last executing test programs: 4m24.934095061s ago: executing program 3 (id=4104): r0 = socket$kcm(0x10, 0x2, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007180)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="205ceaf4954760e4cb71fab2ffa5d8eaf674ef0da21ad99e90a47558cf58c9d45ef7a776ea70d75c3b45875fcae47740fc6612da77578af30abcc34724e0ce539d92b5b3f151bdcd54ac8fa76e4b5991eb32ec6c4a36b616f5fae921e32a", 0x5e}], 0x1, &(0x7f00000000c0)=[@assoc={0x18, 0x117, 0x4, 0xdb60}, @assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0x4}, @iv={0x60, 0x117, 0x2, 0x4a, "de503e5374559d7f599bec0ff2582b823581ed9f37038fea2f2ab820a7c7c9e2c53145c47286446132ea0cf919ab09f4aad9341d2b3a3371c2af26f7c7f603e191301fc2a9983d7d09c7"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0xf0, 0x10}, {0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)="dea6d25873145b1850e25650c7b924132b1f69525cd5147e49940c9b96f18c9099373b339b40b2a35b4fd220e2bc6e4f201f97598e87b032b45130539011", 0x3e}, {&(0x7f0000000340)="870a7eca148ad94127cf0884d046924acf90f3894c30c6d3cc52360131c02dc605f4aa72c8ce0d5fab76cd41c2bc01ca6d52df32abcf1eddb1da389c69d1a544c543b7fdda69d59f6f993eb04472d1a95a76cc280944446a1d85f0e94a3787e40df90da21a409437ef7f4bc1a09e84ad1464ac98a1fa9445c030a92ac4bfad10475676b1d843085a0e1d7090f3fc10cd8154cb169586441eb726f569d85f509e3e671ac918dc5155f43ca1902311c2f1ac3d911ad9ffee3319a4536782be033189fc3dbe087ef76e6cb30d6df7d1640989507e4e9fc7553d6b9b7c2c9b1ed823950b21105061352c1412faa772469329d81217ba2e", 0xf5}, {&(0x7f0000000440)="da65cc2d8eae6e1093637000c5c751bf59c067f5777afe3e5b5a17958b9211a7032367710426c9f8a9efeddd7de17727b897c331b3306506b1fc689a7f6ae9e6fe3b1b429a9114cb9ecb4a87a9963ff539ec1fc0fb34b61c84c1a9c9d752c16092795602f86953a0fcf80881dcfa9502387231", 0x73}, {&(0x7f00000004c0)="82e175f92bf90f64764a4de57a35e384c8508fc038ae5b61e263718da017175329180d657f689612f852385e5cc304489a8f271c40db08edb2c753381394a0dbee3ace681f3b71e0a6331a26826603a9552424974a8a338509e2ddf2d97192bcf175f339233486fe81d8009cd2cf178f0fe2125021d03bac37b3334865c58fbfd50ecb4c5db6258473a0cdc94174b4552c42e2f90cf5aa01c1bb83681ee3e8a659fdd5a090331c364f67f5339f7b86b659a510b3cd2cf0a4", 0xb8}, {&(0x7f0000000580)="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", 0xfd}], 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="b000000000000000004cebbfe2f58e016df346e24d8f7980853f6e3ce8f4830c9c2427283f1e2efba1fb506ea3ae59a0c5836a979f9e854cad861ffa4597d2f91f99899ba3518d82f3ab466a85993f9818506558970b970d024d12835d121ecdff372aca86f918a02793a5c530843ebaeb5eb103c35ddc5dc1ce06afed00edf79c7abd6f78805e6a243fa0d91cb1048d3aac93cb45e1427a070a8976efec0f750000000000"], 0xb0, 0x4000040}, {0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f00000007c0)="5fd51a9ef250657a2d9acaa7ccd8e62ac17f8b4d672c3c57b39e34f15a58da9e4cd2800f70e091ee5233310f66b784ad77b86fa409471e26eebd5119131a2d7c9421865539aaf38d5fd55d0edb9b6c70cafd476aff7b12cd3a48625d9361ca1c1d47e59733eca558edd2b8265ccdd233175f3d192bfa1596f53f0f45157d0734513a322097c8f50960a3b0f62893509cbb4e4ac744251a08bc693453df1ccfe628051555e9f090d7f10809aa04ec7b39676b89bc325956ebf6b9a31a9ffbe6595ee1bffb6236feda28ce5e6c5e4107151be7060e24eabce27cb40eaa803a12e65abf2f78c44f9505fd8fb2506ade01203dc2e1ec41", 0xf5}, {&(0x7f0000000980)="de68c392beaca7df6e6428c61117a5ffb6e0047196d6de5560539d3663131280a16a8caff6027b561da5fe048cfb6ae681be88f1894ab39f02a6a5ecc1d8cc09fdf36a07015abd78f3c1d8bdfcda9363484c8979d90f4e0987ce9c8b6dcf5d597583d9e56445243ca0b6830f35c98e99ead87aa22acc2e340719bf74f0c3e21685b49edf84ec04b09aceb6bde419d43d473264eea329f2ed49c6cea8faffa66463c429273e0113c4b0a044e4fc1f85f1d85d0b202bc216e246c1b728faa50b92788855f46ae7e10a3bd45fd09e80e8cf6b7bf9125687ef6a66fb06e623a2552cd5", 0xe1}, {&(0x7f0000000a80)="da01f060b5e16b70a5c488422e293a2da4c6d2e5df7959b91368a02288f13bf9baef7740b955124745d88894eee1b5d5151bbfc6ac6d9c52909710bd9fdd74a936c65a1c0f4bb24f3a2671eede6238925fe402684db920bb74057bc851a6fd28caa5fbb82d3c5339b807b90e8304fdf37ef147cced15058d0d8c1c1127fb63d7820e05addea16d8edcd34a8bf3402aa5be4a6fe5bc2c03ea3c722141381fc9d5fa056b7a0788282f5482b2354ab7", 0xae}, {&(0x7f0000000b40)="089a7b690a73bf050340c2fa994c7708d0a5870ed01c0853ee8d0639c0d204c2aa72dec2f70b435f0fecbf3a3bba9f81f5df33292c59ea159ffdf96430afb1c23c1af96978ee8acab416dd0e7bc10e8f5dbc40a5981c9dae18abb5cf85c0f2422a9eabaf00a9af95c0cc45ab637d1a4974acfaeaf4ce42aaa33f912b929b40e53628dfab421245a19bc37e4d92fb55d0fc741ea86b68", 0x96}, {&(0x7f0000000c00)="71398bfd4ad2eb3ddc7603155ad639f608eda3ec0db9cc71ca5d287d32e40a090b785804f66707ccc6387a0f2994b5b4e898774696bba026d0b53116db16a4b28cd3f22c6cfaae606465017cd8d0a2ee53ecf580ef21a739a18c8aba3190e5a659a200c111521faea46d21ad75ea08218baf28b4bfc45e54808d3c42c76f9a9866890f8312258757da2d56ab5c8a", 0x8e}, {&(0x7f00000008c0)="028912a6374ae7e713944507400ceda9d798b4dee46caf2ae64ce8a049aef8b583ad0310339ec6edb4c71f36d3a39ef25e10736a6437824a06077341169d557d0e7af9acfff455", 0x47}, {&(0x7f0000000cc0)="f3e4a6ce1bb1a5a2b783a8dc5f57f2bca21dc8e7b636b81a81870527c74063b30a13b1c6896b2ffa46a451dcc066db19ae528ca1dfbb470355ac24d3dc9e91586e86ff9ac1383717dd1ab27f", 0x4c}, {&(0x7f0000000d40)="d68136454dab2c946993fdb1577f0c7f8e8d566e6d3e48d7792d1cacd760ed7d23cd696caeb5702cb166d5a2c1087c73b1b3cb13f714dd314f2e124e05aaa2ee46ab76a595606faa49fdeadcf81a66d1aa74e62df1c1300eb426a83eb5a5216ea341cfd4fcb7aa8e84735b95348c04b8cfc33a385d223c3b42b4b86582b9cca43f982f43b32d2fe2f6618ad9ead82a326f7518f5cb602dff3b7007a73b394257be3bdf3cd6e461ecf75d", 0xaa}, {&(0x7f0000000e00)="dd0a59d6247c95052a5bb6cf4dfe6faa6734b146573643b5bbdbece15c56059ebb93801f158d3268e5af9be9c933494241c1a9dca2", 0x35}, {&(0x7f0000000e40)="dc677aaabb5534af98000c73364c01a54d948accc448ee4f71884d91011e1bbf6707e49a95f863262c99419ea5c4e0e98d3d572605d3e3e77f5eb7c2a0d3f70a30bc96697582eda94c7e95e98cccf2fb20eefb29fb38c1e09d7f80890b8a0409ff01801e5c", 0x65}], 0xa, &(0x7f0000000f80)=[@assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0x400}, @iv={0x108, 0x117, 0x2, 0xf1, "a8be53e1e1d3099ce2da5aa8554be14864865b53847f587386888a9cbaf06d09f598f10634a894dd27b00f32bb32d5609e2346575e712814ea0cd02fa307b4a9878e454bdfe45f2016571056b3fa3566fbbcc67f9986aa7ad53d6d71700a8372ca0f0b600532ae54464c2ce4c976844856917ac8f64e9843315f9273a1bf41c2b5c9a2df69bf5e3b2b1d695d9ef9fcd10f2ff689c91375387c573b78ed14208db6fa9e087fb54de956225c0e8479c33c443ec0d44076a7ed37710daa9b1d3dd4c37e1e55e3bc6eab961f4657d8ad0afbaa28e312c2d5529981755fb7dd0ec75fad102798433c186ed1b668f251d6200c9d"}], 0x138, 0x4000}, {0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000010c0)="5e380e667e167ade4ca1bedd2cdb35435bacf2bd71b43ee16e", 0x19}, {&(0x7f0000001100)="da2ab1d3d572f8b8a851037e20edeb0729f6b53b0290932e12720ca2ba00bb8bf104e25e61cd80db0a41118d02d516be755ab71a2d8de3adc4ed60f0c0c51151e24766c47c5b38ea0c1d2b69c1685aa7317fccf1e4cc9fb7fecec8da243f6b0b7783876f9881db06022335ba6025914b71604189d52b98", 0x77}, {&(0x7f0000001180)="fb125482b42a9b581da4cda5a0380a5287b5c4a94f4c1cde4432d6d887556bc053752cfb4a5213b1d92c5c82e86da378ef062c77b95da9125dee07f222dc9056ff3e6b71efd69146ba2f200bf64d3d6cd1bfb457b2b776e9f00a72324276f8ae1c9bce903dbdbb664134b69ac56f7d26cbc0d90e2bca8ccd26d1ae569c3592175819841182a86b69335b482f8fd93dcf6c0082422f4ca797c01b49575fa10426e7ed0bede0e62817f2df373b5173cc91f295ae4404c48bf38400ba49ad41ab120d7d069257c55f4f22665a937f8b6c17cf41c4ca61f42b3defbb105ea49d71", 0xdf}, {&(0x7f0000001280)="e919dce130bb1c87e251d69550f0d5fd83b81c92bc86b542a16de17a2a487a942b893a7c584290e5908ad41fbae02adaf6b4a3cb81abafd19f020b9cf5d1d1203b6e23248a8a4fb53d594a5165762159a8da50909e4096a3a2e0ca3fff1e41e554c5bbebbd3b85ffad48b4d7a5323668fdc9ac1af4faa359281ddd067d33f59bd22a902f0fb162dd1e92c0f87097b69b501b7994e01875c5ad7ad609ae3efb0c3681fc623c9977c2eeec2a60b3b16d", 0xaf}], 0x4, &(0x7f0000001380)=[@assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0xb70}, @iv={0xf0, 0x117, 0x2, 0xd6, "d4dbb1c2074e9d2910b70cb12cbe2a29235bb19c900944b55747eff2fa69e1a5b869ca07c20ce239c9af2b5726f0591ec47084a194927e124c50f040abf83e7906413c1edd10c52e08164dee75e6919dd42105d7e5f71e177580e8075c938ffd3e430d969ee417102249ecbc3bd67d6a4247b0d6105cbd737438990d1ad0eaa008058513e8702b2dd7ed17b9203b9289961654a3577b3381dd1148202d51459813e6c71326b02e247ee7cc6235d9a20be6112c4cfec45b2a46744fb7a1448bebb2f44873119e71fec955e85804e9b9442277ad0d53e4"}], 0x120}, {0x0, 0x0, &(0x7f0000002880)=[{&(0x7f00000014c0)="e3979a6d8c46ba44d14796e8", 0xc}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000002500)="1a0ca43f81e929bd7b96300db30a874612c8997610ea85b24129367d4e9dc8bdb0ef29cd6abb5d17f7ba010169b6245902f7fe118942490bfaa19bc926dbe320cd03054400325f35281557f75f23", 0x4e}, {&(0x7f0000002580)="27b7167d26eb3d5847d80c26044a1250dd520c68c2527f61291cda6c84c6c4a3d92f730d2f06f230da54c81bc4a5a16d203937aaa0633f71df99e7fe800ab3c5697f4a68898378b87779ffabbe7fc3eb7c9c6fad696be7d825db19aa6ea5a8d32ab93d4acc1c359cb9e42cde05b677d5dcd5f4162431d3af9099b576fcccf477e8cfc1d6f281efd9e044a75bdf7d5e67ecdd132ac32785f759e7c59a3b4855f9757405ac819d8bad365fae0f0739a74d3bf537d2da", 0xb5}, {&(0x7f0000002640)="9378a422042221a89b5974114b1583436f1051c3223ad68bf7806799fb8c38e3a29d63a257b46988819b5682e6559162a3b6948efef108291e30be130451a3fc193f2d2d7c640747ff34d705550ed16fcee224e35549fc2a6662452d4bec9f751ac28eeaf639", 0x66}, {&(0x7f00000026c0)="eceb385c0eee596583cf2e6d89d10588512fe1c7fe1e9f7e638e9097e5b9a1f8b67d2165990c6e8eecbbaf1b7489c668055c6d1956499758e0e981ec6bd6e2ff0ff2cd9aee8738f9375b8ff52b9a184399b09f931e6ff047766ae0e7240eed74caed2bd85f4f0515481b8fb39ca3b20dd31438d0e52298c9f7eff7e48ec4b328c3e0ad56f9bb9b0a2208d161373543254648c204608aa57787c7fef12c75956e87ab2463065aaf1b0936215c82a8c91e1f0b44cb7a907b76bd00a8085bc5f6cac9b9afc0ce6817f35101ecee9cd0545ccbd91dba", 0xd4}, {&(0x7f00000027c0)="f88f9489d6fa70362fef48054af1b9e7b66513fd89ca7e13ec3eb5c12e1289689fdc952f6b9b5cc5c4dd722fb3fd2ec8ab97112bb3b4eaeeaaa256a6967306a85b66ec8553c68cc90499db722bd2f9bf3b47896973b8b3bda73cb7af819bc221c5864bde879029b07e7e82835856af916f6506edccfebbb3350b77b4201a50b055d3a3df55bace7347b7a6e0a6864f4a4410922f8588912e27ab748e8e17", 0x9e}], 0x7, &(0x7f0000002900)=[@op={0x18, 0x117, 0x3, 0x3}, @assoc={0x18, 0x117, 0x4, 0x3}], 0x30, 0x4048000}, {0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002940)="9dcf5636b5ea48d08033ed50fa9199e0f6fec6ba5471c01e19df2666c2b2d4def47cd645c5c2feb9eb3d35449546c961775bbb463a40fda69e9bc37e48ab2b66c12235d8584d5f5b87171faa72196d615001d7b256f978f19fb769422753452b776d", 0x62}], 0x1, &(0x7f0000002a00)=[@iv={0x28, 0x117, 0x2, 0xf, "3968df1d3d6b8a01243cfb28d5a95f"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0x4}, @iv={0x108, 0x117, 0x2, 0xed, "fef83c5d32ba953ff068afa1e244959a04e2ec7c6b11774a1ac3dfadfeae5935104d43ba75f17b215b0c236a297a90db69561fb16d30d226558e21ac9abb6dd86b6b82a231fa53479f6f3eb2d0c294d17d0d6197232436be9def37f872ba41c89e44f9dc6eeb3a317c7d890115c6d55a8184ac5112eb2c0621aefc1d436c3f4461cd25148cac0f82691e591b37d6d7c5d4498655d52bec16a0a9326bae564bd68a65af72e1bbb0991ca06a74c5a65e2d47f4038d1a60558a92def4d261774545cf0515aa89665cd5ea31dbb80dcbe7d80e0ec1d2baca6e9182db89269ff46f5d796a361e3f7518b2a5b63fa2c8"}, @iv={0xe8, 0x117, 0x2, 0xce, "4c726fc582336ce66fc9fa6d9f2e102bc6af65ccfcb68de081a0ac96f4a43761605c5c1a46cfc7d2cb69087a8313f94fe372fc684bb207a670a27ebacecc8ed873ee7ef7b4243b761f798f129f4fb464a53d2ee58860ac242f9b654c0f97c827778d808477457d7f025e63799ba7782ecdc81cca6cafc208c4fd3fd15d371871913df7807b198452e66699217d8fe085efdd51b2a56d3280dbebee2e291481d6a2836348ec0a9a1cbbba3fcdc7d51a6b9402d4c68148189a3569e5cdde2f8c449f70410acab31e2d4a29a955e19e"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x2260, 0x800}, {0x0, 0x0, &(0x7f0000005f40)=[{&(0x7f0000004c80)="262bad9e59c5789a9b2c033403a94a2cafec2e028a0315f0e01c5891985a8cda47c667a5829bcf54f0668ebb26b120cd64fd2f672d080f4bb725da1649146d961e105c29ea5eb5bbe7dbad6e0d9aaecdea926806892875561fc1b69f4db9806c3753db", 0x63}, {&(0x7f0000004d00)="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", 0x1000}, {&(0x7f0000005d00)="ffd72440f3600241bbe69a00a4d639fb1ea5d04793d0b5646b5e4a9c766daeb7c6171907119cf003dd58af72db4d29659cf1965614f4d6e795cfe7b74cbe49241b70f294ec0b319320fd3f874698eea412a2fc9fb7960b7a029ecdf06aa5d95c8132ce760eeebfc58636037cb1cf9ad190e11f5e4107c216ec9aa104f17721f8b0600f900d2dfd1a2723c93a3db197d55c8c685511c93d2b5dcfec58e2258257e12c3e5b2a6c8b9a9ec89d59c2905a2fce57a87ad2e051cd3837985debd62464bc0fe1b00b8b0a5d894ff7ca862eb2", 0xcf}, {&(0x7f0000005e00)="9923c78a91878f2ec03d9cca2e43b6738aa71131b62ef9538189efa9ceb6f5be4b4bfe4c5f1c3f48ba8c4363f71c1a60a991fb47690baf53ba28b8cfca1df3e405c01466d0d01410573597b4e34d40b0ccd83187b0e80514132e546c21776c05f8f3eb27bba1d8207b8d342fb0959b3995ce3c1da40c83fb96d1e0a84aeb250a90045f884d100c770838c8d5", 0x8c}, {&(0x7f0000005ec0)="b6762c84eab7ef420417eb17a4170f95cdec71baaa4a9b12bca3abdea4bafe3d4660fcf0edbfef7d5fcda0476282903098d8fb7b12b55ea368b19e6529dca1781e6fd3d33b4d0f528290df0103c15ba8c4e7fda0b350d08c2c525cf2e88439c7d9a0b4b1e2103fc5", 0x68}], 0x5, &(0x7f0000007c40)=ANY=[@ANYBLOB="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"], 0x11c0, 0x4040}], 0x7, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b16000000e8fe55a11800150006001400030000120800040048000300a80016000a0001400d000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1, 0x0, 0xfffffce8}, 0x0) (async) r1 = accept(r0, &(0x7f0000007340)=@can, &(0x7f00000073c0)=0x80) r2 = socket$unix(0x1, 0x1, 0x0) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x34, r3, 0x90d, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0xb, 0x1ffe000, @l2={'eth', 0x3a, 'xfrm0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x30, r6, 0xb97534d5fe9704cf, 0x0, 0xfffffffc, {{0x12}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x140]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000076c0)={r1}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000007c00)=@newtclass={0x2c, 0x28, 0x0, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x2, 0xfff3}, {0x8, 0xf}, {0xffe0, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xb}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (async) r12 = socket$kcm(0x11, 0x3, 0x0) (async) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r13) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r14, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000007400)=0x1, 0x4) (async) getsockopt$inet_IP_IPSEC_POLICY(r12, 0x0, 0x10, &(0x7f0000007580)={{{@in=@loopback, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6}}, &(0x7f0000007680)=0xe8) 4m24.071572533s ago: executing program 3 (id=4112): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x64}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x839a, 0x8}, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0xfffffffffffffc7d, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x10) recvfrom(r4, &(0x7f0000000180)=""/60, 0x3c, 0x14112, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'team_slave_1\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x32, 0x11, 0x4, {0x8, @tcp_ip4_spec={@remote, @empty, 0x4e21, 0x4e22, 0x4}, {0x0, @remote, 0xa7, 0x0, [0x40, 0x132]}, @ether_spec={@remote, @random="787ac0791d6b", 0x3}, {0x0, @empty, 0x0, 0x2, [0x1c00]}, 0x6, 0x7}}}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000300)=0x11, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000440)={'veth1\x00', 0x600}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xc03, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000100)}, 0x10) 4m23.032766873s ago: executing program 3 (id=4128): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@caif=@rfm, &(0x7f0000000080)=0x80) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xb) r1 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaabcaabb86dd6000021000083afffc010000000000000000001600000100ff020000000000e200000000000000018500907800000000"], 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x70}, 0x1, 0x0, 0x0, 0x404c000}, 0x80) recvmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000a40)=""/4072, 0xfe8}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) 4m22.786607617s ago: executing program 3 (id=4132): syz_emit_ethernet(0x12, &(0x7f00000002c0)={@broadcast, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@generic={0x86dd}}}, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$kcm(0x29, 0x7, 0x0) close(r0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x2000800) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x2c, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x4004080) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x7c, r6, 0x485, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x16}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_int(r10, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) sendto$inet(r10, &(0x7f00000007c0)='%', 0x1, 0x4a841, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r10, &(0x7f0000000380)='x', 0x1, 0x480c1, 0x0, 0x0) listen(r9, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r12, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x17}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 4m21.825548363s ago: executing program 3 (id=4146): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000003c0)={0x14, r2, 0xf21, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40085}, 0x24008840) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000810}, 0x20000000) (async, rerun: 64) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="84ee9261da0ee02a6bbba88839d03ad0a424b65f2763e424da8fa12d7a935f879e", @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000800) (rerun: 64) 4m21.47856423s ago: executing program 3 (id=4150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x1, 0x2, 0x801}, 0x14}}, 0x0) 4m6.437287249s ago: executing program 32 (id=4150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x1, 0x2, 0x801}, 0x14}}, 0x0) 2m47.978175936s ago: executing program 5 (id=5248): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) recvmmsg$unix(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000440)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/31, 0x1f}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000740)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000019c0)=""/251, 0xfb}, {&(0x7f0000001ac0)=""/195, 0xc3}], 0x2, &(0x7f0000000900)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}}], 0x2, 0x2020, 0x0) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080200000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r4, 0x101, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f0000001cc0)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x4, @empty, 0x9f9}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x18}}], 0x1, 0xe6aa0a9f27214269) r9 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) preadv(r9, &(0x7f0000000140)=[{&(0x7f0000000540)=""/72, 0x48}], 0x1, 0x9, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000004000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000080)='GPL\x00'}, 0x90) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket(0x200000000000011, 0x3, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000070000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c000240000000000000008108000340fffffffd0c0001400000000000000007"], 0xb8}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r14, @ANYBLOB="20000100", @ANYRES32], 0x38}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$vsock_stream(0x28, 0x1, 0x0) (async) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000001cc0)={@mcast1, 0x0}, &(0x7f0000001d00)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x3, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x0, 0xffffff77}}, &(0x7f0000001c40)='GPL\x00', 0x5, 0xb, &(0x7f0000001c80)=""/11, 0x40f00, 0x0, '\x00', r15, 0x25, r2, 0x8, &(0x7f0000001d40)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001d80)={0x2, 0xc, 0x8, 0x8}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001dc0)=[r9, r3], &(0x7f0000001e00)=[{0x0, 0x2, 0x9}, {0x4, 0x4, 0xc, 0x1}, {0x2, 0x5, 0x4, 0x1}, {0x0, 0x1, 0x10}, {0x4, 0x5, 0x6, 0x7}, {0x3, 0x5, 0x3, 0xf}, {0x4, 0x3, 0x0, 0x4}, {0x2, 0x3, 0x9, 0x6}, {0x4, 0x1, 0xa, 0x2}], 0x10, 0x5}, 0x94) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="200000000000000000000000000010001811000024e49c8e9b1802d8b5c8d0a0078f145f1b4157d6d2b7d94524f4272fc51004d6b1d34c58f58ac8cd79d4cc8d7d4912a0e5e0c1e4f10d5de76120f843a95251cb5ea3c7206e96c6af15e050dfe592c0d9110588f558a8e36049b3d44498763f59abc771d98c3aecbe677d683d6934b4c804e47289ecc8d14cf5ab30d9f0d0ac59dde76af653a105fa4749735a83ac2463bff43a45", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000100000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbf07000000000000070000000800ffffb70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000046000000760000006d00ffff00000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) syz_init_net_socket$ax25(0x3, 0x5, 0x8) (rerun: 32) 2m47.792973437s ago: executing program 5 (id=5252): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)="18", 0x1}], 0x1}, 0x4008840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r1, 0x0, 0x33, 0x0, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)="18", 0x1}], 0x1}, 0x4008840) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) getsockopt$inet_int(r1, 0x0, 0x33, 0x0, &(0x7f0000000080)) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (async) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) (async) 2m46.43120714s ago: executing program 5 (id=5272): mmap(&(0x7f0000526000/0x2000)=nil, 0x2000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) recvfrom$phonet(r1, &(0x7f0000000040)=""/80, 0x50, 0x40, &(0x7f00000000c0)={0x23, 0x3, 0x6, 0x5}, 0x10) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000)) mmap(&(0x7f0000526000/0x2000)=nil, 0x2000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) socket(0x10, 0x3, 0x0) (async) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) (async) recvfrom$phonet(r1, &(0x7f0000000040)=""/80, 0x50, 0x40, &(0x7f00000000c0)={0x23, 0x3, 0x6, 0x5}, 0x10) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000)) (async) 2m46.292719212s ago: executing program 5 (id=5274): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x68, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x37, 0xe, {{{}, {}, @device_b, @broadcast, @random="4d8e505a6882"}, 0x0, @random=0x4, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x68}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="fffffaff4cfce911406bfbc851c5808d9db098a90a9d866e57778ff7a6aa6e13237a1812bef048445ff3287a060cd55c0b039565dc1d39a6bba485dde67f2cfce5347ac55bd471d94b3ed20e663c36ad", 0x50, 0x0, 0x0, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f00000001c0)={0x0, 0x5, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000003c0)={'ip6tnl0\x00', 0x1000}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[], 0x48) socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="380100002400aa3233133fe6933b00007f000001000000000000000000000000e0000701000000000000000000000000000000000014a73b70783403c2fd0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00000000000000000000000000000000330000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800010078636263286165732900"/240], 0x138}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20400, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000080)='yeah', 0x4) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f00000003c0)=@mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1}, @device_b, @device_b, @from_mac=@broadcast, {0x8, 0x1}}, 0x0, 0x7, {0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x8, [{0x2}, {0x16}, {0x16, 0x1}, {0x12}, {0x24}, {0x60}, {0x6, 0x1}, {0xc}]}, @val={0x2d, 0x1a, {0x1000, 0x3, 0x1, 0x0, {0x3, 0x6c2, 0x0, 0xa, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x800, 0xb, 0x7}}, [{0xdd, 0xf7, "112ef08e0587b710d3d16c0a0bdf1378282ee07547f906c35bca0c660ca906b97d58cc9e1ab075c64196d1c2b578527683dda2d0747cabd18d4c85d11ceef47c9498207066644fa1539a59ce40b41d8b955c448a4388c7a5fcb951c2590d67a2bd7c8bd922e93f972e4407e14e489765e764c70f0a83560b59e14a514884dc57f435c0039c3b4fe7fcf73bb491ee2b70914738d248f55bbf412e600b6b21a89baf2046c40241ee8c1f45aa7b0b0f763ab63200685c57efea158540eef0c815c9c08326450245790a9c7385454832674ec6a733e7b3680fe29728327f898ecb7717afc66a8026d9d9471a87b27ca902ec303f26aaaeb767"}, {0xdd, 0xe9, "dc37eef115548d521b47f57aa76e690629b533156f907623d3bbdf1c21357e15a36c7cfc2d0e70c443e9cd5fdf9a09abd6d2b8be9510b06814305360d70e3268996ce745ce8cff9fb7578dc9d694b269a2a2170567b8be40047f284c59ab6c307b294ab87421e8835f1ff59fc64c853999158438e4d0c6fbb746a685647e12487dc45534f1d5c31f0a5372472cd7aeaa8d7ee5c18eaa32caae08baa3c9bc07bcb8389db957e1a6703c17f8993ccfec4fa645a03a5deef3f14ed730598583fe1bdd7d3e1102629550722ab50af6f9b3ebc2129415e553c55905af1d85a6ff4a849b3eab8d18f90b53d2"}]}, 0x22e) 2m44.757802704s ago: executing program 5 (id=5299): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) syz_emit_ethernet(0x32, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000008100006574683a73797a6b616c6c6572304ad109bb7548cc172dd59d466e9e3ff27006dc0d292676402355c3f89c85bb69f2f7bd0bef24b2dc2b2a54c686f5e42eeda92cb218463af293dfaa63af2a4bccf71969ce227d9047fca2"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000100)="3909afc0c88e598f96a384aaee9c3f11c3ba784aa8aca9f6bfd34c44550a8e6a", 0x20}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000005c0)={0x0, 0x8ac2}, &(0x7f0000000b80)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f00000004c0)={0x0, 0x8, 0x7, 0x3, 0x2, 0x7, 0x5, 0x400, {0x0, @in6={{0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, 0x10000, 0x80000001, 0x2, 0x3, 0x9}}, &(0x7f0000000080)=0xb0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000580)={r6, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/uts\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r7, 0x0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r8, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) r9 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r9, &(0x7f0000000180)={0x2a, 0x3, 0x8000}, 0xc) getpeername$qrtr(r9, 0x0, &(0x7f0000000700)) 2m42.211374003s ago: executing program 5 (id=5311): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x6, 0xe2, 0xbba, 0x1, 0x5]}]}, 0x34}, 0x1, 0x0, 0x0, 0x22000800}, 0x800) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc0000a1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 2m41.80925385s ago: executing program 1 (id=5318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0xd, 0x1, 0x0, [{0x0, 0x2}]}]}}, &(0x7f0000000180)=""/198, 0x32, 0xc6, 0x1}, 0x20) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000380)={'dummy0\x00', 0x400}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=@deltfilter={0x2c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xa, 0xc}, {0x0, 0xfff1}, {0x3, 0x1c}}, [@TCA_CHAIN={0x8, 0xb, 0xfff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x200008c2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x15}, @empty, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af29708e2355d0e7ea0c543011a00", 0xfffffffc, 0x4, 0x81, 0x81}, 0x3c) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 2m41.396464182s ago: executing program 1 (id=5324): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r3}, 0x20) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff81}, {0x0, 0x3, 0x78, 0x4, 0x6}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) (async) r10 = socket$kcm(0x11, 0x3, 0x0) (async, rerun: 64) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 64) close(r11) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000540)="18", 0x5dc}], 0x1}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f0000001740)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x1002, @remote}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r13, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x40, 0x1, 0x40, 0x2, {{0x8, 0x4, 0x0, 0x3, 0x20, 0x68, 0x0, 0x2a, 0x29, 0x0, @rand_addr=0x64010102, @local, {[@rr={0x7, 0xb, 0x9d, [@private=0xa010101, @remote]}]}}}}}) r14 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in=@empty, 0x4e22, 0x2, 0x4e22, 0x3, 0x2, 0x20, 0x120, 0xf, 0x0, r14}, {0x4, 0x6, 0x7, 0x8, 0x7d0, 0x0, 0xfffffffffffffff4, 0x100000000}, {0xfffffffffffffd3c, 0x1, 0x0, 0x4}, 0x7, 0x6e6bbe, 0x1, 0x1, 0x2, 0x2}, {{@in=@remote, 0x4d6, 0x2b}, 0xa, @in6=@remote, 0x3501, 0x2, 0x3, 0x8d, 0x81, 0x9, 0x5}}, 0xe8) 2m41.069199117s ago: executing program 1 (id=5329): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x36, &(0x7f0000000200)={@broadcast, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x0, 0x2c, 0x0, @remote, @local}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000200)={@broadcast, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x0, 0x2c, 0x0, @remote, @local}}}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x6, [{0x0, 0x9}, {0x9, 0x100}, {0x6, 0x80000000}, {0x8001, 0x2}, {0x7fff, 0x5}, {0xff}]}}) 2m41.02518292s ago: executing program 1 (id=5331): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) accept(r2, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, &(0x7f0000000140)=0x80) (async) r3 = accept(r2, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, &(0x7f0000000140)=0x80) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xcc, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4004}, 0x4000804) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0) 2m40.8740088s ago: executing program 1 (id=5332): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x87}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1401000020000107000000000000000001"], 0x114}], 0x1}, 0x0) recvfrom$inet(r1, &(0x7f0000000040)=""/231, 0xe7, 0x40000000, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, 0x0, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b036814e0ff64000200475400f6a13bb10000000800894f4820", 0x1fffe, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x2c, r7, 0x329, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40010) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="00000000000000eb082dac800900010069706970000000000c0002800500090004000000"], 0x3c}}, 0x0) 2m39.927051346s ago: executing program 1 (id=5348): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x1, 0x6, 0x80, 0x0, 0x6, 0xfffb, 0x2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r4) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f00000011c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001180)={&(0x7f0000001200)={0x64, r6, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x14}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="e3cbd525537a"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7ff}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x22, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @rann={0x7e, 0x15, {{0x0, 0x8}, 0x4, 0x0, @broadcast, 0x80000000, 0xe9, 0x4}}, @ibss={0x6, 0x2, 0x89e}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008041}, 0x4005) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$rds(r4, 0x0, 0x24004844) openat$cgroup_ro(r7, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="040300000007009000002d"], 0x14}}, 0x0) 1m21.451434534s ago: executing program 33 (id=5311): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x6, 0xe2, 0xbba, 0x1, 0x5]}]}, 0x34}, 0x1, 0x0, 0x0, 0x22000800}, 0x800) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc0000a1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 1m21.451105654s ago: executing program 34 (id=5348): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x1, 0x6, 0x80, 0x0, 0x6, 0xfffb, 0x2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r4) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f00000011c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001180)={&(0x7f0000001200)={0x64, r6, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x14}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="e3cbd525537a"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7ff}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x22, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @rann={0x7e, 0x15, {{0x0, 0x8}, 0x4, 0x0, @broadcast, 0x80000000, 0xe9, 0x4}}, @ibss={0x6, 0x2, 0x89e}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008041}, 0x4005) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$rds(r4, 0x0, 0x24004844) openat$cgroup_ro(r7, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="040300000007009000002d"], 0x14}}, 0x0) 2.693855661s ago: executing program 6 (id=6315): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x2, 0x200000ff, 0x4, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffd}, 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, r1, 0x4, 0x0, @val=@tracing={0x0, 0x1}}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016000104fdffffff00000000ac1414bb000000000000000000000000ac1e0001000000000000000000000000000400004e200000000080203b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000102000000033000000ffffffff0000000000000000000000000400000000000000feffffffffffffff0500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000200000000000000000000000000000003000000feffffff0000000000000000900000dea146e7000800001751783d99a100fdffffff105b1cfab988c03bc415e8f49a55adf090ca8aad16"], 0xf8}}, 0x4808) 2.449442163s ago: executing program 2 (id=6320): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008a00000095"], &(0x7f0000000380)='GPL\x00'}, 0x90) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x5a033ae04d3b9307, 0x0, 0x1, 0x7f, 0x2, @random="d2d71fbd9560"}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8, 0x80010, r0, 0x64ce0000) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 2.335634908s ago: executing program 7 (id=6322): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x1f0, 0x2, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x29, 0x6, "88da997fcde00a4138c7de23bd3e53ae3d4e1c569c4a0eae80e1a14c42fa31317eed93c449"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x906a7a4787bb2089}, @NFTA_TABLE_USERDATA={0xdd, 0x6, "468e4ad71c5fbc53113b9c9b4c29d0f4daa40bb7bf5be331d5fe1cb6cf30ed6d46cb879b089463e1adf8c37fab1de9cc5ca32fdaca2f3e74ceb4ca9e115b998bd41891f90dcd5b6c3248a2ad4a339e3feb593b73478799409537563ab17d9c23fefcdb87b4c1b5022604d784db2b155185a38ad882be409d65a679d1c9881378a47ffd7bfd349c772d02dde34e4272d3e96fbd347ee749e50399ce0e56c4a5a9f5a2b081d589a6e2c92de7a21c903fb08950fa26c8e3087f9cd2b7f9bb16a21018682cf03a81c867db4bc27e51e5d8692febba49069dd67cfb"}, @NFTA_TABLE_USERDATA={0x81, 0x6, "ea09554642105d67494fe06bd455a1f2e595d6d71a8c60c44b5735b067a245a74793e7f4e22a04e38df08af644516804498636f313f8548525843c8eee3808b74602b89b76e6d311a266f0a3df809ebbe48770a4a34a543465bc1c642cdd3dde9e14d44d41e55297012df2774c444fd19c19fb98461a76d87e8576b24f"}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x2aaa55ff12486576}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) 2.209674195s ago: executing program 2 (id=6323): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x3, @mcast2}}, {{0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x8}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4, 0xc}]}}]}, 0x98}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000800850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x29, &(0x7f0000000400)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x4b}, @exit, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xacb}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1014ceb5}}, @alu={0x7, 0x0, 0xb, 0x7, 0x5, 0xfffffffffffffff8, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x3}, 0x10}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x2}, {0x0, 0xfff2}}}, 0x24}}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB=',\x00'/12, @ANYRES32, @ANYBLOB="b70b3c6c19e3ae2345c1", @ANYRES64=0x0], 0x20) r7 = socket(0x10, 0x803, 0x0) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket(0x2, 0x80000, 0x6) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400000012000100000000000000000002"], 0x54}}, 0x20004010) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 2.118972263s ago: executing program 0 (id=6324): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xffffffff) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) sendmsg$netlink(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000ac0)={0x10, 0x2a, 0x800, 0x70bd27, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x2000c040}, 0x20000000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x200040d2}, 0x4004040) close(r1) 2.022295009s ago: executing program 7 (id=6325): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="af", @ANYRESOCT=r0, @ANYRESHEX=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, 0x0, 0x3c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2, 0xdd}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='skb_copy_datagram_iovec\x00', r2}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) (async) listen(r5, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="60010000100013040000000000000000e0000001000000000000000000000000fc010000000000000000000000000000000000004e2400000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000ffffac1414bb000004d432000000ac1414000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000800000000020000000000000000000000000000000000000300000000000000cc000000000000000000000000000000f6000000000000000000000025bd7000000000000a000101000000000000000070001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001201000080"], 0x160}}, 0x0) (async) r11 = accept4$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r11, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}, {{&(0x7f0000000300)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000c00)=[{&(0x7f00000004c0)=""/215, 0xd7}, {&(0x7f00000008c0)=""/166, 0xa6}, {&(0x7f0000000240)=""/50, 0x32}, {&(0x7f00000005c0)=""/124, 0x7c}, {&(0x7f0000000a80)=""/188, 0xbc}, {&(0x7f0000000b40)=""/181, 0xb5}], 0x6, &(0x7f0000000380)=""/1, 0x1}, 0x1}, {{&(0x7f0000000c80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/36, 0x24}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000d00)=""/183, 0xb7}, 0x4}], 0x3, 0x2, 0x0) (async) r12 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r12, 0x65, 0x3, &(0x7f0000000200), 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$can_raw(r12, &(0x7f0000000340)={&(0x7f0000000180)={0x1d, r13}, 0x10, &(0x7f0000000300)={&(0x7f00000001c0)=@can={{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "43b9dfb720598c2f"}, 0x10}, 0x1, 0x0, 0x0, 0x48001}, 0x4000085) (async) recvmsg(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=""/70, 0x46}], 0x1}, 0x4c2103a0) 1.799908081s ago: executing program 0 (id=6327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x8001}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x87}]}}]}, 0x44}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a000000", 0xf, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.636651555s ago: executing program 2 (id=6328): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x7f, 0x0, 0x1}, {0x200}]}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0x598, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r1}, {0xec, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}]}}, {{0x8, 0x1, r1}, {0x254, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x1ff, 0x1, 0xc0, 0x7}, {0x8, 0xb, 0x5e, 0xa99c}, {0x8, 0x2, 0x2, 0xff}, {0x2, 0xb, 0xfc, 0x1c9b}, {0x80, 0x1, 0x2, 0x44}, {0x8, 0x1, 0x9a, 0x4b}, {0x0, 0xd, 0xb, 0x5}, {0x7, 0x23, 0x6, 0xac}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x471d}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x164, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x280d}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x70df52ab}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x632}}}]}}]}, 0x598}, 0x1, 0x0, 0x0, 0x150745523e3ea023}, 0x80) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$packet(0x11, 0x3, 0x300) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xd}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0xfff}]}, 0x48}}, 0x0) 1.561985786s ago: executing program 4 (id=6329): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x2, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.510400451s ago: executing program 6 (id=6330): r0 = socket(0x10, 0x80002, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x35, 0x7ffffc, 0x8, 0x9, 0x8000}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r3, 0x0, 0x7}, 0x18) r4 = socket(0x10, 0x3, 0x0) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) socket(0x2b, 0x2, 0x6) write$cgroup_subtree(r5, &(0x7f0000000180)={[{0x2b, 'devices'}]}, 0x9) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x54}}, 0x0) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280000001200010000000000a73f264c4e1b"], 0x28}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x78, 0x30, 0x51b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x78}}, 0x0) 1.431289582s ago: executing program 0 (id=6331): r0 = socket$inet(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000013000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000013000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0xd8, 0x170, 0xffffffff, 0xd8, 0x228, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x1, 0x3]}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) 1.302108683s ago: executing program 4 (id=6332): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @broadcast}}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r2) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r3, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x53}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8ace}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x43}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004800}, 0x2004c815) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f00000000c0)) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet6(0xa, 0x80003, 0xff) r6 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000fcb000), 0x4) getsockopt(r2, 0x111, 0x1, 0x0, &(0x7f0000000080)) socket$can_raw(0x1d, 0x3, 0x1) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x14, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000001000)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) 1.270810611s ago: executing program 6 (id=6333): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x24) 1.200441096s ago: executing program 2 (id=6334): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket(0x2, 0x800, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x1) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x14, r0, 0x1, 0x70bd27, 0x25dfd3fb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x1, 0xb, 0x0, 0x3, 0x8000000000000010, 0x8}]}, &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 1.090605112s ago: executing program 4 (id=6335): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x4, &(0x7f0000000bc0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x4, &(0x7f0000000bc0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) (async) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001b00)={@cgroup, 0xffffffffffffffff, 0x1b, 0x2020}, 0x20) socket$can_bcm(0x1d, 0x2, 0x2) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x48}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000010000000f000000080034000800030008000300", @ANYRES32=r6, @ANYBLOB="050033"], 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x80) (async) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000010000000f000000080034000800030008000300", @ANYRES32=r6, @ANYBLOB="050033"], 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x80) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9d5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 1.088416375s ago: executing program 0 (id=6336): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x13, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9c8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0xa5, &(0x7f0000000100)=""/165, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x7, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x3, 0x1}, {0x0, 0x2, 0x6, 0x3}, {0x1, 0x1, 0xd, 0x8}, {0x2, 0x4, 0x2, 0xa}]}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0xe, &(0x7f0000000380)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x5, 0x4, 0x5, 0xffffffffffffffc0, 0x10}], &(0x7f0000000400)='GPL\x00', 0x6, 0xfc, &(0x7f0000000440)=""/252, 0x41100, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x7, 0xc8a9, 0x270b}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000600)=[{0x4, 0x2, 0x3, 0xb}, {0x2, 0x2, 0x8, 0x7}, {0x4, 0x1, 0x4, 0x1}, {0x1, 0x2, 0x5, 0x2}, {0x2, 0x3, 0x6, 0xa}, {0x2, 0x1, 0x3, 0x6}], 0x10, 0x3}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={@fallback=0xffffffffffffffff, 0x34, 0x0, 0x2, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0], 0x0}, 0x40) (async) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000008c0)={0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xc, 0x1b, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x4, 0x0, 0xc, 0x5, 0x4, 0x6, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6240}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xd}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}]}, &(0x7f0000000a00)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x2, 0x1, 0x0, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)=[0x1], &(0x7f0000000ac0)=[{0x5, 0x5, 0x2, 0x6}, {0x3, 0x2, 0x5, 0x3}, {0x2, 0x2, 0xe2b0, 0x9}, {0x5, 0x1, 0x0, 0xc}, {0x2, 0x4, 0x3, 0x5}, {0x4, 0x5, 0xd, 0x1}, {0x2, 0x3, 0xf, 0x6}, {0x4, 0x2, 0x4, 0x1}]}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)={@fallback=r4, r0, 0x2b, 0x1, r1, @void, @value=r5, @void, @void, r3}, 0x20) ioctl$BTRFS_IOC_BALANCE(r5, 0x5000940c, 0x0) (async, rerun: 64) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000c00)='dummy0\x00') (rerun: 64) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000c40)={r2}, 0x8) sendmsg$nl_route_sched(r6, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)=@getchain={0x34, 0x66, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0xc, 0xfff3}, {0x5, 0x6}}, [{0x8}, {0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4000001) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000dc0), r2) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000f40)={'gre0\x00', &(0x7f0000000e00)={'ip_vti0\x00', 0x0, 0x8, 0x1, 0xffffff33, 0x101, {{0x3a, 0x4, 0x0, 0x3, 0xe8, 0x66, 0x0, 0x9, 0x29, 0x0, @empty, @broadcast, {[@timestamp_addr={0x44, 0x4c, 0x6b, 0x1, 0x9, [{@local, 0x5}, {@broadcast, 0x333e}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x5}, {@broadcast, 0x8}, {@empty, 0x7ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x1}, {@local, 0x1b}]}, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x23, 0x27, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x30}, @local, @private=0xa010102, @multicast2, @loopback, @broadcast]}, @timestamp_prespec={0x44, 0xc, 0x78, 0x3, 0x2, [{@local, 0xa}]}, @noop, @noop, @ssrr={0x89, 0x13, 0xa6, [@local, @loopback, @empty, @empty]}, @lsrr={0x83, 0x23, 0x71, [@broadcast, @empty, @multicast1, @local, @private=0xa010101, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @lsrr={0x83, 0x1b, 0x11, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @empty]}]}}}}}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000f80)={'batadv_slave_0\x00', 0x0}) (rerun: 64) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000001100)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000010c0)={&(0x7f0000000fc0)={0xec, r7, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_PAUSE_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x4}]}, 0xec}, 0x1, 0x0, 0x0, 0x5}, 0x10) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000001140)='ns/cgroup\x00') (async) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000001180)=[{0x9, 0x0, {0x1, 0xf0}, {0x0, 0x0, 0x1}, 0xfb}], 0x20) ioctl$FIBMAP(r10, 0x1, &(0x7f00000011c0)=0x1ff) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r11, &(0x7f0000001200)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000001240)={'wg1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001280)={0xffffffffffffffff, r13, 0x25, 0x14, @void}, 0x10) (async, rerun: 64) r14 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001300), r6) sendmsg$ETHTOOL_MSG_WOL_SET(r14, &(0x7f00000014c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001480)={&(0x7f0000001340)={0x10c, r15, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_WOL_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_WOL_MODES={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3ff}]}, @ETHTOOL_A_WOL_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40}, 0x40) (async) r16 = accept$netrom(r2, &(0x7f0000001500)={{0x3, @rose}, [@default, @null, @remote, @default, @default, @null, @remote, @bcast]}, &(0x7f0000001580)=0x48) ioctl$sock_netrom_SIOCDELRT(r16, 0x890c, &(0x7f00000015c0)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x1, 'syz1\x00', @default, 0x9, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}) (async) ioctl$TUNGETVNETBE(r12, 0x800454df, &(0x7f0000001640)=0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001780)={@map=r6, 0x6, 0x0, 0xc, &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001740)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001840)={0x0, @in6={{0xa, 0x4e20, 0x2, @local, 0x3}}, 0x3, 0x0, 0xf, 0x6dc8, 0x17c, 0xd9f}, 0x9c) 1.034006498s ago: executing program 6 (id=6337): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}]}, 0x38}}, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x12}]}, 0x38}}, 0x0) 956.933618ms ago: executing program 7 (id=6338): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_stats}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) socket(0x9, 0x8080f, 0x3784) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0x1000, 0x800, 0x80000000, 0x3}, 0x20) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRESOCT=r0, @ANYRES8=r3], 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x80c4) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000002c0)=[{{0x1, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x8) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) 769.873612ms ago: executing program 6 (id=6339): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) syz_emit_ethernet(0xc8, &(0x7f0000000500)={@local, @broadcast, @void, {@x25={0x805, {0x2, 0x3, 0x1f, "8069d53c265ff06915bd40ece00d1291b29419900584e760060f1aeba954f3088dd2cdf1427fa22a49d7641e82f4cbeb3649777b8eb23ee4248056574e050d5445d063b51667c66742ae0c804bc75f7965731ecc6951bbad154315b0cf03640f978a21b518fc53f68f86fa8c9b47e9b1d6d564f3519915f6e0d291195fbeebed1106e8c3e3063e2500dd3b8b21a55467f3143fc36036601d1d196901f653b22207d8238a5565a4d334629d3278b55aea21b56468c0e7c1"}}}}, &(0x7f0000000100)={0x0, 0x2, [0x9c0, 0x3d2, 0xd6d, 0x288]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x20, 0x0, &(0x7f0000000180)="b90103606908068c3c270040e700009e0ff008001ffff2e1ffff8100632f0806", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000400)=0xff, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040)=0x8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006b113600000000008510000002000000850000000500000095000000000000009500a50500000000719837a62ecba6b4aca926e6c8a1e509afe04e27090b613f59968cc4b88b4ecb814f46ebe3d5e393478f148c05cb001274b4a292d599"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800090300000000000000000a808000fd00c8030000000008000400", @ANYRES32=r3, @ANYBLOB="0600150003000000100016"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x10004044) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x7, 0x1, 0x2, 0x10}, @jmp={0x5, 0x0, 0x6, 0x6, 0x50f08844df1a48ae, 0xffffffffffffffce, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f00000001c0)='GPL\x00', 0xdb, 0xda, &(0x7f0000000600)=""/218, 0x41000, 0x28, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000380)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x10, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000700)=[{0x4, 0x4, 0x10}, {0x3, 0x2, 0xe, 0xa}, {0x0, 0x2, 0x7, 0xa}, {0x1, 0x1, 0xe, 0xb}, {0x3, 0x4, 0x8}], 0x10, 0xffff}, 0x94) 604.345324ms ago: executing program 4 (id=6340): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x12) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) splice(0xffffffffffffffff, 0x0, r0, &(0x7f00000087c0)=0x101, 0x6f96e1cf, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x1a, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc1, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffffffff, 0x7}]}}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000300)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x10, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x80000000, 0xfbc}, @nop, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x1, 0x8a}, @exp_fastopen={0xfe, 0x13, 0xf989, "444e38caa511b9096239c28c183b3f"}, @exp_fastopen={0xfe, 0x9, 0xf989, "00fcc69177"}, @md5sig={0x13, 0x12, "0c39e122bd2f7556512830127a3fa7b7"}]}}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x100000000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(0x3) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 603.155885ms ago: executing program 0 (id=6341): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x0, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr, @rand_addr=0x64010102}}}}) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f00000002c0)=0x5f53, 0x4) getsockopt$inet6_tcp_int(r2, 0x6, 0x2, 0x0, &(0x7f0000000340)) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x8}}]}]}, 0xb}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'gretap0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 583.154666ms ago: executing program 2 (id=6342): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140ffffffff0c00018008000140c0ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) connect$netrom(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0xa4, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x34}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}]}]}, 0xa4}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0501ffffffff0a0000002e00000008000300", @ANYRES32=r10, @ANYBLOB="0a00340002020202020200fe130049"], 0x3c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4004050) readv(r7, &(0x7f0000000140)=[{&(0x7f0000000300)=""/162, 0xa2}], 0x1) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e21, 0x1000, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x9}}, 0x0, 0x0, 0x36, 0x0, "11d7424acd4c77af51f762a777906b01da33f98dcc2f2b572007b6b98713c54c540ffc3dd7613495ca1ad8a90b3eecc385e9e191b0d6d8e18c9e86a84348c860ef0cd070a8b35a86e716bc33de159e43"}, 0xd8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x1a}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = accept$inet6(r7, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000440)=0x1c) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r11, 0x84, 0xc, &(0x7f0000000580), &(0x7f00000005c0)=0x4) 582.45989ms ago: executing program 7 (id=6343): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fcdbdf2502000000", @ANYRES32=r1, @ANYRES16=r0, @ANYRES16=r0], 0x2c}, 0x1, 0x0, 0x0, 0x48080}, 0x20008000) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a40)={'veth0_macvtap\x00', &(0x7f0000000a80)=@ethtool_cmd={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000150a01020000000000000000000000000800034000000002d32c0b72fc58"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$qrtr(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000003c0)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x2) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={r8, 0x6}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000140)={r8, 0x6}, &(0x7f0000000180)=0x8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000200)=ANY=[@ANYRES16], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', r2, 0x4, 0x1, 0x5, 0x3, 0x25, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x8, 0x3, 0x8}}) r11 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0x0, r10, 0x32, r11}, 0x10) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r12, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) 463.240338ms ago: executing program 4 (id=6344): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4900a55449000010000d0428bd7000fcdbff2500", @ANYRES32=0x0, @ANYRES16], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f00000001c0), 0x4) (async) setsockopt$inet_int(r1, 0x0, 0x1, &(0x7f0000000000)=0xff, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) (async) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r2, 0x7) (async) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r6, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x24}}, 0x0) (async) r9 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 322.036188ms ago: executing program 6 (id=6345): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'geneve1\x00', 0x4000}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r4, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.freeze\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f000701ddffffff00000000037c00001800378013000300717472283414d6bb"], 0x2c}}, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000380)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000600)) write$tcp_mem(r7, &(0x7f0000000140)={0x5, 0x20, 0x6, 0x20, 0xe4bb}, 0x48) write$cgroup_subtree(r7, &(0x7f00000002c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) write$tcp_mem(r2, &(0x7f00000003c0)={0x2, 0x20, 0xfffffffffffffffe, 0x20, 0x8}, 0x48) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$packet(0x11, 0x3, 0x300) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x1, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) 278.791347ms ago: executing program 7 (id=6346): syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd30800180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60020002907800000503006700"], 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000100), 0x4) socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e24, 0x3, @loopback, 0x8}, {0xa, 0x4e22, 0x7, @loopback, 0x4}, 0x0, {[0xa539, 0x7fffffff, 0x692, 0x7, 0x58d2, 0x6, 0x2, 0xf327]}}, 0x5c) 164.962687ms ago: executing program 2 (id=6347): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000006c0)={0x0, 0xfffffffffffffe64, &(0x7f00000002c0)={&(0x7f0000000000)={0x28, r2, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x7c}, @void, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x40000) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @multicast1}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x58, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'gretap0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x700, 0x80, 0xffff4864, 0x1, {{0x9, 0x4, 0x3, 0x8, 0x24, 0x64, 0x0, 0x7, 0x2f, 0x0, @multicast1, @broadcast, {[@ssrr={0x89, 0xf, 0xb4, [@rand_addr=0x64810102, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x29, 0xd2, 0x3, 0x5, 0xa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7ae, 0x16, 0x15147419, 0x1}}) sendmsg$ETHTOOL_MSG_EEE_GET(r7, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x6c, r8, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x6000000}, 0x4000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r6, 0x1, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x28}}, 0x1) r12 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000640)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000680)={r5, r12, 0x26, 0x0, @void}, 0x10) 114.767064ms ago: executing program 4 (id=6348): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0xa, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x8, 0x7, 0x5, 0x7, {{0x2e, 0x4, 0x0, 0x4, 0xb8, 0x66, 0x0, 0x6, 0x2f, 0x0, @remote, @broadcast, {[@rr={0x7, 0x13, 0xec, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010101, @rand_addr=0x64010100]}, @ssrr={0x89, 0x1f, 0xe9, [@multicast2, @local, @dev={0xac, 0x14, 0x14, 0x20}, @multicast1, @broadcast, @local, @loopback]}, @cipso={0x86, 0x51, 0x3, [{0x5, 0x9, "276b25d1cde86f"}, {0x5, 0x6, "21a1e221"}, {0x1, 0x11, "6311835f728300a2200334ac73002a"}, {0x0, 0x4, "0887"}, {0x0, 0x5, "16c918"}, {0x2, 0x4, "98b7"}, {0x2, 0xf, "54b06fd7f773a978ec75b063ac"}, {0xf53b79fe7d193900, 0xf, "4cfe980417e208ffb055bcb9e5"}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0x5, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x10}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x7, 0xd4, [@broadcast]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@bridge_delneigh={0x70, 0x1d, 0x300, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x0, r1, 0x40, 0x20, 0x9}, [@NDA_DST_IPV4={0x8, 0x1, @empty}, @NDA_DST_IPV6={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NDA_SRC_VNI={0x8}, @NDA_DST_MAC={0xa, 0x1, @multicast}, @NDA_MASTER={0x8, 0x9, 0x3508}, @NDA_PROTOCOL={0x5, 0xc, 0x1}, @NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}}]}, 0x70}, 0x1, 0x0, 0x0, 0xc845}, 0x0) (async, rerun: 64) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (rerun: 64) 57.802634ms ago: executing program 0 (id=6349): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000300), 0x10) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES64, @ANYRESDEC], 0x48}}, 0xc010) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000002c0)={0xe0, 0x11, 0x509, 0x0, 0x0, "", [@generic="113c2d9b38402aff6ec2f31166d97833f0f8ac30073eff5aaa90ef4e67d4d71828ded4e460d643d5fe600b15cafc4e6367740fd939728fe10c222557a0e48cc54ad5fdfc9d96eab83adb23e6ea0e30003b415709fe9e9350a9b902a2fb292a57b89faa24ff367c2ce45b80daa96489871ba8845ef4d57736723c2ec516cbbcde6afb99d265f81bc4e9", @generic="1847a803d02973685ab61f218a66b934b7160571e984e5f5d6ad7eff4305326d0affb35c79b457adbe3f0bf08fc949402f059090cf6bf0007718a6968a12e721a9f1fa73"]}, 0xe0}], 0x1}, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2002b08030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0x11a) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000000)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000600)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000740)=0xe8) r5 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000e00)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000000780)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r11 = syz_open_procfs$namespace(r8, &(0x7f0000001780)='ns/ipc\x00') r12 = getpid() sendmmsg$unix(r7, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r8, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r8, 0x0, r10}}}, @cred={{0x1c, 0x1, 0x2, {r12, r9}}}, @rights={{0x18, 0x1, 0x1, [r11, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) r14 = socket$netlink(0x10, 0x3, 0xe) r15 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r15, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)={0x28, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x5, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x28}], 0x1}, 0x0) r16 = gettid() r17 = socket$phonet(0x23, 0x2, 0x1) r18 = socket$netlink(0x10, 0x3, 0xc) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000002840)={0x0, 0x0}, &(0x7f0000002880)=0xc) sendmsg$netlink(r18, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000980)={0x10, 0x32, 0x4, 0x70bd25, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {0x0, r19}}}], 0x20, 0x50}, 0x40880) r20 = getgid() sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x10000000}, 0xc, &(0x7f0000000200)=[{&(0x7f00000008c0)={0x510, 0x22, 0x300, 0x0, 0x25dfdbfb, "", [@generic="8227b4ae41453f230a7a6c44e47bd5ba443abd4d2988da4ffa1819966eda5e010e55c7c75f5fc2528dbc46329562", @typed={0x8, 0x88, 0x0, 0x0, @pid}, @nested={0x100, 0xb, 0x0, 0x1, [@typed={0x8, 0x40, 0x0, 0x0, @fd}, @typed={0xc, 0xf6, 0x0, 0x0, @u64}, @typed={0x8, 0xe3, 0x0, 0x0, @uid}, @nested={0x4, 0x7}, @typed={0xd4, 0x132, 0x0, 0x0, @binary="de919c1bd46100f717b2c0036ab3d4f4877b65b9e32b42a66eb885e9885cfdae8419116b4cb505319fd0021477701811914423cb64e494ac92c15cefd5841f7df24260ef9f451b0220a5a7ca957552bdb41c82f9a999d73cf0b8b4a52b2c47073e21224c22e8760dd3fa14d2efbf26ca6938bb4e68acb367b09f11d8e73d006b6351e3818869c791f0ea85488bcfcf14988cd50fb0d273138fc6014368883459796539b0d281ba87a155d01cca159ccc90e1e9705c57fd3a0d2ecd9280f0aef940c6448987f90ea33eba1ff5bdb3a020"}, @nested={0x4, 0x68}, @nested={0x4, 0x122}]}, @nested={0x1c9, 0x20, 0x0, 0x1, [@generic="5893d2dbd3a9eb0b887ac4dce530bcc05f28c3638f14f7c990ff8940ea80c9ebd333a9", @typed={0x8, 0x25, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3c}}, @nested={0x4, 0xc0}, @generic="b0f5e227c903aef64742241aefd697cdcb53b71511ffbdfa3bae016576a983bc481c5d9799ae978ca7805840efe6e86056b9bd4aaa1996a1fa18672bb29ad03e79148d00db1912935e05667ccc23bbbba2004ca70e6b2b793dd83765ea6e96bf4610ad86af2c4cfda5c5f9d1a939f5ad75d44d566eb8d0e543d8b1bbfede791198293631da360333796ca306d28c7d4bd19bc0da3f2dc7d51df9884ca9bf42a298ed3fa4ec796c62783f439916c770c2f0bb042d2f365a52bc7657dde5d9489ae57a6095ca0519a78fc6353c5b825601ab647588f3ce3bb374b80d0d05b6bfb8e81b4cc3111ec5e9ee675180c2", @typed={0x8, 0xb4, 0x0, 0x0, @u32=0x80000001}, @generic="c5041248ca96d0e65c1720bc2f70ba9b924f723a04872cba2df52b3ef88e67ac5cefd2e972ffb512ed6f04d02a7e7843c382167ac4f03dfa600642c94ce397e470cb28975f1ec740cb1b7ca322b2e2cfbe385964bfaebf251f625552514339aee5603c4754862d9ae27f01fb60c054746393a72f490489ee5d7a9ffdd681fdec97f79a78572edeb83dec83abbe04447ad0e5849a86e96be3187d7cee108de9ae22"]}, @nested={0xd7, 0x1d, 0x0, 0x1, [@generic="54bfed80f13e4087019ffcca3c56f5b5ffb1f0e1f4124673a8fa76152ac664d0f1210354b5bd94c7bc4b314f4171a9ff0feddcdef22fd803cab957dfb9d1a4c051218f35b6dfed09b176127c64aee9", @nested={0x4, 0x11b}, @typed={0x4, 0xd1}, @generic="4215572c586bc1488be3f158bb53ef58f7abe62fbc693bea884597f7d019460b358c34317f70da89608e848715f1d88907ad536770ef93fd1951ee9155321063d7b1e5025c13b6f6014a3a512be91f0e8c65fa713b044fc2dc9b47f6ab7e1c0970d1fa2c55c7d5ac0a469e6a86e636d8b7a9e1a1b30ff829f61f699f"]}, @nested={0x6d, 0x64, 0x0, 0x1, [@nested={0x4, 0x9}, @generic, @generic="31fe6c693f6e39d567e8ab727ca1bc9246eb10eac0f74d719f89ac646dd09634baa5ce4551210c0e3e60f83e06f5557dc0", @typed={0x31, 0xd9, 0x0, 0x0, @binary="d6c3fad77a7c82c20c5cefccf875913abd830775fa7804d12238033869db18b90eb5ae6b9e9bc924a4ec1df348"}]}, @generic="8a754b66c6e0b89e4bfb931e350099f0f60e7a0bd874446ef84e81532a52d9c659a61da3f206f269ff4511aeeeb4585467ef07f17a4f0cbf9b3107bf7a593072aac1c6ecabf627242006e43f7124f6767849ba51cb6b7b37e4e43bba61af4ca017202af75fccf2e875f04605d00c118867b76a7d1b4882d27801d2d738f5119c0cc2d05dcc3d916235804d6c3f67d39fe79be3e27a154a3710e234bbbd13b00067c9ffc2ad39fa8fdbbc802baaf0c18b0ec042f43908"]}, 0x510}, {&(0x7f00000003c0)={0x128, 0x22, 0x100, 0x70bd29, 0x25dfdbfb, "", [@generic="92212f8902564b54fb516397148f48ca50273e7546b5817aa4cdec74592e1edbc9a9efa9c1b11244c49ab917e357189e37cdfd9bb4152673d5a69aa83889b8ad38d8721065d99cbaaf6559c4a91805bf19deb7090940e377d0b89a08a1ef751d623706f6ac98a2b0b92780d9939bcf4fda98c0e8f387236610dc422fc14d547d8bc82dca54154e31cc3912497651abf44e1f2643a74743713066362cec012468e6cbcf655e91989e5890f485c89b", @generic="95cff08ae3a2f13ed233357e2293be4837436d8aa125cbd1baf16ee010bc721531f698595ba6ace6e509337e3326e5a2912c35f18e2b11f4f71aabe3ea38d734b3c5a56edb4546f500d4be8fb0e4833fe037d1832b88755b43110d3feef7f23cb55360876ebf8a"]}, 0x128}], 0x2, &(0x7f0000000f00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r10}}}, @rights={{0x38, 0x1, 0x1, [r0, r0, r13, r1, r0, r2, r1, r0, r14, r15]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r16, r19, r20}}}], 0x128, 0x4000}, 0x8) 0s ago: executing program 7 (id=6350): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000ee", @ANYRES16=0x0, @ANYBLOB="020029bd7000ffdbdf250600000008001700", @ANYRES32=r7, @ANYBLOB="05000400970000000500130007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000011) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x2, 0x0, 0x25dfdc02, {0x0, 0x0, 0x0, r8, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x8800) kernel console output (not intermixed with test programs): 3.868980][T22759] netlink: 'syz.5.4572': attribute type 27 has an invalid length. [ 634.004370][T22769] __nla_validate_parse: 9 callbacks suppressed [ 634.004392][T22769] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4574'. [ 634.014742][T22770] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4575'. [ 634.083789][T22770] netlink: 'syz.2.4575': attribute type 5 has an invalid length. [ 634.093789][T22770] team0: No ports can be present during mode change [ 634.114904][T22769] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4574'. [ 634.290657][T22780] ip6t_REJECT: ECHOREPLY is not supported [ 634.702572][T22802] x_tables: unsorted entry at hook 1 [ 634.961044][T22818] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4590'. [ 635.081086][T22824] gre1: entered promiscuous mode [ 635.086120][T22824] gre1: entered allmulticast mode [ 635.095082][T22828] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4590'. [ 635.223882][T22836] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4593'. [ 635.258132][T22836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.413729][T22836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.852032][T22868] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4598'. [ 635.878925][T22868] xt_bpf: check failed: parse error [ 636.007663][ T7526] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.048076][ T7526] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.087945][T22879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4603'. [ 636.317622][T22888] sctp: [Deprecated]: syz.4.4605 (pid 22888) Use of int in max_burst socket option. [ 636.317622][T22888] Use struct sctp_assoc_value instead [ 636.602675][T22904] netlink: 'syz.0.4607': attribute type 1 has an invalid length. [ 636.991413][T22920] netlink: 210896 bytes leftover after parsing attributes in process `syz.5.4608'. [ 637.011149][T22900] wireguard0: entered promiscuous mode [ 637.016831][T22900] wireguard0: entered allmulticast mode [ 637.024393][T22920] netlink: 210896 bytes leftover after parsing attributes in process `syz.5.4608'. [ 637.038285][T22900] team0: Port device wireguard0 added [ 637.389843][T22936] netlink: 'syz.0.4615': attribute type 10 has an invalid length. [ 637.451230][T22936] batman_adv: batadv0: Adding interface: netdevsim0 [ 637.468036][T22936] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.514440][T22936] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 637.589074][T22942] netlink: 'syz.5.4616': attribute type 3 has an invalid length. [ 637.930049][T22965] tipc: Enabled bearer , priority 0 [ 637.943730][T22965] syzkaller0: entered promiscuous mode [ 637.958872][T22965] syzkaller0: entered allmulticast mode [ 638.087836][T22980] tipc: Resetting bearer [ 638.123213][T22963] tipc: Resetting bearer [ 638.171356][T22963] tipc: Disabling bearer [ 639.127237][T23023] Cannot find add_set index 0 as target [ 639.254946][T23033] __nla_validate_parse: 3 callbacks suppressed [ 639.254966][T23033] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4638'. [ 639.484392][T23049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4639'. [ 640.215359][T23080] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4649'. [ 640.234866][T23080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 640.607288][T23091] syzkaller1: entered promiscuous mode [ 640.636869][T23091] syzkaller1: entered allmulticast mode [ 640.833347][T23118] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4659'. [ 640.893234][T23123] netlink: 'syz.4.4660': attribute type 39 has an invalid length. [ 641.216153][T23137] syzkaller0: entered promiscuous mode [ 641.237607][T23137] syzkaller0: entered allmulticast mode [ 641.607486][T23158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4667'. [ 641.876473][T23171] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 642.091193][T23186] netlink: 'syz.1.4674': attribute type 1 has an invalid length. [ 642.119142][T23186] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4674'. [ 642.216522][T23184] xt_limit: Overflow, try lower: 271964/0 [ 642.810687][T23226] netlink: 'syz.0.4682': attribute type 3 has an invalid length. [ 643.062553][T23235] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4684'. [ 643.113069][T23246] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4688'. [ 643.152331][T23245] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.213439][T23245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4686'. [ 643.291450][T23248] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4686'. [ 643.514682][T23260] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 643.868944][T23278] block nbd1: Unsupported socket: should be TCP or UNIX. [ 643.922022][T23278] netlink: 'syz.0.4696': attribute type 1 has an invalid length. [ 643.934243][T23278] netlink: 'syz.0.4696': attribute type 2 has an invalid length. [ 643.953010][T23278] netlink: 'syz.0.4696': attribute type 2 has an invalid length. [ 644.002590][T23278] netlink: 'syz.0.4696': attribute type 2 has an invalid length. [ 644.406084][T23304] netlink: 'syz.1.4701': attribute type 1 has an invalid length. [ 644.438015][T23304] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 644.564403][T23322] __nla_validate_parse: 5 callbacks suppressed [ 644.564425][T23322] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.4705'. [ 644.629827][T23329] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4707'. [ 644.639976][T23329] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4707'. [ 644.700885][T23331] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4708'. [ 644.847683][T23344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4711'. [ 644.892068][T23337] IPv6: sit2: Disabled Multicast RS [ 645.006163][T23350] netlink: 'syz.0.4714': attribute type 3 has an invalid length. [ 645.159392][T23356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4716'. [ 645.209597][T23359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4717'. [ 645.262820][T23362] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4717'. [ 645.292821][T23356] bond9: Invalid ad_actor_system MAC address. [ 645.353924][T23356] bond9: option ad_actor_system: invalid value (1) [ 645.398099][T23356] bond9 (unregistering): Released all slaves [ 645.640659][T23371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4723'. [ 645.978408][T23389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4726'. [ 646.277355][T23410] netlink: 'syz.4.4731': attribute type 1 has an invalid length. [ 646.552201][T23429] nbd: couldn't find a device at index 0 [ 646.919038][T23452] openvswitch: netlink: Message has 4 unknown bytes. [ 647.242745][T23469] netlink: 'syz.4.4749': attribute type 32 has an invalid length. [ 647.370124][T23469] bond6: Setting coupled_control to off (0) [ 648.043641][T23506] netlink: 'syz.1.4762': attribute type 11 has an invalid length. [ 648.077203][T23506] x_tables: duplicate underflow at hook 2 [ 648.383909][T23528] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 648.420856][T23534] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 648.518788][T23538] netlink: 'syz.2.4774': attribute type 83 has an invalid length. [ 648.891784][T23559] vlan0: entered promiscuous mode [ 648.903801][T23559] bridge0: entered promiscuous mode [ 649.437470][T23601] netlink: 'syz.1.4787': attribute type 1 has an invalid length. [ 651.473690][T23615] Cannot find add_set index 65532 as target [ 651.854971][T23635] netlink: 'syz.2.4797': attribute type 2 has an invalid length. [ 651.881587][T23635] netlink: 'syz.2.4797': attribute type 29 has an invalid length. [ 651.892704][T23635] __nla_validate_parse: 13 callbacks suppressed [ 651.892735][T23635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4797'. [ 651.912030][T23637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4798'. [ 652.010511][T23641] ip6gre1: entered promiscuous mode [ 652.015892][T23641] ip6gre1: entered allmulticast mode [ 652.071731][T23639] netlink: 'syz.0.4799': attribute type 5 has an invalid length. [ 652.222741][T23657] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4801'. [ 652.240905][T23660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4803'. [ 652.253274][T23657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4801'. [ 652.310358][T23657] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4801'. [ 652.724296][T23685] netlink: 'syz.2.4812': attribute type 1 has an invalid length. [ 652.777935][T23685] netlink: 280 bytes leftover after parsing attributes in process `syz.2.4812'. [ 652.866251][T23694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4814'. [ 653.116485][T23709] IPv6: sit2: Disabled Multicast RS [ 653.141795][T23709] sit2: entered allmulticast mode [ 653.194271][T23716] netlink: 'syz.2.4820': attribute type 11 has an invalid length. [ 653.209414][T23716] netlink: 472 bytes leftover after parsing attributes in process `syz.2.4820'. [ 653.247596][T23711] bond0: (slave gre0): Error: Device type is different from other slaves [ 653.258434][T23721] netlink: 'syz.0.4819': attribute type 3 has an invalid length. [ 653.284906][T23711] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 653.516038][T23735] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4823'. [ 653.534582][T23735] ip6tnl0: Caught tx_queue_len zero misconfig [ 653.604315][T23742] netlink: 'syz.5.4826': attribute type 7 has an invalid length. [ 653.627082][T23742] netlink: 'syz.5.4826': attribute type 8 has an invalid length. [ 653.671797][T23742] erspan0: entered promiscuous mode [ 653.688939][T23742] batadv_slave_1: entered promiscuous mode [ 653.710255][T23742] batadv_slave_1: left promiscuous mode [ 653.731925][T23742] erspan0: left promiscuous mode [ 653.987972][T23762] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 654.209222][T23777] netlink: 'syz.0.4835': attribute type 10 has an invalid length. [ 654.395532][T23785] dvmrp0: entered allmulticast mode [ 655.838086][T23873] syzkaller0: entered promiscuous mode [ 655.843631][T23873] syzkaller0: entered allmulticast mode [ 655.923971][T23878] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 656.532579][T23901] netlink: 'syz.4.4871': attribute type 1 has an invalid length. [ 656.635957][T23901] 8021q: adding VLAN 0 to HW filter on device bond7 [ 656.755079][T23903] bond7: (slave veth7): Enslaving as an active interface with a down link [ 656.833159][T23904] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 656.853585][T23904] bond7: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 657.016218][T23912] xt_cluster: node mask cannot exceed total number of nodes [ 657.147667][T23915] __nla_validate_parse: 16 callbacks suppressed [ 657.147689][T23915] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4875'. [ 657.171434][T23916] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4875'. [ 657.534676][T23938] netlink: 'syz.5.4882': attribute type 11 has an invalid length. [ 657.544487][T23938] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.4882'. [ 657.608560][T23939] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.615796][T23939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.755881][T23950] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 657.805737][T23952] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4886'. [ 657.832471][T23955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 658.119768][T23974] netlink: 'syz.2.4893': attribute type 10 has an invalid length. [ 658.130859][T23974] bond0: (slave wlan1): Opening slave failed [ 658.271103][T23978] tipc: Started in network mode [ 658.276070][T23978] tipc: Node identity f24852957eca, cluster identity 4711 [ 658.307692][T23978] tipc: Enabled bearer , priority 0 [ 658.402371][T23978] syzkaller0: entered promiscuous mode [ 658.422131][T23978] syzkaller0: entered allmulticast mode [ 658.432190][T23978] tipc: Resetting bearer [ 658.457755][T23982] netem: incorrect gi model size [ 658.463277][T23982] netem: change failed [ 658.483173][T23981] netlink: 'syz.0.4896': attribute type 21 has an invalid length. [ 658.511108][T23977] tipc: Resetting bearer [ 658.536129][T23990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4896'. [ 660.350497][T23977] tipc: Disabling bearer [ 660.362129][T23981] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4896'. [ 660.388020][T23990] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 660.403249][T23990] team0: Port device batadv1 added [ 660.494563][ T5942] tipc: Node number set to 2357351061 [ 660.515313][T24002] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4902'. [ 660.574812][T24007] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4903'. [ 660.725743][T24017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4906'. [ 660.954645][T24020] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 660.962694][T24020] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 660.970814][T24020] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 660.978796][T24020] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 660.986908][T24020] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 660.994902][T24020] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 661.002990][T24020] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 661.010999][T24020] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 661.018988][T24020] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 661.026981][T24020] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 661.052224][T24027] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4909'. [ 661.527106][T24058] tipc: Enabling of bearer rejected, failed to enable media [ 661.827613][T24071] netem: change failed [ 662.159156][T24099] syzkaller0: entered promiscuous mode [ 662.171461][T24099] syzkaller0: entered allmulticast mode [ 662.191806][T24102] netlink: 'syz.0.4930': attribute type 10 has an invalid length. [ 662.245743][T24102] team0: Port device dummy0 added [ 662.263888][T24106] veth1_macvtap: left allmulticast mode [ 662.318232][T24106] syzkaller0: refused to change device tx_queue_len [ 662.474484][T24116] __nla_validate_parse: 6 callbacks suppressed [ 662.474504][T24116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4936'. [ 662.505304][T24118] gtp1: entered promiscuous mode [ 662.519081][T24118] gtp1: entered allmulticast mode [ 662.552894][T24121] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4938'. [ 662.595295][T24121] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4938'. [ 662.606979][T24121] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4938'. [ 662.862656][T24138] netlink: 'syz.5.4944': attribute type 3 has an invalid length. [ 662.881154][T24138] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4944'. [ 662.934160][T24138] bond1: option xmit_hash_policy: invalid value (64) [ 662.957636][T24138] bond1 (unregistering): Released all slaves [ 662.994831][T24145] tipc: Started in network mode [ 663.002424][T24144] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4946'. [ 663.021197][T24145] tipc: Node identity e219d2c318e8, cluster identity 4711 [ 663.037314][T24144] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 663.044581][T24144] IPv6: NLM_F_CREATE should be set when creating new route [ 663.062969][T24145] tipc: Enabled bearer , priority 0 [ 663.073922][T24138] syzkaller0: entered promiscuous mode [ 663.081136][T24138] syzkaller0: entered allmulticast mode [ 663.271513][T24138] tipc: Resetting bearer [ 663.346427][T24137] tipc: Resetting bearer [ 663.400822][T24158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4950'. [ 663.432381][T24137] tipc: Disabling bearer [ 663.461159][T24158] dummy0: left allmulticast mode [ 663.466582][T24158] bridge0: port 1(dummy0) entered disabled state [ 663.722357][T24165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4951'. [ 663.928925][T24187] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4957'. [ 663.940241][T24187] netlink: 'syz.1.4957': attribute type 9 has an invalid length. [ 664.165459][T24196] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.4961'. [ 666.998603][T24343] tc_dump_action: action bad kind [ 667.094481][T24347] netlink: 'syz.0.5000': attribute type 1 has an invalid length. [ 667.114784][T24347] netlink: 'syz.0.5000': attribute type 2 has an invalid length. [ 667.228946][T24359] netlink: 'syz.5.5002': attribute type 10 has an invalid length. [ 667.271888][T24364] geneve2: entered promiscuous mode [ 667.445647][T24359] veth0_vlan: left promiscuous mode [ 667.454958][T24359] veth0_vlan: entered promiscuous mode [ 667.473544][T24359] team0: Device veth0_vlan failed to register rx_handler [ 667.505230][T24368] gretap0: entered promiscuous mode [ 667.523743][T24368] gretap0: left promiscuous mode [ 667.780974][T24398] __nla_validate_parse: 14 callbacks suppressed [ 667.780994][T24398] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5009'. [ 667.834520][T24397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5010'. [ 667.906873][T24397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.942949][T24406] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5011'. [ 667.955256][T24397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.005453][T24397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.035032][T24397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.043323][T24408] sctp: [Deprecated]: syz.5.5012 (pid 24408) Use of int in max_burst socket option deprecated. [ 668.043323][T24408] Use struct sctp_assoc_value instead [ 668.130177][T24411] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5013'. [ 668.231742][T24414] syzkaller0: entered promiscuous mode [ 668.248493][T24414] syzkaller0: entered allmulticast mode [ 668.287426][T24411] netlink: 'syz.1.5013': attribute type 1 has an invalid length. [ 668.302378][T24411] netlink: 9188 bytes leftover after parsing attributes in process `syz.1.5013'. [ 668.491988][T24429] netlink: 'syz.2.5017': attribute type 4 has an invalid length. [ 668.534787][T24432] team0: Device ipvlan2 failed to register rx_handler [ 668.724651][T24442] af_packet: tpacket_rcv: packet too big, clamped from 4100 to 4294967272. macoff=96 [ 668.893994][T24442] syzkaller0: entered promiscuous mode [ 668.900844][T24442] syzkaller0: entered allmulticast mode [ 669.096271][T24448] ip6gre0: entered promiscuous mode [ 669.110975][T24448] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5020'. [ 669.122714][T24461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5025'. [ 669.342697][T24461] netlink: 'syz.4.5025': attribute type 1 has an invalid length. [ 669.379704][T24461] netlink: 'syz.4.5025': attribute type 2 has an invalid length. [ 669.559887][T24487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5030'. [ 669.569057][T24487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5030'. [ 671.245959][T24485] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 671.273624][T24485] bond6 (unregistering): Released all slaves [ 671.507409][T24517] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5038'. [ 671.531761][T24519] netlink: 'syz.1.5040': attribute type 11 has an invalid length. [ 672.014612][T24554] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 672.102805][T24564] vxcan2: entered allmulticast mode [ 672.642829][T24593] netlink: 'syz.1.5057': attribute type 8 has an invalid length. [ 673.149024][T24618] __nla_validate_parse: 6 callbacks suppressed [ 673.149044][T24618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5065'. [ 673.168169][T24618] netlink: 'syz.5.5065': attribute type 11 has an invalid length. [ 673.230364][T24620] netlink: 'syz.4.5067': attribute type 1 has an invalid length. [ 673.240760][T24620] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5067'. [ 673.432051][T24626] syzkaller1: entered promiscuous mode [ 673.469070][T24626] syzkaller1: entered allmulticast mode [ 673.491343][T24633] netlink: 'syz.1.5071': attribute type 21 has an invalid length. [ 673.554449][T24633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5071'. [ 673.741863][T24622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5068'. [ 673.767102][T24622] netlink: 'syz.0.5068': attribute type 18 has an invalid length. [ 673.775169][T24622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5068'. [ 674.244582][T24646] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5075'. [ 674.396269][T24649] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5076'. [ 677.043378][T24699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5089'. [ 677.053228][T24699] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5089'. [ 678.341106][T24689] net_ratelimit: 45 callbacks suppressed [ 678.341123][T24689] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 678.580210][T24711] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5093'. [ 678.702215][T24720] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.5095'. [ 678.743817][T24724] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 679.208192][T24747] netlink: 'syz.4.5102': attribute type 7 has an invalid length. [ 679.910030][T24770] tipc: Started in network mode [ 679.931632][T24770] tipc: Node identity 522dca548184, cluster identity 4711 [ 679.971233][T24770] tipc: Enabled bearer , priority 0 [ 680.010951][T24772] syzkaller0: entered promiscuous mode [ 680.047516][T24772] syzkaller0: entered allmulticast mode [ 680.128274][T24776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5109'. [ 680.282047][T24776] macvtap1: entered promiscuous mode [ 680.288139][T24776] vlan0: entered promiscuous mode [ 680.297396][T24776] macvtap1: entered allmulticast mode [ 680.306559][T24776] vlan0: entered allmulticast mode [ 680.322596][T24776] veth0_vlan: entered allmulticast mode [ 680.356444][T24770] tipc: Resetting bearer [ 680.470275][T24783] º: renamed from veth1_vlan (while UP) [ 680.724133][T24768] tipc: Resetting bearer [ 680.733702][T24791] netlink: 'syz.0.5114': attribute type 21 has an invalid length. [ 680.778547][T24791] IPv6: NLM_F_CREATE should be specified when creating new route [ 680.799234][T24768] tipc: Disabling bearer [ 680.915839][T24795] IPVS: Scheduler module ip_vs_sip not found [ 680.995512][T24797] netlink: 'syz.2.5115': attribute type 9 has an invalid length. [ 681.004019][T24797] netlink: 'syz.2.5115': attribute type 11 has an invalid length. [ 681.086862][T24797] netlink: 'syz.2.5115': attribute type 12 has an invalid length. [ 681.095530][T24797] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.5115'. [ 681.120589][T24797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5115'. [ 681.318718][T24822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5121'. [ 681.350443][T24822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5121'. [ 681.359445][T24825] netlink: 'syz.0.5121': attribute type 12 has an invalid length. [ 681.490925][T24825] bond6: option primary_reselect: invalid value (255) [ 681.502515][T24830] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 681.519031][T24828] sctp: [Deprecated]: syz.5.5122 (pid 24828) Use of int in max_burst socket option. [ 681.519031][T24828] Use struct sctp_assoc_value instead [ 681.555287][T24825] bond6 (unregistering): Released all slaves [ 681.668620][T24822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5121'. [ 681.698230][T24822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5121'. [ 681.860831][T24838] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5127'. [ 682.202273][T17557] block nbd1: Receive control failed (result -107) [ 682.221436][T24859] bridge5: entered promiscuous mode [ 682.234985][T24859] bridge5: entered allmulticast mode [ 682.243751][T24863] netlink: 'syz.5.5132': attribute type 1 has an invalid length. [ 682.278554][T24863] veth0_to_hsr: entered allmulticast mode [ 682.890101][T24903] sctp: [Deprecated]: syz.5.5143 (pid 24903) Use of int in maxseg socket option. [ 682.890101][T24903] Use struct sctp_assoc_value instead [ 683.078120][T24912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.764221][T24947] netlink: 'syz.1.5153': attribute type 7 has an invalid length. [ 685.581055][T24947] netlink: 'syz.1.5153': attribute type 7 has an invalid length. [ 685.774867][T24965] __nla_validate_parse: 6 callbacks suppressed [ 685.774887][T24965] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5160'. [ 685.811473][T24965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5160'. [ 686.008091][T24977] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5163'. [ 686.094769][T24965] hsr_slave_1 (unregistering): left promiscuous mode [ 686.142378][T24981] netlink: 'syz.2.5166': attribute type 1 has an invalid length. [ 686.282473][T24992] netlink: 'syz.4.5169': attribute type 1 has an invalid length. [ 686.314656][T24989] bond9: (slave bridge6): making interface the new active one [ 686.324991][T24989] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 686.495253][T24997] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 686.508501][T24997] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 686.533014][T25006] openvswitch: netlink: IPv4 tunnel dst address is zero [ 686.670585][T25011] netlink: 1044 bytes leftover after parsing attributes in process `syz.0.5175'. [ 686.719076][T25015] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 686.959304][T25032] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 687.360940][T25053] netlink: 'syz.0.5187': attribute type 9 has an invalid length. [ 687.401564][T25053] netlink: 'syz.0.5187': attribute type 11 has an invalid length. [ 687.442762][T25053] netlink: 'syz.0.5187': attribute type 12 has an invalid length. [ 687.458066][T25067] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5187'. [ 687.466994][T25053] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.5187'. [ 687.532594][T25053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5187'. [ 687.575981][T25070] netlink: 576 bytes leftover after parsing attributes in process `syz.5.5191'. [ 687.742610][T25079] netlink: 'syz.4.5195': attribute type 32 has an invalid length. [ 687.768340][T25079] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5195'. [ 688.312140][T25114] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5202'. [ 688.640879][ T5901] IPVS: starting estimator thread 0... [ 688.740184][T25134] IPVS: using max 28 ests per chain, 67200 per kthread [ 688.861289][T25141] netlink: 'syz.0.5210': attribute type 11 has an invalid length. [ 688.871770][T25141] netlink: 'syz.0.5210': attribute type 4 has an invalid length. [ 689.099596][T25162] mac80211_hwsim hwsim47 wlan1: Caught tx_queue_len zero misconfig [ 689.181700][T25167] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 689.410978][T25181] Cannot find set identified by id 65534 to match [ 689.587780][T25187] 8021q: adding VLAN 0 to HW filter on device bond9 [ 690.000116][T25212] netlink: 'syz.0.5234': attribute type 3 has an invalid length. [ 690.094116][T25212] bond6: option arp_validate: invalid value (18446744073223012352) [ 690.111058][T25212] bond6 (unregistering): Released all slaves [ 690.117840][T25221] netlink: 'syz.5.5236': attribute type 10 has an invalid length. [ 690.306660][T25234] Unsupported ieee802154 address type: 0 [ 690.372000][T25221] syz_tun: entered promiscuous mode [ 690.388667][T25221] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 690.450966][T25228] team0: Port device bond0 added [ 690.777355][T25253] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 691.062093][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 692.401658][T25228] bond0: (slave syz_tun): Releasing backup interface [ 692.416123][T25228] team0: Port device bond0 removed [ 692.425372][T25228] bridge_slave_0: left allmulticast mode [ 692.431936][T25228] bridge_slave_0: left promiscuous mode [ 692.438467][T25228] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.453159][T25228] bridge_slave_1: left allmulticast mode [ 692.460924][T25228] bridge_slave_1: left promiscuous mode [ 692.466906][T25228] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.483092][T25228] bond0: (slave bond_slave_0): Releasing backup interface [ 692.501808][T25228] bond0: (slave bond_slave_1): Releasing backup interface [ 692.522452][T25228] team0: Port device team_slave_0 removed [ 692.538217][T25228] team0: Port device team_slave_1 removed [ 692.545415][T25228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.553080][T25228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.562189][T25228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.570058][T25228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.579633][T25228] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 692.689297][T25265] __nla_validate_parse: 13 callbacks suppressed [ 692.689318][T25265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5247'. [ 692.801810][T25265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5247'. [ 692.835356][T25267] syzkaller0: entered promiscuous mode [ 692.849960][T25267] syzkaller0: entered allmulticast mode [ 693.254983][T25297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5256'. [ 693.297541][ T5901] page_pool_release_retry() stalled pool shutdown: id 107, 1 inflight 60 sec [ 693.465777][T25312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5259'. [ 693.533464][T25312] bridge0: port 1(batadv1) entered blocking state [ 693.549951][T25312] bridge0: port 1(batadv1) entered disabled state [ 693.559180][T25312] batadv1: entered allmulticast mode [ 693.569043][T25312] batadv1: entered promiscuous mode [ 693.628690][T25315] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 693.795471][T25324] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5263'. [ 693.818577][T25324] IPVS: set_ctl: invalid protocol: 12 224.0.0.2:0 [ 693.899507][T25327] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5264'. [ 694.038404][ T7505] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 694.048346][ T7505] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 694.299097][T25348] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5271'. [ 694.405462][T25354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5273'. [ 694.451343][T25354] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 694.462753][T25354] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5273'. [ 694.472382][T25358] netlink: 11 bytes leftover after parsing attributes in process `syz.2.5275'. [ 694.548384][T25363] validate_nla: 1 callbacks suppressed [ 694.548405][T25363] netlink: 'syz.5.5274': attribute type 10 has an invalid length. [ 694.596340][T25363] team0: Port device dummy0 added [ 694.615461][T25363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 694.684940][T25368] syzkaller0: entered promiscuous mode [ 694.690900][T25368] syzkaller0: entered allmulticast mode [ 694.734247][T25370] ip6gre1: entered promiscuous mode [ 694.741937][T25370] ip6gre1: entered allmulticast mode [ 694.754670][T24329] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 694.765509][T25370] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 694.774248][T24329] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 694.782788][T16369] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 694.849720][T16369] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 695.139306][T25386] netlink: 'syz.0.5283': attribute type 4 has an invalid length. [ 695.181622][T25392] netlink: 'syz.4.5284': attribute type 10 has an invalid length. [ 695.207990][T25392] veth0_vlan: left promiscuous mode [ 695.215412][T25392] veth0_vlan: entered promiscuous mode [ 695.225903][T25392] team0: Device veth0_vlan failed to register rx_handler [ 695.462656][ T5953] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 696.021143][T25442] SET target dimension over the limit! [ 696.155556][T25437] syzkaller0: entered promiscuous mode [ 696.207373][T25437] syzkaller0: entered allmulticast mode [ 696.338495][T25442] geneve1: Caught tx_queue_len zero misconfig [ 698.295155][T25476] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 698.631626][T25497] netlink: 'syz.5.5311': attribute type 10 has an invalid length. [ 698.642540][T25495] netlink: 'syz.0.5310': attribute type 10 has an invalid length. [ 698.672354][T25497] team0: Device veth0_macvtap failed to register rx_handler [ 698.896178][T25512] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 698.984950][T25515] __nla_validate_parse: 9 callbacks suppressed [ 698.984969][T25515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5318'. [ 699.004655][T25519] Cannot find set identified by id 3 to match [ 699.040777][T25515] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5318'. [ 699.091499][T25521] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5320'. [ 699.105435][T25521] netlink: 'syz.4.5320': attribute type 1 has an invalid length. [ 699.117408][T25523] IPv4: Oversized IP packet from 127.202.26.0 [ 699.136898][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 699.368944][T25530] syzkaller0: entered promiscuous mode [ 699.374488][T25530] syzkaller0: entered allmulticast mode [ 699.773014][T25561] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5332'. [ 699.850457][T25564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5332'. [ 700.149829][T25571] sctp: [Deprecated]: syz.2.5336 (pid 25571) Use of int in max_burst socket option. [ 700.149829][T25571] Use struct sctp_assoc_value instead [ 700.517238][T25593] netlink: 'syz.0.5343': attribute type 30 has an invalid length. [ 700.590116][T25593] tipc: Enabling of bearer rejected, failed to enable media [ 700.620362][T25603] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5344'. [ 700.784073][T25612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5347'. [ 700.794421][T25612] netlink: 'syz.4.5347': attribute type 5 has an invalid length. [ 700.802436][T25612] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5347'. [ 700.883943][T25620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5349'. [ 700.898232][T25620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5349'. [ 700.911961][T25620] netlink: 'syz.4.5349': attribute type 12 has an invalid length. [ 700.920036][T25620] netlink: 'syz.4.5349': attribute type 11 has an invalid length. [ 701.381110][T25641] tipc: Enabled bearer , priority 0 [ 701.390718][T25641] syzkaller0: entered promiscuous mode [ 701.396248][T25641] syzkaller0: entered allmulticast mode [ 701.422602][T25641] tipc: Resetting bearer [ 701.494245][T25641] macvtap2: entered promiscuous mode [ 701.499784][T25641] vlan0: entered promiscuous mode [ 701.505249][T25641] macvtap2: entered allmulticast mode [ 701.511383][T25641] vlan0: entered allmulticast mode [ 701.516981][T25641] veth0_vlan: entered allmulticast mode [ 701.533960][T25640] tipc: Resetting bearer [ 701.579201][T25640] tipc: Disabling bearer [ 701.855027][T25662] netlink: 'syz.0.5361': attribute type 1 has an invalid length. [ 701.902563][T25662] bond6 (unregistering): Released all slaves [ 701.944228][T25664] ip6tnl2: entered promiscuous mode [ 701.949738][T25664] ip6tnl2: entered allmulticast mode [ 702.133374][T25679] netlink: 'syz.0.5366': attribute type 10 has an invalid length. [ 702.272092][T25686] netlink: 'syz.4.5369': attribute type 1 has an invalid length. [ 702.493905][T25699] syzkaller1: entered promiscuous mode [ 702.505030][T25699] syzkaller1: entered allmulticast mode [ 702.803408][T25715] syzkaller0: entered promiscuous mode [ 702.809196][T25715] syzkaller0: entered allmulticast mode [ 706.022968][T25735] __nla_validate_parse: 11 callbacks suppressed [ 706.022988][T25735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5382'. [ 706.039014][T25735] bridge_slave_0: left allmulticast mode [ 706.044723][T25735] bridge_slave_0: left promiscuous mode [ 706.051063][T25735] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.113590][T25741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5384'. [ 706.151974][T25742] netlink: 'syz.2.5384': attribute type 4 has an invalid length. [ 706.613668][T25769] nbd: must specify an index to disconnect [ 706.935905][T25775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5391'. [ 706.953490][T25775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5391'. [ 706.993731][T25775] hsr_slave_0: left promiscuous mode [ 707.014141][T25775] hsr_slave_1: left promiscuous mode [ 707.075563][T25780] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5393'. [ 707.162849][T25782] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5394'. [ 707.175311][T25782] gretap0: entered promiscuous mode [ 707.205166][T25782] gretap0: left promiscuous mode [ 707.241774][T25782] 8021q: adding VLAN 0 to HW filter on device ` [ 707.250964][T25782] 8021q: adding VLAN 0 to HW filter on device team0 [ 707.261197][T25782] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 708.337198][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 722.062837][ T7510] bond1 (unregistering): (slave gretap1): Releasing active interface [ 722.109406][ T7510] dvmrp0 (unregistering): left allmulticast mode [ 722.161738][ T7510] geneve0 (unregistering): left promiscuous mode [ 722.171981][ T7510] team0: Port device geneve0 removed [ 722.729257][ T7510] bond0 (unregistering): Released all slaves [ 722.756189][ T7510] bond1 (unregistering): Released all slaves [ 722.782615][ T7510] bond2 (unregistering): Released all slaves [ 722.936219][ T7510] bond3 (unregistering): Released all slaves [ 723.052636][ T7510] bond4 (unregistering): Released all slaves [ 723.176070][ T7510] bond5 (unregistering): (slave veth5): Releasing active interface [ 723.186876][ T7510] bond5 (unregistering): Released all slaves [ 723.203356][ T7510] bond6 (unregistering): Released all slaves [ 723.217840][ T7510] bond7 (unregistering): Released all slaves [ 724.670675][ T7510] : left promiscuous mode [ 724.728243][ T7510] tipc: Disabling bearer [ 724.741756][ T7510] tipc: Left network mode [ 726.176533][ T7510] IPVS: stop unused estimator thread 0... [ 726.897426][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 747.379648][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 752.501174][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 753.617246][T16350] page_pool_release_retry() stalled pool shutdown: id 107, 1 inflight 120 sec [ 762.097117][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 779.269277][T25795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5399'. [ 779.437541][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 779.450436][ T5839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 779.459994][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 779.469249][ T5839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 779.478283][ T5839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 779.515182][T17557] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 779.526510][T17557] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 779.534110][T17557] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 779.542754][T17557] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 779.555332][T25807] netlink: 'syz.0.5402': attribute type 2 has an invalid length. [ 779.569539][T17557] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 779.597863][T21952] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 779.608190][T21952] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 779.620884][T21952] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 779.635655][T21952] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 779.643519][T21952] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 779.652624][T25807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5402'. [ 779.817594][T25814] syzkaller0: entered promiscuous mode [ 779.843764][T25814] syzkaller0: entered allmulticast mode [ 779.989544][T25814] tipc: Enabled bearer , priority 0 [ 780.011724][T25814] tipc: Resetting bearer [ 780.028929][T25825] x_tables: duplicate underflow at hook 1 [ 780.092239][T25813] tipc: Resetting bearer [ 780.144685][T25813] tipc: Disabling bearer [ 780.250446][T25831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5408'. [ 780.591544][T25843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5412'. [ 780.613617][T25842] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5413'. [ 780.750448][T25798] chnl_net:caif_netlink_parms(): no params data found [ 780.894321][T25857] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5416'. [ 781.189662][T25798] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.197382][T25798] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.204798][T25798] bridge_slave_0: entered allmulticast mode [ 781.214237][T25798] bridge_slave_0: entered promiscuous mode [ 781.224420][T25798] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.234754][T25798] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.242530][T25798] bridge_slave_1: entered allmulticast mode [ 781.251091][T25798] bridge_slave_1: entered promiscuous mode [ 781.320773][T25798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 781.344754][T25798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.508049][T25798] team0: Port device team_slave_0 added [ 781.549550][T25798] team0: Port device team_slave_1 added [ 781.617287][ T5839] Bluetooth: hci6: command tx timeout [ 781.691468][T25798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.701507][ T5839] Bluetooth: hci7: command tx timeout [ 781.719511][T25798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.756850][T25798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.780067][T25808] chnl_net:caif_netlink_parms(): no params data found [ 781.804210][T25798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.827093][T25798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.867332][T25798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.115516][T25916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5429'. [ 782.198135][T25798] hsr_slave_0: entered promiscuous mode [ 782.204794][T25798] hsr_slave_1: entered promiscuous mode [ 782.219241][T25798] debugfs: 'hsr0' already exists in 'hsr' [ 782.225035][T25798] Cannot create hsr debugfs directory [ 782.327831][T25925] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 782.367110][T25808] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.382578][T25808] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.383683][T25927] netlink: 7060 bytes leftover after parsing attributes in process `syz.0.5432'. [ 782.400793][T25808] bridge_slave_0: entered allmulticast mode [ 782.408618][T25808] bridge_slave_0: entered promiscuous mode [ 782.481226][T25808] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.509101][T25808] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.516489][T25808] bridge_slave_1: entered allmulticast mode [ 782.540704][T25808] bridge_slave_1: entered promiscuous mode [ 782.575745][T25937] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5434'. [ 782.748925][T25808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.779680][T25808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.924648][T25808] team0: Port device team_slave_0 added [ 782.939577][T25808] team0: Port device team_slave_1 added [ 783.133873][T25808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.141402][T25808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.168967][T25808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.260332][T25808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.267792][T25808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.296424][T25808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.417477][T25973] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5443'. [ 783.524790][T25974] block nbd2: Unsupported socket: should be TCP or UNIX. [ 783.698404][ T5839] Bluetooth: hci6: command tx timeout [ 783.777806][ T5839] Bluetooth: hci7: command tx timeout [ 783.816352][T25808] hsr_slave_0: entered promiscuous mode [ 783.823934][T25808] hsr_slave_1: entered promiscuous mode [ 783.834415][T25808] debugfs: 'hsr0' already exists in 'hsr' [ 783.840753][T25808] Cannot create hsr debugfs directory [ 784.003003][T25798] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 784.075776][T25798] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 784.112739][T25798] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 784.162629][T25798] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 784.851441][T26032] netlink: 'syz.0.5446': attribute type 16 has an invalid length. [ 784.878433][T25808] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 784.899199][T26032] netlink: 'syz.0.5446': attribute type 17 has an invalid length. [ 784.916382][T25798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.940309][T25808] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 784.954642][T25808] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 785.046357][T26032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 785.080318][T25808] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 785.181238][T25798] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.236209][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.243485][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.270320][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.277594][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.398434][T26049] Cannot find map_set index 0 as target [ 785.622975][T25808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.654873][T26059] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 785.671467][T26059] netlink: 'syz.4.5461': attribute type 2 has an invalid length. [ 785.692304][T25808] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.743066][ T7522] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.750403][ T7522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.777226][ T5839] Bluetooth: hci6: command tx timeout [ 785.804024][ T7531] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.811301][ T7531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.853637][T26065] IPVS: Unknown mcast interface: lo [ 785.862925][ T5839] Bluetooth: hci7: command tx timeout [ 786.048918][T25798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.454618][T25808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.471205][T26085] __nla_validate_parse: 2 callbacks suppressed [ 786.471225][T26085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5465'. [ 786.491960][T26086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5465'. [ 786.503253][T26085] netlink: 'syz.4.5465': attribute type 1 has an invalid length. [ 786.549104][T26085] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5465'. [ 786.590576][T26090] x_tables: duplicate underflow at hook 1 [ 786.805790][T26099] netlink: 'syz.4.5468': attribute type 6 has an invalid length. [ 786.859029][T25798] veth0_vlan: entered promiscuous mode [ 786.866023][T26101] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5469'. [ 786.892845][T26101] netlink: 'syz.2.5469': attribute type 7 has an invalid length. [ 786.907253][T25798] veth1_vlan: entered promiscuous mode [ 786.916096][T26101] netlink: 'syz.2.5469': attribute type 8 has an invalid length. [ 786.937227][T26101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5469'. [ 787.027147][T13009] tipc: Subscription rejected, illegal request [ 787.034352][T25798] veth0_macvtap: entered promiscuous mode [ 787.078384][T25798] veth1_macvtap: entered promiscuous mode [ 787.134911][T25798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.184218][T25798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 787.217916][T26109] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 787.263068][ T3562] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.274957][ T3562] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.304147][T26113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 787.342649][ T3562] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.359679][ T3562] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.395763][T25808] veth0_vlan: entered promiscuous mode [ 787.449915][T25808] veth1_vlan: entered promiscuous mode [ 787.641642][T25808] veth0_macvtap: entered promiscuous mode [ 787.650842][ T7522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.677526][ T7522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.703662][T25808] veth1_macvtap: entered promiscuous mode [ 787.759884][ T7527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.789340][ T7527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.798157][T25808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.824788][T25808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 787.852898][T26137] openvswitch: netlink: Tunnel attr 44 out of range max 16 [ 787.863987][ T5839] Bluetooth: hci6: command tx timeout [ 787.886537][ T7504] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.929897][ T7504] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.939530][ T5839] Bluetooth: hci7: command tx timeout [ 787.959075][ T7504] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.968101][ T7504] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.170690][T26141] netlink: 'syz.7.5396': attribute type 1 has an invalid length. [ 788.215284][T26148] netlink: 11 bytes leftover after parsing attributes in process `syz.0.5482'. [ 788.242193][T26147] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5481'. [ 788.278360][T26150] xt_ecn: cannot match TCP bits for non-tcp packets [ 788.289595][T26150] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5483'. [ 788.357775][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.378807][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.388395][T26154] sctp: [Deprecated]: syz.2.5483 (pid 26154) Use of int in maxseg socket option. [ 788.388395][T26154] Use struct sctp_assoc_value instead [ 788.486395][ T7523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.528453][ T7523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.609035][T26163] netlink: 'syz.4.5486': attribute type 1 has an invalid length. [ 788.844971][T26174] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5490'. [ 789.019344][T26180] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5493'. [ 789.339963][T26200] netlink: 'syz.2.5499': attribute type 10 has an invalid length. [ 790.273318][T26255] validate_nla: 1 callbacks suppressed [ 790.273337][T26255] netlink: 'syz.2.5513': attribute type 1 has an invalid length. [ 790.300088][T26255] netlink: 'syz.2.5513': attribute type 1 has an invalid length. [ 790.327137][T26251] tipc: Started in network mode [ 790.342315][T26251] tipc: Node identity 72d2397692c5, cluster identity 4711 [ 790.378965][T26251] tipc: Enabled bearer , priority 0 [ 790.397254][T26261] syzkaller0: entered promiscuous mode [ 790.402796][T26261] syzkaller0: entered allmulticast mode [ 790.673015][T26269] : entered promiscuous mode [ 791.384623][T26250] tipc: Resetting bearer [ 791.500018][T26250] tipc: Disabling bearer [ 791.627034][ T5953] tipc: Node number set to 3759618422 [ 791.634865][T26297] __nla_validate_parse: 8 callbacks suppressed [ 791.634886][T26297] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5524'. [ 791.672339][T26305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5525'. [ 791.704171][T26305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5525'. [ 792.287882][ T5836] IPVS: starting estimator thread 0... [ 792.325350][T26320] netlink: 'syz.7.5530': attribute type 1 has an invalid length. [ 792.359701][T26320] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5530'. [ 792.379948][T26328] IPVS: set_ctl: invalid protocol: 60 10.1.1.0:20001 [ 792.396214][T26325] IPVS: set_ctl: invalid protocol: 60 10.1.1.0:20001 [ 792.406178][T26327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5532'. [ 792.422193][T26324] IPVS: using max 26 ests per chain, 62400 per kthread [ 792.542573][T26332] tipc: Enabled bearer , priority 0 [ 792.564811][T26332] syzkaller0: entered promiscuous mode [ 792.576887][T26332] syzkaller0: entered allmulticast mode [ 792.664469][T26332] tipc: Resetting bearer [ 792.728154][T26330] tipc: Resetting bearer [ 792.742357][T26341] netlink: 'syz.7.5535': attribute type 1 has an invalid length. [ 792.830490][T26330] tipc: Disabling bearer [ 792.838925][T26344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5537'. [ 793.181636][T26355] netlink: 'syz.6.5541': attribute type 10 has an invalid length. [ 793.231460][T26355] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 793.251870][T26358] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5543'. [ 793.278658][T26358] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5543'. [ 793.361683][T26361] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5545'. [ 793.723179][T26365] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.759962][T26365] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.030573][T26386] syz_tun: entered allmulticast mode [ 794.172459][T26365] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.204805][T26365] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.462406][T26365] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.474091][T26365] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.489574][T26413] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5558'. [ 794.526449][T26384] infiniband syû: set down [ 794.531847][T26384] infiniband syû: added bond_slave_0 [ 794.633291][T26384] RDS/IB: syû: added [ 794.658488][T26384] smc: adding ib device syû with port count 1 [ 794.665199][T26384] smc: ib device syû port 1 has no pnetid [ 794.692337][T26365] batman_adv: batadv0: Removing interface: netdevsim0 [ 794.703318][T26365] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.715690][T26365] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.009243][T24329] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.036919][T24329] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.094060][ T6043] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.109840][ T6043] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.163566][ T6043] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.179509][T26443] netlink: 'syz.2.5566': attribute type 1 has an invalid length. [ 795.197300][ T6043] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.262536][ T6043] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.291346][ T6043] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.382292][T26449] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 795.834976][T26468] syzkaller0: entered promiscuous mode [ 795.878517][T26429] Bluetooth: hci6: Opcode 0x0c20 failed: -4 [ 795.906250][T26468] syzkaller0: entered allmulticast mode [ 795.950042][T21952] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 795.961301][T21952] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 795.971789][T21952] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 795.981514][T21952] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 795.990831][T21952] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 796.494385][T16370] syz_tun (unregistering): left allmulticast mode [ 796.548040][T26487] netlink: 'syz.6.5580': attribute type 32 has an invalid length. [ 796.582706][T26487] bond1: Setting coupled_control to off (0) [ 796.704714][ T30] audit: type=1800 audit(1768846880.975:39): pid=26494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5582" name="memory.events" dev="tmpfs" ino=120 res=0 errno=0 [ 796.795860][ T30] audit: type=1804 audit(1768846880.975:40): pid=26494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.5582" name="/newroot/20/memory.events" dev="tmpfs" ino=120 res=1 errno=0 [ 797.141347][T26507] __nla_validate_parse: 7 callbacks suppressed [ 797.141368][T26507] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5587'. [ 797.209159][T26507] bond2: Invalid ad_actor_system MAC address. [ 797.215555][T26507] bond2: option ad_actor_system: invalid value (1) [ 797.218180][ T5839] Bluetooth: hci6: command 0x0c20 tx timeout [ 797.232790][T26507] bond2 (unregistering): Released all slaves [ 797.391951][T26514] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5589'. [ 797.439235][T26516] netlink: 9 bytes leftover after parsing attributes in process `syz.6.5590'. [ 797.909879][T26472] chnl_net:caif_netlink_parms(): no params data found [ 798.016969][ T5839] Bluetooth: hci8: command tx timeout [ 798.084845][T26472] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.093487][T26472] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.102650][T26472] bridge_slave_0: entered allmulticast mode [ 798.111191][T26472] bridge_slave_0: entered promiscuous mode [ 798.122596][T26472] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.131313][T26472] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.138963][T26472] bridge_slave_1: entered allmulticast mode [ 798.147417][T26472] bridge_slave_1: entered promiscuous mode [ 798.197662][T26472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 798.212116][T26472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 798.277490][T26472] team0: Port device team_slave_0 added [ 798.287567][T26472] team0: Port device team_slave_1 added [ 798.337817][T26472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.345074][T26472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.372207][T26472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.387300][T26472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.394486][T26472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.425840][T26472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.549680][T26472] hsr_slave_0: entered promiscuous mode [ 798.569413][T26472] hsr_slave_1: entered promiscuous mode [ 798.590468][T26472] debugfs: 'hsr0' already exists in 'hsr' [ 798.596262][T26472] Cannot create hsr debugfs directory [ 798.690083][T13009] bridge_slave_1: left allmulticast mode [ 798.695800][T13009] bridge_slave_1: left promiscuous mode [ 798.720442][T13009] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.737551][T13009] bridge_slave_0: left allmulticast mode [ 798.744167][T13009] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.760375][T26545] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5597'. [ 798.835709][T26549] netlink: 256 bytes leftover after parsing attributes in process `syz.6.5598'. [ 798.848126][T26549] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5598'. [ 799.303647][T13009] bond2 (unregistering): (slave gretap1): Releasing active interface [ 799.398517][T13009] bond5 (unregistering): (slave geneve2): Releasing backup interface [ 799.690898][T13009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 799.702983][T13009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 799.714507][T13009] bond0 (unregistering): Released all slaves [ 799.730140][T13009] bond1 (unregistering): Released all slaves [ 799.744459][T13009] bond2 (unregistering): Released all slaves [ 799.762322][T13009] bond3 (unregistering): Released all slaves [ 799.783352][T13009] bond4 (unregistering): Released all slaves [ 799.910945][T13009] bond5 (unregistering): Released all slaves [ 800.036577][T13009] bond6 (unregistering): Released all slaves [ 800.106906][ T5839] Bluetooth: hci8: command tx timeout [ 800.155123][T13009] bond7 (unregistering): left allmulticast mode [ 800.161815][T13009] bond7 (unregistering): left promiscuous mode [ 800.180152][T13009] team0: Port device macvlan2 removed [ 800.192345][T13009] bond7 (unregistering): Released all slaves [ 800.403329][T13009] 9: left promiscuous mode [ 800.484084][T26557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 800.521144][T13009] tipc: Left network mode [ 800.561174][T13009] IPVS: stopping backup sync thread 10809 ... [ 800.946157][T26472] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 800.976706][T26472] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.055482][T26572] macvtap1: entered promiscuous mode [ 801.066526][T26572] macvtap1: entered allmulticast mode [ 801.073779][T26572] veth1_vlan: entered allmulticast mode [ 801.170790][T26575] macvtap2: entered promiscuous mode [ 801.176274][T26575] macvtap2: entered allmulticast mode [ 801.295713][T26472] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 801.339199][T26472] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.512846][T26472] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 801.524571][T26472] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.563954][T26581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5607'. [ 801.591048][T26581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5607'. [ 801.600632][T26581] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5607'. [ 801.825062][T26600] netlink: 'syz.6.5612': attribute type 1 has an invalid length. [ 802.112034][T26472] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 802.131599][T26610] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5615'. [ 802.156996][T26472] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 802.171638][T26472] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 802.178724][ T5839] Bluetooth: hci8: command tx timeout [ 802.190888][T26472] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 802.397842][T26472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.496200][T26472] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.536235][ T7506] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.543572][ T7506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.665626][ T7510] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.673173][ T7510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.892621][T26637] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5619'. [ 803.169150][T26648] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5622'. [ 803.320864][T26659] x_tables: duplicate underflow at hook 1 [ 803.582372][T26672] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5628'. [ 803.617164][T26472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 803.683977][T26680] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5628'. [ 803.896620][T13009] hsr_slave_0: left promiscuous mode [ 803.926482][T13009] hsr_slave_1: left promiscuous mode [ 803.932682][T26680] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5628'. [ 804.003075][ T30] audit: type=1107 audit(1768846888.275:41): pid=26694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 804.009573][T13009] veth0_macvtap: left promiscuous mode [ 804.027759][T26695] netlink: 7064 bytes leftover after parsing attributes in process `syz.6.5634'. [ 804.110168][T13009] veth1_vlan: left promiscuous mode [ 804.124846][T13009] veth0_vlan: left promiscuous mode [ 804.131392][T26695] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 804.142903][ T30] audit: type=1107 audit(1768846888.415:42): pid=26694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 804.231636][T26702] openvswitch: netlink: Message has 1 unknown bytes. [ 804.278473][ T5839] Bluetooth: hci8: command tx timeout [ 804.344152][T26702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 804.445849][T13009] pim6reg (unregistering): left allmulticast mode [ 804.865344][T13009] team0 (unregistering): Port device team_slave_1 removed [ 804.921165][T13009] team0 (unregistering): Port device team_slave_0 removed [ 805.463309][T26472] veth0_vlan: entered promiscuous mode [ 805.498499][T26472] veth1_vlan: entered promiscuous mode [ 805.550758][T26715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5636'. [ 805.565748][T26711] vlan2: entered allmulticast mode [ 805.573218][T26711] hsr0: entered allmulticast mode [ 805.579393][T26711] hsr_slave_0: entered allmulticast mode [ 805.589484][T26711] hsr_slave_1: entered allmulticast mode [ 805.642108][T26472] veth0_macvtap: entered promiscuous mode [ 805.663232][T26719] netlink: 596 bytes leftover after parsing attributes in process `syz.7.5639'. [ 805.663461][T26472] veth1_macvtap: entered promiscuous mode [ 805.724447][T26472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.828356][T26472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.905675][T26721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5640'. [ 805.908410][T24329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.930302][T24329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.976170][T24329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.993190][T24329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.046168][T13009] IPVS: stop unused estimator thread 0... [ 806.216088][T26736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5645'. [ 806.239390][ T3562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.251572][ T3562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.295278][T26736] netlink: 'syz.0.5645': attribute type 3 has an invalid length. [ 806.409918][ T7506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.431967][ T7506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.606059][T26755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 806.803350][T26767] netlink: 'syz.7.5653': attribute type 18 has an invalid length. [ 806.829363][T26766] netlink: 'syz.7.5653': attribute type 18 has an invalid length. [ 806.891821][ T7516] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 806.892679][T26766] netlink: 'syz.7.5653': attribute type 18 has an invalid length. [ 806.909288][T26767] netlink: 'syz.7.5653': attribute type 18 has an invalid length. [ 806.919028][ T7516] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 806.940134][ T7516] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 806.956606][ T7516] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 807.156554][T26792] C: renamed from lo (while UP) [ 807.167093][T26792] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 808.369033][T26827] __nla_validate_parse: 12 callbacks suppressed [ 808.369054][T26827] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5670'. [ 808.578891][T26851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5678'. [ 808.760839][T26868] tipc: Cannot configure node identity twice [ 809.011703][T26879] netlink: 'syz.7.5685': attribute type 1 has an invalid length. [ 809.046059][T26879] bond1: entered promiscuous mode [ 809.082272][T26879] 8021q: adding VLAN 0 to HW filter on device bond1 [ 809.150877][T26879] bond1: (slave bridge3): making interface the new active one [ 809.167992][T26879] bridge3: entered promiscuous mode [ 809.183874][T26879] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 809.326981][T26896] syzkaller1: entered promiscuous mode [ 809.332615][T26896] syzkaller1: entered allmulticast mode [ 809.413487][T26904] netlink: 144 bytes leftover after parsing attributes in process `syz.7.5692'. [ 809.880062][T26928] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 810.182134][T26943] netlink: 'syz.2.5704': attribute type 11 has an invalid length. [ 810.190460][T26943] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.5704'. [ 810.330698][T21952] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 810.345858][T21952] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 810.355069][T21952] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 810.365571][T21952] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 810.376142][T21952] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 810.406601][T26951] netlink: 'syz.6.5705': attribute type 29 has an invalid length. [ 811.036007][T26979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5716'. [ 811.158961][T26988] netlink: 'syz.0.5719': attribute type 30 has an invalid length. [ 811.257943][T26995] netlink: 'syz.0.5719': attribute type 11 has an invalid length. [ 811.305312][T26995] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.5719'. [ 811.322232][T26988] bond6: option arp_missed_max: invalid value (0) [ 811.329129][T26988] bond6: option arp_missed_max: allowed values 1 - 255 [ 811.352684][T26988] bond6 (unregistering): Released all slaves [ 811.479545][T26994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5720'. [ 811.592801][T26999] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 811.762246][T27010] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5722'. [ 812.015259][T27016] vxcan2: entered allmulticast mode [ 812.242712][T27029] syzkaller0: entered promiscuous mode [ 812.248827][T27029] syzkaller0: entered allmulticast mode [ 812.341201][T26945] chnl_net:caif_netlink_parms(): no params data found [ 812.417698][ T5839] Bluetooth: hci5: command tx timeout [ 812.433907][T27035] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5730'. [ 812.633451][T27051] netlink: 'syz.2.5735': attribute type 9 has an invalid length. [ 812.685921][T26945] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.699077][T26945] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.709550][T26945] bridge_slave_0: entered allmulticast mode [ 812.719193][T26945] bridge_slave_0: entered promiscuous mode [ 812.732299][T26945] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.742611][T26945] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.774230][T26945] bridge_slave_1: entered allmulticast mode [ 812.793066][T26945] bridge_slave_1: entered promiscuous mode [ 812.924868][T26945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.955203][T27066] netlink: 'syz.7.5738': attribute type 1 has an invalid length. [ 812.978085][T26945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 813.228172][T27069] bond2: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 813.252251][T27069] bond2: (slave ip_vti0): Error -95 calling set_mac_address [ 813.271211][T27075] bond2: entered promiscuous mode [ 813.277154][T27075] bond2: entered allmulticast mode [ 813.531315][T26945] team0: Port device team_slave_0 added [ 813.571567][T26945] team0: Port device team_slave_1 added [ 813.744218][T26945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 813.753108][T26945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.826788][T26945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.878583][T26945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.907257][T26945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.939598][T17515] page_pool_release_retry() stalled pool shutdown: id 107, 1 inflight 181 sec [ 813.949427][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 813.964387][T27095] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5745'. [ 813.971423][T26945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 814.042045][T27093] netlink: 14 bytes leftover after parsing attributes in process `syz.7.5746'. [ 814.094021][T27097] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5745'. [ 814.121124][T26945] hsr_slave_0: entered promiscuous mode [ 814.165118][T26945] hsr_slave_1: entered promiscuous mode [ 814.173591][T26945] debugfs: 'hsr0' already exists in 'hsr' [ 814.200110][T26945] Cannot create hsr debugfs directory [ 814.361776][T27111] SET target dimension over the limit! [ 814.498805][ T5839] Bluetooth: hci5: command tx timeout [ 815.022692][T26945] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.036380][T26945] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.047397][T26945] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 815.094389][T27138] openvswitch: netlink: Multiple metadata blocks provided [ 815.146100][T26945] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.167118][T26945] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.178100][T26945] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 815.295104][T26945] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.306116][T26945] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.315658][T27141] Cannot find add_set index 0 as target [ 815.318461][T26945] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 815.348901][T27145] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5760'. [ 815.551634][T27151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5762'. [ 815.593322][T27153] netlink: 'syz.7.5763': attribute type 1 has an invalid length. [ 815.602497][T27153] netlink: 'syz.7.5763': attribute type 2 has an invalid length. [ 815.611596][T27153] netlink: 'syz.7.5763': attribute type 1 has an invalid length. [ 815.628558][T26945] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 815.649816][T26945] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 815.671841][T26945] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 815.694102][T26945] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 815.934246][T26945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.940271][T27166] netlink: 212336 bytes leftover after parsing attributes in process `syz.7.5766'. [ 815.984699][T26945] 8021q: adding VLAN 0 to HW filter on device team0 [ 816.020631][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.027974][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 816.094021][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.101285][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 816.184029][T27175] netlink: 88 bytes leftover after parsing attributes in process `syz.6.5770'. [ 816.217004][T27175] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5770'. [ 816.239688][T27171] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5768'. [ 816.304108][T27180] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5768'. [ 816.453749][T27191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 816.462711][T27191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 816.520694][T27191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 816.559084][T27191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.578762][ T5839] Bluetooth: hci5: command tx timeout [ 816.683357][T27203] erspan0: entered allmulticast mode [ 816.724624][T27203] netlink: 'syz.7.5774': attribute type 1 has an invalid length. [ 816.982595][T26730] udevd[26730]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 817.088369][T26945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 817.425927][T27238] tipc: Failed to remove unknown binding: 66,1,1/0:3747008915/3747008917 [ 817.455332][T27238] tipc: Failed to remove unknown binding: 66,1,1/0:3747008915/3747008917 [ 817.490806][T27238] netlink: 'syz.2.5784': attribute type 12 has an invalid length. [ 817.834406][T26945] veth0_vlan: entered promiscuous mode [ 817.881827][T26945] veth1_vlan: entered promiscuous mode [ 817.974454][T26945] veth0_macvtap: entered promiscuous mode [ 818.003399][T26945] veth1_macvtap: entered promiscuous mode [ 818.056322][T26945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 818.079920][T26945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 818.101241][ T7504] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.121468][ T7504] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.152465][ T7504] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.184386][ T7504] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.460978][T27269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 818.492416][ T7536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.524327][ T7536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.594495][ T7536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.615973][ T7536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.657642][ T5839] Bluetooth: hci5: command tx timeout [ 818.930690][T27291] tipc: Enabled bearer , priority 0 [ 818.941548][T27291] syzkaller0: entered promiscuous mode [ 818.952942][T27291] syzkaller0: entered allmulticast mode [ 819.018257][T27291] tipc: Resetting bearer [ 819.033937][T27298] __nla_validate_parse: 7 callbacks suppressed [ 819.033958][T27298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5802'. [ 819.053517][T27290] tipc: Resetting bearer [ 819.101023][T27290] tipc: Disabling bearer [ 819.141186][T27305] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5804'. [ 819.141186][T27306] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5804'. [ 819.196105][T27309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5805'. [ 819.215221][T27309] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5805'. [ 819.339856][T27317] netlink: 4240 bytes leftover after parsing attributes in process `syz.7.5806'. [ 819.560383][T27325] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 819.576970][T27325] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 819.586171][T27325] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 819.733075][T27334] netlink: 'syz.4.5813': attribute type 7 has an invalid length. [ 819.761919][T27333] IPVS: Error connecting to the multicast addr [ 819.799458][T27334] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5813'. [ 820.194245][T27356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 820.251503][T27358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5820'. [ 820.269125][T27358] block nbd2: Unsupported socket: should be TCP or UNIX. [ 820.305882][T27360] netem: change failed [ 820.588597][T27372] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.5825'. [ 820.680235][T27382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5827'. [ 821.105994][T27412] syz.6.5836: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 821.143186][T27412] CPU: 0 UID: 0 PID: 27412 Comm: syz.6.5836 Not tainted syzkaller #0 PREEMPT(full) [ 821.143218][T27412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 821.143233][T27412] Call Trace: [ 821.143241][T27412] [ 821.143252][T27412] dump_stack_lvl+0xe8/0x150 [ 821.143287][T27412] warn_alloc+0x214/0x310 [ 821.143311][T27412] ? stack_trace_save+0x9c/0xe0 [ 821.143347][T27412] ? __pfx_warn_alloc+0x10/0x10 [ 821.143377][T27412] ? kasan_save_track+0x4f/0x80 [ 821.143397][T27412] ? kasan_save_track+0x3e/0x80 [ 821.143515][T27412] ? __kasan_kmalloc+0x93/0xb0 [ 821.143538][T27412] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 821.143558][T27412] ? xskq_create+0x56/0x170 [ 821.143578][T27412] ? xsk_setsockopt+0x4dc/0x8d0 [ 821.143624][T27412] ? do_sock_setsockopt+0x17c/0x1b0 [ 821.143647][T27412] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 821.143670][T27412] ? do_syscall_64+0xec/0xf80 [ 821.143699][T27412] __vmalloc_node_range_noprof+0x134/0x16a0 [ 821.143758][T27412] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 821.143788][T27412] ? __kasan_kmalloc+0x93/0xb0 [ 821.143817][T27412] vmalloc_user_noprof+0xad/0xf0 [ 821.143839][T27412] ? xskq_create+0xbf/0x170 [ 821.143859][T27412] xskq_create+0xbf/0x170 [ 821.143883][T27412] xsk_init_queue+0xb0/0x110 [ 821.143918][T27412] xsk_setsockopt+0x4dc/0x8d0 [ 821.143952][T27412] ? __pfx_xsk_setsockopt+0x10/0x10 [ 821.143984][T27412] ? __pfx_aa_sk_perm+0x10/0x10 [ 821.144014][T27412] ? aa_sock_opt_perm+0xff/0x1a0 [ 821.144047][T27412] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 821.144067][T27412] ? __pfx_xsk_setsockopt+0x10/0x10 [ 821.144099][T27412] do_sock_setsockopt+0x17c/0x1b0 [ 821.144131][T27412] __x64_sys_setsockopt+0x13f/0x1b0 [ 821.144164][T27412] do_syscall_64+0xec/0xf80 [ 821.144188][T27412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.144209][T27412] ? trace_irq_disable+0x37/0x100 [ 821.144236][T27412] ? clear_bhb_loop+0x60/0xb0 [ 821.144263][T27412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.144284][T27412] RIP: 0033:0x7fcd68b8f749 [ 821.144306][T27412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.144325][T27412] RSP: 002b:00007fcd6995a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 821.144349][T27412] RAX: ffffffffffffffda RBX: 00007fcd68de5fa0 RCX: 00007fcd68b8f749 [ 821.144367][T27412] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 821.144380][T27412] RBP: 00007fcd68c13f91 R08: 0000000000000004 R09: 0000000000000000 [ 821.144393][T27412] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 821.144407][T27412] R13: 00007fcd68de6038 R14: 00007fcd68de5fa0 R15: 00007ffcd040e998 [ 821.144442][T27412] [ 821.144466][T27412] Mem-Info: [ 821.243405][T27416] netlink: 'syz.7.5837': attribute type 1 has an invalid length. [ 821.313355][T27412] active_anon:9353 inactive_anon:7 isolated_anon:0 [ 821.313355][T27412] active_file:2631 inactive_file:40252 isolated_file:0 [ 821.313355][T27412] unevictable:768 dirty:58 writeback:0 [ 821.313355][T27412] slab_reclaimable:13939 slab_unreclaimable:150240 [ 821.313355][T27412] mapped:48529 shmem:4232 pagetables:1572 [ 821.313355][T27412] sec_pagetables:0 bounce:0 [ 821.313355][T27412] kernel_misc_reclaimable:0 [ 821.313355][T27412] free:1224902 free_pcp:12533 free_cma:0 [ 821.417155][T27414] syzkaller1: entered promiscuous mode [ 821.432817][T27420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 821.497205][T27412] Node 0 active_anon:37412kB inactive_anon:28kB active_file:10524kB inactive_file:160804kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:194116kB dirty:232kB writeback:0kB shmem:15392kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17376kB pagetables:6132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 821.540373][T27414] syzkaller1: entered allmulticast mode [ 821.636016][T27412] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 821.667927][T27412] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 821.737266][T27412] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 821.743442][T27412] Node 0 DMA32 free:998848kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37512kB inactive_anon:28kB active_file:10524kB inactive_file:160804kB unevictable:1536kB writepending:232kB zspages:0kB present:3129332kB managed:2559484kB mlocked:0kB bounce:0kB free_pcp:32192kB local_pcp:11140kB free_cma:0kB [ 821.789103][T27412] lowmem_reserve[]: 0 0 1 1 1 [ 821.794404][T27412] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 821.827234][T27423] syzkaller0: entered promiscuous mode [ 821.832756][T27423] syzkaller0: entered allmulticast mode [ 821.847148][T27412] lowmem_reserve[]: 0 0 0 0 0 [ 821.852130][T27412] Node 1 Normal free:3884408kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17708kB local_pcp:13292kB free_cma:0kB [ 821.890524][T27412] lowmem_reserve[]: 0 0 0 0 0 [ 821.895450][T27412] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 821.949562][T27412] Node 0 DMA32: 4490*4kB (UME) 5637*8kB (UM) 2689*16kB (UME) 653*32kB (UME) 200*64kB (UM) 673*128kB (UME) 594*256kB (UM) 374*512kB (UM) 207*1024kB (UM) 52*2048kB (UM) 27*4096kB (UM) = 998528kB [ 821.997965][T27412] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 822.004723][T27434] netlink: 'syz.4.5842': attribute type 10 has an invalid length. [ 822.023668][T27438] tipc: Failed to obtain node identity [ 822.028925][T27412] Node 1 Normal: 134*4kB (UE) 50*8kB (UME) 43*16kB (UME) 121*32kB (UME) 28*64kB (UME) 10*128kB (UME) 4*256kB (UME) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (UE) 944*4096kB (M) = 3884408kB [ 822.032235][T27438] tipc: Enabling of bearer rejected, failed to enable media [ 822.059818][T27412] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 822.103328][T27412] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 822.134450][T27412] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 822.163048][T27412] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 822.173173][T27412] 47111 total pagecache pages [ 822.180507][T27412] 0 pages in swap cache [ 822.184883][T27412] Free swap = 124996kB [ 822.200122][T27412] Total swap = 124996kB [ 822.225415][T27412] 2097051 pages RAM [ 822.235568][T27412] 0 pages HighMem/MovableOnly [ 822.245256][T27412] 425090 pages reserved [ 822.254585][T27412] 0 pages cma reserved [ 822.532445][T27463] tipc: Enabled bearer , priority 0 [ 822.549559][T27463] syzkaller0: entered promiscuous mode [ 822.555122][T27463] syzkaller0: entered allmulticast mode [ 822.598757][T27461] tipc: Resetting bearer [ 822.679521][T27461] tipc: Disabling bearer [ 823.982374][T27510] netlink: 'syz.2.5864': attribute type 1 has an invalid length. [ 824.168061][T27518] netlink: 'syz.0.5865': attribute type 10 has an invalid length. [ 824.495974][T27518] team0 (unregistering): Port device team_slave_0 removed [ 824.517385][T27518] team0 (unregistering): Port device team_slave_1 removed [ 824.539955][T27518] team0 (unregistering): Port device batadv1 removed [ 824.563374][T27518] team0 (unregistering): Port device dummy0 removed [ 824.831962][T27550] __nla_validate_parse: 7 callbacks suppressed [ 824.831982][T27550] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5872'. [ 825.003456][T27554] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5874'. [ 825.039508][T27556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5876'. [ 825.128708][T27562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5878'. [ 825.234681][T27566] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 825.391538][T27563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 825.620996][T27589] netlink: 'syz.6.5883': attribute type 10 has an invalid length. [ 825.785979][T27599] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5886'. [ 825.840824][T27601] bond1 (unregistering): Released all slaves [ 825.864763][T27608] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5886'. [ 826.065253][T27613] syzkaller0: entered promiscuous mode [ 826.119478][T27613] syzkaller0: entered allmulticast mode [ 826.182022][T27620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5893'. [ 826.207970][T27620] openvswitch: netlink: Flow key attr not present in new flow. [ 826.284161][T27625] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 826.307739][T16369] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 826.340394][T21952] Bluetooth: hci5: command 0x0405 tx timeout [ 826.442737][T27629] syzkaller0: entered promiscuous mode [ 826.449646][T27629] syzkaller0: entered allmulticast mode [ 826.727339][T27647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5904'. [ 826.760895][T27647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5904'. [ 826.858482][T17011] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 826.939032][T27663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5909'. [ 827.786516][T27663] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 827.793893][T27663] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 827.812299][T27663] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 827.821717][T27663] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 827.950993][T27663] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 827.963852][T27663] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 828.049510][T27663] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 828.055786][T27663] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 828.383683][T27714] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 828.404813][T27712] netlink: 'syz.4.5924': attribute type 1 has an invalid length. [ 828.544319][T27712] 8021q: adding VLAN 0 to HW filter on device bond1 [ 828.583304][T27719] bond1: (slave geneve2): making interface the new active one [ 828.593681][T27719] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 828.670600][ T5901] IPVS: starting estimator thread 0... [ 828.770326][T27731] IPVS: using max 29 ests per chain, 69600 per kthread [ 828.870300][T27745] netlink: 'syz.4.5933': attribute type 1 has an invalid length. [ 828.884758][T27740] 8021q: adding VLAN 0 to HW filter on device bond3 [ 829.010365][T27751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.044716][T27751] bond3: (slave bond0): Enslaving as an active interface with an up link [ 829.298864][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 829.447888][T27776] xt_TCPMSS: Only works on TCP SYN packets [ 829.537801][T27755] bond3 (unregistering): (slave bond0): Releasing backup interface [ 829.562103][T27755] bond3 (unregistering): Released all slaves [ 829.972465][T27788] __nla_validate_parse: 6 callbacks suppressed [ 829.972487][T27788] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5946'. [ 830.046912][T27795] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5948'. [ 830.159960][T27801] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5950'. [ 830.201225][T27795] netlink: 108 bytes leftover after parsing attributes in process `syz.6.5948'. [ 830.440170][T27809] syzkaller0: entered promiscuous mode [ 830.454499][T27809] syzkaller0: entered allmulticast mode [ 830.585543][T27823] netlink: 'syz.2.5954': attribute type 1 has an invalid length. [ 830.794456][T27826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5954'. [ 831.093787][T27828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5956'. [ 832.559901][T27823] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 832.760665][T27828] hsr_slave_0 (unregistering): left promiscuous mode [ 832.801454][T27837] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.5958'. [ 833.090802][T27846] syzkaller0: entered promiscuous mode [ 833.108114][T27846] syzkaller0: entered allmulticast mode [ 833.143899][T27852] netlink: 13 bytes leftover after parsing attributes in process `syz.4.5960'. [ 833.198523][T27855] netlink: 'syz.2.5962': attribute type 1 has an invalid length. [ 833.398626][T27855] bond1: entered promiscuous mode [ 833.404844][T27855] bond1: entered allmulticast mode [ 833.411289][T27855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 833.440799][T27860] macvlan2: entered promiscuous mode [ 833.446156][T27860] macvlan2: entered allmulticast mode [ 833.459095][T27860] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 833.549914][T27870] IPVS: set_ctl: invalid protocol: 24946 0.0.0.0:0 [ 833.667446][T27875] ipt_ECN: cannot use operation on non-tcp rule [ 833.691283][T27878] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5967'. [ 833.703626][T27878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 833.740396][T27882] netlink: 'syz.2.5968': attribute type 2 has an invalid length. [ 833.969482][T27889] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5969'. [ 834.417303][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 834.712407][T27927] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 834.756501][T27927] netlink: 'syz.4.5979': attribute type 1 has an invalid length. [ 834.797559][T27927] netlink: 'syz.4.5979': attribute type 1 has an invalid length. [ 835.155350][T27943] netlink: 'syz.2.5982': attribute type 3 has an invalid length. [ 835.246439][T27947] __nla_validate_parse: 8 callbacks suppressed [ 835.246460][T27947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5983'. [ 835.345607][T27933] netlink: 'syz.4.5980': attribute type 10 has an invalid length. [ 835.397764][T27957] netlink: 'syz.4.5980': attribute type 10 has an invalid length. [ 835.414773][T27933] team0: Port device dummy0 added [ 835.500925][T27957] team0: Device veth1_macvtap failed to register rx_handler [ 835.732026][T27972] netlink: 448 bytes leftover after parsing attributes in process `syz.2.5989'. [ 836.689583][T28014] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.6005'. [ 836.808121][T27997] mpoa:mpoad_close: () going down [ 836.937455][T28027] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 837.098661][T28032] netlink: 100 bytes leftover after parsing attributes in process `syz.7.6011'. [ 837.125593][T28034] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6009'. [ 837.150859][T28034] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6009'. [ 837.170635][T28036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6012'. [ 837.263133][T28036] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6012'. [ 837.319647][T28042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 837.428707][T28052] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6018'. [ 837.582034][T28063] netlink: 84 bytes leftover after parsing attributes in process `syz.7.6021'. [ 838.220791][T28103] x_tables: duplicate underflow at hook 2 [ 838.332208][T28111] x_tables: duplicate underflow at hook 2 [ 838.399289][T28115] netlink: 'syz.7.6037': attribute type 1 has an invalid length. [ 838.407981][T28115] netlink: 'syz.7.6037': attribute type 2 has an invalid length. [ 838.415818][T28115] netlink: 'syz.7.6037': attribute type 1 has an invalid length. [ 838.429479][T28118] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 838.432972][T28115] netlink: 'syz.7.6037': attribute type 3 has an invalid length. [ 838.457801][T28118] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 838.466292][T28118] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 838.767326][T28140] : renamed from bond0 [ 838.951725][T28147] bond0: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 838.964584][T28147] bond0 (unregistering): Released all slaves [ 838.991424][T28148] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 839.304180][T28167] netlink: 'syz.2.6054': attribute type 1 has an invalid length. [ 839.328310][T28171] netlink: 'syz.2.6054': attribute type 1 has an invalid length. [ 839.731013][T28197] syzkaller0: entered promiscuous mode [ 839.736559][T28197] syzkaller0: entered allmulticast mode [ 839.825378][T28205] delete_channel: no stack [ 839.967839][ T6176] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.977162][ T6176] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.986132][ T6176] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.000223][T28213] netlink: 'syz.2.6067': attribute type 1 has an invalid length. [ 840.037725][ T6176] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.168544][T28213] bond2: entered promiscuous mode [ 840.174135][T28213] 8021q: adding VLAN 0 to HW filter on device bond2 [ 840.348616][T28233] __nla_validate_parse: 48 callbacks suppressed [ 840.348639][T28233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6073'. [ 840.391793][T28233] netlink: 'syz.4.6073': attribute type 1 has an invalid length. [ 840.400009][T28233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6073'. [ 840.411692][T28233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6073'. [ 840.421178][T28233] netlink: 'syz.4.6073': attribute type 1 has an invalid length. [ 840.429622][T28233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6073'. [ 840.443666][T28233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6073'. [ 840.563541][T28240] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 840.625933][T28243] netlink: 'syz.4.6076': attribute type 9 has an invalid length. [ 840.662289][T28243] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.6076'. [ 840.693909][T28243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6076'. [ 840.910137][T28260] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6083'. [ 841.233081][T28278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6089'. [ 841.275875][T28278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6089'. [ 841.453353][T28282] gretap0: entered promiscuous mode [ 841.490239][T28282] gretap0: left promiscuous mode [ 841.524835][T28282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.548089][T28282] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 841.591239][T28297] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.598756][T28297] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.661812][T28292] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.669089][T28292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.676708][T28292] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.683942][T28292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 841.710765][T28292] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.718268][T28292] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.766452][T28303] syzkaller0: entered promiscuous mode [ 841.772669][T28303] syzkaller0: entered allmulticast mode [ 841.840764][T28309] xt_TCPMSS: Only works on TCP SYN packets [ 842.334693][T28334] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 843.720849][T28407] netlink: 'syz.2.6125': attribute type 11 has an invalid length. [ 843.911411][T28402] siw: device registration error -23 [ 843.958088][T28420] xt_ecn: cannot match TCP bits for non-tcp packets [ 844.190672][T28427] tipc: Started in network mode [ 844.195674][T28427] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 844.204496][T28427] tipc: Enabled bearer , priority 2 [ 844.352877][T28432] validate_nla: 3 callbacks suppressed [ 844.352899][T28432] netlink: 'syz.2.6133': attribute type 21 has an invalid length. [ 844.522007][T28432] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 845.174142][T28459] netlink: 'syz.4.6142': attribute type 9 has an invalid length. [ 845.192286][T28459] netlink: 'syz.4.6142': attribute type 6 has an invalid length. [ 845.297165][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 845.328620][T16369] tipc: Node number set to 10463914 [ 845.338741][T28468] tipc: Enabled bearer , priority 0 [ 845.386127][T28469] syzkaller0: entered promiscuous mode [ 845.407811][T28469] syzkaller0: entered allmulticast mode [ 845.480015][T28475] __nla_validate_parse: 15 callbacks suppressed [ 845.480039][T28475] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6145'. [ 845.542284][T28483] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6147'. [ 845.570010][T28469] tipc: Resetting bearer [ 845.649671][T28469] tipc: Disabling bearer [ 845.849507][T28485] netlink: 'syz.4.6148': attribute type 1 has an invalid length. [ 846.035887][T28485] 8021q: adding VLAN 0 to HW filter on device bond2 [ 846.111184][T28485] bond2: (slave geneve3): making interface the new active one [ 846.139178][T28507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6152'. [ 846.148787][T28485] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 846.205224][T28507] netlink: 'syz.2.6152': attribute type 1 has an invalid length. [ 846.246316][T28507] netlink: 'syz.2.6152': attribute type 2 has an invalid length. [ 846.597837][T28533] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6157'. [ 846.661891][T28540] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.6159'. [ 846.692355][T28540] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.6159'. [ 846.890532][T28549] netlink: 'syz.4.6161': attribute type 10 has an invalid length. [ 846.899037][T28551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6161'. [ 846.984092][T28549] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6161'. [ 847.001691][T28554] netlink: 9 bytes leftover after parsing attributes in process `syz.7.6162'. [ 847.041449][T28549] team0: Port device geneve0 added [ 847.071134][T28554] gretap0: entered promiscuous mode [ 847.109833][T28554] gretap0: left promiscuous mode [ 847.117320][T28554] erspan0: left allmulticast mode [ 847.148364][T28554] 8021q: adding VLAN 0 to HW filter on device  [ 847.200715][T28554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 847.248357][T28559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 847.394142][T28564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6164'. [ 847.821983][T28586] nbd: must specify at least one socket [ 848.222603][T28606] netlink: 'syz.7.6176': attribute type 7 has an invalid length. [ 848.264108][T28606] netlink: 'syz.7.6176': attribute type 7 has an invalid length. [ 848.770481][T28530] Cannot find set identified by id 3 to match [ 848.907455][T28629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 849.147626][T28639] netlink: 'syz.7.6187': attribute type 10 has an invalid length. [ 849.225712][T28639] team0: entered promiscuous mode [ 849.260242][T28639] team_slave_0: entered promiscuous mode [ 849.286275][T28639] team_slave_1: entered promiscuous mode [ 849.330292][T28639] bridge0: port 3(team0) entered blocking state [ 849.352413][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 849.363145][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 849.366150][T28639] bridge0: port 3(team0) entered disabled state [ 849.386963][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 849.401968][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 849.409930][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 849.477315][T28639] team0: entered allmulticast mode [ 849.482506][T28639] team_slave_0: entered allmulticast mode [ 849.551502][T21952] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 849.560318][T21952] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 849.569823][T21952] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 849.580049][T28639] team_slave_1: entered allmulticast mode [ 849.588583][T21952] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 849.610669][T21952] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 849.652151][T28639] bridge0: port 3(team0) entered blocking state [ 849.658543][T28639] bridge0: port 3(team0) entered forwarding state [ 849.852335][T28662] netlink: 'syz.2.6192': attribute type 10 has an invalid length. [ 849.880117][T28661] netlink: 'syz.2.6192': attribute type 10 has an invalid length. [ 849.963945][T28669] netlink: 'syz.7.6195': attribute type 1 has an invalid length. [ 850.054017][T28669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.181364][T28672] bond0: (slave geneve2): making interface the new active one [ 850.210241][T28672] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 850.294512][T28669] veth5: entered promiscuous mode [ 850.334626][T28669] bond0: (slave veth5): Enslaving as an active interface with a down link [ 850.394530][T28681] vlan1: entered allmulticast mode [ 850.401673][T28681] bond0: entered allmulticast mode [ 850.407406][T28681] geneve2: entered allmulticast mode [ 850.419763][T28681] bond0: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 850.683007][T28700] syzkaller0: entered promiscuous mode [ 850.701691][T28700] syzkaller0: entered allmulticast mode [ 851.032712][T28712] __nla_validate_parse: 9 callbacks suppressed [ 851.032731][T28712] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6208'. [ 851.117413][T28717] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6210'. [ 851.264809][T28721] netlink: 'syz.7.6211': attribute type 11 has an invalid length. [ 851.291527][T28721] netlink: 'syz.7.6211': attribute type 4 has an invalid length. [ 851.304587][T28721] netlink: 'syz.7.6211': attribute type 5 has an invalid length. [ 851.312992][T28721] netlink: 'syz.7.6211': attribute type 6 has an invalid length. [ 851.330606][T28721] netlink: 199748 bytes leftover after parsing attributes in process `syz.7.6211'. [ 851.331062][T28649] chnl_net:caif_netlink_parms(): no params data found [ 851.370886][T28729] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6213'. [ 851.566573][T28744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6217'. [ 851.587582][T28744] vlan2: entered allmulticast mode [ 851.592827][T28744] mac80211_hwsim hwsim68 wlan0: entered allmulticast mode [ 851.692267][T28649] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.702873][T21952] Bluetooth: hci2: command tx timeout [ 851.715129][T28649] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.723341][T28649] bridge_slave_0: entered allmulticast mode [ 851.731771][T28649] bridge_slave_0: entered promiscuous mode [ 851.750336][T28649] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.767586][T28649] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.777676][T28649] bridge_slave_1: entered allmulticast mode [ 851.786516][T28649] bridge_slave_1: entered promiscuous mode [ 851.950655][T28649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 851.984488][T28649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 852.070239][T28649] team0: Port device team_slave_0 added [ 852.100617][T28649] team0: Port device team_slave_1 added [ 852.217301][T28649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 852.227563][T28649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 852.254983][T28649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 852.274074][T28783] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6228'. [ 852.296299][T28649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 852.303898][T28649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 852.331346][T28649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 852.490787][T28649] hsr_slave_0: entered promiscuous mode [ 852.498872][T28649] hsr_slave_1: entered promiscuous mode [ 852.505687][T28649] debugfs: 'hsr0' already exists in 'hsr' [ 852.511741][T28649] Cannot create hsr debugfs directory [ 852.757833][T28804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6235'. [ 853.033456][T28649] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 853.058775][T28649] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.175374][T28820] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6241'. [ 853.188243][T28649] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 853.208212][T28820] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6241'. [ 853.217655][T28649] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.249590][T28820] gretap0: entered promiscuous mode [ 853.272388][T28820] gretap0: left promiscuous mode [ 853.332921][T28649] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 853.352085][T28649] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.373411][T28828] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 853.431284][T28649] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 853.441505][T28649] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.463709][T28835] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6247'. [ 853.494524][T28837] netlink: 'syz.4.6248': attribute type 83 has an invalid length. [ 853.579606][T28835] bridge1: port 1(veth7) entered blocking state [ 853.586458][T28835] bridge1: port 1(veth7) entered disabled state [ 853.603503][T28835] veth7: entered allmulticast mode [ 853.611150][T28835] veth7: entered promiscuous mode [ 853.641836][T28841] bridge1: port 2(veth0_to_bond) entered blocking state [ 853.650507][T28841] bridge1: port 2(veth0_to_bond) entered disabled state [ 853.657969][T28841] veth0_to_bond: entered allmulticast mode [ 853.669446][T28841] veth0_to_bond: entered promiscuous mode [ 853.779377][T21952] Bluetooth: hci2: command tx timeout [ 853.787874][T28848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 853.971652][T28649] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 853.991771][T28649] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 854.016426][T28649] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 854.055336][T28649] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 854.602308][T28892] sctp: [Deprecated]: syz.6.6262 (pid 28892) Use of int in maxseg socket option. [ 854.602308][T28892] Use struct sctp_assoc_value instead [ 854.647643][T28892] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 854.715293][T28649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.748142][T28896] 8021q: VLANs not supported on ip_vti0 [ 854.804156][T28649] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.830898][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.838142][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 854.902170][T24329] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.909971][T24329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 855.043627][T28915] netlink: 'syz.2.6272': attribute type 24 has an invalid length. [ 855.158806][T28918] netlink: 'syz.7.6273': attribute type 1 has an invalid length. [ 855.722230][T28649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.807779][T28949] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 855.858775][T21952] Bluetooth: hci2: command tx timeout [ 855.961661][T28649] veth0_vlan: entered promiscuous mode [ 855.981592][T28649] veth1_vlan: entered promiscuous mode [ 856.052008][T28649] veth0_macvtap: entered promiscuous mode [ 856.072737][T28649] veth1_macvtap: entered promiscuous mode [ 856.083234][T28961] __nla_validate_parse: 6 callbacks suppressed [ 856.083257][T28961] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6288'. [ 856.127267][T28961] netlink: 'syz.7.6288': attribute type 30 has an invalid length. [ 856.150855][T28966] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6290'. [ 856.164116][T28968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6289'. [ 856.192482][T28649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 856.215927][T28969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6289'. [ 856.282094][T28649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.322182][ T2049] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.351683][ T2049] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.377959][ T2049] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.419236][ T6131] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.495926][T28981] netlink: 108 bytes leftover after parsing attributes in process `syz.6.6294'. [ 856.508254][T28981] netlink: 108 bytes leftover after parsing attributes in process `syz.6.6294'. [ 856.521452][T28981] netlink: 108 bytes leftover after parsing attributes in process `syz.6.6294'. [ 856.624702][ T2049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.645232][ T2049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.698199][T28986] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6295'. [ 856.787169][T24329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.796144][T24329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.816155][T28996] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6296'. [ 856.845971][T28992] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6297'. [ 856.945037][T28999] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 856.950598][T29000] openvswitch: netlink: IP tunnel TTL not specified. [ 857.651997][T29043] netlink: 'syz.6.6309': attribute type 1 has an invalid length. [ 857.767914][T29045] veth5: entered allmulticast mode [ 857.847339][T29047] netlink: 'syz.0.6310': attribute type 10 has an invalid length. [ 857.937918][T21952] Bluetooth: hci2: command tx timeout [ 858.224677][T29074] x_tables: unsorted underflow at hook 4 [ 858.243851][T29078] x_tables: unsorted underflow at hook 4 [ 858.421830][T29083] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 858.952878][T29102] syzkaller0: entered promiscuous mode [ 858.966221][T29102] syzkaller0: entered allmulticast mode [ 859.353572][T29116] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 860.104137][T29152] IPv6: NLM_F_CREATE should be specified when creating new route [ 860.185733][T29157] xt_ecn: cannot match TCP bits for non-tcp packets [ 860.663952][ T31] INFO: task syz.5.5311:25492 blocked for more than 143 seconds. [ 860.698585][ T31] Not tainted syzkaller #0 [ 860.724029][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 860.764324][ T31] task:syz.5.5311 state:D stack:27176 pid:25492 tgid:25489 ppid:21950 task_flags:0x400140 flags:0x00080002 [ 860.835441][ T31] Call Trace: [ 860.857011][ T31] [ 860.872701][ T31] __schedule+0x149b/0x4fd0 [ 860.902921][ T31] ? __pfx___schedule+0x10/0x10 [ 860.927271][ T31] ? schedule+0x91/0x360 [ 860.949520][ T31] schedule+0x165/0x360 [ 860.984240][ T31] schedule_preempt_disabled+0x13/0x30 [ 861.017379][ T31] __mutex_lock+0x7e6/0x1350 [ 861.022073][ T31] ? __mutex_lock+0x5bb/0x1350 [ 861.048068][ T31] ? nfsd_nl_listener_set_doit+0x137/0x1660 [ 861.058115][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 861.063375][ T31] ? __asan_memset+0x22/0x50 [ 861.073723][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 861.079322][ T31] ? do_syscall_64+0xec/0xf80 [ 861.086525][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.100212][ T31] nfsd_nl_listener_set_doit+0x137/0x1660 [ 861.117782][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 861.129454][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 861.144148][ T31] ? rcu_is_watching+0x15/0xb0 [ 861.160978][ T31] ? __nla_parse+0x40/0x60 [ 861.165667][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 861.172853][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 861.180039][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 861.186289][ T31] ? bpf_lsm_capable+0x9/0x20 [ 861.191388][ T31] ? security_capable+0x7e/0x2e0 [ 861.196799][ T31] genl_rcv_msg+0x60e/0x790 [ 861.201719][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 861.207805][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 861.214203][ T31] ? __asan_memcpy+0x40/0x70 [ 861.219669][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 861.225283][ T31] netlink_rcv_skb+0x208/0x470 [ 861.231419][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 861.238719][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 861.244165][ T31] ? genl_rcv+0x19/0x40 [ 861.248980][ T31] ? down_read+0x274/0x2e0 [ 861.253528][ T31] ? genl_rcv+0xd/0x40 [ 861.263363][ T31] genl_rcv+0x28/0x40 [ 861.267816][ T31] netlink_unicast+0x82f/0x9e0 [ 861.272809][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 861.278448][ T31] ? __alloc_skb+0x198/0x3a0 [ 861.283339][ T31] ? netlink_sendmsg+0x642/0xb30 [ 861.289947][ T31] ? skb_put+0x11b/0x210 [ 861.294458][ T31] netlink_sendmsg+0x805/0xb30 [ 861.302028][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 861.308143][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 861.313805][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 861.319708][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 861.325145][ T31] __sock_sendmsg+0x21c/0x270 [ 861.330275][ T31] ____sys_sendmsg+0x505/0x820 [ 861.335183][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 861.341679][ T31] ? import_iovec+0x74/0xa0 [ 861.346320][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 861.353751][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 861.359347][ T31] ? futex_wait+0x285/0x360 [ 861.364116][ T31] ? __fget_files+0x2a/0x420 [ 861.377556][ T31] ? __fget_files+0x3a0/0x420 [ 861.388083][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 861.395957][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 861.402709][ T31] ? rcu_is_watching+0x15/0xb0 [ 861.408208][ T31] do_syscall_64+0xec/0xf80 [ 861.413547][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.419951][ T31] ? trace_irq_disable+0x37/0x100 [ 861.432775][ T31] ? clear_bhb_loop+0x60/0xb0 [ 861.437856][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.443885][ T31] RIP: 0033:0x7f54b6f8f749 [ 861.449520][ T31] RSP: 002b:00007f54b7edd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 861.469615][ T31] RAX: ffffffffffffffda RBX: 00007f54b71e5fa0 RCX: 00007f54b6f8f749 [ 861.482190][ T31] RDX: 0000000020048000 RSI: 0000200000000340 RDI: 0000000000000003 [ 861.490650][ T31] RBP: 00007f54b7013f91 R08: 0000000000000000 R09: 0000000000000000 [ 861.498991][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 861.508062][ T31] R13: 00007f54b71e6038 R14: 00007f54b71e5fa0 R15: 00007ffcc2fd5cc8 [ 861.516928][ T31] [ 861.520321][ T31] INFO: task syz.1.5348:25616 blocked for more than 144 seconds. [ 861.532663][ T31] Not tainted syzkaller #0 [ 861.539877][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 861.596269][ T31] task:syz.1.5348 state:D stack:26328 pid:25616 tgid:25613 ppid:17073 task_flags:0x400040 flags:0x00080002 [ 861.608876][ T31] Call Trace: [ 861.612282][ T31] [ 861.615337][ T31] __schedule+0x149b/0x4fd0 [ 861.621329][ T31] ? __pfx___schedule+0x10/0x10 [ 861.626322][ T31] ? schedule+0x91/0x360 [ 861.630797][ T31] schedule+0x165/0x360 [ 861.635084][ T31] schedule_preempt_disabled+0x13/0x30 [ 861.646890][ T31] __mutex_lock+0x7e6/0x1350 [ 861.653130][ T31] ? __mutex_lock+0x5bb/0x1350 [ 861.658201][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 861.664533][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 861.669808][ T31] ? stack_trace_save+0x9c/0xe0 [ 861.674832][ T31] ? stack_depot_save_flags+0x33/0x810 [ 861.686895][ T31] nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 861.696114][ T31] ? __alloc_skb+0x204/0x3a0 [ 861.704562][ T31] ? netlink_dump+0x1b7/0xe90 [ 861.709953][ T31] ? __netlink_dump_start+0x5cb/0x7e0 [ 861.715467][ T31] ? genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 861.722233][ T31] ? genl_rcv_msg+0x5da/0x790 [ 861.727589][ T31] ? netlink_rcv_skb+0x208/0x470 [ 861.732685][ T31] ? genl_rcv+0x28/0x40 [ 861.737237][ T31] ? netlink_unicast+0x82f/0x9e0 [ 861.742343][ T31] ? netlink_sendmsg+0x805/0xb30 [ 861.747604][ T31] ? __sock_sendmsg+0x21c/0x270 [ 861.752625][ T31] ? ____sys_sendmsg+0x505/0x820 [ 861.762028][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 861.778587][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 861.783858][ T31] ? do_syscall_64+0xec/0xf80 [ 861.788787][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.794911][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 861.820829][ T31] ? rcu_is_watching+0x15/0xb0 [ 861.825692][ T31] ? trace_kmalloc+0x1f/0xb0 [ 861.846789][ T31] ? __kmalloc_node_track_caller_noprof+0x594/0x820 [ 861.853508][ T31] ? __build_skb_around+0x22d/0x3c0 [ 861.865080][ T31] genl_dumpit+0x10b/0x1b0 [ 861.869754][ T31] netlink_dump+0x6e4/0xe90 [ 861.874335][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 861.879537][ T31] ? genl_start+0x499/0x6c0 [ 861.884099][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 861.889607][ T31] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 861.895385][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 861.901995][ T31] ? genl_get_cmd+0x496/0x910 [ 861.909914][ T31] ? __pfx_genl_start+0x10/0x10 [ 861.914862][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 861.921346][ T31] ? __pfx_genl_done+0x10/0x10 [ 861.926517][ T31] ? __dev_queue_xmit+0x280/0x3100 [ 861.931933][ T31] genl_rcv_msg+0x5da/0x790 [ 861.936501][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 861.951600][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 861.967518][ T31] ? __asan_memcpy+0x40/0x70 [ 861.972202][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 861.986782][ T31] netlink_rcv_skb+0x208/0x470 [ 861.991646][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 862.006665][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 862.012035][ T31] ? genl_rcv+0x19/0x40 [ 862.016260][ T31] ? down_read+0x274/0x2e0 [ 862.036504][ T31] ? genl_rcv+0xd/0x40 [ 862.041100][ T31] genl_rcv+0x28/0x40 [ 862.045134][ T31] netlink_unicast+0x82f/0x9e0 [ 862.050267][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 862.055681][ T31] ? __alloc_skb+0x198/0x3a0 [ 862.060537][ T31] ? netlink_sendmsg+0x642/0xb30 [ 862.065676][ T31] ? skb_put+0x11b/0x210 [ 862.070127][ T31] netlink_sendmsg+0x805/0xb30 [ 862.076123][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 862.086805][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 862.097830][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 862.108833][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 862.119846][ T31] __sock_sendmsg+0x21c/0x270 [ 862.130224][ T31] ____sys_sendmsg+0x505/0x820 [ 862.141944][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 862.153042][ T31] ? import_iovec+0x74/0xa0 [ 862.162308][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 862.170374][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 862.175739][ T31] ? futex_wait+0x285/0x360 [ 862.181079][ T31] ? __fget_files+0x2a/0x420 [ 862.185824][ T31] ? __fget_files+0x3a0/0x420 [ 862.190733][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 862.195832][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 862.201580][ T31] ? rcu_is_watching+0x15/0xb0 [ 862.216947][ T31] do_syscall_64+0xec/0xf80 [ 862.221649][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.228675][ T31] ? trace_irq_disable+0x37/0x100 [ 862.234399][ T31] ? clear_bhb_loop+0x60/0xb0 [ 862.239333][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.245427][ T31] RIP: 0033:0x7f78cf78f749 [ 862.253139][ T31] RSP: 002b:00007f78d05ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 862.264485][ T31] RAX: ffffffffffffffda RBX: 00007f78cf9e5fa0 RCX: 00007f78cf78f749 [ 862.272764][ T31] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000003 [ 862.281326][ T31] RBP: 00007f78cf813f91 R08: 0000000000000000 R09: 0000000000000000 [ 862.289625][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 862.297892][ T31] R13: 00007f78cf9e6038 R14: 00007f78cf9e5fa0 R15: 00007fff03491eb8 [ 862.306156][ T31] [ 862.309999][ T31] [ 862.309999][ T31] Showing all locks held in the system: [ 862.319647][ T31] 2 locks held by ksoftirqd/0/15: [ 862.324842][ T31] 1 lock held by khungtaskd/31: [ 862.330072][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 862.341290][ T31] 2 locks held by getty/5590: [ 862.346102][ T31] #0: ffff8880344990a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 862.356170][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 862.374082][ T31] 6 locks held by kworker/u8:40/7536: [ 862.434320][ T31] #0: ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 862.451774][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 862.461067][ T31] #2: ffff88804b340788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x450 [ 862.471317][ T31] #3: ffffffff99ade198 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_assert_init+0xb4/0x380 [ 862.488537][ T31] #4: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x23d0 [ 862.509940][ T31] #5: ffff8880b863f190 ((local_lock_t *)&c->lock){..-.}-{3:3}, at: put_cpu_partial+0x88/0x280 [ 862.520722][ T31] 3 locks held by kworker/0:6/16350: [ 862.526243][ T31] 2 locks held by syz.3.4150/21205: [ 862.531829][ T31] #0: ffffffff8f379e70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 862.548684][ T31] #1: ffffffff8e2379a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1660 [ 862.559279][ T31] 2 locks held by syz.5.5311/25492: [ 862.564600][ T31] #0: ffffffff8f379e70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 862.573159][ T31] #1: ffffffff8e2379a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1660 [ 862.592776][ T31] 3 locks held by syz.1.5348/25616: [ 862.599676][ T31] #0: ffffffff8f379e70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 862.608930][ T31] #1: ffff88804b2346f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 862.619599][ T31] #2: ffffffff8e2379a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 862.630351][ T31] 2 locks held by syz.0.6349/29178: [ 862.635652][ T31] #0: ffff88804d4c0d88 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 862.646780][ T31] #1: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x36e/0x6e0 [ 862.659347][ T31] 2 locks held by syz.7.6350/29184: [ 862.664669][ T31] #0: ffff88806a8da488 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 862.675222][ T31] #1: ffff888029d926b8 (&xs->mutex){+.+.}-{4:4}, at: xsk_release+0x3ed/0x660 [ 862.684413][ T31] 2 locks held by dhcpcd/29201: [ 862.689626][ T31] #0: ffff888099c3a260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 862.704997][ T31] #1: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x36e/0x6e0 [ 862.717966][ T31] [ 862.728558][ T31] ============================================= [ 862.728558][ T31] [ 862.746898][ T31] NMI backtrace for cpu 1 [ 862.746922][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 862.746945][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 862.746958][ T31] Call Trace: [ 862.746966][ T31] [ 862.746974][ T31] dump_stack_lvl+0xe8/0x150 [ 862.747005][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 862.747034][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 862.747078][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 862.747112][ T31] sys_info+0x135/0x170 [ 862.747138][ T31] watchdog+0xf95/0xfe0 [ 862.747173][ T31] ? watchdog+0x20a/0xfe0 [ 862.747209][ T31] kthread+0x711/0x8a0 [ 862.747240][ T31] ? __pfx_watchdog+0x10/0x10 [ 862.747268][ T31] ? __pfx_kthread+0x10/0x10 [ 862.747297][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 862.747316][ T31] ? __pfx_kthread+0x10/0x10 [ 862.747344][ T31] ret_from_fork+0x510/0xa50 [ 862.747366][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 862.747384][ T31] ? __switch_to+0xc9e/0x1480 [ 862.747415][ T31] ? __pfx_kthread+0x10/0x10 [ 862.747442][ T31] ret_from_fork_asm+0x1a/0x30 [ 862.747486][ T31] [ 862.747496][ T31] Sending NMI from CPU 1 to CPUs 0: [ 862.869907][ C0] NMI backtrace for cpu 0 [ 862.869925][ C0] CPU: 0 UID: 0 PID: 16350 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) [ 862.869945][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 862.869957][ C0] Workqueue: events cleanup_vm_area_work [ 862.869989][ C0] RIP: 0010:__get_pfnblock_flags_mask+0x29/0x240 [ 862.870019][ C0] Code: 90 55 41 57 41 56 41 55 41 54 53 50 49 89 d5 49 89 f6 49 89 ff 48 bd 00 00 00 00 00 fc ff df 48 89 f8 48 c1 e8 03 80 3c 28 00 <74> 08 4c 89 ff e8 8d 91 0e 00 49 8b 1f 48 83 fb ff 0f 84 e8 01 00 [ 862.870035][ C0] RSP: 0018:ffffc9000447f800 EFLAGS: 00000046 [ 862.870049][ C0] RAX: 1ffffd4000aa5250 RBX: 0000000000000000 RCX: 1ffff110170c81d5 [ 862.870063][ C0] RDX: 0000000000000017 RSI: 0000000000154a4a RDI: ffffea0005529280 [ 862.870075][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 862.870085][ C0] R10: dffffc0000000000 R11: fffff5200088fef4 R12: ffff8880b8640ea0 [ 862.870099][ C0] R13: 0000000000000017 R14: 0000000000154a4a R15: ffffea0005529280 [ 862.870112][ C0] FS: 0000000000000000(0000) GS:ffff888125e1e000(0000) knlGS:0000000000000000 [ 862.870126][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 862.870138][ C0] CR2: 0000561b27d87168 CR3: 0000000030412000 CR4: 00000000003526f0 [ 862.870154][ C0] Call Trace: [ 862.870161][ C0] [ 862.870171][ C0] free_pcppages_bulk+0x19c/0x4c0 [ 862.870197][ C0] free_frozen_page_commit+0x62a/0x1290 [ 862.870223][ C0] __free_frozen_pages+0x67f/0xd30 [ 862.870245][ C0] vfree+0x25a/0x400 [ 862.870273][ C0] cleanup_vm_area_work+0xa2/0x100 [ 862.870293][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 862.870312][ C0] process_scheduled_works+0xad1/0x1770 [ 862.870345][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 862.870362][ C0] ? do_raw_spin_lock+0x121/0x290 [ 862.870394][ C0] worker_thread+0x8a0/0xda0 [ 862.870426][ C0] kthread+0x711/0x8a0 [ 862.870450][ C0] ? __pfx_worker_thread+0x10/0x10 [ 862.870468][ C0] ? __pfx_kthread+0x10/0x10 [ 862.870492][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 862.870508][ C0] ? __pfx_kthread+0x10/0x10 [ 862.870531][ C0] ret_from_fork+0x510/0xa50 [ 862.870548][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 862.870563][ C0] ? __switch_to+0xc9e/0x1480 [ 862.870590][ C0] ? __pfx_kthread+0x10/0x10 [ 862.870617][ C0] ret_from_fork_asm+0x1a/0x30 [ 862.870651][ C0] [ 863.115279][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 863.122280][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 863.131430][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 863.141539][ T31] Call Trace: [ 863.144865][ T31] [ 863.147841][ T31] vpanic+0x1e0/0x670 [ 863.151881][ T31] panic+0xb9/0xc0 [ 863.155658][ T31] ? __pfx_panic+0x10/0x10 [ 863.160123][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 863.165547][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 863.171769][ T31] watchdog+0xfdf/0xfe0 [ 863.175998][ T31] ? watchdog+0x20a/0xfe0 [ 863.180407][ T31] kthread+0x711/0x8a0 [ 863.184533][ T31] ? __pfx_watchdog+0x10/0x10 [ 863.189267][ T31] ? __pfx_kthread+0x10/0x10 [ 863.193917][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 863.199176][ T31] ? __pfx_kthread+0x10/0x10 [ 863.203825][ T31] ret_from_fork+0x510/0xa50 [ 863.208461][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 863.213621][ T31] ? __switch_to+0xc9e/0x1480 [ 863.218357][ T31] ? __pfx_kthread+0x10/0x10 [ 863.223054][ T31] ret_from_fork_asm+0x1a/0x30 [ 863.227898][ T31] [ 863.231643][ T31] Kernel Offset: disabled [ 863.235992][ T31] Rebooting in 86400 seconds..