last executing test programs: 1m41.829086167s ago: executing program 0 (id=1): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(0xfffffffffffffffd, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000002c0)="fef351f6b11f421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000180)={@multicast2, @local, 0xffffffffffffffff, "e0d169e366dc2032a1beca0f621eaaf96389d7612f6346eb9fa929ac17cb2038", 0xc28, 0x6, 0x7fff, 0x200}, 0x3c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000177, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1m38.257703642s ago: executing program 0 (id=30): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = socket(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10, 0x110, 0xa}], 0x10}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@empty}}, [@migrate={0x50, 0x11, [{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}]}]}, 0xa0}}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r4, r7, 0x25, 0x2, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r8, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) listen(r3, 0x39e) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f8", 0x67}], 0x1}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x34, r10, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1ff}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000844}, 0x40) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4048805}, 0x4000055) 1m36.386678294s ago: executing program 0 (id=44): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ef000000e1ffffffffffffff95000000000000006a474da80fb6b8ab82cb20d326a36d943fd0ea0ab2bb98c476757185d20073fc87cafc8a13ab30bf43608f0a81b27d5cc5e3b80adcad549726c60d65b4778502d5ef81dcbe88855e4e36d5f728433448e9c31007f06411dfe088012467"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='svc_wake_up\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r1, &(0x7f0000000080)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb9", 0x29) 1m36.063377521s ago: executing program 0 (id=45): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$nci(r0, &(0x7f0000000040)=""/100, 0x64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_delrule={0x7c, 0x21, 0x400, 0x70bd29, 0x25dfdbfb, {0xa, 0x20, 0x0, 0x83, 0x4, 0x0, 0x0, 0x2, 0x10}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x3}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x80}, @FRA_DST={0x14, 0x1, @private0}, @FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @FRA_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1d}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}]}, 0x20}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000340)) r4 = openat$cgroup_ro(r1, &(0x7f0000000380)='memory.swap.events\x00', 0x0, 0x0) r5 = accept$phonet_pipe(r4, &(0x7f00000003c0), &(0x7f0000000400)=0x10) listen(r5, 0x31) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f0000000440)) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000480), &(0x7f00000004c0)=0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000640)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/175, 0xaf, 0x0, &(0x7f00000005c0)=""/75, 0x4b}, &(0x7f0000000680)=0x40) ioctl$FIONCLEX(r1, 0x5450) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r4, 0x0, 0x32, 0x3, &(0x7f00000006c0)="a187fb158556c5eccde330359b30afcca9d986ccde24f3c59aca73fa4690cf2a8d259f39e4334028c65530271ebe82cb4d6b", &(0x7f0000000700)=""/3, 0x5, 0x0, 0xd6, 0xde, &(0x7f0000000740)="fd068b0c1f010c9e1befb16a83ffbdbc525b7313f3ef8a7c41bb60d7a51048e7503f8ad5ac9c4a32f425de61a5574d69dcd2df79050aafbc5e8f341169ae6b98966f5ffe6f9572be7f64a7c9d5d963cf99f3e3b711d8ee62558fd358ed27c132b751eee64a413afc9a30ed1a62828593ebdd954cf418998f66dc24800fc7d095751eb15769bc0f90d4cf2326d4b7ac04dd280cc74f321e491a6e330dfec7c172cc9e8cfc3b43c5f33e9bc03d9023b13555e43d23317c0696574474b1ca947d563d077b2de41465818863d8c350dadaed54020500651f", &(0x7f0000000840)="05a6d5210d09997b257e40a33d35018bb63dfd213a7a16710996730603d6a738d50305d4a3967c793734fd8649fb4617b9e4c51e0dc7f019434dbba3b1bfc48c63d5caddd82b669b7a80c615f05627f420cfb84c299e5fc78e544720f91e3b8a805438d036c9197e22e4ca491d0fc490e2e9c64f808cf781fbc80d4ec0475433a6e12cab4a780aa3a8a8cd5fa743668da2cbf22c88a9b2eec02ec492c485289460afbfac0405d5db50b3c3f51f2f82592890e535024ec6c43a784fa1875158edc93f9b8135990df033fa1f265df951c1d4c6ab69b8c0eba4f0047520de18", 0x2, 0x0, 0xfffffff2}, 0x50) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f00000009c0)={0x0, "f44289be86fe1b61d4d2977121ce2317"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000019c0)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000001dc0)={0x8, 0x7, {0xacf, @struct={0x6, 0x7}, r6, 0xc, 0x6, 0xfffffffffffffffe, 0x5f8, 0x5, 0x40, @usage=0x9, 0x9, 0x7, [0x80000000, 0x8, 0x4, 0x2, 0xfffffffffffffff9, 0x4]}, {0x10, @struct={0x4, 0xa}, r7, 0x1, 0x6, 0x5, 0xa3, 0x3, 0xc6, @usage=0x7ff, 0x40, 0x33a1, [0x2, 0xf, 0x9, 0xb, 0x9, 0x7ff]}, {0x8000000000000000, @struct={0x7f, 0x80}, 0x0, 0x8d, 0x4, 0x7fff, 0x8, 0x7f, 0x0, @usage=0x2, 0x8, 0xfff, [0x4, 0xfffffffffffffff9, 0x3, 0x81, 0x1d8, 0xaeb7]}, {0x1, 0xde1, 0xd24}}) r8 = accept4(r5, &(0x7f00000021c0)=@tipc=@id, &(0x7f0000002240)=0x80, 0x40000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r8, &(0x7f0000002400)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x50, r9, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x5, 0x60}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "22a0ee91e682e438b07ee8f401df3897"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "593998024d08fd4149a7a64668702256"}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) epoll_create1(0x80000) sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f0000002500)={&(0x7f0000002440), 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x34, r9, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x40) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002580), r4) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x20, r11, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000) connect$l2tp6(r4, &(0x7f0000002680)={0xa, 0x0, 0x30, @mcast1, 0x7, 0x1}, 0x20) 1m35.732725665s ago: executing program 0 (id=48): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) accept$alg(r0, 0x0, 0x0) (async) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6b98ee65", @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf251a0000000700210062620000050092000a0000000c002280040000800f000080"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20040004) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@private, @broadcast}, &(0x7f00000002c0)=0xc) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@private, @broadcast, 0x0}, &(0x7f00000002c0)=0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) socket$can_j1939(0x1d, 0x2, 0x7) (async) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r6, {0x5, 0xb}, {0x4, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x29, 0xfb, 0x30, 0x9, 0x11, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast2, 0x7, 0x1, 0x9, 0xfffffffa}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x1, 0x80, 0x5b20, 0x94f, {{0x16, 0x4, 0x1, 0x29, 0x58, 0x65, 0x0, 0x3, 0x2f, 0x0, @empty, @empty, {[@lsrr={0x83, 0x1f, 0xac, [@loopback, @broadcast, @private=0xa010101, @local, @rand_addr=0x64010102, @multicast2, @remote]}, @lsrr={0x83, 0x23, 0xb2, [@dev={0xac, 0x14, 0x14, 0x2f}, @multicast1, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x3}, @local, @multicast2, @empty]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x3, 0x4, 0x77, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x8000, 0x8, 0x539}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0], 0x0, 0x4b, &(0x7f0000000640)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xac, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000009c0)={'gre0\x00', &(0x7f0000000900)={'tunl0\x00', 0x0, 0x40, 0x20, 0x17, 0x0, {{0x1e, 0x4, 0x1, 0x39, 0x78, 0x67, 0x0, 0x3b, 0x4, 0x0, @multicast2, @multicast2, {[@cipso={0x86, 0x45, 0x3, [{0x0, 0x9, "49244728b64a07"}, {0x0, 0xb, "f732f8a8d255869d02"}, {0x1, 0xe, "27d9475cef085416db83aedb"}, {0x1, 0x4, "54ed"}, {0x0, 0x3, "ed"}, {0x2, 0x5, "a8f7dc"}, {0x1, 0x2}, {0x2, 0xd, "35d03cf7e394138b174200"}, {0x7, 0x2}]}, @timestamp_addr={0x44, 0x1c, 0x44, 0x1, 0x3, [{@rand_addr=0x64010100, 0x7}, {@remote, 0x80000001}, {@multicast1, 0x8}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000009c0)={'gre0\x00', &(0x7f0000000900)={'tunl0\x00', 0x0, 0x40, 0x20, 0x17, 0x0, {{0x1e, 0x4, 0x1, 0x39, 0x78, 0x67, 0x0, 0x3b, 0x4, 0x0, @multicast2, @multicast2, {[@cipso={0x86, 0x45, 0x3, [{0x0, 0x9, "49244728b64a07"}, {0x0, 0xb, "f732f8a8d255869d02"}, {0x1, 0xe, "27d9475cef085416db83aedb"}, {0x1, 0x4, "54ed"}, {0x0, 0x3, "ed"}, {0x2, 0x5, "a8f7dc"}, {0x1, 0x2}, {0x2, 0xd, "35d03cf7e394138b174200"}, {0x7, 0x2}]}, @timestamp_addr={0x44, 0x1c, 0x44, 0x1, 0x3, [{@rand_addr=0x64010100, 0x7}, {@remote, 0x80000001}, {@multicast1, 0x8}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a80)={'ip_vti0\x00', &(0x7f0000000a00)={'ip_vti0\x00', 0x0, 0x7800, 0x8000, 0x4, 0x8000, {{0xf, 0x4, 0x2, 0x7, 0x3c, 0x67, 0x0, 0x10, 0x4, 0x0, @local, @broadcast, {[@timestamp={0x44, 0x28, 0xd4, 0x0, 0x5, [0xa, 0x100, 0x2, 0x6, 0x2e7, 0x8e7e, 0x8, 0x9, 0x4]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a80)={'ip_vti0\x00', &(0x7f0000000a00)={'ip_vti0\x00', 0x0, 0x7800, 0x8000, 0x4, 0x8000, {{0xf, 0x4, 0x2, 0x7, 0x3c, 0x67, 0x0, 0x10, 0x4, 0x0, @local, @broadcast, {[@timestamp={0x44, 0x28, 0xd4, 0x0, 0x5, [0xa, 0x100, 0x2, 0x6, 0x2e7, 0x8e7e, 0x8, 0x9, 0x4]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b40)={'tunl0\x00', &(0x7f0000000ac0)={'syztnl0\x00', 0x0, 0x8000, 0x7800, 0x4587, 0x4, {{0xa, 0x4, 0x1, 0x39, 0x28, 0x68, 0x0, 0x8, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}, {[@ssrr={0x89, 0x13, 0x12, [@private=0xa010100, @multicast2, @rand_addr=0x64010100, @empty]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000c40)={'syztnl2\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x10, 0x7800, 0xc, 0xc, {{0x18, 0x4, 0x0, 0x1, 0x60, 0x68, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@end, @noop, @rr={0x7, 0xb, 0xa2, [@loopback, @multicast1]}, @noop, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x0, 0x12, "0e27f13cd6fa6eccc4f48ad63f568617"}, {0x7, 0x2}]}, @rr={0x7, 0x23, 0x42, [@broadcast, @empty, @local, @empty, @loopback, @remote, @multicast1, @multicast2]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000c40)={'syztnl2\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x10, 0x7800, 0xc, 0xc, {{0x18, 0x4, 0x0, 0x1, 0x60, 0x68, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@end, @noop, @rr={0x7, 0xb, 0xa2, [@loopback, @multicast1]}, @noop, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x0, 0x12, "0e27f13cd6fa6eccc4f48ad63f568617"}, {0x7, 0x2}]}, @rr={0x7, 0x23, 0x42, [@broadcast, @empty, @local, @empty, @loopback, @remote, @multicast1, @multicast2]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c80)={0x17c, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x48000}, 0x40041) (async) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c80)={0x17c, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x48000}, 0x40041) recvmsg(r1, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}], 0x39}, 0x40000102) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4001044}], 0x1, 0x24008844) socket$inet_sctp(0x2, 0x1, 0x84) (async) r18 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r18, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x10) sendmmsg$inet(r1, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ec0767137af7e7d890debdedb6aba1a8b4ede604461087e87bc1e54d08a4c58d94481c59aaedb0d8e7dcf67b286f2eb812797a31410d9f1522c112a7fa390a471160d1c4d0832a4639", 0x49}, {&(0x7f0000000100)="4dea2e9fc630f1670cf70c207e43667030bf092497c42179b09807f9b234acd0e2", 0x21}], 0x2}}], 0x1, 0x8058) 1m20.69534881s ago: executing program 32 (id=48): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) accept$alg(r0, 0x0, 0x0) (async) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6b98ee65", @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf251a0000000700210062620000050092000a0000000c002280040000800f000080"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20040004) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@private, @broadcast}, &(0x7f00000002c0)=0xc) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@private, @broadcast, 0x0}, &(0x7f00000002c0)=0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) socket$can_j1939(0x1d, 0x2, 0x7) (async) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r6, {0x5, 0xb}, {0x4, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x29, 0xfb, 0x30, 0x9, 0x11, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast2, 0x7, 0x1, 0x9, 0xfffffffa}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x1, 0x80, 0x5b20, 0x94f, {{0x16, 0x4, 0x1, 0x29, 0x58, 0x65, 0x0, 0x3, 0x2f, 0x0, @empty, @empty, {[@lsrr={0x83, 0x1f, 0xac, [@loopback, @broadcast, @private=0xa010101, @local, @rand_addr=0x64010102, @multicast2, @remote]}, @lsrr={0x83, 0x23, 0xb2, [@dev={0xac, 0x14, 0x14, 0x2f}, @multicast1, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x3}, @local, @multicast2, @empty]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x3, 0x4, 0x77, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x8000, 0x8, 0x539}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0], 0x0, 0x4b, &(0x7f0000000640)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xac, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000009c0)={'gre0\x00', &(0x7f0000000900)={'tunl0\x00', 0x0, 0x40, 0x20, 0x17, 0x0, {{0x1e, 0x4, 0x1, 0x39, 0x78, 0x67, 0x0, 0x3b, 0x4, 0x0, @multicast2, @multicast2, {[@cipso={0x86, 0x45, 0x3, [{0x0, 0x9, "49244728b64a07"}, {0x0, 0xb, "f732f8a8d255869d02"}, {0x1, 0xe, "27d9475cef085416db83aedb"}, {0x1, 0x4, "54ed"}, {0x0, 0x3, "ed"}, {0x2, 0x5, "a8f7dc"}, {0x1, 0x2}, {0x2, 0xd, "35d03cf7e394138b174200"}, {0x7, 0x2}]}, @timestamp_addr={0x44, 0x1c, 0x44, 0x1, 0x3, [{@rand_addr=0x64010100, 0x7}, {@remote, 0x80000001}, {@multicast1, 0x8}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000009c0)={'gre0\x00', &(0x7f0000000900)={'tunl0\x00', 0x0, 0x40, 0x20, 0x17, 0x0, {{0x1e, 0x4, 0x1, 0x39, 0x78, 0x67, 0x0, 0x3b, 0x4, 0x0, @multicast2, @multicast2, {[@cipso={0x86, 0x45, 0x3, [{0x0, 0x9, "49244728b64a07"}, {0x0, 0xb, "f732f8a8d255869d02"}, {0x1, 0xe, "27d9475cef085416db83aedb"}, {0x1, 0x4, "54ed"}, {0x0, 0x3, "ed"}, {0x2, 0x5, "a8f7dc"}, {0x1, 0x2}, {0x2, 0xd, "35d03cf7e394138b174200"}, {0x7, 0x2}]}, @timestamp_addr={0x44, 0x1c, 0x44, 0x1, 0x3, [{@rand_addr=0x64010100, 0x7}, {@remote, 0x80000001}, {@multicast1, 0x8}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a80)={'ip_vti0\x00', &(0x7f0000000a00)={'ip_vti0\x00', 0x0, 0x7800, 0x8000, 0x4, 0x8000, {{0xf, 0x4, 0x2, 0x7, 0x3c, 0x67, 0x0, 0x10, 0x4, 0x0, @local, @broadcast, {[@timestamp={0x44, 0x28, 0xd4, 0x0, 0x5, [0xa, 0x100, 0x2, 0x6, 0x2e7, 0x8e7e, 0x8, 0x9, 0x4]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a80)={'ip_vti0\x00', &(0x7f0000000a00)={'ip_vti0\x00', 0x0, 0x7800, 0x8000, 0x4, 0x8000, {{0xf, 0x4, 0x2, 0x7, 0x3c, 0x67, 0x0, 0x10, 0x4, 0x0, @local, @broadcast, {[@timestamp={0x44, 0x28, 0xd4, 0x0, 0x5, [0xa, 0x100, 0x2, 0x6, 0x2e7, 0x8e7e, 0x8, 0x9, 0x4]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b40)={'tunl0\x00', &(0x7f0000000ac0)={'syztnl0\x00', 0x0, 0x8000, 0x7800, 0x4587, 0x4, {{0xa, 0x4, 0x1, 0x39, 0x28, 0x68, 0x0, 0x8, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}, {[@ssrr={0x89, 0x13, 0x12, [@private=0xa010100, @multicast2, @rand_addr=0x64010100, @empty]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000c40)={'syztnl2\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x10, 0x7800, 0xc, 0xc, {{0x18, 0x4, 0x0, 0x1, 0x60, 0x68, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@end, @noop, @rr={0x7, 0xb, 0xa2, [@loopback, @multicast1]}, @noop, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x0, 0x12, "0e27f13cd6fa6eccc4f48ad63f568617"}, {0x7, 0x2}]}, @rr={0x7, 0x23, 0x42, [@broadcast, @empty, @local, @empty, @loopback, @remote, @multicast1, @multicast2]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000c40)={'syztnl2\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x10, 0x7800, 0xc, 0xc, {{0x18, 0x4, 0x0, 0x1, 0x60, 0x68, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@end, @noop, @rr={0x7, 0xb, 0xa2, [@loopback, @multicast1]}, @noop, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x0, 0x12, "0e27f13cd6fa6eccc4f48ad63f568617"}, {0x7, 0x2}]}, @rr={0x7, 0x23, 0x42, [@broadcast, @empty, @local, @empty, @loopback, @remote, @multicast1, @multicast2]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c80)={0x17c, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x48000}, 0x40041) (async) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c80)={0x17c, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x48000}, 0x40041) recvmsg(r1, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}], 0x39}, 0x40000102) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4001044}], 0x1, 0x24008844) socket$inet_sctp(0x2, 0x1, 0x84) (async) r18 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r18, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x10) sendmmsg$inet(r1, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ec0767137af7e7d890debdedb6aba1a8b4ede604461087e87bc1e54d08a4c58d94481c59aaedb0d8e7dcf67b286f2eb812797a31410d9f1522c112a7fa390a471160d1c4d0832a4639", 0x49}, {&(0x7f0000000100)="4dea2e9fc630f1670cf70c207e43667030bf092497c42179b09807f9b234acd0e2", 0x21}], 0x2}}], 0x1, 0x8058) 4.131800475s ago: executing program 1 (id=902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400010076657468305f746f5f6873720000000008000240000000005c000000160a0101000b000000000000010000000900020073797a30400000000900010073797a300000000030000380"], 0xfc}, 0x1, 0x0, 0x0, 0x804}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 4.03919677s ago: executing program 1 (id=904): socketpair(0x28, 0x0, 0x28, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="55090bdbb306cb293004159a848b1edbd88530038066fbc83b25e460ad7dc4803daac8a274483b1211eac05d50e55e4e3e5317b07833a10845a44580809798524f2e5c7a8172871fbbc59f687f9bc8f7d2f33931af3f", @ANYBLOB="1c0000002000090002000000ffdbdf250400000008000800", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x48854}, 0x4000) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000000002010400000000000000000a000000040000020000038004000280"], 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x20000804) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="000700180000000000fc0301e43be679e200000000000000", 0x18) r8 = accept4(r0, 0x0, 0x0, 0x800) accept4(r2, &(0x7f0000000100)=@ieee802154, &(0x7f0000000200)=0x80, 0x80000) socket(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="1c0000004a008102e0", 0x9}, {&(0x7f0000001700)="0c74c75350f4a5e002fdc9cf531c11c3abc290", 0x13}], 0x2, 0x0, 0x0, 0x10}, 0x400080d0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911048000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$tun(r10, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r10, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x472881, 0x0) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="52163eec21757e28ca6ac6f1a5012ccbabbd1e7168562bbb1bb5915f471d25d78419ab966912213e865abef9e571f4ba80929c13ebeb854a5de59519873e7f0818bec891d5b9547c45784c51fb32", 0x4e}], 0x1, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18}], 0x1, 0x20044014) socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)=""/12, 0xc}], 0x1}, 0x63) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @empty}, 0x2, 0x4}}, 0x2e) getpeername(r4, 0x0, &(0x7f00000000c0)) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22, 0x8000000, @remote}, 0x1b) getsockopt(r4, 0x6, 0x1ff, &(0x7f0000000040), &(0x7f0000000080)) 3.835728307s ago: executing program 3 (id=907): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket(0x2, 0x80805, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x28, 0x4, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="bccd84ddf6a5", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="b3df1f6fb02908f803", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000009c0)="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", 0x1b6}, {&(0x7f0000000340)="f3f547c0846ddca465264caced8a0eec2fd5e05009b22495a290400fe0c0d2982b6194908fc5cbf44528356ee5accb6e8370fba57dcb35e5a933366b7ea0766f4040cd447325e751735725576c540f1ba506c6bd85edfbaebdae165aec465b53e448d782ac878c83c857419c96b50602be086566d0e077c898f772117857fd0d7d1057f6faf4385d2e5affa83b9f1fe2f1f1d6d82f", 0x95}], 0x2}}], 0x3, 0x8011) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10062, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a400)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c80)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x10120, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000bcdbdf254f06000008000300", @ANYRES32=r2, @ANYBLOB="77ffffffffffffff614e151200913b74ab6e323c571fcbad85531a654f318151ce4a906350a87b62482861a345d0dc1f94ea91c0b94ded605c5802babce56149a5c7639debfc6842706665adf797610d0aceaf09df5d4aedea463e81"], 0x54}}, 0x8000) 3.802305087s ago: executing program 5 (id=908): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071108500000000001f150000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2=0xe0000001}}, {{0x2, 0x4e21, @local}}}, 0x108) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x20040400) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143ffd, 0x7fe2, 0x1, 0x10}, 0x50) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000000c0)={r3, &(0x7f0000000180), 0x0}, 0x20) 3.780053624s ago: executing program 1 (id=909): r0 = socket(0x10, 0x803, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030500000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000010988dc4d1b4eb0000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="000400002c4500000800200044010000"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 3.675311461s ago: executing program 5 (id=911): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000008e00000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000410000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003200000095000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="180000001214000426bd7000fb9bdf250800cb675b634b001100716eb389104ed2001615"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x80) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$key(0xf, 0x3, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x700, 0x2, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x46, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @loopback}}}}) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0xff03, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) write$tun(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="000060041648087d069faaaaaaaaaabb0800452300540065000009069078ac1e0101ac1414384e234e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x66) 3.324112734s ago: executing program 5 (id=913): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x7}, 0xffffffffffffffdf) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async, rerun: 32) unshare(0x6a040000) (async, rerun: 32) r0 = socket(0x1e, 0x800, 0x3) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB], 0x184}}, 0x20040000) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) socket(0x1e, 0x4, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010d0000000000000000030000002800018014000280080000000000000008000400060000000d0001"], 0x3c}, 0x1, 0x0, 0x0, 0x20044005}, 0x0) (async, rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x70, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES8=r5], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f0000000580)=0x14) (rerun: 32) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0x15, &(0x7f0000000300)=ANY=[@ANYBLOB="180000001bf3ffff0000000008000000b708000000f9ff007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000183a0000050000000000000000000000ab9010001000000001320700f8ffffff44b80200000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x7, 0x5f, &(0x7f00000003c0)=""/95, 0x40f00, 0x0, '\x00', r8, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0xd, 0x8001, 0x5}, 0x10, 0xffffffffffffffff, r9, 0x2, &(0x7f0000000680)=[r6, r6, 0x1], &(0x7f00000006c0)=[{0x5, 0x4, 0x6, 0x3}, {0x4, 0x2, 0xa, 0xa}], 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r10 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0xfdff) close(r0) 3.08371618s ago: executing program 2 (id=915): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r1, 0x0, 0x9}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) write$ppp(r3, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000540)=@ethtool_perm_addr={0x4b, 0x2d, "43720700000000004786b89e6fb2940acfbe4c3f9725f0f2bf568d62c050880594c23d36d68dbac78c2893c6a9"}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) getpid() syz_genetlink_get_family_id$devlink(0x0, r0) getpeername$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000080)=0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x80) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000c0000004800058008"], 0x5c}}, 0x0) 2.902774875s ago: executing program 3 (id=916): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) close(r2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00007cf5a0db99ced8c9000200000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000ce00b9f46a0201000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0xffffffffffffffff) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000cab6000000000000000000831811000006da61e7e14c3226298d9b0d3bb39debcef06317bd599e928c092b743f6c0da6b1311279d47d17204fcdb6a365059387eccbca6d45faec2741148edb40602782af729a4b3bb8e7e37fe69b36718d0ae2558b11ab9075a175f6c96bb501eea347e0081d8533a038cd513fc81255bd9dfc2e5efacbe0f904714711552c371cb9df4e5acb679eaa193014bedfadd4fcbc2f3e297ac7aaabaa7523ea2a70dae9ffffbd46f51c73891ad0bf8aa473b33886aa877f909650a3837bb9c96f3d26664df209c867902117a4b5fd50f425fa57a6ea389290b2e139ddd4eecd46e04c9e63282844c7", @ANYRES32=r5, @ANYRES32=r0], 0x0, 0x109, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x1b6a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x18) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000010000000000000001000000181b0000", @ANYRES32=r5, @ANYBLOB="000000000000000085100000000000009500000000000000fa450300000000000000d2bdab10cb90268112e65ed49e0d5dc4bf6d29d8e81b1a33645120bba031d2f28752197de2a3b5b277ccf9350d9601acd8a9e91ff60363be05dcc982c0cd4afc92d893b1ed70de69dc8ba34291515c996f7fe0aaf3e754b3ae17023fbd0e4d0035d378b05db99f64a89273c1c33919e00f960a32ff85d95bcde7d142d96a00b30afc02a682f0cf2f7f9e097cf6315ead3c485455f9a4a8af2edc1b3baa8af8a66674ce13fa232a8129a4300aa3a2fb8b0706cd20c8ae8f6c3ba9f1d042d0f330483a6c08e598ca94df1ac3062711f997284d160ea65e84"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x58, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x0, 0x362ed901, 0x9}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[r6, r5, r5, r5, r5, r5], &(0x7f0000000200)=[{0x2, 0x5, 0xe, 0x3}, {0x3, 0x1, 0x7, 0x5}, {0x4, 0x1, 0x3}, {0x2, 0x5, 0x1, 0x9}, {0x3, 0x1, 0xd, 0x9}, {0x3, 0x3, 0xb, 0x7}, {0x3, 0x4, 0x6, 0x1}, {0x1, 0x2, 0x7, 0x6}], 0x10, 0x18000}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000003c0)={r8, r5}, 0xc) (async) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48050}, 0x0) (async) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r10, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) shutdown(r10, 0x1) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008"], 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) (async) socket$alg(0x26, 0x5, 0x0) 2.824243355s ago: executing program 1 (id=917): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000001540)={'security\x00', 0x0, [0xfffffffa, 0x96a6, 0x8c, 0x2, 0xffffffff]}, &(0x7f00000015c0)=0x54) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800dc1c1214010028bd7000fcdbdf250800150000000000080001000000000008004b0013000000080003121074d78af617d30002000000"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) setsockopt$inet6_tcp_int(r9, 0x6, 0x18, &(0x7f0000000180)=0xa, 0x4) ioctl$int_in(r8, 0x5421, &(0x7f0000000100)=0x80000000) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) write$tun(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB="000088a800001ee26fbd1f19000700010103006234086500140600fe80000000000000000000000000001dfe8000"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5140000290780003"], 0x4a) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000200)={&(0x7f00000002c0)="d1672cdb92e897aed79bfd85c6b3bda876037402d85813b7615193063b7630b9d05ed58df3a7d6862dc3f6e261224aac5d9b1a8511f152283794c5f8173c97402763e26a1b7d8b6ec8baa4e64fd23135567d96edabd1322ef6842062e72b739a19bcd19b39a99162d60afbd4a76ba0c15ae7dc44bb5fb5c1e5eb52ad2dfc69352c4ed082c8a72ed7f13b404d88c51c93c5a304ec64f21960860a33469e3d1bc78f9b022974dc7cd5fa4a0fa72c5c77eb401259fd7d4a365fa4a6f2de9ed5c3bfa4084314bb1363b75b9c7de54d30a7eed66ddc66e5a9d4d812bc9ba088ea4f1026c8ebea922764311417b806b260cd255db53932bbbc6b26", &(0x7f0000000540)=""/4096, &(0x7f0000000180)="e68becab59a42941b2c74c396119a5c012ab467f1f31afb414bf1147c2f550ea731635812c44dc3419cc2c9f5f8195", &(0x7f00000003c0)="6f8b15fa5fc3a29b7ac0be171a8c85049befc899be002896fbebceda4e6068f061b9b2a8afe9791ae11c283f23f91ac58825f21bdaf0bbe3ae877c0e4f24904efed6be", 0x10000, r8, 0x4}, 0x38) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x38, 0x1403, 0x10, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4000001) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0x7, &(0x7f0000000440)={0x9, 0x3, 0x8, 0x3}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xb, 0xffe0}, {0x0, 0xc597f37949029df5}, {0x2, 0xa}}}, 0x24}}, 0x40004) 2.747683544s ago: executing program 2 (id=918): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x100, 0x1000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3e20bf4d404e0fde}]}}}]}, 0x38}}, 0x40) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x100, 0x1000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3e20bf4d404e0fde}]}}}]}, 0x38}}, 0x40) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x7, 0x80, 0x854, 0x1, {{0xe, 0x4, 0x0, 0x3d, 0x38, 0x64, 0x0, 0x1, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @lsrr={0x83, 0x23, 0x50, [@dev={0xac, 0x14, 0x14, 0x2b}, @multicast1, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast2, @dev={0xac, 0x14, 0x14, 0x10}, @dev={0xac, 0x14, 0x14, 0x37}, @broadcast, @empty]}]}}}}}) 2.747050188s ago: executing program 3 (id=919): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000046d100180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000008208500000073000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x7e, 0x41, &(0x7f0000000040)="3629394a32d8c2888c0afc879c40d150beeaceea495f0cef6464a1e5045452543b80f5e825d3a0a884d602323313b5353561414367299c44769367985aa226e05f1ccbb25742069592501161e33cd67bbec682c0d6f7e9a4f19a58adabc427c4f266a911f16d824102ba0188f6be3cce6c68541aebc17a5cfa3cb4044e9e", &(0x7f0000000140)=""/65, 0x8, 0x0, 0x4d, 0x0, &(0x7f00000001c0)="df03083a8ff4dc7664920f52e19842ed5a4866e8f34b269962d8f0eb936268c5c42a1dbe9f53133f3ba41790d26535e7c5a7906d61504f41c58606ae5313b5f0b31668840c6af6f672173ddb88", &(0x7f0000000240), 0x4, 0x0, 0x2}, 0x50) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r3, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r2], 0x4c}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000007c0)={r3, 0xf, 0x1, 0x4}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000ac0)='freezer.state\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r8, &(0x7f0000003840)=[{{&(0x7f0000000f40), 0x6e, &(0x7f0000002180)=[{&(0x7f0000000fc0)=""/131, 0x83}, {&(0x7f0000001080)=""/105, 0x69}, {&(0x7f0000001100)=""/14, 0xe}], 0x3}}, {{&(0x7f00000021c0)=@abs, 0x6e, &(0x7f00000036c0)=[{&(0x7f0000002240)=""/190, 0xbe}, {&(0x7f0000002300)=""/246, 0xf6}, {&(0x7f0000002400)=""/96, 0x60}, {&(0x7f0000002480)=""/218, 0xda}, {&(0x7f0000002580)=""/156, 0x9c}, {&(0x7f0000002640)=""/92, 0x5c}, {&(0x7f00000026c0)=""/4096, 0x1000}], 0x7, &(0x7f0000003740)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}], 0x2, 0x2, &(0x7f00000038c0)) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r10, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r10, 0x0) close(0x3) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', r2, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c40)=@o_path={&(0x7f0000000c00)='./file0\x00', 0x0, 0x10, r1}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c80)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000cc0), &(0x7f0000000d00)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x29, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x180000, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @jmp={0x5, 0x1, 0x3, 0x8, 0x5, 0xffffffffffffffc0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @jmp={0x5, 0x0, 0xa, 0x2, 0x8, 0xfffffffffffffff4, 0xb}, @exit, @call={0x85, 0x0, 0x0, 0xc8}, @call={0x85, 0x0, 0x0, 0x64}, @alu={0x4, 0x1, 0xb, 0xa, 0x1, 0x18, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000009c0)='syzkaller\x00', 0x2, 0xc0, &(0x7f0000000a00)=""/192, 0x0, 0x10, '\x00', r2, 0x0, r7, 0x8, &(0x7f0000000b00)={0x0, 0x800003}, 0x8, 0x10, &(0x7f0000000b40)={0x2, 0x3, 0x38e1, 0xfff}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000d80)=[r9, r11, r12, 0x1, r13, r14], &(0x7f0000000dc0)=[{0x3, 0x4, 0xf, 0x8}, {0x2, 0x3, 0xa, 0x3}, {0x4, 0x5, 0xc, 0x9}, {0x2, 0x1, 0xa, 0x9}, {0x4, 0x3, 0x9, 0x8}, {0x3, 0x5, 0xf}, {0x3, 0x3, 0x6, 0xb}], 0x10, 0x93cf}, 0x94) r15 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r15, 0x84, 0x12, 0xfffffffffffffffe, &(0x7f0000000140)) sendmsg$inet(r15, &(0x7f0000000680)={&(0x7f0000000340)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000380)="0cc8bad2aa28f1249db184c3739eb6f40d22e7c83d0798644914a213f0bcc90fb33b68c0ae38639c666c26d1c1f79a30260c5a249aa1fc0bb96a3fb542c734732b6b0f2d0db4de4ef81d96", 0x4b}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000000400)="7ed52650d481b19e022d1a0f7da8772ca0495b1d67d67aa6010c476d7bf82fb0bceb4f02c2ea455d2fc2b88abdeef2c14932f0b11be2306b2053c5807eb66ead3959a28306004804a7da738873f24f2d2bdf9babb273c1e4928c74ec18eb2ccd6d9ba8031935315a3815b5ef78d2c9a4aef4fcfc502448d0960a46be465ffe0016467b3bb497097c0154df491073d1b4aa2dc83e70a7d1c2ed81e08a9e741ca9f7540f3ebc3dd33cf081920e18fd2ebbbb6fe79221142d8a18c4701daf8545b7d1bb4e565e85fa19aaa098f183096885542efe21", 0xd4}, {&(0x7f0000000500)="0d399f82b30a919265f16d71b8c2f46f7fa7ac152aff17845b44831ad4f7d665e65d2b52ed7b5dd13a5f7472f24652b7c21e3cd37ed98e9cf5b5ef47dbd52a2030ee765efe9ac0e60e10ecf8bf015372fe8b6aeb8e833c041d3295a00374669a25654cac308d8a0a28414f86720f12eee9f8acd102a4393393d9bf385e23f6a929bca7", 0x83}], 0x4, &(0x7f0000000600)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x50}, 0x40081) 2.725263559s ago: executing program 4 (id=920): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in=@loopback, 0x0, 0x32}, @in6=@loopback, {0x0, 0x2a3, 0x7f, 0xffffffffffffffff, 0x0, 0x33}, {0x7}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0xaf}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bd2b}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x200}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.662304823s ago: executing program 2 (id=921): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="b40000000000000061112c0000000000060000000000000095000000000000007114e5974d825ea19acf6917f30154c08c1ae059a9ec20b886178b1854f4f1dc5653ec5b1bff764c73"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb682, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000000000080000006b1108000000003b2863ee0000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="00000100", @ANYRES16=r1, @ANYBLOB="11052cbd7000ffdbdf250900000004000280"], 0x18}}, 0x40800) (async, rerun: 64) r2 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000000)=0xd938, 0x4) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802280000f8ffff0000000007000000180100122020702500000000003020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000085000000110000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2}, 0x94) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async, rerun: 32) r4 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 64) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x11a}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) (async) listen(r4, 0xda90) 2.567610365s ago: executing program 4 (id=922): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r1, 0x1, 0x9}, 0x14) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r1, 0x1, 0x9}, 0x14) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @remote}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xc}, {0x8, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c046) 2.567043666s ago: executing program 5 (id=923): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000008e00000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000410000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000032000000950000000000000032d2e360"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="180000001214000426bd7000fb9bdf250800cb675b634b001100716eb389104ed2001615"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x80) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$key(0xf, 0x3, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x700, 0x2, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x46, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @loopback}}}}) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0xff03, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) write$tun(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="000060041648087d069faaaaaaaaaabb0800452300540065000009069078ac1e0101ac1414384e234e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0042ff8b90780002012200000000000000ffe3b928220d5e3f86f04c053c8d6ef98c050e0000004f0000000400000003fe0af989a5714473fbe700000078d3b992f240cb2c5eaef9109390c844ef75b131fc30f14e1c5449ddb628d3ada0ab93c600784eeebfe374f0045069761912794db1fb9d53d6fe2c46a72df87709a1c7809bacbb805d839e0800947d464e96adfd0b6ede3c29af785d4c2c86e91203dbbc9e7e8505f48df921486e5fce90909035bdcae939808d4e17745fc0fcfc8d98c78e8bf9c5c71c5c676a903e0d470423807a4bcf406a3337001cf94f89f4549cd595366150a023d76d3ada8218244e8039fb8dde9861b3a9c8eae4acf36f412c3b1d60025d245dfd9c67a1a877fbd197e4ff37c28a13ae92773f4ba49cc0a468ecaa8c72c4fa1a91dc757ec766"], 0x66) 2.541562688s ago: executing program 2 (id=924): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000141401"], 0x18}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000141401"], 0x18}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x140f, 0x100, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48004}, 0x4004) unshare(0x28000600) unshare(0x24020400) (async) unshare(0x24020400) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2.362054581s ago: executing program 2 (id=925): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x558, 0x0, 0x0, 0x1a8, 0x3d8, 0x1a8, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x70}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz1\x00'}}]}, @TTL={0x28}}, {{@uncond, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={{0x40}}, @common=@ah={{0x30}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'pim6reg0\x00', 'erspan0\x00'}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRES8=r0], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB="1800000000000000000000000000000071122a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r5 = socket(0x10, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000400), 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESHEX, @ANYBLOB="16000000005356d694a1e01a6b00000000000000", @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=0x0], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) bind$alg(r0, &(0x7f0000000840)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-generic\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x17, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYRESOCT=r8, @ANYRES32, @ANYRES16=r4, @ANYBLOB="1c679e382d15751bcf04cf9550526fc7ea0a"], &(0x7f0000000700)='GPL\x00', 0x9, 0xf1, &(0x7f0000000740)=""/241, 0x40f00, 0xb, '\x00', r2, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0x8, 0x46}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b00)=[0xffffffffffffffff], &(0x7f0000000b40), 0x10, 0x2}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1800000052000100000000000000b5da1c00001c0000000448c9b68faef7dcbff2c3eb1b87dd1ece1355db37c8a493f12b9fbec51059e7d66fccf6f08d2a"], 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020002000000000000009ee22e25453b00000053000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r9, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r9, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000600)=0x681, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r11, 0x2, 0x6}, 0x10) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 2.144912896s ago: executing program 4 (id=926): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x30000, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x48) (async) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x2f27a3646537f4d3, &(0x7f00000000c0)={@dev, @multicast2, 0x0}, &(0x7f0000000100)=0xc) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000001c0)={@rand_addr=' \x01\x00', 0x76, r2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x28d, 0x0, 0x0, 0x0, 0x1}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x62}, 0x94) 1.832813715s ago: executing program 3 (id=927): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x800}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000000)={0x67, 0x1, 0x4, 0x5, 0x7f, 0x81}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4c001) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'gretap0\x00', @random="04000499fb61"}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = epoll_create1(0x0) r9 = socket$unix(0x1, 0x1, 0x0) close(r9) r10 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) sendmmsg$inet6(r10, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c, 0x0}}], 0x1, 0x40000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0xfffffdcd) r13 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r2) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="00042abd7000fedbdf25040000000900010073797a30000000000900030073797a30000000000500040001000000"], 0xfffffffffffffe7a}, 0x1, 0x0, 0x0, 0x20048880}, 0x4000012) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000240)) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xb, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x2, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x6}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x6}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0xa}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 663.162738ms ago: executing program 5 (id=928): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x5c, 0x24, 0xf0b, 0x70bd2b, 0x10000, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0xf}, @TCA_CAKE_TARGET={0x8, 0x8, 0x9}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 571.58804ms ago: executing program 4 (id=929): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000a80)=ANY=[@ANYRESOCT], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f0000000400)={&(0x7f0000000940)=ANY=[@ANYRESHEX=r2, @ANYBLOB="3b1523e2d7529be7813b1d1ebaffdab3b74e0f1a9b6e37ac6a63a534f0325aad3a10f67a39f69fe1e4e7f69cc4db7402786d9e837a901966d66e587c824c70eba330c30e0b", @ANYRES8=r1, @ANYRES8=r1, @ANYRESDEC=0x0], 0xe0}}, 0x4000081) (async) sendmsg$key(r3, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f0000000400)={&(0x7f0000000940)=ANY=[@ANYRESHEX=r2, @ANYBLOB="3b1523e2d7529be7813b1d1ebaffdab3b74e0f1a9b6e37ac6a63a534f0325aad3a10f67a39f69fe1e4e7f69cc4db7402786d9e837a901966d66e587c824c70eba330c30e0b", @ANYRES8=r1, @ANYRES8=r1, @ANYRESDEC=0x0], 0xe0}}, 0x4000081) connect$unix(r2, &(0x7f0000000100)=@abs={0x27}, 0x6e) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000340)=0x8) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000340)=0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) unshare(0x22020600) socket(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) syz_emit_ethernet(0x1f, &(0x7f0000000700)=ANY=[@ANYBLOB="ffff0f0000004dcb9831e8880011aa006f4cddd689f527e6cafe5005ed64e6"], 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d80000001c0081044e81f782db44b904021d080201000000120000a118000c000600142603600e3b08000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67ffc94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95672e006000000000000008065b44f95caae586a81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001500010028bd7000fbdbdf25ac14143c000000000000000000000000e00000010000000000000000000000004e2300064e2300090200002004000000", @ANYRES16=r5, @ANYRES32=0x0, @ANYRESOCT=0x0], 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000008c0)="ad56b6c5820fae9d7408005729f38f45c740009e4c90c200cf4270b1fb11bab859b2cae64f02356ea303a3ac6570097cdb9d59ffb2e0e8169e7ac3b84cc75f06c7979d5df2a7db54a698eb069cf06a31f00b2cd2d14b0a8040e5", 0x5a) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000005c0)="26eab92308b8cdea4705d69d8232d94d565dabbf5d4c6d06af1b7646d99d8af3685fa7631b80dcb24e76b27f8990a37228e579d4eeb8274b3e1ce823cafd488248710f9bc2680db6736cb447157c15de50a7ad3b1763f67b37bb7fcb55f28d5fab0251b7a1cc14a3f9b49878334c9d9e2102fd4394c3b5f702a31eb619b758718494e7262b343e7393c32d6565ec751ad4da98c81d3dd43e8946526373f8e79a03e04b656e5ea0d98908629cbb5f752095b29abeda3743", 0xb7}, {&(0x7f00000007c0)="9bc1f7f4652a09fcaab6bf09d5024174acc5335b768b2a31a8ffac342351d71c135fa388cf708d17f788a663c8f37021b20693d766e538fe9f4b5267a4c4ffcf7a65", 0x42}], 0x2, &(0x7f0000000300)=ANY=[@ANYRES64], 0x18}], 0x1, 0x1c40) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000280)=""/10, 0xa}, {&(0x7f0000000480)=""/222, 0xde}], 0x2}, 0x703}], 0x1, 0x50, 0x0) 567.347122ms ago: executing program 1 (id=930): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="7c5a6e387aa40d08050715dc79f12c84", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="2f0000001000000004"], 0x20) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="010000006602010005001000050012800a100100767887616e0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00@\x00\x00'], 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 566.890068ms ago: executing program 3 (id=931): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = accept4$x25(0xffffffffffffffff, &(0x7f00000011c0), &(0x7f0000001200)=0x12, 0x80000) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000001240)) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x8a, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x102, 0x102, 0x4, [@float={0x6, 0x0, 0x0, 0x10, 0x8}, @union={0xf, 0x4, 0x0, 0x5, 0x1, 0x0, [{0x8, 0x3, 0xe52b}, {0x0, 0x3, 0xf}, {0x3, 0x3, 0x1}, {0xa, 0x2, 0x10000}]}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x76, 0x0, 0x5e, 0xd3926db884a949d6}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x4}, @fwd={0x5}, @datasec={0xf, 0xa, 0x0, 0xf, 0x2, [{0x2, 0x700000, 0x80}, {0x2, 0x5, 0x5}, {0x2, 0x1, 0x9}, {0x4, 0x8, 0x7c1}, {0x3, 0xfffff65c, 0x3ff}, {0x3, 0x9, 0x5}, {0x5, 0xa2a, 0x989c}, {0x4, 0x200, 0x4000000}, {0x4, 0x3, 0x400}, {0x2, 0x0, 0xe}], '/.'}, @restrict={0x8, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x61, 0x5f]}}, &(0x7f0000000180)=""/4096, 0x120, 0x1000, 0x1, 0x7}, 0x28) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) accept4$x25(0xffffffffffffffff, &(0x7f00000011c0), &(0x7f0000001200)=0x12, 0x80000) (async) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000001240)) (async) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x8a, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x102, 0x102, 0x4, [@float={0x6, 0x0, 0x0, 0x10, 0x8}, @union={0xf, 0x4, 0x0, 0x5, 0x1, 0x0, [{0x8, 0x3, 0xe52b}, {0x0, 0x3, 0xf}, {0x3, 0x3, 0x1}, {0xa, 0x2, 0x10000}]}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x76, 0x0, 0x5e, 0xd3926db884a949d6}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x4}, @fwd={0x5}, @datasec={0xf, 0xa, 0x0, 0xf, 0x2, [{0x2, 0x700000, 0x80}, {0x2, 0x5, 0x5}, {0x2, 0x1, 0x9}, {0x4, 0x8, 0x7c1}, {0x3, 0xfffff65c, 0x3ff}, {0x3, 0x9, 0x5}, {0x5, 0xa2a, 0x989c}, {0x4, 0x200, 0x4000000}, {0x4, 0x3, 0x400}, {0x2, 0x0, 0xe}], '/.'}, @restrict={0x8, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x61, 0x5f]}}, &(0x7f0000000180)=""/4096, 0x120, 0x1000, 0x1, 0x7}, 0x28) (async) 469.898038ms ago: executing program 3 (id=932): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') unshare(0x6a040000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000414000980100002800c00"], 0xa0}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="2e000400010002", 0x7) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x3c}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688140032000103000aff3f000057fc5ad90200bb6a88003cd6c9db0000db15000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3a5f7", 0xb8) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xff}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@deltfilter={0x24, 0x2d, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0x3}, {0xb, 0x2}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0x8, 0xffe0}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x807f}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) accept4$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14, 0x80000) close(r0) 394.447004ms ago: executing program 2 (id=933): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4}) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x50) close(0x3) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000000)={0x20000008}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x3, 0x1, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x8, 0x5, 0x101, 0x1000, 0x9, 0x0, 0x8, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x81, 0x7, 0x8, 0x100000, 0x762, 0x3, 0x429f, 0xe, 0x4, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x8, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x102, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0xd6f, 0x4007, 0x9c, 0x5, 0x2af, 0xf7, 0x5, 0x1, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x800000, 0x204, 0x1, 0x8, 0x8000, 0x0, 0x3, 0x0, 0x10001, 0x4e7b3717, 0x4, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x5b, 0x81, 0x33b, 0x8, 0x20006, 0x5, 0x2, 0x6, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x7, 0x8, 0x1, 0xfffffffe, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r9}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0xb00, 0x40822}}}}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff06000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x0) 175.738488ms ago: executing program 4 (id=934): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000003040002000c000280050001000000000014000280080001000000000008000200ac1414000800054000000000090001"], 0x58}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x5a, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x4, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010104, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "8af7aa76c3b66d05227c7d48da2033ce"}, @md5sig={0x1d, 0x12, "910000000000006f00"}]}}}}}}}, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2945b802616100a7}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r5, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x80}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x20}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x10}, @NFC_ATTR_IM_PROTOCOLS={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x84}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xc0}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x14}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 175.331601ms ago: executing program 5 (id=935): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x40000}, {0xfbfffff7}]}}) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xa1}}], 0x1, 0x2040000, &(0x7f0000003700)) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5099bea0977"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xc, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0x12, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="ec00000021000100fcffffff000000000a010101000000000000000000000000fc025f0000000018000000000000000000000000000000000a0000000000000089", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001000000000009c00110000000000000000000000ffffac1414aaff0100000000000000000000000000010a010102000000000000000000000000fc0200000000000000000000000000003c040000000000000200020000000000000000000000ffffe0000001ff0100000000000000000000000000010a0101020000000000000000000000000000000000000000000000000000000133040000063500000a000800"], 0xec}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000005c0)={'vxcan1\x00', 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000006c0)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x33}, 0x4e20, 0x0, 0x4e20, 0x5, 0xa, 0x120, 0xa0, 0x3b, r6, r7}, {0x4498a237, 0x7, 0x1, 0x29085b9a, 0x3, 0x6, 0xe5, 0x6}, {0x7f, 0x8, 0xa3da, 0x6}, 0x2, 0x6e6bb1, 0x1, 0x0, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x4d3, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3507, 0x0, 0x0, 0xb2, 0x9ac, 0x80000001, 0x854}}, 0xe8) bind$bt_l2cap(r5, &(0x7f0000000100)={0x1f, 0x7, @any, 0x73, 0x2}, 0xe) connect$packet(r5, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xa, 0x6, @remote}, 0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(r8, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) unshare(0x4000000) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@delqdisc={0x340, 0x25, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xd, 0xa}, {0xfff3}, {0xf, 0xffe0}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x20c, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}, @TCA_STAB={0xf4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x5, 0x2, 0x2, 0x1, 0x4, 0x2, 0x7}}, {0x12, 0x2, [0xbc5, 0x1, 0xffff, 0x0, 0x7, 0xff90, 0xf57]}}, {{0x1c, 0x1, {0x72, 0x1, 0x7, 0x5, 0x1, 0x6, 0x4, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x97, 0xfc, 0x6, 0xd, 0x1, 0x4, 0x3, 0x4}}, {0xc, 0x2, [0x0, 0x9, 0x3, 0x5]}}, {{0x1c, 0x1, {0x8, 0x2, 0x3, 0x7, 0x1, 0x4075000, 0x100, 0x2}}, {0x8, 0x2, [0x0, 0x617]}}, {{0x1c, 0x1, {0x0, 0x8, 0x8, 0x73, 0x0, 0x860, 0x9, 0x6}}, {0x10, 0x2, [0x3, 0x5, 0x5, 0xe, 0x3, 0xff]}}, {{0x1c, 0x1, {0x6, 0x1, 0xbce, 0x3, 0x0, 0x7, 0xfff, 0x1}}, {0x6, 0x2, [0x9]}}]}, @qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x340}}, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000180)={0x2, 0x5, 0xd, 0x9}, 0x8) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) 92.053987ms ago: executing program 1 (id=936): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r2 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f000000b4c0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)="8fab14410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac99e4be38c9c2661a897fb45a74a588fdabe427ade9b1ed53f450ce6c2", 0x3c}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000580)="c7bace4ebe91b42a7bf8f86453e0ec420e051dc8", 0x14}, {0x0}], 0x2}}], 0x2, 0x488c4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbec, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r4, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000940)=ANY=[], 0xf0}}], 0x1, 0x24004c41) pselect6(0x40, &(0x7f0000000080)={0xe, 0x9, 0x9, 0x10000000, 0x6, 0x8, 0xc2db, 0x7ff}, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0xa, 0x4, 0x10001) socket(0x1e, 0xa, 0xa23) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000100000000000200000f8ffffffffffffff0008000000", @ANYRES32, @ANYBLOB="0c000f"], 0x34}], 0x1}, 0x0) setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffe08}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000000) r8 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001d0001008a0000000000000007000000", @ANYRES32=r1, @ANYBLOB="080012000a0002"], 0x28}}, 0x20000810) 0s ago: executing program 4 (id=937): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4048085}, 0x200008c1) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) recvmsg$kcm(r1, &(0x7f0000003340)={0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000000180)=""/129, 0x81}, {&(0x7f00000000c0)=""/69, 0x45}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/4096, 0x1000}], 0x5}, 0x2000) socket$rds(0x15, 0x5, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 60.055329][ T5528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.066211][ T5528] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.55' (ED25519) to the list of known hosts. syzkaller login: [ 83.985728][ T5851] cgroup: Unknown subsys name 'net' [ 84.202254][ T5851] cgroup: Unknown subsys name 'cpuset' [ 84.212960][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.915454][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.830502][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.842833][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.857996][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.868433][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.893844][ T5183] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.902388][ T5183] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.911402][ T5867] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.922390][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.946996][ T5870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.958438][ T5870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.000934][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.011852][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.020773][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.040723][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.049720][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.057788][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.065923][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.073737][ T5870] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.081863][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.082016][ T5870] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.146215][ T5867] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.154437][ T5867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.165116][ T5867] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.185868][ T5867] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.216264][ T5867] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.584406][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 90.851608][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 90.905760][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 90.935356][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.943685][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.951677][ T5865] bridge_slave_0: entered allmulticast mode [ 90.960724][ T5865] bridge_slave_0: entered promiscuous mode [ 91.002587][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.010074][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.017319][ T5865] bridge_slave_1: entered allmulticast mode [ 91.025434][ T5865] bridge_slave_1: entered promiscuous mode [ 91.102086][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 91.196849][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.210231][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.323351][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.331169][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.339373][ T5861] bridge_slave_0: entered allmulticast mode [ 91.346703][ T5861] bridge_slave_0: entered promiscuous mode [ 91.356929][ T5865] team0: Port device team_slave_0 added [ 91.396658][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.404817][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.412376][ T5861] bridge_slave_1: entered allmulticast mode [ 91.420811][ T5861] bridge_slave_1: entered promiscuous mode [ 91.431191][ T5865] team0: Port device team_slave_1 added [ 91.450446][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 91.463336][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.470590][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.477889][ T5872] bridge_slave_0: entered allmulticast mode [ 91.485224][ T5872] bridge_slave_0: entered promiscuous mode [ 91.535467][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.544808][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.552732][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.560402][ T5872] bridge_slave_1: entered allmulticast mode [ 91.568724][ T5872] bridge_slave_1: entered promiscuous mode [ 91.606439][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.647394][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.654712][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.680854][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.749855][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.757086][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.783589][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.821667][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.834622][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.844667][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.852076][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.860022][ T5868] bridge_slave_0: entered allmulticast mode [ 91.867463][ T5868] bridge_slave_0: entered promiscuous mode [ 91.882206][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.889530][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.896755][ T5868] bridge_slave_1: entered allmulticast mode [ 91.905296][ T5868] bridge_slave_1: entered promiscuous mode [ 91.934567][ T5861] team0: Port device team_slave_0 added [ 91.943528][ T5861] team0: Port device team_slave_1 added [ 91.951714][ T5867] Bluetooth: hci0: command tx timeout [ 92.028460][ T5867] Bluetooth: hci1: command tx timeout [ 92.067108][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.108205][ T5872] team0: Port device team_slave_0 added [ 92.130233][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.154021][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.161957][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.169333][ T5875] bridge_slave_0: entered allmulticast mode [ 92.177379][ T5875] bridge_slave_0: entered promiscuous mode [ 92.185681][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.193206][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.219282][ T5867] Bluetooth: hci3: command tx timeout [ 92.219666][ T5867] Bluetooth: hci2: command tx timeout [ 92.230563][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.243784][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.250854][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.277129][ T5867] Bluetooth: hci4: command tx timeout [ 92.282999][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.296093][ T5872] team0: Port device team_slave_1 added [ 92.322618][ T5865] hsr_slave_0: entered promiscuous mode [ 92.329312][ T5865] hsr_slave_1: entered promiscuous mode [ 92.349903][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.357141][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.365507][ T5875] bridge_slave_1: entered allmulticast mode [ 92.373108][ T5875] bridge_slave_1: entered promiscuous mode [ 92.405481][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.413408][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.439859][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.459009][ T5868] team0: Port device team_slave_0 added [ 92.510114][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.517110][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.543194][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.556436][ T5868] team0: Port device team_slave_1 added [ 92.565680][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.625287][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.655362][ T5861] hsr_slave_0: entered promiscuous mode [ 92.662037][ T5861] hsr_slave_1: entered promiscuous mode [ 92.669309][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 92.675155][ T5861] Cannot create hsr debugfs directory [ 92.769444][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.776437][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.802449][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.815471][ T5875] team0: Port device team_slave_0 added [ 92.868853][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.875835][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.902886][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.915626][ T5875] team0: Port device team_slave_1 added [ 92.944187][ T5872] hsr_slave_0: entered promiscuous mode [ 92.950753][ T5872] hsr_slave_1: entered promiscuous mode [ 92.956870][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 92.963073][ T5872] Cannot create hsr debugfs directory [ 93.033627][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.040802][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.067035][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.120980][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.128313][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.155054][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.271725][ T5868] hsr_slave_0: entered promiscuous mode [ 93.278786][ T5868] hsr_slave_1: entered promiscuous mode [ 93.287250][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 93.294113][ T5868] Cannot create hsr debugfs directory [ 93.462043][ T5875] hsr_slave_0: entered promiscuous mode [ 93.468971][ T5875] hsr_slave_1: entered promiscuous mode [ 93.475174][ T5875] debugfs: 'hsr0' already exists in 'hsr' [ 93.481550][ T5875] Cannot create hsr debugfs directory [ 93.702097][ T5865] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.730391][ T5865] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.767447][ T5865] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.811198][ T5865] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.910025][ T5861] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.937444][ T5861] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.955262][ T5861] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.967499][ T5861] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.028129][ T5867] Bluetooth: hci0: command tx timeout [ 94.065919][ T5872] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.084496][ T5872] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.104092][ T5872] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.111136][ T5867] Bluetooth: hci1: command tx timeout [ 94.124931][ T5872] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.215234][ T5868] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.254460][ T5868] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.267934][ T5867] Bluetooth: hci3: command tx timeout [ 94.268082][ T5868] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.280374][ T5867] Bluetooth: hci2: command tx timeout [ 94.293709][ T5868] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.347719][ T5867] Bluetooth: hci4: command tx timeout [ 94.397131][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.451448][ T5875] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.481357][ T5875] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.492526][ T5875] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.513641][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.526121][ T5875] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.561399][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.577202][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.584692][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.625341][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.632569][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.677542][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.709472][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.716641][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.781648][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.788863][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.813355][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.914939][ T5861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.947190][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.966264][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.973507][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.001957][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.063398][ T4618] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.070647][ T4618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.115481][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.140370][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.219289][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.226488][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.270702][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.277902][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.305012][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.334058][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.341304][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.395692][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.402944][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.471478][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.492244][ T5868] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 95.518512][ T5868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.625769][ T5875] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 95.651561][ T5875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.703730][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.010531][ T5865] veth0_vlan: entered promiscuous mode [ 96.050819][ T5865] veth1_vlan: entered promiscuous mode [ 96.086328][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.108915][ T5867] Bluetooth: hci0: command tx timeout [ 96.188080][ T5867] Bluetooth: hci1: command tx timeout [ 96.203908][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.236869][ T5865] veth0_macvtap: entered promiscuous mode [ 96.249040][ T5865] veth1_macvtap: entered promiscuous mode [ 96.322067][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.345994][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.353294][ T5864] Bluetooth: hci3: command tx timeout [ 96.355983][ T5872] veth0_vlan: entered promiscuous mode [ 96.359109][ T5867] Bluetooth: hci2: command tx timeout [ 96.394165][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.428131][ T5867] Bluetooth: hci4: command tx timeout [ 96.437256][ T5872] veth1_vlan: entered promiscuous mode [ 96.446864][ T4618] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.458990][ T4618] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.506990][ T4618] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.521304][ T4618] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.531180][ T5861] veth0_vlan: entered promiscuous mode [ 96.568925][ T5875] veth0_vlan: entered promiscuous mode [ 96.627305][ T5868] veth0_vlan: entered promiscuous mode [ 96.642442][ T5861] veth1_vlan: entered promiscuous mode [ 96.664981][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.683854][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.685102][ T5875] veth1_vlan: entered promiscuous mode [ 96.751839][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.753067][ T5868] veth1_vlan: entered promiscuous mode [ 96.761171][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.769456][ T5872] veth0_macvtap: entered promiscuous mode [ 96.788536][ T5861] veth0_macvtap: entered promiscuous mode [ 96.802091][ T5872] veth1_macvtap: entered promiscuous mode [ 96.856231][ T5861] veth1_macvtap: entered promiscuous mode [ 96.876721][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.899065][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.933277][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.942547][ T5875] veth0_macvtap: entered promiscuous mode [ 97.006288][ T5875] veth1_macvtap: entered promiscuous mode [ 97.023211][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.034896][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.058436][ T5868] veth0_macvtap: entered promiscuous mode [ 97.077543][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.089769][ T5868] veth1_macvtap: entered promiscuous mode [ 97.109226][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.125552][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.145704][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.163415][ T9] cfg80211: failed to load regulatory.db [ 97.195026][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.214970][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.235218][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.316639][ T1092] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.342244][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.363351][ T1092] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.374000][ T1092] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.434011][ T1092] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.450050][ T1092] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.467207][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.483943][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.505287][ T1092] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.516275][ T1092] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.539067][ T1092] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.554630][ T1092] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.649222][ T1092] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.665543][ T1092] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.705655][ T1092] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.730730][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.741446][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.887747][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.916696][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.965091][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.988933][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.099274][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.107196][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.143695][ T6002] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.191955][ T5867] Bluetooth: hci0: command tx timeout [ 98.209726][ T4618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.259312][ T4618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.268722][ T5867] Bluetooth: hci1: command tx timeout [ 98.322796][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.331960][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.428704][ T5867] Bluetooth: hci2: command tx timeout [ 98.429247][ T5864] Bluetooth: hci3: command tx timeout [ 98.474953][ T6006] tipc: Started in network mode [ 98.480298][ T6006] tipc: Node identity 6285a5748d23, cluster identity 4711 [ 98.488818][ T6006] tipc: Enabled bearer , priority 0 [ 98.508844][ T5864] Bluetooth: hci4: command tx timeout [ 98.517159][ T6008] netlink: 124 bytes leftover after parsing attributes in process `syz.2.11'. [ 98.550078][ T6006] syzkaller0: entered promiscuous mode [ 98.559820][ T6006] syzkaller0: entered allmulticast mode [ 98.604463][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.656862][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.693305][ T6006] tipc: Resetting bearer [ 98.723615][ T6017] netlink: 'syz.2.13': attribute type 1 has an invalid length. [ 98.731668][ T6017] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13'. [ 98.756358][ T6005] tipc: Resetting bearer [ 98.831920][ T6005] tipc: Disabling bearer [ 98.914622][ T6025] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14'. [ 99.014718][ T6018] !: renamed from dummy0 (while UP) [ 99.827104][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17'. [ 99.839039][ T6052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19'. [ 100.266525][ T6052] team0 (unregistering): Port device team_slave_0 removed [ 100.329810][ T6052] team0 (unregistering): Port device team_slave_1 removed [ 100.354600][ T10] IPVS: starting estimator thread 0... [ 100.467759][ T6063] IPVS: using max 35 ests per chain, 84000 per kthread [ 100.787935][ T6074] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 100.929971][ T6032] tipc: can't start tipc receive workqueue [ 100.989524][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'. [ 101.019929][ T6082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24'. [ 101.042303][ T6082] netlink: 'syz.2.24': attribute type 18 has an invalid length. [ 101.110438][ T6086] netlink: 296 bytes leftover after parsing attributes in process `syz.2.24'. [ 101.151496][ T6090] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.176177][ T6091] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24'. [ 102.380320][ T6134] syz.4.29 uses obsolete (PF_INET,SOCK_PACKET) [ 102.506701][ T6129] tipc: Started in network mode [ 102.526241][ T6129] tipc: Node identity ea1842539197, cluster identity 4711 [ 102.534133][ T6129] tipc: Enabled bearer , priority 0 [ 102.568056][ T6136] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.28'. [ 102.585766][ T6129] netlink: 'syz.2.28': attribute type 1 has an invalid length. [ 102.732711][ T6149] Zero length message leads to an empty skb [ 103.083308][ T6129] syzkaller0: entered promiscuous mode [ 103.089974][ T6129] syzkaller0: entered allmulticast mode [ 103.117816][ T6147] bridge_slave_1: left allmulticast mode [ 103.134021][ T6147] bridge_slave_1: left promiscuous mode [ 103.153510][ T6147] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.194491][ T6147] bridge_slave_0: left allmulticast mode [ 103.210865][ T6147] bridge_slave_0: left promiscuous mode [ 103.221249][ T6147] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.389935][ T6128] tipc: Resetting bearer [ 103.418882][ T6128] tipc: Disabling bearer [ 103.572890][ T6166] __nla_validate_parse: 4 callbacks suppressed [ 103.572908][ T6166] netlink: 60 bytes leftover after parsing attributes in process `syz.3.35'. [ 103.829791][ T6176] netlink: 24 bytes leftover after parsing attributes in process `syz.2.39'. [ 104.411434][ T6190] erspan0: entered promiscuous mode [ 104.492197][ T6190] erspan0: left promiscuous mode [ 104.910728][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 104.984014][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.50'. [ 105.366091][ T6235] netlink: 36 bytes leftover after parsing attributes in process `syz.1.52'. [ 106.296844][ T6262] netlink: 'syz.4.57': attribute type 27 has an invalid length. [ 106.304795][ T6260] tc_dump_action: action bad kind [ 106.514687][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.61'. [ 106.688467][ T6277] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.65'. [ 106.755827][ T6117] syzkaller0: tun_net_xmit 76 [ 106.767387][ T6117] syzkaller0: tun_net_xmit 48 [ 106.775452][ T10] syzkaller0: tun_net_xmit 76 [ 106.791663][ T6275] netlink: 200 bytes leftover after parsing attributes in process `syz.1.64'. [ 106.803417][ T6275] tipc: Started in network mode [ 106.817721][ T6275] tipc: Node identity , cluster identity 4711 [ 106.824072][ T6275] tipc: Failed to obtain node identity [ 106.830385][ T10] syzkaller0: tun_net_xmit 76 [ 106.835544][ T6275] tipc: Enabling of bearer rejected, failed to enable media [ 106.847934][ T10] syzkaller0: tun_net_xmit 76 [ 108.369149][ T6295] vlan0: entered promiscuous mode [ 108.697469][ T6323] netlink: 'syz.3.77': attribute type 4 has an invalid length. [ 109.190502][ T6337] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 109.214269][ T6341] netlink: 44 bytes leftover after parsing attributes in process `syz.1.81'. [ 109.242653][ T6337] bond0: (slave bond_slave_0): Releasing backup interface [ 109.243890][ T6341] netlink: 43 bytes leftover after parsing attributes in process `syz.1.81'. [ 109.283246][ T6341] netlink: 'syz.1.81': attribute type 5 has an invalid length. [ 109.302665][ T6341] netlink: 43 bytes leftover after parsing attributes in process `syz.1.81'. [ 109.341004][ T6337] bond0: (slave bond_slave_1): Releasing backup interface [ 109.419812][ T6346] netlink: 'syz.3.80': attribute type 10 has an invalid length. [ 109.461250][ T6337] team0: Port device team_slave_0 removed [ 109.566482][ T6337] team0: Port device team_slave_1 removed [ 109.589244][ T6337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.612523][ T6337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.648519][ T6337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.657860][ T6337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.668085][ T6337] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 109.738305][ T6346] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 109.806470][ T6346] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 109.819520][ T6354] warning: `syz.2.83' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.297182][ T6347] syz.3.80 (6347) used greatest stack depth: 15864 bytes left [ 110.709252][ T6379] netlink: 'syz.1.89': attribute type 10 has an invalid length. [ 110.736103][ T6379] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.744144][ T6379] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.766243][ T6379] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.773510][ T6379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.781128][ T6379] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.788839][ T6379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.832285][ T6379] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 110.891249][ T6379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.428078][ T6401] tipc: Enabled bearer , priority 0 [ 111.456020][ T6393] syzkaller0: entered promiscuous mode [ 111.485032][ T6393] syzkaller0: entered allmulticast mode [ 111.513219][ T6403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.96'. [ 111.524112][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.96'. [ 111.554144][ T6403] netlink: 'syz.2.96': attribute type 12 has an invalid length. [ 111.583003][ T6403] netlink: 'syz.2.96': attribute type 14 has an invalid length. [ 111.604896][ T6393] tipc: Resetting bearer [ 111.624146][ T6392] tipc: Resetting bearer [ 111.638912][ T6392] tipc: Disabling bearer [ 111.763173][ T6409] netlink: 6 bytes leftover after parsing attributes in process `syz.2.98'. [ 111.843598][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'. [ 111.950438][ T6420] netlink: 'syz.3.101': attribute type 13 has an invalid length. [ 111.960926][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 111.973916][ T6420] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5) [ 111.988007][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 111.997448][ T6420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.017143][ T6420] netlink: 'syz.3.101': attribute type 10 has an invalid length. [ 112.025115][ T6420] netlink: 40 bytes leftover after parsing attributes in process `syz.3.101'. [ 112.035379][ T6420] veth0_vlan: entered allmulticast mode [ 112.042849][ T6420] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 112.077219][ T6421] netlink: 'syz.3.101': attribute type 13 has an invalid length. [ 112.101605][ T6420] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5) [ 113.320303][ T6454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.439997][ T6456] gretap0: entered promiscuous mode [ 113.460119][ T6456] gretap0: left promiscuous mode [ 113.540273][ T6468] Bluetooth: MGMT ver 1.23 [ 113.560603][ T6468] netlink: 'syz.1.110': attribute type 1 has an invalid length. [ 113.580811][ T6468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.690354][ T6470] Illegal XDP return value 32768 on prog (id 50) dev N/A, expect packet loss! [ 114.027011][ T6493] tipc: Enabling of bearer rejected, failed to enable media [ 114.868846][ T6508] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.876976][ T6508] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.316302][ T6508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.361102][ T6508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.899476][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.944062][ T6116] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.006947][ T6116] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.028756][ T6116] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.115100][ T6556] __nla_validate_parse: 1 callbacks suppressed [ 116.115120][ T6556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.127'. [ 116.262994][ T6566] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 116.465180][ T6576] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 116.484105][ T6574] netlink: 'syz.1.131': attribute type 4 has an invalid length. [ 116.940048][ T6588] tipc: Enabled bearer , priority 0 [ 117.100725][ T6588] syzkaller0: entered promiscuous mode [ 117.107971][ T6588] syzkaller0: entered allmulticast mode [ 117.114877][ T6588] tipc: Resetting bearer [ 117.126630][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.137'. [ 117.169497][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.137'. [ 117.199124][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.218278][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.245224][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.266139][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.347482][ T6599] netlink: 36 bytes leftover after parsing attributes in process `syz.1.138'. [ 117.531694][ T6607] xt_socket: unknown flags 0xd0 [ 117.740086][ T6587] tipc: Resetting bearer [ 117.878444][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.144'. [ 117.887304][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.144'. [ 118.018747][ T5944] tipc: Node number set to 2072986195 [ 118.240945][ T6625] netlink: 'syz.4.147': attribute type 4 has an invalid length. [ 118.316655][ T6632] svc: failed to register nfsdv3 RPC service (errno 111). [ 118.341105][ T6637] netlink: 32 bytes leftover after parsing attributes in process `syz.3.148'. [ 118.355278][ T6632] svc: failed to register nfsaclv3 RPC service (errno 111). [ 118.608852][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.148'. [ 119.427847][ T6587] tipc: Disabling bearer [ 119.453797][ T6640] veth1_macvtap: left promiscuous mode [ 120.030499][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.155'. [ 120.049575][ T6662] netlink: 16 bytes leftover after parsing attributes in process `syz.3.155'. [ 120.527521][ T5867] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 120.539386][ T5867] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 120.547847][ T5867] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 120.556307][ T5867] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 120.564910][ T5867] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 120.778965][ T6679] bond_slave_0: entered promiscuous mode [ 120.784848][ T6679] bond_slave_1: entered promiscuous mode [ 120.807795][ T6679] macvlan2: entered allmulticast mode [ 120.813409][ T6679] bond0: entered allmulticast mode [ 120.819208][ T6679] bond_slave_0: entered allmulticast mode [ 120.826927][ T6679] bond_slave_1: entered allmulticast mode [ 120.838702][ T6679] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 120.848959][ T6679] bond0: left allmulticast mode [ 120.853957][ T6679] bond_slave_0: left allmulticast mode [ 120.887878][ T6679] bond_slave_1: left allmulticast mode [ 120.899253][ T6679] bond_slave_0: left promiscuous mode [ 120.904942][ T6679] bond_slave_1: left promiscuous mode [ 120.974268][ T6702] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 121.254942][ T6718] netlink: 'syz.1.161': attribute type 8 has an invalid length. [ 121.289631][ T6718] __nla_validate_parse: 1 callbacks suppressed [ 121.289648][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.161'. [ 121.336674][ T6721] netlink: 32 bytes leftover after parsing attributes in process `syz.2.163'. [ 121.669899][ T6671] chnl_net:caif_netlink_parms(): no params data found [ 121.937524][ T6671] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.945908][ T6671] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.957451][ T6671] bridge_slave_0: entered allmulticast mode [ 121.967341][ T6671] bridge_slave_0: entered promiscuous mode [ 121.982574][ T6671] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.990822][ T6671] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.998950][ T6671] bridge_slave_1: entered allmulticast mode [ 122.007121][ T6671] bridge_slave_1: entered promiscuous mode [ 122.079595][ T6671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.113634][ T6671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.221746][ T6671] team0: Port device team_slave_0 added [ 122.240083][ T6671] team0: Port device team_slave_1 added [ 122.412761][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057840400: rx timeout, send abort [ 122.424281][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057840400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 122.439027][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058277c00: rx timeout, send abort [ 122.508326][ T6756] raw_sendmsg: syz.2.173 forgot to set AF_INET. Fix it! [ 122.548744][ T6671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.555870][ T6671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.586764][ T6671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.588471][ T5867] Bluetooth: hci5: command tx timeout [ 122.609426][ T6671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.640290][ T6671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.666386][ T6671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.855257][ T6671] hsr_slave_0: entered promiscuous mode [ 122.865098][ T6671] hsr_slave_1: entered promiscuous mode [ 122.875352][ T6671] debugfs: 'hsr0' already exists in 'hsr' [ 122.882739][ T6671] Cannot create hsr debugfs directory [ 122.947256][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058277c00: abort rx timeout. Force session deactivation [ 123.014591][ T6766] netlink: 40 bytes leftover after parsing attributes in process `syz.2.174'. [ 123.324365][ T6788] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 123.337890][ T6789] netlink: 'syz.2.178': attribute type 13 has an invalid length. [ 123.345681][ T6789] netlink: 'syz.2.178': attribute type 17 has an invalid length. [ 123.365450][ T6790] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 123.595029][ T6790] tipc: Enabling of bearer rejected, failed to enable media [ 123.675613][ T6806] Bluetooth: MGMT ver 1.23 [ 123.785675][ T6813] syzkaller0: entered promiscuous mode [ 123.786444][ T6808] netlink: 'syz.3.182': attribute type 1 has an invalid length. [ 123.791869][ T6813] syzkaller0: entered allmulticast mode [ 123.848234][ T6808] netlink: 224 bytes leftover after parsing attributes in process `syz.3.182'. [ 123.945711][ T6671] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 124.016055][ T6671] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 124.030641][ T6776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.052065][ T6671] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 124.059470][ T6817] netlink: 19 bytes leftover after parsing attributes in process `syz.4.184'. [ 124.070757][ T6817] netlink: 'syz.4.184': attribute type 3 has an invalid length. [ 124.104886][ T6671] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 124.411051][ T6671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.454853][ T6671] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.486621][ T4618] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.493961][ T4618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.520363][ T6677] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.527662][ T6677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.677669][ T5867] Bluetooth: hci5: command tx timeout [ 125.287251][ T6671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.636014][ T6876] netlink: 'syz.4.198': attribute type 32 has an invalid length. [ 125.646073][ T6876] netlink: 60 bytes leftover after parsing attributes in process `syz.4.198'. [ 126.020316][ T6903] netlink: 256 bytes leftover after parsing attributes in process `syz.3.203'. [ 126.134144][ T6899] netlink: 'syz.1.201': attribute type 6 has an invalid length. [ 126.485540][ T6923] netlink: 'syz.4.206': attribute type 1 has an invalid length. [ 126.512549][ T6671] veth0_vlan: entered promiscuous mode [ 126.525926][ T6923] netlink: 172 bytes leftover after parsing attributes in process `syz.4.206'. [ 126.577957][ T6671] veth1_vlan: entered promiscuous mode [ 126.748299][ T5867] Bluetooth: hci5: command tx timeout [ 126.826637][ T6671] veth0_macvtap: entered promiscuous mode [ 126.880943][ T6671] veth1_macvtap: entered promiscuous mode [ 126.967424][ T6671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.032221][ T6671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.104446][ T6674] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.117403][ T6674] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.183677][ T6674] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.196511][ T6674] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.272729][ T6939] !: renamed from dummy0 [ 127.356540][ T6944] netlink: 'syz.1.213': attribute type 10 has an invalid length. [ 127.440818][ T6944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.480868][ T6944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.522931][ T6944] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 127.830021][ T6708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.841181][ T6708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.973611][ T6114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.998512][ T6114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.230989][ T6965] IPVS: length: 4096 != 8 [ 128.427974][ T6967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.219'. [ 128.829008][ T5867] Bluetooth: hci5: command tx timeout [ 130.149192][ T7013] tipc: Enabled bearer , priority 0 [ 130.209692][ T7013] syzkaller0: entered promiscuous mode [ 130.220966][ T7013] syzkaller0: entered allmulticast mode [ 130.236131][ T7013] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 130.361395][ T7019] tipc: Resetting bearer [ 130.378380][ T7023] netlink: 12 bytes leftover after parsing attributes in process `syz.5.231'. [ 130.392507][ T7011] tipc: Resetting bearer [ 130.445796][ T7011] tipc: Disabling bearer [ 130.679248][ T7038] netlink: 184148 bytes leftover after parsing attributes in process `syz.4.235'. [ 130.688755][ T7038] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 130.875006][ T7047] netlink: 68 bytes leftover after parsing attributes in process `syz.4.238'. [ 130.896909][ T7047] netlink: 56 bytes leftover after parsing attributes in process `syz.4.238'. [ 131.061227][ T7050] netlink: 20 bytes leftover after parsing attributes in process `syz.4.239'. [ 132.117074][ T7071] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.124703][ T7071] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.532799][ T7071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.922339][ T6699] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.956857][ T6699] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.053696][ T7102] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.250'. [ 133.065217][ T7102] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.250'. [ 133.075015][ T6699] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.170476][ T6699] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.330128][ T7110] netlink: 'syz.4.254': attribute type 1 has an invalid length. [ 133.823030][ T7144] ip6gre0: entered allmulticast mode [ 133.944750][ T7147] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.375964][ T7164] netlink: 36 bytes leftover after parsing attributes in process `syz.1.266'. [ 134.563838][ T7164] netlink: 'syz.1.266': attribute type 1 has an invalid length. [ 134.580975][ T7164] netlink: 'syz.1.266': attribute type 4 has an invalid length. [ 134.598165][ T7164] netlink: 188 bytes leftover after parsing attributes in process `syz.1.266'. [ 134.623053][ T7164] NCSI netlink: No device for ifindex 3321692160 [ 134.754919][ T7179] netlink: 100 bytes leftover after parsing attributes in process `syz.2.268'. [ 134.862908][ T7189] netlink: 'syz.3.273': attribute type 21 has an invalid length. [ 134.873663][ T7189] netlink: 128 bytes leftover after parsing attributes in process `syz.3.273'. [ 134.883899][ T7189] netlink: 'syz.3.273': attribute type 5 has an invalid length. [ 134.914943][ T7189] netlink: 3 bytes leftover after parsing attributes in process `syz.3.273'. [ 135.064731][ T7203] netlink: 52 bytes leftover after parsing attributes in process `syz.3.278'. [ 135.106088][ T7201] netlink: 'syz.4.276': attribute type 1 has an invalid length. [ 135.178273][ T7208] netlink: 56 bytes leftover after parsing attributes in process `syz.5.279'. [ 135.189498][ T7208] netlink: 12 bytes leftover after parsing attributes in process `syz.5.279'. [ 135.199144][ T7208] netlink: 'syz.5.279': attribute type 3 has an invalid length. [ 135.206818][ T7208] netlink: 'syz.5.279': attribute type 2 has an invalid length. [ 135.236251][ T7208] tipc: Started in network mode [ 135.241515][ T7208] tipc: Node identity 8aaaa2f3a73, cluster identity 4711 [ 135.249963][ T7208] tipc: Enabled bearer , priority 0 [ 135.259085][ T7208] syzkaller0: entered promiscuous mode [ 135.264800][ T7208] syzkaller0: entered allmulticast mode [ 135.333578][ T7208] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 135.371701][ T7208] tipc: Resetting bearer [ 135.527094][ T7205] tipc: Resetting bearer [ 135.578438][ T7205] tipc: Disabling bearer [ 135.911424][ T7234] IPVS: Error joining to the multicast group [ 136.143128][ T7234] gre1: entered allmulticast mode [ 137.134380][ T7284] netlink: 'syz.2.301': attribute type 9 has an invalid length. [ 138.113406][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.940244][ T7407] netlink: 'syz.2.331': attribute type 58 has an invalid length. [ 139.980063][ T7407] __nla_validate_parse: 18 callbacks suppressed [ 139.980085][ T7407] netlink: 20 bytes leftover after parsing attributes in process `syz.2.331'. [ 140.140899][ T7406] tipc: Enabled bearer , priority 0 [ 140.214412][ T7406] syzkaller0: entered promiscuous mode [ 140.237793][ T7406] syzkaller0: entered allmulticast mode [ 140.263465][ T7406] tipc: Resetting bearer [ 140.295403][ T7406] netlink: 'syz.3.332': attribute type 12 has an invalid length. [ 140.317987][ T7406] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.332'. [ 140.374243][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.337'. [ 140.456799][ T7405] tipc: Resetting bearer [ 140.485699][ T7405] tipc: Disabling bearer [ 140.627170][ T7453] netlink: 16 bytes leftover after parsing attributes in process `syz.1.340'. [ 140.706309][ T7458] tipc: Enabled bearer , priority 0 [ 140.716757][ T7458] syzkaller0: entered promiscuous mode [ 140.722695][ T7458] syzkaller0: entered allmulticast mode [ 140.732799][ T7458] netlink: 'syz.3.341': attribute type 1 has an invalid length. [ 140.740836][ T7458] netlink: 72 bytes leftover after parsing attributes in process `syz.3.341'. [ 140.759547][ T7458] netlink: 105 bytes leftover after parsing attributes in process `syz.3.341'. [ 140.964014][ T7465] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.113960][ T7459] tipc: Resetting bearer [ 141.230517][ T7476] netlink: 'syz.1.342': attribute type 29 has an invalid length. [ 141.266572][ T7474] netlink: 'syz.1.342': attribute type 5 has an invalid length. [ 141.348291][ T7455] tipc: Resetting bearer [ 141.420827][ T7455] tipc: Disabling bearer [ 142.056093][ T7467] netlink: 28 bytes leftover after parsing attributes in process `syz.4.344'. [ 142.073268][ T7467] netlink: 7 bytes leftover after parsing attributes in process `syz.4.344'. [ 142.220759][ T7504] netlink: 248 bytes leftover after parsing attributes in process `syz.2.348'. [ 142.241597][ T7502] wg0: entered promiscuous mode [ 142.402791][ T7506] pim6reg: entered allmulticast mode [ 142.646522][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.5.351'. [ 142.846122][ T7535] netlink: 'syz.3.355': attribute type 1 has an invalid length. [ 143.004481][ T7535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.042486][ T7544] erspan0: entered allmulticast mode [ 143.112056][ T7544] bond1: (slave erspan0): making interface the new active one [ 143.141916][ T7551] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 143.148690][ T7544] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 143.149458][ T7551] IPv6: NLM_F_CREATE should be set when creating new route [ 143.425587][ T7567] netlink: 'syz.3.364': attribute type 30 has an invalid length. [ 143.510430][ T1113] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.535467][ T1113] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.588560][ T1113] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.757141][ T1113] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.501688][ T7593] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 144.513702][ T7593] bridge0: entered promiscuous mode [ 144.520986][ T7593] bridge0: entered allmulticast mode [ 145.110066][ T7623] __nla_validate_parse: 9 callbacks suppressed [ 145.110086][ T7623] netlink: 48 bytes leftover after parsing attributes in process `syz.1.376'. [ 145.141732][ T7622] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20000 [ 145.222481][ T7628] tipc: Enabled bearer , priority 0 [ 145.265612][ T7635] netlink: 'syz.2.380': attribute type 1 has an invalid length. [ 145.289454][ T7628] syzkaller0: entered promiscuous mode [ 145.295560][ T7628] syzkaller0: entered allmulticast mode [ 145.389929][ T7627] tipc: Resetting bearer [ 145.462033][ T7643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.383'. [ 145.470459][ T7627] tipc: Disabling bearer [ 145.492864][ T7643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.383'. [ 145.685728][ T7650] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.711613][ T7650] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.835851][ T7650] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.846655][ T7650] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.990020][ T7650] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.025545][ T7650] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.127961][ T7677] netlink: 56 bytes leftover after parsing attributes in process `syz.2.393'. [ 146.218273][ T7650] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.258083][ T7650] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.283284][ T9] IPVS: starting estimator thread 0... [ 146.346010][ T7684] netlink: 'syz.1.394': attribute type 10 has an invalid length. [ 146.389151][ T7683] IPVS: using max 28 ests per chain, 67200 per kthread [ 146.399496][ T7684] team0: Device ipvlan1 failed to register rx_handler [ 146.482191][ T7691] netlink: 'syz.5.398': attribute type 49 has an invalid length. [ 146.552064][ T7694] netlink: 'syz.4.399': attribute type 1 has an invalid length. [ 146.560060][ T7694] netlink: 120 bytes leftover after parsing attributes in process `syz.4.399'. [ 146.611594][ T6677] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.632476][ T6677] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.690743][ T6674] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.702383][ T6674] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.735271][ T6674] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.754078][ T6674] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.773431][ T7702] IPVS: length: 91191230 != 8 [ 146.785094][ T6674] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.827917][ T6674] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.578163][ T7743] netlink: 'syz.2.410': attribute type 13 has an invalid length. [ 147.586145][ T7743] netlink: 'syz.2.410': attribute type 17 has an invalid length. [ 147.700512][ T7743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.710480][ T7743] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.730626][ T7756] netlink: 84 bytes leftover after parsing attributes in process `syz.1.413'. [ 147.750150][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.5.414'. [ 147.761376][ T7743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.796922][ T7746] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 148.031113][ T7767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.416'. [ 148.043266][ T7767] netlink: get zone limit has 8 unknown bytes [ 148.331926][ T7777] netlink: 36 bytes leftover after parsing attributes in process `syz.2.419'. [ 148.346155][ T7779] netlink: 36 bytes leftover after parsing attributes in process `syz.2.419'. [ 148.609052][ T7785] tipc: Started in network mode [ 148.635973][ T7785] tipc: Node identity 72aabc1fe847, cluster identity 4711 [ 148.686381][ T7785] tipc: Enabled bearer , priority 0 [ 148.723061][ T7788] syzkaller0: entered promiscuous mode [ 148.737432][ T7788] syzkaller0: entered allmulticast mode [ 149.074963][ T7788] tipc: Resetting bearer [ 149.116552][ T7783] tipc: Resetting bearer [ 149.164816][ T7783] tipc: Disabling bearer [ 149.894929][ T7835] netlink: 'syz.2.432': attribute type 1 has an invalid length. [ 149.920588][ T7835] gretap1: entered allmulticast mode [ 150.018412][ T7850] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 150.029900][ T7850] macsec1: entered allmulticast mode [ 150.035520][ T7850] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 150.099998][ T7850] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 150.129809][ T7853] __nla_validate_parse: 7 callbacks suppressed [ 150.129831][ T7853] netlink: 96 bytes leftover after parsing attributes in process `syz.4.438'. [ 150.370539][ T7876] netlink: 20 bytes leftover after parsing attributes in process `syz.4.443'. [ 150.383159][ T7877] netlink: 20 bytes leftover after parsing attributes in process `syz.4.443'. [ 150.405598][ T7878] syzkaller0: entered promiscuous mode [ 150.412089][ T7878] syzkaller0: entered allmulticast mode [ 150.432228][ T7876] netlink: 'syz.4.443': attribute type 1 has an invalid length. [ 150.445918][ T7875] netlink: 'syz.4.443': attribute type 1 has an invalid length. [ 150.544637][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.444'. [ 150.571418][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.444'. [ 150.604933][ T7882] ip6tnl1: entered promiscuous mode [ 150.621547][ T7882] ip6tnl1: entered allmulticast mode [ 150.657335][ T7880] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 150.720526][ T7892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.447'. [ 150.927376][ T7901] netlink: 'syz.5.448': attribute type 13 has an invalid length. [ 150.956853][ T7901] netlink: 'syz.5.448': attribute type 17 has an invalid length. [ 151.135928][ T7916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.189982][ T7901] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.236226][ T7919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.240844][ T7900] xfrm0: entered promiscuous mode [ 151.256178][ T7900] xfrm0: entered allmulticast mode [ 151.815516][ T7931] pim6reg1: entered promiscuous mode [ 151.824893][ T7931] pim6reg1: entered allmulticast mode [ 151.957429][ T7941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.457'. [ 151.986515][ T7941] bridge_slave_1: left allmulticast mode [ 151.986719][ T7939] netlink: 48 bytes leftover after parsing attributes in process `syz.3.456'. [ 151.993535][ T7941] bridge_slave_1: left promiscuous mode [ 152.015282][ T7941] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.029496][ T7941] bridge_slave_0: left allmulticast mode [ 152.035394][ T7941] bridge_slave_0: left promiscuous mode [ 152.043353][ T7941] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.072809][ T7941] bond0: (slave bridge0): Releasing backup interface [ 152.459601][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.5.461'. [ 152.544356][ T7959] netlink: 'syz.5.461': attribute type 3 has an invalid length. [ 152.582166][ T7961] netlink: 56 bytes leftover after parsing attributes in process `syz.3.462'. [ 152.592150][ T30] audit: type=1800 audit(1757667838.405:2): pid=7965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.463" name="memory.events" dev="tmpfs" ino=469 res=0 errno=0 [ 153.055242][ T7988] netlink: 'syz.3.471': attribute type 9 has an invalid length. [ 153.173391][ T7998] netlink: 'syz.2.470': attribute type 4 has an invalid length. [ 154.020017][ T6708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.047019][ T6708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.518296][ T8052] netlink: 'syz.3.486': attribute type 3 has an invalid length. [ 154.538256][ T8052] netlink: 'syz.3.486': attribute type 1 has an invalid length. [ 154.818969][ T8062] tipc: Enabled bearer , priority 0 [ 154.853289][ T8062] syzkaller0: entered promiscuous mode [ 154.868695][ T8062] syzkaller0: entered allmulticast mode [ 154.945212][ T8062] tipc: Resetting bearer [ 154.971342][ T8061] tipc: Resetting bearer [ 155.031782][ T8061] tipc: Disabling bearer [ 155.233746][ T8086] __nla_validate_parse: 7 callbacks suppressed [ 155.233768][ T8086] netlink: 72 bytes leftover after parsing attributes in process `syz.3.498'. [ 155.491443][ T8090] netlink: 248 bytes leftover after parsing attributes in process `syz.3.499'. [ 155.697524][ T8095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 155.704994][ T8095] IPv6: NLM_F_CREATE should be set when creating new route [ 155.712395][ T8095] IPv6: NLM_F_CREATE should be set when creating new route [ 155.719703][ T8095] IPv6: NLM_F_CREATE should be set when creating new route [ 155.733961][ T30] audit: type=1800 audit(1757667841.555:3): pid=8096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.500" name="blkio.bfq.time_recursive" dev="tmpfs" ino=605 res=0 errno=0 [ 155.935271][ T8098] netlink: 'syz.4.502': attribute type 10 has an invalid length. [ 156.007179][ T8102] netlink: 132 bytes leftover after parsing attributes in process `syz.3.503'. [ 156.028404][ T5864] Bluetooth: hci5: command 0x0405 tx timeout [ 156.325786][ T8116] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 156.371553][ T8114] netlink: 168 bytes leftover after parsing attributes in process `syz.5.507'. [ 156.392032][ T8116] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 156.727810][ T8133] netlink: 'syz.2.512': attribute type 4 has an invalid length. [ 156.824421][ T8134] netlink: 'syz.2.512': attribute type 4 has an invalid length. [ 157.246215][ T8136] FAULT_INJECTION: forcing a failure. [ 157.246215][ T8136] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 157.281609][ T8136] CPU: 0 UID: 0 PID: 8136 Comm: syz.3.514 Not tainted syzkaller #0 PREEMPT(full) [ 157.281639][ T8136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.281659][ T8136] Call Trace: [ 157.281667][ T8136] [ 157.281677][ T8136] dump_stack_lvl+0x189/0x250 [ 157.281716][ T8136] ? __pfx____ratelimit+0x10/0x10 [ 157.281739][ T8136] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.281764][ T8136] ? __pfx__printk+0x10/0x10 [ 157.281792][ T8136] ? __might_fault+0xb0/0x130 [ 157.281834][ T8136] should_fail_ex+0x414/0x560 [ 157.281875][ T8136] _copy_from_user+0x2d/0xb0 [ 157.281901][ T8136] ___sys_sendmsg+0x158/0x2a0 [ 157.281930][ T8136] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.282000][ T8136] ? __fget_files+0x2a/0x420 [ 157.282018][ T8136] ? __fget_files+0x3a0/0x420 [ 157.282049][ T8136] __x64_sys_sendmsg+0x19b/0x260 [ 157.282078][ T8136] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 157.282115][ T8136] ? __pfx_ksys_write+0x10/0x10 [ 157.282140][ T8136] ? rcu_is_watching+0x15/0xb0 [ 157.282167][ T8136] ? do_syscall_64+0xbe/0x3b0 [ 157.282195][ T8136] do_syscall_64+0xfa/0x3b0 [ 157.282216][ T8136] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.282238][ T8136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.282257][ T8136] ? clear_bhb_loop+0x60/0xb0 [ 157.282283][ T8136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.282302][ T8136] RIP: 0033:0x7fdbc158eba9 [ 157.282332][ T8136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.282348][ T8136] RSP: 002b:00007fdbc245e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.282399][ T8136] RAX: ffffffffffffffda RBX: 00007fdbc17d5fa0 RCX: 00007fdbc158eba9 [ 157.282414][ T8136] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 000000000000000a [ 157.282426][ T8136] RBP: 00007fdbc245e090 R08: 0000000000000000 R09: 0000000000000000 [ 157.282438][ T8136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.282449][ T8136] R13: 00007fdbc17d6038 R14: 00007fdbc17d5fa0 R15: 00007ffc6d0f4f98 [ 157.282485][ T8136] [ 159.034812][ T8186] netlink: 16 bytes leftover after parsing attributes in process `syz.3.528'. [ 159.179836][ T8190] bond1: (slave erspan0): Releasing active interface [ 159.204150][ T8193] netlink: 56 bytes leftover after parsing attributes in process `syz.2.530'. [ 159.235293][ T8193] netlink: 56 bytes leftover after parsing attributes in process `syz.2.530'. [ 159.267060][ T8190] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 159.371758][ T8191] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 159.772491][ T8211] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 159.848820][ T8215] netlink: 'syz.4.534': attribute type 13 has an invalid length. [ 159.859724][ T8215] netlink: 'syz.4.534': attribute type 17 has an invalid length. [ 160.059658][ T8220] syz.2.536: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 160.084586][ T8220] CPU: 1 UID: 0 PID: 8220 Comm: syz.2.536 Not tainted syzkaller #0 PREEMPT(full) [ 160.084621][ T8220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 160.084633][ T8220] Call Trace: [ 160.084641][ T8220] [ 160.084650][ T8220] dump_stack_lvl+0x189/0x250 [ 160.084684][ T8220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.084709][ T8220] ? __pfx__printk+0x10/0x10 [ 160.084739][ T8220] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 160.084764][ T8220] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 160.084791][ T8220] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 160.084819][ T8220] warn_alloc+0x214/0x310 [ 160.084858][ T8220] ? __pfx_warn_alloc+0x10/0x10 [ 160.084901][ T8220] ? __get_vm_area_node+0x28f/0x300 [ 160.084930][ T8220] ? xskq_create+0xbf/0x170 [ 160.084956][ T8220] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 160.085024][ T8220] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 160.085063][ T8220] ? __kasan_kmalloc+0x93/0xb0 [ 160.085097][ T8220] vmalloc_user_noprof+0xad/0xf0 [ 160.085128][ T8220] ? xskq_create+0xbf/0x170 [ 160.085149][ T8220] xskq_create+0xbf/0x170 [ 160.085174][ T8220] xsk_init_queue+0xb0/0x110 [ 160.085198][ T8220] xsk_setsockopt+0x57b/0x8d0 [ 160.085233][ T8220] ? __pfx_xsk_setsockopt+0x10/0x10 [ 160.085265][ T8220] ? __pfx_aa_sk_perm+0x10/0x10 [ 160.085299][ T8220] ? __fget_files+0x2a/0x420 [ 160.085315][ T8220] ? aa_sock_opt_perm+0xff/0x1b0 [ 160.085340][ T8220] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 160.085363][ T8220] ? __pfx_xsk_setsockopt+0x10/0x10 [ 160.085396][ T8220] do_sock_setsockopt+0x17c/0x1b0 [ 160.085427][ T8220] __x64_sys_setsockopt+0x13f/0x1b0 [ 160.085469][ T8220] do_syscall_64+0xfa/0x3b0 [ 160.085491][ T8220] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.085513][ T8220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.085533][ T8220] ? clear_bhb_loop+0x60/0xb0 [ 160.085559][ T8220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.085579][ T8220] RIP: 0033:0x7f518918eba9 [ 160.085604][ T8220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.085621][ T8220] RSP: 002b:00007f518a0df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 160.085641][ T8220] RAX: ffffffffffffffda RBX: 00007f51893d5fa0 RCX: 00007f518918eba9 [ 160.085656][ T8220] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004 [ 160.085667][ T8220] RBP: 00007f5189211e19 R08: 0000000000000004 R09: 0000000000000000 [ 160.085678][ T8220] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 160.085690][ T8220] R13: 00007f51893d6038 R14: 00007f51893d5fa0 R15: 00007ffef27bfd88 [ 160.085724][ T8220] [ 160.085744][ T8220] Mem-Info: [ 160.195007][ T8226] netlink: 20824 bytes leftover after parsing attributes in process `syz.3.535'. [ 160.306451][ T8220] active_anon:8774 inactive_anon:0 isolated_anon:0 [ 160.306451][ T8220] active_file:3356 inactive_file:39892 isolated_file:0 [ 160.306451][ T8220] unevictable:768 dirty:276 writeback:0 [ 160.306451][ T8220] slab_reclaimable:11820 slab_unreclaimable:155916 [ 160.306451][ T8220] mapped:37430 shmem:1357 pagetables:1167 [ 160.306451][ T8220] sec_pagetables:0 bounce:0 [ 160.306451][ T8220] kernel_misc_reclaimable:0 [ 160.306451][ T8220] free:1245186 free_pcp:15862 free_cma:0 [ 160.349920][ T8220] Node 0 active_anon:35096kB inactive_anon:0kB active_file:13424kB inactive_file:159364kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:149720kB dirty:1100kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14264kB pagetables:4528kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 160.399872][ T8215] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.423077][ T8220] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 160.464630][ T8226] netlink: 'syz.3.535': attribute type 10 has an invalid length. [ 160.468874][ T8220] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 160.546355][ T8220] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 160.552432][ T8220] Node 0 DMA32 free:1077920kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35348kB inactive_anon:0kB active_file:13424kB inactive_file:157796kB unevictable:1536kB writepending:1100kB present:3129332kB managed:2557400kB mlocked:0kB bounce:0kB free_pcp:43400kB local_pcp:23048kB free_cma:0kB [ 160.585933][ T8220] lowmem_reserve[]: 0 0 1 1 1 [ 160.591184][ T8220] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 160.620758][ T8220] lowmem_reserve[]: 0 0 0 0 0 [ 160.627006][ T8220] Node 1 Normal free:3887336kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19456kB local_pcp:13408kB free_cma:0kB [ 160.662269][ T8220] lowmem_reserve[]: 0 0 0 0 0 [ 160.667047][ T8220] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 160.708108][ T8220] Node 0 DMA32: 126*4kB (UM) 548*8kB (UME) 219*16kB (UM) 288*32kB (UM) 313*64kB (UM) 43*128kB (UME) 29*256kB (UME) 9*512kB (ME) 2*1024kB (M) 2*2048kB (UM) 248*4096kB (M) = 1077128kB [ 160.735855][ T8220] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 160.766164][ T8220] Node 1 Normal: 196*4kB (UME) 43*8kB (UME) 44*16kB (UME) 86*32kB (UME) 24*64kB (UME) 8*128kB (UME) 5*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 945*4096kB (M) = 3887336kB [ 160.789047][ T8226] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 160.798632][ T8220] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 160.809389][ T8220] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 160.820675][ T8220] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 160.832622][ T8220] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 160.843734][ T8220] 44601 total pagecache pages [ 160.849089][ T8220] 0 pages in swap cache [ 160.853281][ T8220] Free swap = 124996kB [ 160.857462][ T8220] Total swap = 124996kB [ 160.862900][ T8220] 2097051 pages RAM [ 160.866756][ T8220] 0 pages HighMem/MovableOnly [ 160.873990][ T8220] 425675 pages reserved [ 160.884600][ T8220] 0 pages cma reserved [ 161.089709][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.537'. [ 161.225908][ T8238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.539'. [ 161.255929][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.539'. [ 161.313269][ T8238] netlink: 32 bytes leftover after parsing attributes in process `syz.3.539'. [ 161.330339][ T8238] netlink: 'syz.3.539': attribute type 9 has an invalid length. [ 161.344594][ T8238] netlink: 'syz.3.539': attribute type 7 has an invalid length. [ 161.364324][ T8238] netlink: 'syz.3.539': attribute type 8 has an invalid length. [ 161.645188][ T8248] netlink: 68 bytes leftover after parsing attributes in process `syz.3.542'. [ 161.840380][ T8257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.544'. [ 162.431054][ T8274] netlink: 'syz.5.548': attribute type 1 has an invalid length. [ 162.540065][ T8274] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 162.716602][ T8287] bridge_slave_0: left allmulticast mode [ 162.769826][ T8287] bridge_slave_0: left promiscuous mode [ 162.797347][ T8287] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.816068][ T8287] bridge_slave_1: left allmulticast mode [ 162.823712][ T8287] bridge_slave_1: left promiscuous mode [ 162.844048][ T8287] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.844479][ T8296] netlink: 12 bytes leftover after parsing attributes in process `syz.5.552'. [ 162.870977][ T8287] bond0: (slave bond_slave_0): Releasing backup interface [ 162.886453][ T8287] bond0: (slave bond_slave_1): Releasing backup interface [ 162.897473][ T8287] team0: Port device team_slave_0 removed [ 162.914241][ T8287] team0: Port device team_slave_1 removed [ 162.921533][ T8287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.932772][ T8287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.941688][ T8287] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 163.031957][ T8290] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 163.101083][ T8304] vlan2: entered allmulticast mode [ 163.125533][ T8304] bridge0: entered allmulticast mode [ 163.301490][ T8291] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 163.488908][ T8320] syzkaller0: entered promiscuous mode [ 163.495775][ T8320] syzkaller0: entered allmulticast mode [ 163.519501][ T8318] tipc: Enabled bearer , priority 0 [ 163.604959][ T8318] tipc: Resetting bearer [ 163.666397][ T8318] tipc: Disabling bearer [ 163.747872][ T8338] netlink: 'syz.5.561': attribute type 1 has an invalid length. [ 163.768240][ T8338] netlink: 224 bytes leftover after parsing attributes in process `syz.5.561'. [ 164.010924][ T8349] vlan2: entered promiscuous mode [ 164.016557][ T8349] vlan2: entered allmulticast mode [ 164.026146][ T8349] hsr_slave_1: entered allmulticast mode [ 164.321936][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.569'. [ 164.335306][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.569'. [ 164.353525][ T8361] netlink: 'syz.2.569': attribute type 14 has an invalid length. [ 164.368647][ T8361] netlink: 'syz.2.569': attribute type 13 has an invalid length. [ 164.564586][ T6699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.589915][ T6699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.579999][ T8428] netlink: 'syz.4.587': attribute type 6 has an invalid length. [ 165.602516][ T8428] netlink: 'syz.4.587': attribute type 6 has an invalid length. [ 165.859860][ T8397] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 165.911449][ T8397] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 166.045025][ T8397] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 166.081181][ T8397] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 166.164305][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.592'. [ 166.191574][ T8397] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 166.211527][ T8397] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 166.344808][ T8397] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 166.365306][ T8397] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 166.914878][ T8473] netlink: 8 bytes leftover after parsing attributes in process `syz.5.597'. [ 167.136724][ T30] audit: type=1800 audit(1757667852.955:4): pid=8483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.601" name="memory.events" dev="tmpfs" ino=734 res=0 errno=0 [ 167.163775][ T8477] geneve3: entered promiscuous mode [ 167.222254][ T30] audit: type=1804 audit(1757667852.995:5): pid=8483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.601" name="/newroot/140/memory.events" dev="tmpfs" ino=734 res=1 errno=0 [ 167.270560][ T8397] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 167.283006][ T8397] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 167.309825][ T8487] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 167.637256][ T8507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.077098][ T8532] nbd: must specify a device to reconfigure [ 168.089205][ T8536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.612'. [ 168.336535][ T8548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.616'. [ 168.443207][ T8546] bond0: (slave bond_slave_0): Releasing backup interface [ 168.535458][ T8546] bond0: (slave bond_slave_1): Releasing backup interface [ 168.575379][ T8546] team0: Port device team_slave_0 removed [ 168.586932][ T8546] team0: Port device team_slave_1 removed [ 168.611180][ T8546] bond0: (slave batadv_slave_0): Releasing backup interface [ 168.640956][ T8546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.817340][ T8546] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 169.004471][ T8562] tipc: Enabled bearer , priority 0 [ 169.146342][ T8568] syzkaller0: entered promiscuous mode [ 169.152387][ T8568] syzkaller0: entered allmulticast mode [ 169.159555][ T8568] tipc: Resetting bearer [ 169.201295][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.618'. [ 169.247396][ T8553] tipc: Resetting bearer [ 169.355825][ T8591] netlink: 192 bytes leftover after parsing attributes in process `syz.2.620'. [ 170.100039][ T5944] tipc: Node number set to 765108979 [ 170.650915][ T8553] tipc: Disabling bearer [ 170.661159][ T8585] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 170.670181][ T8577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.677790][ T8577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.685877][ T8577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.693357][ T8577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.214529][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.630'. [ 171.485715][ T8645] netlink: 308 bytes leftover after parsing attributes in process `syz.4.636'. [ 171.488641][ T8644] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 171.527682][ T8645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.636'. [ 171.583611][ T8645] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 171.759549][ T8654] kthread_run failed with err -4 [ 172.216903][ T8678] veth0_vlan: entered allmulticast mode [ 172.256556][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.643'. [ 173.118393][ T8721] netlink: 32 bytes leftover after parsing attributes in process `syz.5.651'. [ 173.158104][ T8714] syzkaller0: entered promiscuous mode [ 173.163642][ T8714] syzkaller0: entered allmulticast mode [ 173.252893][ T8725] netlink: 20 bytes leftover after parsing attributes in process `syz.2.653'. [ 173.692680][ T8750] netlink: 'syz.3.657': attribute type 1 has an invalid length. [ 173.928016][ T8761] netlink: 28 bytes leftover after parsing attributes in process `syz.4.661'. [ 174.053247][ T8757] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 174.273250][ T8778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.389799][ T8782] tipc: Enabled bearer , priority 0 [ 174.404503][ T8782] tipc: Disabling bearer [ 175.140981][ T8813] netlink: 20 bytes leftover after parsing attributes in process `syz.2.673'. [ 175.165932][ T8813] netlink: 20 bytes leftover after parsing attributes in process `syz.2.673'. [ 175.182136][ T8813] netlink: 232 bytes leftover after parsing attributes in process `syz.2.673'. [ 175.221965][ T8813] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255) [ 175.400371][ T8828] netlink: 'syz.3.678': attribute type 1 has an invalid length. [ 176.550489][ T8871] ipvlan0: entered promiscuous mode [ 176.558406][ T8871] tipc: Enabled bearer , priority 0 [ 176.566053][ T8871] syzkaller0: entered promiscuous mode [ 176.571684][ T8871] syzkaller0: entered allmulticast mode [ 176.593661][ T8871] tipc: Resetting bearer [ 176.605977][ T8870] tipc: Resetting bearer [ 176.641919][ T8870] tipc: Disabling bearer [ 176.972366][ T8882] lo speed is unknown, defaulting to 1000 [ 177.011808][ T8882] lo speed is unknown, defaulting to 1000 [ 177.031186][ T8882] lo speed is unknown, defaulting to 1000 [ 177.105133][ T8882] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 177.115012][ T8886] ipvlan2: entered promiscuous mode [ 177.172016][ T8882] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 177.178420][ T8892] __nla_validate_parse: 3 callbacks suppressed [ 177.178444][ T8892] netlink: 24 bytes leftover after parsing attributes in process `syz.3.696'. [ 177.238090][ T8892] netlink: 24 bytes leftover after parsing attributes in process `syz.3.696'. [ 177.275543][ T8882] lo speed is unknown, defaulting to 1000 [ 177.285485][ T8888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.696'. [ 177.295882][ T8882] lo speed is unknown, defaulting to 1000 [ 177.300399][ T8888] netlink: 'syz.3.696': attribute type 12 has an invalid length. [ 177.316777][ T8882] lo speed is unknown, defaulting to 1000 [ 177.325458][ T8882] lo speed is unknown, defaulting to 1000 [ 177.334476][ T8882] lo speed is unknown, defaulting to 1000 [ 177.344689][ T8882] lo speed is unknown, defaulting to 1000 [ 177.769705][ T8912] pimreg: tun_chr_ioctl cmd 1074025677 [ 177.790522][ T8912] pimreg: linktype set to 780 [ 177.876981][ T8920] lo speed is unknown, defaulting to 1000 [ 179.308710][ T8979] netlink: 'syz.1.724': attribute type 1 has an invalid length. [ 179.342177][ T8979] netlink: 224 bytes leftover after parsing attributes in process `syz.1.724'. [ 179.671618][ T8990] netlink: 'syz.5.727': attribute type 10 has an invalid length. [ 179.680366][ T8990] netlink: 40 bytes leftover after parsing attributes in process `syz.5.727'. [ 179.710862][ T8987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.726'. [ 179.725964][ T8990] team0: Port device geneve0 added [ 179.734517][ T8987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.726'. [ 179.834081][ T8991] lo speed is unknown, defaulting to 1000 [ 179.856991][ T8993] netlink: 132 bytes leftover after parsing attributes in process `syz.4.728'. [ 180.279188][ T9004] netlink: 'syz.5.733': attribute type 2 has an invalid length. [ 180.312232][ T9008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.734'. [ 180.885842][ T9042] netlink: 'syz.2.743': attribute type 10 has an invalid length. [ 180.894566][ T9042] netlink: 40 bytes leftover after parsing attributes in process `syz.2.743'. [ 180.922276][ T9042] team0: Port device geneve0 added [ 180.938828][ T6674] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.975168][ T6674] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.985783][ T6674] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.995482][ T6674] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.157315][ T9052] netlink: 'syz.2.747': attribute type 13 has an invalid length. [ 181.165431][ T9052] netlink: 'syz.2.747': attribute type 17 has an invalid length. [ 181.667220][ T9050] bridge_slave_1: left allmulticast mode [ 181.679442][ T9050] bridge_slave_1: left promiscuous mode [ 181.695582][ T9050] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.723298][ T9050] bridge_slave_0: left allmulticast mode [ 181.778570][ T9050] bridge_slave_0: left promiscuous mode [ 181.784634][ T9050] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.092274][ T9052] ipvlan0: left promiscuous mode [ 182.140110][ T9052] ipvlan2: left promiscuous mode [ 182.167202][ T9061] ip6tnl2: entered promiscuous mode [ 182.183894][ T9061] ip6tnl2: entered allmulticast mode [ 182.220908][ T9046] lo speed is unknown, defaulting to 1000 [ 182.281950][ T10] lo speed is unknown, defaulting to 1000 [ 182.287647][ T37] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.290726][ T10] syz1: Port: 1 Link DOWN [ 182.405760][ T9077] __nla_validate_parse: 3 callbacks suppressed [ 182.405781][ T9077] netlink: 32 bytes leftover after parsing attributes in process `syz.1.752'. [ 182.436452][ T37] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.476751][ T9077] netlink: 152 bytes leftover after parsing attributes in process `syz.1.752'. [ 182.506186][ T9079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.753'. [ 182.535708][ T9079] netlink: 'syz.2.753': attribute type 1 has an invalid length. [ 182.608281][ T6706] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.631233][ T6706] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.307040][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.762'. [ 183.400207][ T9119] lo speed is unknown, defaulting to 1000 [ 183.429473][ T9120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.686843][ T9130] veth0_to_bond: entered allmulticast mode [ 183.836658][ T9135] lo speed is unknown, defaulting to 1000 [ 183.877805][ T9141] netlink: 48 bytes leftover after parsing attributes in process `syz.4.769'. [ 184.318676][ T9155] syzkaller0: entered promiscuous mode [ 184.324296][ T9155] syzkaller0: entered allmulticast mode [ 185.914360][ T9169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.776'. [ 185.923707][ T9169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.776'. [ 185.934740][ T9170] syzkaller0: entered promiscuous mode [ 185.941095][ T9170] syzkaller0: entered allmulticast mode [ 185.983285][ T9176] netlink: 52 bytes leftover after parsing attributes in process `syz.1.777'. [ 186.270344][ T9194] sctp: [Deprecated]: syz.3.782 (pid 9194) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.270344][ T9194] Use struct sctp_sack_info instead [ 186.315650][ T9194] netlink: 'syz.3.782': attribute type 13 has an invalid length. [ 186.323576][ T9194] netlink: 'syz.3.782': attribute type 17 has an invalid length. [ 186.333898][ T9198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.784'. [ 186.399201][ T9194] erspan0: left allmulticast mode [ 186.500594][ T9194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.588518][ T9196] lo speed is unknown, defaulting to 1000 [ 186.930623][ T9206] lo speed is unknown, defaulting to 1000 [ 187.114062][ T9230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.128908][ T9230] batadv_slave_0: entered promiscuous mode [ 187.294400][ T9232] netlink: 596 bytes leftover after parsing attributes in process `syz.2.789'. [ 187.509959][ T9245] dummy0: entered promiscuous mode [ 187.517141][ T9244] dummy0: left promiscuous mode [ 187.853415][ T9267] __nla_validate_parse: 1 callbacks suppressed [ 187.853435][ T9267] netlink: 56 bytes leftover after parsing attributes in process `syz.4.800'. [ 187.895502][ T9264] bridge0: entered allmulticast mode [ 187.912842][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.799'. [ 187.965790][ T9270] netlink: 72 bytes leftover after parsing attributes in process `syz.5.801'. [ 187.977186][ T9264] bridge0 (unregistering): left allmulticast mode [ 188.032500][ T9270] netlink: 'syz.5.801': attribute type 1 has an invalid length. [ 188.060713][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz.5.801'. [ 188.125492][ T9276] lo speed is unknown, defaulting to 1000 [ 188.207901][ T9283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'. [ 188.311555][ T9283] lo speed is unknown, defaulting to 1000 [ 188.373095][ T9289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.805322][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.808'. [ 188.952149][ T9307] can: request_module (can-proto-0) failed. [ 189.032479][ T9311] netlink: 'syz.4.810': attribute type 4 has an invalid length. [ 189.037025][ T9312] netlink: 152 bytes leftover after parsing attributes in process `syz.4.810'. [ 189.068329][ T9312] block nbd0: not configured, cannot reconfigure [ 189.506709][ T9333] netlink: 56 bytes leftover after parsing attributes in process `syz.3.818'. [ 189.523995][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.815'. [ 189.633143][ T9326] netlink: 'syz.4.815': attribute type 21 has an invalid length. [ 189.689511][ T9337] netlink: 60 bytes leftover after parsing attributes in process `syz.4.815'. [ 189.864744][ T30] audit: type=1804 audit(1757667875.685:6): pid=9349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.817" name="/newroot/119/cgroup.controllers" dev="tmpfs" ino=625 res=1 errno=0 [ 189.960982][ T30] audit: type=1800 audit(1757667875.685:7): pid=9349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.817" name="cgroup.controllers" dev="tmpfs" ino=625 res=0 errno=0 [ 190.103084][ T9361] tipc: Started in network mode [ 190.123399][ T9361] tipc: Node identity 0eb24a0548bb, cluster identity 4711 [ 190.147798][ T9361] tipc: Enabled bearer , priority 0 [ 190.213975][ T9361] tipc: Disabling bearer [ 190.362004][ T9372] bond0: (slave vlan2): Opening slave failed [ 190.403090][ T9378] netlink: 'syz.2.829': attribute type 5 has an invalid length. [ 191.110711][ T9428] netlink: 'syz.2.845': attribute type 21 has an invalid length. [ 191.155619][ T9426] lo speed is unknown, defaulting to 1000 [ 191.687051][ T9457] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 192.285462][ T9478] lo speed is unknown, defaulting to 1000 [ 192.544098][ T9490] netlink: 'syz.5.860': attribute type 1 has an invalid length. [ 192.649835][ T9494] _ÐZ`Ô€@ÿÿ: entered promiscuous mode [ 192.916206][ T9510] __nla_validate_parse: 20 callbacks suppressed [ 192.916226][ T9510] netlink: 56 bytes leftover after parsing attributes in process `syz.1.865'. [ 192.950498][ T9509] netlink: 4 bytes leftover after parsing attributes in process `syz.5.867'. [ 192.986135][ T9515] netlink: 68 bytes leftover after parsing attributes in process `syz.4.866'. [ 193.050837][ T9519] netlink: 112 bytes leftover after parsing attributes in process `syz.5.869'. [ 193.712953][ T9540] lo speed is unknown, defaulting to 1000 [ 194.106382][ T9556] syz_tun: entered allmulticast mode [ 194.238709][ T9556] netlink: 'syz.4.876': attribute type 23 has an invalid length. [ 194.339598][ T9554] lo speed is unknown, defaulting to 1000 [ 194.472524][ T9564] netlink: 36 bytes leftover after parsing attributes in process `syz.5.879'. [ 194.527083][ T9564] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 194.700920][ T9553] syz_tun: left allmulticast mode [ 194.997025][ T9576] tipc: Enabled bearer , priority 0 [ 195.011268][ T9590] syzkaller0: entered promiscuous mode [ 195.029305][ T9598] netlink: 56 bytes leftover after parsing attributes in process `syz.1.885'. [ 195.038775][ T9590] syzkaller0: entered allmulticast mode [ 195.135135][ T9576] tipc: Resetting bearer [ 195.157960][ T9572] tipc: Resetting bearer [ 195.224772][ T9572] tipc: Disabling bearer [ 195.294620][ T9608] netlink: 'syz.4.889': attribute type 1 has an invalid length. [ 195.341547][ T9608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.386221][ T9608] macvlan0: entered allmulticast mode [ 195.538046][ T9620] netlink: 'syz.5.892': attribute type 2 has an invalid length. [ 195.702794][ T9634] netlink: 'syz.4.894': attribute type 12 has an invalid length. [ 195.880860][ T9639] erspan0: entered promiscuous mode [ 195.913692][ T9639] erspan0: left promiscuous mode [ 196.015318][ T9639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.896'. [ 196.165718][ T9653] netlink: 36 bytes leftover after parsing attributes in process `syz.1.899'. [ 196.181984][ T9653] 8021q: VLANs not supported on ipvlan1 [ 196.212263][ T9653] macsec1: entered promiscuous mode [ 196.218453][ T9653] macsec1: entered allmulticast mode [ 196.256799][ T9653] netlink: 'syz.1.899': attribute type 1 has an invalid length. [ 196.436710][ T9659] netlink: 44 bytes leftover after parsing attributes in process `syz.1.902'. [ 196.561625][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.904'. [ 196.961000][ T9688] nbd: socks must be embedded in a SOCK_ITEM attr [ 197.081862][ T9697] hsr_slave_0: left promiscuous mode [ 197.091525][ T9697] hsr_slave_1: left promiscuous mode [ 197.326020][ T9707] lo speed is unknown, defaulting to 1000 [ 198.000435][ T9725] syzkaller0: entered promiscuous mode [ 198.006037][ T9725] syzkaller0: entered allmulticast mode [ 198.013581][ T9738] veth0: entered promiscuous mode [ 198.025780][ T9738] __nla_validate_parse: 6 callbacks suppressed [ 198.025799][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.922'. [ 198.057158][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'. [ 198.072414][ T9746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'. [ 199.560427][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.852843][ T9751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.925'. [ 199.971836][ T9771] netlink: 20 bytes leftover after parsing attributes in process `syz.5.928'. [ 200.178949][ T9790] netlink: 'syz.2.933': attribute type 1 has an invalid length. [ 200.200614][ T9792] netlink: 40 bytes leftover after parsing attributes in process `syz.1.930'. [ 200.277223][ T9789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.932'. [ 200.300702][ T9789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.932'. [ 200.364214][ T9785] Bluetooth: MGMT ver 1.23 [ 200.377956][ T9798] netlink: 'syz.4.934': attribute type 1 has an invalid length. [ 200.387307][ T9798] netlink: 'syz.4.934': attribute type 2 has an invalid length. [ 200.405744][ T9790] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.435297][ T9785] geneve2: entered promiscuous mode [ 200.471416][ T9793] lo speed is unknown, defaulting to 1000 [ 200.498038][ T9785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.932'. [ 200.556784][ T9802] [ 200.559176][ T9802] ============================================ [ 200.565339][ T9802] WARNING: possible recursive locking detected [ 200.571511][ T9802] syzkaller #0 Not tainted [ 200.575926][ T9802] -------------------------------------------- [ 200.582071][ T9802] syz.5.935/9802 is trying to acquire lock: [ 200.587963][ T9802] ffff88802472cd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1be0 [ 200.598959][ T9802] [ 200.598959][ T9802] but task is already holding lock: [ 200.606335][ T9802] ffff88802472cd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0 [ 200.616230][ T9802] and the lock comparison function returns 0: [ 200.622315][ T9802] [ 200.622315][ T9802] other info that might help us debug this: [ 200.630392][ T9802] Possible unsafe locking scenario: [ 200.630392][ T9802] [ 200.637948][ T9802] CPU0 [ 200.641254][ T9802] ---- [ 200.644551][ T9802] lock(&dev_instance_lock_key#20); [ 200.649861][ T9802] lock(&dev_instance_lock_key#20); [ 200.655179][ T9802] [ 200.655179][ T9802] *** DEADLOCK *** [ 200.655179][ T9802] [ 200.663332][ T9802] May be due to missing lock nesting notation [ 200.663332][ T9802] [ 200.671661][ T9802] 2 locks held by syz.5.935/9802: [ 200.676705][ T9802] #0: ffffffff8f539588 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19b0 [ 200.685815][ T9802] #1: ffff88802472cd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0 [ 200.696385][ T9802] [ 200.696385][ T9802] stack backtrace: [ 200.702288][ T9802] CPU: 1 UID: 0 PID: 9802 Comm: syz.5.935 Not tainted syzkaller #0 PREEMPT(full) [ 200.702309][ T9802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 200.702320][ T9802] Call Trace: [ 200.702329][ T9802] [ 200.702338][ T9802] dump_stack_lvl+0x189/0x250 [ 200.702365][ T9802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.702385][ T9802] ? __pfx__printk+0x10/0x10 [ 200.702411][ T9802] ? print_lock_name+0xde/0x100 [ 200.702434][ T9802] print_deadlock_bug+0x28b/0x2a0 [ 200.702453][ T9802] validate_chain+0x1a3f/0x2140 [ 200.702473][ T9802] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 200.702489][ T9802] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.702511][ T9802] __lock_acquire+0xab9/0xd20 [ 200.702538][ T9802] ? __netdev_update_features+0xcb1/0x1be0 [ 200.702559][ T9802] lock_acquire+0x120/0x360 [ 200.702583][ T9802] ? __netdev_update_features+0xcb1/0x1be0 [ 200.702606][ T9802] ? kasan_save_free_info+0x46/0x50 [ 200.702624][ T9802] ? kmem_cache_free+0x18f/0x400 [ 200.702645][ T9802] ? ethnl_multicast+0xb6/0x100 [ 200.702665][ T9802] __mutex_lock+0x187/0x1350 [ 200.702683][ T9802] ? __netdev_update_features+0xcb1/0x1be0 [ 200.702706][ T9802] ? do_raw_spin_lock+0x121/0x290 [ 200.702726][ T9802] ? __netdev_update_features+0xcb1/0x1be0 [ 200.702822][ T9802] ? __pfx___mutex_lock+0x10/0x10 [ 200.702839][ T9802] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 200.702855][ T9802] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.702878][ T9802] __netdev_update_features+0xcb1/0x1be0 [ 200.702907][ T9802] ? __pfx___netdev_update_features+0x10/0x10 [ 200.702930][ T9802] ? cfg80211_netdev_notifier_call+0x1ee/0x1450 [ 200.702953][ T9802] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 200.702974][ T9802] ? __lock_acquire+0xab9/0xd20 [ 200.703002][ T9802] ? do_raw_spin_lock+0x121/0x290 [ 200.703024][ T9802] netdev_update_features+0x6d/0xe0 [ 200.703041][ T9802] ? __pfx_netdev_update_features+0x10/0x10 [ 200.703061][ T9802] macsec_notify+0x2f5/0x660 [ 200.703082][ T9802] ? __pfx_macsec_notify+0x10/0x10 [ 200.703103][ T9802] notifier_call_chain+0x1b3/0x3e0 [ 200.703124][ T9802] netdev_features_change+0x85/0xc0 [ 200.703150][ T9802] ? __pfx_netdev_features_change+0x10/0x10 [ 200.703176][ T9802] ? security_capable+0x7e/0x2e0 [ 200.703203][ T9802] dev_ethtool+0x1536/0x19b0 [ 200.703228][ T9802] ? __pfx_dev_ethtool+0x10/0x10 [ 200.703254][ T9802] ? dev_load+0x21/0x1f0 [ 200.703270][ T9802] dev_ioctl+0x392/0x1150 [ 200.703286][ T9802] sock_do_ioctl+0x22c/0x300 [ 200.703311][ T9802] ? __pfx_sock_do_ioctl+0x10/0x10 [ 200.703333][ T9802] ? __lock_acquire+0xab9/0xd20 [ 200.703362][ T9802] sock_ioctl+0x576/0x790 [ 200.703384][ T9802] ? __pfx_sock_ioctl+0x10/0x10 [ 200.703406][ T9802] ? __fget_files+0x2a/0x420 [ 200.703419][ T9802] ? __fget_files+0x3a0/0x420 [ 200.703432][ T9802] ? __fget_files+0x2a/0x420 [ 200.703447][ T9802] ? bpf_lsm_file_ioctl+0x9/0x20 [ 200.703467][ T9802] ? __pfx_sock_ioctl+0x10/0x10 [ 200.703488][ T9802] __se_sys_ioctl+0xfc/0x170 [ 200.703509][ T9802] do_syscall_64+0xfa/0x3b0 [ 200.703526][ T9802] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.703542][ T9802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.703557][ T9802] ? clear_bhb_loop+0x60/0xb0 [ 200.703575][ T9802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.703591][ T9802] RIP: 0033:0x7fb23358eba9 [ 200.703607][ T9802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.703621][ T9802] RSP: 002b:00007fb234497038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.703640][ T9802] RAX: ffffffffffffffda RBX: 00007fb2337d5fa0 RCX: 00007fb23358eba9 [ 200.703652][ T9802] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000008 [ 200.703663][ T9802] RBP: 00007fb233611e19 R08: 0000000000000000 R09: 0000000000000000 [ 200.703673][ T9802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.703684][ T9802] R13: 00007fb2337d6038 R14: 00007fb2337d5fa0 R15: 00007ffdad4e5448 [ 200.703703][ T9802] [ 201.153901][ T9823] netlink: 156 bytes leftover after parsing attributes in process `syz.5.935'. [ 201.214763][ T9825] netlink: 'syz.1.936': attribute type 10 has an invalid length.