8ec0ac6fc1bd3ccca049d8bd7ef99bba7e27bb31b96b38ebe7e76db9f98265595d39ca31c22a89ccac5fe5f3e02d60efac8a7288518ca2ec02ba0227a453520c037f70575d22b86849d2d1180314cf9ee3bdb594c6364b0801bf3fe1a8953923b818a6c1e7dc509cec636ef7c60f6ed6fdbe3c5d449a7f6a315c8b459e1ee500c1012ca2ace04c24a386e7ab3f20d2eff324f7cc7c37a065f4aa460e03762b3f17f832610334e1629975f8a91a62c0db5fa56274910bfc1744b3e9ffeafe834ccee34a220dc9042f", 0xf7}, {&(0x7f0000001380)="56ee5e8f7a6cb4a3e940590ed96f043d38fab603c1a2fdf6d2b86269ea7142a6a4872774d7d4a2ae9c9a377eb2ab8ff5b87be5f18b827985cde4e8f3fbea44553a6391f192ff62961c5b2dc4903b06c8", 0x50}, {&(0x7f0000001400)="6fe69f09eba88a045038344b663ff9d6363ea911aa8ff374c0ac6a8a26cc0dbca014f08402a94436c59d6c3a804686ec4bb0a0db81d047b456beae2e27238cdb39cadc15e174e884ea62361e5af449154eb4c2222725c442b66f2e84596b45fd2d2c07a1c33a06302ec1b09c96f68232c252fc68f9898ed63868be3ebc0c7a51a8b503abfce2a7fa6d85d4972c321cc39d41afbdff974a4cd8e2cdc1d17bf7051b9ee5babc292b2e1ad3e98564c7d5c5bee5aff8db01f673", 0xb8}, {&(0x7f00000014c0)="62b3abe8384aae20058908ef0fad950717dc20cf348c38da7e92e1b4abd0e3dfb9fce2848178fb7b07fd432bdf762ec45fb2fd883a3867e8b672c5505096fae89ac424a6468dd5b1a238d564e729bf00d4a7adf66a7c6669339a455e14e30aa20b57877516dba9af599f8c3aaf9dc14309a9c214888dc97edc7849edf6eb09598f552f820857d9704d4b428e8381f60787eba61d2895b8f297479adf2070d149a3d75477af6eaced8c53ea4f4e0f63cf14783999a5eddab6", 0xb8}, {&(0x7f0000001580)="c7a91d307bb2c43b4ad43fc5d16dbf57ab473f82", 0x14}, {&(0x7f00000015c0)="bf204af08b73b83fc218f2026f451378d5c755e65659567ee7739ae9c5453cb9978a65dc195c211701c4aa994c2f75cb03e6bbc580e6dc9b87e143988d5e9f0df3ccbb273dd217d2053f9075a13f4e26df96fb73a3300d", 0x57}, {&(0x7f0000001640)="960e6959d8631644445dd7a1dd7b8e4f27f7bbe2ad", 0x15}, {&(0x7f0000001680)="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", 0xfb}, {&(0x7f0000001780)="5b1c60e342925d06a7bd6afae04147753562baf237ff2634cff4792c38e97ee3d9ebcde3e2ff135d7b89dc08c8b0a05edcd6f032069df540bbfd77abdf0e492a346027e469b848a121193ae725a703354a5fe0", 0x53}, {&(0x7f0000001800)="b5c9faadc7dcda7012d371ff4e494cf975dcce8e99131491a47ce98adaf378695b239de6823bfab0743857e806589c715e2456f5fcd23d8297b7f50e830339bad70211653696a019c02c7b527f6ff62ded95cc8a8cf70d759b08d10b30120764e9ef0d49b7d39fdb66f4807159c3f735cb6bcb91388dd92dc2d840a48293485ee53523c84e23e8fbac02b622746fdf2fa93710719e9ce6e624daccd33600e4e42890116b021d5b5db2414897898a9579e01717c4ccb3bd18e4c2ddc1f97a4064a95fcb5156b6", 0xc6}], 0xa, &(0x7f00000019c0)=[@timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x48}}, {{&(0x7f0000001a80)=@nfc={0x27, r1, 0x1, 0x7}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001b00)="b772606f78", 0x5}, {&(0x7f0000001b40)="4633d7f14910f5c9d306a03156e7e7b8309e35594e2e4da71361c556a7c148d3a185ee0b414f32d7529d46e0e3b5fa57d770aecb65e6d788436052e640d6b6a3fa6797e80f5744237644bc5ffa2293453d643433f3580de34ee379ecefedd7abfd979305209f4af4dc69bb665e1a66d4e5a3bb8e3da15cf14fbe371e2f5e71828f5212cadb", 0x85}, {&(0x7f0000001c00)="ce0e47ce7a5e60f100825480b00fd88ee4f4f62a4ca75411326db04312778d4c499b077526e802a2381150d714c13babfa66752b5fa1320317f5234041cfe4fc5cbfe3589653dd3661c0c891bdbda09ef1c2597f05fee924b978c40d30bee3d4a6847fb724053ff484f34b194a2248b8b39719232a136df593b8a7", 0x7b}, {&(0x7f0000001c80)="e80d300acd7dd05c0090e34ddb945b43f13610483c02eb481ee6de656d2ad27b673725f73ab1238ba347e7fe0177e84917e378b1791cd116bc984c182bac4311c6e6d16e94b30d25406eec9c89b122f77ceb27ac8e1b3f682059fa075ee2facf327ef62154783b393ad020da66229e33b4db99595246415192d02f0841a111799c0d658815202587fbe3e0b4a808c6adc93412860356527e981ac90393b9b746aff14e107049aabb9d82fec8393bd00a8503e8516c13a639ef668b281e9a8fe8601611efe7e6842398", 0xc9}, {&(0x7f0000001d80)="c0b479cfa811bf350087db299b3c1c96e390e0e0a59b4bf3787cf475de19cdf18936abcda5caf8805152ed25e9231c1405b71c687da66af4dfb0acb5a9e7d5aacf6c3af78700f2f3e88e764b9c643a42182cea116e47425ba52c2a252131818d7b80b6da063f2d97a6cfc42f419d1a009b0d7567912db9f8a751666579cf15d86e7c", 0x82}, {&(0x7f0000001e40)="7d5832de0d710caa86a2c38dd2c217c04ff2c8dde50326", 0x17}, {&(0x7f0000001e80)="3060ac10487645dfbb78fc3a830ddb550ee5a872d00b0779df3a36fc3ca86a40ded4a788e801e06eb86e56f6dc2af64b789cb85f0ad14078cee5fe79e5c3d57efe368611c42afed4c7fd603781679b1a92cd5ada1aff616ca4b8ca2e0d0dd50a46b75c3cebd9afd4490d1645f6a627bae14d9c402a4a771f07047be63b1b9cbe701693a0b86e8a90411ec424498610867d349bae391aee6500f6783bf0c722356dec1a785713780cdf203f51deb8c0ddf8eb113b1ff4e4c0d54b7fe25481fd2502d4d6ea8baf5f099cdaab2a1449dbaa459aab3f99aeacc4ad4ecbd40423c591651ae62fbe1f44c4d31bd165d45a0c87bd47b346a0324788", 0xf8}, {&(0x7f0000001f80)="6a729d8ed47d57e816b34ed1982fcac82d210dffb5655a3228777f9c3c1a6c9b87decbf5d95686cef189b383b8f3fb0b4cb8d4f5826c8a17b94eced24f036b7c7c374b1793d42abfafdbf6f8ec07ea2466993fbddcdde13156444220202940389a7152877580b46c8d8ef698babeeaf91cc1dd3ddd4ce8c8d5d9f93f37ea69339d41d986db63e913490a5f5cfd225d56f97e56e59f512aced94fa9bd9b018bc880c1cb84d9c0b805a6333c0240d2", 0xae}], 0x8, &(0x7f00000020c0)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xffff}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0xc}}, @mark={{0x14, 0x1, 0x24, 0xe20b}}], 0x90}}, {{&(0x7f0000002180)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, &(0x7f0000002240)=[{&(0x7f0000002200)="7c4679e464a62d15ff3cf0be283fd9971d364eac648938a483c8870ebc2fb7572982abcda1253a71b526fa07d6d8d1ecaa42fa", 0x33}], 0x1, &(0x7f0000002280)=[@txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff7}}, @mark={{0x14, 0x1, 0x24, 0xa49}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x10}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x90}}, {{&(0x7f0000002340)=@ll={0x11, 0x0, r4, 0x1, 0x5, 0x6, @remote}, 0x80, &(0x7f0000002700)=[{&(0x7f00000023c0)="722b20773e74993349c2a11e49f236e2585916fbd4ad1a7d3a776e07dd30bfaf080ee38a28fd9b7ee59d9bf849ff8c84ad79b8b37fee2e33e675fff5782462561016404c4dea250d8af2dd27061149042125192e4b9b7f5156e24ce6e4ec918e1be82c99ce92c625a3cce143a6178a925d51395d245603abb94a634108a1a8", 0x7f}, {&(0x7f0000002440)="278979b58358aa97d058cf1338ce28097903bf2b76f19ec6686ada7b884af2326366dce75a8f66b753f92eb3aab18dbdbf1d8a3fb4e8ba5241b015810d3a04fefebb42472abb617a04936ad30e18dc336a14565788b61634cb6f594b47d4a621789717302d91cb00d5c55682dfe218fcb9acb2a64ece14bafd970f25196028981428c349b24d659f0493c6e1af33ffbd992bb0", 0x93}, {&(0x7f0000002500)="25d4a354b6839df8a96dda06aa90b3a246b2ea742d7b65230913c3a05a72a813da5d94d3a3837bd55f", 0x29}, {&(0x7f0000002540)="b5e98d952aeb99a70ca281a2ed35ccb872038ee3a39e298ecc3e6c7ccdfc87aeb6618cb68ce72aa962f16f998c30f082d5ff2356e7aec4dca1b32c711d04cdc471153fcb773de8bc7be9b19392f7f0cb6d1d92e88808743cbbfb750a6bc5ceafc1b71f204a3b5ea201a1515bba86f317d264df09df97482dfe6f5aa506d09c05974ff96ea6cab8afa09b7ba9c58c276118549ec3ef5e71a36bf0a9b51338f974f190", 0xa2}, {&(0x7f0000002600)="6848e44558b734e7f28f51d9abed4eda5982abed56834487bfe2449f8fddbc229d4cefdafacffa7e330294a9fac2c1226ee68130ab262e67505d573a06d48b2979253e733049350075bf22ab88b8ef7407efadabc7b3d7d6aa1e1dfaf0d2337c6f3d8e21ef7f1565860a56d8d8c9474309a832cf4e21f4ce0ead0b2c0b37d8a644bc72810320c5d5e4f75b5cd1dec72efaee07d922a077a76fba1980717d09f383a70ddc2e37daead5b84cb39f492641763360e1dd40c2aad3443eb5922a1cdb652f7b4e05ff963085f319", 0xcb}], 0x5}}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002780)="428e93306c44e620c1a9988983d5c1daef448802b7f73f2ec05c9bfab3b90a0bc1", 0x21}], 0x1, &(0x7f0000002800)=[@mark={{0x14, 0x1, 0x24, 0x80}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x400}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0xa8}}, {{&(0x7f00000028c0)=@generic={0x23, "0247dc6c845477980e634d6271e735d3f97cee45dcd3b5243c270150553ec40362d165b3afc2bdebc0f4e87e8abb04f057790cd752d91983f049cc45308ba9ccd49056d1c348bee7ed7a064db33b50a8ae7aaecd9f8a262ee7479c6e147f8221b168395d9f97355cac499872f51efbc932b0eaa1ec1074247a186f1b823f"}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000002940)="148c2884586688574b91570496148777", 0x10}, {&(0x7f0000002980)="357312da1e3f0263802df7778cb6414476cebb04f4fcbaba81cc92b734aa7bd6f7955c2d3f8433fd2cbc9c3469f6c0cdef7131999e7ca271f91fbcc404a0d69b", 0x40}], 0x2}}], 0x7, 0x4004820) getsockname$packet(r2, &(0x7f0000002bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002c00)=0x14) 1.233092518s ago: executing program 4 (id=4290): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x1d4, r2, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x71}}}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x9}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x222}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_TX_RATES={0x16c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1, 0x12, 0x36, 0x2, 0x48, 0xd0ae8580bf6c8911, 0x3, 0x6, 0x9, 0x4, 0x6, 0x1b, 0xc, 0x4, 0x4, 0x60, 0x60, 0x8]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x5}, {0x1, 0x1}, {0x2, 0x8}, {0x6, 0x9}, {0x3, 0x4}, {0x0, 0x6}, {0x6, 0x8}, {0x2, 0x3}, {0x1, 0x2}, {0x1, 0x7}, {0x4, 0x1}, {0x0, 0x4}, {0x0, 0x1}, {0x7}]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x18, 0x1, 0xfff8, 0x4, 0x0, 0xec8a, 0x26e]}}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x0, 0xa}, {0x0, 0xa}, {0x1, 0x6}, {0x4, 0x1}, {0x5, 0xa}, {0x1}, {0x5, 0x2}, {0x2, 0x4}, {0x5, 0x3}, {0x2, 0x4}, {0x5, 0x9}, {0x4, 0x3}, {0x0, 0x4}, {0x0, 0x9}, {0x3, 0x4}, {0x4, 0x8}, {0x3, 0x2}, {0x0, 0x2}, {0x4, 0x6}, {0x0, 0x8}, {0x1, 0xa}, {0x5, 0x9}, {0x2, 0x5}, {0x6, 0x6}, {0x0, 0x3}, {0x5, 0x6}, {0x2, 0x5}, {0x5, 0x6}, {0x1, 0x2}, {0x1, 0x9}, {0x4, 0x9}, {0x2, 0x7}, {0x1, 0x5}, {0x3, 0x6}, {0x0, 0x6}, {0x2, 0x3}, {0x3, 0x7}, {0x0, 0x2}, {0x3, 0x7}, {0x4}, {0x6, 0xa}, {0x1, 0x6}, {0x7, 0x6}, {0x1, 0x9}, {0x5, 0x3}, {0x0, 0x1}, {0x5, 0x3}, {0x0, 0x7}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xbb, 0x517a, 0x9, 0xfffa, 0x3, 0x6, 0xc, 0x5c]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x37, 0x5, 0xfffa, 0x6, 0x34b, 0x4, 0x3, 0xfffb]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x5825af108e1d5d1b, 0x60, 0xb, 0x4, 0x4, 0x9, 0x36, 0x6c, 0x1b, 0x24, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x101, 0x9, 0x2, 0x6, 0x60a9, 0x2, 0x989]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x411, 0x3, 0x4, 0xbb8, 0x7, 0x7f, 0x7]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x9, 0x3, 0x5, 0x3d5, 0xbd, 0x2, 0x8]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x401, 0x0, 0x8203, 0x9, 0x5, 0xceeb]}}]}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20040084}, 0x1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 1.06380681s ago: executing program 5 (id=4291): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) epoll_create1(0x0) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x7dc48146, 0x7fffffff, 0x5539e0cf}, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b80000001900010026bd700000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="eaffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000fbffffdfffffffff00000000000000000000000000000000000000000000000000000000000000006200000000000000000000000000000062fdf544bbc5a887e39564c8c029d262f0bdb25021419f6229c017cbf6858ded53b87cf6c3a4a2d0076dbbea544ab58603dbe0f37a0ac87ab1d7aa6841fd77a7dd3ac943ee772297afb896a6ba52e9e0fc3223d67fe0a5ba768540c60c22eb1ac3bee003"], 0xb8}}, 0x10) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffe, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0x100, 0x0, 0x0, 0x9, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32, @ANYBLOB="080002"], 0x20}}, 0x0) r7 = getuid() write$tun(r0, &(0x7f00000000c0)={@void, @val={0x2, 0x1, 0x204, 0xc384, 0xfa89, 0x6}, @llc={@snap={0xaa, 0xff, '\b', "8cbd59", 0x805, "0d67aa1e0821a58c7247ea2f64e60af3cb14d1c9af92133158ba77cbe363612b1b3b5fbfe1d0929d"}}}, 0x3a) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b40)=@allocspi={0x104, 0x16, 0x4, 0x70bd26, 0x25dfdbfc, {{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4e20, 0x0, 0x4e23, 0x5, 0xa, 0x80, 0x20, 0x3b, r5, r7}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d5, 0x33}, @in6=@mcast2, {0x3, 0x2, 0x7fff, 0x3, 0x50786bdb, 0x1, 0x5, 0x2}, {0x7, 0x80000001, 0x0, 0xdea6}, {0xffff, 0x1, 0xffffffc0}, 0x70bd27, 0x3506, 0xa, 0x3, 0x6, 0x8}, 0xa, 0x5}, [@policy_type={0xa}]}, 0x104}}, 0x1000) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f00000006c0)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x3, 0x2, 0x6, 0x1ff, 0x800, 0x3}, {0x9, 0x10, 0x8, 0x400, 0x6, 0x1000}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000180)='vegas', 0x5) getsockopt$inet_tcp_buf(r8, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8040, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000140)={'ip6_vti0\x00', @random="8afaf8499587"}) 1.052626487s ago: executing program 0 (id=4292): pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x8003, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = socket$packet(0x11, 0x2, 0x300) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x143402, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="3d00ff56", @ANYRES16=r7, @ANYBLOB="90092dbd7000fbdbdf250200000008003f000800000008000c0100000000"], 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x28}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r9, 0x401) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r10, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074a264e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) bind$netlink(r5, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x360, 0x228, 0x25a, 0x360, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xfe}, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0x208, 0x250, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@rt={{0x138}, {0x5, [0x7fffffff, 0x3], 0x742e, 0x4, 0x6, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @local, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x11}, @local, @private0, @local, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2], 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000001c0)={r3, 0x1, 0x1, @local}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000780)={r3, 0x1, 0x6, @local}, 0x10) 953.173693ms ago: executing program 4 (id=4293): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000206000008000300", @ANYRES32=r2, @ANYBLOB="0c00990009000000740000000800a0009e090000080026008009000008009f0003000000"], 0x40}}, 0x20000000) connect(r1, &(0x7f00000003c0)=@hci={0x1f, 0x0, 0xab9cbcac8d9d55a8}, 0x80) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x4e2a, @broadcast}, {0x0, @multicast}, 0x68, {0x2, 0xce23, @empty}, 'lo\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_ifreq(r6, 0x8947, &(0x7f0000000480)={'veth1_to_bond\x00', @ifru_data=&(0x7f0000000440)="42bb2e0290d88fcbed38a2d9a042aad56db30bd5556a8e2c2c641417db246842"}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@getchain={0x2c, 0x66, 0x400, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xfff2, 0xffea}, {0x7, 0xffff}, {0xfff2, 0x3}}, [{0x8, 0xb, 0xfffffff7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r13, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x9, 0xffff5551, 0x2, 0x7, 0x24000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r14, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0xc00}) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @private, @loopback}, &(0x7f0000000100)=0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r15, @ANYBLOB="00022bbd7000fcdbdf251400000008000d0004000000080014000e0000000800050009000000050018000000000008000500ff0f00000c00018008000100", @ANYRES32=r16, @ANYBLOB="05000c0001000000080015000500000049502aa06d35b92fcd8300f379052005eaf9a34c00800800010000", @ANYRES32=0x0, @ANYBLOB="08000300020000000800030000000000140002006970766c616e31000000000000000000080003000200000014000200776c616e3100"/64], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x4000880) accept4(r4, 0x0, &(0x7f0000000240), 0x800) 878.810978ms ago: executing program 3 (id=4294): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25ADDFWD(r1, 0x8940, &(0x7f0000000080)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001000050025bd7000fadbdf2500000000", @ANYRES32=r5, @ANYBLOB="00000000010400000a0001"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r7], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 777.779784ms ago: executing program 3 (id=4295): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x40) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) socket$kcm(0x2, 0x3, 0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) 288.516327ms ago: executing program 0 (id=4296): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) (async, rerun: 64) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000000)=0xff, 0x4) (async) getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f00000002c0)) (async, rerun: 64) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000100)=0x40, 0x4) (rerun: 64) r2 = socket(0x2a, 0x2, 0x0) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffd, @mcast1, 0x2}, 0x1c) (async, rerun: 64) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @empty, @mcast1, [], "8029335287b7a081"}}}}}}}, 0x0) (rerun: 64) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x140e, 0x11, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}]}, 0x5a}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) close(r4) (async, rerun: 64) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) (async, rerun: 32) ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0x8) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) (rerun: 32) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0xfff2}, {}, {0xffeb, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'vlan1\x00'}, @TCA_FW_POLICE={0x0, 0x2, [@TCA_POLICE_RESULT={0x0, 0x5, 0x4}, @TCA_POLICE_PEAKRATE={0x0, 0x3, [0xfffeffff, 0x9, 0x5, 0xc, 0x7, 0x8, 0x80000001, 0x0, 0x9, 0x4, 0x0, 0xa35f, 0x6, 0x368, 0x867, 0x5, 0x1, 0xfffffffd, 0x0, 0x6, 0x2, 0x720000, 0x9, 0x36, 0x3fc, 0x2, 0x401, 0x3, 0x2, 0x2, 0xfa, 0x7, 0x2, 0xe, 0x259, 0x7fff, 0xfffffff7, 0x80000001, 0x101, 0x8, 0x0, 0x10001, 0x2, 0xbef0, 0x8, 0x5, 0x7, 0x60000000, 0x7, 0x5, 0x1eea, 0xe237, 0x4c07, 0x2, 0x8001, 0xfffffffc, 0xffff, 0xffff8ac6, 0x3, 0x80000001, 0x2, 0x7, 0x200, 0x6, 0x6, 0x2, 0x2, 0x10, 0x0, 0x4, 0x1, 0x8000000, 0x8, 0x1, 0xffff, 0xb3, 0x8, 0x7, 0x1fffe000, 0x7, 0x7ff, 0x262, 0x5, 0xbd, 0xfffffffc, 0x2, 0x2, 0xf, 0x48f0, 0x7fff, 0x1, 0xdd4, 0xc, 0xa, 0x0, 0x80000000, 0x3, 0x8, 0x5, 0x80000001, 0x8, 0x5, 0x8, 0x0, 0x1f884fd6, 0x101, 0x401, 0x3, 0x200, 0x8000, 0xfffffffe, 0x400, 0xc0, 0x7, 0xc4ca, 0x4, 0xfffffff9, 0x0, 0x401, 0x3, 0x1, 0x95c0, 0x3, 0x2, 0x5, 0x2, 0x4, 0x9, 0x7fffffff, 0xc, 0xf5, 0xf, 0x15cb, 0x8, 0x0, 0x9, 0x5, 0xd8be, 0x400, 0xfffffff7, 0x1ff, 0x0, 0x8, 0xa, 0x3, 0x1, 0xd, 0x1, 0x80, 0xa, 0x8, 0x10, 0x1, 0x3, 0x7, 0x2c, 0xc, 0x233, 0x4, 0x2, 0x9, 0x0, 0x8, 0x8d50, 0x4, 0x10000, 0x0, 0x1000, 0x1, 0x6, 0x80000001, 0x10, 0x6, 0x9, 0x1, 0x591d1ab0, 0xaa04, 0x3ff, 0x8, 0x5, 0x40a, 0x101, 0x6, 0x9, 0x7, 0x2, 0xffffff7e, 0x9, 0x6, 0xfffffffd, 0xfffffffb, 0x5, 0x80000001, 0xd, 0x7f, 0x7, 0x515f, 0x1, 0x1ff, 0x5, 0x5, 0x9, 0x1, 0x7, 0x7, 0x9, 0x800, 0x4, 0x3ff, 0x4, 0x1, 0xe38, 0x4, 0x4, 0x88, 0x2, 0x8, 0xe, 0x4, 0x5, 0x13de, 0x9, 0xfffffff0, 0x3330, 0xffffffff, 0x7d0, 0x9, 0x8, 0x8, 0x8, 0x3f, 0x4, 0x0, 0x39f0, 0x29, 0x10, 0x4, 0x80000000, 0x113, 0x1, 0x9, 0x3, 0x4, 0x2, 0x0, 0xdd4, 0x1, 0x7, 0xb, 0x3, 0xf, 0x7, 0xfff, 0x6, 0xef3, 0x2]}, @TCA_POLICE_RATE64={0x0, 0x8, 0x4}, @TCA_POLICE_RATE64={0x0, 0x8, 0x5}, @TCA_POLICE_AVRATE, @TCA_POLICE_PEAKRATE={0x0, 0x3, [0x6, 0x7, 0x7, 0x9, 0xcc, 0x7, 0xfffffff8, 0x10001, 0x5, 0x3, 0x565dbd3a, 0x1, 0x10, 0x6, 0x6, 0x2, 0x0, 0x81, 0x1, 0x0, 0x8, 0xa, 0x1, 0x0, 0x7, 0x45ed, 0x2882a80a, 0x9, 0x3, 0x2, 0x7fffffff, 0x6, 0x6, 0x7fff, 0x6, 0x8001, 0x80, 0x40, 0x1, 0x2, 0x2, 0x1, 0x6, 0xa1fe0000, 0x5, 0x5, 0xfffffff8, 0x1, 0x3ff, 0x4, 0x9, 0x3, 0xd, 0x7f, 0x4, 0x7, 0x3, 0x0, 0x4, 0x1ab1, 0xfffffff8, 0x2, 0x9, 0x7fff, 0x6, 0x1, 0xc, 0x1, 0x1, 0x3, 0x6, 0xa, 0x80, 0x0, 0x1000, 0x7, 0x3, 0x6, 0xfb5, 0xbf, 0x3, 0x100, 0x1, 0x101, 0xffffffff, 0xf7cf6f1, 0x401, 0x7, 0x7, 0x4, 0x1, 0x4, 0x6, 0xc, 0xbcd, 0x8, 0x0, 0x8, 0x1, 0x2, 0x9, 0x3, 0x6, 0x8001, 0x2, 0x3, 0xf, 0x7, 0x0, 0x9ec5, 0x1, 0x5, 0x1, 0x3, 0x8, 0x6, 0x7, 0x8000, 0x4, 0xd, 0x4, 0x9, 0xbe2, 0x9, 0xfb, 0x5, 0xeef, 0x200, 0x9, 0xffffff81, 0xb, 0x3, 0xb2, 0x3, 0x1fe, 0x7fff, 0x7, 0x10, 0x6, 0xfffffffa, 0x7ff, 0x3, 0xf88, 0x80000000, 0x7fff, 0x9c, 0x80000000, 0x2, 0x26bb, 0x8, 0x97b7, 0x6ad, 0xf7e7, 0x9, 0x10000, 0xc, 0x3, 0x7fffffff, 0x3, 0x9, 0x1, 0x100, 0xdf, 0x4, 0x2, 0x4, 0x5, 0x9, 0x400, 0x2, 0x400, 0x9, 0x4, 0x1, 0xd, 0x6, 0xcf09, 0x7, 0x4, 0x4, 0x5, 0xb6cf, 0x7, 0x8, 0x4, 0x7ff, 0x94, 0x7, 0x4, 0x3, 0x1, 0x7, 0x0, 0x3, 0x9, 0xc, 0x6, 0x2, 0x7fffffff, 0x2, 0x4, 0x1, 0xea, 0xff, 0x98, 0xfff, 0x6, 0x8, 0x8, 0x0, 0x6, 0x700, 0x0, 0x4, 0x200, 0x1, 0x7, 0x0, 0x1, 0x6, 0x5, 0x5, 0x8, 0xd, 0x0, 0x9, 0x9, 0x2, 0xf6c0, 0x4, 0x2, 0x8, 0xc, 0x7, 0xfffffff6, 0x9, 0xe0f, 0x7fffffff, 0xbff8, 0x5, 0x7fff, 0xffffffff, 0x1, 0x1, 0x6, 0x9, 0x27d, 0x4, 0x4d, 0x1, 0x3, 0xc52d, 0xffffffff, 0x80, 0x437, 0x5]}, @TCA_POLICE_RATE={0x0, 0x2, [0x7aeeb2f0, 0x9, 0x8, 0x2, 0x800, 0x0, 0x4, 0x1, 0x8, 0x8, 0x1, 0x9, 0x3f8, 0x5, 0x800, 0x10, 0x7f, 0x5, 0x9, 0x80, 0xfffffff2, 0xffff, 0x800, 0x5, 0xc, 0xd, 0x22, 0x3, 0x2, 0x0, 0x6, 0x2, 0x8, 0xffff9515, 0x400, 0x3, 0x8888, 0x8, 0xb, 0x56, 0x8, 0x6, 0xd, 0x67, 0x7, 0x7, 0x5, 0x8d, 0x8, 0x72, 0x81, 0x7, 0xc34, 0x4182528b, 0x59a, 0xfffffff8, 0x6, 0x22e0fb2d, 0x0, 0x400000, 0x8, 0x9, 0x5, 0x6, 0x1ff, 0xffff, 0x6, 0x7, 0x6, 0x3, 0x6, 0xc0000, 0x8, 0x2, 0x6, 0xffffffff, 0x8, 0x3, 0x8f, 0x3, 0x14f3, 0x0, 0xdb, 0x1, 0xfffffff8, 0x8, 0x1, 0x5, 0xd7, 0xe, 0x4, 0xa, 0x3, 0x80000001, 0x2000400, 0x0, 0x1, 0x3, 0x9, 0x5c3e4ae5, 0x8, 0x7, 0x1, 0x8, 0x436, 0xc, 0xc, 0x1, 0x9, 0x97, 0xba, 0x0, 0x55b, 0x7f, 0x8c0, 0x4, 0x997, 0x81, 0xbd, 0x8, 0x76eb, 0x6, 0xa1, 0x1, 0x0, 0x1e, 0xd6b, 0xffff, 0x2, 0x7fffffff, 0x0, 0xd, 0x81, 0x5, 0x2, 0x0, 0x7, 0xd, 0x7, 0xf0c, 0x7fffffff, 0x26, 0x4, 0x80000000, 0x9a, 0x7, 0xd, 0x7ff, 0x800, 0x8c2, 0x8, 0x85dc, 0xfffffff9, 0xfffffff8, 0x1, 0x2, 0x6, 0x1a3fd585, 0x5, 0x0, 0x2, 0xffffffff, 0x5, 0x1, 0x4, 0x7, 0x10, 0x423, 0x7c8, 0x100, 0x4, 0x0, 0x8, 0xfffffffa, 0x200, 0x5, 0x0, 0x2fb000, 0x8, 0x7, 0x9, 0xfe, 0x6, 0xa, 0xfffffffa, 0x800, 0xfffffffa, 0x3, 0x8, 0x9, 0x10001, 0x17e7, 0x400, 0x40, 0x7, 0x0, 0xfff, 0x37a8943, 0x7f, 0xfff, 0xfffffffa, 0x10, 0x9, 0x7, 0x8, 0x4, 0xfffffffc, 0x7, 0x2, 0x40, 0x9, 0x4, 0x6, 0x4, 0x9, 0x3, 0x8, 0x30, 0xffffffff, 0x80000001, 0x3, 0x3, 0x6, 0xb, 0x9, 0xfff, 0x781d, 0x8001, 0x3, 0xfffffffe, 0x7, 0x9, 0x40, 0x4, 0x4, 0x591, 0x2, 0x3ff, 0xfa, 0x9, 0xb, 0xfffffff2, 0x401, 0x2000, 0x34, 0x7fff, 0x7, 0x5, 0x9, 0x3, 0x17ab, 0x9, 0x8000000, 0xae0e, 0x4, 0xfd]}, @TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x5}, @TCA_POLICE_RATE={0x0, 0x2, [0xd8c, 0x3, 0x6, 0x10, 0x3, 0x7, 0xffffffff, 0xb, 0xcb9c836, 0x6, 0xfff, 0xffffff80, 0x3, 0x5, 0x4, 0x3, 0x4, 0x9, 0xc20e, 0x10000, 0x8, 0xfffffff7, 0xff, 0x4, 0x5, 0xd, 0x8, 0x8, 0x80000000, 0x8, 0xac7, 0xc, 0x9, 0x5, 0x6, 0x1ff, 0x8000, 0x5, 0x8f1, 0x9, 0x4, 0x80, 0x5, 0xa, 0x1893, 0xfd84, 0xff, 0x5, 0x81, 0x1, 0x2, 0xf7e, 0xace2, 0xfffffff9, 0x9, 0x1, 0x1, 0xc, 0x100, 0x3, 0xd, 0xb18e, 0xe, 0xff, 0x8, 0x2, 0x6, 0x0, 0x8, 0x80000000, 0x7767, 0xfa, 0x10, 0x200000, 0x9, 0x4, 0x6, 0x3, 0x8, 0x8c, 0x7, 0x4, 0x10001, 0x0, 0x9, 0x4, 0x1, 0x4, 0xc04b, 0x6, 0x3, 0x2, 0xf, 0x80, 0x7, 0x7, 0xaa0, 0x80000000, 0x13, 0xcb, 0x2, 0x37, 0x5, 0x2, 0x7, 0x5, 0x8, 0x0, 0x2, 0x8, 0x1, 0x7fffffff, 0x10001, 0x2, 0x6, 0x8, 0xca, 0x1, 0x8, 0x5, 0x97, 0x4, 0x3, 0xffffffff, 0x200, 0x2, 0x9, 0x7, 0x9, 0xd, 0x8a4, 0x194, 0x1, 0x0, 0x4, 0xe, 0x1, 0x4, 0x86, 0x2, 0x8001, 0x0, 0x40, 0x0, 0x3, 0x5, 0x1, 0x5, 0x4000, 0xdd2, 0xc, 0x5, 0x1, 0x9, 0x800, 0x5, 0x9, 0x4, 0x3ff, 0x4, 0x7ff, 0x30000000, 0x9, 0x2f5, 0x9, 0x9ba, 0x1000, 0x2, 0x9, 0x8, 0x4, 0x8, 0x3, 0x4, 0x6, 0x8000, 0x4, 0x10000, 0x0, 0xa, 0x10, 0xd30, 0x75, 0x80, 0x9, 0x7fff, 0x1, 0x1, 0x5, 0x1ff, 0x8, 0x8000, 0x2, 0x5, 0x3, 0x3, 0x4, 0x4, 0x0, 0x8, 0x7, 0x3, 0x400, 0xa7, 0xf14, 0xfffff829, 0x2, 0xb620000, 0x39b, 0x7, 0x0, 0x7, 0x6, 0x9a6a, 0xf70a, 0x0, 0x2, 0x7fff, 0x7ff, 0x2, 0x5, 0x8, 0x6, 0x0, 0x7, 0x2b5d, 0x6, 0x10, 0x1, 0xd10, 0x2, 0x6, 0x9f3, 0x7, 0x8, 0x4, 0x4ab, 0xcda3, 0xffff, 0x2e9871c6, 0x81, 0x401, 0x9, 0x2, 0xdd, 0x9, 0x5, 0x6, 0x8, 0x100, 0x4, 0x0, 0x9094, 0x8, 0x7, 0x9]}, @TCA_POLICE_AVRATE={0x0, 0x4, 0x7de4add2}]}, @TCA_FW_INDEV={0x0, 0x3, 'veth0_to_bond\x00'}]}}]}, 0x2a}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000) (async, rerun: 32) r7 = socket$inet6(0xa, 0x80002, 0x0) (rerun: 32) setsockopt$inet6_int(r7, 0x29, 0x49, &(0x7f0000000140)=0x5, 0x4) (async) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 286.655314ms ago: executing program 2 (id=4297): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x474c}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_LIMIT={0x6}]}}]}, 0x70}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r0], 0x78}}, 0x0) 286.132219ms ago: executing program 3 (id=4298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000170000000c000680080004"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_delroute={0x24, 0x19, 0x2, 0x70bd2a, 0x25dfdbfb, {0xa, 0x10, 0x10, 0x9, 0xfc, 0x1, 0xc8, 0x8, 0x800}, [@RTA_MARK={0x8, 0x10, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000d4}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0xffffffffffffff07) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x6e4, 0x0, 0x5, 0x9, 0x808002}, 0x14) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000002000)=[{{&(0x7f0000000340)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18}}], 0x1, 0x44) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) r5 = socket(0x2, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x11, 0x14, 0x121, 0x0, 0x0, {0x23}}, 0x18}}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240008f445741a1ba1c026e9fa8792c21c5d00", @ANYRES16=r7, @ANYBLOB="08002abd7000fddbdf256500000008000300", @ANYRES32=r8, @ANYBLOB="0800020000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4c040}, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000002040)="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", 0xff1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r1, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 149.720423ms ago: executing program 4 (id=4299): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000001340)=""/4096, &(0x7f0000000340)=0x1000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001e0001000000000000000000020000000100000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x400c000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r7, @ANYBLOB="0426eae073ce6e96ca551dd5679021807de2fad2d31c356f432446fa585d4a0fe21a8e6e22b637a47039b774a03f95d6215236a8507a52f5f0b86c02fe9834cc0bc37e629a1dce6ff8de"], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) 135.777305ms ago: executing program 0 (id=4300): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000080)=ANY=[@ANYBLOB="b800bf0ac299cd4eab130000fbdbdf25e00000020000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000020000000000000800"/112], 0xb8}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x304}, "9d1dd848dafd162e", "22a99c4843357dc0f09e3a8fda830fe7", "10090040", "a2776d000100"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20fd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cec21291a43fe"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cec21291a43fe"}, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x0, 0x0, 0x2, 0x0, 0x7, 0x20, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, r0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x0, 0x0, 0x2, 0x0, 0x7, 0x20, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, r0}, 0x94) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) (async) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) close(0x3) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x4, &(0x7f0000000300)=[{0x28, 0x3, 0x0, 0xfffff034}, {0xa4}, {0xe9}, {0x9, 0x4, 0x7, 0x8001}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x10, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) setsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f0000000040), 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) syz_emit_ethernet(0x191, &(0x7f0000000580)={@multicast, @random="6076b5cad4f6", @void, {@ipv6={0x86dd, @dccp_packet={0x9, 0x6, "d16e95", 0x15b, 0x21, 0xff, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, {[@routing={0x8, 0xa, 0x0, 0x5, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @local, @private0={0xfc, 0x0, '\x00', 0x1}]}, @hopopts={0xff, 0x19, '\x00', [@pad1, @pad1, @calipso={0x7, 0x10, {0x0, 0x2, 0x4, 0x5, [0x0]}}, @jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @ra={0x5, 0x2, 0x800}, @generic={0x5, 0x9d, "bb77845e8915b951462f02f4f271b1c078fe3387b79ecff78e44a22205dc997cb8960c4c5fdf722da30121fceef490f537f1e4b11271cc7d4ae78f2a56587f9513a6e459523a5e5041741424f73d36f4663bfc9c86b3b440dbeab1023585d9f6e0dbe880d7866b1785ce72c89739390ffaf5528dd3b4031d0df6212d20b5d04cf92272336228663ffa5176930a48b2e35dc674ee3f98fe4b044e1adef5"}]}], {{0x4e21, 0x4e24, 0x4, 0x1, 0x8, 0x0, 0x0, 0xc, 0x1, "a5037f", 0x8, "d806a7"}, "0a28af74444969a5b8188158032f9bd9778797eeadc60fd5d8d9d3"}}}}}}, 0x0) (async) syz_emit_ethernet(0x191, &(0x7f0000000580)={@multicast, @random="6076b5cad4f6", @void, {@ipv6={0x86dd, @dccp_packet={0x9, 0x6, "d16e95", 0x15b, 0x21, 0xff, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, {[@routing={0x8, 0xa, 0x0, 0x5, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @local, @private0={0xfc, 0x0, '\x00', 0x1}]}, @hopopts={0xff, 0x19, '\x00', [@pad1, @pad1, @calipso={0x7, 0x10, {0x0, 0x2, 0x4, 0x5, [0x0]}}, @jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @ra={0x5, 0x2, 0x800}, @generic={0x5, 0x9d, "bb77845e8915b951462f02f4f271b1c078fe3387b79ecff78e44a22205dc997cb8960c4c5fdf722da30121fceef490f537f1e4b11271cc7d4ae78f2a56587f9513a6e459523a5e5041741424f73d36f4663bfc9c86b3b440dbeab1023585d9f6e0dbe880d7866b1785ce72c89739390ffaf5528dd3b4031d0df6212d20b5d04cf92272336228663ffa5176930a48b2e35dc674ee3f98fe4b044e1adef5"}]}], {{0x4e21, 0x4e24, 0x4, 0x1, 0x8, 0x0, 0x0, 0xc, 0x1, "a5037f", 0x8, "d806a7"}, "0a28af74444969a5b8188158032f9bd9778797eeadc60fd5d8d9d3"}}}}}}, 0x0) 57.561944ms ago: executing program 2 (id=4301): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000001180)={@val={0x1c, 0xf5}, @void, @mpls}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvmsg(r0, &(0x7f0000001680)={&(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000340)=""/148, 0x94}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/111, 0x6f}, {&(0x7f0000001480)=""/255, 0xff}], 0x4, &(0x7f0000001580)=""/254, 0xfe}, 0x40000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000080)=0x7, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="feffffff2d00080027bd7000000000000400000004000ead40516f65a667feec2b3ccf552ccaf1a113687aba1c09322f80fefad0db5b0761e51470"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 0s ago: executing program 5 (id=4302): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0xb0c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000140)="4ae1f256736ef79bd5dba70b937a583c835279649daabca910efacd2557bec4ee34d99a443d9c4b68d740a58ab473af649166d754bb5e42bfef7369817d71c9d82a278566bee653c4c359893074b808bca288549f50c78f06b8c30b010bd283b87cc43fa99aae341c4784378b2fabf67d9675726d5e448535f0452717614143cb59e7b7d10fe68a6e4714df52d7386c1dfed112c300116e17bd0e3586a496afa805a83ad1ab2c6147445437227ca02e173de307e550aae3d844bf22c35f85edb8aaa0adb70", 0xc5}, {&(0x7f0000000240)="c5a2ff2bf8baec0730880b84e4d895a03abde5efbe79f70098c13778f5d02e93fdc69b86289bdc4353da17d88062806c23ddd641bfccf7f5045cb9ae0629a1edfc3d2f56eca81f0ff204c75bc3620dbc3efed7aa4667a5a1765fa657a02c5c745e8eef9538111bbd4b4678da516b908a24da5fd04c84126537c9fb429d4fd2f7f3f373573bb42ce100b30ab7b65e2908674dbb5fea4ba7f727c5c33d6b57d01d5568589f6d133509aa592a4b8b", 0xad}, {&(0x7f0000000080)="b4837cd4bf4b7d11d10828a010f0b7dc487d54b8539a4ef4b97fa5d0cc2c4ca941495fe382d8610781fa9db3e223770f07e25aa5654f20b5c1f23cd5d92b449e7eefe973117e6594e4f6b8322669ab6db1b4f2568af8a4e9b8440748687e5751f32c5971d9199ab6b5868fcdaf09fed1", 0x70}], 0x3, &(0x7f0000000340)=[@dstaddrv6={0x20, 0x84, 0x8, @local}, @init={0x18, 0x84, 0x0, {0xd8, 0x4, 0x4, 0xee9}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x7fff}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0xc}}], 0x70, 0x4000}], 0x1, 0x35d4fab1650f3687) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) kernel console output (not intermixed with test programs): type 2 family 0 port 6081 - 0 [ 280.152227][ T3516] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.161217][ T3516] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.208943][ T3516] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.411968][T16297] netlink: 'syz.2.2932': attribute type 4 has an invalid length. [ 280.484186][T16298] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2931'. [ 280.495550][T16296] netlink: 'syz.2.2932': attribute type 4 has an invalid length. [ 280.684048][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.714511][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.790900][T16312] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2938'. [ 280.811708][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.833037][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.949090][T16321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2941'. [ 281.107721][T16331] sock: sock_set_timeout: `syz.1.2944' (pid 16331) tries to set negative timeout [ 281.139015][T16336] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2945'. [ 281.337015][T16345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.350723][T16346] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2948'. [ 281.362030][T16347] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2949'. [ 281.373151][T16349] netlink: 'syz.4.2951': attribute type 4 has an invalid length. [ 281.408940][T16347] "syz.1.2949" (16347) uses obsolete ecb(arc4) skcipher [ 281.776241][T16365] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2958'. [ 281.881452][T16372] lo: Caught tx_queue_len zero misconfig [ 282.046608][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.060332][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.068598][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.078002][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.088317][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 282.177809][ T5834] Bluetooth: hci5: command tx timeout [ 282.197399][T16375] wg1 speed is unknown, defaulting to 1000 [ 282.218603][T16375] hsr0 speed is unknown, defaulting to 1000 [ 282.568468][T16375] chnl_net:caif_netlink_parms(): no params data found [ 282.600643][T16405] xt_hashlimit: max too large, truncated to 1048576 [ 282.725719][T16375] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.733118][T16375] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.741213][T16375] bridge_slave_0: entered allmulticast mode [ 282.749672][T16375] bridge_slave_0: entered promiscuous mode [ 282.768298][T16375] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.776886][T16375] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.785253][T16375] bridge_slave_1: entered allmulticast mode [ 282.792884][T16375] bridge_slave_1: entered promiscuous mode [ 282.873499][T16375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.889205][T16375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.981892][T16375] team0: Port device team_slave_0 added [ 283.012725][T16375] team0: Port device team_slave_1 added [ 283.148727][T16375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.170688][T16375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.256292][T16375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.346083][T16375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.353279][T16375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.409234][T16375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.624653][T16375] hsr_slave_0: entered promiscuous mode [ 283.635670][T16375] hsr_slave_1: entered promiscuous mode [ 283.651273][T16375] debugfs: 'hsr0' already exists in 'hsr' [ 283.663239][T16375] Cannot create hsr debugfs directory [ 284.005023][T16471] syzkaller0: entered promiscuous mode [ 284.010529][T16471] syzkaller0: entered allmulticast mode [ 284.133646][T16480] veth0_to_bridge: entered promiscuous mode [ 284.158162][T16375] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 284.175644][ T5834] Bluetooth: hci1: command tx timeout [ 284.198442][T16375] netdevsim netdevsim2 eth3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 284.240773][T16375] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 284.255569][ T5834] Bluetooth: hci5: command tx timeout [ 284.381373][T16375] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 284.391532][T16375] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 284.443866][T16479] veth0_to_bridge: left promiscuous mode [ 284.466350][T16375] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 284.477934][T16375] netdevsim netdevsim2 eth2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 284.494403][T16375] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 284.519549][T16375] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 284.531391][T16375] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 284.554667][T16498] __nla_validate_parse: 4 callbacks suppressed [ 284.554684][T16498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2985'. [ 284.582714][T16496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.627974][T16498] bridge0: port 3(veth0_to_bridge) entered blocking state [ 284.636774][T16498] bridge0: port 3(veth0_to_bridge) entered disabled state [ 284.649230][T16498] veth0_to_bridge: entered allmulticast mode [ 284.662098][T16498] veth0_to_bridge: entered promiscuous mode [ 284.682657][T16375] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 284.698498][T16375] netdevsim netdevsim2 eth1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 284.714210][T16375] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 284.735404][T16375] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 284.748007][T16375] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 284.809729][T16375] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 284.820820][T16375] netdevsim netdevsim2 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 284.831891][T16375] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 284.841927][T16375] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 284.852099][T16375] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 284.882481][T16511] delete_channel: no stack [ 285.115569][T16375] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 285.144152][T16375] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 285.157593][T16375] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 285.171817][T16375] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 285.292112][T16544] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2999'. [ 285.346237][T16375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.387672][T16548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3001'. [ 285.396329][T16375] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.418661][T16544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2999'. [ 285.452222][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.459439][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.508204][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.515415][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.815782][T16568] netlink: 'syz.0.3006': attribute type 1 has an invalid length. [ 285.883853][T16568] bond11: entered promiscuous mode [ 285.889598][T16568] 8021q: adding VLAN 0 to HW filter on device bond11 [ 285.911767][T16375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.048361][T16375] veth0_vlan: entered promiscuous mode [ 286.072517][T16375] veth1_vlan: entered promiscuous mode [ 286.097238][T16584] tipc: Enabling of bearer rejected, failed to enable media [ 286.191731][T16590] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 286.217419][T16375] veth0_macvtap: entered promiscuous mode [ 286.256497][ T5834] Bluetooth: hci1: command tx timeout [ 286.287760][T16375] veth1_macvtap: entered promiscuous mode [ 286.359764][T16375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.396075][T16375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.431647][ T1150] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.443122][ T1150] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.498313][ T1150] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.511511][ T1150] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.536557][T16619] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3016'. [ 286.546274][T16619] xt_policy: neither incoming nor outgoing policy selected [ 286.801079][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.825162][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.902565][ T3516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.913182][T16636] netlink: 'syz.1.3020': attribute type 11 has an invalid length. [ 286.925659][ T3516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.990206][T16640] netlink: 'syz.3.3022': attribute type 27 has an invalid length. [ 287.017412][T16638] syzkaller1: entered promiscuous mode [ 287.023004][T16638] syzkaller1: entered allmulticast mode [ 287.106756][T16649] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2947'. [ 287.119019][T16649] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2947'. [ 287.146399][T16649] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2947'. [ 287.331032][T16658] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 287.344187][T16660] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3028'. [ 287.402845][T16660] bond1 (unregistering): Released all slaves [ 287.593188][T16674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3031'. [ 287.621542][T16674] netlink: 'syz.2.3031': attribute type 6 has an invalid length. [ 287.664384][ T1150] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.666673][T16674] netlink: 'syz.2.3031': attribute type 6 has an invalid length. [ 287.676276][ T1150] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.715668][ T1150] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.739877][ T1150] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.916855][T16692] netlink: 'syz.0.3037': attribute type 21 has an invalid length. [ 287.957731][T16695] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 288.177513][T16708] xt_CONNSECMARK: invalid mode: 0 [ 288.335202][ T5834] Bluetooth: hci1: command tx timeout [ 288.392163][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 288.430722][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 288.455440][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 288.473019][T16723] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 288.484854][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 288.496541][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 288.730963][T16724] wg1 speed is unknown, defaulting to 1000 [ 288.753384][T16724] hsr0 speed is unknown, defaulting to 1000 [ 288.932753][T16755] netlink: 'syz.2.3052': attribute type 10 has an invalid length. [ 288.976752][T16755] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 288.992127][T16755] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.336437][T16776] netlink: 'syz.2.3059': attribute type 1 has an invalid length. [ 289.432894][T16724] chnl_net:caif_netlink_parms(): no params data found [ 289.678377][T16803] __nla_validate_parse: 10 callbacks suppressed [ 289.678394][T16803] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3066'. [ 289.724638][T16724] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.739218][T16724] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.758340][T16724] bridge_slave_0: entered allmulticast mode [ 289.775881][T16724] bridge_slave_0: entered promiscuous mode [ 289.791172][T16802] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3066'. [ 289.801800][T16808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3068'. [ 289.823444][T16724] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.852788][T16724] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.875164][T16724] bridge_slave_1: entered allmulticast mode [ 289.883492][T16724] bridge_slave_1: entered promiscuous mode [ 289.971482][T16724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.009217][T16724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.239043][T16724] team0: Port device team_slave_0 added [ 290.265799][T16724] team0: Port device team_slave_1 added [ 290.395232][T16818] Set syz1 is full, maxelem 6117 reached [ 290.395908][T16724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.413410][T16724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.441058][ T52] Bluetooth: hci1: command tx timeout [ 290.443435][T16724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.464142][T16829] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3073'. [ 290.465665][T16724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.475262][T16829] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20004 [ 290.480523][T16724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.513645][T16724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.574710][ T52] Bluetooth: hci3: command tx timeout [ 290.592346][T16724] hsr_slave_0: entered promiscuous mode [ 290.599731][T16724] hsr_slave_1: entered promiscuous mode [ 290.607470][T16724] debugfs: 'hsr0' already exists in 'hsr' [ 290.613510][T16724] Cannot create hsr debugfs directory [ 290.827361][T16836] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3078'. [ 290.999603][T16840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3080'. [ 291.047001][T16840] bond2: option xmit_hash_policy: invalid value (64) [ 291.057829][T16840] bond2 (unregistering): Released all slaves [ 291.110096][T16841] syzkaller0: entered promiscuous mode [ 291.118242][T16841] syzkaller0: entered allmulticast mode [ 291.230710][T16724] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.242238][T16724] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.252651][T16724] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 291.327542][T16724] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.337981][T16724] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.350064][T16724] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 291.436011][T16724] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.446730][T16724] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.458603][T16724] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 291.536122][T16724] batman_adv: batadv0: Removing interface: netdevsim0 [ 291.544255][T16724] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.555567][T16724] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.565965][T16724] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 291.662973][T16724] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 291.680419][T16724] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 291.690979][T16724] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 291.705271][T16724] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 291.770340][T16724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.794402][T16724] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.807506][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.814646][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.831168][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.838332][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.988429][T16724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.029068][T16724] veth0_vlan: entered promiscuous mode [ 292.040993][T16724] veth1_vlan: entered promiscuous mode [ 292.066361][T16724] veth0_macvtap: entered promiscuous mode [ 292.076666][T16724] veth1_macvtap: entered promiscuous mode [ 292.091738][T16724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.108096][T16724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.123797][ T1150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.134234][ T1150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.143333][ T1150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.160185][ T1150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.219903][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.238242][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.262079][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.271075][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.654942][ T52] Bluetooth: hci3: command tx timeout [ 294.735316][ T52] Bluetooth: hci3: command tx timeout [ 296.814740][ T52] Bluetooth: hci3: command tx timeout [ 303.181368][ T52] Bluetooth: hci4: link tx timeout [ 303.186634][ T52] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 305.215270][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 314.834760][T16975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3083'. [ 314.855546][T16975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3083'. [ 314.868650][T16979] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3084'. [ 314.894996][T16976] syzkaller0: entered promiscuous mode [ 314.919883][T16976] syzkaller0: entered allmulticast mode [ 314.968731][T16979] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3084'. [ 314.981520][T16981] netlink: 'syz.4.3086': attribute type 1 has an invalid length. [ 315.097386][T16981] 8021q: adding VLAN 0 to HW filter on device bond1 [ 315.208763][T16985] veth3: entered promiscuous mode [ 315.241562][T16985] bond1: (slave veth3): Enslaving as an active interface with an up link [ 315.269153][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 315.282770][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 315.297408][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 315.321369][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 315.329088][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 315.510401][T17002] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3089'. [ 315.636722][T16992] wg1 speed is unknown, defaulting to 1000 [ 315.646383][T17005] sit0: Caught tx_queue_len zero misconfig [ 315.667365][T16999] Set syz1 is full, maxelem 6117 reached [ 315.690133][T16992] hsr0 speed is unknown, defaulting to 1000 [ 315.797325][T17005] team0 (unregistering): Port device team_slave_0 removed [ 315.807870][T17005] team0 (unregistering): Port device team_slave_1 removed [ 315.850336][T17011] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2 [ 315.859927][T17011] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€ [ 315.910900][T17012] netlink: 'syz.2.3091': attribute type 1 has an invalid length. [ 315.922248][T17012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.131585][T16992] chnl_net:caif_netlink_parms(): no params data found [ 316.221780][T17038] bridge0: port 3(ipvlan2) entered blocking state [ 316.228866][T17038] bridge0: port 3(ipvlan2) entered disabled state [ 316.235622][T17038] ipvlan2: entered allmulticast mode [ 316.240919][T17038] bridge0: entered allmulticast mode [ 316.247827][T17038] ipvlan2: left allmulticast mode [ 316.252862][T17038] bridge0: left allmulticast mode [ 316.281439][T17035] syzkaller1: entered promiscuous mode [ 316.287146][T17035] syzkaller1: entered allmulticast mode [ 316.318415][T16992] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.326359][T16992] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.333626][T16992] bridge_slave_0: entered allmulticast mode [ 316.342121][T16992] bridge_slave_0: entered promiscuous mode [ 316.344214][T17046] syz.4.3100: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 316.352515][T16992] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.368794][T17046] CPU: 1 UID: 0 PID: 17046 Comm: syz.4.3100 Not tainted syzkaller #0 PREEMPT(full) [ 316.368819][T17046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 316.368841][T17046] Call Trace: [ 316.368848][T17046] [ 316.368856][T17046] dump_stack_lvl+0x189/0x250 [ 316.368888][T17046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.368916][T17046] ? __pfx__printk+0x10/0x10 [ 316.368934][T17046] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 316.368957][T17046] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 316.368981][T17046] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 316.369006][T17046] warn_alloc+0x214/0x310 [ 316.369031][T17046] ? stack_depot_save_flags+0x40/0x860 [ 316.369059][T17046] ? __pfx_warn_alloc+0x10/0x10 [ 316.369084][T17046] ? kasan_save_track+0x3e/0x80 [ 316.369106][T17046] ? __kasan_kmalloc+0x93/0xb0 [ 316.369129][T17046] ? xsk_setsockopt+0x4dc/0x8d0 [ 316.369147][T17046] ? do_sock_setsockopt+0x17c/0x1b0 [ 316.369163][T17046] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 316.369178][T17046] ? do_syscall_64+0xfa/0xfa0 [ 316.369199][T17046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.369226][T17046] __vmalloc_node_range_noprof+0x125/0x12d0 [ 316.369279][T17046] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 316.369306][T17046] ? __kasan_kmalloc+0x93/0xb0 [ 316.369335][T17046] vmalloc_user_noprof+0xad/0xf0 [ 316.369359][T17046] ? xskq_create+0xbf/0x170 [ 316.369380][T17046] xskq_create+0xbf/0x170 [ 316.369404][T17046] xsk_init_queue+0xb0/0x110 [ 316.369427][T17046] xsk_setsockopt+0x4dc/0x8d0 [ 316.369465][T17046] ? __pfx_xsk_setsockopt+0x10/0x10 [ 316.369489][T17046] ? __pfx_aa_sk_perm+0x10/0x10 [ 316.369514][T17046] ? aa_sock_opt_perm+0xff/0x1b0 [ 316.369540][T17046] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 316.369556][T17046] ? __pfx_xsk_setsockopt+0x10/0x10 [ 316.369577][T17046] do_sock_setsockopt+0x17c/0x1b0 [ 316.369600][T17046] __x64_sys_setsockopt+0x13f/0x1b0 [ 316.369623][T17046] do_syscall_64+0xfa/0xfa0 [ 316.369643][T17046] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.369665][T17046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.369682][T17046] ? clear_bhb_loop+0x60/0xb0 [ 316.369702][T17046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.369719][T17046] RIP: 0033:0x7fc5fe58f6c9 [ 316.369736][T17046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.369751][T17046] RSP: 002b:00007fc5fc7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 316.369770][T17046] RAX: ffffffffffffffda RBX: 00007fc5fe7e6090 RCX: 00007fc5fe58f6c9 [ 316.369787][T17046] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 316.369798][T17046] RBP: 00007fc5fe611f91 R08: 0000000000000004 R09: 0000000000000000 [ 316.369808][T17046] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.369819][T17046] R13: 00007fc5fe7e6128 R14: 00007fc5fe7e6090 R15: 00007ffc057a3a48 [ 316.369850][T17046] [ 316.369985][T17046] Mem-Info: [ 316.378612][T16992] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.381558][T17046] active_anon:5980 inactive_anon:0 isolated_anon:0 [ 316.381558][T17046] active_file:3510 inactive_file:39999 isolated_file:0 [ 316.381558][T17046] unevictable:768 dirty:26 writeback:0 [ 316.381558][T17046] slab_reclaimable:11979 slab_unreclaimable:118875 [ 316.381558][T17046] mapped:29416 shmem:1364 pagetables:1173 [ 316.381558][T17046] sec_pagetables:0 bounce:0 [ 316.381558][T17046] kernel_misc_reclaimable:0 [ 316.381558][T17046] free:1306170 free_pcp:11260 free_cma:0 [ 316.407750][T16992] bridge_slave_1: entered allmulticast mode [ 316.412458][T17046] Node 0 active_anon:23920kB inactive_anon:0kB active_file:14040kB inactive_file:159792kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117664kB dirty:104kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15360kB pagetables:4564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 316.423028][T16992] bridge_slave_1: entered promiscuous mode [ 316.426053][T17046] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 316.795743][T17046] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 316.828410][T17046] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 316.834209][T17046] Node 0 DMA32 free:1311876kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23828kB inactive_anon:0kB active_file:14040kB inactive_file:159792kB unevictable:1536kB writepending:104kB zspages:0kB present:3129332kB managed:2565168kB mlocked:0kB bounce:0kB free_pcp:29344kB local_pcp:15048kB free_cma:0kB [ 316.868461][T17046] lowmem_reserve[]: 0 0 0 0 0 [ 316.875634][T17046] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 316.908788][T17046] lowmem_reserve[]: 0 0 0 0 0 [ 316.912424][T16992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.960760][T17046] [ 316.968561][T16992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.981060][T17046] Node 1 Normal free:3897400kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15584kB local_pcp:9300kB free_cma:0kB [ 317.023774][T17046] lowmem_reserve[]: 0 0 0 0 0 [ 317.028752][T17046] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 317.060532][T17046] Node 0 DMA32: 691*4kB (UM) 317*8kB (UME) 235*16kB (UME) 145*32kB (UME) 48*64kB (UME) 42*128kB (UE) 28*256kB (UME) 21*512kB (UM) 10*1024kB (UM) 4*2048kB (ME) 306*4096kB (UM) = 1311876kB [ 317.083269][T17046] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 317.096038][T17046] Node 1 Normal: 2*4kB (UM) 8*8kB (ME) 7*16kB (ME) 164*32kB (UME) 46*64kB (UME) 5*128kB (UME) 5*256kB (UME) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3897400kB [ 317.117377][T17046] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.127748][T17046] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 317.148922][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.149210][T17046] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.155421][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.165507][T17046] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 317.199466][T17046] 44869 total pagecache pages [ 317.207961][T16992] team0: Port device team_slave_0 added [ 317.218601][T16992] team0: Port device team_slave_1 added [ 317.237761][T17046] 0 pages in swap cache [ 317.244774][T17046] Free swap = 124996kB [ 317.265352][T17056] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3103'. [ 317.277280][T17046] Total swap = 124996kB [ 317.287407][T17046] 2097051 pages RAM [ 317.291240][T17046] 0 pages HighMem/MovableOnly [ 317.310167][T16992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.315599][T17046] 424117 pages reserved [ 317.319145][T17056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3103'. [ 317.321421][T17046] 0 pages cma reserved [ 317.330270][T16992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.330300][T16992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.332295][T16992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.384873][ T52] Bluetooth: hci2: command tx timeout [ 317.437447][T16992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.469796][T16992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.733449][T17079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3108'. [ 317.761233][T16992] hsr_slave_0: entered promiscuous mode [ 317.785694][T16992] hsr_slave_1: entered promiscuous mode [ 317.800902][T16992] debugfs: 'hsr0' already exists in 'hsr' [ 317.815408][T16992] Cannot create hsr debugfs directory [ 317.826553][T17079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.834059][T17079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.864094][T17087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3110'. [ 317.877280][T17079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.885691][T17079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.214932][T17111] netlink: 155796 bytes leftover after parsing attributes in process `syz.1.3117'. [ 318.266577][T17103] bond2 (unregistering): Released all slaves [ 318.601137][T17133] ipvlan1: mtu less than device minimum [ 318.957805][T17145] lo: entered promiscuous mode [ 318.967087][T17145] tunl0: entered promiscuous mode [ 318.976269][T17145] gre0: entered promiscuous mode [ 318.991214][T17145] gretap0: entered promiscuous mode [ 319.007582][T17145] erspan0: entered promiscuous mode [ 319.019312][T17145] ip_vti0: entered promiscuous mode [ 319.251933][T17156] x_tables: duplicate underflow at hook 4 [ 319.406059][T17167] netlink: del zone limit has 4 unknown bytes [ 319.418252][T16992] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 319.455229][ T52] Bluetooth: hci2: command tx timeout [ 319.465921][T16992] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 319.480870][T16992] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 319.500670][T16992] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 319.528943][T17169] veth1_to_bond: entered promiscuous mode [ 319.539102][T17169] veth1_to_bond: entered allmulticast mode [ 319.704055][T16992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.902559][T16992] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.939628][T17181] Set syz1 is full, maxelem 6117 reached [ 319.957130][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.964333][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.981616][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.988848][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.033385][T17199] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 320.045222][T17199] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 320.093702][T17201] __nla_validate_parse: 2 callbacks suppressed [ 320.093719][T17201] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3140'. [ 320.234264][T17207] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3141'. [ 320.247712][T17207] IPVS: Error connecting to the multicast addr [ 320.443455][T16992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.598820][T16992] veth0_vlan: entered promiscuous mode [ 320.637765][T16992] veth1_vlan: entered promiscuous mode [ 320.732367][T16992] veth0_macvtap: entered promiscuous mode [ 320.755585][T16992] veth1_macvtap: entered promiscuous mode [ 320.838563][T16992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.903659][T16992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.967073][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.981726][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.061908][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.091846][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.190293][T17249] Bluetooth: MGMT ver 1.23 [ 321.364260][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.400243][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.487658][T17261] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3153'. [ 321.490789][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.525830][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.534548][ T52] Bluetooth: hci2: command tx timeout [ 321.682373][T17277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3085'. [ 321.705171][T17276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3085'. [ 321.768743][T17284] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:3910 [ 322.152334][T17302] xt_TCPMSS: Only works on TCP SYN packets [ 322.239565][T17304] syzkaller0: entered allmulticast mode [ 322.340672][T17310] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 322.571203][T17317] syzkaller0: entered promiscuous mode [ 322.597536][T17317] syzkaller0: entered allmulticast mode [ 322.830737][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 322.841027][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 322.850792][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 322.860233][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 322.868975][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 322.870820][T17324] syzkaller0: entered promiscuous mode [ 322.882128][T17324] syzkaller0: entered allmulticast mode [ 322.906157][T17329] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3172'. [ 323.616238][ T52] Bluetooth: hci2: command tx timeout [ 324.279859][T17325] wg1 speed is unknown, defaulting to 1000 [ 324.287763][T17325] hsr0 speed is unknown, defaulting to 1000 [ 324.520385][T17351] netlink: 4708 bytes leftover after parsing attributes in process `syz.4.3178'. [ 324.582828][T17325] chnl_net:caif_netlink_parms(): no params data found [ 324.800736][T17325] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.818777][T17325] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.835734][T17372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3185'. [ 324.845255][T17372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3185'. [ 324.845680][T17325] bridge_slave_0: entered allmulticast mode [ 324.876610][T17325] bridge_slave_0: entered promiscuous mode [ 324.896726][T17325] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.909137][T17325] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.917220][T17325] bridge_slave_1: entered allmulticast mode [ 324.925702][T17325] bridge_slave_1: entered promiscuous mode [ 324.981564][ T52] Bluetooth: hci0: command tx timeout [ 325.013887][T17375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3187'. [ 325.198342][T17325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.225698][T17325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.331184][T17388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3191'. [ 325.361955][T17325] team0: Port device team_slave_0 added [ 325.383548][T17325] team0: Port device team_slave_1 added [ 325.437245][T17397] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 325.450516][T17325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.459804][T17325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.486841][T17325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.498532][T17392] netlink: 'syz.3.3193': attribute type 25 has an invalid length. [ 325.508432][T17325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.515874][T17325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.543101][T17325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.660579][T17325] hsr_slave_0: entered promiscuous mode [ 325.686163][T17325] hsr_slave_1: entered promiscuous mode [ 325.693956][T17325] debugfs: 'hsr0' already exists in 'hsr' [ 325.700827][T17325] Cannot create hsr debugfs directory [ 325.837082][T17411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3197'. [ 325.844952][T17410] netlink: 'syz.3.3198': attribute type 7 has an invalid length. [ 325.884285][T17410] netlink: 'syz.3.3198': attribute type 8 has an invalid length. [ 325.973843][T17416] syzkaller0: entered promiscuous mode [ 325.981745][T17416] syzkaller0: entered allmulticast mode [ 326.049425][T17421] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3201'. [ 326.172325][T17423] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3203'. [ 326.379984][T17438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3208'. [ 326.392045][T17438] netlink: 'syz.1.3208': attribute type 11 has an invalid length. [ 326.497045][T17445] netlink: 'syz.3.3210': attribute type 1 has an invalid length. [ 326.535211][ T9] IPVS: starting estimator thread 0... [ 326.624626][T17448] IPVS: using max 25 ests per chain, 60000 per kthread [ 326.697219][T17325] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 326.712302][T17325] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 326.742660][T17325] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 326.755646][T17325] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 326.899578][T17325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.934358][T17325] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.983120][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.990377][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.044808][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.051958][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.060593][ T52] Bluetooth: hci0: command tx timeout [ 327.188069][T17492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3223'. [ 327.290561][T17492] netlink: 'syz.4.3223': attribute type 1 has an invalid length. [ 327.449161][T17325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.526385][T17511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3227'. [ 327.638612][T17325] veth0_vlan: entered promiscuous mode [ 327.672053][T17325] veth1_vlan: entered promiscuous mode [ 327.794339][T17325] veth0_macvtap: entered promiscuous mode [ 327.839139][T17325] veth1_macvtap: entered promiscuous mode [ 327.906389][T17325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.944680][T17325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.948608][T17531] xt_socket: unknown flags 0x50 [ 328.037838][T17540] sctp: [Deprecated]: syz.3.3235 (pid 17540) Use of struct sctp_assoc_value in delayed_ack socket option. [ 328.037838][T17540] Use struct sctp_sack_info instead [ 328.066366][ T3516] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.079744][T17543] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3236'. [ 328.134980][T17543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3236'. [ 328.171163][T17535] syzkaller0: entered promiscuous mode [ 328.189027][T17535] syzkaller0: entered allmulticast mode [ 328.220988][T17551] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3237'. [ 328.255419][ T3516] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.265561][ T3516] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.288175][ T3516] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.398009][T17557] openvswitch: netlink: Missing key (keys=40, expected=100) [ 328.532657][T17565] x_tables: duplicate underflow at hook 2 [ 328.552736][T17565] block nbd0: not configured, cannot reconfigure [ 329.134725][ T52] Bluetooth: hci0: command tx timeout [ 329.922624][T17572] netlink: 'syz.3.3244': attribute type 1 has an invalid length. [ 329.952372][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.965258][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.116919][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.125796][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.318771][T17597] netlink: 'syz.4.3251': attribute type 1 has an invalid length. [ 330.435090][T17602] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 330.796072][T17625] __nla_validate_parse: 8 callbacks suppressed [ 330.796089][T17625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3260'. [ 330.913460][T17625] syzkaller0: entered promiscuous mode [ 330.920571][T17625] syzkaller0: entered allmulticast mode [ 330.982354][T17636] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3266'. [ 331.066721][T17638] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.145226][T17643] syzkaller0: entered promiscuous mode [ 331.161026][T17643] syzkaller0: entered allmulticast mode [ 331.211362][T17645] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 331.215704][ T52] Bluetooth: hci0: command tx timeout [ 331.239578][T17652] netlink: 'syz.1.3271': attribute type 9 has an invalid length. [ 331.278874][T17654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3272'. [ 331.279456][T17652] netlink: 'syz.1.3271': attribute type 6 has an invalid length. [ 331.288958][T17654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3272'. [ 331.390292][T17659] ip6t_srh: unknown srh match flags 5F28 [ 331.488121][T17665] sctp: [Deprecated]: syz.0.3275 (pid 17665) Use of int in maxseg socket option. [ 331.488121][T17665] Use struct sctp_assoc_value instead [ 331.489144][T17667] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3276'. [ 331.547681][T17667] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3276'. [ 331.572484][T17667] block nbd0: not configured, cannot reconfigure [ 331.628750][T17670] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3276'. [ 331.651438][T17670] block nbd0: not configured, cannot reconfigure [ 331.658911][T17679] geneve2: entered promiscuous mode [ 331.667710][T17679] geneve2: entered allmulticast mode [ 331.722279][ T1150] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 331.735472][ T1150] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 331.754769][ T1150] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 331.777564][ T1150] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 331.834259][T17690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3283'. [ 331.957480][T17697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3283'. [ 332.123757][T17704] team0: No ports can be present during mode change [ 332.149823][T17704] tipc: Started in network mode [ 332.182338][T17704] tipc: Node identity 4af37b86fe26, cluster identity 4711 [ 332.228647][T17704] tipc: Enabled bearer , priority 0 [ 332.290399][T17704] tipc: Resetting bearer [ 332.316783][T17734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3295'. [ 332.360490][T17720] syzkaller0: entered promiscuous mode [ 332.385750][T17720] syzkaller0: entered allmulticast mode [ 332.448650][T17702] tipc: Resetting bearer [ 332.478300][T17702] tipc: Disabling bearer [ 332.518513][T17746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.666182][T17757] tipc: Enabling of bearer rejected, failed to enable media [ 332.717441][T17768] netlink: 'syz.4.3304': attribute type 1 has an invalid length. [ 332.824347][T17771] syzkaller1: entered promiscuous mode [ 332.833372][T17771] syzkaller1: entered allmulticast mode [ 332.883760][T17773] syz.1.3307: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 332.911812][T17773] CPU: 1 UID: 0 PID: 17773 Comm: syz.1.3307 Not tainted syzkaller #0 PREEMPT(full) [ 332.911836][T17773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 332.911847][T17773] Call Trace: [ 332.911855][T17773] [ 332.911863][T17773] dump_stack_lvl+0x189/0x250 [ 332.911893][T17773] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.911923][T17773] ? __pfx__printk+0x10/0x10 [ 332.911942][T17773] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 332.911965][T17773] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 332.911990][T17773] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 332.912016][T17773] warn_alloc+0x214/0x310 [ 332.912047][T17773] ? __pfx_warn_alloc+0x10/0x10 [ 332.912081][T17773] ? __get_vm_area_node+0x28f/0x300 [ 332.912104][T17773] ? nf_tables_newset+0x1330/0x2540 [ 332.912129][T17773] __vmalloc_node_range_noprof+0x690/0x12d0 [ 332.912179][T17773] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 332.912202][T17773] ? nf_tables_newset+0x1330/0x2540 [ 332.912223][T17773] ? rcu_is_watching+0x15/0xb0 [ 332.912240][T17773] ? nf_tables_newset+0x1330/0x2540 [ 332.912257][T17773] __kvmalloc_node_noprof+0x674/0x910 [ 332.912280][T17773] ? nf_tables_newset+0x1330/0x2540 [ 332.912303][T17773] ? nft_set_lookup+0x128/0x150 [ 332.912323][T17773] ? nft_hash_privsize+0xf/0xf0 [ 332.912341][T17773] nf_tables_newset+0x1330/0x2540 [ 332.912371][T17773] ? __pfx_nf_tables_newset+0x10/0x10 [ 332.912411][T17773] ? __nla_parse+0x40/0x60 [ 332.912436][T17773] nfnetlink_rcv+0x11d9/0x2590 [ 332.912492][T17773] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 332.912530][T17773] ? ref_tracker_free+0x63a/0x7d0 [ 332.912578][T17773] ? __netlink_deliver_tap+0x807/0x850 [ 332.912594][T17773] ? netlink_deliver_tap+0x2e/0x1b0 [ 332.912624][T17773] netlink_unicast+0x82f/0x9e0 [ 332.912654][T17773] ? __pfx_netlink_unicast+0x10/0x10 [ 332.912679][T17773] ? netlink_sendmsg+0x642/0xb30 [ 332.912692][T17773] ? skb_put+0x11b/0x210 [ 332.912711][T17773] netlink_sendmsg+0x805/0xb30 [ 332.912733][T17773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.912752][T17773] ? aa_sock_msg_perm+0xf1/0x1d0 [ 332.912777][T17773] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 332.912793][T17773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.912809][T17773] __sock_sendmsg+0x21c/0x270 [ 332.912833][T17773] ____sys_sendmsg+0x505/0x830 [ 332.912857][T17773] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.912884][T17773] ? import_iovec+0x74/0xa0 [ 332.912909][T17773] ___sys_sendmsg+0x21f/0x2a0 [ 332.912939][T17773] ? __pfx____sys_sendmsg+0x10/0x10 [ 332.912994][T17773] ? __fget_files+0x2a/0x420 [ 332.913010][T17773] ? __fget_files+0x3a0/0x420 [ 332.913041][T17773] __x64_sys_sendmsg+0x19b/0x260 [ 332.913063][T17773] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 332.913098][T17773] ? do_syscall_64+0xbe/0xfa0 [ 332.913124][T17773] do_syscall_64+0xfa/0xfa0 [ 332.913143][T17773] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.913163][T17773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.913179][T17773] ? clear_bhb_loop+0x60/0xb0 [ 332.913197][T17773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.913212][T17773] RIP: 0033:0x7fb4f658f6c9 [ 332.913228][T17773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.913243][T17773] RSP: 002b:00007fb4f74e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.913261][T17773] RAX: ffffffffffffffda RBX: 00007fb4f67e5fa0 RCX: 00007fb4f658f6c9 [ 332.913273][T17773] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 332.913284][T17773] RBP: 00007fb4f6611f91 R08: 0000000000000000 R09: 0000000000000000 [ 332.913294][T17773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.913304][T17773] R13: 00007fb4f67e6038 R14: 00007fb4f67e5fa0 R15: 00007ffffee429d8 [ 332.913331][T17773] [ 332.913714][T17773] Mem-Info: [ 333.296094][T17773] active_anon:6026 inactive_anon:0 isolated_anon:0 [ 333.296094][T17773] active_file:3510 inactive_file:40008 isolated_file:0 [ 333.296094][T17773] unevictable:768 dirty:75 writeback:0 [ 333.296094][T17773] slab_reclaimable:12432 slab_unreclaimable:123405 [ 333.296094][T17773] mapped:30405 shmem:1365 pagetables:1203 [ 333.296094][T17773] sec_pagetables:0 bounce:0 [ 333.296094][T17773] kernel_misc_reclaimable:0 [ 333.296094][T17773] free:1298835 free_pcp:10913 free_cma:0 [ 333.352720][T17773] Node 0 active_anon:24104kB inactive_anon:0kB active_file:14040kB inactive_file:159828kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121620kB dirty:296kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16444kB pagetables:4684kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 333.390494][T17773] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 333.472794][T17773] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 333.522090][T17773] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 333.529822][T17773] Node 0 DMA32 free:1281060kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23504kB inactive_anon:0kB active_file:14040kB inactive_file:159828kB unevictable:1536kB writepending:296kB zspages:0kB present:3129332kB managed:2565168kB mlocked:0kB bounce:0kB free_pcp:31868kB local_pcp:19136kB free_cma:0kB [ 333.605337][T17773] lowmem_reserve[]: 0 0 0 0 0 [ 333.610114][T17773] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 333.657465][T17791] 8021q: adding VLAN 0 to HW filter on device bond1 [ 333.683652][T17773] lowmem_reserve[]: 0 0 0 0 0 [ 333.736614][T17773] Node 1 Normal free:3898920kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14036kB local_pcp:5024kB free_cma:0kB [ 333.781704][T17773] lowmem_reserve[]: 0 0 0 0 0 [ 333.788978][T17773] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 333.808218][T17773] Node 0 DMA32: 95*4kB (M) 257*8kB (UME) 166*16kB (M) 100*32kB (M) 13*64kB (UME) 2*128kB (ME) 7*256kB (M) 14*512kB (ME) 7*1024kB (UME) 3*2048kB (M) 305*4096kB (UM) = 1280932kB [ 333.826093][T17773] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 333.855178][T17773] Node 1 Normal: 127*4kB (UM) 42*8kB (UME) 31*16kB (UME) 175*32kB (UME) 45*64kB (UME) 6*128kB (UME) 5*256kB (UME) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3898972kB [ 333.914933][T17773] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 333.948133][T17773] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 333.968615][T17773] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 333.985513][T17773] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 333.995895][T17773] 44879 total pagecache pages [ 334.000588][T17773] 0 pages in swap cache [ 334.009423][T17773] Free swap = 124996kB [ 334.013608][T17773] Total swap = 124996kB [ 334.020613][T17773] 2097051 pages RAM [ 334.025219][T17773] 0 pages HighMem/MovableOnly [ 334.029911][T17773] 424117 pages reserved [ 334.045490][T17773] 0 pages cma reserved [ 334.255055][T17810] tipc: Started in network mode [ 334.260080][T17810] tipc: Node identity 9a46438c9648, cluster identity 4711 [ 334.268410][T17810] tipc: Enabled bearer , priority 0 [ 334.380108][T17809] tipc: Disabling bearer [ 334.427228][T17825] syzkaller0: entered promiscuous mode [ 334.441383][T17825] syzkaller0: entered allmulticast mode [ 334.973580][T17865] sctp: [Deprecated]: syz.1.3334 (pid 17865) Use of int in maxseg socket option. [ 334.973580][T17865] Use struct sctp_assoc_value instead [ 335.069706][T17719] hid-generic 0005:0C45:1012.0002: unknown main item tag 0x1 [ 335.079744][T17719] hid-generic 0005:0C45:1012.0002: ignoring exceeding usage max [ 335.095098][T17719] hid-generic 0005:0C45:1012.0002: unknown main item tag 0x4 [ 335.104341][T17719] hid-generic 0005:0C45:1012.0002: unknown main item tag 0x5 [ 335.112535][T17719] hid-generic 0005:0C45:1012.0002: reserved main item tag 0xd [ 335.120765][T17719] hid-generic 0005:0C45:1012.0002: unexpected long global item [ 335.129380][T17719] hid-generic 0005:0C45:1012.0002: probe with driver hid-generic failed with error -22 [ 335.247994][T17883] netlink: 'syz.0.3339': attribute type 1 has an invalid length. [ 335.288004][T17891] ipvlan0: entered promiscuous mode [ 335.295311][T17891] ipvlan0: entered allmulticast mode [ 335.300706][T17891] veth0_vlan: entered allmulticast mode [ 335.389195][T17894] syzkaller0: entered promiscuous mode [ 335.414930][T17894] syzkaller0: entered allmulticast mode [ 335.448678][T17896] sctp: [Deprecated]: syz.4.3344 (pid 17896) Use of struct sctp_assoc_value in delayed_ack socket option. [ 335.448678][T17896] Use struct sctp_sack_info instead [ 335.502330][T17896] sctp: [Deprecated]: syz.4.3344 (pid 17896) Use of struct sctp_assoc_value in delayed_ack socket option. [ 335.502330][T17896] Use struct sctp_sack_info instead [ 335.707936][T17907] IPv6: sit1: Disabled Multicast RS [ 335.724762][T17907] sit1: entered allmulticast mode [ 335.806973][T17913] tipc: Started in network mode [ 335.819966][T17913] tipc: Node identity be5c36764cdb, cluster identity 4711 [ 335.828480][T17913] tipc: Enabled bearer , priority 0 [ 335.842207][T17913] syzkaller0: entered promiscuous mode [ 335.848220][T17913] syzkaller0: entered allmulticast mode [ 335.884673][T17916] geneve3: entered promiscuous mode [ 335.895362][T17916] geneve3: entered allmulticast mode [ 335.895736][T17918] __nla_validate_parse: 12 callbacks suppressed [ 335.895750][T17918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3350'. [ 335.939240][T17913] tipc: Resetting bearer [ 335.946788][T17912] tipc: Resetting bearer [ 336.001873][T17912] tipc: Disabling bearer [ 336.131449][T17937] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3357'. [ 336.244790][T17943] netlink: 'syz.1.3358': attribute type 1 has an invalid length. [ 336.318201][T17943] 8021q: adding VLAN 0 to HW filter on device bond1 [ 336.365919][T17951] 8021q: adding VLAN 0 to HW filter on device bond1 [ 336.373573][T17951] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 336.386773][T17955] netlink: 'syz.4.3360': attribute type 1 has an invalid length. [ 336.396694][T17951] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 336.546632][T17943] veth3: entered promiscuous mode [ 336.557078][T17943] bond1: (slave veth3): Enslaving as an active interface with a down link [ 336.589221][T17959] vlan2: entered allmulticast mode [ 336.594372][T17959] bond1: entered allmulticast mode [ 336.711199][T17975] openvswitch: netlink: Unknown key attributes 2 [ 336.746246][T17973] dvmrp6: entered allmulticast mode [ 337.085784][T17997] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3372'. [ 337.114213][T17999] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3372'. [ 337.195665][T18002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3373'. [ 337.205005][T18002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.311427][T18002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.600550][T18022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3380'. [ 337.756779][T18033] netlink: 'syz.0.3385': attribute type 1 has an invalid length. [ 337.817045][T18039] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3387'. [ 337.924999][T18049] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3388'. [ 338.469518][T18084] x_tables: unsorted entry at hook 1 [ 338.561361][T18067] Set syz1 is full, maxelem 6117 reached [ 338.729042][T18099] netlink: 'syz.0.3403': attribute type 1 has an invalid length. [ 338.760344][T18101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3403'. [ 338.792445][T18107] wg2: entered promiscuous mode [ 338.801245][T18107] wg2: entered allmulticast mode [ 338.821951][T18099] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 338.880276][T18112] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3404'. [ 339.537626][T18158] vlan2: entered promiscuous mode [ 339.542875][T18158] vlan2: entered allmulticast mode [ 339.550716][T18158] hsr_slave_1: entered allmulticast mode [ 339.725560][T18149] tipc: Resetting bearer [ 339.801577][T18172] xt_hashlimit: size too large, truncated to 1048576 [ 340.351357][T18149] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 340.358954][T18149] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 340.587329][T18213] xt_TPROXY: Can be used only with -p tcp or -p udp [ 340.593556][T18149] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 340.615688][T18149] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 340.824200][T18149] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 340.835688][T18149] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 340.903578][T18229] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 341.043025][T18149] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 341.070226][T18149] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 341.187975][T18247] __nla_validate_parse: 3 callbacks suppressed [ 341.187993][T18247] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3433'. [ 341.225636][T18149] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 341.231567][T18149] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 341.259399][T18247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3433'. [ 364.565512][T18359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3437'. [ 364.609513][T18359] 0: reclassify loop, rule prio 0, protocol 800 [ 364.770035][T18375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3440'. [ 364.788984][T18375] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3440'. [ 364.830319][T18375] geneve2: entered promiscuous mode [ 364.848829][T18375] geneve2: entered allmulticast mode [ 365.032520][T18393] tipc: Enabled bearer , priority 0 [ 365.076630][T18393] syzkaller0: entered promiscuous mode [ 365.082133][T18393] syzkaller0: entered allmulticast mode [ 365.128310][T18393] tipc: Resetting bearer [ 365.143144][T18402] netlink: 'syz.4.3449': attribute type 29 has an invalid length. [ 365.155794][T18392] tipc: Resetting bearer [ 365.173220][T18392] tipc: Disabling bearer [ 365.187480][T18403] netlink: 'syz.4.3449': attribute type 29 has an invalid length. [ 365.210654][T18397] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 365.365969][T18412] netlink: 'syz.0.3452': attribute type 1 has an invalid length. [ 365.453813][T18412] 8021q: adding VLAN 0 to HW filter on device bond2 [ 365.485832][T18419] bond2: (slave geneve3): making interface the new active one [ 365.497434][T18419] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 365.653713][T18440] Bluetooth: MGMT ver 1.23 [ 365.797608][T18450] netlink: zone id is out of range [ 365.802924][T18450] netlink: zone id is out of range [ 365.809226][T18450] netlink: zone id is out of range [ 365.815080][T18450] netlink: zone id is out of range [ 365.820279][T18450] netlink: zone id is out of range [ 365.827119][T18450] netlink: zone id is out of range [ 365.832250][T18450] netlink: zone id is out of range [ 365.837637][T18450] netlink: zone id is out of range [ 365.978003][T18455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3464'. [ 366.348723][T18479] netlink: 696 bytes leftover after parsing attributes in process `syz.3.3469'. [ 366.367709][T18479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3469'. [ 366.401889][T18479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3469'. [ 366.413327][T18479] netlink: 'syz.3.3469': attribute type 6 has an invalid length. [ 366.427903][T18486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3469'. [ 366.436617][T18479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3469'. [ 366.441247][ T8965] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.445811][T18479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3469'. [ 366.464118][T18479] netlink: 'syz.3.3469': attribute type 6 has an invalid length. [ 366.494777][ T8965] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.513971][ T8965] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.564967][ T8965] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.246559][T18536] netlink: 'syz.4.3486': attribute type 1 has an invalid length. [ 367.259803][T18539] syzkaller1: entered promiscuous mode [ 367.266301][T18539] syzkaller1: entered allmulticast mode [ 367.325759][T18536] 8021q: adding VLAN 0 to HW filter on device bond2 [ 367.357588][T18552] vlan2: entered promiscuous mode [ 367.369295][T18552] bond2: entered promiscuous mode [ 367.403304][T18552] vlan2: entered allmulticast mode [ 367.410746][T18552] bond2: entered allmulticast mode [ 367.473941][T18559] wg1 speed is unknown, defaulting to 1000 [ 367.494055][T18559] hsr0 speed is unknown, defaulting to 1000 [ 367.578510][T18565] bridge3: entered promiscuous mode [ 367.594886][T18565] bridge3: entered allmulticast mode [ 367.607951][T18569] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 367.743474][T18560] wg1 speed is unknown, defaulting to 1000 [ 367.754303][T18579] xt_CT: You must specify a L4 protocol and not use inversions on it [ 367.828070][T18560] hsr0 speed is unknown, defaulting to 1000 [ 368.498997][T18624] ieee802154 phy0 wpan0: encryption failed: -22 [ 368.569216][T18632] warn_alloc: 1 callbacks suppressed [ 368.569233][T18632] syz.2.3509: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 368.624632][T18632] CPU: 0 UID: 0 PID: 18632 Comm: syz.2.3509 Not tainted syzkaller #0 PREEMPT(full) [ 368.624663][T18632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 368.624674][T18632] Call Trace: [ 368.624681][T18632] [ 368.624689][T18632] dump_stack_lvl+0x189/0x250 [ 368.624721][T18632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.624743][T18632] ? __pfx__printk+0x10/0x10 [ 368.624762][T18632] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 368.624785][T18632] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 368.624810][T18632] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 368.624835][T18632] warn_alloc+0x214/0x310 [ 368.624859][T18632] ? stack_depot_save_flags+0x40/0x860 [ 368.624888][T18632] ? __pfx_warn_alloc+0x10/0x10 [ 368.624913][T18632] ? kasan_save_track+0x3e/0x80 [ 368.624935][T18632] ? __kasan_kmalloc+0x93/0xb0 [ 368.624958][T18632] ? xsk_setsockopt+0x4dc/0x8d0 [ 368.624977][T18632] ? do_sock_setsockopt+0x17c/0x1b0 [ 368.624993][T18632] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 368.625008][T18632] ? do_syscall_64+0xfa/0xfa0 [ 368.625029][T18632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.625056][T18632] __vmalloc_node_range_noprof+0x125/0x12d0 [ 368.625110][T18632] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 368.625137][T18632] ? __kasan_kmalloc+0x93/0xb0 [ 368.625167][T18632] vmalloc_user_noprof+0xad/0xf0 [ 368.625190][T18632] ? xskq_create+0xbf/0x170 [ 368.625212][T18632] xskq_create+0xbf/0x170 [ 368.625236][T18632] xsk_init_queue+0xb0/0x110 [ 368.625260][T18632] xsk_setsockopt+0x4dc/0x8d0 [ 368.625283][T18632] ? __pfx_xsk_setsockopt+0x10/0x10 [ 368.625307][T18632] ? __pfx_aa_sk_perm+0x10/0x10 [ 368.625331][T18632] ? aa_sock_opt_perm+0xff/0x1b0 [ 368.625358][T18632] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 368.625375][T18632] ? __pfx_xsk_setsockopt+0x10/0x10 [ 368.625396][T18632] do_sock_setsockopt+0x17c/0x1b0 [ 368.625418][T18632] __x64_sys_setsockopt+0x13f/0x1b0 [ 368.625441][T18632] do_syscall_64+0xfa/0xfa0 [ 368.625462][T18632] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.625484][T18632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.625501][T18632] ? clear_bhb_loop+0x60/0xb0 [ 368.625523][T18632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.625540][T18632] RIP: 0033:0x7f032d58f6c9 [ 368.625556][T18632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.625572][T18632] RSP: 002b:00007f032e4c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 368.625591][T18632] RAX: ffffffffffffffda RBX: 00007f032d7e5fa0 RCX: 00007f032d58f6c9 [ 368.625605][T18632] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 368.625615][T18632] RBP: 00007f032d611f91 R08: 0000000000000004 R09: 0000000000000000 [ 368.625626][T18632] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.625637][T18632] R13: 00007f032d7e6038 R14: 00007f032d7e5fa0 R15: 00007ffded6de118 [ 368.625673][T18632] [ 368.625680][T18632] Mem-Info: [ 368.930472][T18632] active_anon:5980 inactive_anon:0 isolated_anon:0 [ 368.930472][T18632] active_file:3510 inactive_file:40014 isolated_file:0 [ 368.930472][T18632] unevictable:768 dirty:92 writeback:0 [ 368.930472][T18632] slab_reclaimable:12052 slab_unreclaimable:125716 [ 368.930472][T18632] mapped:29351 shmem:1366 pagetables:1253 [ 368.930472][T18632] sec_pagetables:0 bounce:0 [ 368.930472][T18632] kernel_misc_reclaimable:0 [ 368.930472][T18632] free:1295851 free_pcp:13662 free_cma:0 [ 368.985628][T18632] Node 0 active_anon:23920kB inactive_anon:0kB active_file:14040kB inactive_file:159852kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117404kB dirty:368kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16592kB pagetables:4884kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 369.021622][T18632] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 369.053007][T18632] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 369.086705][T18632] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 369.092531][T18632] Node 0 DMA32 free:1268024kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24020kB inactive_anon:0kB active_file:14040kB inactive_file:159852kB unevictable:1536kB writepending:368kB zspages:0kB present:3129332kB managed:2565168kB mlocked:0kB bounce:0kB free_pcp:41632kB local_pcp:18000kB free_cma:0kB [ 369.127726][T18632] lowmem_reserve[]: 0 0 0 0 0 [ 369.132466][T18632] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 369.163987][T18632] lowmem_reserve[]: 0 0 0 0 0 [ 369.171593][T18632] Node 1 Normal free:3900020kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13000kB local_pcp:8496kB free_cma:0kB [ 369.207843][T18632] lowmem_reserve[]: 0 0 0 0 0 [ 369.212680][T18632] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 369.227452][T18632] Node 0 DMA32: 314*4kB (UM) 290*8kB (UME) 174*16kB (UME) 282*32kB (UME) 33*64kB (UME) 6*128kB (UM) 8*256kB (UM) 19*512kB (UME) 10*1024kB (UME) 4*2048kB (UM) 298*4096kB (UM) = 1269080kB [ 369.247568][T18632] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 369.260335][T18632] Node 1 Normal: 181*4kB (UM) 46*8kB (UME) 31*16kB (UME) 190*32kB (UME) 50*64kB (UME) 6*128kB (UME) 5*256kB (UME) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3900020kB [ 369.281645][T18632] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 369.291841][T18632] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 369.302232][T18632] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 369.310245][T18655] bond3: Invalid ad_actor_system MAC address. [ 369.312810][T18632] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 369.327815][T18632] 44886 total pagecache pages [ 369.332561][T18632] 0 pages in swap cache [ 369.337663][T18632] Free swap = 124996kB [ 369.342105][T18632] Total swap = 124996kB [ 369.346893][T18632] 2097051 pages RAM [ 369.350767][T18632] 0 pages HighMem/MovableOnly [ 369.355807][T18655] bond3: option ad_actor_system: invalid value (1) [ 369.355838][T18632] 424117 pages reserved [ 369.367338][T18632] 0 pages cma reserved [ 369.396935][T18655] bond3 (unregistering): Released all slaves [ 369.476524][T18669] netlink: 'syz.4.3520': attribute type 1 has an invalid length. [ 369.596625][T18672] tipc: Enabled bearer , priority 0 [ 369.606102][T18672] syzkaller0: entered promiscuous mode [ 369.611592][T18672] syzkaller0: entered allmulticast mode [ 369.640332][T18678] __nla_validate_parse: 9 callbacks suppressed [ 369.640348][T18678] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3523'. [ 369.657472][T18679] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3523'. [ 369.721125][T18681] macvtap1: entered promiscuous mode [ 369.739010][T18681] vlan0: entered promiscuous mode [ 369.746034][T18681] macvtap1: entered allmulticast mode [ 369.759498][T18681] vlan0: entered allmulticast mode [ 369.789576][T18684] macvtap2: entered promiscuous mode [ 369.816816][T18684] macvtap2: entered allmulticast mode [ 369.973319][T18683] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.981048][T18683] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.180646][T18683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.196004][T18683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.286930][T18683] vlan2: left promiscuous mode [ 370.291864][T18683] vlan2: left allmulticast mode [ 370.298553][T18683] hsr_slave_1: left allmulticast mode [ 370.305775][T18683] geneve2: left promiscuous mode [ 370.310785][T18683] geneve2: left allmulticast mode [ 370.328471][T18685] tipc: Resetting bearer [ 370.377733][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.390494][T18671] tipc: Resetting bearer [ 370.438922][T18671] tipc: Disabling bearer [ 370.478348][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.506637][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.556486][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.629845][T18716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3531'. [ 370.666987][T18716] netlink: 'syz.2.3531': attribute type 5 has an invalid length. [ 370.690012][T18716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3531'. [ 370.708470][T18721] syzkaller0: entered promiscuous mode [ 370.714361][T18724] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3533'. [ 370.714474][T18721] syzkaller0: entered allmulticast mode [ 370.745766][T18716] geneve4: entered promiscuous mode [ 370.751009][T18716] geneve4: entered allmulticast mode [ 370.770645][T18731] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3533'. [ 370.782916][ T36] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 370.792715][ T36] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 370.813900][ T36] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 370.899441][T18716] syzkaller0: entered promiscuous mode [ 370.905793][T18716] syzkaller0: entered allmulticast mode [ 370.912265][ T36] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 371.016527][T18741] x_tables: unsorted underflow at hook 3 [ 371.564604][T18751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3539'. [ 372.332220][T18736] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3537'. [ 372.376076][T18745] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3538'. [ 372.516910][T18758] net_ratelimit: 3 callbacks suppressed [ 372.516929][T18758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.560719][T18758] netlink: 'syz.3.3542': attribute type 16 has an invalid length. [ 372.595732][T18758] netlink: 'syz.3.3542': attribute type 17 has an invalid length. [ 372.611329][T18763] netlink: 'syz.0.3544': attribute type 1 has an invalid length. [ 372.660797][T18758] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 372.754344][T18774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3546'. [ 373.199271][T18805] sock: sock_set_timeout: `syz.0.3553' (pid 18805) tries to set negative timeout [ 373.343946][T18812] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 373.358214][T18812] x_tables: duplicate underflow at hook 2 [ 373.383879][T18813] tipc: Enabled bearer , priority 0 [ 373.392094][T18813] syzkaller0: entered promiscuous mode [ 373.397759][T18813] syzkaller0: entered allmulticast mode [ 373.425496][T18813] tipc: Resetting bearer [ 373.430760][T18817] netlink: 'syz.4.3559': attribute type 9 has an invalid length. [ 373.441281][T18810] tipc: Resetting bearer [ 373.462011][T18810] tipc: Disabling bearer [ 373.478097][T18815] netlink: 'syz.3.3558': attribute type 10 has an invalid length. [ 373.489624][T18815] bond0: (slave wlan1): Opening slave failed [ 373.499598][T18814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.574142][T18827] veth1_macvtap: left promiscuous mode [ 373.587550][T18827] macsec0: entered promiscuous mode [ 373.592838][T18827] macsec0: entered allmulticast mode [ 373.606557][T18827] veth1_macvtap: entered promiscuous mode [ 373.623777][T18827] veth1_macvtap: entered allmulticast mode [ 373.632239][T18827] macsec0: left promiscuous mode [ 373.638269][T18827] macsec0: left allmulticast mode [ 373.643381][T18827] veth1_macvtap: left allmulticast mode [ 373.663636][T18831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.678688][T18831] team0: Port device bond0 added [ 373.758629][T18836] ip6t_rpfilter: unknown options [ 374.322704][T18853] mac80211_hwsim hwsim24 ÿ: renamed from wlan1 [ 374.332508][T18854] ieee802154 phy0 wpan0: encryption failed: -22 [ 374.819191][T18869] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 374.968722][T18890] __nla_validate_parse: 7 callbacks suppressed [ 374.968738][T18890] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3578'. [ 375.015277][T18890] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3578'. [ 375.029225][T18890] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3578'. [ 375.051262][T18891] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3578'. [ 375.081268][T18891] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3578'. [ 375.125272][T18891] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3578'. [ 375.374798][ T52] Bluetooth: hci1: command tx timeout [ 375.403135][T18925] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.3587'. [ 375.412639][T18925] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 375.736475][T18943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.745765][T18944] xt_TPROXY: Can be used only with -p tcp or -p udp [ 375.752477][T18943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.819222][T18946] netlink: 632 bytes leftover after parsing attributes in process `syz.2.3593'. [ 375.852738][T18914] Set syz1 is full, maxelem 6117 reached [ 376.005673][T18952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3597'. [ 376.042485][T18952] bridge_slave_1: left allmulticast mode [ 376.055316][T18952] bridge_slave_1: left promiscuous mode [ 376.061620][T18952] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.092802][T18952] bridge_slave_0: left allmulticast mode [ 376.105533][T18952] bridge_slave_0: left promiscuous mode [ 376.111359][T18952] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.232093][T18977] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3598'. [ 376.392610][T18971] netlink: 'syz.3.3602': attribute type 1 has an invalid length. [ 376.418059][T18981] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 376.455881][T18981] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 376.486658][T18981] syzkaller1: entered promiscuous mode [ 376.492168][T18981] syzkaller1: entered allmulticast mode [ 376.838111][T19005] netlink: 'syz.1.3610': attribute type 10 has an invalid length. [ 378.028730][T18993] netlink: 'syz.4.3606': attribute type 12 has an invalid length. [ 378.051679][T19005] team0: Port device dummy0 added [ 378.548623][T19040] netlink: 'syz.0.3620': attribute type 10 has an invalid length. [ 378.562076][T19040] veth1_macvtap: left promiscuous mode [ 378.569297][T19040] team0: Device veth1_macvtap failed to register rx_handler [ 378.582200][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.582259][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.911370][T19069] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.919123][T19069] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.951834][T19071] ip6t_srh: unknown srh match flags 4000 [ 379.003748][T19076] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 379.499528][T19111] openvswitch: netlink: nsh attribute has 996 unknown bytes. [ 379.515310][T19111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.669713][T19116] IPv6: sit1: Disabled Multicast RS [ 379.677550][T19116] sit1: entered allmulticast mode [ 379.720917][T19126] netlink: 'syz.3.3647': attribute type 1 has an invalid length. [ 379.905979][T19139] netlink: 'syz.3.3649': attribute type 1 has an invalid length. [ 379.952996][T19139] 8021q: adding VLAN 0 to HW filter on device bond2 [ 379.971823][T19144] bond2: (slave geneve2): making interface the new active one [ 379.981445][T19144] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 379.992610][T19139] netlink: 'syz.3.3649': attribute type 1 has an invalid length. [ 380.063427][T19152] openvswitch: netlink: Unknown nsh attribute 0 [ 380.069879][T19152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.080366][T19152] __nla_validate_parse: 9 callbacks suppressed [ 380.080384][T19152] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3654'. [ 380.276604][T19164] mac80211_hwsim hwsim26 ÿ: renamed from wlan1 [ 380.417185][T19172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3659'. [ 380.427769][T19172] 8021q: VLANs not supported on ip_vti0 [ 380.559401][T19183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3664'. [ 380.842715][T19202] tipc: Failed to remove unknown binding: 66,1,1/0:3041552513/3041552515 [ 380.871150][T19202] tipc: Failed to remove unknown binding: 66,1,1/0:3041552513/3041552515 [ 380.882170][T19197] netlink: 'syz.2.3669': attribute type 29 has an invalid length. [ 380.899005][T19197] netlink: 'syz.2.3669': attribute type 29 has an invalid length. [ 380.909148][T19197] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3669'. [ 381.003102][T19208] xt_CT: You must specify a L4 protocol and not use inversions on it [ 381.174041][T19226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3677'. [ 381.269069][T19229] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3678'. [ 381.363486][T19243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3684'. [ 381.391431][T17717] IPVS: starting estimator thread 0... [ 381.473130][T19249] sctp: [Deprecated]: syz.4.3686 (pid 19249) Use of int in maxseg socket option. [ 381.473130][T19249] Use struct sctp_assoc_value instead [ 381.488945][T19246] IPVS: using max 30 ests per chain, 72000 per kthread [ 381.664163][T19265] 8021q: adding VLAN 0 to HW filter on device bond3 [ 381.683678][T19265] bond0: (slave bond3): Enslaving as an active interface with an up link [ 382.145519][T19289] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3699'. [ 382.177726][T19289] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 382.248906][T19289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.285789][T19297] netlink: 'syz.4.3700': attribute type 10 has an invalid length. [ 382.315041][T19291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3700'. [ 382.508844][T19311] batadv_slave_1: entered promiscuous mode [ 382.700937][ T30] audit: type=1800 audit(1762310094.208:5): pid=19304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3702" name="memory.events" dev="tmpfs" ino=526 res=0 errno=0 [ 382.920731][T19330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3710'. [ 383.386455][T19310] batadv_slave_1: left promiscuous mode [ 383.642611][T19359] netlink: 'syz.2.3717': attribute type 1 has an invalid length. [ 383.680923][T19359] 8021q: adding VLAN 0 to HW filter on device bond6 [ 383.700267][T19362] bond6: (slave ip6erspan0): making interface the new active one [ 383.710995][T19362] bond6: (slave ip6erspan0): Enslaving as an active interface with an up link [ 383.744200][T19366] netlink: 'syz.4.3719': attribute type 2 has an invalid length. [ 383.754141][T19366] netlink: 'syz.4.3719': attribute type 1 has an invalid length. [ 383.763479][T19366] netlink: 'syz.4.3719': attribute type 2 has an invalid length. [ 383.828562][T19372] netlink: 'syz.4.3721': attribute type 8 has an invalid length. [ 383.921573][T19376] x_tables: duplicate underflow at hook 1 [ 383.989644][T19381] netlink: 'syz.4.3724': attribute type 1 has an invalid length. [ 384.394054][T19402] xt_TPROXY: Can be used only with -p tcp or -p udp [ 384.470283][T19409] netlink: 'syz.0.3733': attribute type 1 has an invalid length. [ 384.632091][T19423] sctp: [Deprecated]: syz.0.3739 (pid 19423) Use of struct sctp_assoc_value in delayed_ack socket option. [ 384.632091][T19423] Use struct sctp_sack_info instead [ 384.960330][T19447] netlink: 'syz.3.3745': attribute type 1 has an invalid length. [ 385.139309][T19465] netlink: 'syz.3.3750': attribute type 13 has an invalid length. [ 385.149324][T19465] __nla_validate_parse: 7 callbacks suppressed [ 385.149334][T19465] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3750'. [ 385.290662][T19473] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3753'. [ 385.428895][ T981] IPVS: starting estimator thread 0... [ 385.441390][T19481] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 385.455291][T19481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.547979][T19490] 8021q: adding VLAN 0 to HW filter on device bond7 [ 385.554722][T19486] IPVS: using max 30 ests per chain, 72000 per kthread [ 385.571335][T19490] vlan0: entered promiscuous mode [ 385.576533][T19490] bond7: entered promiscuous mode [ 385.581704][T19490] vlan0: entered allmulticast mode [ 385.586941][T19490] bond7: entered allmulticast mode [ 385.605560][T19490] bond7: (slave gretap2): making interface the new active one [ 385.613056][T19490] gretap2: entered promiscuous mode [ 385.619768][T19490] gretap2: entered allmulticast mode [ 385.626899][T19490] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 386.020749][T19513] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3765'. [ 386.126761][T19522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3766'. [ 386.137507][T19515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3766'. [ 386.147603][T19515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3766'. [ 386.462139][T19536] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 386.720853][T19552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.797529][T19559] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3775'. [ 387.067754][T19580] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3781'. [ 387.572648][T19596] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3787'. [ 387.645582][T19604] ipt_REJECT: ECHOREPLY no longer supported. [ 387.662843][T19603] xt_hashlimit: size too large, truncated to 1048576 [ 387.677031][T19604] xt_hashlimit: size too large, truncated to 1048576 [ 387.773532][T19612] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3792'. [ 388.239681][T19642] bond4: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 388.381788][T19656] bridge2: entered promiscuous mode [ 388.388720][T19656] bridge2: entered allmulticast mode [ 388.411007][T19658] validate_nla: 4 callbacks suppressed [ 388.411023][T19658] netlink: 'syz.4.3807': attribute type 1 has an invalid length. [ 388.711469][T19679] gretap0: entered promiscuous mode [ 389.680837][T19746] netlink: 'syz.3.3833': attribute type 4 has an invalid length. [ 389.756686][T19753] sock: sock_timestamping_bind_phc: sock not bind to device [ 389.881151][T19762] bond4 (unregistering): Released all slaves [ 389.941134][T19771] netlink: 'syz.2.3840': attribute type 4 has an invalid length. [ 389.960958][T19764] netlink: 'syz.4.3839': attribute type 1 has an invalid length. [ 389.985351][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 390.125363][T19778] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 390.444324][T19802] syzkaller1: entered promiscuous mode [ 390.450094][T19802] syzkaller1: entered allmulticast mode [ 390.698502][ T30] audit: type=1107 audit(1762310102.208:6): pid=19814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 390.737102][T19817] pimreg: entered allmulticast mode [ 390.866712][T19819] mac80211_hwsim hwsim28 ÿ: renamed from wlan1 [ 391.008791][T19826] __nla_validate_parse: 4 callbacks suppressed [ 391.008807][T19826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3858'. [ 391.031537][T19826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3858'. [ 391.158662][ T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 391.240753][T19843] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3864'. [ 391.252214][T19843] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3864'. [ 391.286940][T19845] netlink: 71 bytes leftover after parsing attributes in process `syz.3.3865'. [ 391.299248][T19843] veth5: entered promiscuous mode [ 391.464337][T19856] macvtap1: entered promiscuous mode [ 391.469898][T19856] vlan0: entered promiscuous mode [ 391.475534][T19856] macvtap1: entered allmulticast mode [ 391.481013][T19856] vlan0: entered allmulticast mode [ 391.486632][T19856] veth0_vlan: entered allmulticast mode [ 391.676795][T19868] netlink: 404 bytes leftover after parsing attributes in process `syz.2.3872'. [ 392.020416][T19890] netlink: 'syz.0.3874': attribute type 1 has an invalid length. [ 392.058011][T19890] 8021q: adding VLAN 0 to HW filter on device bond4 [ 392.089972][T19894] vlan4: entered promiscuous mode [ 392.096392][T19894] bond4: entered promiscuous mode [ 392.101909][T19894] vlan4: entered allmulticast mode [ 392.107526][T19894] bond4: entered allmulticast mode [ 392.128579][T19890] bond4: (slave gretap1): making interface the new active one [ 392.136127][T19890] gretap1: entered promiscuous mode [ 392.141500][T19890] gretap1: entered allmulticast mode [ 392.149578][T19890] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 392.159968][T19891] netlink: 'syz.4.3875': attribute type 1 has an invalid length. [ 392.306753][ T8966] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 392.357743][T19900] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3877'. [ 392.385756][T19902] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 392.486333][T19908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3879'. [ 392.606810][T19913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3882'. [ 392.767000][T19919] delete_channel: no stack [ 392.931991][T19932] xt_CT: You must specify a L4 protocol and not use inversions on it [ 393.213753][T19945] syzkaller0: entered promiscuous mode [ 393.220553][T19945] syzkaller0: entered allmulticast mode [ 393.294910][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 393.434942][ T1150] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 394.546191][ T61] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 394.957098][T19977] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.975904][T19977] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.983135][T19977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.289785][T20007] syzkaller1: entered promiscuous mode [ 395.305039][T20007] syzkaller1: entered allmulticast mode [ 395.372442][T20011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3909'. [ 395.664678][ T61] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 396.085898][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 396.108896][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 396.118617][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 396.132463][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 396.140680][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 396.183702][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 396.191257][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 396.202057][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 396.211782][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 396.221835][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 396.350562][T20051] hsr0 speed is unknown, defaulting to 1000 [ 396.582759][T20051] chnl_net:caif_netlink_parms(): no params data found [ 396.638905][T20081] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 396.716460][T20051] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.723690][T20051] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.731802][T20051] bridge_slave_0: entered allmulticast mode [ 396.743231][T20051] bridge_slave_0: entered promiscuous mode [ 396.751319][T20051] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.758683][T20051] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.767816][T20051] bridge_slave_1: entered allmulticast mode [ 396.774691][ T61] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 396.777707][T20051] bridge_slave_1: entered promiscuous mode [ 396.818014][T20051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.831738][T20051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.856168][T20087] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 396.933625][T20051] team0: Port device team_slave_0 added [ 396.974088][T20051] team0: Port device team_slave_1 added [ 397.071499][T20099] __nla_validate_parse: 2 callbacks suppressed [ 397.071514][T20099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3933'. [ 397.092797][T20099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3933'. [ 397.193449][T20051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.201502][T20051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.229647][T20051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.250276][T20051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.257114][T20111] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3935'. [ 397.266419][T20051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.266449][T20051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.379535][T20114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3935'. [ 397.440437][T20121] netlink: 'syz.0.3940': attribute type 1 has an invalid length. [ 397.484008][T20051] hsr_slave_0: entered promiscuous mode [ 397.490947][T20051] hsr_slave_1: entered promiscuous mode [ 397.499009][T20051] debugfs: 'hsr0' already exists in 'hsr' [ 397.505269][T20051] Cannot create hsr debugfs directory [ 397.513357][T20125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3941'. [ 397.523006][T20125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3941'. [ 397.780828][T20140] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3945'. [ 397.885927][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 398.079571][T20162] TCP: TCP_TX_DELAY enabled [ 398.167475][T20051] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 398.212740][T20051] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 398.213992][T20166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3956'. [ 398.235578][T20166] netlink: 'syz.4.3956': attribute type 16 has an invalid length. [ 398.240944][T20170] netlink: 'syz.3.3955': attribute type 1 has an invalid length. [ 398.243406][T20166] netlink: 'syz.4.3956': attribute type 17 has an invalid length. [ 398.261026][ T52] Bluetooth: hci4: command tx timeout [ 398.261425][T20051] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 398.284303][T20166] lo: left promiscuous mode [ 398.292777][T20166] tunl0: left promiscuous mode [ 398.299902][T20166] gre0: left promiscuous mode [ 398.346696][T20166] gretap0: left promiscuous mode [ 398.354211][T20166] erspan0: left promiscuous mode [ 398.362616][T20166] ip_vti0: left promiscuous mode [ 398.394991][T20166] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 398.435904][T20051] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 398.460609][T20177] netlink: 51 bytes leftover after parsing attributes in process `syz.0.3957'. [ 398.538367][T20189] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3959'. [ 398.616065][T20189] IPVS: Error connecting to the multicast addr [ 398.660880][T20051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.706942][T20189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.740051][T20051] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.791516][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.798732][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.836032][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.843186][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.955244][T20211] syzkaller1: entered promiscuous mode [ 398.963449][T20211] syzkaller1: entered allmulticast mode [ 399.005054][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 399.153936][T20221] openvswitch: netlink: Message has 592 unknown bytes. [ 399.186531][T20221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.233941][T20051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.456673][T20234] netlink: 'syz.3.3970': attribute type 12 has an invalid length. [ 399.583404][T20051] veth0_vlan: entered promiscuous mode [ 399.623986][T20051] veth1_vlan: entered promiscuous mode [ 399.669703][T20051] veth0_macvtap: entered promiscuous mode [ 399.680320][T20051] veth1_macvtap: entered promiscuous mode [ 399.721609][T20051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.748451][T20051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.760516][T20250] sctp: [Deprecated]: syz.3.3974 (pid 20250) Use of struct sctp_assoc_value in delayed_ack socket option. [ 399.760516][T20250] Use struct sctp_sack_info instead [ 399.764097][ T3516] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.803162][T20250] sctp: [Deprecated]: syz.3.3974 (pid 20250) Use of struct sctp_assoc_value in delayed_ack socket option. [ 399.803162][T20250] Use struct sctp_sack_info instead [ 399.827241][ T3516] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.839409][ T3516] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.083223][T20250] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.098318][T20250] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.121270][T20250] bond0 (unregistering): Released all slaves [ 400.145804][ T1150] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 400.169249][ T3516] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.318570][T20265] netlink: 'syz.4.3980': attribute type 10 has an invalid length. [ 400.335873][ T52] Bluetooth: hci4: command tx timeout [ 400.364430][T20265] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.381448][T20265] bridge_slave_1: left allmulticast mode [ 400.389593][T20265] bridge_slave_1: left promiscuous mode [ 400.396037][T20265] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.414237][T20265] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 400.435928][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.456765][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.521473][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.549138][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.697437][T20288] sctp: [Deprecated]: syz.4.3988 (pid 20288) Use of int in maxseg socket option. [ 400.697437][T20288] Use struct sctp_assoc_value instead [ 400.909810][T20301] ieee802154 phy0 wpan0: encryption failed: -22 [ 400.987989][T20304] delete_channel: no stack [ 401.283315][T20318] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.316877][ T8965] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 401.329321][T20318] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 401.486409][T20318] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.497592][T20318] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 401.529420][T20344] netlink: 'syz.3.4005': attribute type 29 has an invalid length. [ 401.540464][T20345] netlink: 'syz.3.4005': attribute type 29 has an invalid length. [ 401.668818][T20318] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.680174][T20318] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 401.713884][T20359] bridge0: entered promiscuous mode [ 401.719649][T20359] macsec3: entered promiscuous mode [ 401.727227][T20359] macsec3: entered allmulticast mode [ 401.732599][T20359] bridge0: entered allmulticast mode [ 401.739976][T20359] bridge0: port 3(macsec3) entered blocking state [ 401.751206][T20359] bridge0: port 3(macsec3) entered disabled state [ 401.762640][T20359] bridge0: left allmulticast mode [ 401.771510][T20359] bridge0: left promiscuous mode [ 401.797189][T20355] tipc: Started in network mode [ 401.802274][T20355] tipc: Node identity 1a8070b27076, cluster identity 4711 [ 401.812573][T20355] tipc: Enabled bearer , priority 0 [ 401.843692][T20365] sctp: [Deprecated]: syz.0.4010 (pid 20365) Use of int in maxseg socket option. [ 401.843692][T20365] Use struct sctp_assoc_value instead [ 401.870633][T20318] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.881485][T20318] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 401.922782][T20360] syzkaller0: entered promiscuous mode [ 401.929257][T20360] syzkaller0: entered allmulticast mode [ 401.940494][T20371] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 401.947365][T20368] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 402.042269][T20355] tipc: Resetting bearer [ 402.075485][T20352] tipc: Resetting bearer [ 402.121461][T20352] tipc: Disabling bearer [ 402.187316][T20380] xt_nat: multiple ranges no longer supported [ 402.215122][T20378] tipc: Enabled bearer , priority 0 [ 402.295437][T20378] syzkaller0: entered promiscuous mode [ 402.301723][T20378] syzkaller0: entered allmulticast mode [ 402.311659][ T8966] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 402.313103][T20384] netlink: 'syz.3.4016': attribute type 4 has an invalid length. [ 402.324318][ T8966] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 402.349134][T20384] __nla_validate_parse: 13 callbacks suppressed [ 402.349150][T20384] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4016'. [ 402.367850][T20378] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 402.398885][T20378] tipc: Resetting bearer [ 402.400539][T20389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.416845][ T52] Bluetooth: hci4: command tx timeout [ 402.422977][T20377] tipc: Resetting bearer [ 402.442474][T20377] tipc: Disabling bearer [ 402.475148][ T8966] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 402.486019][ T8965] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 402.503506][ T8966] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 402.551123][ T8966] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 402.576954][ T8966] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 402.594886][ T8966] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 402.613653][ T8966] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 402.702107][T20404] netlink: 'syz.4.4022': attribute type 12 has an invalid length. [ 402.719673][T20404] netlink: 'syz.4.4022': attribute type 29 has an invalid length. [ 402.728846][T20404] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4022'. [ 402.742087][T20404] netlink: 59 bytes leftover after parsing attributes in process `syz.4.4022'. [ 402.912726][T20414] hsr0 speed is unknown, defaulting to 1000 [ 402.930393][T20415] siw: device registration error -23 [ 403.042526][T20428] netlink: 'syz.4.4029': attribute type 1 has an invalid length. [ 403.110284][T20431] block nbd3: not configured, cannot reconfigure [ 403.236273][T20434] netlink: 'syz.3.4032': attribute type 1 has an invalid length. [ 403.262224][T20434] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 403.277554][T20435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4031'. [ 403.427877][T20435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.541933][T20435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.592019][T20446] pimreg: entered allmulticast mode [ 403.637349][ T8965] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 403.727160][T20458] bond0: Removing last arp target with arp_interval on [ 403.849631][T20468] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4042'. [ 404.059795][T20484] netlink: 'syz.2.4048': attribute type 1 has an invalid length. [ 404.071684][T20484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4048'. [ 404.103197][T20487] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4049'. [ 404.145579][T20487] 8021q: VLANs not supported on gre0 [ 404.267082][T20498] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4051'. [ 404.495605][ T52] Bluetooth: hci4: command tx timeout [ 404.593186][T20518] IPVS: length: 160 != 1223688312 [ 404.722382][T20515] syzkaller0: entered promiscuous mode [ 404.742161][T20515] syzkaller0: entered allmulticast mode [ 404.755292][ T8966] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 404.810772][T20534] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4060'. [ 405.927191][ T1150] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 406.686308][T20532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4061'. [ 406.959032][T20554] macvtap2: entered promiscuous mode [ 406.972425][T20554] macvtap2: entered allmulticast mode [ 407.045071][ T1150] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 407.049508][T20559] netlink: 'syz.3.4068': attribute type 1 has an invalid length. [ 407.322532][T20577] ieee802154 phy0 wpan0: encryption failed: -22 [ 407.324464][T20575] netlink: 'syz.5.4074': attribute type 83 has an invalid length. [ 407.423882][T20586] __nla_validate_parse: 2 callbacks suppressed [ 407.423899][T20586] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4074'. [ 407.474580][T20586] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4074'. [ 407.507654][T20567] bridge0: port 3(ipvlan2) entered blocking state [ 407.522148][T20567] bridge0: port 3(ipvlan2) entered disabled state [ 407.541158][T20567] ipvlan2: entered allmulticast mode [ 407.557998][T20590] netlink: 'syz.0.4077': attribute type 10 has an invalid length. [ 407.559522][T20567] bridge0: entered allmulticast mode [ 407.582445][T20567] ipvlan2: left allmulticast mode [ 407.588024][T20567] bridge0: left allmulticast mode [ 407.648906][T20592] wg2: left promiscuous mode [ 407.680708][T20592] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 407.696172][T20592] geneve3: left promiscuous mode [ 407.702494][T20592] bridge3: left promiscuous mode [ 407.718299][T20592] geneve4: left promiscuous mode [ 407.748576][T20592] vlan0: left promiscuous mode [ 407.753484][T20592] bond7: left promiscuous mode [ 407.773004][T20592] gretap2: left promiscuous mode [ 407.812697][T20590] team0: Port device dummy0 added [ 408.022881][T20607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4081'. [ 408.105676][T20607] netlink: 'syz.4.4081': attribute type 1 has an invalid length. [ 408.205855][ T3516] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 408.429731][T20634] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 408.446709][T20634] bond8 (unregistering): Released all slaves [ 408.586104][T20642] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 408.614041][T20642] syzkaller1: Refused to change device type [ 408.703301][T20655] netlink: 'syz.0.4092': attribute type 12 has an invalid length. [ 408.714612][T20655] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4092'. [ 408.768460][T20664] netlink: 'syz.2.4094': attribute type 4 has an invalid length. [ 409.073013][T20688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4102'. [ 409.098003][T20691] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4104'. [ 409.116515][T20691] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4104'. [ 409.150771][T20691] gtp0: entered promiscuous mode [ 409.158488][T20691] gtp0: entered allmulticast mode [ 409.184306][T20700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4106'. [ 409.193627][T20700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4106'. [ 409.213835][T20700] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4106'. [ 409.344719][ T1150] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 409.443556][T20718] netlink: 'syz.2.4111': attribute type 83 has an invalid length. [ 409.559055][T20724] syzkaller0: entered promiscuous mode [ 409.565744][T20724] syzkaller0: entered allmulticast mode [ 409.576386][T20723] netlink: 'syz.5.4113': attribute type 7 has an invalid length. [ 409.593906][T20723] netlink: 'syz.5.4113': attribute type 7 has an invalid length. [ 409.618761][ T50] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.629305][ T50] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.645655][T20729] x_tables: duplicate underflow at hook 3 [ 409.745039][ T50] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.775174][ T50] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.936151][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 410.120840][T20750] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 410.447913][T20774] atomic_op ffff888023df4998 conn xmit_atomic 0000000000000000 [ 410.454624][T20775] atomic_op ffff88805f2f0198 conn xmit_atomic 0000000000000000 [ 410.506745][ T8966] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 410.511478][T20779] netlink: 'syz.2.4131': attribute type 11 has an invalid length. [ 410.564224][T20788] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.618185][T20772] netlink: 'syz.3.4132': attribute type 29 has an invalid length. [ 410.636123][T20772] netlink: 'syz.3.4132': attribute type 29 has an invalid length. [ 410.695947][T20790] netlink: 'syz.0.4135': attribute type 1 has an invalid length. [ 410.791106][T20790] 8021q: adding VLAN 0 to HW filter on device bond6 [ 410.885217][T20802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.954267][T20808] netlink: 'syz.5.4142': attribute type 8 has an invalid length. [ 411.351038][T20830] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 411.886285][T20848] tipc: Started in network mode [ 411.891839][T20848] tipc: Node identity 62d03b7e0a11, cluster identity 4711 [ 411.901230][T20848] tipc: Enabled bearer , priority 0 [ 412.012174][T20848] syzkaller0: entered promiscuous mode [ 412.021238][T20848] syzkaller0: entered allmulticast mode [ 412.030082][T20848] tipc: Resetting bearer [ 412.150933][ T1150] tipc: Resetting bearer [ 412.157587][T20846] tipc: Resetting bearer [ 412.574732][ T52] Bluetooth: hci4: command tx timeout [ 413.005776][T17714] tipc: Node number set to 1757494142 [ 413.635650][T20846] tipc: Disabling bearer [ 413.679970][T20881] syzkaller0: entered promiscuous mode [ 413.706521][T20881] syzkaller0: entered allmulticast mode [ 413.864538][T20888] bridge_slave_1: mtu less than device minimum [ 413.883325][T20899] syzkaller0: entered promiscuous mode [ 413.894894][T20899] syzkaller0: entered allmulticast mode [ 413.911197][T20899] syzkaller0: mtu less than device minimum [ 414.106451][T20912] veth0: entered promiscuous mode [ 414.128634][T20912] __nla_validate_parse: 10 callbacks suppressed [ 414.128650][T20912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4169'. [ 414.130598][T20916] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4172'. [ 414.209567][T20917] 8021q: VLANs not supported on caif0 [ 414.397699][T20934] xt_TCPMSS: Only works on TCP SYN packets [ 414.539284][T20937] gretap0: entered promiscuous mode [ 414.546509][T20937] vlan1: entered promiscuous mode [ 414.672601][T20949] xt_hashlimit: size too large, truncated to 1048576 [ 414.763792][T20952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4184'. [ 414.798527][T20955] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4187'. [ 414.818866][T20955] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4187'. [ 414.903288][T20955] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 414.918959][T20955] bond4 (unregistering): Released all slaves [ 415.224125][T20976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4194'. [ 415.551081][T21001] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4200'. [ 415.565018][T21004] validate_nla: 1 callbacks suppressed [ 415.565036][T21004] netlink: 'syz.2.4201': attribute type 1 has an invalid length. [ 415.586514][T21001] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4200'. [ 415.603426][T21001] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4200'. [ 415.620766][T21009] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4203'. [ 415.760831][T21020] netlink: 'syz.3.4204': attribute type 30 has an invalid length. [ 415.770899][T21015] netlink: 'syz.3.4204': attribute type 30 has an invalid length. [ 415.816857][T21004] 8021q: adding VLAN 0 to HW filter on device bond8 [ 415.853731][T21018] vlan1: entered allmulticast mode [ 415.869325][T21018] bond8: entered allmulticast mode [ 416.004581][T21025] veth0_to_bond: entered allmulticast mode [ 416.215965][T21044] netlink: zone id is out of range [ 416.244572][T21044] netlink: zone id is out of range [ 416.249731][T21044] netlink: zone id is out of range [ 416.262865][T21044] netlink: zone id is out of range [ 416.269950][T21044] netlink: zone id is out of range [ 416.276390][T21044] netlink: zone id is out of range [ 416.281520][T21044] netlink: zone id is out of range [ 416.287810][T21044] netlink: zone id is out of range [ 416.292944][T21044] netlink: zone id is out of range [ 416.311827][T21044] netlink: zone id is out of range [ 416.331232][T21052] erspan0: entered promiscuous mode [ 416.337860][T21052] erspan0: entered allmulticast mode [ 416.546663][T21059] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.627486][T21068] pim6reg1: entered promiscuous mode [ 416.632820][T21068] pim6reg1: entered allmulticast mode [ 416.700585][T21075] netlink: 'syz.3.4224': attribute type 12 has an invalid length. [ 416.720774][T21068] tipc: Enabled bearer , priority 0 [ 416.728820][T21068] syzkaller0: entered promiscuous mode [ 416.734309][T21068] syzkaller0: entered allmulticast mode [ 416.920458][T21088] tipc: Resetting bearer [ 416.955372][T21067] tipc: Resetting bearer [ 417.024986][T21067] tipc: Disabling bearer [ 417.162938][T21103] netlink: 'syz.4.4232': attribute type 1 has an invalid length. [ 417.490382][T21128] tun0: tun_chr_ioctl cmd 1074025675 [ 417.496606][T21128] tun0: persist disabled [ 417.560549][T21136] tun0: tun_chr_ioctl cmd 2148558624 [ 418.150920][T21159] vlan0 (unregistering): left allmulticast mode [ 418.157624][T21159] vlan0 (unregistering): left promiscuous mode [ 418.207430][T21165] ip6tnl3: entered promiscuous mode [ 418.397495][T21186] netlink: 'syz.2.4256': attribute type 32 has an invalid length. [ 418.409720][T21188] netlink: 'syz.3.4257': attribute type 1 has an invalid length. [ 418.450777][T21188] Unknown options in mask b7f2 [ 418.496505][T21186] bond9: Setting coupled_control to off (0) [ 418.930834][T21220] netlink: 'syz.0.4269': attribute type 1 has an invalid length. [ 418.940472][T21220] netlink: 'syz.0.4269': attribute type 1 has an invalid length. [ 418.954330][T21218] netlink: 'syz.5.4267': attribute type 29 has an invalid length. [ 419.108348][T21233] xt_hashlimit: invalid interval [ 419.321653][T21246] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 419.332907][T21248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.369073][T21246] bond5 (unregistering): Released all slaves [ 419.686875][T21269] C: renamed from lo [ 419.761598][T21269] bond10: entered promiscuous mode [ 419.856400][T21278] syzkaller0: entered promiscuous mode [ 419.863238][T21278] syzkaller0: entered allmulticast mode [ 419.932026][T21286] __nla_validate_parse: 21 callbacks suppressed [ 419.932044][T21286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4290'. [ 419.949451][T21286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4290'. [ 420.182148][T21301] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4291'. [ 420.201657][T21305] xt_CT: You must specify a L4 protocol and not use inversions on it [ 420.217042][T21305] veth0: entered promiscuous mode [ 420.229996][T21302] Cannot find add_set index 1 as target [ 420.269966][T21309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4294'. [ 420.755703][T21297] veth0: left promiscuous mode [ 420.902922][T21319] validate_nla: 4 callbacks suppressed [ 420.902939][T21319] netlink: 'syz.2.4297': attribute type 2 has an invalid length. [ 420.949617][T21319] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4297'. [ 420.981273][T21325] netlink: 'syz.4.4299': attribute type 1 has an invalid length. [ 421.017818][T21325] 8021q: adding VLAN 0 to HW filter on device bond4 [ 421.096888][T21325] veth1: entered promiscuous mode [ 421.108893][T21325] bond4: (slave veth1): Enslaving as an active interface with an up link [ 421.136402][ T36] [ 421.138759][ T36] ============================================ [ 421.144910][ T36] WARNING: possible recursive locking detected [ 421.151065][ T36] syzkaller #0 Not tainted [ 421.155462][ T36] -------------------------------------------- [ 421.161593][ T36] kworker/u8:2/36 is trying to acquire lock: [ 421.167552][ T36] ffffe8ffffb2b2a8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x707/0xb80 [ 421.176765][ T36] [ 421.176765][ T36] but task is already holding lock: [ 421.184111][ T36] ffffe8ffffb2bf68 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x590/0xb80 [ 421.193317][ T36] [ 421.193317][ T36] other info that might help us debug this: [ 421.201361][ T36] Possible unsafe locking scenario: [ 421.201361][ T36] [ 421.208800][ T36] CPU0 [ 421.212071][ T36] ---- [ 421.215344][ T36] lock(&pd_list->lock); [ 421.219682][ T36] lock(&pd_list->lock); [ 421.224005][ T36] [ 421.224005][ T36] *** DEADLOCK *** [ 421.224005][ T36] [ 421.232132][ T36] May be due to missing lock nesting notation [ 421.232132][ T36] [ 421.240448][ T36] 3 locks held by kworker/u8:2/36: [ 421.245542][ T36] #0: ffff888140b08148 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 421.257456][ T36] #1: ffffc90000ac7ba0 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 421.269277][ T36] #2: ffffe8ffffb2bf68 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x590/0xb80 [ 421.278950][ T36] [ 421.278950][ T36] stack backtrace: [ 421.284828][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 421.284856][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 421.284873][ T36] Workqueue: pencrypt_parallel padata_parallel_worker [ 421.284896][ T36] Call Trace: [ 421.284904][ T36] [ 421.284911][ T36] dump_stack_lvl+0x189/0x250 [ 421.284932][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.284949][ T36] ? __pfx__printk+0x10/0x10 [ 421.284962][ T36] ? print_lock_name+0xde/0x100 [ 421.284976][ T36] print_deadlock_bug+0x28b/0x2a0 [ 421.284993][ T36] validate_chain+0x1a3f/0x2140 [ 421.285010][ T36] ? __queue_work+0x102/0xfb0 [ 421.285024][ T36] ? look_up_lock_class+0x74/0x170 [ 421.285043][ T36] ? register_lock_class+0x51/0x320 [ 421.285057][ T36] __lock_acquire+0xab9/0xd20 [ 421.285071][ T36] ? padata_do_serial+0x707/0xb80 [ 421.285086][ T36] lock_acquire+0x120/0x360 [ 421.285098][ T36] ? padata_do_serial+0x707/0xb80 [ 421.285117][ T36] _raw_spin_lock+0x2e/0x40 [ 421.285132][ T36] ? padata_do_serial+0x707/0xb80 [ 421.285147][ T36] padata_do_serial+0x707/0xb80 [ 421.285166][ T36] ? padata_parallel_worker+0x44/0x1d0 [ 421.285182][ T36] padata_parallel_worker+0x75/0x1d0 [ 421.285197][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 421.285212][ T36] process_scheduled_works+0xae1/0x17b0 [ 421.285233][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 421.285252][ T36] worker_thread+0x8a0/0xda0 [ 421.285274][ T36] kthread+0x711/0x8a0 [ 421.285291][ T36] ? __pfx_worker_thread+0x10/0x10 [ 421.285310][ T36] ? __pfx_kthread+0x10/0x10 [ 421.285327][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 421.285342][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.285358][ T36] ? __pfx_kthread+0x10/0x10 [ 421.285374][ T36] ret_from_fork+0x4bc/0x870 [ 421.285389][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 421.285403][ T36] ? __switch_to_asm+0x39/0x70 [ 421.285414][ T36] ? __switch_to_asm+0x33/0x70 [ 421.285424][ T36] ? __pfx_kthread+0x10/0x10 [ 421.285440][ T36] ret_from_fork_asm+0x1a/0x30 [ 421.285457][ T36] [ 421.514729][T21336] ieee80211 phy38: Selected rate control algorithm 'minstrel_ht' [ 421.558588][T21338] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4303'.