last executing test programs: 2m42.924509836s ago: executing program 1 (id=1195): pipe(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000e00000000000000", @ANYRES32, @ANYBLOB="bc8c00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000196151dc00000f0000000000"], 0x50) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000340)={@private1, 0x0}, &(0x7f0000000380)=0x14) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000020030000000a0000000000000800000000090000000300008403000000000000000400000003000000080000000500000000080000070000000500000006000000000000"], &(0x7f0000000440)=""/115, 0x57, 0x73, 0x0, 0x2915}, 0x28) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5c, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r10 = accept$alg(r9, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)='[', 0x1}, {&(0x7f0000000040)="56b90e53fab64bf15307ada687d249a6e7c49631c9a9b9bcfc7c46412be23d42097039fb19ded17d03d8593d96673dfb04bc7085d57e52da4da871b693423b3eafc4c0a9ddfe", 0x46}, {&(0x7f0000000180)="bf02f215a906d3209840ac252d6e8772ffd9bea40bc8f56fa9615d6e218896ddff9f221f413e3d6edae4ce8c0127", 0x2e}, {&(0x7f0000003f80)="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", 0xfb}], 0x4, 0x0, 0x0, 0x20040003}], 0x1, 0x0) recvmmsg(r10, &(0x7f0000000e80)=[{{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000900)=""/152, 0x98}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000a00)=""/144, 0x90}], 0x1}, 0xfffff956}, {{&(0x7f0000000b00)=@phonet, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000b80)=""/43, 0x2b}, {&(0x7f0000000cc0)=""/163, 0xa3}], 0x2, &(0x7f0000000d80)=""/198, 0xc6}, 0xa}], 0x3, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000140)=@ipv6_deladdrlabel={0x1c, 0x49, 0x10, 0x70bd2d, 0x25dddbfe, {0xa, 0x0, 0x40, 0x0, r5}}, 0x1c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{0x1}, &(0x7f00000006c0), &(0x7f0000000700)='%ps \x00'}, 0x20) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x16, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYRES8=r2, @ANYRES64=r0, @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000185b0000050000000000000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x1, 0x55, &(0x7f00000002c0)=""/85, 0x40f00, 0x40, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000500)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x5, 0x3a8, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[r7, r8, r12, r7], 0x0, 0x10, 0x6}, 0x94) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4c8c0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) 2m42.713068s ago: executing program 1 (id=1198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0e00000004000000080000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="c88df23300"/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000020}, 0x0) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141200006c07010033d43afffb800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 2m42.363408834s ago: executing program 0 (id=1203): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) (async) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x10000}, 0x1c) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}], [{}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 2m42.327472365s ago: executing program 0 (id=1205): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000008800000095"], &(0x7f0000000500)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000140)={0x78, r1, 0x1, 0x70bd25, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6gretap0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}]}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbcfd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x5}, 0x40) 2m42.287358247s ago: executing program 1 (id=1206): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="c3aa00fe0100000071101a000000000095"], &(0x7f0000000480)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$kcm(0x10, 0x2, 0x10) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1f6fcf2fbb053e277a04d3f44e3f9bafec64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f906", 0x8f}, {&(0x7f0000000200)="3a1b30e16e53b797aad1939fdde0bc8a0e6f1db40707d3523d", 0x19}], 0x2, 0x0, 0x0, 0x2004c801}, 0x4000000) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x4dc, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4ac, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x52, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}, @TCA_GRED_DPS={0x10, 0x3, {0x0, 0x2, 0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x2}, @TCA_GRED_LIMIT={0x8, 0x5, 0x60000000}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8, 0x5, 0xfffffff8}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x7, 0x6, 0xd, 0xe547, 0xffffffff, 0xfffffffa, 0x9, 0xfffffffb, 0xc00, 0x17, 0x1c, 0x1f, 0x5, 0x8, 0x40}}]}}]}, 0x4dc}, 0x1, 0x0, 0x0, 0x40098}, 0x0) socket$packet(0x11, 0x3, 0x300) 2m42.215407166s ago: executing program 0 (id=1207): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a100000095b01188bbf49338ca32925e22515599a02502e6f1da1d1aaf8c7fd23c56c3fe92c2bc0929d168638dc5105c5e4a9a8916e2da"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5d, '\x00', 0x0, @fallback=0x25, r0, 0x0, 0x0, 0xffffffffffffff52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xa8, 0x0, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_TUPLE_REPLY={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3bffb8061a35dbc8}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xc17}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x20008040) 2m42.192710262s ago: executing program 0 (id=1208): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000028c0)=@delchain={0x1648, 0x65, 0x0, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xa, 0x3}, {0x1}, {0x0, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x6, 0xc}}, @filter_kind_options=@f_u32={{0x8}, {0xca4, 0x2, [@TCA_U32_POLICE={0x458, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x41a, 0x3, 0xed9, 0x5, 0x8, 0xfff, 0x8, 0x80000000, 0x4, 0x1, 0x10001, 0x3, 0x0, 0xfffffff9, 0x8000, 0x3, 0x5d, 0x101, 0xffffffff, 0x6, 0x6, 0xfffffffc, 0x7, 0x2, 0x9, 0x2, 0x40, 0x8, 0xfffffffa, 0x7, 0x6, 0xf, 0x4, 0x3, 0x4, 0x8c0, 0x9, 0x2, 0x6, 0x10100000, 0x8, 0xd9, 0xffffffff, 0xffffffff, 0x744, 0x80000001, 0xfffffffa, 0x1, 0xc, 0xe655, 0x6, 0x5, 0x1, 0x3, 0x9be, 0x9, 0x3, 0x6, 0x8e8, 0x10cd6000, 0xd, 0x6, 0x9, 0x2, 0x200, 0x5, 0x66, 0x5, 0x2, 0xfffffff8, 0x4, 0x9, 0x3ed7e0e8, 0x401, 0x6, 0x401, 0x9, 0x10, 0x3, 0x200, 0x3, 0x500000, 0x5, 0x2, 0x5, 0x7, 0xb, 0x5, 0x2, 0x7, 0x5, 0x9, 0xfffffff9, 0x2, 0x90, 0x8, 0x3, 0x2, 0x8, 0x9, 0x3, 0x1, 0x5, 0xff, 0x2, 0x8, 0xf7, 0xf, 0x6, 0x1, 0xfffffff8, 0xfffffff9, 0x8, 0x95, 0xc, 0x2, 0xf1, 0x4, 0x2, 0x200, 0x5, 0x7a28d31b, 0x8, 0x1, 0x1, 0x800, 0x46, 0xc846, 0x3, 0x4, 0x9, 0x16, 0x5, 0x8f, 0xf, 0x3, 0x401, 0xb5ab, 0xff, 0x401, 0x4, 0xfffffff9, 0x7, 0x51200000, 0x4, 0x6, 0x6, 0xde, 0xfffffffe, 0x80000001, 0x7fffffff, 0xba5, 0x4a07, 0x0, 0x10, 0x80, 0x7, 0xfffffff9, 0x1, 0x7fff, 0xffffffff, 0x0, 0x79, 0x6, 0x4, 0x8, 0xa9, 0x6, 0x3, 0x0, 0xfffffff9, 0xfffffff0, 0x7, 0xd, 0x2, 0x4, 0x400, 0x7, 0x8001, 0x6, 0x1ff, 0x80000001, 0x2, 0x6, 0xffffffff, 0x1, 0x81, 0x5, 0x4b13, 0x2, 0x8, 0x12, 0x883, 0xb, 0x6, 0x5, 0x46, 0x0, 0x68ccf56a, 0x8, 0x2, 0x7, 0xb2, 0x132, 0x8, 0xed1, 0x40, 0x4, 0x0, 0x2129, 0x1, 0x0, 0xfff, 0x8000, 0xbc, 0x10000, 0x0, 0x21f, 0xf3, 0x80, 0xfffffff9, 0x80, 0x8, 0xdd, 0x6, 0x0, 0x6, 0x3, 0x9, 0x4, 0x5a, 0x5, 0x8, 0x62, 0x1, 0xc6, 0x2, 0x3ff, 0x7, 0x6, 0x2, 0x10000, 0x1, 0xc4d, 0x0, 0x7, 0x24, 0x1000, 0x1, 0x1, 0x55, 0xd9, 0x4, 0x9, 0x1000]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x1, 0x3, 0x80000001, 0x508a, {0x93, 0x1, 0x7, 0xffff, 0x0, 0xbc5}, {0x94, 0x2, 0x3, 0xfffc, 0x3, 0x5f2f}, 0x6, 0x1, 0x3}}]}, @TCA_U32_POLICE={0x848, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x1000, 0x7ff, 0x5, 0x58, 0x3, 0x5c69, 0x6, 0x4, 0xc, 0x2, 0x3, 0x3, 0x27fd4a28, 0x800, 0x4, 0x6, 0xf, 0x1, 0x1, 0xfffffff8, 0x5, 0x5, 0x1ff, 0x6, 0x0, 0x400, 0x0, 0x7, 0x2, 0xfffffff2, 0x6, 0x8, 0x4, 0x3, 0xe0, 0xb, 0x7ff, 0x2f, 0x9, 0x80, 0x7, 0x3, 0x6, 0x72a12389, 0x41c7, 0x9, 0x4, 0x1, 0x9, 0x57, 0x8000, 0x80, 0x0, 0x4000000, 0x1, 0x7, 0x3, 0x401, 0x8, 0x4, 0x494e, 0x6, 0x7, 0xd9, 0x2847, 0x7, 0x7, 0x1, 0x9, 0x88c, 0x8, 0x5, 0x4, 0xa, 0x1, 0x5, 0x5, 0x4, 0x8, 0x7f, 0x6, 0x0, 0x2, 0x4, 0x8, 0x2, 0xfffffff7, 0x6, 0x9, 0x7, 0x8001, 0x5f4, 0x101, 0x1, 0x1, 0x200, 0x10000, 0x1, 0x6, 0x3, 0xfffffff2, 0x6, 0x65, 0xbb, 0x0, 0x1, 0x7, 0x3, 0xcd, 0x4, 0x7, 0x5, 0x37e, 0x2, 0x1cb0800, 0x2, 0x8, 0x5, 0x8, 0x2, 0x78fb0b7e, 0x2, 0xfff, 0x7, 0x1000, 0x9, 0x6, 0xfffffff7, 0x80000000, 0x1, 0x5, 0x7, 0x2, 0x4, 0xfffffff1, 0x2, 0x7, 0x9, 0x3, 0x8, 0x9, 0x2, 0x22, 0x3, 0xc, 0x43, 0xffffffff, 0xa, 0xfffffffc, 0x7, 0x80, 0x5, 0x800, 0x3, 0x5, 0x401, 0x2, 0x8, 0x6, 0x9, 0x1, 0x6, 0x9, 0x4, 0x1000, 0x100, 0xffffff63, 0x1, 0x0, 0x5, 0x77, 0x81, 0x3, 0x0, 0x7, 0x6, 0x3, 0x0, 0xf6, 0x814, 0xf, 0xce3, 0x6, 0x196a742f, 0x4, 0x30, 0x400, 0x9, 0x0, 0x8001, 0x27b2f4e8, 0x9, 0x896f, 0x6, 0x73, 0x3c, 0x3, 0x2, 0xffff, 0x7, 0x7, 0x7, 0x9, 0x3, 0xbc55, 0x81, 0x5, 0x9, 0x9, 0xb, 0x28, 0x9, 0x7fff, 0x0, 0x8, 0x1c00000, 0x9, 0x5, 0x68, 0x8, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x9, 0x7, 0x7, 0x4, 0x0, 0x0, 0x3ccb9fe7, 0xb, 0x80000000, 0x2, 0x0, 0x7, 0x7, 0x10, 0x5, 0x4, 0x10000, 0xc2f0, 0x0, 0xdd5c, 0x9, 0xfffffff9, 0x766, 0x9, 0x4, 0x0, 0x7ff, 0x9, 0xfff, 0x3e, 0x62d]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x2, 0x6, 0xfffffff8, 0x3, {0x5, 0x2, 0x9, 0x6, 0x575, 0xffffff80}, {0x9, 0x2, 0x3, 0x1000, 0xbb13, 0x9}, 0x6, 0x7000000, 0x5}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x7ff, 0x19b, 0x8001, 0x6, 0x8000, 0x6b5, 0x0, 0xe, 0x7, 0x0, 0xfffffff8, 0x5, 0x599, 0x2, 0x5, 0x3ff, 0x9, 0x0, 0x2269d573, 0x4, 0x0, 0x1ff, 0x2, 0x9, 0x7, 0x3, 0x400, 0x5, 0x2, 0x0, 0x477857fd, 0x8001, 0x8, 0xffff, 0x4, 0x9, 0x101, 0x4, 0x703, 0x40, 0x1ff, 0x8, 0x7, 0x8, 0x6, 0xf, 0x2, 0x81, 0x4, 0x2, 0x10001, 0x8, 0x0, 0xb20, 0x4, 0x8, 0x1, 0x8, 0x3, 0x2, 0xffffffff, 0x5, 0x3, 0xecb7, 0x40, 0x8025, 0xf, 0x50, 0x800, 0x10001, 0x1ff8000, 0x1, 0xff, 0x2, 0x400, 0x5, 0x81, 0x8, 0xfffffff9, 0x10, 0x80, 0x5, 0x8, 0x4, 0x4, 0xa2, 0x80000001, 0x86c1, 0xc, 0x6bec, 0x200, 0xade, 0x6, 0xa0, 0x0, 0x8000, 0x2, 0x422, 0x4, 0x8648, 0x77f4, 0xffffff4d, 0x5, 0xe935, 0x21bc, 0xfffffffd, 0x770, 0x6, 0x5, 0xa, 0xf6, 0x2, 0x2, 0x4, 0x2, 0xc, 0x1, 0x40, 0x4a, 0xfffffffa, 0x2, 0x5, 0x10000, 0x7, 0x9, 0x0, 0x22, 0x354c, 0x6, 0x0, 0xfffffff9, 0x2, 0x97, 0x3, 0x5, 0x5, 0x7, 0x2, 0x2, 0x8, 0x7fff, 0x4, 0x6, 0x8, 0xb, 0x2, 0x10001, 0x1, 0x1, 0x29a8, 0x10, 0x0, 0x7, 0x6, 0x7f, 0x4, 0x9, 0xffffffff, 0x7, 0x8, 0x490b, 0x8, 0x6, 0x4, 0x7, 0x4, 0x22e8, 0x0, 0x9, 0x0, 0x2, 0x2, 0x80, 0x99e, 0x5, 0xffff, 0x7, 0x7, 0x4, 0x6, 0x0, 0xb, 0x6, 0xb, 0x101, 0x1, 0x1e, 0x4, 0x1, 0x6, 0x9, 0x3, 0x6, 0xb6e8, 0x9, 0x7, 0x4, 0x3, 0x7fff, 0x34, 0x74a, 0x0, 0xa934, 0x0, 0x9, 0x1, 0x5, 0x9, 0x2, 0x0, 0x4, 0xffffffbf, 0x6c, 0x2, 0x7, 0x1, 0x2, 0x5, 0x80, 0x1ff, 0x2, 0x3, 0xfffffff7, 0xca2, 0x3ff, 0x3, 0xffff, 0x7, 0x7fffffff, 0x80, 0x2134, 0x8, 0x1, 0x4, 0x2, 0xe, 0x9aa3, 0x6, 0x65, 0x7, 0x4, 0x6, 0x376, 0x7, 0x4, 0xff, 0x10000, 0x80000000, 0xff, 0x755, 0x1, 0x4949, 0xae, 0x0, 0x11e]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x8000}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_u32={{0x8}, {0x7a4, 0x2, [@TCA_U32_SEL={0x534, 0x5, {0x10, 0x1f, 0xb, 0xffff, 0xc, 0x25ea, 0x3, 0x1, [{0x4, 0x5, 0x9, 0x5e}, {0xc3, 0x7, 0x1, 0x80}, {0x8, 0xffffffff, 0x8001, 0x7}, {0xb6, 0x8001, 0x2, 0x8}, {0x9, 0x3, 0x3ff, 0x7}, {0x10001, 0x1, 0xc38, 0x4}, {0x4, 0x6, 0xfffffffb, 0x81}, {0x4, 0x4e, 0x8e, 0x4}, {0x401, 0x9, 0xfffffffd, 0x800}, {0x100, 0xffffffff, 0xb7, 0x9}, {0x4, 0x8, 0x0, 0x8}, {0x40, 0x81, 0x80000001, 0x2}, {0xa, 0x0, 0x6, 0x5}, {0x9, 0x4, 0x0, 0x872}, {0x6, 0xfffffff7, 0x9, 0x7fff}, {0x0, 0x9, 0x6, 0x20009}, {0x8, 0x7, 0x20, 0x200000}, {0x5, 0x5, 0x7, 0x6831}, {0x5, 0xfffffffb, 0x401, 0x7}, {0x6, 0x2, 0x1, 0x400}, {0xd8, 0x8, 0x80, 0x3}, {0x2, 0x9, 0xe, 0x72c}, {0x4, 0x0, 0x6, 0x9}, {0xb74, 0x3, 0x2, 0x8}, {0x4, 0x8, 0xc1, 0xcd20}, {0x5, 0x951, 0x78e, 0x2}, {0x1000, 0x6, 0x7, 0x81}, {0x4, 0xffffffff, 0xb10, 0xfffffb34}, {0x80000000, 0x4, 0x5, 0xc3}, {0x2, 0x4, 0x6, 0x10}, {0x2, 0x9, 0x8, 0x7}, {0x80000001, 0x1, 0x401, 0x6}, {0x10, 0x4, 0x8, 0x8}, {0x8000, 0x401, 0xd, 0x22000}, {0x4, 0x3ff, 0x5d, 0x1}, {0xfffffeff, 0x0, 0x2a948fd3, 0x221d}, {0xc, 0x2, 0x9, 0x6}, {0xffff, 0xaa, 0x6, 0x9bc2}, {0x9, 0x5, 0x6, 0x6}, {0x80000001, 0x7f, 0xfffffff9, 0x1}, {0x8, 0x2, 0x7, 0x8}, {0x0, 0x0, 0x8, 0x500}, {0xc, 0xff, 0x0, 0xeb99}, {0x5, 0x2, 0xfffffffe, 0x8}, {0x6fd79eb, 0xfce, 0xc, 0x40}, {0x8, 0xffff65c7, 0x7, 0x7}, {0x401, 0x10, 0x3, 0xffff}, {0x2, 0x800, 0x1, 0x100}, {0x0, 0x7, 0x7f, 0x8}, {0x5, 0x7, 0x400, 0x7f}, {0x7f, 0x4, 0xc230, 0x27}, {0x8001, 0x8, 0x8, 0x7f}, {0xc34, 0xc2ce, 0x4, 0xfffffffb}, {0xc8, 0x5, 0x4, 0x6}, {0x9, 0x4, 0x1ff, 0x4}, {0x9, 0x6, 0x3689, 0x9}, {0x2, 0x10, 0x5, 0x3}, {0xfff, 0xffffe7fe, 0x8, 0x5}, {0x8, 0x8, 0xfffffffb, 0x6d0e}, {0xb, 0x9, 0x5, 0x9}, {0xfffffb39, 0x8, 0x10, 0x8b9a}, {0x2f13, 0xdb7, 0x5, 0xfffff800}, {0x3, 0xf64, 0x4, 0x40}, {0x6f28, 0xcbfe, 0xfff, 0xbc}, {0x81, 0x5, 0x974, 0x1}, {0xffffffff, 0xd7, 0x3, 0xffff0000}, {0x0, 0x2, 0x39d}, {0x6, 0x0, 0x4, 0xa07b}, {0x7, 0x0, 0x7, 0x4}, {0xb54, 0x7, 0x2, 0xfc}, {0x0, 0x0, 0x8, 0x9}, {0x2, 0x2, 0x1, 0x73}, {0x9, 0x8, 0x9, 0x2e8}, {0x1, 0x3, 0x1}, {0xffffffff, 0x2, 0x8, 0xfffffffa}, {0x81, 0xffff, 0x3ff, 0x2}, {0x1, 0x6a, 0x8f, 0x8}, {0x87f, 0x9, 0x4, 0x3}, {0x6, 0xb, 0x4, 0x8}, {0x7f, 0x3359, 0xa, 0x19a}, {0x1, 0x8, 0x9, 0x10000}, {0xfffffffb, 0x1, 0xeef, 0x9}]}}, @TCA_U32_MARK={0x10, 0xa, {0x48, 0x5}}, @TCA_U32_ACT={0x224, 0x7, [@m_vlan={0xfc, 0x3, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xc5, 0x6, "53e6b67ed61a62c8bc5ad6598b5a9a0ae7ee87a5ec2f0b9834f573d249deb0437fd94045c0db0e0330eafe552f64dfde7632e8b6657468050a7ddcd7f1767b6068a0165b50f72d1bbe14d3db78c505658c654b65a2fd5e17ae0e400db324c41266e03c4306affac1d607d26d72d36eda7786dd8b89ac808fec01d14fc878043a3cf92a249b05be928f74168d407a3d19b91ea29e451ee14cd1fe89a7234749fc40457c141c1b05247679902bf399ee56ba068a550ed00ae30a2b8e33623056378d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_vlan={0x124, 0x1f, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xf0, 0x6, "51049e163330d98267bc9380cdb758d71fc3e19829f81c6914156f29d46cfcabc76d4e1d155a0dbc0887ed97bb031ca4331486a0eacd17d51808980f6c4b583d94a3045c4f75a5b49cda57650c99920e877d8581ca717d13ef9764165525a69d6d7cb89744f9b9253ed38a0ca8c9ebda394c4105497eb2604dacb39c4ab238ab3a233d76e9664e73dbb055dc56531c0891e001a627540546fdfdcc184a2b8531dfb5230d7b3df1a2dbf6ee656d26bc7160c0301aa49e81b8a2a7b2188cf7a94ee13ae97e16ab7fafa129131475bb8900ad5d44287fa264aaae75e107a79854c2608346c3cb901b34f1c66dfe"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_U32_LINK={0x8, 0x3, 0x4}, @TCA_U32_MARK={0x10, 0xa, {0xfffffff3, 0x3}}, @TCA_U32_MARK={0x10, 0xa, {0x7, 0x2}}, @TCA_U32_DIVISOR={0x8, 0x4, 0xa8}, @TCA_U32_HASH={0x8, 0x2, 0x3}]}}, @filter_kind_options=@f_route={{0xa}, {0x198, 0x2, [@TCA_ROUTE4_ACT={0x184, 0x6, [@m_vlan={0xdc, 0xc, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x77, 0x6, "9b23b24c9dc9f7e8f402f707675b39ca10231a880fcf702758c345cb0887ef5c92a7a40fb742bcec887eee8a19aff0a0fe680a909a5f1678481a68e4ea6e0c2b439e1354eff75c500c0a594dabe5109deea46254ff64544fe1623bc3f562c8ae2b9b392341037570283f305d29cc73677779bd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_connmark={0xa4, 0xd, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa4a1, 0x1, 0x4, 0x1, 0x9}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfff, 0xfffffff9, 0x7, 0x3, 0x5}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x10001, 0xffffffffffffffff, 0x0, 0x100}, 0x1994}}]}, {0x1e, 0x6, "38902f05340ef0a11940ca91730302b6eb5d67ca1418efd9b910"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x8a}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x1d}]}}]}, 0x1648}}, 0x40) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000380)={r3, r4}) r6 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) close(r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r9, &(0x7f0000000140)="62387112284014fd835875dca55a97cc1ff3e4cd3539eb9bdf7d47a48016213813b15f6afbaf66f9c3818eba0af2f44827bcb8f90911acfadb64e0e704211c90068ecffe981a08f6c30aba86c33262babc032b941bc86116b5c8dbf231e65fea7ebe068d30e80f9aa0729b8e17ac9eddab822b4d21647e40628f90c898b7e909a44f0f29a888b6fefdf55862e7de56d13da8b9906c33da77d88e80b375136b43e5b2456a2c26f56e7921ed0614a365", 0xaf, 0x44008, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) close(r6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010002000000207000000000000a98000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002c5c000980580002800c00018008000140000000030c00018008000140000000080c000180080001400000000a0c00018008000140000000020c000180"], 0xc0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r6, 0x0, 0x1100000000f336, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0f000000", @ANYRES16=r10, @ANYBLOB="c39203100400000000008900000008000300", @ANYRES32=r12, @ANYBLOB="14001d8010000080060005001200000004000400"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$netlink(0x10, 0x3, 0x15) writev(r14, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) recvmmsg(r14, &(0x7f0000007600)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2000, 0x0) r15 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01002cbd7000fedbdf251000000008003b000300000008000600", @ANYRES32=r16, @ANYBLOB="08000300", @ANYRES32=r16], 0x34}, 0x1, 0x0, 0x0, 0x44004}, 0x4040000) 2m42.079948751s ago: executing program 1 (id=1209): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@ipmr_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x90, 0x0, 0xfc, 0x11, 0x0, 0x5, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x1d}}]}, 0x28}, 0x1, 0x0, 0x0, 0xa800}, 0x0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000080)="76a869c41c837203137ad1a920fc2bb4", 0x10) 2m41.963437613s ago: executing program 1 (id=1210): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x1, 0x8, 0x0, 0x4, 0x8, 0xe3, 0x9, 0x0, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r1}, 0x8) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000240)={0x0, r0, 0x8, 0x9, 0x0, 0x4}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000040)=0x1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x18, 0x7, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8}, 0x94) 2m41.919792839s ago: executing program 1 (id=1211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4001d}, 0x48000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRESHEX=r4, @ANYRES8=r4], 0x50}, 0x1, 0x0, 0x0, 0x20008810}, 0x20040850) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='Lgg^', @ANYRES16=r6, @ANYBLOB="310300000000000000000b000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x304}, "793ba630b2de12f8", "c638280e9b39583cc7fd269640bc0334", "36ebbafd", "cf5506fd54cac505"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, '\t\x00', "1fd33c81cf7995313c09de00fd6ded74", '\x00', "1e00040000000100"}, 0xffe9) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000709fefffffffcffffff017c0000040042801400018006000600bd0a000006000c00bd0a0000040002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c800) r12 = socket$unix(0x1, 0x2, 0x0) bind$unix(r12, &(0x7f0000000000)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="31839690f06f4f000bd319000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={&(0x7f0000000380)="f22122fe01a9a348d26aa3e251492091d59189153f43bd1bbdec2170cdb7062f72157f0914ae484fa6051afc2414d588ffa0987cb4fc7f9b40cf8e6714497052ffd2331a0d108e29d8830da70462616bd5b1588c2155bfa142e6d9a30f0ded92952c7a88a341937ac112111ba0f31b1761ec3cfb2aba87f8451abb72f5e5ec573b22cd67abed7b0fb4296f0497c815761d2550f18484b76f72ddbe025d695ef14969a566d72fcfd5d11955c336d6bd678d08f6a700aa8f7d9a7761a4d640d17551c686edcb9141f2756486b2ab947aecb9d364eefa6236376fd705e742a5308229bdc143886f847c48adf0ffcd84b4", &(0x7f00000004c0)=""/186, &(0x7f00000005c0)="8bc0db800a3b2fe148a719595f7339f1bb58a42a8ac113da54513104854436c15aa4be0cd57923aab30d93c7ba05983b5d8f1a37e443b0e73e5fac80a7f57c2bd748eafc164e11c9782d49fde4b42aaa3bf6ec3ef4a6c0172a902c79423d05d159df7f8200229141e8243c76bd3b999c9201f24099469ae5db5abb8eaf4a3bfecf45ae0e2fd8dbf2de81c23ad73f5237b77173f522d65ddf5b3ef84795c72ee086007a64ff8945a10466f8ece34b95c77a9789352f24917f3f783f0e05bae692cbc9099adc74f090e5bd0a043411d25189baaf4d1cb2d4f484818df6bec4", &(0x7f00000006c0)="a97fda7f3ab143f75cfa8ce1683cb5116553e4737869807baf6d782588092c30f0de1cd5b8294aa1c68816a3e267a49b986155ecaf22fe7f0a0fbac29a8122b4989f6c16331ac1216e67d377fc2d86d9132dd417ea822f38451d355635982ced46a98c78259c08753cf317a9b2adeed5f5f610026ed31a7686e2770f4b07baa54846ddacf422e7761a824e9c413eae75a2b1ea25e373db", 0x3, r9}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000000000000000000000850000002f000000180100002020752500000000002020207b1af8ff00000000bfa101000000000007010000f8ff1cffb702000008000000b70300000400000085000000b400000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r7) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="58000000020601010000000000000000070000070500010007000000050000002c000780050014006f000000060005404e2300001800018014000240200100"/88], 0x58}, 0x1, 0x0, 0x0, 0x4004024}, 0x800) 2m41.239317927s ago: executing program 0 (id=1220): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010100}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x44, r1, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0x4}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x28, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x240008c0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000340)={'sit0\x00', 0xffffffffffffffff}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r11) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r11, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES16=r12, @ANYBLOB="0100000000000000000006000009050004000000000005000500e00000020f000700756e636f6e66696e65640000"], 0x34}, 0x2, 0x34005}, 0x0) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '!\xe4\'&\'@%}'}, @NBD_ATTR_BACKEND_IDENTIFIER={0xb, 0xa, 'filter\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20004800) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r8, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007800c00018008000100", @ANYRES32=r9, @ANYRES32=r10], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 2m41.022677934s ago: executing program 0 (id=1224): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000680)={0x14, 0x26, 0x1, 0x70bd2d, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX=0x0], 0x50) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f0000003c40), 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 2m26.604787334s ago: executing program 32 (id=1211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4001d}, 0x48000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRESHEX=r4, @ANYRES8=r4], 0x50}, 0x1, 0x0, 0x0, 0x20008810}, 0x20040850) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='Lgg^', @ANYRES16=r6, @ANYBLOB="310300000000000000000b000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x304}, "793ba630b2de12f8", "c638280e9b39583cc7fd269640bc0334", "36ebbafd", "cf5506fd54cac505"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, '\t\x00', "1fd33c81cf7995313c09de00fd6ded74", '\x00', "1e00040000000100"}, 0xffe9) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000709fefffffffcffffff017c0000040042801400018006000600bd0a000006000c00bd0a0000040002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c800) r12 = socket$unix(0x1, 0x2, 0x0) bind$unix(r12, &(0x7f0000000000)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="31839690f06f4f000bd319000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={&(0x7f0000000380)="f22122fe01a9a348d26aa3e251492091d59189153f43bd1bbdec2170cdb7062f72157f0914ae484fa6051afc2414d588ffa0987cb4fc7f9b40cf8e6714497052ffd2331a0d108e29d8830da70462616bd5b1588c2155bfa142e6d9a30f0ded92952c7a88a341937ac112111ba0f31b1761ec3cfb2aba87f8451abb72f5e5ec573b22cd67abed7b0fb4296f0497c815761d2550f18484b76f72ddbe025d695ef14969a566d72fcfd5d11955c336d6bd678d08f6a700aa8f7d9a7761a4d640d17551c686edcb9141f2756486b2ab947aecb9d364eefa6236376fd705e742a5308229bdc143886f847c48adf0ffcd84b4", &(0x7f00000004c0)=""/186, &(0x7f00000005c0)="8bc0db800a3b2fe148a719595f7339f1bb58a42a8ac113da54513104854436c15aa4be0cd57923aab30d93c7ba05983b5d8f1a37e443b0e73e5fac80a7f57c2bd748eafc164e11c9782d49fde4b42aaa3bf6ec3ef4a6c0172a902c79423d05d159df7f8200229141e8243c76bd3b999c9201f24099469ae5db5abb8eaf4a3bfecf45ae0e2fd8dbf2de81c23ad73f5237b77173f522d65ddf5b3ef84795c72ee086007a64ff8945a10466f8ece34b95c77a9789352f24917f3f783f0e05bae692cbc9099adc74f090e5bd0a043411d25189baaf4d1cb2d4f484818df6bec4", &(0x7f00000006c0)="a97fda7f3ab143f75cfa8ce1683cb5116553e4737869807baf6d782588092c30f0de1cd5b8294aa1c68816a3e267a49b986155ecaf22fe7f0a0fbac29a8122b4989f6c16331ac1216e67d377fc2d86d9132dd417ea822f38451d355635982ced46a98c78259c08753cf317a9b2adeed5f5f610026ed31a7686e2770f4b07baa54846ddacf422e7761a824e9c413eae75a2b1ea25e373db", 0x3, r9}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000000000000000000000850000002f000000180100002020752500000000002020207b1af8ff00000000bfa101000000000007010000f8ff1cffb702000008000000b70300000400000085000000b400000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r7) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="58000000020601010000000000000000070000070500010007000000050000002c000780050014006f000000060005404e2300001800018014000240200100"/88], 0x58}, 0x1, 0x0, 0x0, 0x4004024}, 0x800) 2m25.751781509s ago: executing program 33 (id=1224): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000680)={0x14, 0x26, 0x1, 0x70bd2d, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX=0x0], 0x50) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f0000003c40), 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 22.239755879s ago: executing program 2 (id=2421): socket(0x10, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x1) r0 = socket(0x10, 0x803, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710, @host=0x20, 0xff01}, 0x10) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0xfffffff9}], 0x1, 0x100, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="10000000", @ANYRES16=r5, @ANYBLOB="01002cbd7000fbdbdf250b00000008000300", @ANYRES32=r6, @ANYBLOB="1800508008000700020000000900010047d15aa6820000000a0006000802110000000000"], 0x40}}, 0x80) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x38}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r8, r10, 0x25, 0x0, @void}, 0x10) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) 22.085813098s ago: executing program 2 (id=2423): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x51}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x8, 0x1]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xcd}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x400]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x7800, 0x40, 0x4, 0x9, {{0x12, 0x4, 0x2, 0x4, 0x48, 0x64, 0x0, 0x1a, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, @dev={0xac, 0x14, 0x14, 0x42}, {[@cipso={0x86, 0xd, 0x0, [{0x2, 0x7, "a23ca16d9f"}]}, @cipso={0x86, 0x1b, 0x3, [{0x2, 0xb, "9cbe0fe21df921a32c"}, {0x0, 0xa, "6eae1f8e6c802ad4"}]}, @ssrr={0x89, 0xb, 0xc, [@local, @local]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x6, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x38, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xe2, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'tunl0\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x10, 0x1, 0x8, 0xa5b2, {{0x8, 0x4, 0x3, 0x8, 0x20, 0x64, 0x0, 0x3, 0x0, 0x0, @local, @multicast1, {[@timestamp_addr={0x44, 0xc, 0xc1, 0x1, 0x8, [{@multicast2, 0x2}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000700)={'ip6gre0\x00', 0x0, 0x2f, 0x5, 0x8, 0x5, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0xbc00, 0x6, 0x8}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000900)={&(0x7f00000001c0), 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xdc, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x6000}, 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80)={r5}, 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000ac0)=@generic={&(0x7f0000000a40)='./file0\x00', r10}, 0x18) sendmsg$BATADV_CMD_TP_METER_CANCEL(r9, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x40, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6c}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x48801) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x48c0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000d00)={{0x800, 0x5}, 0x100, './file0\x00'}) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000e80), r9) sendmsg$L2TP_CMD_TUNNEL_GET(r9, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, r11, 0x300, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x27}}]}, 0x1c}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000f80)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000fc0)={{r12}, "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"}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002000), r9) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000021c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002180)={&(0x7f0000002040)={0x118, r13, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5d}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_REG_RULES={0xd4, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3a2a7784}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xd5a}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xb7866f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2f}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}]}, 0x118}, 0x1, 0x0, 0x0, 0x40}, 0x4080) getpeername$packet(0xffffffffffffffff, &(0x7f0000002240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002280)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000022c0)={@private, @empty, 0x0}, &(0x7f0000002300)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000002340)={@mcast1, 0x0}, &(0x7f0000002380)=0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(r9, &(0x7f0000002500)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x22000000}, 0xc, &(0x7f00000024c0)={&(0x7f00000023c0)={0xfc, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40014}, 0x4000040) r17 = accept4$inet6(0xffffffffffffffff, &(0x7f0000002540), &(0x7f0000002580)=0x1c, 0x800) setsockopt$sock_attach_bpf(r17, 0x1, 0x32, &(0x7f00000025c0)=r10, 0x4) sendmsg$netlink(r9, &(0x7f0000003980)={&(0x7f0000002600)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40000000}, 0xc, &(0x7f0000003940)=[{&(0x7f0000002640)={0x1104, 0x3a, 0x200, 0x70bd28, 0x25dfdbfe, "", [@nested={0x1079, 0x133, 0x0, 0x1, [@nested={0x4, 0x79}, @typed={0x4, 0x110}, @typed={0x8, 0x65, 0x0, 0x0, @pid}, @nested={0x4, 0x12b}, @nested={0x4, 0x8c}, @generic="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", @typed={0xd, 0xef, 0x0, 0x0, @binary="a0269e1947992b9f0b"}, @generic="5d83baa39ddf48cf13fb6a4a26129a3eee46a7f84b3ac1b8a12a00d6a4a21b7cb23f01d604e54f2fd30a03ce75f45fc72af76c04e4d772159da604157578a1bc1eb91188e5aae1576272290514"]}, @typed={0xc, 0x69, 0x0, 0x0, @u64=0xfffffffffffffffe}, @typed={0x8, 0x125, 0x0, 0x0, @ipv4=@empty}, @typed={0xa, 0xcc, 0x0, 0x0, @str='\xbb\xbb\xbb\xbb\xbb\xbb'}, @generic="0c3b84dba6f47b6cafe37338", @generic="6340565795015f0ee6c093bd2f506d4f0c0db656228462993329eb798bd6f435b5c8eff38de42ee1bd16e736a9c35299747e013fc897d6a791f9a75ddb5d11cc6d1df6934adec13f80b9"]}, 0x1104}, {&(0x7f0000003780)={0x15c, 0x29, 0x20, 0x70bd28, 0x25dfdbfe, "", [@generic="3b7de06ffeb6fc7a143dd220379eb2d987187d07b1764d5e9296c12ebdc70b2cdd53f022491750b32aaac3fd4098ea4d40ec7df3b4c8d2ce47e3ddf58bccae148e02c598ad4a588a6d", @nested={0xff, 0xa5, 0x0, 0x1, [@nested={0x4, 0x14d}, @typed={0x14, 0x14a, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @typed={0x8, 0xb1, 0x0, 0x0, @fd=r9}, @generic="359050ea88e12debda34baddb20b7642a57ed5129c4a1c26a3d05a51ead5e451c6d6edb346c940035e8640a96e16f0c41332649394a23714de1d9ccaf85e6153254782a793d53a303bb7cd9ecabb1839a319fcdf1da762edce3620284f7aa78a53f798a3a8194575621fa87c5d639e95dcf9ba931de7e48a0994f4baa9355623da0a5ef5f8b86eb9ceb688fab3f66af0f4dc070426349c8040666cb3b9f9e954a7010d4238c496f1f2cf03b585ae3d6af38af308ec6ce4e1f2c4b6b627ff58d623bdba20bc97ffe613eaaddd7ab6eb", @nested={0x4, 0x127}, @nested={0x4, 0xef}, @nested={0x4, 0x33}]}]}, 0x15c}, {&(0x7f0000003900)={0x38, 0x23, 0x100, 0x70bd2c, 0x25dfdbff, "", [@typed={0x8, 0xf5, 0x0, 0x0, @fd=r0}, @typed={0xc, 0xb, 0x0, 0x0, @u64}, @typed={0x14, 0x11c, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x38}], 0x3, 0x0, 0x0, 0xc0}, 0x4080) 21.961110761s ago: executing program 2 (id=2426): unshare(0x8040600) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000024000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000005000000020000000700000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f00000002c0), &(0x7f0000000580)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x19, &(0x7f0000002280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x466}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) (async) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2df) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x13, &(0x7f0000000100)=0x7, 0x4) (async) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r5, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 32) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601040000000000000000160000090500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4) (rerun: 32) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="ecb2dac066baa69100000daf0000000000000200"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x30, r8, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x1}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r11, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r12, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x4c, r8, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x9, 0x28}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4000}, @NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0x9}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) 8.699451945s ago: executing program 3 (id=2514): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) (async) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) (async) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0x7) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x100) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) (async) ioctl$TUNSETPERSIST(r6, 0x400454c9, 0x1) (async) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f00000000c0)={'ip6gretap0\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd26, 0x0, {0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40011}, 0x24040840) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="07000000040000001800000042a0000000000000", @ANYRES32, @ANYBLOB="010400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r8, 0x0, 0x0}, 0x20) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRESDEC, @ANYRES64], 0x48) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r9, 0x80049370, 0x0) 8.698315385s ago: executing program 2 (id=2515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x1, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYRES8=r1], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000009b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0xb0}, 0x20000000) 8.539543442s ago: executing program 3 (id=2519): r0 = socket(0x2, 0xa, 0x300) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000045"], 0x48) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r2}, 0xc) (async) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000480)={&(0x7f0000000300), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x4000800) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x2, 0x6, 0x3, 0x8, 0x2, 0x4, 0x8}, 0xc) (async) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90005"], 0x14}], 0x1}, 0x0) 8.502573398s ago: executing program 2 (id=2520): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, 0x5, 0x9e1}, &(0x7f0000000180)=0x90) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockname$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600050a000008001c00", @ANYRES32=0x0, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 8.419379353s ago: executing program 2 (id=2521): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES64=r1], 0x94}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc0000000001010200000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00418014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000000c000280050001000000000008000740000000002800068008000200ac1414aa080002006401010014000400ff010000000000000000000000000001"], 0xbc}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r3, &(0x7f0000004c00)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000007e00)=[{{&(0x7f0000005280)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, &(0x7f0000005300)=[{&(0x7f00000052c0)="e70e", 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4040) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000000000400200000008000300", @ANYRES32=r5, @ANYBLOB="0c009900d308000079000000080026006c0900000800a08d1d4a2a390800270002"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000020a010100000000000000000300000508000240000000010800024000000003140000001100010000000000000000826700000a"], 0x4c}}, 0x4040051) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000070645010000000000000000020000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) sendmmsg(r7, &(0x7f000000b640), 0x0, 0x24000014) splice(r9, 0x0, r8, 0x0, 0x7ffff000, 0x6) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYRES32=r7], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000060a01010000000000000000e8fb085d93b83930bc9e025378a00a000001140000001100010000000000000000000200000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x44004) 7.199268034s ago: executing program 3 (id=2522): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = accept4$x25(r0, &(0x7f0000000040), &(0x7f0000000080)=0x12, 0x80000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000180)=0xffffffffffffffff, 0x12) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%ps \x00'}, 0x20) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1a, 0x7, 0x10001, 0x8, 0x20500, r4, 0x2, '\x00', r5, 0xffffffffffffffff, 0x4, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r4, 0xffffffffffffffff}, 0x4) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0xb00f3000) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f00000003c0)=0xfffff40e, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x32}, 0x4e23, 0xe, 0x4e21, 0x4, 0xa, 0x0, 0x20, 0x3a, r5, r8}, {0x1, 0xf4b, 0x72, 0x8, 0x0, 0x6, 0x1, 0xf}, {0x200, 0x1, 0xfffffffffffffff7, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@multicast1, 0x4d6, 0x6c}, 0xa, @in=@loopback, 0x3503, 0x0, 0x3, 0x5, 0x2, 0x9, 0xa01}}, 0xe8) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$inet6(0xa, 0x4, 0xfffffff7) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000880)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) r10 = epoll_create1(0xd3065a8304fad430) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000900)=r2) r12 = socket$inet6(0xa, 0x3, 0xff) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000940)={0x0, 0x9c2}, &(0x7f0000000980)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r12, 0x84, 0x19, &(0x7f00000009c0)={r13, 0x2}, 0x8) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f0000000a00)={0x1, 0xcd9d, 0xd}) ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000000a40)) socket$kcm(0x29, 0x5, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040010}, 0x44010) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@bloom_filter={0x1e, 0x18, 0x4, 0x5, 0x60000, r6, 0x10, '\x00', r5, r10, 0x3, 0x3, 0x1, 0xe}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000e00)={r14, &(0x7f0000000c00)="1f8f6615280aa1c0f1f174c48340a69ac03e2e59299a7b6cdb8c40d874a7cff6011b94b4ef10fbe57fde578d04256e4491198c063043ea470a95fed1f339ff51e008df24d51d9b8b055a68d6c2a81bf5794cc3eb6cceb52bcfc3ff8576fd03feec62c5eef19c1c8b9d4e89e30999228e8874721f36d8bee45a3dbe913d577bc9cb5888dfbb57e489a74bcda65a4345ddd867b45092eab6c626e90a978b8548b77ca8efc64af11ff6dc697db12a807b85c837dc26c19d2ffdeb0c706fb10919228483aaac2c20a343822b", &(0x7f0000000d00)=""/208, 0x4}, 0x20) sendmsg$TIPC_CMD_SHOW_PORTS(r11, &(0x7f0000000f40)={&(0x7f0000000e40), 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x81) 7.171660285s ago: executing program 3 (id=2523): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000040)=0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) unshare(0x26020480) read$alg(r3, 0x0, 0x0) write$cgroup_devices(r3, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x10000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x73f}, 0x1c) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) close(r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd01d8ca2fcefd9}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.519360546s ago: executing program 3 (id=2529): pselect6(0x40, &(0x7f0000000000)={0x7, 0x9, 0x5cb2, 0xee1, 0x8c0, 0x9, 0xfffffffffffffff7, 0xff}, &(0x7f0000000040)={0x8, 0x1, 0xd7a, 0xfffffffffffffffa, 0xbc, 0xfffffffffffffffe, 0x0, 0x7fff}, &(0x7f0000000080)={0xf, 0x8, 0x0, 0x84be, 0x3, 0x5, 0xa, 0x7}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0xfff]}, 0x8}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000200)=0x6) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x71}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x20, 0x24, [{0x1b}, {0x2}, {0x36}, {0x60, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x9}, {0x1}, {0x16, 0x1}, {0x4}, {0x4}, {0x16, 0x1}, {0x16, 0x1}, {0x12, 0x1}, {0x16, 0x1}, {0x60, 0x1}, {0x5}, {0x5}, {0x1b, 0x1}, {0x60, 0x1}, {0x30}, {0x24}, {0x6, 0x1}, {0xb}, {0x24, 0x1}, {0x16, 0x1}, {0x60, 0x1}, {0xb}]}, @NL80211_ATTR_HIDDEN_SSID={0x1d, 0x7e, @random="d3bfa15df118a4f237cadca0408669b852d5ebc81003795ebe"}]}, 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x27b1649c9d021d76) (async) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x400) read$alg(r2, &(0x7f0000000380)=""/179, 0xb3) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000440)) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0xc, 0x5, 0x1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x20, 0x40, 0x6}}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000580)={0xffffffffffffffff, 0x7, 0x95, 0x3ff}) sendmsg$nl_route(r3, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@bridge_setlink={0x38, 0x13, 0x410, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0x0, r4, 0x141, 0x12090}, [@IFLA_TXQLEN={0x8, 0xd, 0xe}, @IFLA_NET_NS_FD={0x8, 0x1c, r5}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x8001}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000800}, 0x0) (async) write$tun(0xffffffffffffffff, &(0x7f0000000680)={@val={0x0, 0x88f7}, @void, @eth={@empty, @remote, @void, {@mpls_mc={0x8848, {[{0x9}, {0xffffd, 0x0, 0x1}, {0xffff9}, {0x46f3e, 0x0, 0x1}, {0x4}, {0x1516, 0x0, 0x1}], @llc={@llc={0xf8, 0x8e, "af29", "9d4bd83cf1ad9e7198643bdca7f1a168a44beb3e9496d4feb37a5a5c4ace1f784a009a189385886410045f186c3d3c577832ea6db1115b8862cecfaa55394153957fd867a0848993ca4cb8c0858c"}}}}}}}, 0x7c) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000000700)={{r1}, "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"}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000001700)=0x1ff) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000001740)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, r4}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001780)={r3, 0x8, 0x9, 0x6}) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f00000017c0)) recvmmsg(r5, &(0x7f0000003a00)=[{{&(0x7f0000001800)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001880)=""/26, 0x1a}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/164, 0xa4}, {&(0x7f0000001a80)=""/147, 0x93}, {&(0x7f0000001b40)}, {&(0x7f0000001b80)=""/94, 0x5e}, {&(0x7f0000001c00)=""/241, 0xf1}, {&(0x7f0000001d00)=""/205, 0xcd}], 0x8, &(0x7f0000001e80)=""/116, 0x74}, 0x8}, {{&(0x7f0000001f00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000003580)=[{&(0x7f0000001f80)=""/233, 0xe9}, {&(0x7f0000002080)=""/193, 0xc1}, {&(0x7f0000002180)=""/104, 0x68}, {&(0x7f0000002200)=""/210, 0xd2}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000003300)=""/74, 0x4a}, {&(0x7f0000003380)=""/176, 0xb0}, {&(0x7f0000003440)=""/159, 0x9f}, {&(0x7f0000003500)=""/86, 0x56}], 0x9, &(0x7f0000003640)=""/100, 0x64}, 0x2}, {{0x0, 0x0, &(0x7f0000003940)=[{&(0x7f00000036c0)=""/83, 0x53}, {&(0x7f0000003740)=""/32, 0x20}, {&(0x7f0000003780)=""/58, 0x3a}, {&(0x7f00000037c0)=""/78, 0x4e}, {&(0x7f0000003840)=""/55, 0x37}, {&(0x7f0000003880)=""/164, 0xa4}], 0x6, &(0x7f00000039c0)=""/49, 0x31}, 0x80000001}], 0x3, 0x12001, &(0x7f0000003ac0)) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003b00)='./cgroup/syz1\x00', 0x200002, 0x0) (async) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r5, 0x10f, 0x84, &(0x7f0000003b40), &(0x7f0000003b80)=0x4) (async) sendmmsg(r6, &(0x7f0000005700)=[{{&(0x7f0000003bc0)=@xdp={0x2c, 0xa, r4, 0xc}, 0x80, &(0x7f0000004e00)=[{&(0x7f0000003c40)="ba78b88a5a68a37aed507780799d0e975f303095cd46d0a41a6181b3ff580f1a53c61b1e58854aa1678880f74a3392016f5d52d238a93c7b3a4aaadf8592", 0x3e}, {&(0x7f0000003c80)="9bd14b20d5a9173c52aff175c4e305d071b4fabf03ba6ac92cde7b5f405cfe3c480358942e7865d0966babdb55a3ba6c4e7e60675b598d522b4350ab68e78d9491871016a220e5ecab6b2e425b3d2a83b8d57280ea08643cb0eef08e93465d0ae82dca29107872e4829c839a5dc4fc6e2c2507aa17a415d51727f3", 0x7b}, {&(0x7f0000003d00)="dfef216e63ec62f93d839ef42045d0ebd747f4969db5e85920addff35ea12e0a638c729e73a86f55c216bdfa03defe141bf52809848300e03c14853a09c40656d8fd21b4030904919ec043e659b6", 0x4e}, {&(0x7f0000003d80)="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", 0x1000}, {&(0x7f0000004d80)="a741b835cac9b9856b1b0b454a4255079226876d6158b8627c72261777ce10ec97ccf270a44c64d6bf1031965f91953c4c692189c2b7c7e83f48798bedec358b74098267755e7e3beb2509f0c245dc885770cf7ff621eb230142389f159ef1ec2b9609e2b8d7144c54256a", 0x6b}], 0x5, &(0x7f0000004e80)=[{0x60, 0x23fd323584c306fd, 0x1, "856780aa8df3668d81a7f6f60fc40e2bc98949ab1e354ad4f330e941371ba408e665eac3fc3a608f662c9e0269fe85cd47fe09d2717082b400297070a9b20dda77b30d7b61f28adb50cc7ccae9f9"}, {0xe8, 0x3a, 0x2, "f6ff0d17a697517423994f3b45c0f56cd8cb8b04b7eac2ed8383cc9de50c61b2a40bbf9e856abd232a0f85a275882242a92fc2a4ca7d301d3512978b9e1025a87d8b82176f566e005f9fd7b2de96870fcca70598b4004913f864758bf95c8458656968eaae44ffb5fdf46c1a282f43ac98e090f11c0609d63c30e1e57caa7f4c1845bfd8ae3b44edefb7f7ecf434a590b20b37bc4e4195749d0de4163058f126be0b8fc1ee4691deb33b3bcd1c4861cf9463869842757c7fbdea078d9d639590802b88c604918079b6c49558f6b227ed4834687c36"}, {0x18, 0x0, 0x8, "3078f65aca38"}], 0x160}}, {{&(0x7f0000005000)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, &(0x7f0000005380)=[{&(0x7f0000005080)="c67e26386ff1d00f0d94e0dc5c21611d9ad6b777c3c303a79ac5984e538a4eea17af3e8ee637d1cdbf28a96bbc509ef3a68cb3b5e1b49902a29de7ef23ed7807147238823a6eead7cc9002ba9b64e93c63b577caebd1efc02e5b4821ef8dddb707f04eb4858d95ec1022d163f838c41b62336c73dd9d8fa335298fc0742082efda1c3a345a37f02e74ea0bfc21ff00d5e63c4ea297d9b8c69e71a16d5aeaf359fef4a377f5c9580ac23d37368aad22d992a51d", 0xb3}, {&(0x7f0000005140)="f00f34fb8eff68ddbe8afd00663aab679ec46cd22daede9e1bfe840f5bf93c64bf0664937a8999200589aef03c6210bc64dbce851b3b8fb044b803e7735848ecbba21d1fdf4f7df35b0eff3c830fa2c89ee28d64426ad33eda279b8df07286f55851ba9a884669ddc85713a99ac5a28c4c4c52b8fae22347bb382b4ecae396cc9dbb91bc6309fb237d3cf60f8b398229b2a2d4140d69a32317e877bd24455db222f8532e828d95ec3065074cafd31bd3a5b54dd9086ff6e68ceacfae88a028a827e42856e3c7d0d004501f191d2f6061205b411a36f072182b428d5f86f757854775d1ea732e3fca2ec37ab1b97fbfcdeb50523d82c615d8", 0xf8}, {&(0x7f0000005240)}, {&(0x7f0000005280)="77546930bda1d3be465654277146a667ba", 0x11}, {&(0x7f00000052c0)="9b2d581257ce472775ab4465efa95c0ade9502705a777eabefa11564d07995a0ece03efad6b166c4625c2c8050ff735cc8c2bac0cc41bb7c74512909cde6f9a0b94e77d0753cfeebcfee8214ee5603daafa9ada43968a261c0dd036cf244df5fdf57fe1dd7e9", 0x66}, {&(0x7f0000005340)="183b1a3e5951e1a5486b21cf6c7b23b462ab939df7b11c8642496a3a73", 0x1d}], 0x6, &(0x7f0000005400)=[{0x60, 0x1, 0x7, "16e29cd7dd679ef594362ec12f8d330adeaff60acb3bbec472961e7b3f7ae6285cfa44d0a49a0e3c6ed7f975e70dd1c2a0186ec4aaddd3cfffe3fa63c3f9280959deea1f40b5c6e2c16642"}, {0xa8, 0x10c, 0x8, "78f17ca451ae8d1aac9b5e7253f3907e67bf22d09f0d417a528f05cbf70b71b75bdeb984044a96928f2aeecd33dabd2244b0df9e9de0d7d1f5ea91236f5b4c65e73e43ad3d884034128d4e98e5ca0b64b906d3214aa80a369900f9446eee1b4d2192f82301bdf62d9c474ee0ae34c7fceb35282e7c8c1b70acdc578c43556626701cd740d1b24b43f25ae1973edc73b742"}, {0x98, 0x104, 0x0, "fbd114247e0a28bbf47f5999ce3b6591c75d968219148a3e40cf2122d9ed5f5e1f55bdc3726a57117c898f807cc9157974bc784d1d75d58466fee36bcef874c84ca4b57dfcf365f1d33a74b506a371dbbdc395abbab9680c5129969d37d80692ad7df5d397fdd90c4074883bb04288603afbc48d0edd27c59778f664dbf3b40b5458dfdd"}, {0x68, 0x107, 0x40, "d59cfb5b90d1790d1ae525a5d7acc51b60e55f1d4b82caa73723e456a8bc6819d0ee9d1ec717a1bd037b29d89271955363705c407dd104184b76b3d8c7d86dbf409bc2168c94c8f9b3165f23915bf55aa5aff65b3ca7"}, {0xc8, 0x1e1, 0x8d, "49a4a1d6136edaca4b4a00fde22182503c8d9099d0343188da78fa521db33607035c815207979f2d97d3fbd2839b039887f81f84506ec403c069ee5fd3c832515ec5c96b35b1f0c3c050c41117649598b820d9325e9ff88fcaeb913b49ecdb1531dc6db2e8576f8f91761fba2b231d754955d23a36f36e436f36b8c8e34d670f31068fc9cda1995cb6f336dec11c1105992983776d695d3744eeaeff3b92d66e4361a63964a079f01549e99f00b61ff94b059fd212658c0e"}], 0x2d0}}], 0x2, 0x4000) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000057c0), r1) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000005980)={&(0x7f0000005780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005940)={&(0x7f0000005800)={0x12c, r7, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x457}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x81}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async) epoll_pwait(r5, &(0x7f00000059c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000005a40)={[0xd]}, 0x8) (async) r8 = socket(0x3, 0x1, 0xff) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000005ac0), r1) sendmsg$ETHTOOL_MSG_WOL_SET(r8, &(0x7f0000006180)={&(0x7f0000005a80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000006140)={&(0x7f0000005b00)={0x620, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_SOPASS={0x88, 0x3, "16d5ee08833d353e3d4c2c827672a104b711ff8318a56cace5c309acf1c059d3901a6114374f7e14884dedcc790050d2ae58dbe1b13bf5a5534b3fbd890bacce70f5d3833d2c4b5c91381cf63758e001ea64677e7b0d42855498d0f5ad8b6fcafff7a3397315acd3c86bab61b78ac3d0d2cf5fc0b82d8ebbdb03bf2c3a706b0fcd34ac8c"}, @ETHTOOL_A_WOL_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_WOL_MODES={0x178, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x39, 0x5, "add0640fb78ae2314159ec003c0ea2083caa80dcf1675eb008b3567cbd58300673f151cffe7578a29ea94cd76c3d0ad619f185d836"}, @ETHTOOL_A_BITSET_MASK={0x54, 0x5, "b03768b2863628373db9b9fdeb1a00123304ead15b724972754b9c06ee23b7f11a03736a482fbb01fbd3af82892dae8d7f7d337ebc73e1d221e553b88272dc07ee30fdcee819b835bf144a281be9a5f9"}, @ETHTOOL_A_BITSET_MASK={0xb5, 0x5, "63de1ce7bb97824ffd8e64d69c64c7f5ff6447619a7703ab0c822ad7df04d921e916250fab76b4c726f9481da02197f7f5f56d2f688ea289475e7a90a308d19147e913c6936f602901fbc90aeda369201915dfb3d1f68778ab129e39baed08ac4ab5f781d83e69cab5de5154a3980644545798b588ef38b1757cee5f8f9eaa313afb6dfefb71f95312c0e9097fdfb517aa5394aa98f7d95183fb68e4b0aa7d5b5f8e450c75e4912e41183cba23148caefb"}]}, @ETHTOOL_A_WOL_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_WOL_SOPASS={0x1f, 0x3, "b710bdb372bc089f64489487576f94726020939da9b4ac2265277f"}, @ETHTOOL_A_WOL_SOPASS={0xbe, 0x3, "308a6db9d8df9e30581d388d46da2adf409fcc42b81334bced520d68e8f87f90c057223c95113de04d7eefad61182fa574565f267630c7eaa3f99e338e9a2c81d2903d76d03d3ca8a19e8a64423089c1b3f698a87f6de0464f4f1fe1c4bc2437d0a4b12d244820b1c3234928fc2fef2ffad472c2e354c5e5078ced7c77a40eb6c8903c227ed2ead5779ed4d263453313218078872290609a52b1d31c6fe5177199fce6a0d831a08a8215fa191d01ed2b58d3347357a06b19290a"}, @ETHTOOL_A_WOL_MODES={0x2b4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xae, 0x4, "2d727c13022e656d82975cadc5ecfc5ac325e7fe71d4b63e324e3ebfee8321da4d08bed141abf3244ec8898bad8e789ab4896683bfe52297884523e0dce35f1fe17d5937b9497ebf1b5bc92b2252137cf42327b1fdcc44e2b3091472741530909cd496969786ff0ef3d5deaf77e45fc6a036721f3e201dd5722548402f6686ffed21ba1c3493677077e1cf27341c59905c350cb33fbeed98505b609e7fd127a7eac7228dd13f4f0fb0a9"}, @ETHTOOL_A_BITSET_BITS={0x194, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '#$\\,($(S[,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ':]{{.\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '#-^\\@\xf3/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '%{\xd4%./\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '.![*-&\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}}\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '/!:.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-{*-\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc47}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x620}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000006200), r5) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000062c0)={&(0x7f00000061c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000006280)={&(0x7f0000006240)={0x2c, r10, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xe}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xd71}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x4c000) 6.294743517s ago: executing program 3 (id=2532): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001640)={&(0x7f00000018c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x5) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001640)={&(0x7f00000018c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x5) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_buf(r1, 0x29, 0x15, &(0x7f0000000140)=""/23, &(0x7f0000000180)=0x17) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010300000068416a8fb4e89743090500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) (async) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010300000068416a8fb4e89743090500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000100)=0x4, 0x4) (async) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000100)=0x4, 0x4) close(r4) (async) close(r4) sendto$packet(r0, &(0x7f00000002c0)="11073e103b28", 0x6, 0x20020000, &(0x7f0000001600)={0x11, 0x9, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendto$packet(r1, &(0x7f00000004c0)="956cc7bc3b7e67dbdf3e583a414828661ba464bbd47c88ddb8d7bb728b877709c7f746eea6ccb8d493d7933c93451cfe0039536741090b8e39c824e1df936b0cd4ce6248c3b6cafacbdd0866eae6a24e5082c0779038c12dbc00b006cf713819e4db434e8e5e51a5aca280054a3f961a14bab55adbda9c2613c27911c9887182990a9618a37db2ec54c9bbd3e4debbfd52cf99f49e1e3b8b5a1d94329437891837f44064c0706c792f9eab66a890e760089f2906cd29fb9fd9cb16dc11c87844d828d9f9a44a5543f11cff2041dc501062", 0xd1, 0x4008000, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x41000, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x41000, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 2.84040073s ago: executing program 4 (id=2553): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x7, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @random="1553ff41cf11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dda00", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x13, 0x2}, @generic={0x4, 0x2}]}}}}}}}}, 0x0) vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f00000002c0)="22879d4a76", 0x5}, {&(0x7f0000000200)="ea1060", 0x3}], 0x2, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2.6192595s ago: executing program 4 (id=2555): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x3, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x3, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, @in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}], 0x38) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x9, 0xe}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x67}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8}]}}]}, 0x44}}, 0x0) (async, rerun: 64) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) (async, rerun: 64) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r8, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r9, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000001540)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x14}, {}, {0x4}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x24}}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x6, 0x1006, &(0x7f0000001b00)=""/4102, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f00000000c0)={@tipc=@name={0x1e, 0x2, 0x2, {{0x41}, 0x2}}, {&(0x7f0000000000)=""/71, 0x47}, &(0x7f0000000080), 0x44}, 0xa0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r10, 0x29, 0x48, &(0x7f0000000100)=0x401, 0x4) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f00000007c0)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000980)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)=@allocspi={0x13c, 0x16, 0x400, 0x70bd2d, 0x25dfdbfc, {{{@in6=@remote, @in6=@private2, 0x4e20, 0x6, 0x4e22, 0x0, 0x2, 0x20, 0x80, 0x4, r6, r11}, {@in=@private=0xa010101, 0x4d5, 0x3c}, @in=@multicast2, {0x56, 0x10000, 0x2e, 0x2, 0x7ff, 0x2, 0x7}, {0x3, 0x9, 0x9, 0x506}, {0xfffffffb, 0xffffffff, 0x4}, 0x70bd27, 0x34ff, 0xa, 0x2, 0xc, 0x20}, 0xffffffff, 0x5}, [@extra_flags={0x8, 0x18, 0x9}, @address_filter={0x28, 0x1a, {@in=@multicast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa, 0x3, 0x1}}, @srcaddr={0x14, 0xd, @in=@remote}]}, 0x13c}}, 0x40000) (async, rerun: 64) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r12, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xc0, r13, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb58}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async) r14 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mtu(r14, 0x29, 0x17, &(0x7f0000000b00)=0x3, 0x4) 2.441114661s ago: executing program 4 (id=2557): mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r0 = socket(0x18, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x30, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@remote}]}, 0x30}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000001c40)=0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) getsockname$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, &(0x7f00000001c0)=0x20) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000040)=0xb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) r3 = accept4$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c, 0x80800) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f00000002c0)={'filter\x00', 0x0, [0xd69, 0x8001, 0x3, 0x7ff, 0x4eaa]}, &(0x7f0000000340)=0x54) clock_gettime(0x8, &(0x7f0000000280)) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000040)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="380000002300010324bd7002fadbdf25010000001800028014001c0000000000000003f86f161ed927187f830000000000ac1414bb00"/66], 0x38}}, 0xc004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, r6, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, &(0x7f00000023c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000002c0)="474d107a", 0x4}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001300)="1f", 0x1}], 0x1}}], 0x2, 0x880) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={'syztnl0\x00', r4, 0x1, 0x8000, 0x8, 0x6, {{0x1d, 0x4, 0x3, 0x2, 0x74, 0x66, 0x0, 0x9, 0x2f, 0x0, @loopback, @broadcast, {[@lsrr={0x83, 0xb, 0x13, [@multicast2, @private=0xa010102]}, @timestamp_prespec={0x44, 0x3c, 0x93, 0x3, 0x6, [{@local, 0x5}, {@empty, 0x9}, {@rand_addr=0x64010102, 0x9ed}, {@remote, 0x5}, {@multicast1, 0x6}, {@broadcast}, {@multicast1, 0xb9}]}, @rr={0x7, 0x17, 0xe1, [@dev={0xac, 0x14, 0x14, 0x43}, @local, @empty, @remote, @local]}]}}}}}) 1.910646024s ago: executing program 6 (id=2561): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000076000d0b0040000000000000030000edff00000008000a00010000000800010001"], 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffc6c, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r2, 0x731, 0x70bd28, 0x0, {0x38}}, 0x14}, 0x1, 0x2}, 0x4c880) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3f, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) epoll_create1(0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x70bd29, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x2}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x10000000000, 0x3, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3fd, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r3, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000076000d0b0040000000000000030000edff00000008000a00010000000800010001"], 0x28}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffc6c, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r2, 0x731, 0x70bd28, 0x0, {0x38}}, 0x14}, 0x1, 0x2}, 0x4c880) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3f, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) epoll_create1(0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x70bd29, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x2}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x10000000000, 0x3, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3fd, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) (async) write$rfkill(r3, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) (async) 1.909886278s ago: executing program 4 (id=2562): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0b0000001000000000000000", @ANYRES32, @ANYBLOB="f116538dba857d943a3eb547f4ca5bac4394b65dbeba9330de4ce2c38b42aa4e7b1d39de83af3a50c44b00262eb33b82fc229f4bc683b3f46774c2becbb4b55318c0e864427f5df04677436d52f00623d9e5573533ec47cb736c4668cc4eb7a0ef2401794db81400954be09c6b57c36a17348764c25ada11b1e19193c449a9a04f8d4f5fa387c32b1d424298eb7801170228c45b6106cf1f5f97396493bdafea3b5a16ff7c38990fcc6c21c5d78c4dacb58c00f628cf", @ANYRES64=0x0], 0x20) r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x40400) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78", 0x1b}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0xff51, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010105}]}, &(0x7f0000000080)=0x10) socket$xdp(0x2c, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\t\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000380), 0x0}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newnexthop={0x40, 0x68, 0x1, 0x100007, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x800040}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080d9}, 0x40000c4) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r3, 0xffffffffffffffff, 0x3b, 0x0, @val=@iter={&(0x7f0000000000)=@map_fd=r1, 0x10}}, 0x20) 1.852437094s ago: executing program 5 (id=2563): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd0f000040", 0x6}], 0x1, 0x0, 0x0) unshare(0x2c060000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x19, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r3, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x8, 0x0, 0x0}}, 0x10) unshare(0x24020400) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000400001002abd70000400050001"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045"], 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x4d4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x8}, 0x10}, 0x94) 1.63839435s ago: executing program 4 (id=2564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$xdp(0x2c, 0x3, 0x0) sendto(r4, 0x0, 0x0, 0x48041, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a11000005"], 0x18}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0xf8, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xdc, 0x1, 0x0, 0x1, [@typed={0xd8, 0x6, 0x0, 0x0, @str='\x80\nL\xca\n\xec/\xe2\xf8S\x9a\xbde\x90\x1e\xb3\'1B%J\xe2\xff\xfe\x8bl{\x88\xe3;\x10\x03\xb2\xa7Y<;\x04\x96\x06\x84k\xdb\x1d\x11\x99\xf5\xadS\xdc\xd4=\x90\xcc\xca\x82\xa5%\xa7\nsF\xa2\xae\xba_!X`c\x10\xecE\xff\xc8cA\n7\x9b\xb7\xf0M\xe3\x13\x03-\xdcr\xd2\xdf8mC\x006w\xbc\xdd&\x15\x87\xc9\xe8m_\xbc\xef\xf1\x01A\xa3E|\x8f\x81*x>xJ\x8e\x94\x88D\xff\xc3\x82~+\xb8:\xb8\x87\t\xc1\xb4h\x9e\xac\xb2\x9b\x03\xf5\x82$K\x10\xae\xf1A\x8e\xea\xa4\f\xe8\x0ew?[\xcd\x84\xcb\x0f\xe1\xf1\xa0jM\xe5M\xfc\xe5\x19\x02\x183\x14\xf5\x9c\x16\xbbP\x9e\xb6r\xe2\xa70\x196\x9aL\xd7\x82\xa1\x0eO\xc0\xd9+\xdac{\x89!\xf0\x00\x00\x00\x00\x00'}]}, @nested={0x4, 0x2}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) 1.511329512s ago: executing program 5 (id=2565): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) accept4$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14, 0x0) 1.487573525s ago: executing program 4 (id=2566): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180000002e000100000000000000000004001980040010"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x400) clock_gettime(0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r5, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r7 = socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001400b59500000000000002000a782200", @ANYRES32, @ANYBLOB="1400020000000000000000000000ffff000000bfa1c36161eb84fd1bd792b417b20400"], 0x2c}}, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="480000002e000100000000000000000004"], 0x48}], 0x1}, 0x300) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) 1.352973453s ago: executing program 5 (id=2567): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000c0"], 0x48) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async, rerun: 32) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r1, @ANYBLOB="1c005a800c00"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r5, &(0x7f0000000100)=[{&(0x7f0000000300)="f3", 0x1}], 0x1, 0x8001, 0x7c) (async) close(r5) (async, rerun: 64) sendfile(r5, r4, 0x0, 0x7ffff000) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6}, {0x27}}, [@printk={@lli, {}, {0x5}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}, {0x25}}], {{0x4, 0x1, 0x9, 0x3, 0x2}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x4, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.22752439s ago: executing program 6 (id=2568): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="30000001", @ANYRES16=r1, @ANYBLOB="010629bd700000000000090000001c0004800c00078008000100170000000000010062726f6164636173742d6c696e6b0000"], 0xffd2}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f00), r2) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="a33a08902c08e32555cd11042dbd"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) 1.122371528s ago: executing program 5 (id=2569): r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @netrom}, [@netrom, @bcast, @rose, @bcast, @remote, @rose, @netrom, @bcast]}, &(0x7f0000000380)=0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x18, r0}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x94442000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000001280)=0x8) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xffffffd9}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}]}, 0x80}, 0x1, 0x7}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r8, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) sendto$packet(r5, &(0x7f0000000480)="bad330752181510000316f3a277f953286ddd1dc9119f98ce83de525e4a40e81692d09dc", 0x24, 0x2000041, &(0x7f0000000080)={0x11, 0x88a8, r8, 0x1, 0xda}, 0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r8, 0x25, 0x1, @void}, 0x10) 952.169676ms ago: executing program 6 (id=2570): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x80800) sendto$unix(r1, &(0x7f0000000100)="c22c4e7e221bd83732ee8e26939db17825a102b461f4ec1b51449e81e16e", 0x1e, 0x40000, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x23, 0x1, 0x0, 0x4, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fab98adb107d0def49c88ea04abde1d5e8d3fb22a1b50f8778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x114}], 0x1}, 0x0) 811.25228ms ago: executing program 5 (id=2571): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00070c000000000000000002000000", @ANYBLOB="020000000a0001"], 0x30}, 0x1, 0x0, 0x0, 0x68eaadec908dc23b}, 0x20024090) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x104, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x32}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x3c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffe}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x9, 0xfffffffc}, 0x70bd2a, 0x3505, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000080001"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 791.796303ms ago: executing program 6 (id=2572): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000ffffff7f000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000021a00008500000082000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="000000497b01b76feb372c000000", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 692.269528ms ago: executing program 5 (id=2573): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x65, 0x0, 0x0) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f1114f9f4070009010000000000fe000001000000000800040001000000", 0x24) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="dd2065f5", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000050005000000000005000600070000000800030001000000"], 0x2c}}, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x2000002, 0xfffffffe}}, 0x10) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0xfffffffc}}, 0x10) bind$tipc(r8, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002bc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002c00)={&(0x7f0000002880)="34e0841c7101d2a9ac62dd57e005719f90681883db50182e4eff99be297f8ae056a922778c84ad7214b65abaf9177e56ce7ebd4ce2b431d323884a282a4f080e1c39e66a387285020dc69d0c36185dcb0d93b2711b579f402d7dcca394f359396b725561f276bd83ed6b2a6ef527504d7fa6a9d42c1a8018a009dfe6bd7432fe93361adeb15f2bfe3365453ea416d932c725701348cc786aa07a1c488661449e58a120da50a935abb42f26b85004550ef518e56d54a87164005289b31545e656d668d0b1a6c25e2511ff65d1b4c73e310f9ae4f386b3521049e438099a80fc421aa5b27b8b7f", &(0x7f0000002980)=""/206, &(0x7f0000002a80)="a5ba", &(0x7f0000002ac0)="ae894264be8f64e351789106bf9a7ca0da06889558de3e17c58d7412ea7685fec2baf01f5c7377ae52124100bd026713ffecc12373603de02e87eaf295c41ce12b03aebbdd5bf6905dfbe95767bb83325c0429744b7491a3e63f264f90fb78b03bd1045b9e46a7974131e97d68e399df125e8196b937e8c590e25273a16da1405d8d852574edd3f099e90fd710060dd8f7ca3c2c29c0d80575abce6e71a213e232dd9b6a19f9bb7e7174db1b2e233ae8972b7e668e26218439a6197d6fdaa6cfa81f7c534dfb32fdb7a28eefa8e9a2dd200b655f9feee49e20caf8fb8d9c259d4c3dfca300ee6875baa2cdef334ac1a65135d6c21843a969", 0x8, r9, 0x10e7728df6a0535a}, 0x38) recvmmsg$unix(r3, &(0x7f0000002680)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000280)=""/143, 0x8f}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/142, 0x8e}, {&(0x7f0000000100)=""/39, 0x27}, {&(0x7f00000004c0)=""/96, 0x60}, {&(0x7f0000000540)=""/182, 0xb6}], 0x6, &(0x7f0000000680)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000140)=""/34, 0x22}, {&(0x7f0000000700)=""/107, 0x6b}, {&(0x7f0000000780)=""/49, 0x31}, {&(0x7f00000007c0)=""/20, 0x14}, {&(0x7f0000000800)=""/206, 0xce}], 0x5}}, {{&(0x7f0000000980), 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000a00)=""/207, 0xcf}, {&(0x7f0000000b00)=""/72, 0x48}, {&(0x7f0000000b80)=""/27, 0x1b}, {&(0x7f0000000bc0)=""/129, 0x81}], 0x4, &(0x7f0000000cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000000d40)=@abs, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/165, 0xa5}, {&(0x7f0000000e80)=""/213, 0xd5}, {&(0x7f0000000f80)=""/136, 0x88}], 0x3, &(0x7f0000001080)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000001100), 0x6e, &(0x7f0000002340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/12, 0xc}, {&(0x7f00000021c0)=""/208, 0xd0}, {&(0x7f00000022c0)=""/83, 0x53}], 0x4, &(0x7f0000002380)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000002400)=@abs, 0x6e, &(0x7f0000002600)=[{&(0x7f0000002480)=""/253, 0xfd}, {&(0x7f0000002580)=""/81, 0x51}], 0x2, &(0x7f0000002640)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}], 0x6, 0x20, &(0x7f0000002800)={0x77359400}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x10, r10, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r7, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x4, 0x0, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x78) 619.127349ms ago: executing program 6 (id=2574): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket(0x2b, 0x1, 0x0) listen(r1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$nfc_llcp(r1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x24004881) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) 0s ago: executing program 6 (id=2575): r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000840), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x38, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000020000010000000900010073797a30000000002c000000030a05000000000000000000010000000900030073797a31000000000900010073797a300000000084000000060a010400000000000000000100000008000b40000000000900010073797a30000000005c00048040000180080001006e6174003400028008000540eb0000090800014000000001080002"], 0xf8}, 0x1, 0x0, 0x0, 0x814}, 0x0) kernel console output (not intermixed with test programs): [0, 0] type 1 family 0 port 8472 - 0 [ 151.522196][ T9036] syzkaller0: entered promiscuous mode [ 151.527801][ T9036] syzkaller0: entered allmulticast mode [ 151.549464][ T9036] netlink: 'syz.0.756': attribute type 13 has an invalid length. [ 151.624972][ T9039] IPv6: sit1: Disabled Multicast RS [ 151.772543][ T9047] xt_hashlimit: size too large, truncated to 1048576 [ 152.227290][ T9066] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.241266][ T9066] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 152.380783][ T9066] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.418823][ T9066] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 152.581086][ T9066] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.622509][ T9066] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 153.527813][ T9094] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 153.621874][ T9066] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.660819][ T9066] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 153.710189][ T9100] __nla_validate_parse: 11 callbacks suppressed [ 153.710207][ T9100] netlink: 52 bytes leftover after parsing attributes in process `syz.1.772'. [ 153.738638][ T9102] netlink: 156 bytes leftover after parsing attributes in process `syz.2.773'. [ 153.867362][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 153.880985][ T36] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 153.984990][ T6931] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 153.993660][ T6931] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 154.012076][ T6931] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 154.020997][ T6931] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 154.038855][ T6931] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 154.053983][ T6931] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 154.620962][ T9128] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.780'. [ 154.631048][ T9128] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.780'. [ 156.727605][ T9102] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 156.996474][ T9158] netlink: 'syz.3.791': attribute type 4 has an invalid length. [ 157.316824][ T9178] syzkaller0: entered promiscuous mode [ 157.369105][ T9178] syzkaller0: entered allmulticast mode [ 157.622027][ T9199] syzkaller0: entered promiscuous mode [ 157.627893][ T9199] syzkaller0: entered allmulticast mode [ 157.647402][ T9198] erspan1: entered allmulticast mode [ 157.674006][ T9199] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 157.683193][ T9199] openvswitch: netlink: Missing key (keys=40, expected=80) [ 157.720435][ T53] block nbd0: Receive control failed (result -32) [ 157.880147][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.806'. [ 157.889409][ T9216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.806'. [ 158.140868][ T9233] netlink: 'syz.2.811': attribute type 4 has an invalid length. [ 158.350899][ T9251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.811'. [ 158.401129][ T9243] netlink: 16 bytes leftover after parsing attributes in process `syz.2.811'. [ 158.431494][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.811'. [ 158.453396][ T9243] netlink: 24 bytes leftover after parsing attributes in process `syz.2.811'. [ 158.604861][ T6937] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.648478][ T6937] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.737315][ T6937] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.747013][ T6937] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.940373][ T9272] syzkaller0: entered promiscuous mode [ 158.945880][ T9272] syzkaller0: entered allmulticast mode [ 160.041361][ T9274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.817'. [ 160.051137][ T9274] netlink: 36 bytes leftover after parsing attributes in process `syz.0.817'. [ 160.183562][ T9279] lo: Caught tx_queue_len zero misconfig [ 160.191557][ T9279] netlink: 'syz.0.818': attribute type 2 has an invalid length. [ 161.648421][ T9258] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 161.866840][ T9288] netlink: 28 bytes leftover after parsing attributes in process `syz.4.820'. [ 161.895824][ T9298] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 161.905402][ T9300] netlink: 'syz.1.822': attribute type 21 has an invalid length. [ 161.917222][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.822'. [ 161.917230][ T9292] tipc: Enabled bearer , priority 0 [ 161.917777][ T9292] syzkaller0: entered promiscuous mode [ 161.959966][ T9292] syzkaller0: entered allmulticast mode [ 161.963139][ T9288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.820'. [ 161.983857][ T9300] netlink: 'syz.1.822': attribute type 21 has an invalid length. [ 162.005542][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.822'. [ 162.016966][ T9292] tipc: Resetting bearer [ 162.041310][ T9296] netlink: 32 bytes leftover after parsing attributes in process `syz.3.823'. [ 162.128079][ T9304] tipc: Resetting bearer [ 162.204885][ T9304] tipc: Disabling bearer [ 162.235925][ T9318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.829'. [ 162.246192][ T9318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.829'. [ 162.260703][ T9318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.829'. [ 162.553484][ T9331] tipc: Started in network mode [ 162.558604][ T9331] tipc: Node identity 86af7d988f6f, cluster identity 4711 [ 162.568270][ T9331] tipc: Enabled bearer , priority 0 [ 162.596194][ T9331] syzkaller0: entered promiscuous mode [ 162.602262][ T9331] syzkaller0: entered allmulticast mode [ 162.614320][ T9331] tipc: Resetting bearer [ 162.626153][ T9330] tipc: Resetting bearer [ 162.654685][ T9330] tipc: Disabling bearer [ 162.785967][ T9341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.971868][ T9351] netlink: 'syz.0.839': attribute type 55 has an invalid length. [ 163.165600][ T9362] openvswitch: netlink: Missing key (keys=40, expected=80) [ 163.178221][ T9363] openvswitch: netlink: Missing key (keys=40, expected=80) [ 163.281882][ T9369] netlink: 'syz.2.845': attribute type 2 has an invalid length. [ 163.287429][ T9374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.476136][ T9387] netlink: 'syz.3.851': attribute type 2 has an invalid length. [ 163.511206][ T9387] : entered promiscuous mode [ 163.566620][ T9387] netlink: 'syz.3.851': attribute type 2 has an invalid length. [ 163.575025][ T9387] : left promiscuous mode [ 163.674029][ T9395] lo: entered allmulticast mode [ 163.683994][ T9395] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.004253][ T9410] pim6reg1: entered promiscuous mode [ 164.038782][ T9410] pim6reg1: entered allmulticast mode [ 164.055333][ T9416] tipc: Enabling of bearer rejected, failed to enable media [ 164.257523][ T9433] netlink: 'syz.4.863': attribute type 4 has an invalid length. [ 164.293455][ T9433] ip6gre1: entered promiscuous mode [ 164.307526][ T9433] ip6gre1: entered allmulticast mode [ 164.315737][ T6937] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 164.336069][ T6937] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 164.344375][ T9255] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 164.361096][ T9437] syzkaller0: entered promiscuous mode [ 164.366912][ T9437] syzkaller0: entered allmulticast mode [ 164.434839][ T9446] xt_CONNSECMARK: invalid mode: 253 [ 164.437991][ T9437] tipc: Enabled bearer , priority 0 [ 164.508042][ T9436] tipc: Resetting bearer [ 164.509198][ T9255] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 164.596376][ T9436] tipc: Disabling bearer [ 164.641960][ T9454] bond3: option updelay: invalid value (18446744072924056005) [ 164.652808][ T9454] bond3: option updelay: allowed values 0 - 2147483647 [ 164.663175][ T9454] bond3 (unregistering): Released all slaves [ 164.728897][ T9255] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 164.897534][ T9466] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.913306][ T9466] team0: Port device bond2 added [ 164.940273][ T9474] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 165.056674][ T9481] __nla_validate_parse: 12 callbacks suppressed [ 165.056692][ T9481] netlink: 76 bytes leftover after parsing attributes in process `syz.2.876'. [ 165.105837][ T9481] netlink: 76 bytes leftover after parsing attributes in process `syz.2.876'. [ 165.144228][ T9479] netlink: 76 bytes leftover after parsing attributes in process `syz.2.876'. [ 165.159347][ T9479] netlink: 76 bytes leftover after parsing attributes in process `syz.2.876'. [ 165.267719][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.880'. [ 165.277954][ T9496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.880'. [ 165.397596][ T9500] netlink: 'syz.4.882': attribute type 11 has an invalid length. [ 165.419965][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.881'. [ 165.539183][ T9509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.886'. [ 165.804411][ T9527] netlink: zone id is out of range [ 165.810139][ T9527] netlink: zone id is out of range [ 165.815335][ T9527] netlink: get zone limit has 8 unknown bytes [ 166.202590][ T9549] netlink: 'syz.2.898': attribute type 30 has an invalid length. [ 166.370175][ T9556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.897'. [ 166.735364][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.903'. [ 166.969264][ T9586] netlink: 'syz.3.906': attribute type 1 has an invalid length. [ 167.211347][ T9590] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.236553][ T9594] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 167.245681][ T9594] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 167.262113][ T9598] bond3 (unregistering): (slave batadv1): Releasing backup interface [ 167.275400][ T9598] bond3 (unregistering): Released all slaves [ 167.331814][ T9599] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 167.343527][ T9599] bridge4: entered allmulticast mode [ 167.670279][ T9624] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.742667][ T9627] netlink: 'syz.2.914': attribute type 2 has an invalid length. [ 168.130297][ T9636] syzkaller0: entered promiscuous mode [ 168.136733][ T9636] syzkaller0: entered allmulticast mode [ 168.579020][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 168.834300][ T9665] batadv_slave_1: Caught tx_queue_len zero misconfig [ 170.235747][ T9722] __nla_validate_parse: 9 callbacks suppressed [ 170.235766][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.939'. [ 170.332246][ T9722] veth3: entered allmulticast mode [ 170.500178][ T9730] netlink: 24 bytes leftover after parsing attributes in process `syz.0.941'. [ 170.543782][ T9732] netlink: 312 bytes leftover after parsing attributes in process `syz.2.942'. [ 171.239443][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.950'. [ 171.281037][ T9759] geneve0: entered promiscuous mode [ 171.286790][ T9759] geneve0: entered allmulticast mode [ 171.389725][ T9767] bridge_slave_1: left allmulticast mode [ 171.400491][ T9767] bridge_slave_1: left promiscuous mode [ 171.406583][ T9767] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.423976][ T9767] bridge_slave_0: left allmulticast mode [ 171.468282][ T9767] bridge_slave_0: left promiscuous mode [ 171.484361][ T9767] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.831599][ T9788] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.955'. [ 171.969590][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.950'. [ 171.978415][ T9767] netlink: 336 bytes leftover after parsing attributes in process `syz.0.950'. [ 172.028164][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.950'. [ 172.148483][ T9767] netlink: 336 bytes leftover after parsing attributes in process `syz.0.950'. [ 172.290446][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.950'. [ 173.319147][ T9856] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 173.338817][ T9850] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 173.797439][ T9886] netlink: 'syz.1.971': attribute type 30 has an invalid length. [ 173.922386][ T9889] netlink: 'syz.4.972': attribute type 3 has an invalid length. [ 174.161876][ T9905] netlink: 'syz.4.977': attribute type 3 has an invalid length. [ 174.462719][ T9932] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 174.532689][ T9938] netlink: 'syz.3.985': attribute type 1 has an invalid length. [ 174.568829][ T9938] netlink: 'syz.3.985': attribute type 1 has an invalid length. [ 174.597565][ T9938] netlink: 'syz.3.985': attribute type 8 has an invalid length. [ 174.742222][ T9950] : renamed from veth0_to_bond [ 174.949230][ T9966] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 175.412858][ T9983] __nla_validate_parse: 8 callbacks suppressed [ 175.412876][ T9983] netlink: 40 bytes leftover after parsing attributes in process `syz.3.999'. [ 175.448027][ T9985] netlink: 40 bytes leftover after parsing attributes in process `syz.0.998'. [ 175.458101][ T9985] openvswitch: netlink: Flow key attr not present in new flow. [ 175.522319][ T9989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1001'. [ 175.563457][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1000'. [ 175.718171][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1004'. [ 175.751340][ T9999] bridge_slave_0: left allmulticast mode [ 175.757538][ T9999] bridge_slave_0: left promiscuous mode [ 175.797282][ T9999] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.836101][T10013] netlink: 'syz.4.1007': attribute type 21 has an invalid length. [ 175.844607][T10013] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1007'. [ 175.861630][ T9999] bridge_slave_1: left allmulticast mode [ 175.867413][ T9999] bridge_slave_1: left promiscuous mode [ 175.875517][ T9999] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.894051][ T9999] bond0: (slave bond_slave_0): Releasing backup interface [ 175.901430][T10017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1008'. [ 175.910867][T10017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1008'. [ 175.929208][ T9999] bond0: (slave bond_slave_1): Releasing backup interface [ 175.953326][ T9999] team0: Port device team_slave_0 removed [ 175.968198][ T9999] team0: Port device team_slave_1 removed [ 175.975028][ T9999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.982581][ T9999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.992322][ T9999] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 176.014926][T10013] netlink: 'syz.4.1007': attribute type 4 has an invalid length. [ 176.023020][T10013] netlink: 'syz.4.1007': attribute type 5 has an invalid length. [ 176.031132][T10013] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1007'. [ 176.216050][T10031] netlink: 'syz.3.1012': attribute type 3 has an invalid length. [ 176.292635][T10036] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1014'. [ 176.309638][T10036] veth0_to_team: entered promiscuous mode [ 176.317026][T10036] veth0_to_team: left promiscuous mode [ 176.377123][T10043] hsr0: entered promiscuous mode [ 176.391962][T10043] hsr0: entered allmulticast mode [ 176.404252][T10043] hsr_slave_0: entered allmulticast mode [ 176.417678][T10043] hsr_slave_1: entered allmulticast mode [ 176.579628][T10047] bond3: Invalid ad_actor_system MAC address. [ 176.609325][T10047] bond3: option ad_actor_system: invalid value (7) [ 176.693883][T10047] bond3 (unregistering): Released all slaves [ 177.514699][T10107] netlink: 'syz.1.1032': attribute type 11 has an invalid length. [ 177.567114][T10109] bond6: (slave bond_slave_1): Device is not our slave [ 177.579900][T10109] bond6: option active_slave: invalid value (bond_slave_1) [ 177.603078][T10109] bond6 (unregistering): Released all slaves [ 177.618931][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 177.835321][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880329b4c00: rx timeout, send abort [ 177.845525][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880329b4c00: 0x1f101: (3) A timeout occurred and this is the connection abort to close the session. [ 177.918949][T10123] 8021q: adding VLAN 0 to HW filter on device bond7 [ 177.964774][T10123] bond6: (slave bond7): making interface the new active one [ 177.973509][T10123] bond6: (slave bond7): Enslaving as an active interface with an up link [ 178.126002][T10142] ip6gre1: entered promiscuous mode [ 178.144991][T10142] ip6gre1: entered allmulticast mode [ 178.184917][ T6937] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.223373][ T5873] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.231405][ T6937] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.598916][ T9234] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 179.083623][ T5873] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 179.230359][T10205] x_tables: duplicate underflow at hook 1 [ 179.256254][T10205] ip6gretap0: entered promiscuous mode [ 179.279950][T10205] ip6gretap0: left promiscuous mode [ 179.579254][T10225] validate_nla: 9 callbacks suppressed [ 179.579272][T10225] netlink: 'syz.0.1060': attribute type 58 has an invalid length. [ 179.672587][T10229] openvswitch: netlink: Key type 195 is out of range max 32 [ 180.162975][T10264] ip6tnl4: entered promiscuous mode [ 180.171520][T10264] ip6tnl4: entered allmulticast mode [ 180.563739][ T6936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.574947][ T6936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.641721][T10289] netlink: 'syz.2.1079': attribute type 1 has an invalid length. [ 180.660468][T10287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.731527][T10289] bond3: entered promiscuous mode [ 180.737044][T10289] 8021q: adding VLAN 0 to HW filter on device bond3 [ 180.764489][T10293] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 180.819863][T10293] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 180.879200][T10293] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 181.383150][T10314] __nla_validate_parse: 28 callbacks suppressed [ 181.383168][T10314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1086'. [ 181.462073][ T53] block nbd1: Receive control failed (result -32) [ 181.799628][T10325] netlink: 'syz.2.1090': attribute type 1 has an invalid length. [ 181.856674][T10325] bond4: entered promiscuous mode [ 181.862509][T10325] 8021q: adding VLAN 0 to HW filter on device bond4 [ 181.895696][T10332] 8021q: adding VLAN 0 to HW filter on device bond4 [ 181.905226][T10332] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 181.916242][T10332] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 181.932027][T10332] bond4: (slave wireguard0): making interface the new active one [ 181.940601][T10332] wireguard0: entered promiscuous mode [ 181.948452][T10332] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 181.996386][T10325] bond4: (slave wireguard1): The slave device specified does not support setting the MAC address [ 182.019002][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 182.045389][T10325] bond4: (slave wireguard1): Enslaving as a backup interface with an up link [ 182.377738][T10351] xt_hashlimit: size too large, truncated to 1048576 [ 182.386391][T10355] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.1096'. [ 182.398807][T10355] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 182.987490][T10379] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1101'. [ 183.033723][T10355] xt_CT: You must specify a L4 protocol and not use inversions on it [ 183.119619][T10392] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1103'. [ 183.259418][T10399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1104'. [ 183.644948][T10426] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1113'. [ 183.656883][T10426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1113'. [ 183.883916][T10435] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1116'. [ 183.949949][T10442] netlink: 'syz.0.1119': attribute type 2 has an invalid length. [ 184.065231][T10442] l24): entered promiscuous mode [ 184.151678][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1121'. [ 184.249571][T10464] netlink: 'syz.2.1122': attribute type 1 has an invalid length. [ 184.344771][T10464] bond5: entered promiscuous mode [ 184.382702][T10464] bond5: entered allmulticast mode [ 184.397155][T10464] 8021q: adding VLAN 0 to HW filter on device bond5 [ 185.058810][ T53] Bluetooth: hci4: command tx timeout [ 185.485823][T10532] veth0_macvtap: left promiscuous mode [ 185.533250][T10532] bridge4: entered allmulticast mode [ 185.620229][T10539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1136'. [ 185.739418][T10544] sctp: [Deprecated]: syz.3.1136 (pid 10544) Use of int in max_burst socket option. [ 185.739418][T10544] Use struct sctp_assoc_value instead [ 185.821284][T10546] netlink: 'syz.1.1138': attribute type 10 has an invalid length. [ 186.146014][T10562] hsr_slave_0: left promiscuous mode [ 186.161077][T10562] hsr_slave_1: left promiscuous mode [ 186.194111][T10566] netlink: 'syz.0.1141': attribute type 1 has an invalid length. [ 186.199308][T10567] netlink: 'syz.3.1143': attribute type 1 has an invalid length. [ 186.510724][T10596] __nla_validate_parse: 5 callbacks suppressed [ 186.510743][T10596] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1148'. [ 187.035874][ T5873] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 187.196152][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1156'. [ 187.197120][T10626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.251045][T10629] xt_addrtype: ipv6 does not support BROADCAST matching [ 187.259062][T10629] netlink: 'syz.4.1156': attribute type 9 has an invalid length. [ 187.502675][T10638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1159'. [ 187.578972][ T9234] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 187.672731][T10660] netlink: 'syz.0.1163': attribute type 1 has an invalid length. [ 187.759267][T10662] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1163'. [ 187.922872][T10672] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1165'. [ 188.252445][T10685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1169'. [ 188.288386][T10685] openvswitch: netlink: Flow actions attr not present in new flow. [ 188.476429][T10699] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1171'. [ 188.537212][T10699] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1171'. [ 188.661519][T10703] lo: entered promiscuous mode [ 188.678774][T10703] lo: left allmulticast mode [ 188.708389][T10703] tunl0: entered promiscuous mode [ 188.757925][T10703] gre0: entered promiscuous mode [ 188.792639][T10703] erspan0: entered promiscuous mode [ 188.820891][T10703] ip_vti0: entered promiscuous mode [ 188.860689][T10703] ip6_vti0: entered promiscuous mode [ 189.619226][T10763] netlink: zone id is out of range [ 189.619712][T10765] syzkaller0: entered promiscuous mode [ 189.624559][T10763] netlink: zone id is out of range [ 189.624570][T10763] netlink: get zone limit has 8 unknown bytes [ 189.630672][T10765] syzkaller0: entered allmulticast mode [ 189.734401][T10753] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1183'. [ 189.788838][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 189.811625][T10772] bridge0: port 1(wlan0) entered blocking state [ 189.818049][T10772] bridge0: port 1(wlan0) entered disabled state [ 189.847946][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1190'. [ 189.858598][T10772] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 189.891257][T10772] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 189.982734][T10780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.990578][ T6937] bond0: (slave bond_slave_0): interface is now down [ 189.997500][ T6937] bond0: (slave bond_slave_1): interface is now down [ 190.168783][ T6913] bond0: (slave bond_slave_0): interface is now down [ 190.175560][ T6913] bond0: (slave bond_slave_1): interface is now down [ 190.228250][ T6913] bond0: now running without any active interface! [ 190.287321][T10792] xt_CT: No such helper "snmp" [ 190.375124][T10808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.379826][T10812] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 191.336436][T10862] kthread_run failed with err -4 [ 191.360724][T10860] netlink: 'syz.1.1211': attribute type 2 has an invalid length. [ 191.387590][T10860] netlink: 'syz.1.1211': attribute type 5 has an invalid length. [ 191.396772][T10860] netlink: 'syz.1.1211': attribute type 1 has an invalid length. [ 191.663692][T10879] __nla_validate_parse: 4 callbacks suppressed [ 191.663710][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1217'. [ 191.894949][T10897] nbd: must specify at least one socket [ 191.910734][T10897] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1220'. [ 191.950501][T10897] block nbd0: reconnected socket [ 191.955686][T10897] nbd: socks must be embedded in a SOCK_ITEM attr [ 191.966277][T10903] netlink: 'syz.3.1223': attribute type 2 has an invalid length. [ 191.977704][T10903] netlink: 'syz.3.1223': attribute type 2 has an invalid length. [ 191.981334][ T53] block nbd0: Receive control failed (result -32) [ 192.047348][T10903] netlink: 'syz.3.1223': attribute type 2 has an invalid length. [ 192.075096][T10903] netlink: 'syz.3.1223': attribute type 2 has an invalid length. [ 192.131717][T10908] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 192.373213][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1231'. [ 192.844937][T10940] IPVS: length: 132 != 8 [ 192.860346][T10940] pimreg: entered allmulticast mode [ 192.870077][T10940] pimreg: left allmulticast mode [ 193.052728][T10942] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1235'. [ 193.068102][T10952] syzkaller0: entered promiscuous mode [ 193.074115][T10952] syzkaller0: entered allmulticast mode [ 193.099532][T10942] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1235'. [ 193.129327][ T30] audit: type=1800 audit(1770625034.669:2): pid=10948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1234" name="cgroup.controllers" dev="tmpfs" ino=1289 res=0 errno=0 [ 193.130289][T10955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1236'. [ 193.186030][T10954] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1236'. [ 193.198586][T10954] netlink: 'syz.2.1236': attribute type 1 has an invalid length. [ 193.216392][T10955] netlink: 'syz.2.1236': attribute type 1 has an invalid length. [ 193.288491][T10958] bond6: entered promiscuous mode [ 193.315605][T10958] bond6: entered allmulticast mode [ 193.326703][T10958] 8021q: adding VLAN 0 to HW filter on device bond6 [ 193.551092][T10970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1240'. [ 193.666830][T10982] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 193.680124][T10982] bond3 (unregistering): Released all slaves [ 193.843340][T10987] openvswitch: netlink: Flow actions attr not present in new flow. [ 193.901138][T10994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1247'. [ 193.996095][T10996] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1248'. [ 194.268072][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.739994][T11049] netlink: 'syz.3.1261': attribute type 4 has an invalid length. [ 194.898899][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 195.602338][T11068] IPVS: Scheduler module ip_vs_sip not found [ 195.726181][T11059] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 196.247180][T11104] tipc: Enabled bearer , priority 0 [ 196.261426][T11104] syzkaller0: entered promiscuous mode [ 196.266930][T11104] syzkaller0: entered allmulticast mode [ 196.280312][T11103] tipc: Resetting bearer [ 196.308149][T11103] tipc: Disabling bearer [ 196.353109][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 196.361314][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 196.367348][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 196.374925][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 196.588272][T11121] tipc: Enabled bearer , priority 0 [ 196.688349][T11121] syzkaller0: entered promiscuous mode [ 196.694644][T11121] syzkaller0: entered allmulticast mode [ 196.701222][T11121] tipc: Resetting bearer [ 196.722132][T11120] tipc: Resetting bearer [ 197.980318][T11120] tipc: Disabling bearer [ 198.009324][ T9255] tipc: Node number set to 476632847 [ 198.248111][T11164] validate_nla: 2 callbacks suppressed [ 198.248131][T11164] netlink: 'syz.3.1294': attribute type 4 has an invalid length. [ 198.330520][T11171] __nla_validate_parse: 10 callbacks suppressed [ 198.330538][T11171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1292'. [ 198.553487][T11184] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1297'. [ 200.479409][T11223] netlink: 'syz.4.1308': attribute type 10 has an invalid length. [ 200.492838][T11223] team0: Port device dummy0 added [ 200.498171][T11223] netlink: 'syz.4.1308': attribute type 10 has an invalid length. [ 200.518006][T11223] team0: Port device dummy0 removed [ 200.526053][T11223] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 200.832013][T11237] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.901925][T11237] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.920458][T11240] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1312'. [ 200.993182][T11237] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.010992][T11242] netlink: 'syz.4.1313': attribute type 1 has an invalid length. [ 201.026252][T11235] infiniband syû: set down [ 201.033892][T11235] infiniband syû: added bond_slave_0 [ 201.053004][T11242] bond3: entered promiscuous mode [ 201.058464][T11242] 8021q: adding VLAN 0 to HW filter on device bond3 [ 201.097986][T11242] 8021q: adding VLAN 0 to HW filter on device bond4 [ 201.106949][T11242] bond3: (slave bond4): making interface the new active one [ 201.113106][T11235] RDS/IB: syû: added [ 201.116104][T11242] bond4: entered promiscuous mode [ 201.120848][T11235] smc: adding ib device syû with port count 1 [ 201.124565][T11242] bond3: (slave bond4): Enslaving as an active interface with an up link [ 201.131471][T11235] smc: ib device syû port 1 has no pnetid [ 201.155758][T11237] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.207727][T11247] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1314'. [ 201.311445][ T6924] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.345975][ T6937] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.422167][ T6936] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.454075][ T6936] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.479613][T11252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1315'. [ 201.489983][T11252] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1315'. [ 201.672268][T11254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.679779][T11254] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 201.692958][T11254] bond0: (slave sit0): Error -95 calling set_mac_address [ 201.817369][T11261] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1317'. [ 202.264102][T11276] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1319'. [ 202.280386][T11276] netlink: 'syz.4.1319': attribute type 8 has an invalid length. [ 202.290276][T11276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1319'. [ 202.330168][T11276] bond0: entered promiscuous mode [ 202.335435][T11276] bond_slave_0: entered promiscuous mode [ 202.342893][T11276] bond_slave_1: entered promiscuous mode [ 202.349131][T11276] dummy0: entered promiscuous mode [ 202.359782][T11276] bond0: left promiscuous mode [ 202.364839][T11276] bond_slave_0: left promiscuous mode [ 202.370915][T11276] bond_slave_1: left promiscuous mode [ 202.376605][T11276] dummy0: left promiscuous mode [ 202.720381][T11293] netlink: 'syz.4.1321': attribute type 1 has an invalid length. [ 203.600852][T11331] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1328'. [ 203.664987][T11333] bridge_slave_0: entered promiscuous mode [ 203.988309][T11341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.779042][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.565809][ T5142] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 206.574943][ T5142] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 206.586653][ T5142] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 206.595470][ T5142] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 206.604809][ T5142] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 206.825670][T11365] chnl_net:caif_netlink_parms(): no params data found [ 206.891396][T11365] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.898551][T11365] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.906215][T11365] bridge_slave_0: entered allmulticast mode [ 206.913569][T11365] bridge_slave_0: entered promiscuous mode [ 206.921486][T11365] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.928629][T11365] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.936119][T11365] bridge_slave_1: entered allmulticast mode [ 206.943318][T11365] bridge_slave_1: entered promiscuous mode [ 206.970006][T11365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.982418][T11365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.009049][T11365] team0: Port device team_slave_0 added [ 207.016757][T11365] team0: Port device team_slave_1 added [ 207.039262][T11365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.046219][T11365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.074112][T11365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.086380][T11365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.093431][T11365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.119855][T11365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.157624][T11365] hsr_slave_0: entered promiscuous mode [ 207.163307][T11349] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 207.174870][T11365] hsr_slave_1: entered promiscuous mode [ 207.182502][T11365] debugfs: 'hsr0' already exists in 'hsr' [ 207.188257][T11365] Cannot create hsr debugfs directory [ 207.386353][T11376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1337'. [ 207.430182][T11376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1337'. [ 207.444856][T11376] netlink: 'syz.3.1337': attribute type 13 has an invalid length. [ 207.531334][T11382] syzkaller0: entered promiscuous mode [ 207.538487][T11382] syzkaller0: entered allmulticast mode [ 207.569686][ T5142] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 207.584078][ T5142] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 207.593425][ T5142] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 207.595350][T11388] netlink: 'syz.2.1340': attribute type 49 has an invalid length. [ 207.611746][ T5142] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 207.630381][ T5142] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 207.715844][T11365] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 207.742754][T11365] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 207.755935][T11365] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 207.791096][T11365] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 207.912307][T11402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1343'. [ 207.922687][T11365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.954705][T11365] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.986526][ T6937] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.993843][ T6937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.018628][ T6931] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.025874][ T6931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.141710][T11408] netlink: 'syz.2.1344': attribute type 1 has an invalid length. [ 208.194744][T11408] gretap1: entered allmulticast mode [ 208.219597][T11408] bond7: (slave gretap1): making interface the new active one [ 208.227939][T11408] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 208.419686][T11418] x_tables: duplicate underflow at hook 2 [ 208.565181][T11417] netlink: 'syz.2.1345': attribute type 21 has an invalid length. [ 208.662348][ T5142] Bluetooth: hci5: command tx timeout [ 209.593573][T11417] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1345'. [ 209.702302][ T5142] Bluetooth: hci6: command tx timeout [ 209.751296][T11422] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 209.793107][T11365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.920890][T11386] chnl_net:caif_netlink_parms(): no params data found [ 210.010948][T11441] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1350'. [ 210.068471][T11441] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1350'. [ 210.187501][T11386] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.205142][T11386] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.241755][T11386] bridge_slave_0: entered allmulticast mode [ 210.262182][T11386] bridge_slave_0: entered promiscuous mode [ 210.397451][T11451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.412409][T11451] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.434313][T11451] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 210.456575][T11386] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.464836][T11386] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.472532][T11386] bridge_slave_1: entered allmulticast mode [ 210.486244][T11386] bridge_slave_1: entered promiscuous mode [ 210.496534][T11457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1354'. [ 210.562490][T11457] syz_tun: entered allmulticast mode [ 210.570292][T11457] lo: left promiscuous mode [ 210.583004][T11457] tunl0: left promiscuous mode [ 210.589664][T11457] gre0: left promiscuous mode [ 210.601470][T11457] erspan0: left promiscuous mode [ 210.607447][T11457] ip_vti0: left promiscuous mode [ 210.614285][T11457] ip6_vti0: left promiscuous mode [ 210.629206][T11457] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 210.650929][T11386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.685000][T11456] syz_tun: left allmulticast mode [ 210.694770][T11386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.744931][T11365] veth0_vlan: entered promiscuous mode [ 210.772485][ T5142] Bluetooth: hci5: command tx timeout [ 210.788229][T11365] veth1_vlan: entered promiscuous mode [ 210.818470][T11386] team0: Port device team_slave_0 added [ 210.844173][T11386] team0: Port device team_slave_1 added [ 210.892107][T11365] veth0_macvtap: entered promiscuous mode [ 210.948395][T11386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.976200][T11386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.017324][T11386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.052100][T11365] veth1_macvtap: entered promiscuous mode [ 211.085165][T11467] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1356'. [ 211.114451][T11386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.122051][T11386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.195047][T11386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.241075][T11467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1356'. [ 211.257469][T11467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.280357][T11467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.313402][T11386] hsr_slave_0: entered promiscuous mode [ 211.321001][T11386] hsr_slave_1: entered promiscuous mode [ 211.327119][T11386] debugfs: 'hsr0' already exists in 'hsr' [ 211.334947][T11386] Cannot create hsr debugfs directory [ 211.357746][T11365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.418798][T11365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.447518][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.457290][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.474243][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.483235][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.779169][ T5142] Bluetooth: hci6: command tx timeout [ 211.811938][T11489] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1359'. [ 212.089427][T11497] syzkaller0: entered promiscuous mode [ 212.094935][T11497] syzkaller0: entered allmulticast mode [ 212.819192][ T5142] Bluetooth: hci5: command tx timeout [ 213.860463][ T5142] Bluetooth: hci6: command tx timeout [ 214.272895][T11477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 214.398984][T11386] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 214.417758][ T6932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.429591][T11386] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 214.436828][ T6932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.470669][T11386] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 214.496713][T11386] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 214.592752][ T6936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.592873][T11506] No such timeout policy "syz1" [ 214.610558][ T6936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.756956][T11522] macsec0: entered allmulticast mode [ 214.849460][T11386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.905401][ T5142] Bluetooth: hci5: command tx timeout [ 214.913484][T11386] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.950333][ T6937] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.957427][ T6937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.985705][T11536] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1372'. [ 215.013011][ T6937] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.020217][ T6937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.039200][T11536] bond0: entered promiscuous mode [ 215.044308][T11536] bond_slave_0: entered promiscuous mode [ 215.050657][T11536] bond_slave_1: entered promiscuous mode [ 215.072618][T11536] gretap0: entered promiscuous mode [ 215.081215][T11536] hsr1: entered promiscuous mode [ 215.205416][T11550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1376'. [ 215.270115][T11555] netlink: 'syz.5.1378': attribute type 10 has an invalid length. [ 215.286764][T11555] syz_tun: entered promiscuous mode [ 215.304077][T11555] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 215.398509][T11564] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 215.403168][T11566] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1377'. [ 215.454475][T11565] syzkaller0: entered promiscuous mode [ 215.484291][T11565] syzkaller0: entered allmulticast mode [ 215.497383][T11564] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 215.838960][T11386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.940055][ T5142] Bluetooth: hci6: command tx timeout [ 216.155479][T11599] syz_tun: entered allmulticast mode [ 216.188567][T11599] syz_tun: left allmulticast mode [ 216.272708][T11599] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 216.394307][T11610] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.1385'. [ 216.406980][T11604] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.489825][T11603] hsr1: left promiscuous mode [ 216.763251][T11625] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.1387'. [ 216.799086][T11625] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 216.891385][T11627] netlink: 'syz.5.1388': attribute type 4 has an invalid length. [ 216.945778][T11386] veth0_vlan: entered promiscuous mode [ 216.963371][T11386] veth1_vlan: entered promiscuous mode [ 217.010492][T11627] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1388'. [ 217.112930][T11638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.131433][T11386] veth0_macvtap: entered promiscuous mode [ 217.178470][T11386] veth1_macvtap: entered promiscuous mode [ 217.262512][T11386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.302329][T11386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.338306][ T6937] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.366174][ T6937] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.389987][ T6937] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.412698][T11649] IPVS: Error connecting to the multicast addr [ 217.422744][ T6937] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.451040][T11654] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.481180][T11653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.823899][ T6913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.831925][ T6913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.945173][ T6924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.953738][ T6924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.061398][T11685] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 218.068817][T11685] IPv6: NLM_F_CREATE should be set when creating new route [ 218.076098][T11685] IPv6: NLM_F_CREATE should be set when creating new route [ 218.083367][T11685] IPv6: NLM_F_CREATE should be set when creating new route [ 218.125071][T11690] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1336'. [ 218.135327][T11685] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 218.162934][T11690] vti0: entered promiscuous mode [ 218.445273][T11700] netlink: 'syz.5.1405': attribute type 4 has an invalid length. [ 218.790595][T11717] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1410'. [ 219.042483][T11732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1412'. [ 219.633861][T11763] vlan3: entered allmulticast mode [ 219.639153][T11763] team0: entered allmulticast mode [ 219.649480][T11763] team_slave_0: entered allmulticast mode [ 219.655259][T11763] team_slave_1: entered allmulticast mode [ 220.021841][T11782] netlink: 'syz.2.1423': attribute type 31 has an invalid length. [ 220.291545][T11805] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1429'. [ 220.362476][T11807] netlink: 'syz.5.1430': attribute type 1 has an invalid length. [ 220.455132][T11814] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1433'. [ 220.531395][T11814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1433'. [ 220.587803][T11814] vlan3: entered promiscuous mode [ 220.600782][T11814] gretap0: entered promiscuous mode [ 220.649894][T11821] tipc: Started in network mode [ 220.658187][T11821] tipc: Node identity 4246, cluster identity 4711 [ 220.676587][T11821] tipc: Node number set to 16966 [ 220.697528][T11821] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1436'. [ 222.007081][T11849] bridge_slave_0: left promiscuous mode [ 222.022722][T11849] macsec0: left allmulticast mode [ 222.031008][T11849] geneve2: left promiscuous mode [ 222.036142][T11849] geneve2: left allmulticast mode [ 222.042602][T11849] vlan2: left promiscuous mode [ 222.047702][T11849] vlan2: left allmulticast mode [ 222.053993][T11849] hsr_slave_1: left allmulticast mode [ 222.071313][T11849] veth3: left allmulticast mode [ 222.079549][T11849] bond3: left promiscuous mode [ 222.118510][T11849] bond4: left promiscuous mode [ 222.138345][T11849] wireguard0: left promiscuous mode [ 222.219604][T11849] bond5: left promiscuous mode [ 222.227188][T11849] bond5: left allmulticast mode [ 222.248554][T11849] bond6: left promiscuous mode [ 222.266926][T11849] bond6: left allmulticast mode [ 222.289608][T11849] gretap1: left allmulticast mode [ 222.666100][T11862] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.2.1447:11862 [ 223.448610][T11875] netlink: 'syz.6.1451': attribute type 1 has an invalid length. [ 224.372769][T11894] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1456'. [ 224.951225][T11919] netlink: 'syz.3.1462': attribute type 1 has an invalid length. [ 225.082582][T11925] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1464'. [ 226.378958][T11954] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1472'. [ 226.404873][T11954] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1472'. [ 226.615372][T11962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1474'. [ 226.672043][T11962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1474'. [ 226.970139][T11968] block nbd2: server does not support multiple connections per device. [ 227.167874][T11968] block nbd2: shutting down sockets [ 227.360145][T11975] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 227.362891][T11972] tipc: Enabled bearer , priority 0 [ 227.452240][T11971] tipc: Disabling bearer [ 227.532151][T11980] pimreg: tun_chr_ioctl cmd 1074025677 [ 227.537972][T11980] pimreg: linktype set to 780 [ 227.547321][T11980] netlink: 'syz.4.1479': attribute type 11 has an invalid length. [ 227.556340][T11980] netlink: 'syz.4.1479': attribute type 23 has an invalid length. [ 227.565520][T11980] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1479'. [ 227.654092][T11980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1479'. [ 227.692838][T11984] Cannot find del_set index 4 as target [ 227.793617][T11985] syzkaller1: entered promiscuous mode [ 227.812065][T11985] syzkaller1: entered allmulticast mode [ 227.845412][T11990] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 228.462302][T12025] netlink: 'syz.6.1492': attribute type 12 has an invalid length. [ 228.471721][T12025] netlink: 'syz.6.1492': attribute type 29 has an invalid length. [ 228.490735][T12025] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1492'. [ 228.594752][T12029] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 228.646165][T12029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1495'. [ 228.667079][T12029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1495'. [ 228.680392][T12029] netlink: 'syz.3.1495': attribute type 14 has an invalid length. [ 228.688367][T12029] netlink: 'syz.3.1495': attribute type 11 has an invalid length. [ 228.994713][T12051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1500'. [ 229.059188][ T30] audit: type=1804 audit(1770625070.599:3): pid=12044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1499" name="/newroot/294/memory.events" dev="tmpfs" ino=1520 res=1 errno=0 [ 229.106230][ T30] audit: type=1800 audit(1770625070.629:4): pid=12044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1499" name="memory.events" dev="tmpfs" ino=1520 res=0 errno=0 [ 229.458990][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 229.572304][ T30] audit: type=1804 audit(1770625071.119:5): pid=12074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1507" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=126 res=1 errno=0 [ 229.629308][ T30] audit: type=1800 audit(1770625071.119:6): pid=12074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1507" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=126 res=0 errno=0 [ 229.691358][T12078] netlink: 'syz.2.1508': attribute type 13 has an invalid length. [ 229.730562][T12080] sctp: [Deprecated]: syz.4.1510 (pid 12080) Use of int in max_burst socket option deprecated. [ 229.730562][T12080] Use struct sctp_assoc_value instead [ 229.748285][T12078] gretap0: refused to change device tx_queue_len [ 229.757377][T12078] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 229.809897][T12084] syzkaller1: entered promiscuous mode [ 229.815413][T12084] syzkaller1: entered allmulticast mode [ 230.060130][T12095] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 230.184091][T12097] bond1: entered allmulticast mode [ 230.211696][T12097] bridge1: entered promiscuous mode [ 230.218850][T12097] bridge1: entered allmulticast mode [ 230.239697][T12097] bond1: (slave bridge1): making interface the new active one [ 230.261356][T12097] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 230.903202][ T5834] Bluetooth: hci6: command 0x0405 tx timeout [ 230.910672][T12120] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.937868][T12123] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 231.033765][T12137] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 231.203787][T12141] siw: device registration error -23 [ 231.236916][T12120] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.341365][T12146] netlink: 'syz.3.1528': attribute type 1 has an invalid length. [ 231.445003][T12155] __nla_validate_parse: 2 callbacks suppressed [ 231.445024][T12155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1528'. [ 231.485110][T12154] netlink: 'syz.6.1529': attribute type 11 has an invalid length. [ 231.494318][T12158] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1529'. [ 231.515494][T12120] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.603192][T12146] 8021q: adding VLAN 0 to HW filter on device bond3 [ 231.620492][T12166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1528'. [ 231.674845][T12151] bond3: (slave veth5): Enslaving as an active interface with a down link [ 231.720224][T12155] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 231.743466][T12155] bond3: (slave batadv1): making interface the new active one [ 231.752861][T12155] batadv1: entered promiscuous mode [ 231.759261][T12155] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 231.821269][T12159] vlan2: entered allmulticast mode [ 231.826428][T12159] team0: entered allmulticast mode [ 231.934319][T12120] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.141283][ T6937] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.160603][ T6937] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.208631][T12179] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.227195][ T6937] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.275861][ T6937] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.382529][T12190] netlink: 'syz.6.1535': attribute type 2 has an invalid length. [ 232.391344][T12179] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.553751][T12179] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.688455][T12179] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.957254][T12223] netlink: 'syz.6.1541': attribute type 33 has an invalid length. [ 232.964596][T12225] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1543'. [ 232.984488][T12225] netlink: 560 bytes leftover after parsing attributes in process `syz.5.1543'. [ 232.994615][ T6937] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.050620][T12211] pim6reg: entered allmulticast mode [ 233.072569][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.107522][ T6937] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.157899][ T6937] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.180191][T12210] pim6reg: left allmulticast mode [ 233.183649][T12184] infiniband syz2: set down [ 233.190546][T12184] infiniband syz2: added veth0_vlan [ 233.227009][T12184] RDS/IB: syz2: added [ 233.232221][T12184] smc: adding ib device syz2 with port count 1 [ 233.252322][T12229] bond2: option primary_reselect: invalid value (4) [ 233.263615][T12229] bond2 (unregistering): Released all slaves [ 233.269475][T12184] smc: ib device syz2 port 1 has no pnetid [ 233.480081][T12237] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1547'. [ 233.515448][T12240] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1548'. [ 233.545026][T12240] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1548'. [ 233.792619][T12248] SET target dimension over the limit! [ 233.820705][T12248] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1552'. [ 233.872809][T12255] ipvlan3: entered promiscuous mode [ 233.889383][T12255] bridge0: port 1(ipvlan3) entered blocking state [ 233.895946][T12255] bridge0: port 1(ipvlan3) entered disabled state [ 233.909545][T12255] ipvlan3: entered allmulticast mode [ 233.916859][T12255] bridge0: entered allmulticast mode [ 233.939784][T12255] ipvlan3: left allmulticast mode [ 233.951317][T12255] bridge0: left allmulticast mode [ 233.977727][T12257] sctp: [Deprecated]: syz.6.1553 (pid 12257) Use of int in max_burst socket option deprecated. [ 233.977727][T12257] Use struct sctp_assoc_value instead [ 234.435649][T12282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1561'. [ 234.956334][T12304] veth0_virt_wifi: entered promiscuous mode [ 235.004512][T12304] veth0_virt_wifi: left promiscuous mode [ 235.075604][T12310] syz_tun: entered allmulticast mode [ 235.106030][T12308] syz_tun: left allmulticast mode [ 235.394747][T12324] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 235.425559][T12322] netlink: 'syz.3.1573': attribute type 39 has an invalid length. [ 235.607110][T12331] bridge0: entered promiscuous mode [ 235.615084][T12331] macsec1: entered promiscuous mode [ 236.271632][T12352] tipc: Can't bind to reserved service type 2 [ 236.454873][T12359] netlink: 'syz.5.1585': attribute type 1 has an invalid length. [ 236.496846][T12359] 8021q: adding VLAN 0 to HW filter on device bond2 [ 236.572666][T12361] bond2: (slave veth5): Enslaving as an active interface with a down link [ 236.585932][T12363] netlink: 'syz.6.1586': attribute type 1 has an invalid length. [ 236.594026][T12363] __nla_validate_parse: 3 callbacks suppressed [ 236.594040][T12363] netlink: 244 bytes leftover after parsing attributes in process `syz.6.1586'. [ 236.637099][T12359] bond2: (slave veth7): Enslaving as an active interface with a down link [ 236.649895][T12361] bond2: entered allmulticast mode [ 236.931921][T12369] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1588'. [ 237.056530][T12372] IPVS: length: 35 != 92114003448 [ 237.139071][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 237.209767][T12379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1592'. [ 237.638254][T12400] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1596'. [ 238.146084][T12415] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1599'. [ 238.310907][T12428] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.1602'. [ 238.329403][T12431] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1601'. [ 238.364453][T12430] xfrm0: entered promiscuous mode [ 238.374526][T12430] xfrm0: entered allmulticast mode [ 238.616402][T12449] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1607'. [ 239.002484][T12471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1614'. [ 239.537663][T12495] bond8: option resend_igmp: invalid value (2878) [ 239.545182][T12495] bond8: option resend_igmp: allowed values 0 - 255 [ 239.564239][T12495] bond8 (unregistering): Released all slaves [ 240.713752][T12537] netlink: 'syz.6.1631': attribute type 1 has an invalid length. [ 241.526062][T12554] 8021q: VLANs not supported on wg0 [ 241.537219][T12554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1636'. [ 241.741770][T12566] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1638'. [ 241.754429][T12566] netlink: 'syz.6.1638': attribute type 3 has an invalid length. [ 241.835826][T12572] x_tables: duplicate underflow at hook 4 [ 241.846934][T12572] netlink: 'syz.2.1641': attribute type 23 has an invalid length. [ 241.971329][T12579] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1642'. [ 242.011833][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1643'. [ 242.237975][T12586] netlink: 'syz.4.1645': attribute type 10 has an invalid length. [ 242.268137][T12586] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1645'. [ 242.293942][T12590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1644'. [ 242.479103][T12598] netlink: 'syz.6.1647': attribute type 2 has an invalid length. [ 242.509457][T12598] netlink: 'syz.6.1647': attribute type 11 has an invalid length. [ 242.524407][T12598] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1647'. [ 242.717633][T12615] ip6t_srh: unknown srh match flags 4000 [ 242.859758][ T6924] batadv1: left promiscuous mode [ 242.911667][T12618] syzkaller0: entered promiscuous mode [ 242.917185][T12618] syzkaller0: entered allmulticast mode [ 242.924871][T12618] 0: reclassify loop, rule prio 0, protocol 700 [ 242.932024][T12618] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1652'. [ 243.147265][T12632] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1655'. [ 243.273402][T12638] netlink: 'syz.4.1658': attribute type 21 has an invalid length. [ 243.307807][T12638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1658'. [ 243.332794][T12637] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.350448][T12637] bridge_slave_1: left allmulticast mode [ 243.365254][T12637] bridge_slave_1: left promiscuous mode [ 243.382150][T12637] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.446891][ T36] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.470600][T12637] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1657'. [ 243.477588][ T36] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.498591][ T36] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.507676][ T36] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.856361][T12658] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 243.949462][T12667] bond0: entered promiscuous mode [ 243.985312][T12667] bond_slave_0: entered promiscuous mode [ 244.012039][T12667] bond_slave_1: entered promiscuous mode [ 244.032414][T12667] dummy0: entered promiscuous mode [ 244.053556][T12667] debugfs: 'hsr1' already exists in 'hsr' [ 244.080307][T12667] Cannot create hsr debugfs directory [ 244.094555][T12667] hsr1: entered promiscuous mode [ 244.292745][T12680] hsr_slave_1 (unregistering): left promiscuous mode [ 244.574951][T12699] xt_CT: You must specify a L4 protocol and not use inversions on it [ 246.077944][T12766] netlink: 'syz.2.1692': attribute type 2 has an invalid length. [ 246.096919][T12766] !: entered promiscuous mode [ 246.125042][T12766] syzkaller0: entered promiscuous mode [ 246.139606][T12766] syzkaller0: entered allmulticast mode [ 246.534628][T12781] netlink: 'syz.2.1698': attribute type 1 has an invalid length. [ 246.706834][T12791] syzkaller0: entered promiscuous mode [ 246.713064][T12791] syzkaller0: entered allmulticast mode [ 246.996110][ T6933] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.010222][T12801] __nla_validate_parse: 24 callbacks suppressed [ 247.010242][T12801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1706'. [ 247.026120][ T6933] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.075203][ T6933] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.147262][ T6933] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.295204][T12806] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 247.357806][T12812] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1709'. [ 247.496147][T12828] 8021q: adding VLAN 0 to HW filter on device bond2 [ 247.581124][T12818] syzkaller1: entered promiscuous mode [ 247.588279][T12818] syzkaller1: entered allmulticast mode [ 247.654024][T12838] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1714'. [ 247.715453][T12838] openvswitch: netlink: Flow key attr not present in new flow. [ 247.725653][T12841] openvswitch: netlink: Flow key attr not present in new flow. [ 248.036796][T12853] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1718'. [ 248.084742][T12853] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1718'. [ 248.255661][T12863] pimreg: entered allmulticast mode [ 248.473187][T12883] netlink: 'syz.6.1724': attribute type 11 has an invalid length. [ 248.512080][T12882] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1726'. [ 248.528224][ T5819] udevd[5819]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 248.529711][T12883] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1724'. [ 248.564342][T12883] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 248.630825][T12882] syzkaller0: entered promiscuous mode [ 248.636341][T12882] syzkaller0: entered allmulticast mode [ 248.644170][T12887] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1726'. [ 248.653483][T12882] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1726'. [ 248.673065][T12887] macsec3: entered promiscuous mode [ 248.883469][T12899] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1730'. [ 249.056354][T12911] netlink: 'syz.5.1730': attribute type 6 has an invalid length. [ 249.462504][T12926] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 249.511204][T12933] netlink: 'syz.5.1739': attribute type 21 has an invalid length. [ 249.647936][T12938] vlan3: entered promiscuous mode [ 249.665178][T12938] geneve1: entered promiscuous mode [ 249.709147][T12946] x_tables: duplicate underflow at hook 4 [ 249.933951][T12920] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 249.941302][T12920] IPv6: NLM_F_CREATE should be set when creating new route [ 249.948527][T12920] IPv6: NLM_F_CREATE should be set when creating new route [ 250.461987][T12975] hsr_slave_1 (unregistering): left promiscuous mode [ 250.519075][ T5927] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 250.689232][T12987] syzkaller1: entered promiscuous mode [ 250.705129][T12987] syzkaller1: entered allmulticast mode [ 250.857824][ T5927] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 250.958593][T12996] syzkaller0: entered promiscuous mode [ 250.980450][T12996] syzkaller0: entered allmulticast mode [ 251.398966][ T6924] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 251.661567][T13021] netlink: 'syz.3.1763': attribute type 4 has an invalid length. [ 252.127469][T13041] netlink: 'syz.6.1770': attribute type 21 has an invalid length. [ 252.136070][T13041] __nla_validate_parse: 16 callbacks suppressed [ 252.136083][T13041] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1770'. [ 252.153190][T13041] netlink: 'syz.6.1770': attribute type 4 has an invalid length. [ 252.162369][T13041] netlink: 'syz.6.1770': attribute type 3 has an invalid length. [ 252.172293][T13041] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1770'. [ 252.296111][T13049] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1772'. [ 252.419253][ T6936] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 252.432690][T13051] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1772'. [ 252.441836][ T6936] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 252.450698][T13051] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1772'. [ 252.690155][ T9249] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 252.811456][T13061] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1775'. [ 252.837182][T13061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1775'. [ 253.345958][T13069] sctp: [Deprecated]: syz.2.1777 (pid 13069) Use of int in maxseg socket option. [ 253.345958][T13069] Use struct sctp_assoc_value instead [ 253.362066][T13069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1777'. [ 254.585512][T13091] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1781'. [ 254.934300][T13094] netlink: 'syz.2.1781': attribute type 21 has an invalid length. [ 255.113593][T13094] netlink: 'syz.2.1781': attribute type 3 has an invalid length. [ 255.121512][T13094] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1781'. [ 255.706861][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.178147][T13145] syzkaller0: entered promiscuous mode [ 256.189006][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 256.193671][T13145] syzkaller0: entered allmulticast mode [ 256.240216][ T6937] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.248497][ T6937] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.295678][ T6937] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.305314][ T6937] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.168182][T13197] __nla_validate_parse: 7 callbacks suppressed [ 258.168202][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1809'. [ 258.190467][T13202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1806'. [ 258.264935][T13202] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 258.416257][T13213] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1814'. [ 258.432831][T13213] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1814'. [ 258.473805][ T6933] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.483179][T13213] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1814'. [ 258.497434][ T6933] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.535196][T13213] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1814'. [ 258.564935][ T6933] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.576385][T13223] syzkaller0: entered promiscuous mode [ 258.586799][T13223] syzkaller0: entered allmulticast mode [ 258.607623][ T6933] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.634866][T13223] netlink: 'syz.5.1816': attribute type 1 has an invalid length. [ 258.934862][T13242] syzkaller0: entered promiscuous mode [ 258.944314][T13242] syzkaller0: entered allmulticast mode [ 259.023258][T13248] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.030952][T13248] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.195012][T13248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.207518][T13248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.377534][T13262] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1829'. [ 259.395541][ T6936] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.404974][ T6936] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.415429][ T6936] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.427799][ T6936] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.462783][T13261] can: request_module (can-proto-5) failed. [ 259.767586][T13283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.515275][T13319] x_tables: duplicate underflow at hook 3 [ 260.817579][T13337] netlink: 45 bytes leftover after parsing attributes in process `syz.6.1848'. [ 260.917096][T13338] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1848'. [ 260.962215][T13338] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1848'. [ 261.609483][T13347] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.860135][T13363] veth0: entered promiscuous mode [ 261.879452][T13363] veth0: entered allmulticast mode [ 262.021091][T13370] siw: device registration error -23 [ 262.261877][T13387] tipc: Enabled bearer , priority 0 [ 262.277558][T13387] syzkaller0: entered promiscuous mode [ 262.290572][T13387] syzkaller0: entered allmulticast mode [ 262.410660][T13387] tipc: Resetting bearer [ 262.447317][T13392] gre2: entered allmulticast mode [ 262.460564][T13386] tipc: Resetting bearer [ 262.533414][T13386] tipc: Disabling bearer [ 262.583525][T13399] bridge0: port 3(veth0) entered blocking state [ 262.607925][T13399] bridge0: port 3(veth0) entered disabled state [ 262.615612][T13399] veth0: entered allmulticast mode [ 262.663475][T13399] veth0: entered promiscuous mode [ 262.677904][T13402] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 262.691369][T13402] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 262.702968][T13402] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 263.129934][T13428] tunl0: Master is either lo or non-ether device [ 263.197683][T13428] netlink: 'syz.5.1874': attribute type 1 has an invalid length. [ 263.205678][T13428] __nla_validate_parse: 5 callbacks suppressed [ 263.205694][T13428] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1874'. [ 263.378880][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 263.406249][T13434] syzkaller1: entered promiscuous mode [ 263.415550][T13434] syzkaller1: entered allmulticast mode [ 263.582731][T13452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1880'. [ 263.642901][ T5142] block nbd3: Receive control failed (result -1) [ 263.679588][T13456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1882'. [ 263.704211][T13457] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1881'. [ 264.234838][ T5927] syz1: Port: 1 Link DOWN [ 264.245917][T13477] netlink: 'syz.6.1887': attribute type 21 has an invalid length. [ 264.256799][T13477] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1887'. [ 264.300399][T13477] netlink: 'syz.6.1887': attribute type 4 has an invalid length. [ 264.331007][T13477] netlink: 'syz.6.1887': attribute type 5 has an invalid length. [ 264.366984][T13477] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1887'. [ 264.635236][T13483] syzkaller0: entered promiscuous mode [ 264.663957][T13483] syzkaller0: entered allmulticast mode [ 264.854279][T13480] syzkaller0: entered promiscuous mode [ 264.869756][T13480] syzkaller0: entered allmulticast mode [ 265.976914][T13523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1896'. [ 267.915061][T13525] netlink: 1084 bytes leftover after parsing attributes in process `syz.2.1897'. [ 268.149956][T13541] netlink: 'syz.3.1899': attribute type 1 has an invalid length. [ 268.260887][T13554] netlink: 'syz.2.1902': attribute type 9 has an invalid length. [ 268.299303][T13554] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1902'. [ 268.528861][T13565] netlink: 'syz.4.1904': attribute type 13 has an invalid length. [ 268.877642][T13565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.968324][T13567] netlink: 'syz.6.1906': attribute type 3 has an invalid length. [ 269.039320][T13583] syz_tun: entered allmulticast mode [ 269.049159][ T6936] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.057566][ T6936] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 269.071692][ T6936] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 269.081420][ T6936] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.091379][ T6936] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 269.103124][ T6936] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 269.144711][ T6936] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.155041][ T6936] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 269.164478][ T6936] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 269.174994][T13566] syz_tun: left allmulticast mode [ 269.194523][ T6936] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.204189][ T6936] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 269.220933][ T6936] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 269.341788][T13601] netlink: 'syz.4.1913': attribute type 10 has an invalid length. [ 269.350030][T13604] netlink: 'syz.4.1913': attribute type 10 has an invalid length. [ 269.360530][T13601] bond0: (slave dummy0): Releasing backup interface [ 269.374723][T13601] dummy0: left promiscuous mode [ 269.385084][T13601] dummy0: entered allmulticast mode [ 269.426540][T13601] team0: Port device dummy0 added [ 269.452800][T13607] netlink: 'syz.6.1914': attribute type 1 has an invalid length. [ 269.652959][T13619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.896328][T13634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1923'. [ 269.922080][T13633] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1923'. [ 270.050164][T13641] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1926'. [ 270.082088][T13641] bond_slave_0: entered promiscuous mode [ 270.088144][T13641] bond_slave_1: entered promiscuous mode [ 270.106317][T13641] macvtap1: entered promiscuous mode [ 270.126025][T13641] bond0: entered promiscuous mode [ 270.132232][T13641] macvtap1: entered allmulticast mode [ 270.148586][T13641] bond0: entered allmulticast mode [ 270.158531][T13641] bond_slave_0: entered allmulticast mode [ 270.180229][T13641] bond_slave_1: entered allmulticast mode [ 270.193326][T13651] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1928'. [ 270.209670][T13651] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1928'. [ 270.221471][T13641] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 270.267767][T13647] bond0: left allmulticast mode [ 270.273028][T13647] bond_slave_0: left allmulticast mode [ 270.280468][T13647] bond_slave_1: left allmulticast mode [ 270.287075][T13647] bond0: left promiscuous mode [ 270.294477][T13654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1928'. [ 270.305469][T13647] bond_slave_0: left promiscuous mode [ 270.311245][T13647] bond_slave_1: left promiscuous mode [ 270.496129][T13659] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1930'. [ 270.535645][T13657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1929'. [ 270.874496][T13669] netlink: 'syz.4.1931': attribute type 1 has an invalid length. [ 270.889495][T13669] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1931'. [ 271.006763][T13671] tipc: Enabled bearer , priority 0 [ 271.069192][T13671] syzkaller0: entered promiscuous mode [ 271.074837][T13671] syzkaller0: entered allmulticast mode [ 271.081639][T13671] tipc: Resetting bearer [ 271.115581][ T6924] tipc: Resetting bearer [ 271.141872][T13670] tipc: Resetting bearer [ 272.389950][T13670] tipc: Disabling bearer [ 272.414547][ T5927] tipc: Node number set to 2514673460 [ 273.526179][T13691] __nla_validate_parse: 1 callbacks suppressed [ 273.526198][T13691] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1937'. [ 273.873869][T13696] xt_l2tp: invalid flags combination: 8 [ 274.040343][T13707] netlink: 212344 bytes leftover after parsing attributes in process `syz.6.1941'. [ 274.051946][T13707] netlink: 356 bytes leftover after parsing attributes in process `syz.6.1941'. [ 274.445725][T13713] netlink: 'syz.6.1944': attribute type 30 has an invalid length. [ 275.292536][T13754] xt_CT: You must specify a L4 protocol and not use inversions on it [ 275.531822][T13762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1954'. [ 275.596708][T13762] gtp2: entered promiscuous mode [ 275.650270][T13762] gtp2: entered allmulticast mode [ 275.668162][T13764] syzkaller1: entered promiscuous mode [ 275.678910][T13764] syzkaller1: entered allmulticast mode [ 275.835624][T13775] netlink: 173348 bytes leftover after parsing attributes in process `syz.4.1957'. [ 275.868192][T13770] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1956'. [ 275.921264][T13770] veth0 (unregistering): left allmulticast mode [ 275.949071][T13770] veth0 (unregistering): left promiscuous mode [ 275.955362][T13770] bridge0: port 3(veth0) entered disabled state [ 276.066129][T13785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1960'. [ 276.253564][T13794] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1962'. [ 276.422421][T13805] netlink: 'syz.5.1963': attribute type 2 has an invalid length. [ 276.745018][T13820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.898166][T13835] sctp: [Deprecated]: syz.4.1968 (pid 13835) Use of struct sctp_assoc_value in delayed_ack socket option. [ 276.898166][T13835] Use struct sctp_sack_info instead [ 277.102658][T13835] tipc: Enabled bearer , priority 0 [ 277.272040][T13835] syzkaller0: entered promiscuous mode [ 277.287909][T13835] syzkaller0: entered allmulticast mode [ 277.300541][T13835] tipc: Resetting bearer [ 277.364071][T13834] tipc: Resetting bearer [ 277.468878][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 277.964969][T13848] xt_recent: Unsupported userspace flags (000000b1) [ 279.077875][T13834] tipc: Disabling bearer [ 279.180528][T13862] netlink: 'syz.5.1972': attribute type 10 has an invalid length. [ 279.209237][T13863] netlink: 'syz.5.1972': attribute type 10 has an invalid length. [ 279.426364][T13871] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.469574][T13871] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1976'. [ 279.513674][T13875] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1977'. [ 280.078836][T13886] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1980'. [ 280.504592][T13895] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 280.681268][T13888] syzkaller0: entered promiscuous mode [ 280.692428][T13888] syzkaller0: entered allmulticast mode [ 280.864113][T13900] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1983'. [ 280.924470][T13901] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1983'. [ 282.264576][T13904] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1984'. [ 282.431814][T13908] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1987'. [ 282.453053][T13910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1988'. [ 282.463723][T13908] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1987'. [ 282.476887][T13908] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1987'. [ 282.482637][T13912] netlink: 'syz.5.1986': attribute type 4 has an invalid length. [ 282.625429][T13919] netlink: 'syz.6.1990': attribute type 11 has an invalid length. [ 282.661208][T13919] netlink: 'syz.6.1990': attribute type 11 has an invalid length. [ 282.982903][T13950] bond4: option lacp_active: invalid value (8) [ 282.991729][T13950] bond4 (unregistering): Released all slaves [ 283.096708][T13953] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 284.500521][T13968] __nla_validate_parse: 4 callbacks suppressed [ 284.500539][T13968] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2002'. [ 284.565962][T13970] syzkaller0: entered promiscuous mode [ 284.573408][T13970] syzkaller0: entered allmulticast mode [ 284.762089][T13973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2004'. [ 284.772134][T13973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2004'. [ 285.441079][T13910] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 285.813195][T13996] 8021q: VLANs not supported on ip6tnl0 [ 285.865435][T14001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.876136][T13991] netlink: 'syz.2.2010': attribute type 1 has an invalid length. [ 285.914292][T14001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.941684][T14001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.959850][T14001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.968396][T13998] x_tables: duplicate underflow at hook 4 [ 285.975710][T13998] netlink: 'syz.3.2012': attribute type 1 has an invalid length. [ 285.984242][T13998] netlink: 'syz.3.2012': attribute type 4 has an invalid length. [ 285.992473][T13998] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2012'. [ 286.269837][T13998] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 286.288190][T14014] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 286.435208][T14031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2019'. [ 286.508280][T14031] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2019'. [ 286.730047][T14031] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 286.817295][T14031] erspan1: entered allmulticast mode [ 287.111944][T14054] netlink: 'syz.5.2026': attribute type 1 has an invalid length. [ 287.130052][T14054] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2026'. [ 287.275775][T14065] netlink: 'syz.3.2030': attribute type 4 has an invalid length. [ 287.384685][T14072] sctp: [Deprecated]: syz.4.2032 (pid 14072) Use of int in max_burst socket option. [ 287.384685][T14072] Use struct sctp_assoc_value instead [ 287.591045][T14079] bond8 (unregistering): Released all slaves [ 287.706592][T14082] tipc: Enabling of bearer rejected, failed to enable media [ 288.003801][T14102] xt_hashlimit: size too large, truncated to 1048576 [ 288.051215][T14102] xt_hashlimit: invalid interval [ 288.117157][ T5887] IPVS: starting estimator thread 0... [ 288.208834][T14104] IPVS: using max 36 ests per chain, 86400 per kthread [ 288.293614][T14106] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.310507][T14106] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.413231][T14106] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.471325][T14106] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.573192][T14106] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.589982][T14106] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.651771][T14114] syzkaller0: entered promiscuous mode [ 288.657323][T14114] syzkaller0: entered allmulticast mode [ 290.003553][T14106] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.014283][T14106] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.187779][T14137] syzkaller0: entered promiscuous mode [ 290.195000][T14137] syzkaller0: entered allmulticast mode [ 290.422590][ T6932] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.457131][ T6932] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.537634][ T6933] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.590140][ T6933] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.604903][T14157] nbd: must specify a size in bytes for the device [ 290.633259][T14154] nbd: must specify a size in bytes for the device [ 290.723180][ T6936] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.746815][ T6936] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.865253][ T36] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.880818][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.045062][T14169] netlink: 'syz.5.2054': attribute type 2 has an invalid length. [ 291.097240][T14177] tipc: Enabled bearer , priority 0 [ 291.106559][T14177] syzkaller0: entered promiscuous mode [ 291.125968][T14177] syzkaller0: entered allmulticast mode [ 291.178471][T14177] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2056'. [ 291.216490][T14177] tipc: Resetting bearer [ 291.249857][T14176] tipc: Resetting bearer [ 291.285976][T14176] tipc: Disabling bearer [ 291.392484][T14196] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2061'. [ 291.404706][T14191] netlink: 21 bytes leftover after parsing attributes in process `syz.5.2060'. [ 291.570915][T14206] xt_hashlimit: max too large, truncated to 1048576 [ 291.850074][T14212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2066'. [ 291.860684][T14212] netlink: 121 bytes leftover after parsing attributes in process `syz.2.2066'. [ 291.872990][T14212] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2066'. [ 292.043885][T14220] netlink: 'syz.4.2068': attribute type 1 has an invalid length. [ 292.052161][T14220] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2068'. [ 292.423602][T14203] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 292.614232][T14232] ipvlan2: entered allmulticast mode [ 292.620872][T14232] veth0_vlan: entered allmulticast mode [ 293.010466][ T5941] hid-generic 0005:FFFB:0008.0001: item fetching failed at offset 0/1 [ 293.019966][ T5941] hid-generic 0005:FFFB:0008.0001: probe with driver hid-generic failed with error -22 [ 293.235338][T14241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2073'. [ 293.433619][T14250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2077'. [ 293.486218][T14255] ip6erspan0: entered promiscuous mode [ 293.873531][T14274] netlink: 'syz.4.2084': attribute type 10 has an invalid length. [ 293.901453][T14274] netlink: 'syz.4.2084': attribute type 10 has an invalid length. [ 294.229057][T14294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2090'. [ 294.402798][T14303] netlink: 'syz.5.2093': attribute type 11 has an invalid length. [ 295.350602][T14345] bridge_slave_0: left allmulticast mode [ 295.360930][T14345] bridge_slave_0: left promiscuous mode [ 295.369368][T14345] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.466888][T14343] syzkaller1: entered promiscuous mode [ 295.490046][T14343] syzkaller1: entered allmulticast mode [ 296.202593][T14400] Bluetooth: MGMT ver 1.23 [ 296.303198][T14405] __nla_validate_parse: 5 callbacks suppressed [ 296.303218][T14405] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2113'. [ 296.624812][T14419] netlink: 'syz.5.2115': attribute type 10 has an invalid length. [ 296.665575][T14419] team0: Failed to send options change via netlink (err -105) [ 296.682444][T14419] team0: Port device dummy0 added [ 296.690089][T14420] netlink: 'syz.5.2115': attribute type 10 has an invalid length. [ 296.708576][T14420] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 296.734912][T14419] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2115'. [ 296.751302][T14420] team0: Failed to send options change via netlink (err -105) [ 296.772716][T14420] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 296.849750][T14420] team0: Port device dummy0 removed [ 296.871260][T14420] dummy0: entered promiscuous mode [ 296.940241][T14420] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 297.162080][T14426] netlink: 'syz.5.2116': attribute type 4 has an invalid length. [ 297.202244][T14426] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2116'. [ 297.254520][T14428] tipc: Enabled bearer , priority 0 [ 297.361256][T14428] syzkaller0: entered promiscuous mode [ 297.377124][T14428] syzkaller0: entered allmulticast mode [ 297.387878][T14428] tipc: Resetting bearer [ 297.452816][ T6932] tipc: Resetting bearer [ 297.498743][T14427] tipc: Resetting bearer [ 299.296880][T14427] tipc: Disabling bearer [ 300.339559][ T36] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.356595][ T36] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.366746][ T36] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.377253][ T36] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.430880][T14476] syzkaller1: entered promiscuous mode [ 300.436403][T14476] syzkaller1: entered allmulticast mode [ 300.486628][ T36] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.495702][ T36] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.523902][ T36] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.538805][ T36] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.624785][T14482] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2128'. [ 300.635352][T14489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2131'. [ 300.657479][T14484] ªªªªª98åFÿÿÿÿ: renamed from lo (while UP) [ 300.763523][T14493] netlink: 'syz.6.2133': attribute type 6 has an invalid length. [ 300.780183][T14493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.052595][T14509] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2137'. [ 301.293818][T14518] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2141'. [ 301.334755][T14515] tipc: Started in network mode [ 301.340279][T14515] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 301.351548][T14515] tipc: Enabled bearer , priority 10 [ 301.357860][T14518] batadv_slave_0: entered promiscuous mode [ 301.433323][T14516] batadv_slave_0: left promiscuous mode [ 301.750413][T14531] openvswitch: netlink: IPv4 tunnel dst address is zero [ 301.757545][T14531] openvswitch: netlink: IPv4 tunnel dst address is zero [ 301.780593][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 301.847396][T14537] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2147'. [ 302.045367][T14540] netlink: 'syz.6.2145': attribute type 4 has an invalid length. [ 302.057326][T14540] netlink: 'syz.6.2145': attribute type 4 has an invalid length. [ 302.105009][T14537] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2147'. [ 302.114309][T14537] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2147'. [ 302.304791][T14566] netlink: 'syz.3.2152': attribute type 1 has an invalid length. [ 302.316913][T14570] Bluetooth: MGMT ver 1.23 [ 302.331239][T14566] netlink: 'syz.3.2152': attribute type 2 has an invalid length. [ 302.350819][T14569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2151'. [ 302.362151][T14566] netlink: 'syz.3.2152': attribute type 1 has an invalid length. [ 302.398276][T14566] netlink: 'syz.3.2152': attribute type 2 has an invalid length. [ 302.469296][ T5901] tipc: Node number set to 1 [ 302.504741][T14574] xt_CT: You must specify a L4 protocol and not use inversions on it [ 302.539542][T14574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2155'. [ 302.612359][T14574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2155'. [ 302.829770][T14572] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2154'. [ 303.192409][T14587] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 303.227326][T14586] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2158'. [ 303.239762][T14584] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 303.486037][T14608] netlink: 'syz.2.2163': attribute type 1 has an invalid length. [ 303.696570][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2166'. [ 303.841944][T14628] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2170'. [ 304.317063][T14661] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 305.619081][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 306.290348][T14673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.298117][T14673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.506206][T14698] netpci0: tun_chr_ioctl cmd 1074025678 [ 306.523601][T14698] netpci0: group set to 0 [ 306.866678][T14717] syzkaller1: entered promiscuous mode [ 306.879806][T14717] syzkaller1: entered allmulticast mode [ 306.896162][T14726] __nla_validate_parse: 3 callbacks suppressed [ 306.896182][T14726] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2199'. [ 307.239521][T14740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2203'. [ 307.411613][T14748] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 307.450189][T14743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2203'. [ 307.516689][T14753] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2207'. [ 308.050020][T14768] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2212'. [ 308.262026][T14771] xt_CT: You must specify a L4 protocol and not use inversions on it [ 308.389023][T14778] veth0: left promiscuous mode [ 308.450447][T14778] veth0: left allmulticast mode [ 308.547873][T14778] gre2: left allmulticast mode [ 308.570431][ T6937] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.585863][ T6937] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.643669][ T6937] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.739435][T14786] netlink: 'syz.2.2216': attribute type 16 has an invalid length. [ 308.748041][T14786] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2216'. [ 308.802751][ T6937] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.938149][T14795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.983343][T14790] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2217'. [ 309.055798][T14798] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2219'. [ 309.235107][T14800] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2219'. [ 310.083647][T14835] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 310.090990][T14835] IPv6: NLM_F_CREATE should be set when creating new route [ 310.270563][T14829] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5 [ 310.530401][T14859] xt_hashlimit: size too large, truncated to 1048576 [ 310.601434][T14866] xt_hashlimit: size too large, truncated to 1048576 [ 310.662088][T14868] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 310.717369][T14866] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 310.822603][T14870] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2234'. [ 312.174028][T14919] __nla_validate_parse: 1 callbacks suppressed [ 312.174050][T14919] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2242'. [ 312.760658][T14919] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 312.957869][ T36] smc: removing ib device syz2 [ 313.204074][T14943] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2249'. [ 313.514875][T14952] block nbd4: server does not support multiple connections per device. [ 313.554768][T14952] block nbd4: shutting down sockets [ 313.840249][T14965] tipc: Enabled bearer , priority 0 [ 313.868311][T14965] syzkaller0: entered promiscuous mode [ 313.887586][T14965] syzkaller0: entered allmulticast mode [ 313.982352][T14965] tipc: Resetting bearer [ 313.991825][T14965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2253'. [ 314.067976][T14965] geneve3: entered promiscuous mode [ 314.096589][T14964] tipc: Resetting bearer [ 314.106652][T14981] netlink: 'syz.6.2258': attribute type 1 has an invalid length. [ 314.135265][T14964] tipc: Disabling bearer [ 314.301587][T14986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2257'. [ 315.211106][T15003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2262'. [ 315.975181][T15020] geneve2: entered promiscuous mode [ 315.988293][T15020] geneve2: entered allmulticast mode [ 316.085517][T15025] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2270'. [ 316.125123][T15027] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2271'. [ 316.127545][T15028] netlink: 'syz.3.2271': attribute type 1 has an invalid length. [ 316.146317][ T36] bond0: (slave bond_slave_0): interface is now down [ 316.152884][T15025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.155035][ T36] bond0: (slave bond_slave_1): interface is now down [ 316.203770][T15028] 8021q: adding VLAN 0 to HW filter on device bond4 [ 316.222988][T15027] bond4: (slave gretap2): making interface the new active one [ 316.231905][T15027] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 316.246701][T15034] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2272'. [ 316.300953][ T6932] bond0: (slave bond_slave_0): interface is now down [ 316.320501][ T6932] bond0: (slave bond_slave_1): interface is now down [ 316.382695][ T6932] bond0: now running without any active interface! [ 316.562752][T15049] pim6reg: entered allmulticast mode [ 316.573153][T15049] pim6reg: left allmulticast mode [ 316.651564][T15053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2279'. [ 316.664234][T15058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2276'. [ 317.130346][T15083] 6eth1_to_bond: renamed from ip6tnl0 [ 317.143066][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.147591][T15083] A link change request failed with some changes committed already. Interface 6eth1_to_bond may have been left with an inconsistent configuration, please check. [ 317.215270][T15071] __nla_validate_parse: 9 callbacks suppressed [ 317.215290][T15071] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2283'. [ 317.453948][T15100] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2291'. [ 317.636675][T15100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2291'. [ 318.190079][T15127] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 318.257307][T15130] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2299'. [ 318.335373][T15131] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 318.440667][T15137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2298'. [ 318.511349][T15127] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 318.612049][T15142] bond0: (slave rose0): Enslaving as an active interface with an up link [ 318.720136][T15156] netlink: 'syz.3.2305': attribute type 1 has an invalid length. [ 318.748241][T15156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2305'. [ 318.806512][T15156] netlink: 'syz.3.2305': attribute type 1 has an invalid length. [ 318.951316][T15166] netlink: 'syz.4.2306': attribute type 3 has an invalid length. [ 318.963458][T15170] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2308'. [ 318.974047][T15166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2306'. [ 319.131445][T15179] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2310'. [ 319.252171][T15182] sctp: [Deprecated]: syz.5.2311 (pid 15182) Use of int in max_burst socket option. [ 319.252171][T15182] Use struct sctp_assoc_value instead [ 319.279034][T15185] sctp: [Deprecated]: syz.5.2311 (pid 15185) Use of int in max_burst socket option. [ 319.279034][T15185] Use struct sctp_assoc_value instead [ 319.341466][T15189] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2312'. [ 321.765425][T15158] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 322.058614][T15214] xt_recent: hitcount (67108870) is larger than allowed maximum (65535) [ 322.233732][T15219] netlink: 'syz.2.2320': attribute type 10 has an invalid length. [ 322.388157][T15205] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2318'. [ 322.502400][T15234] syzkaller0: entered promiscuous mode [ 322.518222][T15234] syzkaller0: entered allmulticast mode [ 322.578190][T15234] netlink: 'syz.2.2328': attribute type 41 has an invalid length. [ 322.691195][T15240] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2330'. [ 322.868456][T15258] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2334'. [ 323.001304][T15230] vlan2: entered promiscuous mode [ 323.019782][T15230] dummy0: entered promiscuous mode [ 323.050142][T15271] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2337'. [ 323.092008][T15276] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2327'. [ 323.180541][T15279] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2337'. [ 323.321398][T15284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2339'. [ 323.703704][T15305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2345'. [ 323.834314][T15317] tipc: Enabled bearer , priority 0 [ 323.845244][T15311] syzkaller0: entered promiscuous mode [ 323.860088][T15311] syzkaller0: entered allmulticast mode [ 323.867322][T15314] syzkaller0: entered promiscuous mode [ 323.899083][T15314] syzkaller0: entered allmulticast mode [ 323.922402][T15320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2350'. [ 323.934230][T15310] tipc: Resetting bearer [ 324.024063][T15309] tipc: Resetting bearer [ 324.051190][T15309] tipc: Disabling bearer [ 324.161240][T15333] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2353'. [ 324.191330][T15335] 8021q: adding VLAN 0 to HW filter on device bond4 [ 324.201105][T15335] team0: Port device bond4 added [ 324.244421][T15344] xt_hashlimit: max too large, truncated to 1048576 [ 324.259504][T15344] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 324.575938][T15363] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 324.963436][T15385] x_tables: duplicate entry at hook 1 [ 325.460692][T15400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.060377][T15422] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 326.779012][T15445] C: renamed from team_slave_0 [ 327.078549][T15462] netlink: 'syz.5.2392': attribute type 1 has an invalid length. [ 327.102772][T15462] netlink: 'syz.5.2392': attribute type 2 has an invalid length. [ 327.132291][T15462] netlink: 'syz.5.2392': attribute type 1 has an invalid length. [ 327.239915][T15464] 8021q: VLANs not supported on ip6tnl0 [ 327.246571][T15464] syzkaller0: entered promiscuous mode [ 327.269718][T15464] syzkaller0: entered allmulticast mode [ 327.564701][T15478] __nla_validate_parse: 19 callbacks suppressed [ 327.564719][T15478] netlink: 296 bytes leftover after parsing attributes in process `syz.3.2397'. [ 327.597354][T15480] tipc: Enabled bearer , priority 0 [ 327.752001][T15480] syzkaller0: entered promiscuous mode [ 327.769583][T15480] syzkaller0: entered allmulticast mode [ 327.775802][T15480] tipc: Resetting bearer [ 327.829638][T15479] tipc: Resetting bearer [ 327.915332][T15503] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2403'. [ 328.008115][T15504] netlink: 'syz.5.2403': attribute type 11 has an invalid length. [ 329.292468][T15479] tipc: Disabling bearer [ 329.459937][ T5834] Bluetooth: hci5: command 0x0406 tx timeout [ 329.627349][T15525] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2408'. [ 329.646207][T15525] netlink: 348 bytes leftover after parsing attributes in process `syz.5.2408'. [ 329.719453][T15525] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2408'. [ 329.748067][T15525] netlink: 348 bytes leftover after parsing attributes in process `syz.5.2408'. [ 329.758094][T15525] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2408'. [ 330.051515][T15543] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (65485) ! [ 330.186723][T15543] syzkaller0: entered promiscuous mode [ 330.195598][T15543] syzkaller0: entered allmulticast mode [ 330.211884][T15545] 0: reclassify loop, rule prio 0, protocol 800 [ 330.219563][T15543] 0: reclassify loop, rule prio 0, protocol 800 [ 330.393096][T15550] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2415'. [ 331.636212][T15605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2428'. [ 331.839862][T15613] netlink: 'syz.6.2432': attribute type 13 has an invalid length. [ 331.900820][T15614] IPVS: set_ctl: invalid protocol: 0 172.20.20.56:20003 [ 332.425493][T15613] gretap0: refused to change device tx_queue_len [ 332.440542][T15613] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 332.510010][T15621] netlink: 6916 bytes leftover after parsing attributes in process `syz.3.2433'. [ 332.663105][T15631] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 332.791196][T15636] tipc: Enabling of bearer rejected, failed to enable media [ 333.496200][T15674] syzkaller0: entered promiscuous mode [ 333.502047][T15674] syzkaller0: entered allmulticast mode [ 333.723111][T15680] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2445'. [ 333.775209][T15682] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2445'. [ 333.795433][T15682] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2445'. [ 333.820408][T15682] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2445'. [ 333.878958][ T6936] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.881675][T15682] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2445'. [ 333.893891][ T6936] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.919388][ T6936] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.928820][T15682] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2445'. [ 333.937885][T15682] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2445'. [ 333.978782][ T6936] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.088465][T15693] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2447'. [ 335.267101][T15720] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2454'. [ 335.547954][T15732] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2457'. [ 336.032527][T15756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.065030][T15756] netlink: 'syz.5.2462': attribute type 9 has an invalid length. [ 336.109395][T15758] sctp: [Deprecated]: syz.4.2461 (pid 15758) Use of int in max_burst socket option deprecated. [ 336.109395][T15758] Use struct sctp_assoc_value instead [ 336.144738][T15760] openvswitch: netlink: IP tunnel dst address not specified [ 336.482370][ T6937] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.491990][ T6937] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.501197][ T6937] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.523077][ T6937] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.034817][T15789] bond7: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 337.052512][T15789] bond7 (unregistering): Released all slaves [ 337.079654][T15792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.094223][T15793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.238438][T15798] pimreg3: entered allmulticast mode [ 337.257639][T15798] syzkaller0: entered promiscuous mode [ 337.264630][T15798] syzkaller0: entered allmulticast mode [ 337.513632][T15801] netlink: 'syz.4.2474': attribute type 1 has an invalid length. [ 338.021970][T15808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 339.251230][T15847] __nla_validate_parse: 9 callbacks suppressed [ 339.251249][T15847] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2487'. [ 339.286754][T15847] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2487'. [ 339.725210][T15861] netlink: 'syz.4.2491': attribute type 1 has an invalid length. [ 339.769251][T15861] 8021q: adding VLAN 0 to HW filter on device bond7 [ 339.779464][T15863] netlink: 15126 bytes leftover after parsing attributes in process `syz.4.2491'. [ 339.807220][T15866] syzkaller0: entered promiscuous mode [ 339.816542][T15866] syzkaller0: entered allmulticast mode [ 339.848458][T15861] 8021q: adding VLAN 0 to HW filter on device bond7 [ 339.856000][T15861] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 339.870209][T15861] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 339.935783][T15863] bond7: (slave wlan0): Enslaving as an active interface with a down link [ 340.557350][T15900] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2500'. [ 341.100520][T15913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2503'. [ 341.109970][T15913] netlink: 620 bytes leftover after parsing attributes in process `syz.5.2503'. [ 341.274832][T15915] syzkaller1: entered promiscuous mode [ 341.281024][T15915] syzkaller1: entered allmulticast mode [ 341.289805][T15915] x_tables: duplicate underflow at hook 2 [ 341.442096][T15917] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2505'. [ 341.452439][T15917] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2505'. [ 341.463989][T15917] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2505'. [ 341.473922][T15917] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2505'. [ 342.490331][T15928] netlink: 'syz.5.2508': attribute type 1 has an invalid length. [ 343.501794][T15937] x_tables: duplicate underflow at hook 4 [ 344.368808][T15944] netlink: 'syz.4.2513': attribute type 1 has an invalid length. [ 344.529315][ T5142] Bluetooth: hci6: link tx timeout [ 344.536493][ T5142] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 344.546880][ T5142] Bluetooth: hci6: link tx timeout [ 344.552583][ T5142] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 344.582238][T15964] netlink: 'syz.4.2517': attribute type 10 has an invalid length. [ 345.827193][T15964] dummy0: left allmulticast mode [ 345.864053][T15964] team0: Port device dummy0 removed [ 345.894101][T15964] dummy0: entered promiscuous mode [ 345.908453][T15964] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 346.245160][T15996] netlink: 'syz.4.2527': attribute type 4 has an invalid length. [ 346.298611][T15981] veth1_vlan: left promiscuous mode [ 346.348437][T15981] batman_adv: batadv0: Adding interface: macvlan1 [ 346.369484][T15981] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.411355][T15981] batman_adv: batadv0: Not using interface macvlan1 (retrying later): interface not active [ 346.439448][T15997] netlink: 'syz.5.2526': attribute type 3 has an invalid length. [ 346.447465][T15997] netlink: 'syz.5.2526': attribute type 3 has an invalid length. [ 346.580871][ T5142] Bluetooth: hci6: command 0x0405 tx timeout [ 346.881955][T16019] bridge0: entered allmulticast mode [ 346.971114][T16019] bridge0: left promiscuous mode [ 346.976409][T16019] bridge0: entered promiscuous mode [ 347.391990][T16032] syz_tun: entered allmulticast mode [ 347.454617][T16032] dvmrp6: entered allmulticast mode [ 347.550137][T16039] netlink: 'syz.4.2536': attribute type 3 has an invalid length. [ 347.562406][T16039] netlink: 'syz.4.2536': attribute type 1 has an invalid length. [ 347.586939][T16039] __nla_validate_parse: 61 callbacks suppressed [ 347.586959][T16039] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2536'. [ 347.892408][T16042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2537'. [ 347.921556][T16042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2537'. [ 347.932442][T16042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2537'. [ 348.082676][T16044] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2538'. [ 348.670246][ T5142] Bluetooth: hci6: command 0x0405 tx timeout [ 348.946610][ T36] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.966160][ T36] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.010302][ T36] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.028912][ T36] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.070157][T16067] netlink: 'syz.5.2545': attribute type 1 has an invalid length. [ 349.168106][T16069] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.210749][T16069] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 349.292909][T16074] 8021q: adding VLAN 0 to HW filter on device bond6 [ 349.341975][T16074] bond5: (slave bond6): making interface the new active one [ 349.362438][T16079] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2545'. [ 349.372271][T16074] bond5: (slave bond6): Enslaving as an active interface with an up link [ 349.400912][T16078] bond5: (slave gretap2): Enslaving as a backup interface with an up link [ 349.417416][T16079] 8021q: adding VLAN 0 to HW filter on device bond5 [ 349.435772][T16074] vlan0: entered promiscuous mode [ 349.441439][T16074] bond5: entered promiscuous mode [ 349.446885][T16074] bond6: entered promiscuous mode [ 349.890351][T16083] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2547'. [ 349.925905][T16083] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2547'. [ 349.996069][T16083] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2547'. [ 350.777591][T16126] macsec0: entered allmulticast mode [ 350.786082][T16127] veth1_macvtap: entered allmulticast mode [ 350.794063][T16127] macsec0: left allmulticast mode [ 350.799791][T16127] veth1_macvtap: left allmulticast mode [ 351.041112][T16138] netlink: 6040 bytes leftover after parsing attributes in process `syz.5.2559'. [ 351.334187][T16150] tipc: Enabling of bearer rejected, failed to enable media [ 351.508366][T16161] openvswitch: netlink: Key 6 has unexpected len 212 expected 2 [ 352.197571][T16190] netlink: 'syz.6.2570': attribute type 1 has an invalid length. [ 352.304209][T16194] nbd: couldn't find a device at index 65546 [ 352.982624][ T31] INFO: task syz.0.1224:10906 blocked for more than 143 seconds. [ 353.019037][ T31] Not tainted syzkaller #0 [ 353.024023][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 353.068775][ T31] task:syz.0.1224 state:D stack:26248 pid:10906 tgid:10905 ppid:5818 task_flags:0x400040 flags:0x00080002 [ 353.103182][ T31] Call Trace: [ 353.109312][ T31] [ 353.114562][ T31] __schedule+0x14ea/0x5050 [ 353.126927][ T31] ? preempt_schedule_notrace+0x57/0x90 [ 353.144972][ T31] ? __pfx___schedule+0x10/0x10 [ 353.162963][ T31] ? schedule+0x90/0x360 [ 353.166742][T16213] __nla_validate_parse: 3 callbacks suppressed [ 353.166760][T16213] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2575'. [ 353.176439][ T31] schedule+0x164/0x360 [ 353.198818][ T31] schedule_preempt_disabled+0x13/0x30 [ 353.215627][ T31] __mutex_lock+0x7fe/0x1300 [ 353.228185][ T31] ? __mutex_lock+0x5ac/0x1300 [ 353.243179][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 353.260821][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 353.278349][ T31] ? __nlmsg_put+0xef/0x1b0 [ 353.288495][ T31] ? genlmsg_put+0x137/0x2e0 [ 353.301688][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 353.318512][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 353.348636][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 353.354605][ T31] ? __asan_memcpy+0x40/0x70 [ 353.364954][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 353.382571][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 353.401089][ T31] genl_rcv_msg+0x61c/0x7a0 [ 353.409618][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.418079][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 353.430143][ T31] netlink_rcv_skb+0x232/0x4b0 [ 353.439795][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.449453][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 353.460790][ T31] ? genl_rcv+0x19/0x40 [ 353.472798][ T31] ? down_read+0x272/0x2e0 [ 353.482983][ T31] ? genl_rcv+0xd/0x40 [ 353.495235][ T31] genl_rcv+0x28/0x40 [ 353.505063][ T31] netlink_unicast+0x80f/0x9b0 [ 353.515680][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 353.527516][ T31] ? netlink_sendmsg+0x650/0xb40 [ 353.538298][ T31] ? skb_put+0x11b/0x210 [ 353.548335][ T31] netlink_sendmsg+0x813/0xb40 [ 353.558725][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.564230][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 353.570103][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 353.575575][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.581620][ T31] ____sys_sendmsg+0xa68/0xad0 [ 353.587588][ T31] ? __might_fault+0xaf/0x130 [ 353.592734][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.598219][ T31] ? import_iovec+0x73/0xa0 [ 353.603550][ T31] ___sys_sendmsg+0x2a5/0x360 [ 353.608400][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 353.614124][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.620308][ T31] ? futex_wait+0x29a/0x380 [ 353.624929][ T31] ? __fget_files+0x2a/0x420 [ 353.632170][ T31] ? __fget_files+0x3a0/0x420 [ 353.642557][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 353.655209][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 353.667643][ T31] ? rcu_is_watching+0x15/0xb0 [ 353.678458][ T31] do_syscall_64+0xe2/0xf80 [ 353.683424][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.689937][ T31] ? trace_irq_disable+0x37/0x100 [ 353.695138][ T31] ? clear_bhb_loop+0x60/0xb0 [ 353.703012][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.709307][ T31] RIP: 0033:0x7f3eadb9aeb9 [ 353.713963][ T31] RSP: 002b:00007f3eae992028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.722560][ T31] RAX: ffffffffffffffda RBX: 00007f3eade15fa0 RCX: 00007f3eadb9aeb9 [ 353.731041][ T31] RDX: 0000000004000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 353.739442][ T31] RBP: 00007f3eadc08c1f R08: 0000000000000000 R09: 0000000000000000 [ 353.747434][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.762699][ T31] R13: 00007f3eade16038 R14: 00007f3eade15fa0 R15: 00007ffcc1bd8688 [ 353.770934][ T31] [ 353.774340][ T31] [ 353.774340][ T31] Showing all locks held in the system: [ 353.785243][ T31] 1 lock held by khungtaskd/31: [ 353.790612][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 353.800689][ T31] 2 locks held by syslogd/5172: [ 353.805631][ T31] #0: ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 353.815750][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 353.825255][ T31] 2 locks held by getty/5585: [ 353.830281][ T31] #0: ffff88803523c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 353.840353][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 353.867536][ T31] 2 locks held by syz.1.1211/10856: [ 353.878345][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 353.900380][ T31] #1: ffffffff8e879428 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 353.911116][ T31] 2 locks held by syz.0.1224/10906: [ 353.917736][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 353.934200][ T31] #1: ffffffff8e879428 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 353.956585][ T31] 2 locks held by syz.2.2521/15974: [ 353.967452][ T31] 1 lock held by syz.3.2532/16017: [ 353.978626][ T31] #0: ffffffff9a51ab78 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0xa6e/0x12c0 [ 354.000576][ T31] 1 lock held by syz.3.2532/16020: [ 354.006550][ T31] #0: ffffffff9a51ab78 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0xa6e/0x12c0 [ 354.016832][ T31] 3 locks held by syz.5.2573/16199: [ 354.022521][ T31] #0: ffff88805ae75848 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 354.037207][ T31] #1: ffff88803659c260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_release+0x77d/0xcc0 [ 354.047184][ T31] #2: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 354.062966][ T31] [ 354.065395][ T31] ============================================= [ 354.065395][ T31] [ 354.075060][ T31] NMI backtrace for cpu 0 [ 354.075085][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 354.075105][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 354.075115][ T31] Call Trace: [ 354.075122][ T31] [ 354.075130][ T31] dump_stack_lvl+0xe8/0x150 [ 354.075156][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 354.075175][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 354.075202][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 354.075224][ T31] sys_info+0x135/0x170 [ 354.075238][ T31] watchdog+0xf90/0xfe0 [ 354.075261][ T31] ? watchdog+0x209/0xfe0 [ 354.075285][ T31] kthread+0x726/0x8b0 [ 354.075307][ T31] ? __pfx_watchdog+0x10/0x10 [ 354.075323][ T31] ? __pfx_kthread+0x10/0x10 [ 354.075345][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.075364][ T31] ? __pfx_kthread+0x10/0x10 [ 354.075383][ T31] ret_from_fork+0x51b/0xa40 [ 354.075402][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 354.075430][ T31] ? __switch_to+0xc82/0x1410 [ 354.075454][ T31] ? __pfx_kthread+0x10/0x10 [ 354.075473][ T31] ret_from_fork_asm+0x1a/0x30 [ 354.075508][ T31] [ 354.075514][ T31] Sending NMI from CPU 0 to CPUs 1: [ 354.202401][ C1] NMI backtrace for cpu 1 [ 354.202418][ C1] CPU: 1 UID: 0 PID: 16219 Comm: syz.5.2573 Not tainted syzkaller #0 PREEMPT(full) [ 354.202436][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 354.202445][ C1] RIP: 0010:kasan_check_range+0x75/0x2c0 [ 354.202468][ C1] Code: 49 c1 ef 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 17 49 ff c8 4d 89 c1 49 c1 e9 03 48 bb 01 00 00 00 00 fc ff df 4d 8d 34 19 <4d> 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c [ 354.202480][ C1] RSP: 0018:ffffc9001b2f7240 EFLAGS: 00000a07 [ 354.202495][ C1] RAX: ffffffff81fd7701 RBX: dffffc0000000001 RCX: ffffffff81fd77bb [ 354.202506][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0001daf500 [ 354.202515][ C1] RBP: ffffc9001b2f7670 R08: ffffea0001daf507 R09: 1ffffd40003b5ea0 [ 354.202526][ C1] R10: dffffc0000000000 R11: fffff940003b5ea0 R12: 0000000000000012 [ 354.202536][ C1] R13: ffffc9001b2f7550 R14: fffff940003b5ea1 R15: 1ffffd40003b5ea0 [ 354.202546][ C1] FS: 0000000000000000(0000) GS:ffff8881257ea000(0000) knlGS:0000000000000000 [ 354.202562][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.202572][ C1] CR2: 00005627a291c950 CR3: 0000000078036000 CR4: 00000000003526f0 [ 354.202585][ C1] Call Trace: [ 354.202591][ C1] [ 354.202599][ C1] filemap_free_folio+0xbb/0x1a0 [ 354.202620][ C1] truncate_inode_folio+0x5d/0x70 [ 354.202638][ C1] shmem_undo_range+0x42f/0x1660 [ 354.202661][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 354.202686][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 354.202728][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 354.202747][ C1] ? percpu_counter_add_batch+0xea/0x1d0 [ 354.202765][ C1] shmem_evict_inode+0x240/0x9e0 [ 354.202783][ C1] ? inode_wait_for_writeback+0x16d/0x3b0 [ 354.202801][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 354.202816][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 354.202832][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 354.202851][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 354.202866][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 354.202881][ C1] evict+0x61e/0xb10 [ 354.202902][ C1] ? __pfx_evict+0x10/0x10 [ 354.202918][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 354.202934][ C1] ? _raw_spin_unlock+0x28/0x50 [ 354.202949][ C1] ? iput+0xcc2/0x1020 [ 354.202968][ C1] __dentry_kill+0x1a2/0x5e0 [ 354.202987][ C1] ? finish_dput+0xad/0x480 [ 354.203001][ C1] finish_dput+0xc9/0x480 [ 354.203016][ C1] __fput+0x691/0xa70 [ 354.203037][ C1] task_work_run+0x1d9/0x270 [ 354.203054][ C1] ? __pfx_task_work_run+0x10/0x10 [ 354.203070][ C1] ? kmem_cache_free+0x195/0x610 [ 354.203084][ C1] ? do_exit+0x696/0x2310 [ 354.203102][ C1] do_exit+0x69b/0x2310 [ 354.203119][ C1] ? cgroup1_freezing+0x20/0x350 [ 354.203140][ C1] ? __pfx_do_exit+0x10/0x10 [ 354.203157][ C1] ? cgroup1_freezing+0x20/0x350 [ 354.203174][ C1] ? cgroup1_freezing+0x20/0x350 [ 354.203195][ C1] do_group_exit+0x21b/0x2d0 [ 354.203211][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.203228][ C1] get_signal+0x1284/0x1330 [ 354.203256][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 354.203275][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 354.203296][ C1] ? fput_close_sync+0x11f/0x240 [ 354.203312][ C1] ? __pfx___se_sys_futex+0x10/0x10 [ 354.203332][ C1] exit_to_user_mode_loop+0x86/0x480 [ 354.203350][ C1] ? rcu_is_watching+0x15/0xb0 [ 354.203364][ C1] do_syscall_64+0x2b7/0xf80 [ 354.203381][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.203395][ C1] ? trace_irq_disable+0x37/0x100 [ 354.203410][ C1] ? clear_bhb_loop+0x60/0xb0 [ 354.203426][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.203439][ C1] RIP: 0033:0x7fba2f19aeb9 [ 354.203451][ C1] Code: Unable to access opcode bytes at 0x7fba2f19ae8f. [ 354.203459][ C1] RSP: 002b:00007fba2d3b40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 354.203473][ C1] RAX: fffffffffffffe00 RBX: 00007fba2f416188 RCX: 00007fba2f19aeb9 [ 354.203483][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fba2f416188 [ 354.203493][ C1] RBP: 00007fba2f416180 R08: 0000000000000000 R09: 0000000000000000 [ 354.203502][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.203511][ C1] R13: 00007fba2f416218 R14: 00007ffeef364750 R15: 00007ffeef364838 [ 354.203529][ C1] [ 354.630284][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 354.637146][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 354.646263][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 354.656328][ T31] Call Trace: [ 354.659625][ T31] [ 354.662548][ T31] vpanic+0x1e0/0x670 [ 354.666526][ T31] panic+0xc5/0xd0 [ 354.670236][ T31] ? __pfx_panic+0x10/0x10 [ 354.674641][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 354.680007][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 354.686161][ T31] watchdog+0xfda/0xfe0 [ 354.690324][ T31] ? watchdog+0x209/0xfe0 [ 354.694655][ T31] kthread+0x726/0x8b0 [ 354.698728][ T31] ? __pfx_watchdog+0x10/0x10 [ 354.703405][ T31] ? __pfx_kthread+0x10/0x10 [ 354.707998][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.713189][ T31] ? __pfx_kthread+0x10/0x10 [ 354.717770][ T31] ret_from_fork+0x51b/0xa40 [ 354.722351][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 354.727455][ T31] ? __switch_to+0xc82/0x1410 [ 354.732124][ T31] ? __pfx_kthread+0x10/0x10 [ 354.736704][ T31] ret_from_fork_asm+0x1a/0x30 [ 354.741469][ T31] [ 354.744886][ T31] Kernel Offset: disabled [ 354.749200][ T31] Rebooting in 86400 seconds..