last executing test programs: 5m19.800258831s ago: executing program 4 (id=205): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000043c0)={@empty, 0xe, r2}) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe17, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYRES32=r3, @ANYRES16=r3, @ANYRES8=r3], 0x28}}, 0x2000c050) 5m19.603296301s ago: executing program 4 (id=209): ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)=ANY=[@ANYBLOB="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"]) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf25010100"], 0x114}], 0x1}, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r4 = gettid() r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r3, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0) r6 = getpid() syz_open_procfs$namespace(r6, &(0x7f0000000280)='ns/pid_for_children\x00') r7 = socket$can_raw(0x1d, 0x3, 0x1) close(r7) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r7}, 0x8) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000200)={0x8, 'macvlan0\x00', {'vlan0\x00'}}) 5m19.223993086s ago: executing program 4 (id=214): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000180)}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000000c0), 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000180)}, 0x10) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000000c0), 0x4) (async) 5m19.22197131s ago: executing program 2 (id=215): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x54}, {0x6}]}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0004ba", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) accept$nfc_llcp(r1, &(0x7f0000000200), &(0x7f0000000280)=0x60) 5m18.92804179s ago: executing program 2 (id=218): getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=""/192, &(0x7f00000000c0)=0xc0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000100)=""/8, &(0x7f0000000140)=0x8) r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000001c0)={0x6, [0x1, 0x83, 0x2, 0xc9, 0x8, 0x7]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@newtclass={0x2c, 0x28, 0x400, 0x81, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xf}, {0x0, 0xb}, {0x5, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x18}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4840}, 0x40488c0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c004}, 0x4000) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r3) ioctl$int_out(r1, 0x5462, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000500), &(0x7f0000000540)=0x4) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000580), 0x10) ioctl$F2FS_IOC_RESIZE_FS(r6, 0x4008f510, &(0x7f00000005c0)=0x100000000) ioctl$BTRFS_IOC_QUOTA_RESCAN(r6, 0x4040942c, &(0x7f0000000600)={0x0, 0xfffffffffffff917, [0x8, 0x0, 0x5, 0x800, 0x1ff, 0xe20000000000]}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000640)={r0}) bind$rds(r7, &(0x7f0000000680)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r5, 0x4, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000810) syz_genetlink_get_family_id$net_dm(&(0x7f00000007c0), r3) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000800)=""/5, &(0x7f0000000840)=0x5) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), r7) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xb0, r8, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x24000051}, 0x80) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000a40)=0x3, 0x4) sendto$inet6(r7, &(0x7f0000000a80)="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", 0x1000, 0x40040c4, 0x0, 0x0) r9 = getpid() r10 = bpf$ITER_CREATE(0x21, &(0x7f0000001ac0), 0x8) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x5c, r8, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r10}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4804) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r10, 0x0, 0x48f, &(0x7f0000001c00)={0xff, @multicast2, 0x4e21, 0x1, 'dh\x00', 0x10, 0x5, 0x54}, 0x2c) 5m18.850515439s ago: executing program 2 (id=220): r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10, 0x100800) sendto$llc(r0, &(0x7f0000000080)="ab61a047e5118db9b494473888b9e021bb22c1", 0x13, 0x8000, 0x0, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f00000000c0)={0x2a, "6a0c645abd824b05c9ad34370e622dada0586cbe6bafe4472c1f2d0537859599abd9a0862edd7e331a2f23be06031f27983426576a0bc8c04a3ae49f106bdd23ca6c2c3ef383c6c98652e8acaa06a55728328c5fcaad3e21df7a1160f6f4b67d88d5ad99d2d4f1cc8cf338e27eec472871c33a4fcb5b09842a8566e7f22a4e18"}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000180)) r1 = accept(r0, &(0x7f00000001c0)=@un=@abs, &(0x7f0000000240)=0x80) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000280)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000300)) recvmmsg(r1, &(0x7f0000003dc0)=[{{&(0x7f0000000340)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000900)=[{&(0x7f00000003c0)=""/202, 0xca}, {&(0x7f00000004c0)=""/222, 0xde}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/102, 0x66}, {&(0x7f0000000680)=""/250, 0xfa}, {&(0x7f0000000780)=""/12, 0xc}, {&(0x7f00000007c0)=""/218, 0xda}, {&(0x7f00000008c0)=""/39, 0x27}], 0x8, &(0x7f0000000980)=""/109, 0x6d}, 0x6dc}, {{&(0x7f0000000a00)=@sco, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000a80)=""/27, 0x1b}], 0x1}, 0xb}, {{&(0x7f0000000b00)=@tipc, 0x80, &(0x7f00000020c0)=[{&(0x7f0000000b80)=""/160, 0xa0}, {&(0x7f0000000c40)=""/66, 0x42}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/22, 0x16}, {&(0x7f0000001d00)=""/249, 0xf9}, {&(0x7f0000001e00)=""/125, 0x7d}, {&(0x7f0000001e80)=""/193, 0xc1}, {&(0x7f0000001f80)=""/240, 0xf0}, {&(0x7f0000002080)=""/50, 0x32}], 0x9}, 0x51c}, {{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000002180)=""/85, 0x55}, {&(0x7f0000002200)=""/119, 0x77}, {&(0x7f0000002280)=""/39, 0x27}, {&(0x7f00000022c0)=""/124, 0x7c}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000003340)=""/85, 0x55}], 0x6, &(0x7f0000003440)=""/224, 0xe0}, 0x6}, {{&(0x7f0000003540)=@qipcrtr, 0x80, &(0x7f0000003b00)=[{&(0x7f00000035c0)=""/72, 0x48}, {&(0x7f0000003640)=""/122, 0x7a}, {&(0x7f00000036c0)=""/150, 0x96}, {&(0x7f0000003780)=""/236, 0xec}, {&(0x7f0000003880)=""/59, 0x3b}, {&(0x7f00000038c0)=""/64, 0x40}, {&(0x7f0000003900)=""/181, 0xb5}, {&(0x7f00000039c0)=""/70, 0x46}, {&(0x7f0000003a40)=""/142, 0x8e}], 0x9, &(0x7f0000003bc0)=""/240, 0xf0}, 0x5}, {{&(0x7f0000003cc0)=@can, 0x80, &(0x7f0000003d80)=[{&(0x7f0000003d40)=""/10, 0xa}], 0x1}, 0x4}], 0x6, 0x40000012, 0x0) read(r2, &(0x7f0000003f40)=""/164, 0xa4) connect$llc(r1, &(0x7f0000004000)={0x1a, 0x324, 0xe, 0xe, 0xe6, 0x6}, 0x10) pipe(&(0x7f0000004040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000004180)={@cgroup=r2, 0x2e, 0x0, 0x0, &(0x7f0000004080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000040c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004140)=[0x0, 0x0], 0x0}, 0x40) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000004200)={0xffffffffffffffff, r2, 0x1d, 0x0, @void}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000041c0)={@cgroup=r2, r3, 0x2c, 0x2014, 0x0, @value=r6, @void, @void, @void, r5}, 0x20) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000004240)=0x5, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000042c0), r3) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000004740)={&(0x7f0000004280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004700)={&(0x7f0000004300)={0x3e4, r8, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x753, 0x43}}}}, [@NL80211_ATTR_NAN_FUNC={0x394, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xf}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x370, 0xd, 0x0, 0x1, [{0x9b, 0x0, "e18ebcdc136b8dd234241f3c6832eb43eaf8d4cbce613ef41e6cfce959c05da596028fb81dbd52eecfff7fa04eb2b8b449584f877de8ab3a60aeb0339511694629b466d28bc5761c492e3de6ee924642eea3a820b87ca996fe2481c7911b1c42f057f21fa5a092a4de2b6ab0f7f9361ecbcd559a1748d86b89de312bfb950d3c23d67b0188ee28743b491d964000bd9cb0d076d560ef01"}, {0xf6, 0x0, "52d7862fb3f9e6c637f36a149b64816c307ccbc5fba856278342dd81c14f27974759f436eeac2067b0764f8f03bf8430b55af3a932017fa4b096af60aae4f1a4f81479cc57634f4c3c0a3fe766fb1938f2839d41a40baee25528efc1ed8c0164e5be7ab82f406e09df33160b3a9bb9aa0c4841fdd8564a71354eb28e51c24aa0a3599b8be8803f8635606c98a02944b8210009a0313c64a763a12ec38df63bf9b2370adcfed07078e28a8cb99f5f9b36e8f8cca098faff10152315fc2a1bb94c07c651002435aa41d95ab269e8e1d8eafc0325bf06fa368e92195e312e8ac39fe0d694f59b7f5971b85e70a49dd02d1a237e"}, {0x5c, 0x0, "bc4d1fd16ebef7e998c556995ff425323abe6d70d71445bd33bf01ea0efa7602dd2f24fb36e5b441d97e77252404f1307d06be4699e90beb17c8b25fe3e7c302302c54b1438a330a0ff26d3ab7c7f28771acca74b1152fd1"}, {0xde, 0x0, "f905885287c8becb812d10dbc8236272f12f71e7870a9dc4e4c1336c13d8cfa31bda43ceb3ac3ddda6ec287adca80a52708ed4ae6205ea6c904a3cf0a5755768854a98d23e6a9fab285b964a21f900bea22791ac083b44cc3a64a40b0c6ff90286763505d558c754870b62a9e4348fad2f54d6137ca3f649204957227ff30a3bf8f90078a3174ed1d5e4ca32aa59a9bbc195b3544be5072e31ad2a1151988ade4eeb07d6596499d0524e04c22b8dc4ae253d6ce482c33b1b9cfbddd82b0c9987029d46ebb667046ffc960d4f4fdb44da66ed96a87ec1c9d9624f"}, {0x99, 0x0, "f1f15a8c47c6de2acf771b36e6add5ef83b962c48a1e54c8ec8da8c94b10af09eb873dc7e861ae0c7662792224203228a6d4e0cbbf45f1dd592f039a405893e85d1b4757f52a648b5e130b587bc6080fbd503b42f345023b409d2a1dded5cf523d54f03385451166955082ef35051f41afcbd497d4dc7e5106a7419488cdbf3aa5c95009e7d4f7fd31583bc989ca86282843f57f14"}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x4a}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x9}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}]}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}]}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x408c1}, 0x80d0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000004780)=@dstopts={0x58, 0x1, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic]}, 0x18) r9 = accept4$netrom(r4, &(0x7f00000047c0)={{0x3, @netrom}, [@remote, @bcast, @remote, @netrom, @default, @netrom, @bcast]}, &(0x7f0000004840)=0x48, 0x80800) ioctl$FITHAW(r9, 0xc0045878) bind$netlink(r1, &(0x7f0000004880)={0x10, 0x0, 0x25dfdbfc, 0x800000}, 0xc) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpeername$netlink(r10, &(0x7f00000048c0), &(0x7f0000004900)=0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_DEV_REPLACE(r10, 0xca289435, &(0x7f0000004940)={0x2, 0x8, @status={[0x7fffffff, 0x2, 0xa2, 0x7f, 0xf247, 0x6]}, [0x6, 0x2, 0xfff, 0x2, 0x4, 0x180, 0x8000000000000000, 0xfffffffffffff30d, 0x80000001, 0xcfa5, 0xffff, 0xcb, 0x0, 0x870, 0x6, 0x0, 0x5cd50bc4, 0x6, 0x0, 0x6a, 0x6, 0x7, 0x7fffffffffffffff, 0x8a2, 0x0, 0x40, 0x3, 0x4, 0x7fc00000000000, 0xaa6, 0xa, 0x9, 0x5, 0xfffffffffffffff8, 0x7, 0x3, 0x7ff, 0x4, 0x4, 0x7, 0x9b8e, 0x7, 0xa, 0x2, 0x77f04bb0, 0x7fffffff, 0x6, 0xff, 0x0, 0x7f, 0x9, 0x40, 0x8000000, 0xfffffffffffffffb, 0x9, 0x8000, 0x1ff, 0x8000, 0x4, 0x4, 0x7, 0xffffffffffffff1b, 0x8000, 0x3]}) listen(r9, 0x4) 5m18.672383959s ago: executing program 4 (id=222): socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0xfffffffffffffffd, &(0x7f0000000040)=0x60) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) socket$inet_smc(0x2b, 0x1, 0x0) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000050000000000000000711251000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300040000001b000000000008000d0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 5m18.669666187s ago: executing program 2 (id=223): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x7f}]}}}]}, 0x3c}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2, 0x25, 0x0, @void}, 0x10) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) 5m18.521038861s ago: executing program 4 (id=224): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x0, @rand_addr=0x64010100}}, 0x0, 0x0, 0x0, 0x0, 0xce03d4}, 0x9c) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000400)={@initdev, @multicast1, 0x0}, &(0x7f0000000440)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bf0000009500000000e5ffff01154b0cd135367ff5b25218e1bf98ea6f27893b7cb8b9d6dfe13632b507bad216e925af008d4aedab3930148a7575414c3034e0c0fe28a9498297b6570335b79a08669e3a1e439246a5bb0e8c2c136e7b42329a014f76e7fd9fd2bf3d4b1a1acbfbe21038"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x53}, 0x90) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@getqdisc={0x30, 0x26, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xffe0, 0x1}, {0x6, 0x10}, {0xfffa, 0x7}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000000)=0x4d62, 0x4) r6 = accept4$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000680)=0x14, 0x400) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}]}]}, 0xac}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r7}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}]}, 0x44}}, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'geneve1\x00'}) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000600)={'erspan0\x00'}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="90000000", @ANYRES16=r9, @ANYBLOB="00042bbd7000fedbdf250300000007c753ce08000300ffffffff060005004e2200000800060004000000080006001e00000008000700", @ANYRES32=r7, @ANYBLOB="080006000000000008000300020000000800020004000000080002000400000024000180060001000a000000080006000300000008000600020000000500020010000000080004000000000004000680"], 0x90}, 0x1, 0x0, 0x0, 0x40c4}, 0x4) 5m18.489554428s ago: executing program 2 (id=225): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000f40700020001c7da3104730002", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000000100000000000000000"], 0x50) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000180)=""/108, &(0x7f00000002c0)=0x6c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020601010000000000000000170000000c00078005001400020000000900a30600007a30000000000500010007000000702c706f727400000000050005fe010000a4cbd329a7ff565ac3df000500040000000000"], 0x58}}, 0x4004004) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5", 0x98, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x1, 0xf) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = accept$inet6(r4, 0x0, &(0x7f00000000c0)) setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000000100)=0x401, 0x1) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000240)=[{&(0x7f00000000c0)="dc", 0x1}], 0x1, 0x3) write(r1, &(0x7f0000000400)="386083f54fe14770d79856b9600c17dee6d5df375a241d2caea7cefd1ece75d562bb756ac747a3430dec2872a64676cb19b7d744f4974a56e03ce2b3d9cec5cbdaae6cc6d85100415e644d53053e6811f9041c548db7426727621b177a281675a098d7115a667da0d79ee4b3b58726317f5df6c19d5e675dfd878b59bb90f09ee163a9a5a9e80fd161c0a347f9ea0436d2334ca3", 0x94) close(r7) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r9 = socket(0x2, 0x3, 0x100000001) setsockopt(r9, 0xff, 0x1, &(0x7f0000000100)='O', 0x1) connect$inet(r8, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r8, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000780)="92", 0x1}, {&(0x7f00000004c0)="a62dab6ddfa1eb2f4c2bee82fef0a5122d677e41e5f9a16ad052a71be02b56ee2e9eb9109c03684bde89b2792101af51350d86667728f47c54361e8270f129b5f970fb9725aa5414e451e6c2151d7ad32c6d046f1906fcd426b9d387f900d7c937e923b9849ce5443eebb5e8cbd86ed7fb8350c45584bdb57cf54fd62bc839db7de526", 0x83}, {&(0x7f00000009c0)="e3", 0x1}, {&(0x7f0000000b80)='X', 0x1}, {&(0x7f0000000c80)='_', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000140)="4cf10d93b8060000c50e5c606e3931de000000", 0x13}, {&(0x7f0000001f40)="2ae0a79f886ac8fd105493a2585ebcaf5142ac47ae6624d854c0126b1229c57735ceeffa23ad416df2d58615e69565387f3847c32160cdd68811ccf2e3e56c2457a07581d6a5bd7d1a756e13c4c86874df9a65e724f9480162cbd8864919a3658311e3738d1a558df6766a845840e4b903d84ed5ae604e47dedf8b5ba991d7b910a80eab67a9f8a77e8e7b893cda1733a543566b27a1178767d1cc01cc9efe17ebad47d8640d0fb3788ddafe8cdcf47cdfa6c4b4c061712fd454cdfd05fe54cc33", 0xc1}, {&(0x7f00000012c0)='t', 0x1}, {&(0x7f0000000d80)="dd", 0x1}, {&(0x7f0000001dc0)="81", 0x1}], 0x5}}], 0x2, 0x4008440) splice(r6, 0x0, r7, 0x0, 0x10500, 0x0) socket$kcm(0x10, 0x2, 0x0) 5m16.160401663s ago: executing program 4 (id=229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x50, 0x2, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 5m15.76909464s ago: executing program 32 (id=229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x50, 0x2, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 5m15.724431229s ago: executing program 2 (id=232): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="87002dbd7000000000001e0000000a0004007770616e300000000800010007"], 0x28}, 0x1, 0x0, 0x0, 0x4040025}, 0x4024044) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 5m15.598299622s ago: executing program 33 (id=232): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="87002dbd7000000000001e0000000a0004007770616e300000000800010007"], 0x28}, 0x1, 0x0, 0x0, 0x4040025}, 0x4024044) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 1.808449084s ago: executing program 3 (id=3709): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) (rerun: 32) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r5, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x42, &(0x7f0000000600)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @local, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, @dev, @empty}}}}}}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x200048c0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="88020000", @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty}, 0x1c) (async) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, 0x0, 0x0) (async, rerun: 64) setsockopt$sock_int(r10, 0x1, 0x8, 0x0, 0x0) (rerun: 64) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r11) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, r12, 0x1, 0x0, 0x0, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x7}]}, 0x30}, 0x1, 0xffffffff00000003}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21000028}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xc8, r12, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:useradd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hald_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:crontab_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:zero_device_t:s0\x00'}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}]}, 0x34}}, 0x0) (rerun: 32) 1.722017421s ago: executing program 1 (id=3711): bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0), r1) (async) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x0, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x87546fd6a18b2a0d}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)=""/225, 0xe1}], 0x1}, 0x40020123) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x44}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x1) (async) r4 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x547b31180522e14c}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe4) (async) connect$inet6(r4, &(0x7f00000000c0), 0x1c) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000240)=ANY=[], 0x0}, 0xac) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100001d, 0x4008031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) (async) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="0bc3a6168654", 0x6}, {&(0x7f0000000a80)='\x00\x00\x00egS!\x00', 0x8}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000001c0)={r4, 0x2, 0x2, 0xd49}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) sendmsg$NL80211_CMD_SET_QOS_MAP(r8, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000061c", @ANYRESDEC=r7, @ANYRESHEX=0x0], 0x80}, 0x1, 0x0, 0x0, 0x845}, 0x44094) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840), 0x4) 1.589237754s ago: executing program 3 (id=3713): socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f00000003c0)='V', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) close(r1) 1.512060826s ago: executing program 1 (id=3716): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) pselect6(0x40, &(0x7f0000000000)={0x4, 0x1, 0x3, 0x66, 0x3, 0x40, 0x494, 0xea}, &(0x7f00000000c0)={0xd73, 0xbb4, 0x4, 0x200, 0x6, 0x3, 0xc}, &(0x7f0000000100)={0xc, 0x0, 0x6, 0x6, 0x250, 0x3, 0x8}, &(0x7f0000000140), &(0x7f0000000280)={&(0x7f0000000240)={[0x5f]}, 0x8}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newqdisc={0xe8, 0x24, 0x4ee4e6a52ff56541, 0x70bd6a, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xb}, {0x0, 0x2}}, [@TCA_STAB={0xc4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x9, 0x1, 0x6, 0x0, 0x9, 0x400, 0x2}}, {0x8, 0x2, [0x3, 0x265]}}, {{0x1c, 0x1, {0xc, 0x6, 0xf55a, 0x4, 0x1, 0x8ddb, 0xcb6a786, 0x3}}, {0xa, 0x2, [0x5, 0x8, 0xff]}}, {{0x1c, 0x1, {0x8, 0xec, 0xff1d, 0x8, 0x0, 0x3, 0x1000, 0x2}}, {0x8, 0x2, [0x3ff, 0x0]}}, {{0x1c, 0x1, {0x40, 0x9, 0x1, 0xe5, 0x2, 0x7f, 0x6, 0x3}}, {0xa, 0x2, [0xff, 0x40, 0x0]}}, {{0x1c, 0x1, {0x4, 0xfa, 0x7973, 0x1, 0x2, 0x3, 0x40, 0x4}}, {0xc, 0x2, [0x80, 0xc, 0x2f78, 0x2]}}]}]}, 0xe8}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xfffffffffffffe65, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xe, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x9}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="00010000", @ANYRES16=r7, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x15}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1fc}}, 0x0) 1.250025422s ago: executing program 3 (id=3718): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}}, 0x44080) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e22, 0x4, @mcast2, 0x9}}, 0x381, 0x4, 0x4ca1, 0x923, 0xa4}, &(0x7f0000000140)=0x98) (async, rerun: 64) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async, rerun: 64) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 1.236444717s ago: executing program 5 (id=3720): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611087000000000063013800000000009500098300000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x44, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x4, 0x4, 0x80}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0000000000008bdf0100d6b9aa5ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a0900000000000000b2e6b5397f7806b6ff846de37a34c8342bbac5a51eacf8a09cede8676044eafd3d7935f90651aa2d9c57276322b82e8976f5a4d980eaeb3b636630b810f2e200"/150, 0x96}, {&(0x7f0000000140)="0f227b27f1d3", 0x6}], 0x2, 0x0, 0x0, 0x84}, 0x8084) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @remote}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xe}}, "00016337fe9b1803"}}}}}, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) close(r3) r4 = getuid() sendmsg$nl_xfrm(r1, &(0x7f00000022c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002280)={&(0x7f0000000100)=@expire={0x217c, 0x18, 0x10, 0x70bd26, 0x25dfdbfd, {{{@in6=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e24, 0xcb8, 0x4e20, 0x5, 0x2, 0x20, 0x0, 0xc, 0x0, r4}, {@in6=@private2, 0x4d3, 0x32}, @in=@remote, {0xfffffffffffffffe, 0x9, 0x400, 0x4, 0x101, 0x73a3, 0x0, 0x2}, {0xee11, 0x5, 0x5, 0x2}, {0x5, 0x9, 0x1}, 0x70bd27, 0x3503, 0xa, 0x0, 0x4, 0x1}, 0x1f}, [@encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0x4e21, @in=@rand_addr=0x64010102}}, @algo_aead={0x104c, 0x12, {{'morus1280-sse2\x00'}, 0x8000, 0x180, "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"}}, @replay_val={0x10, 0xa, {0x70bd27, 0x70bd2b}}, @sec_ctx={0x100c, 0x8, {0x1008, 0x8, 0x1, 0x7d, 0x1000, "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"}}]}, 0x217c}, 0x1, 0x0, 0x0, 0x4040}, 0xc800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611087000000000063013800000000009500098300000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x44, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x4, 0x4, 0x80}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) (async) recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) (async) sendmsg$tipc(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0000000000008bdf0100d6b9aa5ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a0900000000000000b2e6b5397f7806b6ff846de37a34c8342bbac5a51eacf8a09cede8676044eafd3d7935f90651aa2d9c57276322b82e8976f5a4d980eaeb3b636630b810f2e200"/150, 0x96}, {&(0x7f0000000140)="0f227b27f1d3", 0x6}], 0x2, 0x0, 0x0, 0x84}, 0x8084) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @remote}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xe}}, "00016337fe9b1803"}}}}}, 0x0) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) (async) close(r3) (async) getuid() (async) sendmsg$nl_xfrm(r1, &(0x7f00000022c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002280)={&(0x7f0000000100)=@expire={0x217c, 0x18, 0x10, 0x70bd26, 0x25dfdbfd, {{{@in6=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e24, 0xcb8, 0x4e20, 0x5, 0x2, 0x20, 0x0, 0xc, 0x0, r4}, {@in6=@private2, 0x4d3, 0x32}, @in=@remote, {0xfffffffffffffffe, 0x9, 0x400, 0x4, 0x101, 0x73a3, 0x0, 0x2}, {0xee11, 0x5, 0x5, 0x2}, {0x5, 0x9, 0x1}, 0x70bd27, 0x3503, 0xa, 0x0, 0x4, 0x1}, 0x1f}, [@encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0x4e21, @in=@rand_addr=0x64010102}}, @algo_aead={0x104c, 0x12, {{'morus1280-sse2\x00'}, 0x8000, 0x180, "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"}}, @replay_val={0x10, 0xa, {0x70bd27, 0x70bd2b}}, @sec_ctx={0x100c, 0x8, {0x1008, 0x8, 0x1, 0x7d, 0x1000, "fd52f0e31e63862e2c6b3a47e914035178ac90f0b71162eff1a8507f8cf359aa5f5d21a9275c3b158ff920f138bdc85b995f962add1b3c38d783e9487b8d3e0a1612fd41a8aa57d9f1684831f96c86ea875589ccdd38c121c786624845a00b691896c90ac1748735b9582daa52149655f37a2881f1baaec503ce98176c07df906a3dd8371948ad9550e911da5ef074ee57264ce12d4cf53bbd8d9ff6a86c006ef82e75f9b18fc1449c796ac032ef1779a786176abd3c0a70589fcb9826dd5ad3787343ff6ae4083313f9e9f243e6d9904ef5a79958bc63b7fab1440b6f478d6ae70e9a58512f9777e88e0a281e62f67ef4d4a82c6e25da7527a4e5e40fbb51224d9a2c93a12948a86ea1ca80162a388aafc4707637c165f8fcc46e84e171edde8a811cfd44bdabb440285076b42292f8b3531a90b2f55162b6588806707e602d23f36b1c306b6c2de11c4c2af456d552424307d8e9c34c8f403af134021a1c6f1afc544a93de0a593cbce5a6432a6ba5987ccdbb6d384c64c70344456b0e0caf18453512fbb222c68f61892f83236cbedc03d6621e65d2c6ee248db017e859668eea04606ccb8d306d42c6e7182c326abd50c3eabcd8b35ce287ead24798d77673215612bfe49c712a165578b96cc35bd8038e0154a5442819a10fc7eda611a964f869bf4a73e77bff725216b8516724be76561d7efbb147e3349b7d2e8a748e85050304dfeae7632b606c5f25e4041286dff9e787d04f11ef75e13d9a70897766aba185f5f455506975fb41d6ecd5247e542982e73439ab4f24a47a7e2f5237f96ede2b5e5ff081fcca9a4d167b44d811c65cd49fbf89e9757b1db58f8ea5d3a53327253c70f178fa7a82db48056b941cabec0c5cf5cefb028c3c719a9dd4ca02ba26f518a84ddc5ee8f57d03346aa50fae6f122e38ebfa4978aa04bdc12e82d1d9457f0d753ec42e3756861c9ed2e0bc17b7e1982dec55b7cf8a0c8723964b01865a855f440d6db50f313ce6ddedcaf19ba347cc6ea9a03fc22dc27f98fd2e99b03aa74a013b95112b7b6eb8619468cfb1da970c3faea5089f69fa83b8bf6052337007ac3f3f4dc04ef5cd6d46031b159c6fc041e95a4002f6f9933c7fb77c86c9df63cc9003630bd86824237400d76d0d45f94159ac4f01ad806b896357bc3319ad7ab17fac22395a4dc2dc75ae470ca29a4d5038d51825e1afa908679d91723e59fefee868f88b40fb34dfc719559715a95fe7a168ed3d69ff634d36e4f61538a831c908a90e235202f0932c95881d1c4ad9ea690a0334e6ee66fb63618e997acba07e9b65cc1696a39e5b921470c6d8b22f4259057eff206c58a1380deddc11614ac0a28728129c76ce36f2c92ec8cf42c7bdaba8d571fa559d4bf38d060f26ae9ffaee343902c8f2b0e5eb57da326f13590c1dc829ba9edb925711c82353d3124662996f1ce7cf868127b6237db0151e2de0609c21d5aa203d6645bc763d6baf2fa5de5a8557576fb20000db907f14cb340911b81d041b9f55cb341d65cfd6cd8f6c29d5abc254c339bcf187153389362b7663c68f57d5d87b4c5004334c0fa67937389c00789241d58e0c7a23716c25e1ce4ef9576d6c7d96a4683f8000389b9f543cf2d16238abd550225b624a3fbb8f6503b3f833c7cd8120e6648ff6fc48a839dbeb06cecf3405e13f3b7254f64f6b5f0785db48344b322d0165b9a4edfdee9f34d200f881fcb45e0dcd2a98c81dbe408f9d89b54e0e116b0bbdcce9eec45a700a8706bd667758d1b5999cb47f38dcd7e6e97eb1accdaf72136e28b478ee20cf4be2f7611025f83029f1853a0ab5aa744eef26ec72dc0ea5bd0125040b9a7d71edcd523107e7071a540fad11e0b27b9d4e7e9a478419ee4bfd2e7540babb153644a6ca48808958b7609ded16aa6edace1bcedd4a2b4f47f27b51d949a391e36bb5b186de4ca345c1506b19d0bcd0e86392789ef772257e55468900ed50cff271d1b10530d691a00aa53fac8e4532dcf8008cf47fe3a33438a7df8e7bf7b96d0e1126ed538089a9f7cf2d7031914a98e10ef311e87d793c6d7fd0aeb1adf44d53c7ff101b43692af94757fdcf4d4de59008220f69f7e449eb4204e36241fae7c6e99dc1dcb83fa13d0194dae934c8afc47a0ebcedaccc72bc324332177f20b7783db2ff14554b29428784350067a7317ad4c9e118cd69c7313e17ce969c55764dfb7701c3634013006fecc9f446d3582919c23e4d87a533faa85a1fd4c080ad6ad28780633a35ffdaa2d860e55414c832fe6e61692412e0698083f0c029f1d0733e38b5add1ad77fd15f901ef68d0724308d78731ff89098a7ec6a8847feb75c6bd18d0f66624257e30d60915b885d9032aefb620cf2b5cd5280a0f835cd49f06cdac4e48431c6025c0bd1218b2232fd0d5a17dc22bfcd6fafb037a7fd80a82d07e0e6ba429520849e7a3421ad78fc29b4d1e6d7d98d90e9338c857366aeda12282d9854814cc356c46a54f221ed15feb7ae2d188a9396088a2918ad731dd018aaf81dd8c21b1aeb2f7a5982866eb7fbefd18fa345f87792ba7402922fe5647654cd5c2621482c7d5fe69b097b35a9505eb842c50d174ac1ebd3bd6b8b8a14363b12080a5c4df77e993440e9f0c9d58935350392d31e9a81349cb8cd9d474e41314f6cf728f1c430a5a05bdfb76d3651f626525288adf5335fe3afd0d89e64160115a098e1906a45d9a2bd88937fb89c345585f5410557023ada617c4d0cebb1da9f43736aa27e3bd731521baf136a3bbd4abf77a988a0edb769a07b5aa958ee5825b7fca6670bd266614d33650c06e14491c06dec9a7a84ed3e89093eac900944d524e430e39e4b3d3e5569d6847e5a2ae765968ec4805dc4bd52047dc8be071116735521253312fb612c21c22c9be0f7dc1695a055e1e2e83a657451db33e46be0d333e9e8a81c182a50f7770e4e64f875c3eb9465e6d0ad9e2cbf1919b217fa3ac60e49073b2aeb298250a806865bd716d0e2c72379caa2dc65b8ebfc415954653648e795b2b2f987ecbf38005efb8ddf50e9cdb564e8222299b5a51ec216096642888689de0c222c82f44e0e10f5b234fa790344c014cb7baff980ae4655b4bc6bb9a89102f13fb0e8b6bd89900ba8c0b5d5c498b91634063d64aabc1a9e1f38a59c9280f8824d578896f861dd996bd098d7f5370fb3bec0f995322c5872b2c19136c03ef26d925dcfd4918c3cc2b8303731e6f6b0e0cbee368b271084db24ffdbf9c854c6ec69a5deed36a0c5cb5138e2a604ee84d2d3330929a26a49a3c1de96593ad0da706d1c5c12ed5e04f8b652b8bcc18ac1dba89d9db7a64110669280da552867ccab3af2805eac2f0869b6174350a1ef0fc543f3d7057e781f2153f4efa30de21e99350c5eec2793f8212ae4088c316f286d370c1a1ca49c76b3c8e9f57221ea32b4debd2c04fb5e6f10de5c2b4fafd15bc9efef881e8e52344c07ca3f56c70ac359491c65a0c356277b9ab84f3ed83312378de88e75fdfbcad15b05b7dec798d96ec68fe5f4c1e11e00c4718b2e3a87b44865fd2861255c77deaf1c698a685f8cd9667c599d04eab89cd848c6d23c17313d37f3ca1ce18d4e1761fbb3a1e4652288122e09d59e915c4215e467857279428e560a1139969f8f1de10925891d10c0fb3420766e25b95b9e35924c72f3a555c7aee6258abf7d6749ddeb46f9905fc60f09fdf7744c149b3b5df8275919b8c581689d06fe175a262970397c6475d4f20b26702599221a69070d6a8a9ff8efd4f6d3aa70b0c76b8864120e27f264e97b30878803811ae3016f398cc599e808bad042fb7c451ead66694b946a7446dafc46f36240301504ae1b62e8ad067a40c56625aed551ad04bf7be0c0f136d48af61bcf6a97c6765cf758a0bbef85943c710b9150458b039407277706fa11b81883d664f8f1666f46422a0399957cdf386458550675da3b5b406d4934026f733f1860fe10ba77967198e6e817d1884a9d8b668e5f82a491a93f7b7acb70fa067afb9fd5dea1099b6428fafe89e12ac01cd48fcc3db5a89a8e3c1e6fd6c90ca1f602e8157ecab716fc301f8a152d3df0414091ed30792e84d0ffc02b39f1efbdd0a53f37477a3d9edd25775262ef81530ab7c54e3f99d8036bbe3ae5a3c3b570d36032032fbd5e0ecc543ec6dabae97d26b513de254fa9c22b4993f003d1fe01a4b3f5d2d35a187417072c809ef50c535690403ada77bea834360200528bbae888da0a62749afcf59535ea6fe94d3295fce82d17d9873c62fd10b032a63e116fc6e14fb8cd5530d972b4d573925699f303e263c5ed077fb8a39259f442f06c879281bd64caa7493052c6db259872daa2957696498c86b8736152e3fcaff69911140c41f674545495afb9f3ed05e9bb81bab3619cfe4fc6661332c8176814497a5cf63afc15caba93431b045726b90523e3234aebdf8bac445513a21b4db701a322d962bfe71607bfe11315a492bf7458f06efb49487100cd2dfb168087fbfca213f5fbe5b4adcf815ef9f3dd3226b76ad6ab1f2828ba7cdb6616222a1dc45b494325cf11c5998bce6d66a79c176cfbb6c7361c82d9c161729a408765fd037ae15561c6c06073a9c9114b437c9ae284aabd8fbdb4e32552587e0947e887eba21c013d7fb51b6a921f646c4a4d0840261a2aa7344b350273ee4fdc0079ee169d74ff4ad5d6061d2c8466bef53291496aad5cf8b76c3a2c444dffdea79c26df475598b13600e1430d056aca039fdc258ad5821f9da24c0f67e89cc7210ae72791c41591285a8e64af1cb84d3661acd4e381eea55b3171fff615e3a0643859962c444c44215b9647222ddd4bfbb9ecc5f1af2e8967c2329ba7b0ff5c9dd1259cb5ef449034d9ea521c64e628e99061a2bc197693b229ab5d385dbd7d59caa63ed8bd7dceb08de2efd1790b75a047475bc49c99d5030f8af42e6cbe3d91d18e071adc5c067d540d07604e981192ea458e5675992aaff66a388715875c30e7304063680aff82dd7241342ebcbcc012936168c8d1250b9504b53ccd68f86c5e2ef641cade207a07955d769af57c5c9f6eea69f4153f85b05dc4c560ba78cf47ce5c21f387576b3c073711e983da3e90e95965443dc5c91f881da60a161b0ca9dded9541b6d1d85af77ce8daad624ac351811aa5b689671561fe1d52af02318952096c76039c1a15e8bb3048ecbed60cbb2448c1bae29dade24eca9370b1389bb085d715ab708fdc169731577af34993cad11e70a2a62d3319a0c82fa7be3041a4bb1d090fa19fd7e465f07b78b1c48073ab62bbe0b8aa90199f24268cbd80edfe48fee775fc84fa2592b40f7fd3e22480f2601b3b474fb5d51dd48e39bea21ad642206a7b8500549429c9e61f7b29631df7bb4a032a17bb97ef1c9a34eed6dde6eebaabfea036d13e9083aa24008483bb1abd1900eab343d906c010db7cd25992d9dbcf55dbffe623f79de6bc0de55a3a42f6ef73351c5e51598f9fe2dbb2b68c8b757681ad8ad47a2a3d0a76605804e9f407bff8fb1d0d5d6b6b28b6addc28e9fef609e09c5f7d329e828401a444d2c2ccb6b97ecb0854423d092017945afcdbf279e172e0f37ef0ff54256d845104c13b5b69353912cbdb7e7fce1eabfe20cb5ca53411cb00ab97c8cd706cee1fed26984cfbbe5ae301c7da7bd42becfa1e26afffbf00021440e74bcd016288777db3ffe82d70ddbeb795cd53a36c0da507c136e1b4ab60212a17e172caa7134f13bd925ba70e3daebbb1cc7"}}]}, 0x217c}, 0x1, 0x0, 0x0, 0x4040}, 0xc800) (async) 1.166823883s ago: executing program 6 (id=3721): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="5ef79b3fa0bf41d33620904120615b6230bd91258337bb9a8842a8251e7f95c1c324709fc1fa44ea701ec5dddd6153ac1e09a48ee7fa536922467d7dfcce92301a79e290d289a018835e88b799264296"], 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)=@newtclass={0x40, 0x28, 0x4, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xe, 0xfff1}, {0xfff1, 0xfffe}}, [@tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x3, 0x2}}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x9524b208f8b8a974}, 0x20000000) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000980)=@newqdisc={0x600, 0x24, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x8, 0xffff}, {0xf, 0x2}, {0xc, 0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x25f8000}, @qdisc_kind_options=@q_tbf={{0x8}, {0x448, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x63c2ed503d58caf7}, @TCA_TBF_RATE64={0xc, 0x4, 0xb7ede9a7c763e26}, @TCA_TBF_PTAB={0x404, 0x3, [0x1, 0x3, 0x1, 0x88b, 0x5, 0x92a, 0x0, 0x2, 0x3, 0x22, 0x1, 0x4, 0x5, 0x5, 0x4, 0x1, 0x0, 0x2, 0x400, 0x89, 0x3, 0x1, 0x1c, 0x27e6, 0x63c, 0x6, 0x526, 0x1, 0x0, 0x1, 0x9, 0x1, 0x3, 0x8, 0x8, 0x2, 0x2, 0x5, 0x55, 0x2, 0x3, 0x1, 0x8000, 0x7, 0xe96b, 0x7, 0x7, 0x6, 0x5, 0x10001, 0x2, 0xa1, 0x7, 0x1, 0x4, 0x1, 0x0, 0xdf8e, 0x697ec19f, 0x4, 0x6, 0xa, 0xfff, 0x85af, 0x1, 0x2, 0x2, 0xe06, 0x5, 0x9, 0x1, 0x0, 0x1, 0x16, 0x9, 0xfe, 0xa3, 0x800, 0x3ff, 0x800, 0xc, 0xb72, 0x1, 0x8, 0x3, 0x8, 0x3, 0x401, 0x4, 0x8000, 0x4de0, 0x5, 0xfffffff8, 0x1800000, 0x8, 0x7ff, 0x8, 0x6, 0x0, 0xd9, 0x8000, 0x9, 0x4, 0x43a, 0x2, 0x2, 0x7, 0x9, 0x8000, 0x2b05, 0xa00, 0x8, 0xcc, 0x6a, 0x8, 0x10001, 0xfffc0000, 0x6, 0x9, 0x0, 0x6, 0x0, 0x5, 0x40, 0x1, 0xe, 0x6, 0x1000, 0x7, 0x29a, 0xfffffff8, 0x10000, 0x1ff, 0x80000000, 0x8, 0x40, 0x6, 0xb, 0x20000000, 0x0, 0x3, 0xe78, 0x1, 0x13e6, 0x10001, 0x5, 0x2, 0x5, 0xc, 0xd0e, 0x1, 0xfbffffff, 0xf, 0xed8, 0x2, 0xc7, 0x4, 0x2, 0x1, 0x4, 0x0, 0x0, 0x4, 0x5, 0x7, 0xe, 0xff, 0x5, 0x10, 0x92, 0x4, 0x9, 0x64, 0x7, 0x7, 0x8f, 0x7f, 0x5e9, 0x8, 0xe5f7, 0x2, 0x2, 0x7, 0x4, 0xffff, 0x31, 0x8, 0x8, 0x7, 0xe, 0x4, 0x1, 0x0, 0x100, 0x7, 0x6, 0x3, 0xfff, 0xfffffff9, 0x3, 0xfffffffb, 0x4, 0x7, 0x81, 0x6, 0x8, 0x6, 0x9, 0x8, 0x4, 0x3ff, 0x6, 0x5e000000, 0x1, 0x9, 0x3, 0x0, 0x101, 0x5, 0x1, 0x80000001, 0x5, 0x4d9, 0x3, 0x5, 0x9, 0x1ff, 0xa8b, 0x68, 0x200, 0x8, 0x1, 0x3, 0x7fffffff, 0x1, 0x4, 0x5, 0x0, 0x1f2c, 0x6, 0x4, 0x9, 0x32, 0x7, 0x3ff, 0x4, 0x6ae1e6e0, 0xb, 0xb, 0x7ff, 0x3, 0x3, 0x6, 0x6, 0x4, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0xd, 0x2, 0x45, 0x5, 0x9, 0x4}, {0x2d, 0x1, 0x6, 0x8, 0x5d3e}, 0x3, 0x9, 0xf90}}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_STAB={0x154, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x0, 0x0, 0x7, 0x2, 0xfff, 0x1, 0x4}}, {0xc, 0x2, [0x4, 0x0, 0x81, 0x6]}}, {{0x1c, 0x1, {0x8, 0xff, 0x7d, 0x1, 0x1, 0x1, 0x205, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0x9, 0x800, 0x2]}}, {{0x1c, 0x1, {0x3, 0x65, 0x7, 0x7fffffff, 0x0, 0xeb88, 0x7, 0x3}}, {0xa, 0x2, [0x7, 0x401, 0x1]}}, {{0x1c, 0x1, {0x3, 0x3, 0x9, 0x3, 0x2, 0x70, 0xfffffffd, 0x4}}, {0xc, 0x2, [0x4bc, 0x766, 0xf7, 0x5ef]}}, {{0x1c, 0x1, {0x9, 0xe8, 0x3, 0x323, 0x2, 0x5, 0x80000000, 0x2}}, {0x8, 0x2, [0x229f, 0x40]}}, {{0x1c, 0x1, {0x7e, 0xff, 0x0, 0x4cbd, 0x0, 0xae6, 0x7, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x8, 0xfb, 0x3, 0x4, 0x0, 0x80, 0x100, 0xa}}, {0x18, 0x2, [0x2, 0x4, 0x8001, 0x8, 0x2, 0x4, 0x497a, 0x4, 0x9ab, 0x2]}}, {{0x1c, 0x1, {0x8, 0x2, 0xb4, 0x2, 0x2, 0x4, 0x2, 0x8}}, {0x14, 0x2, [0x7, 0x8, 0x5, 0x4, 0x3, 0x34, 0x200, 0x7f]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x40}, @TCA_RATE={0x6, 0x5, {0xce, 0x85}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x80000001}]}, 0x600}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) syz_emit_ethernet(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r1, 0x0, 0x40) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 1.143453608s ago: executing program 0 (id=3722): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000040)="f0", &(0x7f0000000080)=""/13}, 0x20) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB="0000a300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1700000000000000008400000100000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r5, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040), 0x10) (async) listen(r6, 0x0) (async) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x20}, 0x8) (async) close(r7) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES64=r4, @ANYRES64=r3], 0x0}, 0x94) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r8, &(0x7f0000000000)="38000000010003", 0x7) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r9}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x4, 0x4, 0x4, 0x4}, 0x50) close(r10) 1.084490766s ago: executing program 3 (id=3723): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x8, 0x4, 0x2, 0x2, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x10, 0x0) getpeername$tipc(r6, &(0x7f0000000100), &(0x7f0000000180)=0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x4c, r7, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x5b}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) socket$nl_netfilter(0x10, 0x3, 0xc) 1.05962392s ago: executing program 5 (id=3724): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x1a4, r0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@broadcast}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_KEYS={0x168, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_SEQ={0x13, 0x4, "6e986fdda684cb19e87d6d3e4ee53d"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "08d8c48827d489a17448cf3d85"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a214ca63881ec62fd04a5057f2"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "485472d824"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "f0fc65b54d"}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_SEQ={0xb, 0x4, "2b8388af47effd"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0d3c8e4bd69ed5d74d8cac3563"}, @NL80211_KEY_DEFAULT={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x7, 0x4, "be3359"}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@bcast, @rose, @bcast, @netrom, @netrom, @rose, @bcast, @rose]}, &(0x7f0000000080)=0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}]}}, 0x0, 0x2e, 0x0, 0x1, 0x9}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000008000000000a80050008000300"/32], 0x38}}, 0x0) 1.019690641s ago: executing program 0 (id=3725): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x1c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x8, 0x1a, 0x0, 0x1, [@generic="2fe5afbf"]}]}, 0x1c}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000000708116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x240088c1) 1.018808062s ago: executing program 1 (id=3726): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x12}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40060d5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}}, 0x20044850) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x17c, r0, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_IE={0x20, 0x2a, [@ht={0x2d, 0x1a, {0x80, 0x1, 0x7, 0x0, {0x8000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x400, 0x800, 0x8}}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x2}, @NL80211_ATTR_KEYS={0x11c, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "154d69b882757f2c1d6cbc5e8b"}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "0c920dcfaa"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9feab383dcd89a8c2aee931bb1"}, @NL80211_KEY_DEFAULT={0x4}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0xb, 0x4, "906c69d3e179e6"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_SEQ={0x11, 0x4, "26b60b729a426e2c74335f5c37"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "e9c698d0b48856ed4f4369e5b3"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "86fbf49bfc9dae16481c3fb0e2"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x14, 0x4, "571f55437026eca665e31edfefb4c65c"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x6, 0x4, "9b53"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b901c67c12"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "45056146277e3e5f9fc19b9a5a"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xe}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1040}, 0x44) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r1) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x134, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x134}, 0x1, 0x0, 0x0, 0x40}, 0x40040d0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000700)={'pimreg1\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000780), r1) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x1001) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x68, r2, 0x2, 0x70bd28, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}}, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x64, 0x0, 0x7, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xc1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xba}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xffffffffffffffff}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8d}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0xbb18bbdf5dac6cba}, 0x10000015) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, 0x5, 0x1, 0x701, 0x0, 0x0, {0x3, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x48094) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008010}, 0x4881) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000894}, 0x404c004) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000e80)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r6, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x80) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r8, &(0x7f0000000f80)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x10001}, 0x1c) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000fc0), r9) socket$inet6(0xa, 0x2, 0xffffe53e) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001000)="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", 0x1000}], 0x1, 0x0, 0x0, 0x8000}, 0x10) getsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000002080), &(0x7f00000020c0)=0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000002340)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002300)={&(0x7f0000002140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x160, 0x6, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x8000000000000000}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x84, 0x7, 0x1, 0x0, "34244487bac3578eb25fa9b508bfda7c0de782e582f953748188e28ff3063e494fe5efe72d53cab8272a57cccc35fda829975d42f15f66976835e3a868046a8f931c0ca2ff10090b332710180a9aa16787feb6d7bdd826b597f1c3940d77d23e63b69aacbbb59cdbd774aba4ee689ff7acc8a3268490ec2f06f5bb8cb96d97b8"}, @NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x44, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x48}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x1a8}, 0x1, 0x0, 0x0, 0x44081}, 0x20040080) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x2c, r0, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3}, @NL80211_ATTR_BSS_BASIC_RATES={0x10, 0x24, [{0x6, 0x1}, {0x48}, {0x1b, 0x1}, {0xc}, {0x1}, {0x2}, {0xc, 0x1}, {0xc, 0x1}, {0x6}, {}, {0x24, 0x1}, {0x60, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000040) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000002780)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002740)={&(0x7f0000002500)={0x230, r0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x14, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ibss={0x6, 0x2, 0xffff}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}}]}, @NL80211_ATTR_BEACON_TAIL={0x7c, 0xf, [@ssid={0x0, 0x6, @default_ap_ssid}, @chsw_timing={0x68, 0x4, {0x9, 0x101}}, @mic={0x8c, 0x10, {0xc75, "abe09337fd69", @short="1951b21c0313d0b4"}}, @challenge={0x10, 0x1, 0x53}, @measure_req={0x26, 0x49, {0x6, 0x3, 0x2d, "65616841def5cf9c4d9d30840a6ab14f605d5aaea80a42bb7fff19ba5cf24eee8b276159b867ade1daf626c8f878fd84cbdc0db395c2f7eb7fee2e8eba54c409b3e0205a629c"}}, @ibss={0x6, 0x2, 0xe6}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xfb, 0x38}}]}, @NL80211_ATTR_BEACON_TAIL={0x7d, 0xf, [@dsss={0x3, 0x1, 0xa}, @ibss={0x6, 0x2, 0xfff7}, @ssid={0x0, 0x6, @default_ap_ssid}, @peer_mgmt={0x75, 0x14, {0x1, 0x95b2, @void, @void, @val="ebd8787e1e078ba4791357684beb1474"}}, @supported_rates={0x1, 0x8, [{0x4}, {0x1, 0x1}, {0x9, 0x1}, {0x24}, {0x4, 0x1}, {0x3, 0x1}, {0x6}, {0x16, 0x1}]}, @cf={0x4, 0x6, {0x3, 0x1, 0xa132, 0x100}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x6, 0xb0, 0xf4}}, @mic={0x8c, 0x18, {0x8b8, "c034b74eb99b", @long="059100cbb118dcb3101f7450b8d54a2d"}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @peer_mgmt={0x75, 0x18, {0x0, 0x7, @val=0x10, @val=0x26, @val="5a8aa63c3cb5e3eaaaced2cee0be3926"}}]}, @NL80211_ATTR_IE={0xf6, 0x2a, [@perr={0x84, 0x48, {0x5, 0x4, [{{0x0, 0x1}, @device_a, 0x10000, @value=@broadcast, 0x3a}, {{0x0, 0x1}, @device_a, 0x0, @value, 0x36}, {{0x0, 0x1}, @device_a, 0x6b2, @value=@device_b, 0x39}, {{}, @device_b, 0x6, @void, 0xa}]}}, @random={0x7, 0x64, "fc709a4a23906a10c291da4aa86b4440d3511ce82c54ad045aa63e41146f7bd23e32bd29a3bce41f366f47280d22a35e487a719362da0f702bde8de7b8e5213a4dc7ce5e03603ef04138d00eef3a12edda25786ea1f7f87c32b31ade9697c8f5ca563fcc"}, @random={0x9, 0x1c, "4897318036df911051daf3b282ffa61ee49afd8fd64129cc4d7e3073"}, @ibss={0x6, 0x2, 0x5}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x8c, 0x1}}, @mic={0x8c, 0x18, {0x689, "9ac659bcbdf2", @long="a02b5c2f4031937c492a394f22929648"}}]}, @NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000004) 888.346039ms ago: executing program 6 (id=3727): r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000240)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c00030008000f00"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x8400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvtap0\x00'}, @IFLA_PROTO_DOWN={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000440)={{r0}, r2, 0x18, @unused=[0x5, 0x8001, 0x3, 0x8], @name="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"}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000001440)=@assoc_value, &(0x7f0000000100)=0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) (async) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0xd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x17, 0x32, 0x20, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}}]}, 0x28}}, 0x0) 868.94608ms ago: executing program 1 (id=3728): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x800000000000, 0x4, 0x40000000}, {}, 0x70bd25, 0x0, 0x2, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x14c}}, 0x4810) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000069000b00000000000000000000000000000000e7070001"], 0x20}, 0x1, 0x200000000000000}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x5, 0xb, 0x90e, 0x49, 0x5, 0x6ae9, 0x80, {0x0, @in6={{0xa, 0x4e21, 0x0, @mcast2, 0x4}}, 0x0, 0xff, 0x0, 0x7, 0x40}}, &(0x7f00000000c0)=0xb0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x800) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r3) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010025bd7000fedbdf251000000008000100", @ANYRES32=0x0, @ANYBLOB="050010000f000000"], 0x24}, 0x1, 0x0, 0x0, 0x4040850}, 0x20040880) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={r2, 0x11}, &(0x7f0000000140)=0x8) 861.440699ms ago: executing program 3 (id=3729): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r1, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r6, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg2\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) close(r7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x3, 0x2d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000480)=0xfffffffc) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000380)="00214717a70700000000030600710a5eeb9d0471200000000500000000000000ffff0342844d50e77d0dc450de49c204a803166580ac899c081cb49f1930e7d07fbdf3d8134e72158357ee37fdae", 0x4e}], 0x1, 0xee, 0x1) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001100)={0x38, r5, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x38}, 0x4, 0x700000000000000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x50}, 0x1, 0x0, 0x0, 0x26048004}, 0x0) 861.090737ms ago: executing program 5 (id=3730): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000640)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000001140)="c59a9693bd", 0x5}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000800)="931748ff", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={r3, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r3, 0x4) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x3, 0x7ab0715dca68fed7, 0xfffffffd, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x2, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) socket$alg(0x26, 0x5, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r5, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8080}, 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x4, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x3, 0xc6, 0x8006, 0x69, 0x6, 0x6, 0x2800000, 0xfffffff9, r3}, &(0x7f0000000380)=0x20) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f00000003c0)={r8, 0x200}, 0x8) 784.507633ms ago: executing program 0 (id=3731): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x4a}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e000100000005"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fddbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x460d4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000100000100"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000f"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x3, 0xffffffae, 0x1, @mcast2, @private0, 0x8000, 0x7800, 0x8b5, 0x3ff}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x61, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x19, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x18c, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8de}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x100, 0x3, 0xfe, 0x7}, {0xa, 0x7f, 0x7, 0x8001}, {0x4, 0x6, 0xa0, 0x8}, {0x3, 0x4, 0xf, 0x7}, {0x90, 0xd, 0x0, 0xe}, {0x6, 0xff, 0xf8, 0xffffffff}, {0xfdd, 0x4, 0x4, 0x6}, {0x4, 0x2, 0x0, 0x61b393ed}, {0x3, 0x7f, 0x0, 0x4}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}]}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 751.777321ms ago: executing program 6 (id=3732): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, 0x140f, 0x60ceaae1ef55e4c3, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x24}}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 529.745548ms ago: executing program 0 (id=3733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "4cb4fc4ba7906e8f58c2052fade1bc2c62cdeb7521cf85ee"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x42, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x73, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r6, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000940)={0x88, r7, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x50888}, 0x4000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x80, r4, 0x8, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x48090) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r9, 0x0) r10 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r10, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x27, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x4) sendmsg$tipc(r10, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r11, &(0x7f0000000800), 0x8) accept4(r9, 0x0, 0x0, 0x400000000000000) r12 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r12, 0x0, 0xca, &(0x7f0000000880)={0x1, 0x4, 0xff, 0x7, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0xe}, @loopback}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r13, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 472.512546ms ago: executing program 6 (id=3734): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f0000000a00)=""/229, 0xe5}], 0x4}, 0x100101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/131, 0x83}, {&(0x7f0000000340)=""/218, 0xda}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/104, 0x68}], 0x6}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x42}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r4}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, r4}, 0x38) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f0000000580)=[{r0, 0x2050}, {r2}, {r1}, {r1, 0x8000}, {0xffffffffffffffff, 0x2060}, {r3, 0x400a}, {r0, 0x220}, {0xffffffffffffffff, 0x8000}, {r0}], 0x9, &(0x7f00000002c0)={r5, r6+10000000}, &(0x7f0000000600)={[0x53]}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f0000000a00)=""/229, 0xe5}], 0x4}, 0x100101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/131, 0x83}, {&(0x7f0000000340)=""/218, 0xda}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/104, 0x68}], 0x6}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x42}, 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r4}, 0x4) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, r4}, 0x38) (async) clock_gettime(0x0, &(0x7f0000000100)) (async) ppoll(&(0x7f0000000580)=[{r0, 0x2050}, {r2}, {r1}, {r1, 0x8000}, {0xffffffffffffffff, 0x2060}, {r3, 0x400a}, {r0, 0x220}, {0xffffffffffffffff, 0x8000}, {r0}], 0x9, &(0x7f00000002c0)={r5, r6+10000000}, &(0x7f0000000600)={[0x53]}, 0x8) (async) 472.219506ms ago: executing program 1 (id=3735): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x14, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 468.847705ms ago: executing program 5 (id=3736): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="06000402d631f9fe"], 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x6}, 0x8) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) connect$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x24) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) sendmsg$kcm(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xfc41}], 0x1}, 0x40000) 273.654891ms ago: executing program 1 (id=3737): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$alg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="dcc4", 0x2}], 0x1, 0x0, 0x0, 0x40010}, 0x8020) r3 = epoll_create1(0x0) epoll_wait(r3, &(0x7f0000000080)=[{}], 0x1, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000800)="ca7a", 0x2}], 0x1) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmsg(r6, &(0x7f0000000700)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/153, 0x99}, {&(0x7f0000000380)=""/114, 0x72}, {&(0x7f0000000400)=""/180, 0xb4}, {&(0x7f0000000140)=""/56, 0x38}, {&(0x7f00000004c0)=""/152, 0x98}, {&(0x7f0000000580)=""/211, 0xd3}], 0x6}, 0x100) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r7, 0x65, 0x7, &(0x7f0000000040)=0x2, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x5, &(0x7f0000000000), 0x4) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x48, r4, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000) 244.094199ms ago: executing program 5 (id=3738): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2041) (async) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2041) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1}, @IFLA_GRE_IKEY={0x8, 0x4, 0x40000}]}}}]}, 0x48}}, 0x88890) 168.572891ms ago: executing program 0 (id=3739): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$kcm(0x2, 0xa, 0x84) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r0, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040800) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x880) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000680000c0012", 0x2e}], 0x1}, 0x0) 168.35105ms ago: executing program 6 (id=3740): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3, 0x0, 0xfffffffd}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1683}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="32096646e6a7"}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8, 0x10, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) 100.875997ms ago: executing program 0 (id=3741): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x0, 0x5, 0x5, 0x800000000000010, 0xa, 0x6, 0x0, 0x1000000000006}, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 71.682389ms ago: executing program 5 (id=3742): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async, rerun: 64) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x6) bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-neon\x00'}, 0x58) (async) socket$netlink(0x10, 0x3, 0xd39a3bb51f34ffcb) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f0000000040)=@bpq0, 0x10) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x10002, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffe0, 0xffff}, {0xc, 0x3}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0xb71, 0x7, 0x0, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8041}, 0x800) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x1e8, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcd3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x56c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa5a}]}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3555}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8, @empty, 0xd}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x10}, 0x4004) (async) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e26, 0xc, @local, 0x40}, {0xa, 0x4e23, 0x672, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfff}, 0x1, {[0x5, 0x200, 0x4, 0x4, 0x1, 0x405, 0x7, 0x4]}}, 0x5c) 558.416µs ago: executing program 6 (id=3743): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) (async, rerun: 64) r0 = socket(0x2, 0x3, 0xff) (rerun: 64) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x6501, 0x4) (async) sendto$inet(r0, &(0x7f00000002c0)="b401fcc8311bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{{0x1}, {0x4}}, {{0x2, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x1, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x1}}], 0x20) 0s ago: executing program 3 (id=3744): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x5, 0x4c3, 0x0, {}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, "d5bea2784d005b17"}}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x40040090) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): 6] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1962'. [ 223.172816][T13210] vlan2: entered promiscuous mode [ 223.276541][T13217] syzkaller0: entered promiscuous mode [ 223.282369][T13217] syzkaller0: entered allmulticast mode [ 223.366697][T13220] netlink: 'syz.1.1977': attribute type 1 has an invalid length. [ 223.443512][T13224] bond9: (slave bridge16): making interface the new active one [ 223.451980][T13224] bond9: (slave bridge16): Enslaving as an active interface with an up link [ 223.844084][T13245] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 223.851521][T13245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.506690][T13278] macvtap0: entered promiscuous mode [ 224.512024][T13278] macvtap0: entered allmulticast mode [ 224.521408][T13278] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 224.530587][T13278] team0: Device macvtap0 failed to register rx_handler [ 224.590561][T13283] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 224.787944][T13296] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 224.827001][T13296] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 225.865710][T13358] __nla_validate_parse: 13 callbacks suppressed [ 225.865729][T13358] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2019'. [ 225.984595][T13358] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2019'. [ 226.025827][T13370] dvmrp8: left allmulticast mode [ 226.098970][T13365] netlink: 'syz.0.2023': attribute type 3 has an invalid length. [ 226.283226][T13378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2026'. [ 227.148384][T13431] ip6erspan0: entered promiscuous mode [ 227.170365][T13431] ip6erspan0: entered allmulticast mode [ 227.220350][T13445] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2041'. [ 227.355425][T13449] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 227.586842][T13470] tipc: Enabling of bearer rejected, failed to enable media [ 227.617298][T13470] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2049'. [ 227.644470][T13470] tipc: Enabling of bearer rejected, failed to enable media [ 227.680386][T13425] infiniband syz1: set active [ 227.688093][T13425] infiniband syz1: added bond_slave_0 [ 227.771635][T13482] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2053'. [ 227.816902][T13483] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 227.868638][T13489] netlink: 'syz.5.2055': attribute type 30 has an invalid length. [ 227.897219][T13425] RDS/IB: syz1: added [ 227.921544][T13425] smc: adding ib device syz1 with port count 1 [ 227.932364][T13425] smc: ib device syz1 port 1 has pnetid [ 227.941523][T13491] netlink: 'syz.0.2054': attribute type 4 has an invalid length. [ 227.975524][T13495] netlink: 248 bytes leftover after parsing attributes in process `syz.5.2056'. [ 228.004567][T13494] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2054'. [ 228.173487][T13508] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2059'. [ 228.485251][T13526] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2061'. [ 228.846029][T13547] netlink: 'syz.3.2067': attribute type 1 has an invalid length. [ 228.927821][T13550] tipc: Enabling of bearer rejected, failed to enable media [ 229.507812][T13579] 8021q: VLANs not supported on ip_vti0 [ 229.658686][T13581] netlink: 'syz.3.2079': attribute type 1 has an invalid length. [ 229.689752][T13581] netlink: 'syz.3.2079': attribute type 1 has an invalid length. [ 230.112027][T13602] syzkaller0: mtu less than device minimum [ 230.191605][T13604] netlink: 'syz.0.2087': attribute type 21 has an invalid length. [ 230.227319][T13604] veth0: entered promiscuous mode [ 230.249989][T13603] veth0: left promiscuous mode [ 230.664657][T13631] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 231.088202][T13664] veth0_vlan: left promiscuous mode [ 231.092752][T13665] __nla_validate_parse: 8 callbacks suppressed [ 231.092769][T13665] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2104'. [ 231.094536][T13664] vlan0: entered promiscuous mode [ 231.117693][T13664] veth0_vlan: entered promiscuous mode [ 231.132816][T13665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2104'. [ 231.152599][T13664] vlan0: entered allmulticast mode [ 231.182022][T13664] veth0_vlan: entered allmulticast mode [ 231.710319][T13711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.904495][T13737] netlink: 'syz.3.2120': attribute type 10 has an invalid length. [ 231.912991][T13737] mac80211_hwsim hwsim6 : left allmulticast mode [ 232.094252][T13751] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2127'. [ 232.182581][T13757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2125'. [ 232.388995][T13764] lo speed is unknown, defaulting to 1000 [ 232.700355][T13786] IPv6: addrconf: prefix option has invalid lifetime [ 232.789628][T13791] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2140'. [ 232.886260][T13788] lo speed is unknown, defaulting to 1000 [ 232.913858][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2141'. [ 233.198183][T13799] lo speed is unknown, defaulting to 1000 [ 233.639068][T13804] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2143'. [ 233.651986][T13804] batadv_slave_1: entered promiscuous mode [ 233.683654][T13807] batadv_slave_1: left promiscuous mode [ 234.279473][T13818] sctp: [Deprecated]: syz.0.2147 (pid 13818) Use of int in max_burst socket option. [ 234.279473][T13818] Use struct sctp_assoc_value instead [ 235.225812][T13845] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.247901][T13846] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2156'. [ 235.400429][T13853] sctp: [Deprecated]: syz.3.2158 (pid 13853) Use of int in max_burst socket option. [ 235.400429][T13853] Use struct sctp_assoc_value instead [ 235.788651][T13884] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2168'. [ 235.995547][T13899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2173'. [ 236.011914][T13870] syz.0.2163 (13870) used greatest stack depth: 17864 bytes left [ 236.262716][T13913] netlink: 'syz.3.2177': attribute type 1 has an invalid length. [ 236.315437][T13912] netlink: 'syz.3.2177': attribute type 1 has an invalid length. [ 236.538156][T13937] __nla_validate_parse: 2 callbacks suppressed [ 236.538169][T13937] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2183'. [ 255.609071][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.314844][T13939] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 259.369157][T13945] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2187'. [ 259.394615][T13946] º: renamed from veth1_vlan (while UP) [ 259.428809][T13950] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2189'. [ 259.439873][T13950] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2189'. [ 259.551361][T13948] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2186'. [ 259.561477][T13951] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2187'. [ 259.607204][T13958] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 259.716101][T13964] sctp: [Deprecated]: syz.6.2193 (pid 13964) Use of int in maxseg socket option. [ 259.716101][T13964] Use struct sctp_assoc_value instead [ 259.818496][T13977] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2194'. [ 259.821973][T13976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2198'. [ 259.968770][T13987] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2196'. [ 259.998519][T13984] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2196'. [ 260.038424][T13992] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 260.166541][T13998] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 260.185841][T13999] syzkaller0: entered promiscuous mode [ 260.195692][T13999] syzkaller0: entered allmulticast mode [ 260.209739][T13999] netlink: 'syz.3.2203': attribute type 4 has an invalid length. [ 260.240141][T13999] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 260.490686][T14015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2210'. [ 260.762559][T14032] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 261.067742][T14057] netlink: 'syz.3.2225': attribute type 3 has an invalid length. [ 261.137236][T14065] netlink: 'syz.3.2227': attribute type 11 has an invalid length. [ 261.695683][T14102] netlink: 'syz.3.2235': attribute type 2 has an invalid length. [ 262.831612][T14176] batadv0: entered allmulticast mode [ 262.985976][T14189] syzkaller0: entered promiscuous mode [ 262.991515][T14189] syzkaller0: entered allmulticast mode [ 263.286594][T14209] C: renamed from lo [ 263.355678][T14212] netlink: 'syz.1.2257': attribute type 9 has an invalid length. [ 263.621903][T14226] 8021q: adding VLAN 0 to HW filter on device bond10 [ 263.670978][T14236] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 263.713620][T14237] macsec0: entered promiscuous mode [ 263.743100][T14237] macsec0: left promiscuous mode [ 263.753887][T14237] macsec0: left allmulticast mode [ 264.146934][T14268] lo speed is unknown, defaulting to 1000 [ 264.305925][T14280] syzkaller0: entered promiscuous mode [ 264.318153][T14280] syzkaller0: entered allmulticast mode [ 264.383964][T14284] netlink: 'syz.0.2280': attribute type 2 has an invalid length. [ 264.574465][T14290] __nla_validate_parse: 13 callbacks suppressed [ 264.574484][T14290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2282'. [ 264.591618][T14290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2282'. [ 265.053413][T14267] lo speed is unknown, defaulting to 1000 [ 265.153051][T14319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2290'. [ 265.291406][T14333] bridge0: port 1(ipvlan3) entered blocking state [ 265.308977][T14333] bridge0: port 1(ipvlan3) entered disabled state [ 265.329270][T14333] ipvlan3: entered allmulticast mode [ 265.339981][T14333] ipvlan3: left allmulticast mode [ 265.393286][T14339] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2298'. [ 265.476731][T14342] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2299'. [ 265.528763][T14341] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.547798][T14341] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2299'. [ 265.602277][T14346] xfrm1: entered allmulticast mode [ 265.742529][T14355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2304'. [ 265.756705][T14355] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2304'. [ 265.821138][T14358] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2306'. [ 265.998981][T14365] tipc: Enabled bearer , priority 0 [ 266.036769][T14365] syzkaller0: entered promiscuous mode [ 266.057449][T14365] syzkaller0: entered allmulticast mode [ 266.090359][T14365] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 266.268909][T14375] netlink: 'syz.5.2307': attribute type 1 has an invalid length. [ 266.269935][T14365] tipc: Resetting bearer [ 266.282559][T14375] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2307'. [ 266.292166][T14375] block nbd1: not configured, cannot reconfigure [ 266.332704][T14385] netlink: 'syz.6.2309': attribute type 4 has an invalid length. [ 266.358234][T14364] tipc: Resetting bearer [ 266.426390][T14364] tipc: Disabling bearer [ 266.541712][T14391] openvswitch: netlink: IP tunnel dst address not specified [ 267.240990][T14425] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 268.219553][T14460] block nbd1: Unsupported socket: shutdown callout must be supported. [ 269.542648][T14471] lo speed is unknown, defaulting to 1000 [ 269.819841][T14486] netlink: 'syz.3.2339': attribute type 11 has an invalid length. [ 269.844030][T14486] __nla_validate_parse: 3 callbacks suppressed [ 269.844046][T14486] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2339'. [ 269.870954][T14487] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 269.900027][T14487] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 270.202397][T14506] tipc: Enabled bearer , priority 0 [ 270.209828][T14506] syzkaller0: entered promiscuous mode [ 270.222212][T14506] syzkaller0: entered allmulticast mode [ 270.266409][T14506] tipc: Resetting bearer [ 270.410018][T14505] tipc: Resetting bearer [ 270.439809][T14505] tipc: Disabling bearer [ 270.616767][T14532] netlink: 'syz.3.2347': attribute type 2 has an invalid length. [ 270.627536][T14532] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2347'. [ 270.965758][T14554] netlink: 'syz.6.2358': attribute type 1 has an invalid length. [ 271.007315][T14554] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2358'. [ 271.037282][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2358'. [ 271.119535][T14560] lo speed is unknown, defaulting to 1000 [ 271.129594][T14554] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2358'. [ 271.334475][T14573] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 271.601463][T14586] openvswitch: netlink: IP tunnel dst address not specified [ 271.665318][T14593] net veth1_virt_wifi .: renamed from virt_wifi0 [ 271.835784][T14599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2365'. [ 271.934648][T14599] IPv6: sit2: Disabled Multicast RS [ 271.940968][T14599] sit2: entered allmulticast mode [ 272.042970][T14609] tipc: Enabling of bearer rejected, failed to enable media [ 272.158215][T14615] netlink: 'syz.5.2368': attribute type 1 has an invalid length. [ 272.166538][T14615] netlink: 216 bytes leftover after parsing attributes in process `syz.5.2368'. [ 272.423304][T14631] netlink: 'syz.6.2374': attribute type 4 has an invalid length. [ 272.482038][T14638] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2375'. [ 273.025965][T14663] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2382'. [ 273.367896][T14671] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2385'. [ 273.517787][T14677] netlink: 'syz.6.2387': attribute type 33 has an invalid length. [ 273.728248][T14686] syzkaller1: entered promiscuous mode [ 273.739150][T14686] syzkaller1: entered allmulticast mode [ 273.759512][T14682] lo speed is unknown, defaulting to 1000 [ 273.803802][ T5951] IPVS: starting estimator thread 0... [ 273.894143][T14694] IPVS: using max 29 ests per chain, 69600 per kthread [ 274.195653][T14719] atomic_op ffff888078c07998 conn xmit_atomic 0000000000000000 [ 274.195852][T14720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.223138][T14720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.467848][T14730] netlink: 'syz.3.2401': attribute type 1 has an invalid length. [ 274.499403][ T6849] IPVS: starting estimator thread 0... [ 274.603726][T14731] IPVS: using max 24 ests per chain, 57600 per kthread [ 274.736465][T14739] pimreg: entered allmulticast mode [ 275.022263][T14755] __nla_validate_parse: 3 callbacks suppressed [ 275.022282][T14755] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2411'. [ 275.054491][T14756] team0: Device gtp0 is of different type [ 275.173261][T14755] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.182792][T14755] bond_slave_0: left promiscuous mode [ 275.196594][T14755] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.207781][T14755] bond_slave_1: left promiscuous mode [ 275.221277][T14755] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 275.234728][T14755] bridge_slave_1: left promiscuous mode [ 275.241745][T14755] bond0 (unregistering): Released all slaves [ 275.275404][ T6861] syz1: Port: 1 Link DOWN [ 275.401176][T14775] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2416'. [ 275.742644][T14791] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 275.742644][T14790] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 275.867542][T14797] syz.3.2424: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 275.891923][T14797] CPU: 0 UID: 0 PID: 14797 Comm: syz.3.2424 Not tainted syzkaller #0 PREEMPT(full) [ 275.891949][T14797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 275.891971][T14797] Call Trace: [ 275.891979][T14797] [ 275.891987][T14797] dump_stack_lvl+0x189/0x250 [ 275.892019][T14797] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.892043][T14797] ? __pfx__printk+0x10/0x10 [ 275.892071][T14797] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 275.892095][T14797] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 275.892117][T14797] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 275.892140][T14797] warn_alloc+0x214/0x310 [ 275.892169][T14797] ? stack_depot_save_flags+0x40/0x860 [ 275.892201][T14797] ? __pfx_warn_alloc+0x10/0x10 [ 275.892230][T14797] ? kasan_save_track+0x4f/0x80 [ 275.892256][T14797] ? xskq_create+0x56/0x170 [ 275.892274][T14797] ? xsk_init_queue+0xb0/0x110 [ 275.892290][T14797] ? xsk_setsockopt+0x4dc/0x8d0 [ 275.892322][T14797] ? do_sock_setsockopt+0x179/0x1b0 [ 275.892345][T14797] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 275.892367][T14797] ? do_syscall_64+0xfa/0x3b0 [ 275.892387][T14797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.892415][T14797] __vmalloc_node_range_noprof+0x125/0x12f0 [ 275.892484][T14797] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 275.892521][T14797] ? __kasan_kmalloc+0x93/0xb0 [ 275.892550][T14797] vmalloc_user_noprof+0xad/0xf0 [ 275.892579][T14797] ? xskq_create+0xbf/0x170 [ 275.892599][T14797] xskq_create+0xbf/0x170 [ 275.892622][T14797] xsk_init_queue+0xb0/0x110 [ 275.892645][T14797] xsk_setsockopt+0x4dc/0x8d0 [ 275.892678][T14797] ? __pfx_xsk_setsockopt+0x10/0x10 [ 275.892708][T14797] ? __pfx_aa_sk_perm+0x10/0x10 [ 275.892742][T14797] ? aa_sock_opt_perm+0xff/0x1b0 [ 275.892766][T14797] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 275.892787][T14797] ? __pfx_xsk_setsockopt+0x10/0x10 [ 275.892818][T14797] do_sock_setsockopt+0x179/0x1b0 [ 275.892844][T14797] __x64_sys_setsockopt+0x13f/0x1b0 [ 275.892873][T14797] do_syscall_64+0xfa/0x3b0 [ 275.892893][T14797] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.892913][T14797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.892933][T14797] ? clear_bhb_loop+0x60/0xb0 [ 275.892956][T14797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.892976][T14797] RIP: 0033:0x7f7fce58eec9 [ 275.892993][T14797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.893012][T14797] RSP: 002b:00007f7fcf3ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 275.893032][T14797] RAX: ffffffffffffffda RBX: 00007f7fce7e5fa0 RCX: 00007f7fce58eec9 [ 275.893047][T14797] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 275.893059][T14797] RBP: 00007f7fce611f91 R08: 0000000000000004 R09: 0000000000000000 [ 275.893072][T14797] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.893084][T14797] R13: 00007f7fce7e6038 R14: 00007f7fce7e5fa0 R15: 00007ffe557c06f8 [ 275.893117][T14797] [ 275.893125][T14797] Mem-Info: [ 275.916585][T14794] netlink: 'syz.5.2421': attribute type 1 has an invalid length. [ 275.931846][T14797] active_anon:4001 inactive_anon:0 isolated_anon:0 [ 275.931846][T14797] active_file:3022 inactive_file:39951 isolated_file:0 [ 275.931846][T14797] unevictable:768 dirty:47 writeback:0 [ 275.931846][T14797] slab_reclaimable:12502 slab_unreclaimable:108858 [ 275.931846][T14797] mapped:28957 shmem:1379 pagetables:1198 [ 275.931846][T14797] sec_pagetables:0 bounce:0 [ 275.931846][T14797] kernel_misc_reclaimable:0 [ 275.931846][T14797] free:1313401 free_pcp:14126 free_cma:0 [ 276.180657][T14794] bond7: entered promiscuous mode [ 276.186120][T14797] Node 0 active_anon:17404kB inactive_anon:0kB active_file:12088kB inactive_file:159604kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115828kB dirty:184kB writeback:0kB shmem:5280kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14684kB pagetables:4656kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 276.192624][T14805] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2421'. [ 276.199844][T14797] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 276.199896][T14797] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 276.199955][T14797] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 276.200001][T14797] Node 0 DMA32 free:1343120kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17456kB inactive_anon:0kB active_file:12088kB inactive_file:158028kB unevictable:1536kB writepending:184kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:40652kB local_pcp:20840kB free_cma:0kB [ 276.200062][T14797] lowmem_reserve[]: 0 0 1 1 1 [ 276.200107][T14797] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 276.200167][T14797] lowmem_reserve[]: 0 0 0 0 0 [ 276.200212][T14797] Node 1 Normal free:3894012kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14720kB local_pcp:10944kB free_cma:0kB [ 276.200275][T14797] lowmem_reserve[]: 0 0 0 0 0 [ 276.200317][T14797] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 276.200460][T14797] Node 0 DMA32: 6*4kB (UME) 137*8kB (UME) [ 276.475818][T14794] 8021q: adding VLAN 0 to HW filter on device bond7 [ 276.494081][T14797] 839*16kB (UM) 1062*32kB (UME) 1021*64kB (UME) 605*128kB (UM) 415*256kB (UM) 262*512kB (UM) 130*1024kB (UME) 6*2048kB (UM) 187*4096kB (UM) = 1343056kB [ 276.509750][T14797] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 276.522462][T14797] Node 1 Normal: 207*4kB (UM) 56*8kB (UME) 56*16kB (UME) 118*32kB (UME) 37*64kB (UME) 11*128kB (UME) 5*256kB (UM) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3894012kB [ 276.556006][T14797] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 276.561892][T14805] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 276.585856][T14805] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 276.589463][T14797] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 276.633510][T14797] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 276.643870][T14797] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 276.654001][T14797] 47599 total pagecache pages [ 276.658838][T14797] 0 pages in swap cache [ 276.663143][T14797] Free swap = 124996kB [ 276.669485][T14797] Total swap = 124996kB [ 276.714511][T14797] 2097051 pages RAM [ 276.718466][T14797] 0 pages HighMem/MovableOnly [ 276.723245][T14797] 425673 pages reserved [ 276.730408][T14797] 0 pages cma reserved [ 276.796434][T14812] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2427'. [ 277.046476][T14832] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2431'. [ 277.115122][T14837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2435'. [ 277.136854][T14837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2435'. [ 277.568473][T14865] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2444'. [ 277.702794][T14881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2447'. [ 277.756020][T14880] netlink: 'syz.5.2447': attribute type 3 has an invalid length. [ 277.765615][T14881] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2447'. [ 277.812623][T14883] netlink: 'syz.3.2448': attribute type 1 has an invalid length. [ 277.830761][T14887] IPVS: Unknown mcast interface: pimreg1 [ 277.841719][T14883] netlink: 'syz.3.2448': attribute type 1 has an invalid length. [ 278.384048][T14915] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.398601][T14915] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.411467][T14915] ` (unregistering): Released all slaves [ 278.813150][T14949] lo speed is unknown, defaulting to 1000 [ 279.044319][T14966] netlink: zone id is out of range [ 279.049654][T14966] netlink: zone id is out of range [ 279.061652][T14966] netlink: zone id is out of range [ 279.067496][T14966] netlink: zone id is out of range [ 279.073176][T14966] netlink: zone id is out of range [ 279.081852][T14966] netlink: zone id is out of range [ 279.087721][T14966] netlink: zone id is out of range [ 279.093151][T14966] netlink: zone id is out of range [ 279.100135][T14966] netlink: zone id is out of range [ 279.110128][T14966] netlink: zone id is out of range [ 279.139105][T14969] bond8: entered promiscuous mode [ 279.144681][T14969] bond8: entered allmulticast mode [ 279.150400][T14969] 8021q: adding VLAN 0 to HW filter on device bond8 [ 280.503790][T15047] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.732535][T15056] netlink: 'syz.5.2499': attribute type 1 has an invalid length. [ 280.753200][T15056] __nla_validate_parse: 6 callbacks suppressed [ 280.753217][T15056] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2499'. [ 280.949404][T15066] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2504'. [ 281.163386][T15077] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2506'. [ 281.187191][T15078] netlink: 'syz.5.2505': attribute type 7 has an invalid length. [ 281.432355][T15086] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2510'. [ 281.565943][T15077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.607023][T15077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.618241][T15077] bond0 (unregistering): (slave team0): Releasing backup interface [ 281.626948][T15077] team0: left allmulticast mode [ 281.639336][T15077] bond0 (unregistering): Released all slaves [ 281.669644][T15089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2511'. [ 281.734626][T15092] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2512'. [ 281.764035][T15092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2512'. [ 281.794472][T15095] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2513'. [ 281.939703][T15106] lo speed is unknown, defaulting to 1000 [ 281.964580][T15116] netlink: 'syz.0.2518': attribute type 1 has an invalid length. [ 281.987166][T15117] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2519'. [ 282.017187][T15118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2518'. [ 282.092041][T15118] bond0: (slave vxcan5): The slave device specified does not support setting the MAC address [ 282.128147][T15118] bond0: (slave vxcan5): Error -95 calling set_mac_address [ 282.191655][T15116] gretap2: entered promiscuous mode [ 282.245945][T15132] macvlan2: entered promiscuous mode [ 282.251393][T15132] macvlan2: entered allmulticast mode [ 282.270147][T15132] bond0: entered promiscuous mode [ 282.278639][T15132] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 282.291214][T15132] bond0: left promiscuous mode [ 282.606673][T15142] veth7: entered allmulticast mode [ 283.386349][T15188] netlink: 'syz.6.2539': attribute type 1 has an invalid length. [ 283.662550][T15192] lo speed is unknown, defaulting to 1000 [ 284.728902][T15253] netlink: 'syz.1.2559': attribute type 4 has an invalid length. [ 285.045020][T15263] bond5 (unregistering): Released all slaves [ 285.515886][T15295] tipc: Resetting bearer [ 285.721676][ T6300] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.743225][ T6300] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.760722][ T6300] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.789497][ T6300] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.847497][T15311] netlink: 'syz.0.2577': attribute type 1 has an invalid length. [ 285.904211][T15313] __nla_validate_parse: 11 callbacks suppressed [ 285.904228][T15313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2577'. [ 285.939367][T15318] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2578'. [ 286.445042][T15346] net_ratelimit: 3 callbacks suppressed [ 286.445061][T15346] openvswitch: netlink: Message has 8 unknown bytes. [ 286.900109][T15371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2589'. [ 287.182126][T15383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2596'. [ 287.254329][T15383] macvtap1: entered promiscuous mode [ 287.259654][T15383] macvtap1: entered allmulticast mode [ 287.278037][T15383] bond0: entered allmulticast mode [ 287.283179][T15383] bond0: entered promiscuous mode [ 287.311147][T15383] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 287.329780][T15383] team0: Device macvtap1 failed to register rx_handler [ 287.341164][T15383] bond0: left allmulticast mode [ 287.354254][T15383] bond0: left promiscuous mode [ 287.399438][T15393] siw: device registration error -23 [ 287.488755][T15401] lo speed is unknown, defaulting to 1000 [ 287.619290][T15408] netlink: 'syz.3.2603': attribute type 1 has an invalid length. [ 287.632814][T15408] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.2603'. [ 287.708540][T15415] nftables ruleset with unbound set [ 287.807938][T15424] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2607'. [ 288.267951][T15451] netlink: 'syz.0.2614': attribute type 1 has an invalid length. [ 288.281881][T15453] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2615'. [ 288.500706][T15461] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2616'. [ 288.687261][T15471] netlink: 1284 bytes leftover after parsing attributes in process `syz.5.2619'. [ 288.802946][T15476] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2622'. [ 288.844282][T15477] nbd: device at index 5 is going down [ 289.001163][T15483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.905511][T15522] lo speed is unknown, defaulting to 1000 [ 290.361605][T15555] "syz.0.2646" (15555) uses obsolete ecb(arc4) skcipher [ 290.379269][T15543] lo speed is unknown, defaulting to 1000 [ 291.398332][T15587] __nla_validate_parse: 12 callbacks suppressed [ 291.398351][T15587] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2656'. [ 291.458900][T15594] lo speed is unknown, defaulting to 1000 [ 291.603277][T15598] gretap0: entered promiscuous mode [ 291.621316][T15598] macvtap1: entered allmulticast mode [ 291.637367][T15598] gretap0: entered allmulticast mode [ 291.827881][T15609] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 291.835280][T15612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2665'. [ 291.901015][T15610] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 292.134227][T15630] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2668'. [ 292.169565][T15629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.189628][T15629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.398879][T15640] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2671'. [ 292.428093][T15641] macsec0: entered promiscuous mode [ 292.445843][T15641] macsec0: entered allmulticast mode [ 292.474838][T15644] macsec0: left promiscuous mode [ 292.492197][T15644] macsec0: left allmulticast mode [ 292.530925][T15640] 8021q: VLANs not supported on gre0 [ 292.623788][T15653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.964678][T15663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.011387][T15662] sctp: [Deprecated]: syz.6.2678 (pid 15662) Use of struct sctp_assoc_value in delayed_ack socket option. [ 293.011387][T15662] Use struct sctp_sack_info instead [ 293.120990][T15662] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2678'. [ 293.211080][T15672] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2682'. [ 293.260830][T15677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2683'. [ 293.608921][T15692] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2686'. [ 293.627342][T15686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.787330][T15689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2686'. [ 293.789778][T15702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2691'. [ 294.328825][T15729] wg2: left allmulticast mode [ 294.511484][T15729] wg2: entered promiscuous mode [ 294.525667][T15729] wg2: entered allmulticast mode [ 294.535581][T15733] lo speed is unknown, defaulting to 1000 [ 295.254121][T15760] netlink: zone id is out of range [ 295.277136][T15760] netlink: zone id is out of range [ 295.282264][T15760] netlink: zone id is out of range [ 295.307019][T15760] netlink: zone id is out of range [ 295.328746][T15763] netlink: 'syz.5.2709': attribute type 3 has an invalid length. [ 295.341454][T15760] netlink: zone id is out of range [ 295.348759][T15760] netlink: zone id is out of range [ 295.711836][T15784] ip6gre0: Master is either lo or non-ether device [ 295.857353][T15795] tap0: tun_chr_ioctl cmd 1074025677 [ 295.862892][T15795] tap0: linktype set to 65534 [ 296.440728][T15832] netlink: 'syz.0.2731': attribute type 1 has an invalid length. [ 296.449345][T15832] netlink: 'syz.0.2731': attribute type 2 has an invalid length. [ 296.476032][T15832] __nla_validate_parse: 6 callbacks suppressed [ 296.476048][T15832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2731'. [ 296.666246][T15837] lo speed is unknown, defaulting to 1000 [ 296.716666][T15844] veth0: entered promiscuous mode [ 296.874456][T15842] veth0: left promiscuous mode [ 297.242960][T15864] netlink: 'syz.6.2740': attribute type 2 has an invalid length. [ 297.251680][T15864] netlink: 244 bytes leftover after parsing attributes in process `syz.6.2740'. [ 297.305583][T15864] net_ratelimit: 28 callbacks suppressed [ 297.305601][T15864] openvswitch: netlink: Message has 192 unknown bytes. [ 297.504681][T15876] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2746'. [ 297.523855][T15876] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 297.945272][T15888] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2748'. [ 297.965765][T15888] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2748'. [ 298.105498][ T5185] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 298.118350][ T5185] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 298.126583][ T5185] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 298.138679][ T5185] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 298.152271][ T5185] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 298.170096][ T5873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 298.180432][ T5873] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 298.189543][ T5873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 298.198927][ T5873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 298.207810][ T5873] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 298.288760][T15892] lo speed is unknown, defaulting to 1000 [ 299.050659][T15892] chnl_net:caif_netlink_parms(): no params data found [ 299.115010][T15892] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.122092][T15892] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.130509][T15892] bridge_slave_0: entered allmulticast mode [ 299.138021][T15892] bridge_slave_0: entered promiscuous mode [ 299.146176][T15892] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.153274][T15892] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.160591][T15892] bridge_slave_1: entered allmulticast mode [ 299.167755][T15892] bridge_slave_1: entered promiscuous mode [ 299.196085][T15892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.207564][T15892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.238554][T15892] team0: Port device team_slave_0 added [ 299.247334][T15892] team0: Port device team_slave_1 added [ 299.277554][T15892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.284801][T15892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.311295][T15892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.324437][T15892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.331382][T15892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.357436][T15892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.398297][T15892] hsr_slave_0: entered promiscuous mode [ 299.405239][T15892] hsr_slave_1: entered promiscuous mode [ 299.508696][T15892] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.519566][T15892] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.588139][T15892] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.598767][T15892] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.655814][T15892] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.666458][T15892] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.735316][T15892] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.745820][T15892] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.856334][T15892] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 299.867188][T15892] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 299.877074][T15892] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 299.887057][T15892] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 299.956897][T15892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.977546][T15892] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.990248][ T6300] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.997408][ T6300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.012094][ T6302] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.019245][ T6302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.189573][T15892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.229275][T15892] veth0_vlan: entered promiscuous mode [ 300.242452][T15892] veth1_vlan: entered promiscuous mode [ 300.248510][ T5873] Bluetooth: hci3: command tx timeout [ 300.277833][T15892] veth0_macvtap: entered promiscuous mode [ 300.287457][T15892] veth1_macvtap: entered promiscuous mode [ 300.305085][T15892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.319720][T15892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.334968][T12684] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.344543][T12684] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.358659][T12684] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.367574][T12684] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.427250][T12684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.444947][T12684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.466896][T12691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.475030][T12691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.324907][ T5873] Bluetooth: hci3: command tx timeout [ 304.403597][ T5873] Bluetooth: hci3: command tx timeout [ 306.483442][ T5873] Bluetooth: hci3: command tx timeout [ 317.047488][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.969197][T15941] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2759'. [ 318.045119][T15947] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2759'. [ 318.045487][T15949] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2760'. [ 318.073675][T15949] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2760'. [ 318.609093][T15979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2770'. [ 318.681872][T15986] tipc: Enabled bearer , priority 0 [ 318.694940][T15986] syzkaller0: entered promiscuous mode [ 318.700482][T15986] syzkaller0: entered allmulticast mode [ 318.848045][T15993] tipc: Resetting bearer [ 319.499113][T15985] tipc: Resetting bearer [ 319.541491][T15985] tipc: Disabling bearer [ 319.744237][T16039] netlink: 146780 bytes leftover after parsing attributes in process `syz.0.2782'. [ 319.815038][T16043] netlink: 'syz.3.2783': attribute type 1 has an invalid length. [ 319.815486][T16046] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2785'. [ 319.843480][T16043] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2783'. [ 319.845883][T16047] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2785'. [ 319.864492][T16043] nbd: couldn't find device at index 1048576 [ 319.901632][T16043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2783'. [ 320.051536][T16060] netlink: 'syz.1.2789': attribute type 7 has an invalid length. [ 320.082065][T16060] : entered promiscuous mode [ 320.089561][T16061] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 320.279780][T16071] sctp: [Deprecated]: syz.3.2791 (pid 16071) Use of int in max_burst socket option deprecated. [ 320.279780][T16071] Use struct sctp_assoc_value instead [ 320.342392][T16071] netlink: 'syz.3.2791': attribute type 1 has an invalid length. [ 320.450149][T16071] bond5 (unregistering): Released all slaves [ 320.912265][T16107] lo speed is unknown, defaulting to 1000 [ 321.067256][T16117] only policy match revision 0 supported [ 321.067278][T16117] unable to load match [ 321.111370][T16117] netlink: 'syz.6.2803': attribute type 1 has an invalid length. [ 321.217350][T16101] lo speed is unknown, defaulting to 1000 [ 321.730882][T16135] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 321.928836][T16148] netlink: 'syz.0.2810': attribute type 3 has an invalid length. [ 322.220233][T16160] netlink: 'syz.0.2813': attribute type 10 has an invalid length. [ 322.239023][T16160] !: entered promiscuous mode [ 322.263453][T16160] !: left allmulticast mode [ 322.271493][T16160] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 322.632161][T16159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.677313][T16159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.694680][T16159] bond0 (unregistering): Released all slaves [ 322.754640][T16171] netlink: zone id is out of range [ 322.763418][T16171] netlink: zone id is out of range [ 322.781926][T16171] netlink: get zone limit has 8 unknown bytes [ 323.050648][T16178] netlink: 'syz.6.2820': attribute type 1 has an invalid length. [ 323.061508][T16178] __nla_validate_parse: 14 callbacks suppressed [ 323.061525][T16178] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2820'. [ 323.061920][T16185] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 323.089369][T16178] netlink: 'syz.6.2820': attribute type 1 has an invalid length. [ 323.140563][T16185] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 323.163697][T16178] syzkaller0: entered promiscuous mode [ 323.169189][T16178] syzkaller0: entered allmulticast mode [ 323.210110][T16188] netlink: 'syz.0.2823': attribute type 29 has an invalid length. [ 323.226144][T16191] netlink: 'syz.0.2823': attribute type 29 has an invalid length. [ 323.423674][T16199] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2825'. [ 323.436224][T16199] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2825'. [ 323.446914][T16199] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2825'. [ 323.466504][T16199] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2825'. [ 323.475961][T16199] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2825'. [ 323.485505][T16199] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2825'. [ 323.513623][T16199] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2825'. [ 323.555801][T16205] vlan0: left allmulticast mode [ 323.566239][T16205] veth0_vlan: left allmulticast mode [ 323.611958][T16205] vlan1: left allmulticast mode [ 323.626548][T16205] bridge0: left allmulticast mode [ 323.710713][T16214] GUP no longer grows the stack in syz.3.2828 (16214): 200000006000-200000008000 (200000005000) [ 323.723147][T16214] CPU: 1 UID: 0 PID: 16214 Comm: syz.3.2828 Not tainted syzkaller #0 PREEMPT(full) [ 323.723174][T16214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 323.723186][T16214] Call Trace: [ 323.723195][T16214] [ 323.723204][T16214] dump_stack_lvl+0x189/0x250 [ 323.723237][T16214] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.723263][T16214] ? __pfx__printk+0x10/0x10 [ 323.723288][T16214] ? find_vma+0xe7/0x160 [ 323.723333][T16214] __get_user_pages+0x24d0/0x2ce0 [ 323.723355][T16214] ? __lock_acquire+0xab9/0xd20 [ 323.723411][T16214] ? __gup_longterm_locked+0xc68/0x1660 [ 323.723443][T16214] __gup_longterm_locked+0xde9/0x1660 [ 323.723479][T16214] ? sanity_check_pinned_pages+0x123a/0x1300 [ 323.723511][T16214] gup_fast_fallback+0x1e6a/0x2010 [ 323.723567][T16214] ? __pfx_gup_fast_fallback+0x10/0x10 [ 323.723597][T16214] ? __lock_acquire+0xab9/0xd20 [ 323.723632][T16214] ? pin_user_pages_fast+0x4d/0xb0 [ 323.723660][T16214] iov_iter_extract_pages+0x35a/0x5e0 [ 323.723697][T16214] extract_iter_to_sg+0xe46/0x24e0 [ 323.723737][T16214] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 323.723759][T16214] ? __local_bh_enable_ip+0x12d/0x1c0 [ 323.723780][T16214] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.723804][T16214] ? __local_bh_enable_ip+0x12d/0x1c0 [ 323.723823][T16214] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 323.723851][T16214] ? __asan_memset+0x22/0x50 [ 323.723876][T16214] hash_sendmsg+0x4f4/0x11d0 [ 323.723931][T16214] ? __pfx_hash_sendmsg+0x10/0x10 [ 323.723961][T16214] __sock_sendmsg+0x219/0x270 [ 323.723996][T16214] ____sys_sendmsg+0x52d/0x830 [ 323.724037][T16214] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.724074][T16214] ? import_iovec+0x74/0xa0 [ 323.724106][T16214] ___sys_sendmsg+0x21f/0x2a0 [ 323.724136][T16214] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.724204][T16214] ? __fget_files+0x2a/0x420 [ 323.724223][T16214] ? __fget_files+0x3a0/0x420 [ 323.724253][T16214] __sys_sendmmsg+0x227/0x430 [ 323.724286][T16214] ? __pfx___sys_sendmmsg+0x10/0x10 [ 323.724310][T16214] ? do_futex+0x395/0x420 [ 323.724344][T16214] ? fd_install+0x97/0x540 [ 323.724396][T16214] ? rcu_is_watching+0x15/0xb0 [ 323.724424][T16214] __x64_sys_sendmmsg+0xa0/0xc0 [ 323.724453][T16214] do_syscall_64+0xfa/0x3b0 [ 323.724475][T16214] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.724496][T16214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.724516][T16214] ? clear_bhb_loop+0x60/0xb0 [ 323.724541][T16214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.724560][T16214] RIP: 0033:0x7f7fce58eec9 [ 323.724579][T16214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.724598][T16214] RSP: 002b:00007f7fcf3ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 323.724620][T16214] RAX: ffffffffffffffda RBX: 00007f7fce7e5fa0 RCX: 00007f7fce58eec9 [ 323.724636][T16214] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000007 [ 323.724650][T16214] RBP: 00007f7fce611f91 R08: 0000000000000000 R09: 0000000000000000 [ 323.724663][T16214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.724676][T16214] R13: 00007f7fce7e6038 R14: 00007f7fce7e5fa0 R15: 00007ffe557c06f8 [ 323.724710][T16214] [ 324.197537][T16222] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2830'. [ 324.216442][T16222] vlan2: entered allmulticast mode [ 324.286291][T16223] team0: Port device dummy0 removed [ 324.503945][T16238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2836'. [ 324.606201][T16244] veth0: entered promiscuous mode [ 324.696070][T16244] veth0: left promiscuous mode [ 324.875005][T16262] validate_nla: 2 callbacks suppressed [ 324.875024][T16262] netlink: 'syz.5.2846': attribute type 1 has an invalid length. [ 324.920805][T16262] netlink: 'syz.5.2846': attribute type 2 has an invalid length. [ 324.946055][T16262] netlink: 'syz.5.2846': attribute type 1 has an invalid length. [ 325.179920][T16281] netlink: 'syz.5.2852': attribute type 1 has an invalid length. [ 325.221861][T16281] netlink: 'syz.5.2852': attribute type 4 has an invalid length. [ 325.424178][T16304] netlink: 'syz.1.2859': attribute type 1 has an invalid length. [ 325.637693][T16322] netlink: 'syz.1.2864': attribute type 4 has an invalid length. [ 325.667180][T16324] netlink: 'syz.6.2866': attribute type 1 has an invalid length. [ 325.767412][T16333] sctp: [Deprecated]: syz.0.2869 (pid 16333) Use of int in maxseg socket option. [ 325.767412][T16333] Use struct sctp_assoc_value instead [ 325.843690][T16337] netlink: 'syz.5.2870': attribute type 1 has an invalid length. [ 326.884522][T16400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.908373][T16407] tipc: Started in network mode [ 326.913949][T16407] tipc: Node identity 3ea8661e2a98, cluster identity 4711 [ 326.922539][T16407] tipc: Enabled bearer , priority 0 [ 326.939110][T16407] syzkaller0: entered promiscuous mode [ 326.994793][T16407] syzkaller0: entered allmulticast mode [ 327.104878][T16409] tipc: Resetting bearer [ 327.198844][T16409] tipc: Disabling bearer [ 327.461297][T16430] lo speed is unknown, defaulting to 1000 [ 327.813211][T16439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 327.990382][T16444] netlink: 'syz.3.2902': attribute type 1 has an invalid length. [ 328.092532][T16450] __nla_validate_parse: 15 callbacks suppressed [ 328.092551][T16450] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2902'. [ 328.325931][ T5185] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 328.339630][ T5185] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 328.350806][ T5185] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 328.359873][ T5185] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 328.368606][ T5185] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 328.668381][T16456] lo speed is unknown, defaulting to 1000 [ 328.701990][T16466] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 328.736061][T16466] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 328.926285][T16482] tls_set_device_offload_rx: netdev not found [ 329.312884][T16502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.665602][T16514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2919'. [ 329.704232][T16514] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2919'. [ 329.806971][T16522] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2921'. [ 329.962226][T16526] validate_nla: 1 callbacks suppressed [ 329.962246][T16526] netlink: 'syz.5.2922': attribute type 2 has an invalid length. [ 330.021452][T16531] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2924'. [ 330.118157][T16535] tipc: Cannot configure node identity twice [ 330.135272][T16535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.166798][T16456] chnl_net:caif_netlink_parms(): no params data found [ 330.191123][T16538] openvswitch: netlink: IP tunnel dst address not specified [ 330.288942][T16542] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2925'. [ 330.370182][T16546] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2928'. [ 330.381208][T16546] netlink: 21 bytes leftover after parsing attributes in process `syz.1.2928'. [ 330.393803][T16546] netlink: 21 bytes leftover after parsing attributes in process `syz.1.2928'. [ 330.405396][ T5873] Bluetooth: hci0: command tx timeout [ 330.590444][T16456] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.612168][T16456] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.628322][T16456] bridge_slave_0: entered allmulticast mode [ 330.646529][T16456] bridge_slave_0: entered promiscuous mode [ 330.667869][T16456] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.684680][T16456] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.695222][T16456] bridge_slave_1: entered allmulticast mode [ 330.708207][T16456] bridge_slave_1: entered promiscuous mode [ 330.825218][T16456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.855342][T16456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.893431][T16567] tipc: Enabling of bearer rejected, failed to enable media [ 330.941622][T16456] team0: Port device team_slave_0 added [ 330.952947][T16456] team0: Port device team_slave_1 added [ 331.019998][T16456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.034207][T16456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.061159][T16456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.074691][T16456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.081681][T16456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.108088][T16456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.167205][T16456] hsr_slave_0: entered promiscuous mode [ 331.174531][T16456] hsr_slave_1: entered promiscuous mode [ 331.180967][T16456] debugfs: 'hsr0' already exists in 'hsr' [ 331.189748][T16456] Cannot create hsr debugfs directory [ 331.310558][T16582] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2935'. [ 331.401538][T16456] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.487160][T16456] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.582793][T16456] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.599426][T16591] syzkaller0: entered promiscuous mode [ 331.605867][T16591] syzkaller0: entered allmulticast mode [ 331.669434][T16456] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.720668][T16595] lo speed is unknown, defaulting to 1000 [ 331.787080][T16600] netlink: 'syz.5.2942': attribute type 1 has an invalid length. [ 331.796925][T16600] netlink: 'syz.5.2942': attribute type 3 has an invalid length. [ 331.825320][T16598] !: renamed from dummy0 (while UP) [ 331.976206][T16456] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 332.002918][T16456] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 332.039777][T16456] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 332.073865][T16456] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 332.278713][T16456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.356722][T16456] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.396255][ T6300] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.403433][ T6300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.447568][T12680] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.454900][T12680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.483798][ T5873] Bluetooth: hci0: command tx timeout [ 332.952746][T16649] : renamed from hsr0 (while UP) [ 333.059276][T16456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.109310][T16654] __nla_validate_parse: 2 callbacks suppressed [ 333.109328][T16654] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2955'. [ 333.179692][T16456] veth0_vlan: entered promiscuous mode [ 333.208973][T16456] veth1_vlan: entered promiscuous mode [ 333.292199][T16456] veth0_macvtap: entered promiscuous mode [ 333.313113][T16456] veth1_macvtap: entered promiscuous mode [ 333.362549][T16456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.405543][T16456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.441005][ T6302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.467059][ T6302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.498381][ T6302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.537168][ T6302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.697115][T10789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.709066][T10789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.745573][T16667] sctp: [Deprecated]: syz.3.2960 (pid 16667) Use of int in maxseg socket option. [ 333.745573][T16667] Use struct sctp_assoc_value instead [ 333.770569][T12680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.779104][T12680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.887919][T16675] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2963'. [ 333.904930][T16675] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2963'. [ 334.162420][T16692] tap0: tun_chr_ioctl cmd 1074025672 [ 334.178079][T16692] tap0: ignored: set checksum disabled [ 334.196999][T16691] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2967'. [ 334.211629][T16694] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2966'. [ 334.211759][T16691] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2967'. [ 334.371154][T16698] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2968'. [ 334.398064][T16700] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2969'. [ 334.558059][T16707] lo speed is unknown, defaulting to 1000 [ 334.564431][ T5873] Bluetooth: hci0: command tx timeout [ 335.004460][T16719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2975'. [ 335.192864][T16721] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2976'. [ 335.345329][ T5185] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 335.368473][ T5185] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 335.377520][ T5185] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 335.386420][ T5185] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 335.395809][ T5185] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 335.499697][T16732] netlink: 'syz.0.2979': attribute type 4 has an invalid length. [ 335.511420][T16733] 8021q: VLANs not supported on ip6_vti0 [ 335.564721][T16726] lo speed is unknown, defaulting to 1000 [ 335.906894][T16755] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 335.967233][T16763] netlink: 'syz.1.2988': attribute type 1 has an invalid length. [ 336.099498][T16767] nbd: must specify a device to reconfigure [ 336.644711][ T5873] Bluetooth: hci0: command tx timeout [ 336.691305][T16785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.719258][T16785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.756557][T16785] bond0 (unregistering): Released all slaves [ 336.834443][T16766] lo speed is unknown, defaulting to 1000 [ 337.332141][T16801] ip6gre0: Master is either lo or non-ether device [ 337.478647][T16726] chnl_net:caif_netlink_parms(): no params data found [ 337.514155][T16806] netlink: 'syz.5.2999': attribute type 4 has an invalid length. [ 337.525540][ T5185] Bluetooth: hci1: command tx timeout [ 337.682887][T16814] netlink: 'syz.5.3002': attribute type 23 has an invalid length. [ 337.857464][T16726] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.866831][T16818] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 337.873763][T16726] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.883029][T16726] bridge_slave_0: entered allmulticast mode [ 337.905769][T16726] bridge_slave_0: entered promiscuous mode [ 337.946661][T16726] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.980082][T16726] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.010902][T16726] bridge_slave_1: entered allmulticast mode [ 338.028510][T16726] bridge_slave_1: entered promiscuous mode [ 338.186526][T16726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.272609][T16726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.312195][T16830] bridge_slave_0: invalid flags given to default FDB implementation [ 338.379933][T16726] team0: Port device team_slave_0 added [ 338.411144][T16726] team0: Port device team_slave_1 added [ 338.637611][T16847] __nla_validate_parse: 8 callbacks suppressed [ 338.637629][T16847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3010'. [ 338.725437][ T5185] Bluetooth: hci0: command tx timeout [ 338.959405][T16856] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3010'. [ 339.391775][T16726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.433360][T16726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.478379][T16726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.533940][T16726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.540912][T16726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.604329][ T5185] Bluetooth: hci1: command tx timeout [ 339.639717][T16726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.772098][T16726] hsr_slave_0: entered promiscuous mode [ 339.788554][T16726] hsr_slave_1: entered promiscuous mode [ 339.805752][T16726] debugfs: 'hsr0' already exists in 'hsr' [ 339.820670][T16726] Cannot create hsr debugfs directory [ 340.096526][T16891] openvswitch: netlink: Flow actions attr not present in new flow. [ 340.131874][T16726] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.154320][T16726] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.176091][T16726] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 340.279250][T16726] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.291916][T16726] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.312084][T16902] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3022'. [ 340.322999][T16726] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 340.349651][T16904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3024'. [ 340.359973][T16904] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3024'. [ 340.441093][T16726] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.459791][T16726] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.476100][T16726] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 340.597527][T16726] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.640398][T16726] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.680575][T16726] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 340.703123][T16927] netlink: 'syz.6.3030': attribute type 1 has an invalid length. [ 340.749644][T16929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3031'. [ 340.812407][T16929] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 340.822460][T16929] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 340.862735][T16935] bond12: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 340.915391][T16927] veth7: entered promiscuous mode [ 340.935978][T16927] bond12: (slave veth7): Enslaving as a backup interface with a down link [ 341.070125][T16726] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 341.098408][T16726] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 341.117450][T16946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.127034][T16726] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 341.139435][T16726] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 341.270996][T16962] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3039'. [ 341.578790][T16970] netlink: 'syz.0.3042': attribute type 4 has an invalid length. [ 341.606658][T16726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.681404][T16726] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.694663][ T5185] Bluetooth: hci1: command tx timeout [ 341.755357][T12691] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.762533][T12691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.798469][T12691] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.805644][T12691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.178145][T17002] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3051'. [ 342.193745][T17002] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3051'. [ 342.227045][T17004] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3048'. [ 342.477666][T16726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.531193][T17024] netlink: 'syz.0.3056': attribute type 7 has an invalid length. [ 342.542991][T16726] veth0_vlan: entered promiscuous mode [ 342.569571][T17024] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 342.583655][T17024] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 342.595552][T17024] gretap1: entered promiscuous mode [ 342.600830][T17024] gretap1: entered allmulticast mode [ 342.616555][T16726] veth1_vlan: entered promiscuous mode [ 342.707572][T16726] veth0_macvtap: entered promiscuous mode [ 342.725997][T16726] veth1_macvtap: entered promiscuous mode [ 342.741494][T17035] netlink: 'syz.5.3059': attribute type 74 has an invalid length. [ 342.785307][T16726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.808920][T16726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.827142][ T6302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.837598][ T6302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.848052][ T6300] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.868513][ T6300] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.077630][ T6302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.107917][ T6302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.202141][ T6302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.218729][ T6302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.536812][T17067] netlink: 'syz.3.3067': attribute type 2 has an invalid length. [ 343.764412][ T5185] Bluetooth: hci1: command tx timeout [ 343.782518][T17081] __nla_validate_parse: 4 callbacks suppressed [ 343.782536][T17081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3072'. [ 344.075640][T17092] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3075'. [ 344.421763][ T6876] IPVS: starting estimator thread 0... [ 344.429267][T17114] unsupported nla_type 52263 [ 344.479959][T17114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3082'. [ 344.526897][T17114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3082'. [ 344.533542][T17116] IPVS: using max 27 ests per chain, 64800 per kthread [ 344.551072][T17114] sctp: [Deprecated]: syz.0.3082 (pid 17114) Use of struct sctp_assoc_value in delayed_ack socket option. [ 344.551072][T17114] Use struct sctp_sack_info instead [ 344.781432][T17127] lo speed is unknown, defaulting to 1000 [ 344.867784][T17131] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3088'. [ 344.889207][T17131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3088'. [ 344.908048][T17131] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 345.083854][T17139] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 345.169530][T17142] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3092'. [ 345.667988][T17164] netlink: 'syz.1.3097': attribute type 1 has an invalid length. [ 345.751548][T17167] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3097'. [ 345.835701][T17171] netlink: 'syz.0.3098': attribute type 1 has an invalid length. [ 345.908207][T17164] bond1: entered promiscuous mode [ 345.919611][T17164] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.424284][T17194] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3103'. [ 346.482388][T17196] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 346.797824][T17205] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3105'. [ 346.831297][T17206] netlink: 'syz.3.3107': attribute type 8 has an invalid length. [ 346.982291][T17212] openvswitch: netlink: Flow key attr not present in new flow. [ 347.127974][T17220] netlink: 'syz.5.3113': attribute type 1 has an invalid length. [ 347.136291][T17220] netlink: 'syz.5.3113': attribute type 2 has an invalid length. [ 347.166265][T17220] netlink: 'syz.5.3113': attribute type 3 has an invalid length. [ 347.435677][T17243] netlink: 'syz.6.3118': attribute type 1 has an invalid length. [ 348.002794][T17277] openvswitch: netlink: Key type 13327 is out of range max 32 [ 348.411833][T17309] netlink: 'syz.6.3141': attribute type 39 has an invalid length. [ 348.568687][T17321] netlink: 'syz.1.3143': attribute type 2 has an invalid length. [ 348.775466][T17325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.805431][T17325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.825153][T17325] bond0 (unregistering): Released all slaves [ 348.879805][T17333] __nla_validate_parse: 9 callbacks suppressed [ 348.879825][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3147'. [ 348.905709][T17333] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3147'. [ 349.045965][T17342] lo speed is unknown, defaulting to 1000 [ 349.134760][T17345] FAULT_INJECTION: forcing a failure. [ 349.134760][T17345] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 349.154352][T17347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3151'. [ 349.195427][T17345] CPU: 0 UID: 0 PID: 17345 Comm: syz.5.3150 Not tainted syzkaller #0 PREEMPT(full) [ 349.195456][T17345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 349.195468][T17345] Call Trace: [ 349.195481][T17345] [ 349.195490][T17345] dump_stack_lvl+0x189/0x250 [ 349.195518][T17345] ? __pfx____ratelimit+0x10/0x10 [ 349.195539][T17345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.195560][T17345] ? __pfx__printk+0x10/0x10 [ 349.195596][T17345] should_fail_ex+0x414/0x560 [ 349.195632][T17345] _copy_to_user+0x31/0xb0 [ 349.195665][T17345] simple_read_from_buffer+0xe1/0x170 [ 349.195698][T17345] proc_fail_nth_read+0x1b3/0x220 [ 349.195725][T17345] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 349.195751][T17345] ? rw_verify_area+0x2a6/0x4d0 [ 349.195775][T17345] ? __lock_acquire+0xab9/0xd20 [ 349.195802][T17345] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 349.195826][T17345] vfs_read+0x1fd/0xa30 [ 349.195855][T17345] ? fdget_pos+0x247/0x320 [ 349.195877][T17345] ? __pfx___mutex_lock+0x10/0x10 [ 349.195900][T17345] ? __pfx_vfs_read+0x10/0x10 [ 349.195931][T17345] ? __fget_files+0x2a/0x420 [ 349.195954][T17345] ? __fget_files+0x3a0/0x420 [ 349.195971][T17345] ? __fget_files+0x2a/0x420 [ 349.195998][T17345] ksys_read+0x145/0x250 [ 349.196027][T17345] ? __pfx_ksys_read+0x10/0x10 [ 349.196050][T17345] ? rcu_is_watching+0x15/0xb0 [ 349.196075][T17345] ? do_syscall_64+0xbe/0x3b0 [ 349.196101][T17345] do_syscall_64+0xfa/0x3b0 [ 349.196122][T17345] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.196142][T17345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.196161][T17345] ? clear_bhb_loop+0x60/0xb0 [ 349.196186][T17345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.196205][T17345] RIP: 0033:0x7f480cb8d8dc [ 349.196222][T17345] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 349.196244][T17345] RSP: 002b:00007f480da4c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 349.196264][T17345] RAX: ffffffffffffffda RBX: 00007f480cde6180 RCX: 00007f480cb8d8dc [ 349.196279][T17345] RDX: 000000000000000f RSI: 00007f480da4c0a0 RDI: 0000000000000008 [ 349.196291][T17345] RBP: 00007f480da4c090 R08: 0000000000000000 R09: 0000000000000000 [ 349.196303][T17345] R10: 0000000000004100 R11: 0000000000000246 R12: 0000000000000001 [ 349.196314][T17345] R13: 00007f480cde6218 R14: 00007f480cde6180 R15: 00007fff0588dcd8 [ 349.196344][T17345] [ 349.796359][T17371] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 349.813972][T17371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3160'. [ 349.826538][T17369] netlink: 'syz.6.3159': attribute type 8 has an invalid length. [ 349.847106][T17371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3160'. [ 350.095645][T17385] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3164'. [ 350.419413][T17403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.552496][T17407] IPVS: Error connecting to the multicast addr [ 350.817148][T17421] netlink: 'syz.1.3176': attribute type 33 has an invalid length. [ 350.861912][T17421] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 350.970386][T17421] tipc: Enabling of bearer rejected, failed to enable media [ 351.062118][T17437] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 351.347619][T17452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3183'. [ 351.409150][T17452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3183'. [ 351.440646][T17456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.647100][T17470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 351.659394][T17469] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3191'. [ 351.731783][T17472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3190'. [ 352.069734][T17496] syz_tun: entered allmulticast mode [ 352.192864][T17496] syz_tun (unregistering): left allmulticast mode [ 353.002887][T17556] netlink: 'syz.5.3214': attribute type 1 has an invalid length. [ 353.033034][T17556] netlink: 'syz.5.3214': attribute type 2 has an invalid length. [ 353.077136][T17558] netlink: 'syz.5.3214': attribute type 1 has an invalid length. [ 353.091637][T17558] netlink: 'syz.5.3214': attribute type 2 has an invalid length. [ 353.381480][T17576] netlink: 'syz.6.3221': attribute type 1 has an invalid length. [ 353.778850][T17598] netlink: 'syz.6.3229': attribute type 5 has an invalid length. [ 353.970345][T17610] __nla_validate_parse: 14 callbacks suppressed [ 353.970362][T17610] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3234'. [ 354.015631][T17606] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3233'. [ 354.026482][T17606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3233'. [ 354.242138][T17626] netlink: 'syz.3.3239': attribute type 1 has an invalid length. [ 354.258532][T17627] IPVS: stopping master sync thread 17630 ... [ 354.265386][T17630] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 354.461394][T17646] bond0: left promiscuous mode [ 354.481094][T17646] bond0: left allmulticast mode [ 354.643257][T17663] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3244'. [ 354.662217][T17646] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3244'. [ 354.737571][T17668] tipc: Enabling of bearer rejected, failed to enable media [ 354.762714][T17669] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3249'. [ 354.870339][T17675] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3253'. [ 355.112713][T17690] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3258'. [ 355.132402][T17693] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 355.307025][T17711] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3263'. [ 355.365950][T17713] netlink: 'syz.5.3265': attribute type 1 has an invalid length. [ 355.494718][T17719] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3266'. [ 355.711433][T17735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.860669][T17752] netlink: 'syz.3.3275': attribute type 1 has an invalid length. [ 355.871609][T17751] netlink: 'syz.3.3275': attribute type 1 has an invalid length. [ 356.011332][T17761] batman_adv: batadv0: Adding interface: dummy0 [ 356.018014][T17761] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.051344][T17761] batman_adv: batadv0: Interface activated: dummy0 [ 356.310285][T17777] batadv0: mtu less than device minimum [ 356.325146][T17777] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.337465][T17777] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.349118][T17777] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.361195][T17777] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.373071][T17777] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.385019][T17777] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.396959][T17777] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.408788][T17777] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.606895][T17786] syz.6.3285: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 356.643516][T17786] CPU: 0 UID: 0 PID: 17786 Comm: syz.6.3285 Not tainted syzkaller #0 PREEMPT(full) [ 356.643546][T17786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 356.643559][T17786] Call Trace: [ 356.643567][T17786] [ 356.643577][T17786] dump_stack_lvl+0x189/0x250 [ 356.643610][T17786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.643639][T17786] ? __pfx__printk+0x10/0x10 [ 356.643666][T17786] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 356.643691][T17786] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 356.643715][T17786] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 356.643740][T17786] warn_alloc+0x214/0x310 [ 356.643777][T17786] ? stack_depot_save_flags+0x40/0x860 [ 356.643807][T17786] ? __pfx_warn_alloc+0x10/0x10 [ 356.643834][T17786] ? kasan_save_track+0x4f/0x80 [ 356.643857][T17786] ? xskq_create+0x56/0x170 [ 356.643876][T17786] ? xsk_init_queue+0xb0/0x110 [ 356.643890][T17786] ? xsk_setsockopt+0x4dc/0x8d0 [ 356.643915][T17786] ? do_sock_setsockopt+0x179/0x1b0 [ 356.643935][T17786] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 356.643955][T17786] ? do_syscall_64+0xfa/0x3b0 [ 356.643975][T17786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.644002][T17786] __vmalloc_node_range_noprof+0x125/0x12f0 [ 356.644061][T17786] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 356.644097][T17786] ? __kasan_kmalloc+0x93/0xb0 [ 356.644129][T17786] vmalloc_user_noprof+0xad/0xf0 [ 356.644154][T17786] ? xskq_create+0xbf/0x170 [ 356.644174][T17786] xskq_create+0xbf/0x170 [ 356.644195][T17786] xsk_init_queue+0xb0/0x110 [ 356.644213][T17786] xsk_setsockopt+0x4dc/0x8d0 [ 356.644247][T17786] ? __pfx_xsk_setsockopt+0x10/0x10 [ 356.644275][T17786] ? __pfx_aa_sk_perm+0x10/0x10 [ 356.644311][T17786] ? aa_sock_opt_perm+0xff/0x1b0 [ 356.644332][T17786] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 356.644352][T17786] ? __pfx_xsk_setsockopt+0x10/0x10 [ 356.644391][T17786] do_sock_setsockopt+0x179/0x1b0 [ 356.644429][T17786] __x64_sys_setsockopt+0x13f/0x1b0 [ 356.644462][T17786] do_syscall_64+0xfa/0x3b0 [ 356.644486][T17786] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.644509][T17786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.644527][T17786] ? clear_bhb_loop+0x60/0xb0 [ 356.644545][T17786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.644562][T17786] RIP: 0033:0x7fd9e818eec9 [ 356.644578][T17786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.644595][T17786] RSP: 002b:00007fd9e8f8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 356.644615][T17786] RAX: ffffffffffffffda RBX: 00007fd9e83e5fa0 RCX: 00007fd9e818eec9 [ 356.644629][T17786] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 356.644641][T17786] RBP: 00007fd9e8211f91 R08: 0000000000000004 R09: 0000000000000000 [ 356.644654][T17786] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.644671][T17786] R13: 00007fd9e83e6038 R14: 00007fd9e83e5fa0 R15: 00007ffd3029e708 [ 356.644711][T17786] [ 356.644802][T17786] Mem-Info: [ 356.975263][T17786] active_anon:3892 inactive_anon:0 isolated_anon:0 [ 356.975263][T17786] active_file:3022 inactive_file:39983 isolated_file:0 [ 356.975263][T17786] unevictable:768 dirty:78 writeback:0 [ 356.975263][T17786] slab_reclaimable:12957 slab_unreclaimable:121957 [ 356.975263][T17786] mapped:28885 shmem:1379 pagetables:1324 [ 356.975263][T17786] sec_pagetables:0 bounce:0 [ 356.975263][T17786] kernel_misc_reclaimable:0 [ 356.975263][T17786] free:1299435 free_pcp:13349 free_cma:0 [ 357.054026][T17786] Node 0 active_anon:15568kB inactive_anon:0kB active_file:12088kB inactive_file:159732kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115540kB dirty:308kB writeback:0kB shmem:3980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15472kB pagetables:4760kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 357.121445][T17786] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 357.180006][T17786] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 357.211318][T17786] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 357.225410][T17808] macvtap1: entered allmulticast mode [ 357.226201][T17786] Node 0 DMA32 free:1286828kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15620kB inactive_anon:0kB active_file:12088kB inactive_file:158156kB unevictable:1536kB writepending:304kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:40180kB local_pcp:19448kB free_cma:0kB [ 357.233553][T17808] veth0_macvtap: entered allmulticast mode [ 357.266106][T17786] lowmem_reserve[]: 0 0 1 1 1 [ 357.286445][T17786] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 357.317897][T17786] lowmem_reserve[]: 0 0 0 0 0 [ 357.322760][T17786] Node 1 Normal free:3895612kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13120kB local_pcp:2976kB free_cma:0kB [ 357.356852][T17786] lowmem_reserve[]: 0 0 0 0 0 [ 357.361708][T17786] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 357.382316][T17786] Node 0 DMA32: 1824*4kB (UM) 338*8kB (UME) 93*16kB (UME) 48*32kB (UM) 15*64kB (UME) 698*128kB (UME) 499*256kB (UME) 286*512kB (UME) 132*1024kB (UM) 6*2048kB (UME) 186*4096kB (UM) = 1286816kB [ 357.430618][T17786] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 357.449877][T17786] Node 1 Normal: 207*4kB (UM) 56*8kB (UME) 56*16kB (UME) 148*32kB (UME) 45*64kB (UME) 12*128kB (UME) 5*256kB (UM) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3895612kB [ 357.481151][T17786] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 357.491869][T17786] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 357.562152][T17786] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 357.584365][T17786] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 357.601772][T17786] 44381 total pagecache pages [ 357.607844][T17786] 0 pages in swap cache [ 357.612152][T17786] Free swap = 124996kB [ 357.624262][T17786] Total swap = 124996kB [ 357.628490][T17786] 2097051 pages RAM [ 357.632350][T17786] 0 pages HighMem/MovableOnly [ 357.638321][T17786] 425673 pages reserved [ 357.642544][T17786] 0 pages cma reserved [ 357.764355][T12681] wlan1: Trigger new scan to find an IBSS to join [ 360.804663][ T6300] wlan1: Trigger new scan to find an IBSS to join [ 363.367234][ T6300] bond8 (unregistering): (slave geneve2): Releasing active interface [ 363.765353][T12684] wlan1: Trigger new scan to find an IBSS to join [ 364.102941][ T6300] bond9 (unregistering): (slave bridge16): Releasing active interface [ 364.168971][ T6300] bond0 (unregistering): Released all slaves [ 364.185768][ T6300] bond1 (unregistering): Released all slaves [ 364.290183][ T6300] bond2 (unregistering): Released all slaves [ 364.304508][ T6300] bond3 (unregistering): Released all slaves [ 364.408638][ T6300] bond4 (unregistering): Released all slaves [ 364.421308][ T6300] bond5 (unregistering): Released all slaves [ 364.522799][ T6300] bond6 (unregistering): Released all slaves [ 364.537063][ T6300] bond7 (unregistering): Released all slaves [ 364.633573][ T6300] bond8 (unregistering): Released all slaves [ 364.647335][ T6300] bond9 (unregistering): Released all slaves [ 364.694859][ T6302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.758344][ T6300] bond10 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 364.768882][ T6300] bond10 (unregistering): Released all slaves [ 364.917383][ T6300] tipc: Disabling bearer [ 364.932174][ T6300] tipc: Left network mode [ 365.437244][ T6300] pim6reg (unregistering): left allmulticast mode [ 365.989043][T12681] smc: removing ib device syz2 [ 367.224326][ T6300] IPVS: stop unused estimator thread 0... [ 380.820373][T17854] __nla_validate_parse: 5 callbacks suppressed [ 380.820391][T17854] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3307'. [ 380.845091][T17855] validate_nla: 4 callbacks suppressed [ 380.845109][T17855] netlink: 'syz.1.3306': attribute type 1 has an invalid length. [ 380.865993][T17855] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3306'. [ 380.881433][T17857] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3308'. [ 380.931707][T17858] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3307'. [ 381.207394][T17873] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 381.233634][T17873] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 381.334232][T17892] nftables ruleset with unbound chain [ 381.560895][T17902] netlink: 4096 bytes leftover after parsing attributes in process `syz.6.3320'. [ 381.581089][T17902] net_ratelimit: 11 callbacks suppressed [ 381.581106][T17902] openvswitch: netlink: Flow actions attr not present in new flow. [ 381.643742][T17906] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3323'. [ 381.653253][T17906] tipc: Invalid UDP bearer configuration [ 381.653732][T17906] tipc: Enabling of bearer rejected, failed to enable media [ 381.749797][T17912] ªªªªªªäÀŠÆFQ: renamed from wg2 (while UP) [ 381.827103][T17918] netlink: 'syz.5.3326': attribute type 8 has an invalid length. [ 381.852895][T17918] bridge5: entered promiscuous mode [ 381.892545][T17921] netlink: zone id is out of range [ 381.903734][T17921] netlink: zone id is out of range [ 381.911157][T17921] netlink: zone id is out of range [ 381.923161][T17921] netlink: zone id is out of range [ 381.950298][T17921] netlink: zone id is out of range [ 381.961851][T17927] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3328'. [ 382.013079][T17921] netlink: zone id is out of range [ 382.042568][T17921] netlink: zone id is out of range [ 382.054090][T17921] netlink: zone id is out of range [ 382.092197][T17921] netlink: zone id is out of range [ 382.120666][ T6874] IPVS: starting estimator thread 0... [ 382.224007][T17934] IPVS: using max 30 ests per chain, 72000 per kthread [ 382.246393][T17943] Bluetooth: MGMT ver 1.23 [ 382.255668][T17943] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3331'. [ 382.268340][T17943] netem: invalid attributes len -24 [ 382.333526][T17943] netem: change failed [ 382.385263][T17950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3334'. [ 383.144683][T17987] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3346'. [ 384.399351][T18031] sch_fq: defrate 0 ignored. [ 384.406028][T18047] netlink: 'syz.6.3356': attribute type 23 has an invalid length. [ 384.590044][T18051] rdma_rxe: rxe_newlink: failed to add bond0 [ 384.826102][T18067] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 385.990867][T18117] can: request_module (can-proto-0) failed. [ 386.041619][T18124] __nla_validate_parse: 11 callbacks suppressed [ 386.041639][T18124] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3378'. [ 386.218891][T18126] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 386.249999][T18128] netlink: 'syz.5.3380': attribute type 1 has an invalid length. [ 386.257915][T18126] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 386.355012][T18134] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3380'. [ 386.470051][T18140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3384'. [ 386.506400][T18134] 8021q: adding VLAN 0 to HW filter on device bond10 [ 386.547623][ T5185] Bluetooth: hci1: link tx timeout [ 386.553258][ T5185] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 386.555591][T18139] netlink: 'syz.0.3383': attribute type 1 has an invalid length. [ 386.565114][ T5185] Bluetooth: hci1: link tx timeout [ 386.575880][ T5185] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 386.605751][T18144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3384'. [ 386.710864][T18150] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 386.730449][T18150] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 386.738662][T18150] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 386.759479][T18150] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 386.781443][T18150] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 386.867346][T18139] 8021q: adding VLAN 0 to HW filter on device bond1 [ 386.939084][T18142] bond1: (slave geneve2): making interface the new active one [ 386.955158][T18142] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 387.154250][T18170] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3388'. [ 387.183924][T18171] net_ratelimit: 18 callbacks suppressed [ 387.183944][T18171] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 387.595242][T18188] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3394'. [ 387.894104][T18204] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3399'. [ 387.904523][T18205] netlink: 'syz.0.3400': attribute type 1 has an invalid length. [ 387.955084][T18201] nbd3: detected capacity change from 0 to 63 [ 387.967074][T18207] block nbd3: NBD_DISCONNECT [ 388.004232][T18207] block nbd3: Disconnected due to user request. [ 388.017736][T18207] block nbd3: shutting down sockets [ 388.034948][T18209] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 388.087044][T18209] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 388.115719][T18217] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3400'. [ 388.229638][T18205] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3400'. [ 388.321310][T18209] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3400'. [ 388.389667][T18147] chnl_net:caif_netlink_parms(): no params data found [ 388.651468][ T5185] Bluetooth: hci1: command 0x0406 tx timeout [ 388.890303][ T5873] Bluetooth: hci5: command tx timeout [ 389.100212][T18147] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.143915][T18147] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.168596][T18147] bridge_slave_0: entered allmulticast mode [ 389.185872][T18147] bridge_slave_0: entered promiscuous mode [ 389.232428][T18147] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.263044][T18147] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.315280][T18147] bridge_slave_1: entered allmulticast mode [ 389.346593][T18147] bridge_slave_1: entered promiscuous mode [ 389.471541][T18147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.541708][T18147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.763406][T18147] team0: Port device team_slave_0 added [ 389.796303][T18147] team0: Port device team_slave_1 added [ 389.912757][T18147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.922427][T18147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.950883][T18147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.040407][T18147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.061726][T18147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.133800][T18147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.220729][T18287] gtp0: entered promiscuous mode [ 390.235845][T18287] gtp0: entered allmulticast mode [ 390.515953][T18147] hsr_slave_0: entered promiscuous mode [ 390.522728][T18147] hsr_slave_1: entered promiscuous mode [ 390.544340][T18147] debugfs: 'hsr0' already exists in 'hsr' [ 390.550106][T18147] Cannot create hsr debugfs directory [ 390.963558][ T5873] Bluetooth: hci5: command tx timeout [ 391.207669][T18147] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.234076][T18147] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.438525][T18147] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.472812][T18147] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.488394][T18330] __nla_validate_parse: 5 callbacks suppressed [ 391.488412][T18330] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3428'. [ 391.637056][T18147] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.673109][T18147] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.690914][T18346] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 391.697395][T18346] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 391.772717][T18348] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3440'. [ 391.835502][T18147] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.863803][T18147] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.988708][T18348] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3440'. [ 392.392985][T18375] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3447'. [ 392.582399][T18147] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 392.638080][T18147] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 392.664117][T18147] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 392.688396][T18147] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 392.744635][T18389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.057825][ T5873] Bluetooth: hci5: command tx timeout [ 393.122587][T18407] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3457'. [ 393.254091][T18412] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3460'. [ 393.269803][T18413] netem: unknown loss type 0 [ 393.280529][T18413] netem: change failed [ 393.359151][T18147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.427142][T18417] netlink: 'syz.1.3461': attribute type 21 has an invalid length. [ 393.447802][T18417] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 393.509971][T18147] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.542455][T12684] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.549694][T12684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.594751][T12689] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.601958][T12689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.029832][T18452] netlink: 'syz.0.3472': attribute type 13 has an invalid length. [ 394.150166][T18452] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 394.220676][T18147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.312544][T18463] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3475'. [ 394.344348][T18463] !€ÿ: renamed from bond_slave_0 [ 394.562370][T18472] tun0: tun_chr_ioctl cmd 1074025675 [ 394.581438][T18472] tun0: persist disabled [ 395.014878][T18147] veth0_vlan: entered promiscuous mode [ 395.052868][T18147] veth1_vlan: entered promiscuous mode [ 395.090413][T18489] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3484'. [ 395.124591][ T5873] Bluetooth: hci5: command tx timeout [ 395.146511][T18489] netlink: 'syz.0.3484': attribute type 12 has an invalid length. [ 395.215928][T18147] veth0_macvtap: entered promiscuous mode [ 395.388295][T18495] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3486'. [ 396.748879][T18492] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.770534][T18492] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.906513][T18492] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.917683][T18492] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.952196][T18147] veth1_macvtap: entered promiscuous mode [ 396.968667][T18498] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.3487'. [ 397.045085][T12680] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 397.085996][T18492] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.106669][T18492] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.179065][T18147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.198804][T18147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.223972][T12680] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.305955][T12680] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.327367][T12680] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.350397][T18516] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3492'. [ 397.368865][T12680] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.394251][T18516] openvswitch: netlink: Flow key attr not present in new flow. [ 397.572692][T12684] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.611003][T12684] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.672887][T12684] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.682980][T12684] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.774726][T10789] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.783024][T10789] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.821366][T18531] tipc: Enabled bearer , priority 0 [ 397.833519][T10789] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.841711][T10789] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.869207][ T6302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.884278][T18529] tipc: Resetting bearer [ 397.887538][ T6302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.056070][T18540] netlink: 'syz.0.3499': attribute type 9 has an invalid length. [ 398.863811][ T6874] tipc: Node number set to 338716190 [ 399.415848][T18529] tipc: Disabling bearer [ 399.571650][T18552] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3501'. [ 399.582436][T18548] netlink: 160 bytes leftover after parsing attributes in process `syz.5.3500'. [ 399.622681][T10789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.643137][T10789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.109541][T18569] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3507'. [ 400.182816][T18566] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3506'. [ 400.460020][T18577] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3509'. [ 400.628955][T18585] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3510'. [ 400.776699][ T5185] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 400.781410][T18591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3512'. [ 400.821623][ T5185] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 400.831150][ T5185] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 400.847760][ T5185] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 400.860405][ T5185] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 400.953162][T18600] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3513'. [ 401.103453][T18605] netlink: 'syz.6.3515': attribute type 12 has an invalid length. [ 401.485501][T18631] netlink: 'syz.1.3521': attribute type 8 has an invalid length. [ 401.791061][T18647] tunl0: entered promiscuous mode [ 401.820066][T18647] netlink: 'syz.6.3528': attribute type 3 has an invalid length. [ 402.099306][T18658] __nla_validate_parse: 5 callbacks suppressed [ 402.099394][T18658] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3530'. [ 402.200121][T18663] netlink: 'syz.3.3532': attribute type 1 has an invalid length. [ 402.232570][T18663] netlink: 'syz.3.3532': attribute type 2 has an invalid length. [ 402.263947][T18660] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3531'. [ 402.499307][T18675] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3534'. [ 402.698709][T18589] chnl_net:caif_netlink_parms(): no params data found [ 402.781410][T18690] netlink: 'syz.0.3538': attribute type 2 has an invalid length. [ 402.806485][T18690] netlink: 'syz.0.3538': attribute type 3 has an invalid length. [ 402.831874][T18690] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3538'. [ 402.941875][T18589] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.957899][T18589] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.964459][ T5873] Bluetooth: hci2: command tx timeout [ 402.966685][T18589] bridge_slave_0: entered allmulticast mode [ 402.982022][T18698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3539'. [ 402.999669][T18589] bridge_slave_0: entered promiscuous mode [ 403.012265][T18589] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.028580][T18589] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.040788][T18589] bridge_slave_1: entered allmulticast mode [ 403.052667][T18589] bridge_slave_1: entered promiscuous mode [ 403.105126][T18698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3539'. [ 403.230692][T18589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.248962][T18589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.360676][T18589] team0: Port device team_slave_0 added [ 403.377607][T18589] team0: Port device team_slave_1 added [ 403.465858][T18589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.476674][T18589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.520118][T18589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.537544][T18719] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3545'. [ 403.548909][T18589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.556292][T18589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.592892][T18589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.664114][T18726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3547'. [ 403.737328][T18719] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.749124][T18719] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.761452][T18719] bond0 (unregistering): Released all slaves [ 403.964795][T18589] hsr_slave_0: entered promiscuous mode [ 403.974474][T18589] hsr_slave_1: entered promiscuous mode [ 403.980787][T18589] debugfs: 'hsr0' already exists in 'hsr' [ 403.987088][T18589] Cannot create hsr debugfs directory [ 404.008579][T18732] ipvlan2: entered promiscuous mode [ 404.051436][T18740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3552'. [ 404.065005][T18740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3552'. [ 404.396820][T18589] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.423370][T18589] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.540877][T18589] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.561202][T18589] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.611440][T18758] team0: Device gtp1 is of different type [ 404.705342][T18589] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.722689][T18589] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.835906][T18589] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.883696][T18589] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.044036][ T5873] Bluetooth: hci2: command tx timeout [ 405.052193][T18774] tipc: Enabled bearer , priority 0 [ 405.087852][T18774] tipc: Resetting bearer [ 405.159433][T18771] tipc: Disabling bearer [ 405.350003][T18589] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 405.469477][T18589] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 405.493144][T18589] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 405.577624][T18589] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 405.590631][T18794] lo: entered allmulticast mode [ 405.603075][T18794] netlink: 'syz.0.3571': attribute type 58 has an invalid length. [ 405.747089][T18793] lo: left allmulticast mode [ 405.940569][T18810] openvswitch: netlink: Actions may not be safe on all matching packets [ 406.022206][T18589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.105752][T18589] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.134264][T12680] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.141403][T12680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.199289][T12680] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.206494][T12680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.431203][T18589] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 406.467220][T18826] netlink: 'syz.0.3581': attribute type 1 has an invalid length. [ 406.572080][T18826] 8021q: adding VLAN 0 to HW filter on device bond3 [ 406.583735][T18835] tipc: Started in network mode [ 406.601918][T18835] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 406.646809][T18835] tipc: Enabled bearer , priority 10 [ 406.713073][T18842] syzkaller0: entered promiscuous mode [ 406.747117][T18842] syzkaller0: entered allmulticast mode [ 407.123920][ T5873] Bluetooth: hci2: command tx timeout [ 407.298194][T18589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.334224][T18862] tipc: Started in network mode [ 407.354258][T18862] tipc: Node identity 7ac9280d9cf5, cluster identity 4711 [ 407.383938][T18862] tipc: Enabled bearer , priority 0 [ 407.513177][T18862] tipc: Disabling bearer [ 407.639165][T18890] __nla_validate_parse: 14 callbacks suppressed [ 407.639185][T18890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3595'. [ 407.659027][T18890] tc_dump_action: action bad kind [ 407.753443][ T6872] tipc: Node number set to 4269801492 [ 407.847092][T18898] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3597'. [ 407.944959][T18902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 407.952215][T18902] IPv6: NLM_F_CREATE should be set when creating new route [ 408.003079][T18902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.021267][T18902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.097804][T18902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.126630][T18902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.153522][T18902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.183855][T18902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.191443][T18902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.211328][T18589] veth0_vlan: entered promiscuous mode [ 408.235355][T18913] sock: sock_timestamping_bind_phc: sock not bind to device [ 408.243835][T18915] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3603'. [ 408.261310][T18589] veth1_vlan: entered promiscuous mode [ 408.272155][T18902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.293936][T18902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.303988][T18902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.329635][T18902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.350280][T18902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.371432][T18902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.416058][T18589] veth0_macvtap: entered promiscuous mode [ 408.417066][T18902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.441237][T18902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.454943][T18589] veth1_macvtap: entered promiscuous mode [ 408.470299][T18902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.516273][T18902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.543912][T18589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.543964][T18902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.607584][T18589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.627476][T18902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.657487][T18902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.691968][T18902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.730408][T12691] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.749820][T12691] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.762958][T18934] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 408.812446][T12691] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.835024][T12691] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.835721][T18938] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3609'. [ 408.933421][T12691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.941794][T12691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.032803][T12684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.042573][T12684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.204042][ T5873] Bluetooth: hci2: command tx timeout [ 409.245911][T18929] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 409.461494][T18956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3613'. [ 409.481752][T18962] pim6reg527: entered allmulticast mode [ 409.986266][T18985] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 410.087463][T18991] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3623'. [ 410.189904][T18998] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 410.201610][T18998] netlink: 'syz.5.3625': attribute type 1 has an invalid length. [ 410.211637][T18998] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3625'. [ 410.272955][T18994] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3624'. [ 410.348538][T19003] netlink: 'syz.5.3626': attribute type 14 has an invalid length. [ 410.369875][T19003] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3626'. [ 410.418392][T10789] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.437943][T10789] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.454450][T19008] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3628'. [ 410.464442][T10789] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.486818][T10789] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.567463][ T5873] Bluetooth: hci0: command 0x0401 tx timeout [ 410.587026][T19015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.829469][T19030] sctp: [Deprecated]: syz.6.3629 (pid 19030) Use of int in max_burst socket option. [ 410.829469][T19030] Use struct sctp_assoc_value instead [ 411.142105][T19042] netlink: 'syz.0.3637': attribute type 6 has an invalid length. [ 411.171152][T19042] netlink: 'syz.0.3637': attribute type 1 has an invalid length. [ 411.284137][ T5873] Bluetooth: hci2: command tx timeout [ 411.403003][T19053] netlink: 'syz.5.3641': attribute type 6 has an invalid length. [ 411.412729][T19054] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 411.574527][T19061] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 411.960867][T19081] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 411.974488][T19082] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 412.303229][T19099] netlink: 'syz.0.3655': attribute type 1 has an invalid length. [ 412.672202][T19117] IPVS: length: 25 != 24 [ 412.950269][T19123] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.975736][T19131] syz_tun: entered allmulticast mode [ 413.001765][T19130] syz_tun: left allmulticast mode [ 413.283151][T19140] netlink: 'syz.1.3669': attribute type 1 has an invalid length. [ 413.321842][T19146] __nla_validate_parse: 18 callbacks suppressed [ 413.321860][T19146] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3672'. [ 413.362892][T19144] vlan2: entered allmulticast mode [ 413.380204][T19144] veth1_macvtap: entered allmulticast mode [ 413.415093][T19146] geneve2: entered promiscuous mode [ 413.554677][T19154] syzkaller1: entered promiscuous mode [ 413.593488][T19154] syzkaller1: entered allmulticast mode [ 413.613904][T19154] netlink: 'syz.0.3676': attribute type 1 has an invalid length. [ 413.622022][T19152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3675'. [ 413.632886][T19154] bridge3: entered promiscuous mode [ 413.707925][T19152] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 413.726395][T19161] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3678'. [ 413.741051][T19152] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 413.782775][T19152] gretap2: entered promiscuous mode [ 413.788538][T19152] gretap2: entered allmulticast mode [ 414.087150][T19180] netlink: 'syz.3.3682': attribute type 1 has an invalid length. [ 414.226431][T19180] veth3: entered promiscuous mode [ 414.232339][T19188] netlink: 'syz.0.3686': attribute type 1 has an invalid length. [ 414.251418][T19188] netlink: 784 bytes leftover after parsing attributes in process `syz.0.3686'. [ 414.359588][T19192] netlink: 'syz.0.3686': attribute type 1 has an invalid length. [ 414.391548][T19194] syzkaller1: entered promiscuous mode [ 414.413523][T19194] syzkaller1: entered allmulticast mode [ 414.519246][T19201] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3690'. [ 414.531680][T19202] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20003 [ 414.604773][T19206] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.3692'. [ 414.630074][T19207] netlink: 'syz.3.3691': attribute type 10 has an invalid length. [ 414.691239][T19214] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3694'. [ 414.699614][T19215] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3694'. [ 414.710339][T19215] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3694'. [ 414.907122][T19231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3699'. [ 415.205615][T19252] tipc: Started in network mode [ 415.210650][T19252] tipc: Node identity e25b7e9413dd, cluster identity 4711 [ 415.234143][T19252] tipc: Enabled bearer , priority 0 [ 415.247363][T19252] tipc: Resetting bearer [ 415.257504][T19251] tipc: Disabling bearer [ 415.664458][T19277] syz_tun: entered allmulticast mode [ 415.759262][T19277] syz_tun (unregistering): left allmulticast mode [ 415.915241][T19299] netlink: 'syz.6.3717': attribute type 12 has an invalid length. [ 416.184465][T19319] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 416.546063][T19349] netlink: 'syz.1.3728': attribute type 1 has an invalid length. [ 416.613971][T19338] netlink: 'syz.5.3730': attribute type 1 has an invalid length. [ 416.873696][T19363] pimreg: entered allmulticast mode [ 417.316068][ T6300] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.317018][T19383] [ 417.327105][T19383] ====================================================== [ 417.334116][T19383] WARNING: possible circular locking dependency detected [ 417.341128][T19383] syzkaller #0 Not tainted [ 417.345523][T19383] ------------------------------------------------------ [ 417.352520][T19383] syz.1.3737/19383 is trying to acquire lock: [ 417.358564][T19383] ffffffff8e21e8e8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x1720 [ 417.368135][T19383] [ 417.368135][T19383] but task is already holding lock: [ 417.375487][T19383] ffff888142fac558 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 417.385758][T19383] [ 417.385758][T19383] which lock already depends on the new lock. [ 417.385758][T19383] [ 417.396152][T19383] [ 417.396152][T19383] the existing dependency chain (in reverse order) is: [ 417.405160][T19383] [ 417.405160][T19383] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 417.413765][T19383] lock_acquire+0x120/0x360 [ 417.418836][T19383] blk_alloc_queue+0x538/0x620 [ 417.424124][T19383] __blk_mq_alloc_disk+0x15c/0x340 [ 417.429752][T19383] nbd_dev_add+0x46c/0xae0 [ 417.434679][T19383] nbd_init+0x168/0x1f0 [ 417.439353][T19383] do_one_initcall+0x233/0x820 [ 417.444625][T19383] do_initcall_level+0x104/0x190 [ 417.450070][T19383] do_initcalls+0x59/0xa0 [ 417.454904][T19383] kernel_init_freeable+0x334/0x4b0 [ 417.460609][T19383] kernel_init+0x1d/0x1d0 [ 417.465449][T19383] ret_from_fork+0x439/0x7d0 [ 417.470546][T19383] ret_from_fork_asm+0x1a/0x30 [ 417.475829][T19383] [ 417.475829][T19383] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 417.483029][T19383] lock_acquire+0x120/0x360 [ 417.488046][T19383] fs_reclaim_acquire+0x72/0x100 [ 417.493491][T19383] prepare_alloc_pages+0x153/0x610 [ 417.499110][T19383] __alloc_frozen_pages_noprof+0x123/0x370 [ 417.505420][T19383] __alloc_pages_noprof+0xa/0x30 [ 417.510859][T19383] pcpu_populate_chunk+0x182/0xb30 [ 417.516492][T19383] pcpu_alloc_noprof+0xcbf/0x1720 [ 417.522033][T19383] bpf_map_alloc_percpu+0xbc/0x1b0 [ 417.527672][T19383] prealloc_init+0x225/0x630 [ 417.532779][T19383] htab_map_alloc+0x6ce/0xc70 [ 417.537963][T19383] map_create+0xaa3/0x14d0 [ 417.542890][T19383] __sys_bpf+0x60f/0x870 [ 417.547641][T19383] __x64_sys_bpf+0x7c/0x90 [ 417.552562][T19383] do_syscall_64+0xfa/0x3b0 [ 417.557574][T19383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.563970][T19383] [ 417.563970][T19383] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 417.571688][T19383] validate_chain+0xb9b/0x2140 [ 417.576957][T19383] __lock_acquire+0xab9/0xd20 [ 417.582145][T19383] lock_acquire+0x120/0x360 [ 417.587157][T19383] __mutex_lock+0x187/0x1350 [ 417.592256][T19383] pcpu_alloc_noprof+0x286/0x1720 [ 417.597793][T19383] sbitmap_init_node+0x1e1/0x630 [ 417.603236][T19383] sbitmap_queue_init_node+0x3e/0x4d0 [ 417.609117][T19383] blk_mq_init_tags+0x110/0x280 [ 417.614479][T19383] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 417.620448][T19383] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 417.626764][T19383] nbd_start_device+0x17f/0xb10 [ 417.632129][T19383] nbd_genl_connect+0x135b/0x18f0 [ 417.637662][T19383] genl_family_rcv_msg_doit+0x212/0x300 [ 417.643720][T19383] genl_rcv_msg+0x60e/0x790 [ 417.648733][T19383] netlink_rcv_skb+0x208/0x470 [ 417.654006][T19383] genl_rcv+0x28/0x40 [ 417.658501][T19383] netlink_unicast+0x82f/0x9e0 [ 417.663776][T19383] netlink_sendmsg+0x805/0xb30 [ 417.669045][T19383] __sock_sendmsg+0x219/0x270 [ 417.674233][T19383] ____sys_sendmsg+0x505/0x830 [ 417.679506][T19383] ___sys_sendmsg+0x21f/0x2a0 [ 417.684692][T19383] __x64_sys_sendmsg+0x19b/0x260 [ 417.690144][T19383] do_syscall_64+0xfa/0x3b0 [ 417.695156][T19383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.701556][T19383] [ 417.701556][T19383] other info that might help us debug this: [ 417.701556][T19383] [ 417.711765][T19383] Chain exists of: [ 417.711765][T19383] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#50 [ 417.711765][T19383] [ 417.725405][T19383] Possible unsafe locking scenario: [ 417.725405][T19383] [ 417.732834][T19383] CPU0 CPU1 [ 417.738182][T19383] ---- ---- [ 417.743529][T19383] lock(&q->q_usage_counter(io)#50); [ 417.748897][T19383] lock(fs_reclaim); [ 417.755386][T19383] lock(&q->q_usage_counter(io)#50); [ 417.763270][T19383] lock(pcpu_alloc_mutex); [ 417.767759][T19383] [ 417.767759][T19383] *** DEADLOCK *** [ 417.767759][T19383] [ 417.775881][T19383] 6 locks held by syz.1.3737/19383: [ 417.781057][T19383] #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 417.789235][T19383] #1: ffffffff8f59f688 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 417.798189][T19383] #2: ffff888024a45988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1aa0 [ 417.809577][T19383] #3: ffff888024a458d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1aa0 [ 417.820528][T19383] #4: ffff888142fac558 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 417.831225][T19383] #5: ffff888142fac590 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 417.842183][T19383] [ 417.842183][T19383] stack backtrace: [ 417.848065][T19383] CPU: 1 UID: 0 PID: 19383 Comm: syz.1.3737 Not tainted syzkaller #0 PREEMPT(full) [ 417.848084][T19383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 417.848097][T19383] Call Trace: [ 417.848104][T19383] [ 417.848112][T19383] dump_stack_lvl+0x189/0x250 [ 417.848134][T19383] ? __pfx_dump_stack_lvl+0x10/0x10 [ 417.848153][T19383] ? __pfx__printk+0x10/0x10 [ 417.848177][T19383] ? print_lock_name+0xde/0x100 [ 417.848199][T19383] print_circular_bug+0x2ee/0x310 [ 417.848220][T19383] check_noncircular+0x134/0x160 [ 417.848240][T19383] validate_chain+0xb9b/0x2140 [ 417.848267][T19383] __lock_acquire+0xab9/0xd20 [ 417.848293][T19383] ? pcpu_alloc_noprof+0x286/0x1720 [ 417.848316][T19383] lock_acquire+0x120/0x360 [ 417.848339][T19383] ? pcpu_alloc_noprof+0x286/0x1720 [ 417.848367][T19383] __mutex_lock+0x187/0x1350 [ 417.848386][T19383] ? pcpu_alloc_noprof+0x286/0x1720 [ 417.848409][T19383] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 417.848426][T19383] ? kasan_save_track+0x4f/0x80 [ 417.848446][T19383] ? kasan_save_track+0x3e/0x80 [ 417.848465][T19383] ? __kasan_kmalloc+0x93/0xb0 [ 417.848490][T19383] ? blk_mq_init_tags+0x85/0x280 [ 417.848511][T19383] ? blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 417.848528][T19383] ? blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 417.848546][T19383] ? pcpu_alloc_noprof+0x286/0x1720 [ 417.848568][T19383] ? nbd_genl_connect+0x135b/0x18f0 [ 417.848583][T19383] ? genl_family_rcv_msg_doit+0x212/0x300 [ 417.848606][T19383] ? genl_rcv_msg+0x60e/0x790 [ 417.848627][T19383] ? __pfx___mutex_lock+0x10/0x10 [ 417.848644][T19383] ? ____sys_sendmsg+0x505/0x830 [ 417.848663][T19383] ? do_syscall_64+0xfa/0x3b0 [ 417.848680][T19383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.848703][T19383] pcpu_alloc_noprof+0x286/0x1720 [ 417.848733][T19383] sbitmap_init_node+0x1e1/0x630 [ 417.848753][T19383] ? __kasan_kmalloc+0x93/0xb0 [ 417.848775][T19383] sbitmap_queue_init_node+0x3e/0x4d0 [ 417.848795][T19383] blk_mq_init_tags+0x110/0x280 [ 417.848818][T19383] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 417.848838][T19383] ? blk_mq_update_nr_hw_queues+0x928/0x1aa0 [ 417.848857][T19383] ? kfree+0x18e/0x440 [ 417.848878][T19383] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 417.848905][T19383] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 417.848932][T19383] ? sysfs_add_file_mode_ns+0x259/0x300 [ 417.848961][T19383] nbd_start_device+0x17f/0xb10 [ 417.848980][T19383] ? device_create_file+0xf4/0x1c0 [ 417.848999][T19383] nbd_genl_connect+0x135b/0x18f0 [ 417.849019][T19383] ? __pfx_nbd_genl_connect+0x10/0x10 [ 417.849039][T19383] ? __nla_parse+0x40/0x60 [ 417.849057][T19383] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 417.849084][T19383] genl_family_rcv_msg_doit+0x212/0x300 [ 417.849109][T19383] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 417.849137][T19383] ? stack_trace_save+0x9c/0xe0 [ 417.849159][T19383] genl_rcv_msg+0x60e/0x790 [ 417.849182][T19383] ? __pfx_genl_rcv_msg+0x10/0x10 [ 417.849203][T19383] ? __pfx_nbd_genl_connect+0x10/0x10 [ 417.849224][T19383] netlink_rcv_skb+0x208/0x470 [ 417.849239][T19383] ? __lock_acquire+0xab9/0xd20 [ 417.849262][T19383] ? __pfx_genl_rcv_msg+0x10/0x10 [ 417.849283][T19383] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 417.849307][T19383] ? down_read+0x1ad/0x2e0 [ 417.849327][T19383] genl_rcv+0x28/0x40 [ 417.849346][T19383] netlink_unicast+0x82f/0x9e0 [ 417.849374][T19383] ? __pfx_netlink_unicast+0x10/0x10 [ 417.849399][T19383] ? netlink_sendmsg+0x642/0xb30 [ 417.849414][T19383] ? skb_put+0x11b/0x210 [ 417.849433][T19383] netlink_sendmsg+0x805/0xb30 [ 417.849454][T19383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.849473][T19383] ? aa_sock_msg_perm+0xf1/0x1d0 [ 417.849494][T19383] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 417.849511][T19383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.849529][T19383] __sock_sendmsg+0x219/0x270 [ 417.849554][T19383] ____sys_sendmsg+0x505/0x830 [ 417.849576][T19383] ? __pfx_____sys_sendmsg+0x10/0x10 [ 417.849599][T19383] ? import_iovec+0x74/0xa0 [ 417.849621][T19383] ___sys_sendmsg+0x21f/0x2a0 [ 417.849642][T19383] ? __pfx____sys_sendmsg+0x10/0x10 [ 417.849676][T19383] ? __fget_files+0x2a/0x420 [ 417.849690][T19383] ? __fget_files+0x3a0/0x420 [ 417.849707][T19383] __x64_sys_sendmsg+0x19b/0x260 [ 417.849728][T19383] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 417.849753][T19383] ? rcu_is_watching+0x15/0xb0 [ 417.849771][T19383] ? do_syscall_64+0xbe/0x3b0 [ 417.849790][T19383] do_syscall_64+0xfa/0x3b0 [ 417.849807][T19383] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.849823][T19383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.849839][T19383] ? clear_bhb_loop+0x60/0xb0 [ 417.849857][T19383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.849875][T19383] RIP: 0033:0x7feb2158eec9 [ 417.849890][T19383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.849905][T19383] RSP: 002b:00007feb22414038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.849921][T19383] RAX: ffffffffffffffda RBX: 00007feb217e6090 RCX: 00007feb2158eec9 [ 417.849933][T19383] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 417.849944][T19383] RBP: 00007feb21611f91 R08: 0000000000000000 R09: 0000000000000000 [ 417.849954][T19383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.849964][T19383] R13: 00007feb217e6128 R14: 00007feb217e6090 R15: 00007ffce8d01558 [ 417.849982][T19383] [ 417.858995][ T6300] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.392589][T18150] block nbd1: Receive control failed (result -32) [ 418.399715][ T5185] block nbd1: Receive control failed (result -32) [ 418.409747][ T6300] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.419356][ T6300] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.432470][T19383] nbd1: detected capacity change from 0 to 127 [ 418.883634][ T5185] Bluetooth: hci2: command 0x0405 tx timeout