last executing test programs: 1m33.310403253s ago: executing program 3 (id=5417): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x1b}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r5, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x10, r3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={0x2c, r8, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r9, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) 1m32.899564813s ago: executing program 3 (id=5422): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000400070001"], 0x50) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d300", 0x38}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/65, 0x41}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$inet6(0xa, 0x3, 0x8000000003c) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000540)) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0xffffec77, @hyper=0x300}, 0x10) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000580)={0x2, 0x3}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r8) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080080}, 0x20008080) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a00)={0x1c4, r6, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fa008de2aeabdf662893a0702cb1a6def8f5a8f3b45c6038"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1ff74090558d4bf674ed439813a89374d4dc3cec6fc7dcf2"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "41471c58ee17ce724c2a01d450f5cbfc7e25e9d0221f9613"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3ef1650a4e16bff74e69eee32acd01e7b4faaaa93300"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4e8d0541d18d31f4f0d3572d1e852aecfc4b991c28705716"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "71f8a5a5021f32f86533663d84805db4037410788f03ce95"}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20008040}, 0x20000010) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0xffff, 0xffff}, {0x7, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) 1m32.731477555s ago: executing program 3 (id=5424): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x80000, 0x1) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) recvmsg$unix(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x181) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000400)) ioctl$FICLONE(r3, 0x40049409, r2) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x191}, 0x84) socketpair(0x1, 0x8001a, 0x0, &(0x7f0000000000)) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='contention_begin\x00', r9, 0x0, 0xf}, 0x18) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) 1m31.442389573s ago: executing program 3 (id=5435): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x5, 0x7ff}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r1, 0x5808, 0x6, 0x101}, 0x10) (async) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x29}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x6}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xf37, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xc}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x11}]}, 0x50}, 0x1, 0x0, 0x0, 0x44}, 0x20004084) (async) r2 = socket$inet(0x2, 0x800, 0x1ff) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={r1, 0x815}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000280)={r4, 0xaaf, 0x3, [0xb, 0xff, 0x5]}, 0xe) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={r1, 0x3, 0xa3f0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r5, 0xa}, 0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000380)=r4, 0x4) (async) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000003c0)={r1, 0xc0c5}, 0x8) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r7, 0x29, 0xcd, &(0x7f0000000400)={{0xa, 0x4e20, 0x5, @empty, 0x200}, {0xa, 0x4e21, 0xb, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x0, {[0xb, 0xa34, 0x401, 0x6, 0x6, 0x1ff, 0x2, 0x8]}}, 0x5c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r8, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x810, r3, 0x1e8ee000) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f00000005c0)={0xffff0, {{0xa, 0x4e22, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}}, 0x88) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r9, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8890}, 0x800) (async) accept4(r9, &(0x7f0000000780)=@ieee802154={0x24, @long}, &(0x7f0000000800)=0x80, 0x800) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000840)={0x0, 0x6, [0xffffffff80a20c20, 0x8000000000000001, 0x200, 0x2, 0x0, 0x3]}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000880)={0x9, 0x0, 0x81, 0x3f69a8cc, r1}, &(0x7f00000008c0)=0x10) (async) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000900)={@remote, @multicast2, 0x1, 0x4, [@multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x39}, @loopback]}, 0x20) (async) ioctl$sock_inet_SIOCSIFPFLAGS(r8, 0x8934, &(0x7f0000000940)={'syzkaller0\x00', 0x6}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r10, 0xc0c89425, &(0x7f0000000bc0)={"08bdcbbd0df804affaede5b8b0b44a6a", 0x0, 0x0, {0x6, 0x2a14}, {0x10000, 0x3}, 0x40000000, [0x5, 0x63, 0x8, 0x1, 0x9, 0xfff, 0x3, 0x9, 0x7, 0x3, 0x7ff, 0x7, 0x7fff, 0x6, 0x5, 0xa]}) 1m31.250649529s ago: executing program 3 (id=5437): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b80)={r2, 0x0, 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@enum64={0x2, 0x2, 0x0, 0x13, 0x1, 0x1, [{0x3, 0x1, 0x7fffffff}, {0x1, 0x10005, 0x5}]}]}, {0x0, [0x61, 0x5f, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x41, 0xff9, 0x1}, 0x28) 1m31.098416751s ago: executing program 3 (id=5438): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x20004081) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="13d4996bff200000f3202a0504d0fdd0b16bec3fb0d1030000000000000008000100eeffe10000471d982d"], 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x6, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x2, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0xbbd, 0x7fffffff, 0x101}, 0x0, 0x0) accept$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket(0x1e, 0x4, 0x0) r8 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r8, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r7, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x2, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x1, 0xf0, 0x3}, {0x1, 0xf0}, 0xfe}], 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x11}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x280048d1}, 0x80) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 1m30.277852182s ago: executing program 1 (id=5443): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000000)=0x2, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000060a010400000000000000000100fffd1400000011000100000000f28849e5acb50b3f0a"], 0x9d}, 0x1, 0x0, 0x0, 0x20008800}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4310, 0x20002}, [@IFLA_LINK={0x8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_PHYS_PORT_ID={0xe, 0x22, "0018a94ac58edb47b459"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x814}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}, {0x0, 0x1}]}]}}, 0x0, 0x4a}, 0x20) 1m30.116710598s ago: executing program 1 (id=5446): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x100, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0xfff2}, {0xc, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x8f}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x3) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) connect$pppl2tp(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0) syz_emit_ethernet(0x4b, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x15, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11}, {"a3"}}}}}}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002b40), r8) sendmsg$IEEE802154_LLSEC_DEL_DEV(r8, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000000440)={0x14, r9, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 1m29.771502842s ago: executing program 1 (id=5448): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) close(0x3) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x10, &(0x7f00000001c0)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) unshare(0xa020480) (async) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91107f000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) 1m29.620408031s ago: executing program 1 (id=5450): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000180)=@generic={0x1, 0xffffffffffff8000, 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000190001002cbd700000c8c3532d"], 0x24}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e1ff00000000000000008500000053000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9092dc1b6dbe9ab5becdcc777", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = accept4(0xffffffffffffffff, &(0x7f0000002900)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f0000002980)=0x80, 0x80000) connect$qrtr(r6, &(0x7f00000029c0)={0x2a, 0x1}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r5, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/62, 0x3e}, {&(0x7f00000004c0)=""/162, 0xa2}, {&(0x7f0000000580)=""/245, 0xf5}], 0x3}, 0x8}, {{&(0x7f0000000680)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000700)=""/167, 0xa7}, {&(0x7f00000007c0)=""/209, 0xd1}, {&(0x7f00000008c0)=""/196, 0xc4}, {&(0x7f00000009c0)=""/244, 0xf4}], 0x4, &(0x7f0000000ac0)=""/149, 0x95}, 0x1}, {{&(0x7f0000000b80)=@hci, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000c00)=""/171, 0xab}, {&(0x7f0000000cc0)=""/164, 0xa4}, {&(0x7f0000000d80)=""/22, 0x16}, {&(0x7f0000000dc0)=""/21, 0x15}, {&(0x7f0000000e00)=""/97, 0x61}, {&(0x7f0000000e80)=""/160, 0xa0}, {&(0x7f0000000f40)=""/187, 0xbb}, {&(0x7f0000001000)=""/199, 0xc7}, {&(0x7f0000001100)=""/204, 0xcc}, {&(0x7f0000001200)=""/143, 0x8f}], 0xa}, 0x7}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/88, 0x58}, {&(0x7f0000002400)=""/55, 0x37}, {&(0x7f0000002440)=""/124, 0x7c}, {&(0x7f00000024c0)=""/210, 0xd2}, {&(0x7f00000025c0)=""/248, 0xf8}], 0x6, &(0x7f0000002740)=""/80, 0x50}, 0x6f}], 0x4, 0x102, &(0x7f00000028c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d1"}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x20008080}, 0x2000c000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000de0000000000000000000000630123000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000080000000000000003000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa900000000000007010000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x8eb2e000f2c28467, 0x7}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 1m29.276268926s ago: executing program 1 (id=5453): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) r2 = socket(0x40000000015, 0x805, 0x0) accept$unix(r2, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x74, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0x4, 0xffff}, {0x0, 0x2}}, [@TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x10, 0x3, 0x2, 0x2, 0x2, 0x400, 0x3, 0x5}}, {0xe, 0x2, [0x2, 0x3d, 0x5, 0x6, 0x0]}}, {{0x1c, 0x1, {0x9, 0xfa, 0x7, 0x7, 0x2, 0x101, 0x2}}, {0x4}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) 1m29.153907093s ago: executing program 1 (id=5455): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r1, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @link_local, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xd, @multicast, @local, @multicast, @local}}}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_delroute={0x24, 0x19, 0x1, 0x4070bd28, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1100}, [@RTA_PRIORITY={0x8, 0x6, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4002050) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, 0x0}, 0x20) close(0x4) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}}, 0x24}}, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}]}}]}, 0x44}}, 0x24000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x1, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) r8 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r8, 0x400261f3, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0xf4e54000) close(r1) 1m28.754761277s ago: executing program 4 (id=5458): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000070a010000000000000f4f0003000004"], 0x14}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fcdbdf250b0000000c00018008000300030000003000018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="14000200766c616e30000000000000000000000014000180080003000100000008000300060000003000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006e69637666300000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000003400018014000200766c616e31000000000000000000000008000300020000001400020076657468315f746f5f626174616476002000018008000100", @ANYRES32=0x0, @ANYBLOB="140002007620ff68305f746f5f6b5670dc0000000c0300000000450100", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="2000018008000300010000001400020069703667726530000000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x42}, 0x4010) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r14 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="000008060000"], 0xfdef) splice(r1, 0x0, r2, 0x0, 0x4, 0x0) 1m28.514616514s ago: executing program 4 (id=5459): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000600)=""/97, 0x61}, {&(0x7f0000000680)=""/114, 0x72}], 0x4}, 0x3f}], 0x2, 0x60, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000040)={@random="bbb2db1d2c10", @empty, @val={@val={0x88a8, 0x5, 0x0, 0x4}, {0x8100, 0x2, 0x0, 0x1}}, {@canfd={0xd, {{0x3, 0x0, 0x0, 0x1}, 0x34, 0x1, 0x0, 0x0, "26288ea9c61b8424c07b350cf16516cff1c388a4893b5a8d751a22a004b00cf3644e764a13b2d84d018dd60b9df19080d66da0cc64b693263b7482bfec0eabde"}}}}, &(0x7f0000000180)={0x1, 0x2, [0x7ae, 0xcbb, 0xad3, 0xb7f]}) (async) syz_emit_ethernet(0x5e, &(0x7f0000000040)={@random="bbb2db1d2c10", @empty, @val={@val={0x88a8, 0x5, 0x0, 0x4}, {0x8100, 0x2, 0x0, 0x1}}, {@canfd={0xd, {{0x3, 0x0, 0x0, 0x1}, 0x34, 0x1, 0x0, 0x0, "26288ea9c61b8424c07b350cf16516cff1c388a4893b5a8d751a22a004b00cf3644e764a13b2d84d018dd60b9df19080d66da0cc64b693263b7482bfec0eabde"}}}}, &(0x7f0000000180)={0x1, 0x2, [0x7ae, 0xcbb, 0xad3, 0xb7f]}) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) bind$802154_dgram(r2, &(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14) (async) bind$802154_dgram(r2, &(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14) 1m28.402517745s ago: executing program 4 (id=5460): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) epoll_create1(0x80000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0x9c, 0xb, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_EXPR={0x64, 0x11, 0x0, 0x1, @reject={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x2e}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xd4}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x4}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7b}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}]}}}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x30}]}, @NFT_MSG_DELSETELEM={0x28, 0xe, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x68, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd7}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x13}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xdb}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x58, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x138, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xc7, 0x6, "c61a3420a00cc1ac46f7dd9276e9daad024bdc7c2f346872aa7cc72234aeb628d14df3bac9ee6cd5b80e30af25c6737b7d97a48353abdd753de33bd5bfe73f340a64d206b2292c37a18e742e66af8e1550c00241e9444e10118b764d083431056b0cfbbd5a3d8942f0a6a47699d37bb2d9ce88b26f13847b8e6a2e3a242d0299cfcc9c0e7eb5b147ce1b1a34892339f2d0164a65e65f5f76f0338a154c31ff73b7105f77e36992b9fda06b6a7dfaf30ce21d461abdfb5f08ee601896777961e151684f"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x2c, 0x6, "4626d6e35915de8b71de24f2d55e7b7d5d6edc9593219409bbab464270b80a773e8fe55a986152f2"}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x801, 0x0, 0x0, {0x9, 0x0, 0x2}, [@NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}]}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_USERDATA={0x4e, 0xc, "e214b7236141e1f56bcaf581240e1c658fe98a83dcca36bde561b0441d06cb5a6110c1292cb92e060fa0370b66b77b54fccbee0be28c43e8ea3e91227f975637f14d9285c86c20dbe5e7"}]}, @NFT_MSG_NEWSET={0xb8, 0x9, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_EXPR={0x4c, 0x11, 0x0, 0x1, @reject={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_USERDATA={0x16, 0xd, 0x1, 0x0, "54a8a9a90cc17f562ffdd0dcc3bd0abf5198"}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x101}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8000000000000001}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xdb7}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x454}, 0x1, 0x0, 0x0, 0x20000801}, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x0, 0x11, 0x148, 0xd8, 0x0, 0x1d8, 0x2a8, 0x2a8, 0x1d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfa3, 0xc64, 0x4, '\x00', 'syz1\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x800}}, @common=@ah={{0x30}, {[0x5, 0x6]}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffc, 0x19ecd463, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) 1m28.350419385s ago: executing program 4 (id=5461): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x1, 0x1, 0x4000}, 0x20) close(r0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0xf5cfd0ed62d9e836, 0xffffffffffffffff, 0x2000) 1m28.210426762s ago: executing program 4 (id=5463): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x420440, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'wg1\x00', @link_local}) writev(r0, &(0x7f00000008c0), 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0x1, 0x0, 0x0, r2}, 0x60) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe}, {}, {0x7}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x59, 0xfffffffb, 0x40, @mcast2, @rand_addr=' \x01\x00', 0x40, 0x7800, 0x0, 0x8001}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000680)={@local, @initdev, 0x0}, &(0x7f00000006c0)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0x1, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000800)={'vxcan1\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000840)={0x0, @broadcast, @multicast1}, &(0x7f0000000880)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000980)={'syztnl1\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0x5, 0xb, 0x30, @ipv4={'\x00', '\xff\xff', @multicast2}, @empty, 0x8000, 0x1, 0x6, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a80)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x2d, 0x1, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x10, 0x80, 0xfbe, 0x2b8}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000ac0)={'gre0\x00', 0x0, 0x8, 0x1, 0x0, 0x80, {{0x22, 0x4, 0x3, 0x7, 0x88, 0x64, 0x0, 0x55, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @loopback, {[@rr={0x7, 0xb, 0xac, [@broadcast, @remote]}, @lsrr={0x83, 0x1b, 0xed, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3c}, @loopback, @remote, @remote, @private=0xa010100]}, @lsrr={0x83, 0x7, 0xb6, [@private=0xa010101]}, @ssrr={0x89, 0xb, 0xf2, [@local, @remote]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0xce, 0x3, 0x5, [{@multicast1, 0x6dcf}]}, @generic={0x94, 0xd, "c508aa4ef52f94d450041a"}, @cipso={0x86, 0xd, 0x0, [{0x2, 0x7, "26a9df646c"}]}, @timestamp_addr={0x44, 0xc, 0x67, 0x1, 0x4, [{@loopback, 0x1}]}, @ra={0x94, 0x4}]}}}}}) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f00000001c0)) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r13) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r14, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r9, @ANYRES32=r5, @ANYBLOB="010007000000aa44d500000000000000000000000000681b0b2737ac90", @ANYRESOCT, @ANYRESOCT=r1], 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x200408c0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e00)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="0c020000", @ANYRES16=0x0, @ANYBLOB="71f428bd7000ffdbdf2511000000180001801400020064766d727030000000000000000000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000004000018008000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000080003000600000008000100", @ANYRES32=0x0, @ANYBLOB="1400020000000000000000000000000000000000080003000100000058000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468000008000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="5400018008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0800030003000000140002006261746164765f736c6176655f3100001400020077673200000000000000000000000000080003000200000008000300020000005000018008000100", @ANYRES32=r8, @ANYBLOB="140002006e7230000000000000000000000000000800030002000000140002006c6f00000000000000000000000000001400020064766d727031000000000000000000005000018008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006772657461703000000000000000000018000180140002006d6163766c616e310000000000000000280001801400020076657468305f766c616e000000000000080003000200000008000100", @ANYRES32=r15, @ANYBLOB], 0x20c}, 0x1, 0x0, 0x0, 0xd0}, 0x2004c090) 1m27.730442666s ago: executing program 4 (id=5469): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, 0x0, 0x0) (async, rerun: 32) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) (async, rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) close(r4) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0xea}]}}]}, 0x44}}, 0x44094) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x23, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) (async, rerun: 64) listen(r5, 0x0) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_create1(0x80000) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 1m14.792645079s ago: executing program 32 (id=5438): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x20004081) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="13d4996bff200000f3202a0504d0fdd0b16bec3fb0d1030000000000000008000100eeffe10000471d982d"], 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x6, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x2, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0xbbd, 0x7fffffff, 0x101}, 0x0, 0x0) accept$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket(0x1e, 0x4, 0x0) r8 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r8, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r7, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x2, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x1, 0xf0, 0x3}, {0x1, 0xf0}, 0xfe}], 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x11}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x280048d1}, 0x80) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 1m12.203241126s ago: executing program 33 (id=5455): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r1, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @link_local, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xd, @multicast, @local, @multicast, @local}}}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_delroute={0x24, 0x19, 0x1, 0x4070bd28, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1100}, [@RTA_PRIORITY={0x8, 0x6, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4002050) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, 0x0}, 0x20) close(0x4) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}}, 0x24}}, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}]}}]}, 0x44}}, 0x24000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x1, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) r8 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r8, 0x400261f3, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0xf4e54000) close(r1) 1m10.501674306s ago: executing program 0 (id=5477): socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000690000000800010002000000"], 0x20}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000690000000800010002000000"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040030db918bc8ccf0be2dd96793159ba6a59ac3d6bdbeea02dc4f60f807c9b1f96d01fd76e189f2aad75bdd"], 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x18, 0x68, 0x1, 0x2, 0x7ffffffc}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x18, 0x68, 0x1, 0x2, 0x7ffffffc}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, 0x0, 0x0, 0x4, 0x0, 0x0) (async) sendto$inet6(r5, 0x0, 0x0, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x1}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r6, 0x8b1b, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006800010002000000fcffff99a4c21908463bf4c4000200"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x17}]}}}]}, 0x50}}, 0x0) 1m8.663767999s ago: executing program 34 (id=5469): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, 0x0, 0x0) (async, rerun: 32) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) (async, rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) close(r4) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0xea}]}}]}, 0x44}}, 0x44094) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x23, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) (async, rerun: 64) listen(r5, 0x0) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_create1(0x80000) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 1m3.053425111s ago: executing program 0 (id=5480): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) sendmmsg$sock(r0, &(0x7f0000002c00)=[{{&(0x7f0000000500)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x80, 0x0, 0x0, &(0x7f0000002b40)=[@txtime={{0x18, 0x1, 0x3d, 0x1000000000003}}], 0x18}}], 0x1, 0x4008844) socket$can_j1939(0x1d, 0x2, 0x7) 56.58172969s ago: executing program 2 (id=5481): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) (async) r2 = socket(0x2, 0x3, 0xff) (async) r3 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x1f}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r4, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24000000dd33e91d8799f9e7f0898c4db7edfa219686e65c4e9a864d6a64cf520f35e49b3b4c51655b457ec20763efcad0a2cd7fe35e2bcf4c40691a4308770c794464634022c6150c86d8c696f6eb651fb88f35e90a7dc03ab080bab8140b642d7ce04377819a0ebd", @ANYRES16, @ANYBLOB="192c2fbd7000fcdbdf2515000000080014006e66631008000100", @ANYRES32=r6, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x840) (async) sendmmsg$inet(r2, &(0x7f000000b4c0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)="8fab14410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac99e4be38c9c2661a897fb45a74a", 0x2d}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000580)="c7bace4ebe91b42a7bf8f86453e0ec420e051dc8", 0x14}, {0x0}], 0x2}}], 0x2, 0x488c4) (async) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r9, &(0x7f0000000340)={0x6, 0x2, 0x3, 0x0, 0x1}, 0x8) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xfffffffffffffe67) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032dbd7000fbdbdf2503000000080004ea00000000050005000200000048000680060005004e200000050002000f00000008000300e0000001060001000200000014000400000000000000000000000000000000010800070074febbf6828d0c0b6bc53f9877aa130fb6d4fba0e5dcf3c654f475329fd77b4a3a0320d538430ead2e6265eb8696386011759a3f64687478a27e124ca8d6c577e2309346539e347ee859d33b4bee3907a6be94d76c7a21d95d921f560a855bc77051ab24264c581b52741ffb89487a6d3835e29a333d6a86c42d2a2dd18378fa7c2d938abaad22b92197065e48a63e887208ffdf64a7b5", @ANYRES32=r10, @ANYBLOB="08000300640101020800040002000000"], 0x74}, 0x1, 0x0, 0x0, 0x810}, 0x20004800) (async) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a42804000000000014003500626f6e6430000000000000000000000008000a00", @ANYRES32=r10], 0x3c}}, 0x8000) (async) sendmsg$nl_route(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011000119ac9560183432742500000000", @ANYRES32=r10, @ANYBLOB="0804000000000000"], 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) (async) sendto$inet(r1, &(0x7f0000000380)="a6", 0x1, 0x40, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r12 = socket$netlink(0x10, 0x3, 0x9) (async) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r1, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000f00)={'ip6_vti0\x00', &(0x7f0000000940)=@ethtool_rxnfc={0x30, 0x10, 0x2ee7a3f8, {0x11, @tcp_ip4_spec={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x4e21, 0x8}, {0x0, @multicast, 0x6, 0x288e, [0x7d3, 0x7]}, @esp_ip6_spec={@remote, @mcast2, 0xf, 0xe}, {0x0, @random="bfa6b04f8012", 0x6, 0x8001, [0xd, 0x80000000]}, 0xfffffffffffffffa, 0x2003}, 0x7, [0x7f, 0x8, 0x4, 0x3ff, 0x4, 0xcc, 0x400]}}) 55.387145938s ago: executing program 0 (id=5482): sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000000)=ANY=[], 0x20}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000380)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0x6ebf}, {0x6}]}, 0x10) sendmmsg$unix(r0, &(0x7f0000000000), 0x0, 0x10) 50.140639354s ago: executing program 2 (id=5483): unshare(0x20000400) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x3, 0x84) socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in=@empty, 0x0, 0x3, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x32}, {0x0, 0x15000000000000, 0x0, 0x2, 0x8001, 0xfffffffffffffffd, 0x0, 0xd3d}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x89, 0x1, 0x1}, {{@in6=@empty, 0x4da, 0x3c}, 0xa, @in=@multicast2, 0xfffffffe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000fc0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a00000000000018010000202078252000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000af8a0085000000cb000000950000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1}, 0x94) vmsplice(r0, &(0x7f0000000440)=[{&(0x7f00000007c0)}, {0x0}, {&(0x7f0000000740)="ea40fb486d881eb9ec6316f2dcc192a78556d73fe204e30d766cd679940088405d85e4d76b541899de6f3bc6c33639c6fedabb4493", 0x35}, {&(0x7f00000002c0)="2362c46679bd7492095bd8e223d5044d43e1e72caaf593cfb61a882fe57ea6662b61273a5e4e7d441a0d62792a36feb2", 0x30}], 0x4, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3}, @in6=@dev, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff80000000}, {0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x0, 0x56}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=0x0, @ANYRES32], 0x48) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f00000006c0)={0x3, 0x3}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, 0x0, &(0x7f0000000300)=r6}, 0x20) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x1c, 0x0, 0x331, 0x0, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) socket$inet6(0xa, 0x80003, 0xff) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448e1, &(0x7f0000000000)) vmsplice(r0, 0x0, 0x0, 0x2) 49.771030831s ago: executing program 0 (id=5484): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0xa, [@restrict={0x0, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x1c}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0xe}}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x7}, {0x43}, {0xa, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, &(0x7f0000000140)=""/63, 0x82, 0x3f, 0x1}, 0x28) r1 = accept4(r0, 0x0, 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80180002"], 0x44}}, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002980)={0x1088, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x1074, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x1000000fac08}, @typed={0x14, 0xb8, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x44, 0x0, 0x0, @uid}, @nested={0x1048, 0x66, 0x0, 0x1, [@nested={0x2e, 0x132, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @u32=0xb2}, @generic="5339dc118c8b50087e2c", @typed={0x8, 0x13d, 0x0, 0x0, @u32=0xfffffffd}, @typed={0xc, 0xff, 0x0, 0x0, @u64=0x5}, @nested={0x4, 0x8a}]}, @generic="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", @nested={0x14, 0x13d, 0x0, 0x1, [@typed={0xf, 0xac, 0x0, 0x0, @str='&^+]/]#@*!.'}]}]}]}, @nested={0x4, 0x2}]}, 0x1088}], 0x1, 0x0, 0x0, 0x1}, 0x0) 41.473571691s ago: executing program 2 (id=5485): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000ff0f000005"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7fee}, @TCA_FQ_CODEL_INTERVAL={0x3, 0x3, 0xfffffff8}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x72}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x4000010) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r3}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 40.450032364s ago: executing program 0 (id=5486): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000010000000000950010000000000085000000a0000000bf91000000000000b7020000020000008500000003003bdea8000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "0300", "95679b548cc93e4100", "fdffb26f", "a2deb79f8c96bff4"}, 0x28) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000400, 0x0, 0x0, 0x200000000430, 0x200000000460], 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="fc000000000000000000000000220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1fffdffffff00000000"]}, 0xfe) 34.793368479s ago: executing program 2 (id=5487): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff01000e0000000000000000000000010c00068005000100000000004700028005000100010000000600034000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x2048014}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r3, 0x0) write$tun(r3, &(0x7f0000000040)={@void, @val={0x3, 0x80, 0x40, 0x2, 0x101, 0x7ff}, @x25={0x0, 0x4, 0x1, "3f5ce3241f701c279c"}}, 0x16) sendmsg$xdp(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)='C', 0x1}, {&(0x7f0000000140)="98", 0x1}], 0x2, 0x0, 0x0, 0x20004000}, 0x5880) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) 31.084536393s ago: executing program 0 (id=5488): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) getsockopt$inet6_tcp_int(r0, 0x6, 0x14, 0x0, &(0x7f0000000140)) r1 = socket$inet6(0xa, 0x3, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbb0180c200000386dd6d002000006488ff00000000000000000000000000000000ff020000000000000000000000000001"], 0x9e) 26.201107511s ago: executing program 2 (id=5489): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) write$tun(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000500)=ANY=[@ANYRES16=r1], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x12}, 0x94) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x3, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0xfffc, 0x4e23, 0x4, 0xa, 0x80, 0x90}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x210000, 0x33}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0xfffffffb}}, 0xe8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffe0) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000000), 0x4) r3 = socket$netlink(0x10, 0x3, 0x1) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) r4 = socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="80420000000000001000128008000100687372000400028008003a00", @ANYRESOCT=r2], 0x40}}, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) unshare(0x20040380) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x46, &(0x7f00000000c0), 0x4) close(r6) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @empty}, 0x1c) listen(r8, 0x0) 16.412971606s ago: executing program 2 (id=5490): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x44084) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)={0x1c, 0x15, 0xa, 0x903, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x20, 0x3, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8009}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000001300)=[{&(0x7f00000013c0)="f0", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, 0x0, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x1e, 0x20}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x20008840) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)) 14.199485042s ago: executing program 35 (id=5488): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) getsockopt$inet6_tcp_int(r0, 0x6, 0x14, 0x0, &(0x7f0000000140)) r1 = socket$inet6(0xa, 0x3, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbb0180c200000386dd6d002000006488ff00000000000000000000000000000000ff020000000000000000000000000001"], 0x9e) 0s ago: executing program 36 (id=5490): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x44084) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)={0x1c, 0x15, 0xa, 0x903, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x20, 0x3, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8009}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000001300)=[{&(0x7f00000013c0)="f0", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, 0x0, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x1e, 0x20}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x20008840) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): mode [ 704.983616][T23163] macsec1: entered allmulticast mode [ 705.028213][T23138] ip6_vti0 speed is unknown, defaulting to 1000 [ 705.518734][T23166] netlink: 'syz.4.4237': attribute type 4 has an invalid length. [ 705.553120][T23184] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4241'. [ 705.576059][T23179] syzkaller0: entered promiscuous mode [ 705.597421][T23179] syzkaller0: entered allmulticast mode [ 705.795516][T23192] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 705.813103][T23192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 707.655437][T23209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4249'. [ 707.728352][T23211] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 707.768894][T23209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4249'. [ 707.868956][T23209] syzkaller0: entered promiscuous mode [ 707.879251][T23209] syzkaller0: entered allmulticast mode [ 707.896812][T23221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4253'. [ 709.980862][T23236] wg1 speed is unknown, defaulting to 1000 [ 710.005830][T23236] xfrm0 speed is unknown, defaulting to 1000 [ 710.227792][T23268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4265'. [ 710.266436][T23265] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4264'. [ 710.405930][T23277] openvswitch: netlink: Flow actions attr not present in new flow. [ 710.416109][T23273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4268'. [ 710.578849][T23236] ip6_vti0 speed is unknown, defaulting to 1000 [ 710.890460][T23299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 710.899546][T23295] xt_policy: output policy not valid in PREROUTING and INPUT [ 710.929453][T23299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 711.127774][T23304] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4279'. [ 711.127774][T23308] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4279'. [ 711.266546][T23318] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4283'. [ 711.596712][T23323] syzkaller1: entered allmulticast mode [ 711.653809][T23333] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 711.665741][T23333] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 711.773489][T23333] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 711.804514][T23333] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 711.916014][T23357] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4293'. [ 711.941577][T23347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4292'. [ 711.952850][T23333] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 711.972981][T23333] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 711.992088][T23345] syzkaller0: entered promiscuous mode [ 712.002735][T23345] syzkaller0: entered allmulticast mode [ 712.010168][T23347] batadv_slave_0: entered promiscuous mode [ 712.071286][T23333] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 712.092166][T23333] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 712.137138][T23346] batadv_slave_0: left promiscuous mode [ 712.312972][T23366] netlink: 'syz.3.4296': attribute type 1 has an invalid length. [ 712.321124][T11907] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.336722][T11907] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20002 - 0 [ 712.355090][T23366] netlink: 'syz.3.4296': attribute type 2 has an invalid length. [ 712.373897][T23366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4296'. [ 712.429042][T23376] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4299'. [ 712.503314][T11907] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.524446][T11907] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20002 - 0 [ 712.586059][T22810] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.627065][T22810] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20002 - 0 [ 712.690377][T22808] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.698758][T22808] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20002 - 0 [ 713.609302][T23422] netlink: 'syz.3.4315': attribute type 10 has an invalid length. [ 713.701320][T23422] team0: Failed to send options change via netlink (err -105) [ 713.723345][T23422] team0: Port device geneve0 added [ 713.969316][T23436] block nbd16: Unsupported socket: should be TCP or UNIX. [ 714.005885][T23436] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 714.079815][T23445] netlink: 'syz.0.4319': attribute type 1 has an invalid length. [ 714.204349][T23449] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 714.287604][T23449] wg1 speed is unknown, defaulting to 1000 [ 714.306456][T23449] xfrm0 speed is unknown, defaulting to 1000 [ 714.313592][T23456] nbd: must specify a size in bytes for the device [ 714.406748][T23458] wg1 speed is unknown, defaulting to 1000 [ 714.503117][T23458] xfrm0 speed is unknown, defaulting to 1000 [ 714.510887][T23449] ip6_vti0 speed is unknown, defaulting to 1000 [ 715.072709][T23458] ip6_vti0 speed is unknown, defaulting to 1000 [ 715.282092][T23474] C: renamed from lo [ 715.310990][T23474] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 715.964332][T23499] syzkaller0: entered promiscuous mode [ 715.972223][T23499] syzkaller0: entered allmulticast mode [ 715.990192][T23498] tipc: Enabled bearer , priority 0 [ 716.055443][T23498] tipc: Resetting bearer [ 716.109991][T23498] tipc: Disabling bearer [ 716.184279][T20803] Bluetooth: hci0: command 0x0401 tx timeout [ 716.306074][T23506] __nla_validate_parse: 6 callbacks suppressed [ 716.311306][T23506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4339'. [ 716.946950][T23516] tipc: Enabled bearer , priority 0 [ 717.031158][T23516] syzkaller0: entered promiscuous mode [ 717.037350][T23516] syzkaller0: entered allmulticast mode [ 717.043691][T23516] tipc: Resetting bearer [ 717.127085][T23513] tipc: Resetting bearer [ 719.034854][T23513] tipc: Disabling bearer [ 719.043253][T23517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4342'. [ 719.053093][T23524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4343'. [ 719.091948][T23520] wg1 speed is unknown, defaulting to 1000 [ 719.104028][T23525] wg1 speed is unknown, defaulting to 1000 [ 719.105865][T23520] xfrm0 speed is unknown, defaulting to 1000 [ 719.202129][T23531] xt_addrtype: ipv6 does not support BROADCAST matching [ 719.210808][T23531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4344'. [ 719.221509][T23532] xt_addrtype: ipv6 does not support BROADCAST matching [ 719.312606][T23536] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 719.345238][T23538] netlink: 'syz.0.4346': attribute type 12 has an invalid length. [ 719.388602][T23520] ip6_vti0 speed is unknown, defaulting to 1000 [ 719.395166][T23525] xfrm0 speed is unknown, defaulting to 1000 [ 719.502733][T23543] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 719.771121][T23557] netlink: 'syz.0.4352': attribute type 4 has an invalid length. [ 719.804472][T23525] ip6_vti0 speed is unknown, defaulting to 1000 [ 720.207618][T23575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4357'. [ 720.452047][T23579] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 720.728095][T23589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4363'. [ 721.081404][T23594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4363'. [ 721.095223][T23601] netlink: 'syz.0.4365': attribute type 1 has an invalid length. [ 721.269677][T23601] 8021q: adding VLAN 0 to HW filter on device bond7 [ 721.508045][T23603] bond7: (slave gretap2): making interface the new active one [ 721.527271][T23603] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 721.677943][T23604] wg1 speed is unknown, defaulting to 1000 [ 721.708404][T23604] xfrm0 speed is unknown, defaulting to 1000 [ 722.188105][T23636] team_slave_0: left promiscuous mode [ 722.193967][T23636] team_slave_1: left promiscuous mode [ 722.289982][T23636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.308330][T23636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 722.339381][T23636] veth1_vlan: left allmulticast mode [ 722.345415][T23636] macvlan0: left allmulticast mode [ 722.388441][T23636] batadv0: left allmulticast mode [ 722.393807][T23636] macvtap1: left promiscuous mode [ 722.400555][T23636] macvtap1: left allmulticast mode [ 722.430435][T23637] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4371'. [ 722.440046][T23604] ip6_vti0 speed is unknown, defaulting to 1000 [ 722.441311][ T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.459131][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.486307][ T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.506595][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.531449][ T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.552086][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.573953][ T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.624890][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.726065][T23655] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4376'. [ 722.858569][T23661] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4378'. [ 722.929221][T23665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4379'. [ 723.022648][T23664] wg1 speed is unknown, defaulting to 1000 [ 723.055397][T23666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 723.090073][T23664] xfrm0 speed is unknown, defaulting to 1000 [ 723.242129][T23676] IPVS: sh: FWM 3 0x00000003 - no destination available [ 723.272881][T23680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4385'. [ 723.377026][T23684] netlink: 'syz.1.4386': attribute type 3 has an invalid length. [ 723.398567][T23680] bond4: entered promiscuous mode [ 723.411873][T23680] 8021q: adding VLAN 0 to HW filter on device bond4 [ 723.447537][T23689] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4386'. [ 723.480753][T23682] 8021q: adding VLAN 0 to HW filter on device bond5 [ 723.491146][T23682] bond5: entered promiscuous mode [ 723.499206][T23682] bond4: (slave bond5): Enslaving as an active interface with an up link [ 723.515827][T23690] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4387'. [ 723.526516][T23664] ip6_vti0 speed is unknown, defaulting to 1000 [ 723.730991][T23707] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4390'. [ 723.800851][ T9261] hid-generic 0005:0006:5508.0003: hidraw0: BLUETOOTH HID vc3.34 Device [syz0] on aa:aa:aa:aa:aa:aa [ 724.103304][T23728] wg1 speed is unknown, defaulting to 1000 [ 724.143863][T23735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4395'. [ 724.154112][T23732] syzkaller1: entered promiscuous mode [ 724.183393][T23732] syzkaller1: entered allmulticast mode [ 724.210032][T23728] xfrm0 speed is unknown, defaulting to 1000 [ 724.224942][T23735] openvswitch: netlink: Message has 4 unknown bytes. [ 724.231689][T23735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 724.611286][T23747] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4399'. [ 724.789188][T23728] ip6_vti0 speed is unknown, defaulting to 1000 [ 724.895198][T23749] wg1 speed is unknown, defaulting to 1000 [ 724.929732][T23749] xfrm0 speed is unknown, defaulting to 1000 [ 725.246109][T23749] ip6_vti0 speed is unknown, defaulting to 1000 [ 725.423710][T23757] netlink: 'syz.0.4403': attribute type 1 has an invalid length. [ 725.629716][T23773] netlink: 'syz.3.4407': attribute type 13 has an invalid length. [ 725.662683][T23773] macvtap0: refused to change device tx_queue_len [ 726.911503][T23797] wg1 speed is unknown, defaulting to 1000 [ 726.979153][T23797] xfrm0 speed is unknown, defaulting to 1000 [ 727.288577][T23819] Bluetooth: MGMT ver 1.23 [ 727.307710][T23819] Bluetooth: hci1: too big key_count value 29096 [ 727.504305][T23797] ip6_vti0 speed is unknown, defaulting to 1000 [ 727.534548][T23829] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:20003 [ 727.923241][T23848] macvlan2: entered promiscuous mode [ 727.932703][T23852] netlink: 'syz.3.4429': attribute type 1 has an invalid length. [ 727.985845][T23852] 8021q: adding VLAN 0 to HW filter on device bond2 [ 728.040757][T23856] bond2: (slave geneve2): making interface the new active one [ 728.056821][T23856] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 728.065986][ T1118] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 728.078147][ T1118] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 728.158208][ T1118] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 728.206283][ T1118] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 728.396224][T23864] syzkaller0: entered promiscuous mode [ 728.415661][T23864] syzkaller0: entered allmulticast mode [ 728.691523][T23874] tipc: New replicast peer: 255.255.255.255 [ 728.706263][T23874] tipc: Enabled bearer , priority 10 [ 728.732065][T23877] netlink: 'syz.2.4436': attribute type 11 has an invalid length. [ 728.743169][T23880] __nla_validate_parse: 9 callbacks suppressed [ 728.743188][T23880] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4438'. [ 728.768397][T23877] netlink: 'syz.2.4436': attribute type 11 has an invalid length. [ 728.776678][T23877] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4436'. [ 728.876510][T23881] wg1 speed is unknown, defaulting to 1000 [ 728.903235][T23874] bridge3: entered promiscuous mode [ 728.912351][T23874] bridge3: entered allmulticast mode [ 728.918159][T23881] xfrm0 speed is unknown, defaulting to 1000 [ 728.948758][T23884] : renamed from bond_slave_0 [ 729.223543][T23893] tipc: Enabled bearer , priority 0 [ 729.257913][T23893] tipc: Resetting bearer [ 729.295362][T23892] tipc: Disabling bearer [ 729.311278][T23881] ip6_vti0 speed is unknown, defaulting to 1000 [ 729.657519][T23909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4447'. [ 729.824820][T16972] tipc: Node number set to 417158232 [ 730.164929][T23929] wg1 speed is unknown, defaulting to 1000 [ 730.293141][T23929] xfrm0 speed is unknown, defaulting to 1000 [ 730.440417][T23940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4457'. [ 730.865888][T23929] ip6_vti0 speed is unknown, defaulting to 1000 [ 731.093929][T23963] netlink: 'syz.2.4461': attribute type 2 has an invalid length. [ 731.099728][T23964] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4462'. [ 731.112218][T23963] netlink: 'syz.2.4461': attribute type 1 has an invalid length. [ 731.122399][T23964] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4462'. [ 731.195312][T23961] netlink: 'syz.1.4462': attribute type 32 has an invalid length. [ 731.281936][T23964] wg1 speed is unknown, defaulting to 1000 [ 731.334451][T23964] xfrm0 speed is unknown, defaulting to 1000 [ 731.918900][T23964] ip6_vti0 speed is unknown, defaulting to 1000 [ 732.070846][T23989] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 732.125103][T23992] netlink: 'syz.2.4468': attribute type 9 has an invalid length. [ 732.132869][T23992] netlink: 'syz.2.4468': attribute type 6 has an invalid length. [ 732.334767][T23992] syzkaller1: entered promiscuous mode [ 732.340256][T23992] syzkaller1: entered allmulticast mode [ 732.712526][T24005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4470'. [ 732.743327][T24005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4470'. [ 732.760656][T24005] geneve2: entered promiscuous mode [ 732.768371][T23612] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 40083 - 0 [ 732.791535][T23612] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 40083 - 0 [ 732.818188][T24011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4474'. [ 732.828848][T23612] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 40083 - 0 [ 732.845157][T23612] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 40083 - 0 [ 733.595902][T24020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4477'. [ 733.620145][T24020] openvswitch: netlink: Flow actions attr not present in new flow. [ 734.097891][T16972] hid-generic 0005:0006:5508.0004: hidraw0: BLUETOOTH HID vc3.34 Device [syz0] on aa:aa:aa:aa:aa:aa [ 734.122811][T24038] netlink: 'syz.4.4482': attribute type 10 has an invalid length. [ 734.147499][T24045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4484'. [ 734.362387][T24058] bridge_slave_1: left allmulticast mode [ 734.371840][T24058] bridge_slave_1: left promiscuous mode [ 734.380666][T24058] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.418715][T24058] bridge_slave_0: left allmulticast mode [ 734.427022][T24058] bridge_slave_0: left promiscuous mode [ 734.432845][T24058] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.542570][T24076] x_tables: duplicate underflow at hook 2 [ 734.818948][T24090] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 734.855874][T24034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 734.869316][T24089] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 734.988933][T18415] Bluetooth: hci3: command 0x0405 tx timeout [ 735.002703][T24098] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4497'. [ 735.030022][T24101] netlink: 'syz.2.4496': attribute type 10 has an invalid length. [ 735.052087][T24092] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 735.409438][T24109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4499'. [ 735.481724][T24124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4499'. [ 735.599610][T24130] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 735.675855][T24109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4499'. [ 735.741165][T24128] xt_CT: You must specify a L4 protocol and not use inversions on it [ 735.758569][T24126] wg1 speed is unknown, defaulting to 1000 [ 735.778659][T24126] xfrm0 speed is unknown, defaulting to 1000 [ 736.185231][T24126] ip6_vti0 speed is unknown, defaulting to 1000 [ 736.518020][T24141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4507'. [ 736.726742][T24150] netlink: 'syz.4.4510': attribute type 1 has an invalid length. [ 736.734686][T24150] netlink: 'syz.4.4510': attribute type 1 has an invalid length. [ 737.018622][T24152] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4511'. [ 737.097078][T24168] netlink: 'syz.0.4513': attribute type 3 has an invalid length. [ 737.111227][T24162] wg1 speed is unknown, defaulting to 1000 [ 738.339975][T24185] sctp: [Deprecated]: syz.2.4515 (pid 24185) Use of int in max_burst socket option. [ 738.339975][T24185] Use struct sctp_assoc_value instead [ 741.521317][T24162] xfrm0 speed is unknown, defaulting to 1000 [ 743.307025][T24162] ip6_vti0 speed is unknown, defaulting to 1000 [ 743.723228][T24213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 743.735694][T24202] syz.4.4520 uses old SIOCAX25GETINFO [ 744.234930][T24231] tipc: Enabling of bearer rejected, failed to enable media [ 744.285004][T24231] tipc: New replicast peer: 255.255.255.255 [ 744.292117][T24231] tipc: Enabled bearer , priority 10 [ 744.341791][T24237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4529'. [ 744.618450][T24251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4533'. [ 745.237915][T24256] netlink: 'syz.2.4534': attribute type 1 has an invalid length. [ 745.246236][T24256] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4534'. [ 745.285563][T16972] tipc: Node number set to 328469645 [ 745.296374][T24256] syzkaller0: entered promiscuous mode [ 745.301899][T24256] syzkaller0: entered allmulticast mode [ 745.458741][T24261] syzkaller1: entered promiscuous mode [ 745.464346][T24261] syzkaller1: entered allmulticast mode [ 745.651773][T24272] netlink: 'syz.4.4538': attribute type 1 has an invalid length. [ 745.685709][T24270] netlink: 'syz.4.4538': attribute type 1 has an invalid length. [ 745.741569][T24279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4539'. [ 745.760564][T24279] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4539'. [ 745.770834][T24279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4539'. [ 745.780462][T24279] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4539'. [ 745.790073][T24279] netlink: 'syz.2.4539': attribute type 6 has an invalid length. [ 745.867531][T24270] 8021q: adding VLAN 0 to HW filter on device bond8 [ 745.878670][T24270] bond7: (slave bond8): making interface the new active one [ 745.886929][T24270] bond7: (slave bond8): Enslaving as an active interface with an up link [ 745.904290][T24292] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4543'. [ 745.915098][T24292] --map-set only usable from mangle table [ 745.915923][T24272] bond7: (slave gretap2): Enslaving as a backup interface with an up link [ 745.972938][T24292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4543'. [ 746.080185][T24300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4545'. [ 746.223926][T24310] tipc: Enabling of bearer rejected, failed to enable media [ 746.286290][T24307] wg1 speed is unknown, defaulting to 1000 [ 746.353297][T24307] xfrm0 speed is unknown, defaulting to 1000 [ 746.547713][T24323] syzkaller1: entered promiscuous mode [ 746.572492][T24323] syzkaller1: entered allmulticast mode [ 747.093449][T24343] wg1 speed is unknown, defaulting to 1000 [ 747.120667][T24343] xfrm0 speed is unknown, defaulting to 1000 [ 747.130483][T24307] ip6_vti0 speed is unknown, defaulting to 1000 [ 747.232593][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.241200][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 747.248412][T24353] openvswitch: netlink: Message has -2 unknown bytes. [ 747.270392][T24355] netlink: 'syz.1.4559': attribute type 1 has an invalid length. [ 747.312157][T24355] ip6gre2: entered promiscuous mode [ 747.593045][T24343] ip6_vti0 speed is unknown, defaulting to 1000 [ 748.425122][T24400] xt_hashlimit: max too large, truncated to 1048576 [ 749.371036][T24447] __nla_validate_parse: 9 callbacks suppressed [ 749.371056][T24447] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4580'. [ 749.522289][T24437] warn_alloc: 1 callbacks suppressed [ 749.522307][T24437] syz.2.4583: vmalloc error: size 67108864, failed to allocated page array size 131072, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 749.580344][T24437] CPU: 0 UID: 0 PID: 24437 Comm: syz.2.4583 Not tainted syzkaller #0 PREEMPT(full) [ 749.580371][T24437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 749.580382][T24437] Call Trace: [ 749.580389][T24437] [ 749.580397][T24437] dump_stack_lvl+0x189/0x250 [ 749.580426][T24437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 749.580444][T24437] ? __pfx__printk+0x10/0x10 [ 749.580465][T24437] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 749.580490][T24437] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 749.580516][T24437] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 749.580543][T24437] warn_alloc+0x214/0x310 [ 749.580571][T24437] ? __pfx_warn_alloc+0x10/0x10 [ 749.580600][T24437] ? __get_vm_area_node+0x28f/0x300 [ 749.580622][T24437] ? translate_table+0x198/0x2000 [ 749.580646][T24437] __vmalloc_node_range_noprof+0x690/0x12d0 [ 749.580668][T24437] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 749.580715][T24437] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 749.580737][T24437] ? translate_table+0x198/0x2000 [ 749.580759][T24437] ? rcu_is_watching+0x15/0xb0 [ 749.580786][T24437] ? translate_table+0x198/0x2000 [ 749.580806][T24437] __kvmalloc_node_noprof+0x670/0x910 [ 749.580828][T24437] ? translate_table+0x198/0x2000 [ 749.580849][T24437] ? do_ipt_set_ctl+0x881/0xcd0 [ 749.580867][T24437] ? nf_setsockopt+0x26f/0x290 [ 749.580886][T24437] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 749.580907][T24437] ? do_syscall_64+0xfa/0xf80 [ 749.580934][T24437] translate_table+0x198/0x2000 [ 749.580977][T24437] ? __pfx_translate_table+0x10/0x10 [ 749.580999][T24437] ? __might_fault+0xb0/0x130 [ 749.581038][T24437] ? _copy_from_user+0x94/0xb0 [ 749.581066][T24437] do_ipt_set_ctl+0x967/0xcd0 [ 749.581090][T24437] ? rcu_is_watching+0x15/0xb0 [ 749.581109][T24437] ? trace_contention_end+0x39/0x100 [ 749.581129][T24437] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 749.581172][T24437] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 749.581203][T24437] ? __pfx_aa_sk_perm+0x10/0x10 [ 749.581231][T24437] nf_setsockopt+0x26f/0x290 [ 749.581253][T24437] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 749.581275][T24437] do_sock_setsockopt+0x17c/0x1b0 [ 749.581303][T24437] __x64_sys_setsockopt+0x13f/0x1b0 [ 749.581331][T24437] do_syscall_64+0xfa/0xf80 [ 749.581352][T24437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.581369][T24437] ? clear_bhb_loop+0x60/0xb0 [ 749.581389][T24437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.581404][T24437] RIP: 0033:0x7f50dd18f749 [ 749.581420][T24437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 749.581434][T24437] RSP: 002b:00007f50de047038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 749.581451][T24437] RAX: ffffffffffffffda RBX: 00007f50dd3e5fa0 RCX: 00007f50dd18f749 [ 749.581463][T24437] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 749.581473][T24437] RBP: 00007f50dd213f91 R08: 0000000000000428 R09: 0000000000000000 [ 749.581484][T24437] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 749.581494][T24437] R13: 00007f50dd3e6038 R14: 00007f50dd3e5fa0 R15: 00007fffdb0b3a88 [ 749.581525][T24437] [ 749.581596][T24437] Mem-Info: [ 749.924881][T24437] active_anon:9994 inactive_anon:0 isolated_anon:0 [ 749.924881][T24437] active_file:3337 inactive_file:40100 isolated_file:0 [ 749.924881][T24437] unevictable:772 dirty:34 writeback:0 [ 749.924881][T24437] slab_reclaimable:13913 slab_unreclaimable:230531 [ 749.924881][T24437] mapped:30141 shmem:1409 pagetables:1246 [ 749.924881][T24437] sec_pagetables:0 bounce:0 [ 749.924881][T24437] kernel_misc_reclaimable:0 [ 749.924881][T24437] free:1175694 free_pcp:16290 free_cma:0 [ 750.074401][T24437] Node 0 active_anon:39576kB inactive_anon:0kB active_file:13348kB inactive_file:160200kB unevictable:1552kB isolated(anon):0kB isolated(file):0kB mapped:116564kB dirty:136kB writeback:0kB shmem:4100kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16520kB pagetables:4544kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 750.108290][T24437] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 750.149143][T24437] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 750.189840][T24437] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 750.196924][T24437] Node 0 DMA32 free:797800kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39476kB inactive_anon:0kB active_file:13348kB inactive_file:160200kB unevictable:1552kB writepending:136kB zspages:0kB present:3129332kB managed:2564516kB mlocked:16kB bounce:0kB free_pcp:48652kB local_pcp:20508kB free_cma:0kB [ 750.237052][T24437] lowmem_reserve[]: 0 0 0 0 0 [ 750.241959][T24437] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 750.284639][T24437] lowmem_reserve[]: 0 0 0 0 0 [ 750.289494][T24437] Node 1 Normal free:3891344kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16608kB local_pcp:7072kB free_cma:0kB [ 750.322734][T24437] lowmem_reserve[]: 0 0 0 0 0 [ 750.333369][T24437] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 750.364422][T24463] netlink: 'syz.0.4587': attribute type 12 has an invalid length. [ 750.439414][T24437] Node 0 DMA32: 486*4kB (UE) 84*8kB (UE) 506*16kB (UME) 119*32kB (UME) 306*64kB (UME) 150*128kB (UME) 207*256kB (UME) 315*512kB (UM) 163*1024kB (UME) 5*2048kB (UME) 85*4096kB (UM) = 792888kB [ 750.459274][T24437] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 750.492515][T24437] Node 1 Normal: 194*4kB (UE) 45*8kB (UME) 40*16kB (UME) 133*32kB (UME) 30*64kB (UME) 7*128kB (UME) 4*256kB (UM) 5*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 946*4096kB (M) = 3891344kB [ 750.555148][T24437] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 750.570392][T24437] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 750.580484][T24437] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 750.634513][T24437] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 750.654646][T24437] 44843 total pagecache pages [ 750.659371][T24437] 0 pages in swap cache [ 750.663528][T24437] Free swap = 124996kB [ 750.673304][T24437] Total swap = 124996kB [ 750.710360][T24437] 2097051 pages RAM [ 750.720482][T24437] 0 pages HighMem/MovableOnly [ 750.738807][T24437] 424280 pages reserved [ 750.753543][T24437] 0 pages cma reserved [ 750.896394][T24483] wg1 speed is unknown, defaulting to 1000 [ 750.940836][T24483] xfrm0 speed is unknown, defaulting to 1000 [ 751.101523][T24498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4595'. [ 751.143348][T24500] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 751.234081][T24504] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4597'. [ 751.571517][T24483] ip6_vti0 speed is unknown, defaulting to 1000 [ 751.857607][T24535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4605'. [ 751.881435][T24534] bond3: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 751.938228][T24534] bond3 (unregistering): Released all slaves [ 751.992526][T24533] wg1 speed is unknown, defaulting to 1000 [ 752.006571][T24533] xfrm0 speed is unknown, defaulting to 1000 [ 752.148069][T24550] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4608'. [ 752.167429][T24547] wg1 speed is unknown, defaulting to 1000 [ 752.357515][T24557] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4610'. [ 752.367079][T24557] netlink: 35 bytes leftover after parsing attributes in process `syz.1.4610'. [ 752.394964][T24557] netlink: 'syz.1.4610': attribute type 6 has an invalid length. [ 752.404438][T24557] netlink: 'syz.1.4610': attribute type 5 has an invalid length. [ 752.412337][T24557] netlink: 35 bytes leftover after parsing attributes in process `syz.1.4610'. [ 752.418764][T24533] ip6_vti0 speed is unknown, defaulting to 1000 [ 752.427970][T24547] xfrm0 speed is unknown, defaulting to 1000 [ 752.475931][T24557] netlink: 'syz.1.4610': attribute type 4 has an invalid length. [ 752.518934][T24557] netlink: 'syz.1.4610': attribute type 4 has an invalid length. [ 752.904404][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5660 ms [ 752.912494][ C0] lec:lec_tx_timeout: lec0 [ 753.049752][T24547] ip6_vti0 speed is unknown, defaulting to 1000 [ 753.338629][T24567] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 753.431396][T24569] bond3: option arp_validate: invalid value (18446744073491447809) [ 753.441124][T24569] bond3 (unregistering): Released all slaves [ 753.782715][T24582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4615'. [ 754.571881][T24590] 8021q: VLANs not supported on lo [ 755.208237][T24609] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4624'. [ 755.552095][T24619] syzkaller1: entered promiscuous mode [ 755.559291][T24619] syzkaller1: entered allmulticast mode [ 755.815841][T24637] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4630'. [ 756.127767][T24656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4635'. [ 756.416603][T24671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4641'. [ 756.442171][T24674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4642'. [ 756.454387][T24671] 8021q: adding VLAN 0 to HW filter on device bond9 [ 756.512642][T24675] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4642'. [ 756.812033][T24689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4647'. [ 756.858527][T24689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 756.893350][T24696] netlink: 87 bytes leftover after parsing attributes in process `syz.0.4647'. [ 757.089377][T24703] pim6reg: entered allmulticast mode [ 757.190018][T24701] pim6reg: left allmulticast mode [ 757.370862][T24716] wg1 speed is unknown, defaulting to 1000 [ 757.431786][T24716] xfrm0 speed is unknown, defaulting to 1000 [ 757.459870][T24720] ieee802154 phy1 wpan1: encryption failed: -90 [ 757.736649][T24727] wg1 speed is unknown, defaulting to 1000 [ 757.877586][T24740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4657'. [ 757.969532][T24742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4657'. [ 758.263527][T24716] ip6_vti0 speed is unknown, defaulting to 1000 [ 758.268011][T24727] xfrm0 speed is unknown, defaulting to 1000 [ 758.847842][T24727] ip6_vti0 speed is unknown, defaulting to 1000 [ 759.586300][T24754] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 759.793043][T24799] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 760.099381][T24814] netlink: 'syz.1.4679': attribute type 11 has an invalid length. [ 760.909557][T24834] wg1 speed is unknown, defaulting to 1000 [ 760.977077][T24840] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 760.991954][T24834] xfrm0 speed is unknown, defaulting to 1000 [ 761.251150][T24842] netlink: 'syz.1.4686': attribute type 16 has an invalid length. [ 761.259413][T24842] __nla_validate_parse: 11 callbacks suppressed [ 761.259427][T24842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4686'. [ 761.566793][T24857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4691'. [ 761.585358][T24857] netlink: 'syz.1.4691': attribute type 5 has an invalid length. [ 761.597455][T24857] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4691'. [ 761.647577][T24857] geneve2: entered promiscuous mode [ 761.655209][T24834] ip6_vti0 speed is unknown, defaulting to 1000 [ 761.664369][T24857] geneve2: entered allmulticast mode [ 761.675908][T23610] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 761.699630][T23610] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 761.716826][T23610] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 761.787887][T24860] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 761.824480][T24860] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.867730][T24860] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 40083 - 0 [ 761.892563][T24864] netlink: 'syz.0.4693': attribute type 10 has an invalid length. [ 761.907504][T24864] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4693'. [ 761.941080][T24856] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 762.048026][T24860] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.061441][T24860] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.071983][T24860] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 40083 - 0 [ 762.195978][T24856] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 762.263028][T24860] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.314289][T24860] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.324075][T24860] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 40083 - 0 [ 762.402787][T24856] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 762.458256][T24885] dummy0: entered promiscuous mode [ 762.463872][T24885] dummy0: left promiscuous mode [ 762.518457][T24860] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.528669][T24860] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.557488][T24860] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 40083 - 0 [ 762.677051][ T10] xfrm0 speed is unknown, defaulting to 1000 [ 762.691784][T24892] siw: device registration error -23 [ 762.832963][ T1142] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 762.852120][ T1142] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 40083 - 0 [ 762.882935][ T1142] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 763.019014][ T1118] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.034786][ T1118] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 40083 - 0 [ 763.064906][ T1118] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 763.143612][ T1118] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.168365][ T1118] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 40083 - 0 [ 763.192675][ T1118] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 763.263244][T23609] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.279133][T23609] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 40083 - 0 [ 763.287745][T23609] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 763.375871][T24916] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4708'. [ 763.494775][T24924] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4711'. [ 763.542063][T24926] tap0: tun_chr_ioctl cmd 1074025692 [ 763.720220][T24924] dummy0: entered promiscuous mode [ 763.731446][T24924] dummy0: left promiscuous mode [ 763.767289][T24939] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4716'. [ 763.844444][T24942] openvswitch: netlink: Message has 8 unknown bytes. [ 763.926932][T24947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4720'. [ 763.966088][T24950] xt_CT: You must specify a L4 protocol and not use inversions on it [ 764.079818][T24955] gretap1: entered promiscuous mode [ 764.601964][T24978] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4730'. [ 764.813358][T24990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4731'. [ 764.973751][T24988] veth0: entered promiscuous mode [ 765.086270][T24991] veth0 (unregistering): left promiscuous mode [ 765.508992][T23609] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 765.608330][T11909] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 765.620096][T25030] wg1 speed is unknown, defaulting to 1000 [ 765.627228][T11909] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 765.655517][T11909] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 765.669324][T25030] xfrm0 speed is unknown, defaulting to 1000 [ 765.893225][T25030] ip6_vti0 speed is unknown, defaulting to 1000 [ 766.101273][T25051] netlink: 'syz.3.4749': attribute type 1 has an invalid length. [ 766.191940][T25052] veth11: entered promiscuous mode [ 766.248257][T25057] veth13: entered promiscuous mode [ 766.253827][T25051] erspan0: entered allmulticast mode [ 766.326998][T25062] __nla_validate_parse: 6 callbacks suppressed [ 766.327017][T25062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4751'. [ 766.365734][T25062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4751'. [ 766.596777][T25069] wg1 speed is unknown, defaulting to 1000 [ 766.618301][T25069] xfrm0 speed is unknown, defaulting to 1000 [ 766.643047][T25068] wg1 speed is unknown, defaulting to 1000 [ 766.661373][T25077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4755'. [ 766.671988][T25077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4755'. [ 767.030283][T25085] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.043051][T25085] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 767.050431][T25090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4758'. [ 767.066941][T25068] xfrm0 speed is unknown, defaulting to 1000 [ 767.073152][T25069] ip6_vti0 speed is unknown, defaulting to 1000 [ 767.083061][T25082] syz_tun: entered promiscuous mode [ 767.091340][T25082] macvtap1: entered promiscuous mode [ 767.130864][T25082] syz_tun: left promiscuous mode [ 767.218986][T25090] macsec1: entered promiscuous mode [ 767.230077][T25090] gretap0: entered promiscuous mode [ 767.243017][T25090] macsec1: entered allmulticast mode [ 767.248974][T25090] gretap0: entered allmulticast mode [ 767.263944][T25090] gretap0: left allmulticast mode [ 767.277019][T25090] gretap0: left promiscuous mode [ 767.359975][T25085] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.371236][T25085] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 767.491154][T25085] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.515055][T25085] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 767.564932][T25068] ip6_vti0 speed is unknown, defaulting to 1000 [ 767.637108][T25085] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.666563][T25085] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 767.791051][T25096] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 767.891079][T11907] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 767.903247][T11907] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 767.922233][T11907] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 767.941908][T11907] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 767.994938][T11907] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 768.013462][T11907] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 768.058203][T11907] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 768.072491][T11907] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 768.112667][T25099] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4760'. [ 768.313487][T25106] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 768.330703][T25106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 768.699538][T25120] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4767'. [ 768.764048][T25121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4767'. [ 768.939315][T25116] nftables ruleset with unbound chain [ 769.127563][T25136] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4770'. [ 769.622722][T25149] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 770.032596][T25153] tipc: Enabled bearer , priority 0 [ 770.059347][T25153] syzkaller0: entered promiscuous mode [ 770.078214][T25153] syzkaller0: entered allmulticast mode [ 770.123955][T25153] tipc: Resetting bearer [ 770.145098][T25152] tipc: Resetting bearer [ 770.196998][T25152] tipc: Disabling bearer [ 770.823026][T25175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4783'. [ 770.910456][T25175] team0: entered promiscuous mode [ 770.924576][T25175] team_slave_0: entered promiscuous mode [ 770.940533][T25175] team_slave_1: entered promiscuous mode [ 770.953154][T25175] team0: left promiscuous mode [ 770.972770][T25175] team_slave_0: left promiscuous mode [ 770.978928][T25175] team_slave_1: left promiscuous mode [ 771.327447][T25198] netlink: 'syz.2.4790': attribute type 1 has an invalid length. [ 771.335908][T25197] netlink: 'syz.2.4790': attribute type 1 has an invalid length. [ 771.453928][T25202] bond4: (slave geneve3): making interface the new active one [ 771.463636][T25197] netlink: 'syz.2.4790': attribute type 5 has an invalid length. [ 771.475494][T25197] __nla_validate_parse: 1 callbacks suppressed [ 771.475512][T25197] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4790'. [ 771.532801][T25202] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 771.574530][ T1118] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 771.589118][ T1118] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 771.609153][ T1118] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 771.641118][ T1118] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 771.761739][T25219] netlink: 'syz.2.4797': attribute type 10 has an invalid length. [ 771.774105][T25219] batadv0: entered allmulticast mode [ 771.834049][T25223] netlink: 'syz.2.4797': attribute type 10 has an invalid length. [ 771.858673][T25219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 771.861399][T25223] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4797'. [ 771.941167][T25219] batadv0: entered promiscuous mode [ 772.028257][T25219] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 772.080873][T25223] bond0: (slave batadv0): Releasing backup interface [ 772.137380][T25223] bridge0: port 1(batadv0) entered blocking state [ 772.174881][T25223] bridge0: port 1(batadv0) entered disabled state [ 772.270284][T25229] macsec1: entered promiscuous mode [ 772.298744][T25229] syzkaller0: entered promiscuous mode [ 772.336890][T25229] syzkaller0: left promiscuous mode [ 772.465109][T23610] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 772.474869][T23610] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 772.642123][T25230] wg1 speed is unknown, defaulting to 1000 [ 772.687843][T25230] xfrm0 speed is unknown, defaulting to 1000 [ 772.736542][T25252] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4806'. [ 772.843374][T25255] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4804'. [ 772.891097][T25258] wg1 speed is unknown, defaulting to 1000 [ 773.043032][T23609] syzkaller0: tun_net_xmit 76 [ 773.048631][T23609] syzkaller0: tun_net_xmit 48 [ 773.058841][T25255] syzkaller0: tun_net_xmit 76 [ 773.063941][T25255] tipc: Enabled bearer , priority 0 [ 773.071635][ T5917] syzkaller0: tun_net_xmit 76 [ 773.194591][ C1] syzkaller0: tun_net_xmit 76 [ 773.249840][T25258] xfrm0 speed is unknown, defaulting to 1000 [ 773.250053][T25269] tipc: Enabled bearer , priority 0 [ 773.256338][ T5947] syzkaller0: tun_net_xmit 76 [ 773.271126][T25230] ip6_vti0 speed is unknown, defaulting to 1000 [ 773.278150][T25254] tipc: Resetting bearer [ 775.196574][T25254] tipc: Disabling bearer [ 775.205555][T25267] syzkaller0: entered promiscuous mode [ 775.211133][T25267] syzkaller0: entered allmulticast mode [ 775.234907][T25272] tipc: Resetting bearer [ 775.250963][T25258] ip6_vti0 speed is unknown, defaulting to 1000 [ 775.278748][T25266] tipc: Resetting bearer [ 775.375028][T25266] tipc: Disabling bearer [ 775.427491][ T5947] tipc: Node number set to 2220223684 [ 775.512677][T25278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.526471][T25278] 8021q: adding VLAN 0 to HW filter on device team0 [ 775.539563][T25278] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 775.623331][ T10] ip6_vti0 speed is unknown, defaulting to 1000 [ 775.667252][T25289] pim6reg: entered allmulticast mode [ 775.668499][ T10] syz2: Port: 1 Link ACTIVE [ 775.672862][T25289] pim6reg: left allmulticast mode [ 775.727214][ T9261] ip6_vti0 speed is unknown, defaulting to 1000 [ 776.082237][T25302] syzkaller1: entered promiscuous mode [ 776.088188][T25302] syzkaller1: entered allmulticast mode [ 776.560917][T25308] wg1 speed is unknown, defaulting to 1000 [ 776.657695][T25308] xfrm0 speed is unknown, defaulting to 1000 [ 776.821521][T25323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4822'. [ 777.065670][T25308] ip6_vti0 speed is unknown, defaulting to 1000 [ 777.186244][T25328] tls_set_device_offload: netdev not found [ 777.650610][T25348] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 777.662730][T25354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4829'. [ 777.696352][T25348] bond3 (unregistering): Released all slaves [ 777.714410][T25354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4829'. [ 779.114353][T25387] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4837'. [ 779.270868][T25394] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4840'. [ 779.294626][T25398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4838'. [ 779.395123][T25397] tipc: Enabled bearer , priority 0 [ 779.495987][T25403] xt_l2tp: v2 doesn't support IP mode [ 779.515668][T25396] tipc: Disabling bearer [ 779.592426][T25408] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4844'. [ 779.801291][T25403] syzkaller0: entered promiscuous mode [ 779.824703][T25403] syzkaller0: entered allmulticast mode [ 780.017881][T25422] pim6reg: entered allmulticast mode [ 780.051819][T25427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4850'. [ 780.062784][T25422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4848'. [ 780.250614][T25435] wg1 speed is unknown, defaulting to 1000 [ 780.270906][T25435] xfrm0 speed is unknown, defaulting to 1000 [ 780.397905][T25440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4853'. [ 782.562341][T25440] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 782.574764][T25440] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 782.585552][T25440] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 782.599709][T25435] ip6_vti0 speed is unknown, defaulting to 1000 [ 782.607675][T25447] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 782.638908][T25441] wg1 speed is unknown, defaulting to 1000 [ 782.725318][T25441] xfrm0 speed is unknown, defaulting to 1000 [ 782.752429][T25465] tipc: Enabling of bearer rejected, failed to enable media [ 782.809357][T25465] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 782.975562][T25475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4859'. [ 783.212501][T25493] netlink: 'syz.3.4862': attribute type 13 has an invalid length. [ 783.511845][T25506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4862'. [ 783.546545][T25441] ip6_vti0 speed is unknown, defaulting to 1000 [ 783.744023][T25511] Cannot find add_set index 2 as target [ 784.570866][T25533] wg1 speed is unknown, defaulting to 1000 [ 784.609661][T25533] xfrm0 speed is unknown, defaulting to 1000 [ 784.806592][T25538] netlink: 'syz.1.4875': attribute type 2 has an invalid length. [ 784.872155][T25538] @;: entered promiscuous mode [ 785.052660][T25533] ip6_vti0 speed is unknown, defaulting to 1000 [ 785.099599][T25542] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4877'. [ 785.139992][T25546] netlink: 476 bytes leftover after parsing attributes in process `syz.2.4878'. [ 785.175708][T25546] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4878'. [ 785.269678][T25552] netlink: 'syz.1.4879': attribute type 8 has an invalid length. [ 785.307262][T25553] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 785.318323][T25553] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 785.351815][T25549] wg1 speed is unknown, defaulting to 1000 [ 785.388401][T25552] wg1 speed is unknown, defaulting to 1000 [ 785.398564][T25553] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 785.427863][T25553] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 785.499430][T25549] xfrm0 speed is unknown, defaulting to 1000 [ 785.700753][T25553] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 785.715885][T25553] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 785.896982][T25553] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 785.909670][T25553] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 786.142006][T25570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4883'. [ 786.144643][T25569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4883'. [ 786.343804][T25549] ip6_vti0 speed is unknown, defaulting to 1000 [ 786.353575][T25552] xfrm0 speed is unknown, defaulting to 1000 [ 786.361695][T23612] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 786.394911][T23612] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 786.585996][T23612] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 786.595237][T23612] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 786.643912][T23606] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 786.663488][T23606] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 786.747324][T11905] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 786.756233][T11905] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 787.156900][T25587] tipc: Enabled bearer , priority 0 [ 787.165956][T25587] syzkaller0: entered promiscuous mode [ 787.171459][T25587] syzkaller0: entered allmulticast mode [ 787.256986][T25552] ip6_vti0 speed is unknown, defaulting to 1000 [ 787.268492][T25587] tipc: Resetting bearer [ 787.334696][T25595] : renamed from bond_slave_0 (while UP) [ 787.371094][T25586] tipc: Resetting bearer [ 787.472823][T25586] tipc: Disabling bearer [ 787.595893][T25596] wg1 speed is unknown, defaulting to 1000 [ 787.648024][T25596] xfrm0 speed is unknown, defaulting to 1000 [ 788.140579][T25610] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4892'. [ 788.176641][T25596] ip6_vti0 speed is unknown, defaulting to 1000 [ 788.339967][T25616] pim6reg: entered allmulticast mode [ 788.352158][T25616] pim6reg: left allmulticast mode [ 789.064798][T25620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4895'. [ 789.931437][T25643] team0: Caught tx_queue_len zero misconfig [ 789.956523][T25651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4904'. [ 789.986786][T25651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4904'. [ 790.410753][T25662] syzkaller0: entered promiscuous mode [ 790.416655][T25662] syzkaller0: entered allmulticast mode [ 790.461995][T25661] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4909'. [ 790.493355][T25661] tipc: Enabled bearer , priority 0 [ 790.501157][T25665] netlink: 'syz.2.4910': attribute type 3 has an invalid length. [ 790.519401][T25660] tipc: Resetting bearer [ 790.528136][T25665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4910'. [ 790.580288][T25660] tipc: Disabling bearer [ 790.623154][T25665] xt_CT: No such helper "snmp" [ 790.755483][T25643] xt_hashlimit: size too large, truncated to 1048576 [ 790.793553][T25643] xt_hashlimit: max too large, truncated to 1048576 [ 790.823083][T25671] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4912'. [ 790.873940][T25643] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 791.139947][T25677] netlink: 'syz.2.4913': attribute type 1 has an invalid length. [ 791.348282][T25677] 8021q: adding VLAN 0 to HW filter on device bond5 [ 791.400549][T25679] bond5: entered allmulticast mode [ 791.828481][T25693] netlink: 'syz.0.4917': attribute type 11 has an invalid length. [ 791.985700][T25705] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4921'. [ 792.006170][T25705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4921'. [ 792.170369][T25713] netlink: 'syz.0.4924': attribute type 1 has an invalid length. [ 792.236018][T25709] wg1 speed is unknown, defaulting to 1000 [ 792.259590][T25711] wg1 speed is unknown, defaulting to 1000 [ 792.275498][T25709] xfrm0 speed is unknown, defaulting to 1000 [ 792.360858][T25724] netlink: 'syz.4.4928': attribute type 1 has an invalid length. [ 792.369023][T25724] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4928'. [ 792.575253][T25736] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.588081][T25736] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 792.692149][T25739] gretap1: entered promiscuous mode [ 792.713036][T25711] xfrm0 speed is unknown, defaulting to 1000 [ 792.719476][T25709] ip6_vti0 speed is unknown, defaulting to 1000 [ 792.791974][T25736] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.823080][T25736] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 792.959590][T25736] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.004866][T25736] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 793.117853][T25736] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.154287][T25736] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 793.260211][T25772] netem: change failed [ 793.287030][T25772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4938'. [ 793.296724][T25772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4938'. [ 793.383866][T23612] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.400199][T23612] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20002 - 0 [ 793.471438][T23612] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.490118][T23612] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20002 - 0 [ 793.577004][ T1148] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.586872][ T1148] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20002 - 0 [ 793.626350][T25711] ip6_vti0 speed is unknown, defaulting to 1000 [ 793.653064][T23612] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.681934][T23612] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20002 - 0 [ 793.816097][T25778] syzkaller0: entered promiscuous mode [ 793.826161][T25778] syzkaller0: entered allmulticast mode [ 793.935364][T25781] bond9: entered allmulticast mode [ 793.967371][T25781] 8021q: adding VLAN 0 to HW filter on device bond9 [ 793.997741][T25778] tipc: Enabled bearer , priority 0 [ 794.048103][T25777] tipc: Resetting bearer [ 794.146032][T25777] tipc: Disabling bearer [ 794.419996][T25803] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4947'. [ 794.580868][T25814] xt_TPROXY: Can be used only with -p tcp or -p udp [ 794.690645][T25826] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 794.726525][T25826] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 794.897882][T25834] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 794.963621][T25826] siw: device registration error -23 [ 795.436977][T25858] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 795.465074][T25858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 795.531908][T25863] netlink: 'syz.4.4958': attribute type 1 has an invalid length. [ 795.541619][T25863] netlink: 63743 bytes leftover after parsing attributes in process `syz.4.4958'. [ 795.620316][T25869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4960'. [ 795.661023][T25870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4959'. [ 795.765986][T25877] sch_tbf: burst 274 is lower than device lo mtu (11337746) ! [ 795.843549][T25880] netlink: 'syz.0.4963': attribute type 10 has an invalid length. [ 795.990073][T25884] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4965'. [ 796.196410][T25895] wg1 speed is unknown, defaulting to 1000 [ 796.240320][T25895] xfrm0 speed is unknown, defaulting to 1000 [ 796.273232][T25904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 796.519487][T25916] wg1 speed is unknown, defaulting to 1000 [ 796.722471][T25926] bond10: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 796.747796][T25926] bond10 (unregistering): Released all slaves [ 796.919713][T25924] wg1 speed is unknown, defaulting to 1000 [ 797.053394][T25895] ip6_vti0 speed is unknown, defaulting to 1000 [ 797.053440][T25916] xfrm0 speed is unknown, defaulting to 1000 [ 797.468894][T25924] xfrm0 speed is unknown, defaulting to 1000 [ 797.476538][T25916] ip6_vti0 speed is unknown, defaulting to 1000 [ 798.020798][T25924] ip6_vti0 speed is unknown, defaulting to 1000 [ 798.298098][T25940] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4981'. [ 798.314949][T25940] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4981'. [ 798.456622][T25950] x9: renamed from bridge_slave_0 (while UP) [ 799.305778][T25967] delete_channel: no stack [ 799.933729][T25975] Cannot find add_set index 3 as target [ 800.048354][T25977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4987'. [ 800.057564][T25977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4987'. [ 800.194501][T25983] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4990'. [ 800.230645][T25983] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.256879][T25983] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 800.387855][T25983] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.399498][T25983] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 800.451102][T25987] wg1 speed is unknown, defaulting to 1000 [ 800.463380][T25987] xfrm0 speed is unknown, defaulting to 1000 [ 800.550193][T25983] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.564327][T25983] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 800.645581][T25983] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.679649][T25983] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 800.697424][T25987] ip6_vti0 speed is unknown, defaulting to 1000 [ 800.854783][T25993] wg1 speed is unknown, defaulting to 1000 [ 800.918777][ T1118] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.931842][ T1118] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20002 - 0 [ 800.961810][T25993] xfrm0 speed is unknown, defaulting to 1000 [ 800.973298][ T1118] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.991095][ T1118] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20002 - 0 [ 801.097423][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.106438][ T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20002 - 0 [ 801.166625][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.215110][ T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20002 - 0 [ 801.287401][T26004] lo: Caught tx_queue_len zero misconfig [ 801.325311][T23612] bond0: (slave 30): interface is now down [ 801.331894][T23612] bond0: (slave bond_slave_1): interface is now down [ 801.341874][T26007] bond0: option arp_validate: invalid value (55553) [ 801.358133][T23612] bond0: now running without any active interface! [ 801.396864][T26008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4996'. [ 801.604002][T25993] ip6_vti0 speed is unknown, defaulting to 1000 [ 801.775191][T26021] wg1 speed is unknown, defaulting to 1000 [ 801.802301][T26021] xfrm0 speed is unknown, defaulting to 1000 [ 801.967675][T26026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5002'. [ 802.004665][T26026] macvtap1: entered promiscuous mode [ 802.011137][T26026] mac80211_hwsim hwsim47 wlan1: entered promiscuous mode [ 802.088565][T26026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5002'. [ 802.574858][T26021] ip6_vti0 speed is unknown, defaulting to 1000 [ 802.581409][T26033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5005'. [ 802.837974][T26048] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5008'. [ 802.902934][T26048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 803.023724][T26054] tipc: Enabling of bearer rejected, already enabled [ 803.333096][T26061] bridge0: port 1(batadv1) entered blocking state [ 803.349216][T26061] bridge0: port 1(batadv1) entered disabled state [ 803.362174][T26061] batadv1: entered allmulticast mode [ 803.376664][T26061] batadv1: entered promiscuous mode [ 803.761232][T26080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5015'. [ 803.789812][ T1099] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 803.799677][ T1099] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 803.954865][T26080] lo speed is unknown, defaulting to 1000 [ 803.961096][T26080] lo speed is unknown, defaulting to 1000 [ 803.987289][T26080] lo speed is unknown, defaulting to 1000 [ 803.999177][T26084] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5017'. [ 804.046437][T26080] infiniband `yz2: RDMA CMA: cma_listen_on_dev, error -98 [ 804.143184][T26084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5017'. [ 804.178633][T26080] lo speed is unknown, defaulting to 1000 [ 804.220090][T26080] lo speed is unknown, defaulting to 1000 [ 804.267608][T26080] lo speed is unknown, defaulting to 1000 [ 804.419133][T26080] lo speed is unknown, defaulting to 1000 [ 804.441463][T26080] lo speed is unknown, defaulting to 1000 [ 804.677024][T26080] lo speed is unknown, defaulting to 1000 [ 804.702296][T26080] lo speed is unknown, defaulting to 1000 [ 804.726469][T26080] lo speed is unknown, defaulting to 1000 [ 804.769831][T26080] lo speed is unknown, defaulting to 1000 [ 804.799762][T26080] lo speed is unknown, defaulting to 1000 [ 804.822144][T26080] lo speed is unknown, defaulting to 1000 [ 805.004833][T26091] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5019'. [ 805.767781][T26111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5024'. [ 805.780903][T26111] openvswitch: netlink: Missing key (keys=40, expected=80) [ 805.940788][T26113] bridge9: entered allmulticast mode [ 806.507860][T26137] netlink: 'syz.4.5033': attribute type 2 has an invalid length. [ 806.531987][T26137] !: entered promiscuous mode [ 806.549416][T26137] netlink: 'syz.4.5033': attribute type 2 has an invalid length. [ 806.564791][T26137] !: left promiscuous mode [ 806.600820][T26142] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 806.772272][ T30] audit: type=1800 audit(1765149417.703:7): pid=26128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5029" name="memory.events" dev="tmpfs" ino=2075 res=0 errno=0 [ 807.149186][T26174] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5040'. [ 807.204780][T26174] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5040'. [ 807.307803][T26183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5045'. [ 807.405653][T26189] ipvlan2: entered promiscuous mode [ 807.427314][T26189] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 807.710658][T26209] netlink: 'syz.0.5051': attribute type 3 has an invalid length. [ 807.743651][T26209] siw: device registration error -23 [ 807.801747][T26209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.802636][T26213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5053'. [ 807.812854][T26209] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.828468][T26209] batman_adv: batadv0: Interface activated: dummy0 [ 807.836257][T26209] batadv0: mtu less than device minimum [ 807.842786][T26209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 807.854906][T26209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 807.866082][T26209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 807.877201][T26209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 807.888346][T26209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 807.899524][T26209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 807.910645][T26209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 807.921861][T26209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 807.933054][T26209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 807.944399][T26209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 807.955617][T26209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 807.966854][T26209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 807.978023][T26209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 807.989201][T26209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 808.000354][T26209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 808.011548][T26209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 808.076816][T26213] bond7: Invalid ad_actor_system MAC address. [ 808.083293][T26213] bond7: option ad_actor_system: invalid value (7) [ 808.094076][T26213] bond7 (unregistering): Released all slaves [ 808.444920][T26232] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5059'. [ 808.681274][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 808.705642][T26245] tipc: Enabling of bearer rejected, failed to enable media [ 808.747387][T26245] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 808.751429][T26249] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 808.764330][T26245] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 808.893656][T26245] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 808.916083][T26245] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 808.968563][T26263] syzkaller0: entered promiscuous mode [ 808.981807][T26263] syzkaller0: entered allmulticast mode [ 809.031463][T26245] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 809.043395][T26245] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 809.070815][T26263] tipc: Enabled bearer , priority 0 [ 809.131497][T26245] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 809.144475][T26245] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 809.261169][T26275] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 809.267720][T26261] tipc: Resetting bearer [ 809.286821][T26261] tipc: Disabling bearer [ 809.298511][T26275] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 809.311982][T26275] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 809.397685][ T1118] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 809.420152][ T1118] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 809.437079][ T1118] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 809.451902][ T1118] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 809.476619][T23615] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 809.498861][T23615] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 809.541470][T26284] __nla_validate_parse: 20 callbacks suppressed [ 809.541487][T26284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5076'. [ 809.561178][T26284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5076'. [ 809.580420][T23615] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 809.589822][T23615] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 809.652905][T26289] netlink: 'syz.1.5078': attribute type 1 has an invalid length. [ 809.796259][T26299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5080'. [ 809.808145][T26294] bond3: (slave bridge5): making interface the new active one [ 809.815051][T26299] netlink: 348 bytes leftover after parsing attributes in process `syz.0.5080'. [ 809.818000][T26294] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 809.825809][T26299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5080'. [ 809.844758][T26299] netlink: 348 bytes leftover after parsing attributes in process `syz.0.5080'. [ 809.854814][T26299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5080'. [ 809.877325][T26295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5079'. [ 810.056980][T26306] wg1 speed is unknown, defaulting to 1000 [ 810.073879][T26306] xfrm0 speed is unknown, defaulting to 1000 [ 810.216824][T26309] wg1 speed is unknown, defaulting to 1000 [ 810.405987][T26320] wg1 speed is unknown, defaulting to 1000 [ 810.416941][T26306] ip6_vti0 speed is unknown, defaulting to 1000 [ 810.435131][T26319] wg1 speed is unknown, defaulting to 1000 [ 810.445540][T26309] xfrm0 speed is unknown, defaulting to 1000 [ 810.520661][T26330] sctp: [Deprecated]: syz.3.5089 (pid 26330) Use of int in maxseg socket option. [ 810.520661][T26330] Use struct sctp_assoc_value instead [ 810.749362][T26320] xfrm0 speed is unknown, defaulting to 1000 [ 810.756381][T26309] ip6_vti0 speed is unknown, defaulting to 1000 [ 811.027860][T26319] xfrm0 speed is unknown, defaulting to 1000 [ 811.043455][T26306] lo speed is unknown, defaulting to 1000 [ 811.204017][T26340] wg1 speed is unknown, defaulting to 1000 [ 811.314545][T26320] ip6_vti0 speed is unknown, defaulting to 1000 [ 811.484447][T26340] xfrm0 speed is unknown, defaulting to 1000 [ 811.761014][T26340] ip6_vti0 speed is unknown, defaulting to 1000 [ 811.902601][T26319] ip6_vti0 speed is unknown, defaulting to 1000 [ 811.911358][T26309] lo speed is unknown, defaulting to 1000 [ 812.347871][T26354] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5094'. [ 812.479532][T26340] lo speed is unknown, defaulting to 1000 [ 813.590673][T26319] lo speed is unknown, defaulting to 1000 [ 813.606400][T26320] lo speed is unknown, defaulting to 1000 [ 813.761960][T26371] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5098'. [ 813.874174][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5190 ms [ 813.882214][ C0] lec:lec_tx_timeout: lec0 [ 814.611638][T26394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5104'. [ 814.688994][T26396] vlan2: entered promiscuous mode [ 814.715454][T26396] team0: entered promiscuous mode [ 814.720687][T26396] team_slave_0: entered promiscuous mode [ 814.726834][T26396] team_slave_1: entered promiscuous mode [ 814.775541][T26398] netlink: 'syz.2.5106': attribute type 5 has an invalid length. [ 815.619843][T26423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5110'. [ 815.629660][T26423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5110'. [ 815.631474][T26425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5109'. [ 815.650655][T26422] wg1 speed is unknown, defaulting to 1000 [ 815.717338][T26422] xfrm0 speed is unknown, defaulting to 1000 [ 816.139230][T26439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5118'. [ 816.153723][T26440] netlink: 'syz.3.5117': attribute type 3 has an invalid length. [ 816.393230][T26455] tipc: Enabling of bearer rejected, already enabled [ 816.401947][T26422] ip6_vti0 speed is unknown, defaulting to 1000 [ 816.403527][T26455] netlink: 'syz.4.5121': attribute type 11 has an invalid length. [ 816.417943][T26455] netlink: 'syz.4.5121': attribute type 11 has an invalid length. [ 816.428194][T26455] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5121'. [ 816.526902][T26455] bridge5: entered promiscuous mode [ 816.532293][T26455] bridge5: entered allmulticast mode [ 816.650640][T26464] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 816.664414][T26464] dvmrp1: linktype set to 774 [ 816.867249][T26474] netlink: 212 bytes leftover after parsing attributes in process `syz.4.5126'. [ 816.899907][T26471] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5126'. [ 817.001019][T26480] netlink: 'syz.1.5127': attribute type 2 has an invalid length. [ 817.015040][T26462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5125'. [ 817.036220][T26462] netlink: 'syz.3.5125': attribute type 5 has an invalid length. [ 817.040459][T26479] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5127'. [ 817.279724][T26489] wg1 speed is unknown, defaulting to 1000 [ 817.318466][T26489] xfrm0 speed is unknown, defaulting to 1000 [ 817.477865][T26491] lo: entered promiscuous mode [ 817.499949][T26491] tunl0: entered promiscuous mode [ 817.556872][T26491] gre0: entered promiscuous mode [ 817.735868][T26491] gretap0: entered promiscuous mode [ 818.023838][T26491] erspan0: entered promiscuous mode [ 818.047020][T26491] ip_vti0: entered promiscuous mode [ 818.072092][T26491] ip6_vti0: entered promiscuous mode [ 818.093987][T26485] wg1 speed is unknown, defaulting to 1000 [ 818.112702][T26485] xfrm0 speed is unknown, defaulting to 1000 [ 818.194391][T26489] ip6_vti0 speed is unknown, defaulting to 1000 [ 818.194717][T26422] lo speed is unknown, defaulting to 1000 [ 818.217787][T26509] net_ratelimit: 22 callbacks suppressed [ 818.217800][T26509] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 818.722739][T26485] ip6_vti0 speed is unknown, defaulting to 1000 [ 819.321018][T26489] lo speed is unknown, defaulting to 1000 [ 819.723955][T26485] lo speed is unknown, defaulting to 1000 [ 819.732502][T26540] siw: device registration error -23 [ 819.750528][T26511] siw: device registration error -23 [ 820.320978][T26569] __nla_validate_parse: 2 callbacks suppressed [ 820.320997][T26569] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5151'. [ 821.428335][T26591] wg1 speed is unknown, defaulting to 1000 [ 821.462973][T26591] xfrm0 speed is unknown, defaulting to 1000 [ 821.581319][T26599] dummy0: entered promiscuous mode [ 821.939918][T26606] wg1 speed is unknown, defaulting to 1000 [ 822.198376][T26606] xfrm0 speed is unknown, defaulting to 1000 [ 822.205599][T26591] ip6_vti0 speed is unknown, defaulting to 1000 [ 822.536781][T26598] dummy0: left promiscuous mode [ 822.586862][T26621] netlink: 'syz.4.5163': attribute type 1 has an invalid length. [ 822.646238][T26623] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5163'. [ 822.673945][T26625] netlink: 'syz.2.5165': attribute type 1 has an invalid length. [ 822.682923][T26625] netlink: 'syz.2.5165': attribute type 1 has an invalid length. [ 822.698128][T26623] bond10: entered promiscuous mode [ 822.723265][T26621] bond10: (slave geneve3): making interface the new active one [ 822.751928][T26621] geneve3: entered promiscuous mode [ 822.761154][T26621] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 822.786968][ T12] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 822.805103][T26606] ip6_vti0 speed is unknown, defaulting to 1000 [ 822.811498][T26629] veth0_virt_wifi: renamed from dummy0 (while UP) [ 822.843363][ T12] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 822.857061][T16972] IPVS: starting estimator thread 0... [ 822.868445][ T12] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 822.883790][ T12] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 822.954391][T26634] IPVS: using max 34 ests per chain, 81600 per kthread [ 822.970020][T26638] netlink: 'syz.2.5168': attribute type 11 has an invalid length. [ 823.097734][T26643] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 823.182214][T26591] lo speed is unknown, defaulting to 1000 [ 823.699571][T26606] lo speed is unknown, defaulting to 1000 [ 824.172411][T26656] pim6reg: entered allmulticast mode [ 824.217744][T26673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5177'. [ 824.369191][T26650] lec:lec_atm_close: lec0: Shut down! [ 825.022223][T26696] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5184'. [ 825.168510][T26694] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 825.210559][T26703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5186'. [ 825.267499][T26705] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5186'. [ 825.298080][T26707] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5187'. [ 825.428248][T26707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5187'. [ 825.475355][T26713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5188'. [ 825.489929][T26714] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 825.767233][T26730] siw: device registration error -23 [ 826.128194][T26750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5200'. [ 826.255929][T26750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5200'. [ 826.290818][T26750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5200'. [ 827.200632][T26774] ip6gre2: left promiscuous mode [ 827.218212][T26774] geneve2: left promiscuous mode [ 827.228339][T26774] geneve2: left allmulticast mode [ 827.244985][T26774] gretap1: left promiscuous mode [ 827.258547][T26773] netlink: 'syz.2.5206': attribute type 15 has an invalid length. [ 827.275861][ T10] ip6_vti0 speed is unknown, defaulting to 1000 [ 827.275884][T23607] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 827.282645][T26786] macvtap1: entered promiscuous mode [ 827.300767][ T10] syz2: Port: 1 Link DOWN [ 827.310940][T26786] macvtap1: entered allmulticast mode [ 827.347635][T26792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5212'. [ 827.359143][ T9261] ip6_vti0 speed is unknown, defaulting to 1000 [ 827.359146][T23607] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 827.359202][T23607] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 827.444379][T26793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5212'. [ 827.479279][T26792] team1: entered promiscuous mode [ 827.485447][T26792] team1: entered allmulticast mode [ 827.491169][T26792] 8021q: adding VLAN 0 to HW filter on device team1 [ 827.499309][T23607] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 827.544897][T26793] team2: entered promiscuous mode [ 827.550041][T26793] team2: entered allmulticast mode [ 827.556087][T26793] 8021q: adding VLAN 0 to HW filter on device team2 [ 827.636428][T26812] tipc: Enabled bearer , priority 0 [ 827.679242][T26812] syzkaller0: entered promiscuous mode [ 827.694242][T26812] syzkaller0: entered allmulticast mode [ 827.798927][T26820] wg1 speed is unknown, defaulting to 1000 [ 827.828135][T26820] xfrm0 speed is unknown, defaulting to 1000 [ 827.829084][T26819] wg1 speed is unknown, defaulting to 1000 [ 828.016913][T26839] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5222'. [ 828.126293][T26839] wg1 speed is unknown, defaulting to 1000 [ 828.260344][T26845] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 828.404134][T26847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5224'. [ 828.446655][T26845] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 828.500220][T26847] bond0: (slave syz_tun): Releasing backup interface [ 828.523865][T26812] tipc: Resetting bearer [ 828.530257][T26843] netlink: 'syz.1.5222': attribute type 21 has an invalid length. [ 828.538570][T26843] netlink: 'syz.1.5222': attribute type 22 has an invalid length. [ 828.547216][T26843] netlink: 'syz.1.5222': attribute type 23 has an invalid length. [ 828.557434][T26843] netlink: 'syz.1.5222': attribute type 25 has an invalid length. [ 828.565330][T26843] netlink: 'syz.1.5222': attribute type 26 has an invalid length. [ 828.573257][T26843] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5222'. [ 828.586767][T26812] tipc: Disabling bearer [ 828.601320][T26819] xfrm0 speed is unknown, defaulting to 1000 [ 828.607800][T26820] ip6_vti0 speed is unknown, defaulting to 1000 [ 828.859985][T26853] veth0_to_team: entered promiscuous mode [ 828.977358][T26857] xt_TCPMSS: Only works on TCP SYN packets [ 829.027070][T26855] wg1 speed is unknown, defaulting to 1000 [ 829.038034][T26855] xfrm0 speed is unknown, defaulting to 1000 [ 829.079693][T26819] ip6_vti0 speed is unknown, defaulting to 1000 [ 829.473761][T26855] ip6_vti0 speed is unknown, defaulting to 1000 [ 829.481944][T26839] xfrm0 speed is unknown, defaulting to 1000 [ 829.625489][T26820] lo speed is unknown, defaulting to 1000 [ 829.772444][T26867] Unsupported ieee802154 address type: 0 [ 829.864261][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5500 ms [ 829.872339][ C0] lec:lec_tx_timeout: lec0 [ 830.055190][T26839] ip6_vti0 speed is unknown, defaulting to 1000 [ 830.116892][T26877] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 830.123101][T26877] pim6reg1: linktype set to 805 [ 830.132588][T26877] netlink: 'syz.0.5233': attribute type 1 has an invalid length. [ 830.283060][T26819] lo speed is unknown, defaulting to 1000 [ 830.336841][T26881] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20000 [ 831.073834][T26855] lo speed is unknown, defaulting to 1000 [ 831.074639][T26892] wg1 speed is unknown, defaulting to 1000 [ 831.148737][T26839] lo speed is unknown, defaulting to 1000 [ 831.377789][T26892] xfrm0 speed is unknown, defaulting to 1000 [ 832.031337][T26896] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 832.100089][T26892] ip6_vti0 speed is unknown, defaulting to 1000 [ 832.237309][T26901] __nla_validate_parse: 2 callbacks suppressed [ 832.237325][T26901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5240'. [ 832.253517][T26901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5240'. [ 832.875489][T26908] wg1 speed is unknown, defaulting to 1000 [ 832.889389][T26908] xfrm0 speed is unknown, defaulting to 1000 [ 833.596415][T26892] lo speed is unknown, defaulting to 1000 [ 833.639150][T26908] ip6_vti0 speed is unknown, defaulting to 1000 [ 834.263317][T26935] netlink: 'syz.3.5250': attribute type 1 has an invalid length. [ 834.310445][T26936] veth17: entered promiscuous mode [ 834.379072][T26935] 8021q: adding VLAN 0 to HW filter on device bond4 [ 834.556670][T26908] lo speed is unknown, defaulting to 1000 [ 834.636772][T26954] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5255'. [ 834.655606][T26954] .70: renamed from hsr0 [ 834.663174][T26954] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 834.675375][T26954] .70: entered allmulticast mode [ 834.680505][T26954] hsr_slave_0: entered allmulticast mode [ 834.689116][T26954] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check. [ 834.962341][T26968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5257'. [ 834.993119][T26968] netlink: 'syz.2.5257': attribute type 1 has an invalid length. [ 835.273299][T26972] syzkaller0: entered promiscuous mode [ 835.287795][T26972] syzkaller0: entered allmulticast mode [ 837.501231][T26972] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5258'. [ 837.792472][T26994] FAULT_INJECTION: forcing a failure. [ 837.792472][T26994] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 837.806294][T26994] CPU: 0 UID: 0 PID: 26994 Comm: syz.3.5263 Not tainted syzkaller #0 PREEMPT(full) [ 837.806341][T26994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 837.806363][T26994] Call Trace: [ 837.806370][T26994] [ 837.806377][T26994] dump_stack_lvl+0x189/0x250 [ 837.806400][T26994] ? __pfx____ratelimit+0x10/0x10 [ 837.806421][T26994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 837.806439][T26994] ? __pfx__printk+0x10/0x10 [ 837.806461][T26994] ? __might_fault+0xb0/0x130 [ 837.806492][T26994] should_fail_ex+0x414/0x560 [ 837.806516][T26994] _copy_from_user+0x2d/0xb0 [ 837.806539][T26994] ___sys_sendmsg+0x158/0x2a0 [ 837.806566][T26994] ? __pfx____sys_sendmsg+0x10/0x10 [ 837.806625][T26994] ? __fget_files+0x2a/0x420 [ 837.806640][T26994] ? __fget_files+0x3a0/0x420 [ 837.806665][T26994] __sys_sendmmsg+0x227/0x430 [ 837.806695][T26994] ? __pfx___sys_sendmmsg+0x10/0x10 [ 837.806728][T26994] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 837.806767][T26994] ? ksys_write+0x22a/0x250 [ 837.806789][T26994] ? __pfx_ksys_write+0x10/0x10 [ 837.806814][T26994] __x64_sys_sendmmsg+0xa0/0xc0 [ 837.806832][T26994] do_syscall_64+0xfa/0xf80 [ 837.806853][T26994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.806869][T26994] ? clear_bhb_loop+0x60/0xb0 [ 837.806888][T26994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.806902][T26994] RIP: 0033:0x7f1ea498f749 [ 837.806916][T26994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 837.806930][T26994] RSP: 002b:00007f1ea5808038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 837.806949][T26994] RAX: ffffffffffffffda RBX: 00007f1ea4be5fa0 RCX: 00007f1ea498f749 [ 837.806962][T26994] RDX: 0000000000000001 RSI: 0000200000002c00 RDI: 0000000000000003 [ 837.806972][T26994] RBP: 00007f1ea5808090 R08: 0000000000000000 R09: 0000000000000000 [ 837.806983][T26994] R10: 0000000004008844 R11: 0000000000000246 R12: 0000000000000001 [ 837.806993][T26994] R13: 00007f1ea4be6038 R14: 00007f1ea4be5fa0 R15: 00007ffca9214f98 [ 837.807024][T26994] [ 838.312961][T27012] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5267'. [ 838.361835][T27022] wg1 speed is unknown, defaulting to 1000 [ 838.693033][T27022] xfrm0 speed is unknown, defaulting to 1000 [ 838.718382][T27042] tipc: Enabled bearer , priority 0 [ 838.741466][T27042] syzkaller0: entered promiscuous mode [ 838.764538][T27042] syzkaller0: entered allmulticast mode [ 838.809668][T27049] netlink: 'syz.1.5278': attribute type 39 has an invalid length. [ 838.869800][T27042] tipc: Resetting bearer [ 838.918182][T27041] tipc: Resetting bearer [ 839.015810][T27041] tipc: Disabling bearer [ 839.050433][T27022] ip6_vti0 speed is unknown, defaulting to 1000 [ 839.052098][T27044] veth1_to_bond: left promiscuous mode [ 839.138753][T27057] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5281'. [ 839.207819][T27059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5280'. [ 839.335063][T27068] netlink: 'syz.4.5284': attribute type 1 has an invalid length. [ 839.399254][T27068] lo: Caught tx_queue_len zero misconfig [ 839.661662][T27081] 8021q: VLANs not supported on vxcan1 [ 839.715076][T27090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5290'. [ 839.740612][T27082] wg1 speed is unknown, defaulting to 1000 [ 839.757540][T27082] xfrm0 speed is unknown, defaulting to 1000 [ 839.960600][T27098] wg1 speed is unknown, defaulting to 1000 [ 840.011029][T27096] wg1 speed is unknown, defaulting to 1000 [ 840.128257][T27102] netlink: 'syz.1.5294': attribute type 2 has an invalid length. [ 840.172057][T27022] lo speed is unknown, defaulting to 1000 [ 840.240319][T27098] xfrm0 speed is unknown, defaulting to 1000 [ 840.246816][T27082] ip6_vti0 speed is unknown, defaulting to 1000 [ 840.579068][T27110] wg1 speed is unknown, defaulting to 1000 [ 840.621386][T27119] dvmrp0: entered allmulticast mode [ 840.721933][T27096] xfrm0 speed is unknown, defaulting to 1000 [ 840.847409][T27123] netlink: 'syz.1.5300': attribute type 13 has an invalid length. [ 840.930711][T27096] ip6_vti0 speed is unknown, defaulting to 1000 [ 841.109006][T27132] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5303'. [ 841.120236][T27132] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5303'. [ 841.148591][T27098] ip6_vti0 speed is unknown, defaulting to 1000 [ 841.187527][T27110] xfrm0 speed is unknown, defaulting to 1000 [ 841.515949][T27082] lo speed is unknown, defaulting to 1000 [ 841.624084][T27110] ip6_vti0 speed is unknown, defaulting to 1000 [ 842.330165][T27098] lo speed is unknown, defaulting to 1000 [ 842.353079][T27096] lo speed is unknown, defaulting to 1000 [ 843.074876][T27110] lo speed is unknown, defaulting to 1000 [ 843.126094][T27157] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 843.490782][T27170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5310'. [ 843.573157][T27171] bond0: (slave bond_slave_0): Releasing backup interface [ 843.667559][T27171] bond0: (slave bond_slave_1): Releasing backup interface [ 843.712267][T27171] team0: Port device team_slave_0 removed [ 843.748382][T27171] team0: Port device team_slave_1 removed [ 843.756267][T27171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 843.785973][T27171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 843.805708][T27171] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 843.952415][T27187] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5314'. [ 843.987547][T27187] tipc: Invalid UDP bearer configuration [ 843.987601][T27187] tipc: Enabling of bearer rejected, failed to enable media [ 844.025728][T27179] netlink: 'syz.0.5313': attribute type 5 has an invalid length. [ 844.033507][T27179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5313'. [ 844.176358][T27192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5314'. [ 844.954472][T27216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5319'. [ 845.322683][T27234] netlink: 'syz.1.5324': attribute type 2 has an invalid length. [ 845.413807][T27234] 9: entered promiscuous mode [ 845.583466][T27248] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5328'. [ 845.816575][T27257] bond10 (unregistering): Released all slaves [ 846.016617][T27271] netlink: 'syz.0.5335': attribute type 9 has an invalid length. [ 846.113640][T27276] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5336'. [ 846.181287][T27273] wg1 speed is unknown, defaulting to 1000 [ 846.192297][T27273] xfrm0 speed is unknown, defaulting to 1000 [ 846.219789][T27281] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 846.374066][T27273] ip6_vti0 speed is unknown, defaulting to 1000 [ 846.584933][T27294] netlink: 'syz.1.5343': attribute type 1 has an invalid length. [ 846.592890][T27294] netlink: 'syz.1.5343': attribute type 3 has an invalid length. [ 846.601384][T27294] netlink: 'syz.1.5343': attribute type 2 has an invalid length. [ 846.610375][T27294] netlink: 'syz.1.5343': attribute type 3 has an invalid length. [ 846.620286][T27294] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5343'. [ 846.931991][T27311] wg1 speed is unknown, defaulting to 1000 [ 846.949284][T27311] xfrm0 speed is unknown, defaulting to 1000 [ 847.187932][T27322] pimreg1: tun_chr_ioctl cmd 1074025677 [ 847.193902][T27322] pimreg1: linktype set to 804 [ 847.203140][T27323] pimreg1: tun_chr_ioctl cmd 1074025677 [ 847.227926][T27323] pimreg1: linktype set to 804 [ 847.244667][T27311] ip6_vti0 speed is unknown, defaulting to 1000 [ 847.251797][T27273] lo speed is unknown, defaulting to 1000 [ 847.251950][T27324] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 847.558027][T27339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5355'. [ 847.597254][T27344] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5357'. [ 847.785612][T27347] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 847.793147][T27347] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 847.879382][T27345] wg1 speed is unknown, defaulting to 1000 [ 848.102747][T27345] xfrm0 speed is unknown, defaulting to 1000 [ 848.110259][T27311] lo speed is unknown, defaulting to 1000 [ 848.160622][T27360] bond0: option xmit_hash_policy: invalid value (9) [ 848.223358][T27363] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 848.613238][T27345] ip6_vti0 speed is unknown, defaulting to 1000 [ 848.699044][T27384] veth6: entered allmulticast mode [ 848.988783][T27395] tipc: Enabled bearer , priority 0 [ 849.105386][T27395] tap0: tun_chr_ioctl cmd 1074025673 [ 849.125322][T27388] tipc: Enabled bearer , priority 0 [ 849.202354][T27396] syzkaller0: entered promiscuous mode [ 849.214768][T27396] syzkaller0: entered allmulticast mode [ 849.242954][T27395] tipc: Resetting bearer [ 849.268459][T27387] tipc: Resetting bearer [ 849.400495][T27387] tipc: Disabling bearer [ 849.952441][T27428] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 849.992901][T27428] __nla_validate_parse: 3 callbacks suppressed [ 849.992919][T27428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5377'. [ 850.148288][T27345] lo speed is unknown, defaulting to 1000 [ 850.255436][T27431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5378'. [ 850.285081][T27431] veth0_to_bond: entered allmulticast mode [ 850.306819][T27431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5378'. [ 850.706190][T27438] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 850.828527][T27442] batadv_slave_0: entered promiscuous mode [ 851.265496][T27458] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5385'. [ 851.343910][T27458] netlink: 'syz.1.5385': attribute type 1 has an invalid length. [ 851.368763][T27458] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5385'. [ 851.447866][T27462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5386'. [ 851.457153][T27462] openvswitch: netlink: Flow key attr not present in new flow. [ 851.653412][T27468] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5388'. [ 851.681676][T27468] netlink: 'syz.1.5388': attribute type 2 has an invalid length. [ 851.682771][T27467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5387'. [ 851.690520][T27464] wg1 speed is unknown, defaulting to 1000 [ 851.920183][T27467] 8021q: adding VLAN 0 to HW filter on device bond10 [ 852.052063][T27471] 8021q: adding VLAN 0 to HW filter on device bond10 [ 852.089482][T27471] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 852.159075][T27471] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 852.311131][T27464] xfrm0 speed is unknown, defaulting to 1000 [ 852.938687][T27464] ip6_vti0 speed is unknown, defaulting to 1000 [ 853.004706][T27502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5397'. [ 853.013908][T27503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5397'. [ 853.081305][T27502] team1: entered promiscuous mode [ 853.101552][T27502] team1: entered allmulticast mode [ 853.110044][T27502] 8021q: adding VLAN 0 to HW filter on device team1 [ 853.146075][T27503] team2: entered promiscuous mode [ 853.151387][T27503] team2: entered allmulticast mode [ 853.157444][T27503] 8021q: adding VLAN 0 to HW filter on device team2 [ 853.833555][T27521] netlink: 'syz.3.5400': attribute type 2 has an invalid length. [ 853.849618][T27521] netlink: 'syz.3.5400': attribute type 9 has an invalid length. [ 854.059620][T27548] netlink: 'syz.4.5407': attribute type 12 has an invalid length. [ 854.070654][T27464] lo speed is unknown, defaulting to 1000 [ 854.074941][T27548] netlink: 'syz.4.5407': attribute type 4 has an invalid length. [ 854.498040][T27560] syzkaller0: entered promiscuous mode [ 854.503543][T27560] syzkaller0: entered allmulticast mode [ 854.549541][T27562] wg1 speed is unknown, defaulting to 1000 [ 855.008834][T27574] __nla_validate_parse: 8 callbacks suppressed [ 855.008852][T27574] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5414'. [ 856.802021][T27569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5412'. [ 856.811817][T27569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5412'. [ 856.821027][T27569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5412'. [ 856.830231][T27569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5412'. [ 856.839466][T27569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5412'. [ 856.848548][T27569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5412'. [ 856.857716][T27569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5412'. [ 856.866846][T27569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5412'. [ 856.876031][T27569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5412'. [ 856.909838][T27581] xfrm1: entered allmulticast mode [ 856.916651][T27562] xfrm0 speed is unknown, defaulting to 1000 [ 857.103242][T27585] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 857.188626][T27585] bond4 (unregistering): Released all slaves [ 857.255581][ T3826] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 857.264059][ T3826] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 857.283595][ T3826] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 857.296876][ T61] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 857.392500][T27562] ip6_vti0 speed is unknown, defaulting to 1000 [ 857.461224][T27609] mac80211_hwsim hwsim47 wlan1: Caught tx_queue_len zero misconfig [ 858.227293][T27562] lo speed is unknown, defaulting to 1000 [ 858.237505][T27602] siw: device registration error -23 [ 858.879889][T27654] sctp: [Deprecated]: syz.3.5435 (pid 27654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 858.879889][T27654] Use struct sctp_sack_info instead [ 859.432770][T27670] wg1 speed is unknown, defaulting to 1000 [ 859.490974][T27670] xfrm0 speed is unknown, defaulting to 1000 [ 859.816137][T27684] Cannot find del_set index 4 as target [ 860.020165][T27691] netlink: 'syz.1.5443': attribute type 4 has an invalid length. [ 860.234001][T27700] netlink: 'syz.1.5446': attribute type 1 has an invalid length. [ 860.271140][T27670] ip6_vti0 speed is unknown, defaulting to 1000 [ 860.607249][T27709] Cannot find add_set index 3 as target [ 860.765784][T27717] __nla_validate_parse: 36 callbacks suppressed [ 860.765806][T27717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5450'. [ 861.068542][T27670] lo speed is unknown, defaulting to 1000 [ 861.152904][T27728] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5454'. [ 861.536961][T27741] wg1 speed is unknown, defaulting to 1000 [ 861.546956][T27741] xfrm0 speed is unknown, defaulting to 1000 [ 861.602762][T27742] tap0: tun_chr_ioctl cmd 1074025677 [ 861.626917][T27742] tap0: linktype set to 0 [ 861.752115][T27741] ip6_vti0 speed is unknown, defaulting to 1000 [ 861.874547][T27755] xt_CT: You must specify a L4 protocol and not use inversions on it [ 862.379876][T27775] netlink: 428 bytes leftover after parsing attributes in process `syz.0.5466'. [ 862.405664][T27775] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5466'. [ 868.040675][T27784] wg1 speed is unknown, defaulting to 1000 [ 868.912488][T27784] xfrm0 speed is unknown, defaulting to 1000 [ 870.132725][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 875.878336][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 875.888722][ C0] lec:lec_tx_timeout: lec0 [ 879.793966][T27741] lo speed is unknown, defaulting to 1000 [ 896.221923][T20803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 896.292596][T20803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 896.373313][T20803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 896.976895][T20803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 897.252437][T20803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 900.351923][T20803] Bluetooth: hci4: command tx timeout [ 901.491543][T18415] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 901.570818][T18415] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 901.703067][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 901.794092][ T5839] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 901.933106][T20802] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 902.071536][T20802] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 902.170841][T20802] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 902.401876][T20803] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 902.442764][T20802] Bluetooth: hci4: command tx timeout [ 903.082187][T20803] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 903.233662][T20803] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 904.513030][T20803] Bluetooth: hci4: command tx timeout [ 904.612627][T20803] Bluetooth: hci6: command tx timeout [ 905.953071][T20803] Bluetooth: hci7: command tx timeout [ 906.602540][T20803] Bluetooth: hci4: command tx timeout [ 906.687702][T20803] Bluetooth: hci6: command tx timeout [ 906.702734][T27784] ip6_vti0 speed is unknown, defaulting to 1000 [ 908.031940][T20803] Bluetooth: hci7: command tx timeout [ 908.760372][T20803] Bluetooth: hci6: command tx timeout [ 910.122045][T20803] Bluetooth: hci7: command tx timeout [ 910.834030][T20803] Bluetooth: hci6: command tx timeout [ 912.012075][T27847] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5485'. [ 912.190666][T20803] Bluetooth: hci7: command tx timeout [ 916.882160][T27825] wg1 speed is unknown, defaulting to 1000 [ 917.123103][T27825] xfrm0 speed is unknown, defaulting to 1000 [ 917.453544][T27838] wg1 speed is unknown, defaulting to 1000 [ 917.952048][T27832] wg1 speed is unknown, defaulting to 1000 [ 919.211210][T27855] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5487'. [ 919.572773][T27855] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5487'. [ 919.730504][T27855] netlink: 'syz.2.5487': attribute type 5 has an invalid length. [ 920.352511][T27855] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5487'. [ 931.563924][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 932.043024][T27825] ip6_vti0 speed is unknown, defaulting to 1000 [ 932.291632][T27838] xfrm0 speed is unknown, defaulting to 1000 [ 936.907740][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5340 ms [ 936.918308][ C0] lec:lec_tx_timeout: lec0 [ 940.241844][T27784] lo speed is unknown, defaulting to 1000 [ 943.873147][T18415] Bluetooth: hci3: command 0x0405 tx timeout [ 946.763243][T27870] wg1 speed is unknown, defaulting to 1000 [ 954.090879][T18415] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 954.222455][T18415] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 954.392500][T18415] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 954.733121][T18415] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 954.953044][T18415] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 957.452544][T20803] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 957.549764][T20803] Bluetooth: hci2: command tx timeout [ 957.712231][T20803] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 957.890595][T20803] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 958.563408][T20803] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 958.871128][T20803] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 959.402621][T20803] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 959.600587][T20803] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 959.660650][T20803] Bluetooth: hci2: command tx timeout [ 959.793578][T20803] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 960.203258][T20803] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 960.361454][T20803] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 961.470461][T20803] Bluetooth: hci5: command tx timeout [ 961.622736][ T3826] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.712274][T20803] Bluetooth: hci2: command tx timeout [ 961.787249][ T3826] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 963.003100][T20803] Bluetooth: hci8: command tx timeout [ 963.552627][T20803] Bluetooth: hci5: command tx timeout [ 963.800419][T20803] Bluetooth: hci2: command tx timeout [ 965.079820][T20803] Bluetooth: hci8: command tx timeout [ 965.632469][T20803] Bluetooth: hci5: command tx timeout [ 966.573562][T27838] ip6_vti0 speed is unknown, defaulting to 1000 [ 966.740048][T27832] xfrm0 speed is unknown, defaulting to 1000 [ 967.053675][ T3826] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.172590][T20803] Bluetooth: hci8: command tx timeout [ 967.238228][ T3826] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 967.711121][T20803] Bluetooth: hci5: command tx timeout [ 968.291231][T18415] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 968.442499][T18415] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 968.493868][T18415] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 968.591467][T18415] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 968.653440][T18415] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 969.260993][T20803] Bluetooth: hci8: command tx timeout [ 969.963860][ T3826] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.333154][ T3826] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 970.701759][T20803] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 970.782987][T20803] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 970.902911][T20803] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 971.161055][T20803] Bluetooth: hci9: command tx timeout [ 971.182648][T20803] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 971.593574][T20803] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 973.232426][T20802] Bluetooth: hci9: command tx timeout [ 974.359580][T20802] Bluetooth: hci10: command tx timeout [ 975.309870][T20802] Bluetooth: hci9: command tx timeout [ 976.440332][T20802] Bluetooth: hci10: command tx timeout [ 977.413618][T20802] Bluetooth: hci9: command tx timeout [ 977.591041][ T3826] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.833843][ T3826] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 978.512674][T20802] Bluetooth: hci10: command tx timeout [ 980.602439][T20802] Bluetooth: hci10: command tx timeout [ 982.440690][T23608] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 984.460556][ T3008] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 984.742734][ T3008] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 986.871905][ T61] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 989.543066][ T3826] veth9: left allmulticast mode [ 989.650129][ T3826] veth9: left promiscuous mode [ 989.741565][ T3826] bridge6: port 3(veth9) entered disabled state [ 991.232131][ T3826] veth0_to_bond: left allmulticast mode [ 991.442649][ T3826] veth0_to_bond: left promiscuous mode [ 991.582844][ T3826] bridge6: port 2(veth0_to_bond) entered disabled state [ 992.511846][ T3826] veth7: left allmulticast mode [ 992.690834][ T3826] veth7: left promiscuous mode [ 992.930558][ T3826] bridge6: port 1(veth7) entered disabled state [ 993.002724][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 994.443681][ T3826] batadv1: left allmulticast mode [ 994.630916][ T3826] batadv1: left promiscuous mode [ 994.800690][ T3826] bridge0: port 1(batadv1) entered disabled state [ 998.029708][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 998.041384][ C0] lec:lec_tx_timeout: lec0 [ 1016.271011][T18415] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1016.393369][T18415] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1016.441230][T18415] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1016.502823][T18415] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1016.592798][T18415] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1016.662701][T18415] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1017.123495][T18415] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1017.143325][T18415] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1017.393531][ T5839] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1017.531398][ T5839] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1020.191946][ T5839] Bluetooth: hci12: command tx timeout [ 1020.431854][ T5839] Bluetooth: hci11: command tx timeout [ 1020.691726][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 1022.290886][T20802] Bluetooth: hci12: command tx timeout [ 1022.513282][ T5839] Bluetooth: hci11: command tx timeout [ 1022.741771][ T5839] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1022.823450][ T5839] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1022.891110][ T5839] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1023.273129][ T5839] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1023.482570][T27896] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1023.602259][T27896] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1023.704095][T27896] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1024.001681][T27901] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1024.363301][T27901] Bluetooth: hci12: command tx timeout [ 1024.483074][T27901] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1024.590679][T27901] Bluetooth: hci11: command tx timeout [ 1024.841477][T20802] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1025.802581][ T5839] Bluetooth: hci6: command 0x0406 tx timeout [ 1026.451275][T20803] Bluetooth: hci12: command tx timeout [ 1026.710593][ T5839] Bluetooth: hci11: command tx timeout [ 1026.723009][ T5839] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1027.001064][ T5839] Bluetooth: hci13: command tx timeout [ 1027.171957][ T5839] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1027.272254][ T5839] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1027.321542][ T5839] Bluetooth: hci14: command tx timeout [ 1027.602132][T27901] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1027.783766][T27901] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1029.071835][T20803] Bluetooth: hci13: command tx timeout [ 1029.391482][T20803] Bluetooth: hci14: command tx timeout [ 1030.443860][T20803] Bluetooth: hci15: command tx timeout [ 1030.911258][T20803] Bluetooth: hci7: command 0x0406 tx timeout [ 1031.163336][T20803] Bluetooth: hci13: command tx timeout [ 1031.482124][T27901] Bluetooth: hci14: command tx timeout [ 1032.521364][T27901] Bluetooth: hci15: command tx timeout [ 1033.232523][T27901] Bluetooth: hci13: command tx timeout [ 1033.561753][T27901] Bluetooth: hci14: command tx timeout [ 1034.590169][T27901] Bluetooth: hci15: command tx timeout [ 1036.673085][T27901] Bluetooth: hci15: command tx timeout [ 1036.880732][ T3826] bond7 (unregistering): (slave gretap2): Releasing active interface [ 1040.722015][ T3826] bond6 (unregistering): (slave geneve3): Releasing active interface [ 1046.873790][ T3826] bond4 (unregistering): (slave bridge3): Releasing active interface [ 1054.453645][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 1059.868880][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5410 ms [ 1059.880007][ C0] lec:lec_tx_timeout: lec0 [ 1060.741706][ T3826] bond0 (unregistering): (slave 30): Releasing backup interface [ 1061.271498][ T3826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1061.904116][ T3826] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1063.713898][ T3826] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 1064.022829][ T3826] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 1064.503127][ T3826] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1064.812988][ T3826] bond0 (unregistering): Released all slaves [ 1074.553564][T20803] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1074.612373][T20803] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1074.691029][T20803] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1075.212941][ T3826] bond1 (unregistering): (slave veth3): Releasing active interface [ 1075.222718][T20803] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1075.589859][T20803] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1076.133602][ T3826] bond1 (unregistering): Released all slaves [ 1077.550759][T27901] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1077.643075][T27901] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1077.730732][T27901] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1077.950122][T27901] Bluetooth: hci16: command tx timeout [ 1078.300675][T27901] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1078.460499][T27901] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1080.040722][T20803] Bluetooth: hci16: command tx timeout [ 1080.230946][ T5839] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1080.341768][ T5839] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1080.400537][ T5839] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1080.700852][ T5839] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1080.833970][ T5839] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1081.312585][T20802] Bluetooth: hci17: command tx timeout [ 1082.121567][T20802] Bluetooth: hci2: command 0x0406 tx timeout [ 1082.133901][T20802] Bluetooth: hci16: command tx timeout [ 1082.153619][ T5839] Bluetooth: hci5: command 0x0406 tx timeout [ 1083.400852][T27901] Bluetooth: hci18: command tx timeout [ 1083.433817][T20803] Bluetooth: hci17: command tx timeout [ 1084.103196][T27901] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1084.159700][T27901] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1084.200935][ T5839] Bluetooth: hci16: command tx timeout [ 1084.342659][T27901] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1084.682192][T27901] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1084.992682][T27901] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1085.501390][T20803] Bluetooth: hci17: command tx timeout [ 1085.503315][ T5839] Bluetooth: hci18: command tx timeout [ 1085.821854][ T5839] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 1085.891776][ T5839] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 1085.993674][ T5839] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 1086.352867][ T5839] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 1086.733547][ T5839] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 1087.230439][ T5839] Bluetooth: hci8: command 0x0406 tx timeout [ 1087.561347][T20803] Bluetooth: hci17: command tx timeout [ 1087.563958][ T5839] Bluetooth: hci18: command tx timeout [ 1087.792549][ T5839] Bluetooth: hci19: command tx timeout [ 1087.973865][ T3826] bond2 (unregistering): (slave bond3): Releasing backup interface [ 1088.612070][ T3826] bond3 (unregistering): left promiscuous mode [ 1088.883318][ T3826] bond3 (unregistering): left allmulticast mode [ 1089.113361][ T3826] bond2 (unregistering): Released all slaves [ 1089.233157][T27901] Bluetooth: hci20: command tx timeout [ 1089.632097][T27901] Bluetooth: hci18: command tx timeout [ 1089.882397][T27901] Bluetooth: hci19: command tx timeout [ 1091.310549][ T5839] Bluetooth: hci20: command tx timeout [ 1091.953641][ T5839] Bluetooth: hci19: command tx timeout [ 1092.352760][ T5839] Bluetooth: hci9: command 0x0406 tx timeout [ 1093.402595][T27901] Bluetooth: hci20: command tx timeout [ 1094.042530][T27901] Bluetooth: hci19: command tx timeout [ 1095.481461][ T5839] Bluetooth: hci20: command tx timeout [ 1097.043692][ T3826] bond3 (unregistering): Released all slaves [ 1097.572175][ T5839] Bluetooth: hci10: command 0x0406 tx timeout [ 1097.753213][ T3826] bond4 (unregistering): Released all slaves [ 1106.041966][ T3826] bond5 (unregistering): Released all slaves [ 1109.571867][ T31] INFO: task syz.4.5469:27784 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1109.770728][ T31] Not tainted syzkaller #0 [ 1109.922011][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1110.033591][ T31] task:syz.4.5469 state:D stack:23072 pid:27784 tgid:27779 ppid:19475 task_flags:0x400140 flags:0x00080003 [ 1110.153507][ T31] Call Trace: [ 1110.180182][ T31] [ 1110.183176][ T31] __schedule+0x14bc/0x5000 [ 1110.221902][ T31] ? __pfx___schedule+0x10/0x10 [ 1110.292324][ T31] ? schedule+0x91/0x360 [ 1110.411399][ T31] schedule+0x165/0x360 [ 1110.513358][ T31] schedule_preempt_disabled+0x13/0x30 [ 1110.593875][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 1110.732763][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 1110.833626][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 1110.961059][ T31] ? rdma_dev_exit_net+0x8c/0x340 [ 1111.070733][ T31] down_write+0x1ab/0x1f0 [ 1111.143878][ T31] ? __pfx_down_write+0x10/0x10 [ 1111.162848][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 1111.179507][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 1111.188271][ T31] ? rdma_net_to_dev_net+0x1ed/0x240 [ 1111.193583][ T31] rdma_dev_exit_net+0x8c/0x340 [ 1111.202066][ T31] ? __pfx___might_resched+0x10/0x10 [ 1111.223272][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 1111.283756][ T31] ? net_generic+0x1e/0x240 [ 1111.383010][ T31] ? mutex_is_locked+0x17/0x50 [ 1111.470223][ T31] ? rtnl_is_locked+0x15/0x20 [ 1111.544108][ T31] ops_undo_list+0x49a/0x990 [ 1111.699633][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1111.862421][ T31] ? ops_init+0x469/0x5c0 [ 1112.033209][ T31] setup_net+0x2e8/0x330 [ 1112.102740][ T31] ? __pfx_setup_net+0x10/0x10 [ 1112.202897][ T31] ? preinit_net+0x47d/0x780 [ 1112.280489][ T31] copy_net_ns+0x3e3/0x570 [ 1112.382169][ T31] create_new_namespaces+0x3e7/0x6a0 [ 1112.472084][ T31] ? security_capable+0x7e/0x2e0 [ 1112.563508][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 1112.622233][ T31] ksys_unshare+0x4c8/0x8c0 [ 1112.752742][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 1112.860980][ T31] __x64_sys_unshare+0x38/0x50 [ 1112.912927][ T31] do_syscall_64+0xfa/0xf80 [ 1113.059918][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.150814][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1113.223915][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.340942][ T31] RIP: 0033:0x7f7e71b8f749 [ 1113.402726][ T31] RSP: 002b:00007f7e72a71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1113.541969][ T31] RAX: ffffffffffffffda RBX: 00007f7e71de6090 RCX: 00007f7e71b8f749 [ 1113.691035][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 1113.892782][ T31] RBP: 00007f7e71c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1114.049599][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1114.201513][ T31] R13: 00007f7e71de6128 R14: 00007f7e71de6090 R15: 00007ffff97953f8 [ 1114.352551][ T31] [ 1114.442856][ T31] [ 1114.442856][ T31] Showing all locks held in the system: [ 1114.690940][ T31] 2 locks held by kworker/0:1/10: [ 1114.828562][ T31] 2 locks held by ksoftirqd/1/23: [ 1114.833639][ T31] 1 lock held by khungtaskd/31: [ 1115.000089][ T31] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1115.163210][ T31] 5 locks held by kworker/u8:3/50: [ 1115.303801][ T31] #0: ffff8880b883a7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1115.582720][ T31] #1: ffff8880b8824448 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1115.781301][ T31] #2: ffffffff8df41d20 (rcu_read_lock_bh){....}-{1:3}, at: mod_peer_timer+0x21/0x260 [ 1115.892393][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 1116.052021][ T31] #3: ffff8880b8825f98 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x8ee/0xf30 [ 1116.353188][ T31] #4: ffffffff99a1a140 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x87/0x540 [ 1116.643128][ T31] 5 locks held by kworker/u8:4/61: [ 1116.783137][ T31] #0: ffff8880b883a7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1116.992139][ T31] #1: ffff8880b8824448 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1117.132789][ T31] #2: ffff8880b8825f98 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 1117.383377][ T31] #3: ffffffff99a965f8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x87/0x540 [ 1117.601460][ T31] #4: ffffffff99aa0a80 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x87/0x540 [ 1117.860404][ T31] 5 locks held by kworker/u8:14/3826: [ 1117.933846][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1118.062938][ T31] #1: ffffc9000d0a7b80 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1118.251328][ T31] #2: ffffffff8f2e8510 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0 [ 1118.382123][ T31] #3: ffffffff8f2f55c8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 1118.563448][ T31] #4: ffffffff8df477f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 1118.691432][ T31] 2 locks held by getty/5592: [ 1118.890879][ T31] #0: ffff88803407d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1119.053303][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1119.213775][ T31] 3 locks held by kworker/1:2/16972: [ 1119.290099][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1119.462682][ T31] #1: ffffc9000b8ffb80 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770