last executing test programs: 1m38.703685898s ago: executing program 3 (id=724): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000700000000060015000400000014001680100008"], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r1, 0x10, 0x0, @void}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000030000000900010073797a310000000014000000020a010400000000000000000000000020000000000a010800000000000000000a0000000900010073797a310000000034000000140a030000000000000000000300000008000340000000000900010073797a3100000000090002"], 0xb0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="500100001a0001000000000000000000020000000000000b002f000005001b001100000006001d004e21000008000200e0"], 0x150}}, 0x4) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) getpeername$l2tp6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000300)=0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f0000000440), &(0x7f00000005c0)="e39168b62269c0c3a3dcacf704dab5b04d913aea2863f174b3ecaedba2ee0e8cff0f0000eda8bf309664bbc9352b5724a3c90befc5a627bc70a4ade8d1b166fdcb3d41e91f37670b3b97641c5478d43dc06ea6928713b9a1ebf25ea65bbfc8c3db00c5ffc10196e9ac3a29028087b15fe7a1eb63065f00d9bc1487619502b688fc4576247682614680257970e81b", 0x802, r5}, 0x38) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000280)={'vxcan0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xd8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r7 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x400000000000047, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000000080007000800"/28], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$OSF_MSG_REMOVE(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0xbb8, 0x1, 0x5, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [{{0x254, 0x1, {{}, 0x9, 0x9, 0xfffd, 0x7b9b, 0x2, 'syz0\x00', "cc22968c085b5accfb5c3e33d7ac210635e355e66c5eb55139477e7b95ae945c", "919513c7e95d3f06497747074dfa9c49dc02eb0fe1417ced695d0aca6eb0cdfc", [{0x4, 0x2, {0x3, 0x8}}, {0x5, 0x0, {0x1, 0x1}}, {0xf9, 0x1, {0x0, 0x4788}}, {0x5, 0x9, {0x3, 0xc}}, {0x2000, 0x9, {0x1, 0x100}}, {0x8, 0x3, {0x2, 0x9}}, {0x101, 0x5, {0x1, 0x2}}, {0x6, 0x1, {0x3, 0x8e6a}}, {0x7, 0x30, {0x2, 0x6}}, {0x3, 0x9, {0x3, 0x6}}, {0x7, 0x0, {0x0, 0x1}}, {0x3, 0x80, {0x2, 0x3}}, {0x79a, 0x100, {0x2, 0x1}}, {0x6, 0x1, {0x3, 0x2}}, {0x2, 0x8000, {0x1, 0x7}}, {0x800, 0x0, {0x2}}, {0x5, 0x1, {0x3, 0xfffffff7}}, {0xfff9, 0x6, {0x2, 0x9}}, {0x5, 0xffff, {0x936178ca076ab602, 0x100}}, {0x1122, 0xc, {0x3, 0x9}}, {0x9, 0x40, {0x0, 0x3}}, {0xf000, 0x6e5b, {0x0, 0x800}}, {0x991, 0x2, {0x3, 0xffffffff}}, {0x8, 0x61d}, {0x9, 0x0, {0x1, 0x5}}, {0x400, 0x6, {0x3, 0xdc2}}, {0x7, 0x1, {0x2}}, {0x7f, 0x0, {0x0, 0x99c}}, {0x80, 0x5, {0x3, 0x3}}, {0xffff, 0x8000, {0x1, 0x4}}, {0x9, 0x9, {0x0, 0x2ea}}, {0xffff, 0x5, {0x1, 0x5}}, {0x51, 0x1, {0x3, 0xfb}}, {0x7f, 0x6, {0x1, 0xfffffff9}}, {0xfffa, 0x8833, {0x4, 0x5}}, {0xfffd, 0x2, {0x2, 0x1}}, {0x4ec5, 0x3, {0x1, 0x3}}, {0x3, 0x0, {0x3}}, {0x5, 0x4, {0x2, 0x5}}, {0x4c, 0x5, {0x2, 0x8}}]}}}, {{0x254, 0x1, {{0x2, 0xfffffff8}, 0x7, 0x5, 0x8001, 0xffaa, 0x8, 'syz1\x00', "32b214300d0037fa19186d1ee650e8dc479fc1c17bcda905470fd72802aa1e74", "0717048a4770124bf24a0ceb0b61a2e3fc35791d7765c67faceaf1842def5d83", [{0x7, 0x0, {0x0, 0x11f}}, {0x4, 0x3, {0x3, 0x81}}, {0x2, 0x46, {0x2, 0x6}}, {0x5, 0x2, {0x3, 0x80000000}}, {0x8, 0x8, {0x2, 0x8}}, {0x1, 0x5, {0x1, 0x8}}, {0x4, 0x1, {0x0, 0x5}}, {0xb621, 0x7fff, {0x2, 0x8}}, {0x0, 0x2}, {0x507, 0x4, {0x0, 0x9}}, {0x9, 0x7, {0x3, 0xfff}}, {0x69, 0x7, {0x1, 0x6}}, {0x20, 0x8, {0x2, 0x4800000}}, {0x0, 0x3, {0x1, 0x100}}, {0x8000, 0x7af, {0x1, 0x4000000}}, {0x4, 0xcf2, {0x2, 0x7fffffff}}, {0xfffe, 0xfffb, {0x3, 0x37f5a57c}}, {0xd, 0x5, {0x3, 0x28}}, {0x69, 0xff, {0x0, 0x400}}, {0xb561, 0x0, {0x1}}, {0x0, 0x399a, {0x3, 0x3}}, {0x8, 0x8, {0x3, 0x2}}, {0x0, 0xe17f, {0x3, 0x80000000}}, {0x1, 0x1, {0x94b349a44b3781f3, 0x512d}}, {0x0, 0x8001, {0x1, 0x4}}, {0x12b, 0xb85, {0x1, 0x3ff}}, {0x2, 0x5, {0x0, 0x5}}, {0x4, 0x9, {0x3, 0x8}}, {0x8, 0x2, {0x3, 0x775}}, {0x9, 0xe0bf, {0x3, 0x9}}, {0xc, 0xfff9, {0x0, 0x3}}, {0x4, 0x5, {0x0, 0xffff8001}}, {0x10, 0x800, {0x3, 0xd}}, {0x7, 0x4, {0x1, 0xe4}}, {0x4, 0x3, {0x0, 0x10001}}, {0x8, 0x340, {0x2, 0x6}}, {0x3, 0x6, {0x1, 0x5}}, {0xdb, 0x5, {0x1, 0x4}}, {0x7, 0x81, {0x3, 0xd}}, {0x2, 0xfff7, {0x2}}]}}}, {{0x254, 0x1, {{0x2, 0x2}, 0x4, 0x7, 0x3, 0x9, 0xd, 'syz1\x00', "46a1d64cc76159f39e875bdb179bff259341e5842747b8fd21fc8c5709b22999", "ee9a5bd362e4e29c1dd0bd4b8f776df3457b7ea2c7835f16698f3e5c2394cbe4", [{0x8001, 0x7, {0x2, 0x5}}, {0x9, 0x8, {0x1, 0x1ff}}, {0x2, 0x8, {0x3, 0x2230}}, {0x4c, 0x80, {0x2, 0x1}}, {0x9, 0x1, {0x2, 0x7}}, {0x8, 0xba, {0x3, 0x6}}, {0x7fff, 0x3, {0x3, 0xc}}, {0x4, 0x2, {0x2, 0x2d99}}, {0x4dc7, 0x9, {0x0, 0xf72}}, {0x4, 0x4, {0x2, 0x8}}, {0x954, 0x1, {0x1, 0x6}}, {0x8, 0x9, {0x3}}, {0x10, 0x101, {0x2, 0x3}}, {0x9, 0x2, {0x2, 0x9d47}}, {0xe57, 0x4, {0x3, 0x80000000}}, {0x5, 0x8000, {0x2, 0x7}}, {0x101, 0x9, {0x1, 0x8}}, {0x4, 0x3a, {0x3, 0x6000000}}, {0x3, 0x5d7, {0x2, 0x7}}, {0x4, 0x1, {0x3, 0x80000001}}, {0xa, 0xd63, {0x2, 0x4a7}}, {0x7f, 0x4, {0x3, 0x101}}, {0x0, 0x8, {0x2, 0x807}}, {0x0, 0x9, {0x2, 0x3}}, {0x41, 0xf, {0x0, 0x400}}, {0x277, 0x8, {0x1, 0x1}}, {0x72a, 0x9, {0x3, 0xffffffff}}, {0x0, 0x376a, {0x2, 0x3}}, {0x80, 0x7da, {0x0, 0xfff}}, {0x7, 0x9, {0x0, 0x7}}, {0x1, 0x6, {0x0, 0x558}}, {0x4, 0x6, {0x0, 0xf07e}}, {0x4, 0xbfba, {0x0, 0x4}}, {0x9, 0x3337, {0x2, 0xbc55}}, {0x0, 0x4, {0x0, 0x6}}, {0x3a, 0x7, {0x2, 0x400}}, {0x101, 0x1, {0x0, 0x80000000}}, {0x401, 0x0, {0x3, 0x8}}, {0xd, 0x6, {0x1, 0x6}}, {0x70, 0x9, {0x0, 0x5}}]}}}, {{0x254, 0x1, {{0x1, 0x400}, 0x10, 0x9a, 0x3, 0x80, 0xa, 'syz0\x00', "23a68cb3123048d241e8852cf1ae191e838244f18c4a42e065108761093ecc26", "ea552157f63338c64b4eedc2cb04a67c0fb54011e3902e5ed2efd1505b9d2e72", [{0xa6d5, 0xf, {0x0, 0x40}}, {0x4, 0x1, {0x0, 0x80}}, {0x9, 0x5713, {0x0, 0x8001}}, {0xe8, 0xfffe, {0x2, 0x80000001}}, {0xfffe, 0x7, {0x1, 0x7fff}}, {0x6, 0x876f, {0x1, 0xb92}}, {0x0, 0xd, {0x1, 0x1}}, {0xf375, 0x7ff, {0x2, 0x1}}, {0x1ff, 0x6, {0x3, 0x5}}, {0x3ff, 0x723, {0x1}}, {0x4, 0x6dde, {0x2, 0x200}}, {0x8, 0x81, {0x1, 0x5}}, {0x7ff, 0xffff, {0x2, 0x3}}, {0xe3, 0xc70, {0x1, 0x9}}, {0x8, 0xff, {0x2, 0xdb1}}, {0xff, 0x800, {0x3, 0x9}}, {0x0, 0xa, {0x3, 0x9}}, {0x7, 0x8, {0x3, 0x7f}}, {0x7f, 0x3, {0x1, 0x1}}, {0x9, 0x0, {0xeaa75ce00addbe3c, 0x2}}, {0x65, 0x5}, {0x8000, 0x762, {0x3, 0x9}}, {0x5, 0x4, {0x0, 0x80000000}}, {0x4, 0x1, {0x1, 0x8}}, {0x8, 0xfffa, {0x2, 0x7b}}, {0x800, 0x8, {0x0, 0x6}}, {0x80, 0x4, {0x1}}, {0x5, 0xef, {0x2, 0xb157}}, {0x4, 0x1, {0x0, 0x7}}, {0x9, 0xd2, {0x0, 0x8000}}, {0x9, 0x9, {0x3, 0xed62}}, {0x32f3, 0x3, {0x1, 0xfffffffe}}, {0x0, 0x5790, {0x2, 0x1000}}, {0x7, 0x77d1, {0x0, 0x1000}}, {0x6, 0x5, {0x3, 0xf25bdd6}}, {0xfffe, 0x4, {0x2, 0x3}}, {0xfff, 0x7ff, {0x0, 0x3}}, {0x87, 0x9, {0x0, 0x4}}, {0x2, 0x4, {0x2, 0x401}}, {0x3, 0x4d6, {0x2, 0xd12}}]}}}, {{0x254, 0x1, {{0x3, 0xff}, 0x93, 0x0, 0xffff, 0x6, 0x3, 'syz0\x00', "39f7ffd5731c45518dc22b6356818283f7b200a0f60dbc612d76f93b352980f1", "b5fe69beb43e66c1b8999b931e1a4437b9080d44a8f6d477c8a45a2401b4963e", [{0x6, 0x1, {0x0, 0xfffffffa}}, {0x2c, 0xfffc, {0x1, 0x2000}}, {0x8, 0x3, {0x0, 0x7fffffff}}, {0x64e, 0x4, {0x0, 0x1}}, {0xfffa, 0x8, {0x1, 0x8}}, {0x4, 0xc1, {0x3, 0x6}}, {0x7, 0x3ff, {0x0, 0x3}}, {0xb, 0x0, {0x0, 0x9}}, {0x7, 0xff, {0x2, 0x4}}, {0x1, 0x4, {0x3, 0x7}}, {0x1, 0xb6, {0x3, 0x4}}, {0x101, 0xa66, {0x0, 0x9}}, {0x5, 0x0, {0x0, 0x4}}, {0xe, 0x3425, {0x2, 0xc4}}, {0x2, 0xd0b, {0x3, 0xfb5}}, {0x1, 0xfb77, {0x3, 0x9}}, {0x9, 0xb52f, {0x3, 0x5e8d}}, {0x7, 0x8, {0x3, 0xfffff31a}}, {0x5, 0x0, {0x0, 0x800}}, {0x8001, 0x3, {0x0, 0x9}}, {0xf90, 0x9, {0x3, 0xe}}, {0x7, 0xfffb, {0x1, 0x3}}, {0xfff9, 0x2}, {0x64, 0xe842, {0x3, 0xd}}, {0x2, 0x1, {0x1, 0x30}}, {0xffff, 0x200, {0x1, 0x2c5e}}, {0x1, 0x81, {0x0, 0x5}}, {0x70e, 0x1, {0x2}}, {0x80, 0x5, {0x2, 0x1}}, {0x0, 0x3, {0x0, 0x1d}}, {0xd669, 0x8, {0x2}}, {0x5, 0x2, {0x1, 0xbe}}, {0x93c, 0x5, {0x3, 0xe17}}, {0x3, 0x5, {0x3, 0x5}}, {0x9, 0x40, {0x3, 0xffffffff}}, {0x100, 0x3, {0x2, 0x9}}, {0x12, 0x1, {0x2, 0x8}}, {0x6, 0x25, {0x3, 0x5}}, {0x2, 0x0, {0x3, 0x8}}, {0x4, 0xff, {0x2, 0x4}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004) 1m38.425975969s ago: executing program 3 (id=728): socket(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xe, 0x5, 0xfff, 0x20000000, 0x1, 0x5, 0x922, 0x8, 0xdcf, 0xfffffffb, 0x37, 0x1, 0xde, 0x8, 0xfa63, 0x10001, 0xf6, 0x401, 0x5, 0x1, 0x4, 0x7, 0x6}}) socket(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00'}) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xe, 0x5, 0xfff, 0x20000000, 0x1, 0x5, 0x922, 0x8, 0xdcf, 0xfffffffb, 0x37, 0x1, 0xde, 0x8, 0xfa63, 0x10001, 0xf6, 0x401, 0x5, 0x1, 0x4, 0x7, 0x6}}) (async) 1m38.208726339s ago: executing program 3 (id=731): r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x80800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'pim6reg0\x00', 0x0}) r2 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000140)=0x3, &(0x7f0000000180)=0x4) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000001c0)={0x0, 0x3, 0x101}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000005c0)={r4, 0x759, 0xef, 0x1}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f0000000a00)={'sit0\x00', &(0x7f00000009c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @multicast2, 0x8, 0x1f}}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x16, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x9, 0x1, 0x0, r0}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000b40)='syzkaller\x00', 0x8, 0x9c, &(0x7f0000000b80)=""/156, 0x41100, 0x22, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000c80)={0x3, 0x10, 0x2, 0xe41}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, r3, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000d00)=[{0x3, 0x4, 0x3, 0x9}, {0x2, 0x3, 0x4, 0x8}, {0x2, 0x4, 0xa, 0xc}, {0x5, 0x4, 0xe, 0x9}, {0x2, 0x5, 0x6, 0x3}], 0x10, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000a40)='svcrdma_post_send\x00', r6, 0x0, 0x3}, 0x18) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCX25SENDCALLACCPT(r2, 0x89e9) epoll_wait(0xffffffffffffffff, &(0x7f0000000e80), 0x0, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001040)={&(0x7f0000000ec0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x7, [@int={0xb, 0x0, 0x0, 0x1, 0x0, 0x43, 0x0, 0x3f, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x8}}, @volatile={0x2, 0x0, 0x0, 0x9, 0x4}, @const={0x1, 0x0, 0x0, 0xa, 0x3}, @volatile={0x7, 0x0, 0x0, 0x9, 0x4}, @func={0xc, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x66, 0x30, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000f40)=""/241, 0x77, 0xf1, 0x1, 0xffff}, 0x28) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000010c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001180)={'ip6_vti0\x00', &(0x7f0000001100)={'syztnl2\x00', r1, 0x29, 0x5c, 0x5, 0xd7a, 0x4, @loopback, @mcast2, 0x1, 0x8000, 0x8, 0x8}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001280)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x64, r8, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001300), r7) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r10, &(0x7f00000014c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4284}, 0xc, &(0x7f0000001480)={&(0x7f0000001340)={0x124, r11, 0x800, 0x70bd28, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x101}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xa6b}, {0x6, 0x11, 0x1000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0xcfef}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8001}}]}, 0x124}, 0x1, 0x0, 0x0, 0x200080c0}, 0x1) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), r7) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x7c, r12, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc055}, 0x4010) r13 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001680), 0x2, 0x0) write$cgroup_subtree(r13, &(0x7f00000016c0)={[{0x2b, 'pids'}]}, 0x6) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r7, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffc}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$GTP_CMD_ECHOREQ(r10, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20040040}, 0x10) 1m37.2843583s ago: executing program 3 (id=733): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000050c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005180)={&(0x7f0000005100)={0x44, r5, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x40080) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x1000) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYRES16=r6, @ANYRES32=r6, @ANYBLOB='@\x00/'], 0x5c}}, 0x24008000) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) (async) listen(r0, 0x0) (async, rerun: 32) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) (async) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DONE(r8, 0x29, 0xc9, 0x0, 0x0) listen(r7, 0x0) (async, rerun: 32) r9 = socket$netlink(0x10, 0x3, 0x4) (rerun: 32) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7101400000000000000ffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 1m37.282934173s ago: executing program 3 (id=734): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0x4, 0x6, 0x14, @ipv4={'\x00', '\xff\xff', @broadcast}, @private2, 0x7, 0x8000, 0x1, 0xffff}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_PRIMARY={0x8, 0xb, r1}]}}}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x5}, @IFLA_NET_NS_FD={0x8}, @IFLA_IFALIASn={0x4}, @IFLA_EVENT={0x8, 0x2c, 0xfffffff7}]}, 0x60}}, 0x0) 1m37.282576624s ago: executing program 3 (id=735): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x50) r2 = socket(0x11, 0xa, 0x8) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x18, @multicast1}, {0x0, 0xe22, 0x18, 0x0, @wg=@data}}}}}, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x7280}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x2) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0x6, 0x2, 0x0, @private=0xa010102, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0x8, 0x65, 0x2005, 0x1, 0x11, 0x3, @private=0xa010102, @local}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={r6, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000260001000a000800041000000600000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000260001000a000800041000000600000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 1m22.340656487s ago: executing program 32 (id=735): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x50) r2 = socket(0x11, 0xa, 0x8) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x18, @multicast1}, {0x0, 0xe22, 0x18, 0x0, @wg=@data}}}}}, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x7280}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x2) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0x6, 0x2, 0x0, @private=0xa010102, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0x8, 0x65, 0x2005, 0x1, 0x11, 0x3, @private=0xa010102, @local}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={r6, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000260001000a000800041000000600000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000260001000a000800041000000600000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 5.346059669s ago: executing program 0 (id=1649): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000300)={0x2, &(0x7f0000000500)=[{0x28, 0x5, 0x0, 0xfffff034}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) syz_emit_ethernet(0xd6, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void, {0x8100, 0x6, 0x0, 0x4}}, {@ipv4={0x800, @igmp={{0x2f, 0x4, 0x0, 0x38, 0xc4, 0x66, 0x0, 0x1, 0x2, 0x0, @multicast1, @loopback, {[@timestamp_addr={0x44, 0x4c, 0xe2, 0x1, 0x9, [{@multicast1, 0x6}, {@loopback, 0x75a}, {@loopback, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@local, 0xffffffbb}, {@multicast1, 0x7ff}, {@private=0xa010102, 0xb}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast1, 0xac8}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x44, 0x6b, 0x3, 0x8, [{@remote, 0xff}, {@local, 0x7}, {@multicast2, 0xd}, {@loopback, 0x7}, {@loopback, 0x101}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xba59}, {@broadcast, 0xffff5a68}, {@broadcast}]}, @cipso={0x86, 0x14, 0x3, [{0x6, 0xc, "f7fbfcab960dcc10a12a"}, {0x1, 0x2}]}]}}, {0x15, 0xcb, 0x0, @local}}}}}, 0x0) 4.98877755s ago: executing program 0 (id=1653): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000000400000800"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000dd010000070000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r2, r4, 0x25, 0x4, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0xc}}, 0x30) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r2, r4, 0x25, 0x4, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0xc}}, 0x30) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6708100000003aff00034000000000000000ffffac1414aaff020000000000000000000000000001"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x1c, r5}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r5, 0x58, &(0x7f0000000200)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r5, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="03000000040000000400"/20, @ANYRES32=r6, @ANYBLOB="1e719e7c00"/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="0400000002000000040000000000"], 0x50) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000100), 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r9, 0x8927, &(0x7f0000000140)={0x23a, 0xfffffffe, 0x0, 0x0, 0x3, [0x0, 0xffffffff, 0x4000097]}) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r9, 0x8927, &(0x7f0000000140)={0x23a, 0xfffffffe, 0x0, 0x0, 0x3, [0x0, 0xffffffff, 0x4000097]}) sendmsg$can_bcm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500000008000000ed00000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="03"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$can_bcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYBLOB="ae5c", @ANYRES64=r5, @ANYRESOCT=r5], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r8, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r10}, 0x10, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) (async) sendmsg$can_bcm(r8, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r10}, 0x10, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) syz_genetlink_get_family_id$team(&(0x7f0000000440), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$team(&(0x7f0000000440), 0xffffffffffffffff) r11 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10) socket$nl_audit(0x10, 0x3, 0x9) (async) r12 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r12, &(0x7f0000002680)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x102000}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x20, 0x3fa, 0x1, 0x70bd28, 0x25dfdbfe, {0x1, 0x0, 0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x60000804}, 0x4000000) (async) sendmsg$AUDIT_SET_FEATURE(r12, &(0x7f0000002680)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x102000}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x20, 0x3fa, 0x1, 0x70bd28, 0x25dfdbfe, {0x1, 0x0, 0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x60000804}, 0x4000000) connect$inet(r11, &(0x7f0000000140)={0x2, 0x4e21, @private=0xa010101}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x100, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0xfffffffd, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x100, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0xfffffffd, 0xfffffffa}}}}]}, 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000500)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='filemap_set_wb_err\x00', r2}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='filemap_set_wb_err\x00', r2}, 0x18) 4.624420171s ago: executing program 0 (id=1658): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x1000}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x6a21}]}}}]}, 0x44}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) ioctl$int_in(r0, 0x5421, &(0x7f0000000300)=0x8) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(r3, &(0x7f0000000a80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x4008000) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\b@', 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "00001c050000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8675b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x22, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200fff500000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 4.364211835s ago: executing program 1 (id=1663): r0 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x60) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000429bd7000ffdbdf25010000000500020002000000140400000002000000000000000000000000000106000a0003ff00000800060000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x2200, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000c80)={'veth0_macvtap\x00', 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0xffe6, 0xb}, {0xffff, 0xffe4}}, [@TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xf, 0x1, 0x274, 0x0, 0x100, 0x9, 0x1}}, {0x6, 0x2, [0xffff]}}, {{0x1c, 0x1, {0x80, 0x8, 0x9, 0xa, 0x0, 0x5, 0x3, 0x4}}, {0xc, 0x2, [0x1000, 0x7, 0xd7, 0xfc00]}}]}]}, 0x74}}, 0x4008000) socket$kcm(0x2, 0xa, 0x2) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4) 4.244927945s ago: executing program 0 (id=1664): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000feffffff000000000000000018110001ee61bc4603911ee712d70a1cacb205f5db904846fec7d751a5ff7f404615bcc70b126992ed24ac25f01768df639113c4e3e6a57f3b1dd18c9d5ec0f104f87eab63217431ac4d0360cde43bc7bd176b33d41e1ed06bf6549d19634cb7193d1793b82c734ad319f8d79a6186fa71349172188a89fa9337e991d33d4b0ac3ff9d1d2f4daaaccb42541e81c2191a89c510954c2dee57111efb6ff059ec42afe02d827208599bb236b2", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1019, &(0x7f0000001200)=""/4121, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) unshare(0x62040200) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fd254c27070000000800010021000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20040041}, 0x4) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fd254c27070000000800010021000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20040041}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x4, 0x10000000}}, 0x10) (async) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x4, 0x10000000}}, 0x10) setsockopt$inet_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000040)="e304d0eb7e", 0x5) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000180)={r5, r5, 0x8, 0x10, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x6, 0x1, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) close(0x4) socket$inet6(0xa, 0x5, 0x0) (async) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r7, 0x0, 0x15, &(0x7f0000000100), 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000000500000084000000050000000000000001040000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000000500000084000000050000000000000001040000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000500)=r9, 0x4) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x7, 0x1, 0x201}, 0x14}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='sctp_probe\x00', r10}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) 3.464997976s ago: executing program 4 (id=1671): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, 0x0, 0x0, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) 3.432320897s ago: executing program 1 (id=1672): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000000660000000000000218010000646c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000f33e93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001cc0), r0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)=@getae={0x2b4, 0x1f, 0x810, 0x70bd27, 0x25dfdbfc, {{@in6=@mcast1, 0x4d6, 0xa, 0x2b}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, 0x34ff}, [@encap={0x1c, 0x4, {0x1, 0x4e22, 0x4e23, @in=@rand_addr=0x64010102}}, @srcaddr={0x14, 0xd, @in6=@mcast1}, @algo_comp={0x65, 0x3, {{'lzs\x00'}, 0xe8, "675eeb5f6e3cc67fddddf54ab8334a6fbc336beacfba619936afc86b3a"}}, @replay_val={0x10, 0xa, {0x70bd2c, 0x70bd2a, 0x5}}, @coaddr={0x14, 0xe, @in=@remote}, @srcaddr={0x14, 0xd, @in=@multicast1}, @srcaddr={0x14, 0xd, @in=@dev={0xac, 0x14, 0x14, 0x1f}}, @coaddr={0x14, 0xe, @in=@local}, @algo_auth_trunc={0x9a, 0x14, {{'sha512-arm\x00'}, 0x270, 0xa0, "85237da9dff8eae021fb7249178d361bc3632760444ad72326f234a71d369aba2e8193b56a07702b420052c510e27c2ec92aef1b1bdae2a6fa4ba8970f34509315ef998764b1cf9d6fd5f8e934b2"}}, @algo_comp={0xdf, 0x3, {{'lzs\x00'}, 0x4b8, "a39dcede4ffae6e9025130a7adacb7293cf45239b0f02f77c05623bf63e59486dd8a5a6cec6d46cf3f333cd7719ad8897c4349b9ddef5ca4263c58322a15a2ba6e13ea18ba8b357ef646d45e9e2b8386e65d82cdc846c37c8dc99b5289d019c541b09acb32cb21a322724ce0bbd4ec9529513bbecb1c4dce071cc061d688c75bfd2d39da0c5c2d623aa8e9a897c74bad401ea4e57e381f"}}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4008010) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001d00)=ANY=[@ANYBLOB="147de900", @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x60000000}, 0x4800) 3.24082953s ago: executing program 1 (id=1674): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) recvmmsg(r1, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10301, 0x0) listen(r0, 0x3) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "220200", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "c11d34ec43904aae35d8240a3fd194e3"}]}}}}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x4, 0x6) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @u32=0x20000}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}]}}}]}, 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x3, 0x3, 0x9dfd, 0x10, @private2, @mcast2, 0x7808, 0x700, 0xf28, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000ac0)={0x14e0, 0x0, 0x100, 0x70bd2b, 0x5, {}, [@ETHTOOL_A_FEATURES_WANTED={0xa8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_VALUE={0x12, 0x4, "7a304ccee5c5305e021677a2c110"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb}, @ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x13b4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x85, 0x4, "41dc9e076734e2e014ca9cd306eeb72e0096dabfeed23578bf3143d882c180392278915e98ac86aaeccf7198bfc976200703ad1f2a91d1623a39fe24f54ba5a9118b1994a66304b2edc6ce2c14cab1d5bd82ed7138d0ada7107f8f753c625feb6495e733b189a794093baf2fa39e2aa4738991d5ea3ca543519dc23f3590ca2da1"}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff801}]}]}, @ETHTOOL_A_BITSET_VALUE={0x3f, 0x4, "68233c2767db4f48534dbbe45847c3167bd9b37b740add29cd9790a993384126b0ad404790af46106e3ab5c066d52d0c768cecb733c003d2bb27bf"}, @ETHTOOL_A_BITSET_VALUE={0xa9, 0x4, "f8611138f85fea98934287b1ee86f50e4fd5ceee8c8de16118a25f1fb70503d6104d084000f4a7e1348bef8644783de6f9de5eeb2078e946a6287ebdc5e9e03678816a381c4df02b6d31ae0b20edfc1916e10eb34aef9ea86f6694726aa3bfe943478d383ba572bb6d0e0f241d00394a17971e4eec18f314191109c53d4e8d47cfbb6ae45f6e56ede89d4763c6c10f8dde80d9ed6be2e7c8bf4f84ba7d171e9ba799512f60"}, @ETHTOOL_A_BITSET_VALUE={0xe8, 0x4, "4d4098913ae505321e81e5317a1a60147ca7c6e252eb2a16aa4295d3400b97acee052efe51f27121fdd949419afbf959f5ab1b43142f6d59172282ca6849ec6eeb5b1e626db1ae51eede12dc02c5d397e02d6c0277a8183295fc570a0b38defb1debf182e59e3a9e228b6583dc2235d7cf40d81875e2561b734521e8534fc97f538daf4eef57cbec986af4f029221129f6ee785a1dfac37a32f20f2f18463c023dac971f59f6a9c543baddce2a4ee6c30ca3cc74a706e653a7731365bfaf7214b39dfc7422237d45b22e874b1cccf827a3cb8104ec37de664b63b6c9c8d19bff7bfd0dfc"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffff7}, @ETHTOOL_A_BITSET_MASK={0xf7, 0x5, "281038e525fdc625bdb64ea21575ed3feb49fdf706ad85b2a0ec8318e4b949fe49e3f6209a8bccd33c2dc7e4ccdf23c53da8ddd4f630d621b550a462bb5f62daa419377d04588619608c162218f5510b1ae0d0da51d6ac9fed29efe818e762b3bceb5e9b2d53d1d12904011b49bcde9b1a52bf6cf025402ccf6ecf0f23efa79d3c1a3c2e5d65bf5b49bc254ef1d03064814ac543e715881fa7eb1b949c45fdc2aef2bdcccd55e511fdb53e7b345b53c58cec6abc1870699bdf4de18d35e92f868dd5cf5d8c0ebf84066c6b70adf20ef9fef699527c6404c04bdcacf242544a6529f37ac52c59b162d75e535d93c608aadfec05"}]}, @ETHTOOL_A_FEATURES_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x14e0}}, 0x14) 3.155725383s ago: executing program 1 (id=1675): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e5ff00000000000071118200000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x2, @mcast1, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000b80)="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", 0x481}], 0x1}}], 0x2, 0xc004) 1.605168729s ago: executing program 4 (id=1680): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000000660000000000000218010000646c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000f33e93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000003008"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x1b, 0xda2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0xee239302d411bf87, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x24060085) 1.233088179s ago: executing program 5 (id=1682): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x3c, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x12, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0xffffffff}, 0x10}, 0x94) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0x28, 0x803, 0x0) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) (async) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="64000002", @ANYRES16=r4, @ANYBLOB="00022cbd7000fbdbdf2509000000050035000700000005002a000100000008000300", @ANYRES32=r5, @ANYBLOB="05002e00010000000500300001000000080039000200000005002f00000000000500300001000000080039000100010008003b00fcffffff"], 0x64}, 0x1, 0x0, 0x0, 0x888c0}, 0x200080c0) (async) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0xffffff7e, 0x4) (async) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x4048804) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) unshare(0x26020480) r11 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}}]}, 0x8c}}, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r13, r14, 0x0, 0xffffffff000) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r10, 0x300, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8835}, 0x4) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r9, @ANYBLOB="06001500070000000c00168008000100cb200f31c65d00a290b75a922bef5315e9e0e443fb6e540b744136", @ANYRES16=r8], 0x38}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES16=r0], 0xe4}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.188850194s ago: executing program 4 (id=1683): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) unshare(0xa020480) r2 = gettid() r3 = syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/mnt\x00') unshare(0x6020400) close(r3) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r4, &(0x7f0000000540)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r5, &(0x7f0000000340)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x5, 0x2, 0xf, 0x7, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0xa, 0x1, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x8040) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x700}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close(0x4) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [0xb1ad, 0xb2f, 0x8000000000000001, 0x237afd89, 0x4]}, &(0x7f00000000c0)=0x78) 1.085638614s ago: executing program 2 (id=1684): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="6d9311000000f8dbdf25010000000c0003000300000000000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x48891}, 0x880) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x7, 0x2, 0xff22, 0x1}, 0x48) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$phonet(0x23, 0x2, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x1a, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfc85, 0xfffffffe}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) 1.067799795s ago: executing program 5 (id=1685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x17, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0xc1) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0xd, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r1 = socket$key(0xf, 0x3, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000800) connect$pppl2tp(r1, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x2, 0x0, 0x1, 0x3}}, 0x2e) sendmmsg(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)="bb40693199327ba3cf343338921cc40b7cd495c6e004a894e296c564da3e92862532ae4f3456376d0463c60b04ee7161cfa4b1c5070853ed0b4729616e4dc7041238a96d7a4e221f96fdf84a0bcb7614760aefb2c52549a9bbdab06bfdbcb070f15c7449c2f860c99022591b5362cfa83748c7efb3905d890fcde31d82edaf34cb5427d36154b294d2c945ad39f99c6d89b5cd3ce6351be6a8ac042e0d5fff0574f721632fd9072491ae9440a447943f9c64c3f10c6d6ab4461ba080395218613f12a9f1c324dff32016e41f1db179efb0dbedae5609", 0xd6}, {&(0x7f00000004c0)="c87c351dc93b9160b448da03915493026a7a52880f32c1a7352e00cca9387a817c371478", 0x24}, {&(0x7f0000000500)="cc01003a95bc043c25eafd5f078ace073814eeae7bf72c6eb3b15606ddf9a302466b9f515ead7aa7fede7a7519e3fa97", 0x30}, {&(0x7f0000000540)="797cebd56316747753de362e45f3f9e3895823e88b38a1d3060a5442465cf7b8d59bd04f172aaa40615aecaf8c7bf2e975339a857f8dcae705628f4c4a6f926601057c8c52ff58c650b3bea44e5bf498d58e7300c97c4ecb55063f7a1cf88eef93d843bb1c3b954d6355e562dff479cdd0d90969e3905bed41436c6d7418a22b3ca124341e10c68e4c06f98970166ed29955924f356b3f41e69d118452c6c44c2ee5c264178ddd0707df7721c0b766423ae04a6c46124445eff4", 0xba}], 0x4, &(0x7f0000000640)=[{0x98, 0x88, 0x80000000, "b63a8034af15c700a468def0be8410cf28242ced5204e42bf36c9c25a341e156a82e4f753c6882141931bbf1bf8aa61bef64ea68bee8a560c35e2af975d14624fae5881137d0f1bba731bcfd87fd3a8e2684bc9b0793b25b43e80572608b031759852bfe86c628520816731e4b5de3d37e1ff82b6111b9c97adc2f6816532fc244f51672"}, {0xd8, 0x1, 0x0, "63cb3e242073f30cba9fdee2600c11a6b03aa3cd438d55a1fb69e1fb62521934e0582fcbf9d9eae32c93f622b224be40c7ebfdf4dc5ed18debed3402eec5416ae1e1afd5a1c1b9dd5d8629b21c5f024f5dc3d44c4550a6ee98ad82985737e0d28a41017be5ab7585a3296ffc3115f31773534ff4b4e9e5817723f527b72397ec40bfcb4a7a1d997207d46e0e1d240c5e04492141866bfffbf5a750d35fbd3c8861ff08221e00512917d91eaddbdfb93bbfc3e52bf64a1d07c2a8f218f12c64ef23ce342ca72f"}, {0xd0, 0x10c, 0x6, "11b35c24b5899d08cd481748242b5c5eeb0aa2278c63137574a349348427d0a263c0cd21223e9700621877f4832e4690c848a63e8c758036975e862da100052e1942016d69136dd69512c3c66e99ade4acba8fe513a0840e76973a30128dfc5a963b45de5875ccd359602e7ba240eea645297b4a3e4cf1378ef16ac155ee1d07ba959f5324fdb552b3ecf92a7c98aecea563024f693dde968170f13eb492cc2e36df26635bda2543567c32d8e0c170e058b6bfbc69cd8b10be19482a46c7"}, {0x70, 0x101, 0xc, "67bd4489644d45a15aa6934d304c2adb6ab4eaed9a448f40772ae2d5679463f8238af3ee24ff2bb4725919565e1123e33b8402492c8074da08b56156440e66762642d06ac18a8d3ad88912078d8133c1b5b36ec76d3eb59339f29dc8"}], 0x2b0}}, {{0x0, 0x0, &(0x7f0000000900), 0x0, &(0x7f0000000940)=[{0x50, 0x11, 0xf, "602676a1eef9008cb4c32e2e4fc44572f23f8f422b28fe40bc3fc7be0971a71f32d9fac938cf25b1fc0640bae49a66ac607fadad4e5eeadf2d145a3d09"}, {0xa0, 0x108, 0xb1f, "1e91bcbb6ad2d2e72e54520bb481d3f9b9bfc718096ff291ce5a368d3f5e08483046dcbededa00636b5490cec6ac8765ab203d45bd51d64c9fe5fd9e0138cc56aa9b1b3a5a77fdf21b36ef8831cc07e81c5b16756ee8f2360f831d46d8c1101aed9ff63a3bc8faad73c1ebcbc0258591bb5cd6575b0abdd3f454a0e60597527ba92643fed8d634190b"}, {0xe0, 0x109, 0x0, "4ce3d4844467dcc9c5d3af7b5ef41203832984941471aa4fce3dbdb558f2eff1e36ea73bb1e3df7f7139a27f1b02a8e8e9e6533f67cd53e8245ae9f0d55e962a1730571e3b7fa5e60ff318647c48a679756849211ef4952d10bc9f2ecc1ef70fda50a9b432d41f004ea0fb357d7ba1bae99d14c9c08c29485c660fc7ab063df202305814cf54583acec4d56623d335ee9f81b5583cf4e472eb19982e43e660cc55713a937ee18c285ce8cc440496091817b205c74126ec44476247a0e9e70c72e96867b470240d90eb"}], 0x1d0}}, {{&(0x7f0000000b40)=@qipcrtr={0x2a, 0x3, 0x8001}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000bc0)="ebeb2854b8f9f704acf51736fb9ab187f0acd41611c75d4e123712f3cf0f97ef7c4352ba92c06fb3f995e0125e67d6a84b92c8cdcc290e662e", 0x39}, {&(0x7f0000000c00)="255f2d5f93387f020beedf0eb4e8982e598354db92322f9f08deab26acfc987260b90ccd22d741b1fad35cfe639f522ca3a5918d579aeea5412f744acba17784d528ad361dfd8fe562d3e3a4f691cc94eb8c996825aeda768695bda2c5b2bf5ea2df1b1013b6b7b98cb6fd20953d17704cafe442bf9b3ff75399f60d8b936f957a5421787c7f900c19956ff2595312dd4c0c2cd41fe8e2ddcc6c567042094ebe1d8eb5ebee62abf9b90aad", 0xab}, {&(0x7f0000000cc0)="5da452df44d097bc077cd98e63e51b660359613bbab3a34797195b2a1dc655584515bbafd11fa53f7cf61b65805db0cd325cf44d71fd26d5a973174994b4f9ad534d4e460c8a0ab232daec5fc758d055ac5681465a0cb8ceb00fa58d3a2854cd4c49e7ed59dad355244ac3307370ca10beef89644128d0e7d215a49f3126cfd23f974b36ed25d81580dbe767149c23e5714df6ef8866129b01cb6e060323c52a968a87595131cb326e3a353011a15a4e84bb86cffb40a3d692baf6f7cf5f21e0b467468cc56e4f7b840ba2b010e6106b9bad9a64e03b60fb", 0xd8}, {&(0x7f0000000dc0)="638c0f7208db160ef0bd6a9a9a7326392a520f20267109ed275cd68952bd01dd1b0c51a6bf84ef78072ccab4afeed5421670bc982ddf9a9655109de4661060b6a752384c3f3a384801bd700be03b7c8b4744b5f4993fa6e110210cb32320091e784d4ca1b4633b750b0076c468fb95b85fabdb54e29560bf37af743e7ad73f6ad8c06e9411ad781da21b476d43eb7c2423b24d92abaa221aa32644c5fba9dc44ba352065e147ba8a3aeb31d4a5fde3dd02ed435ee2c60ea6e2256a682acf139c571a0e3203f8cfb5cc98d3f9db68cef47c6d3179d4d6bce9b4b8e5694b34", 0xde}, {&(0x7f0000000ec0)="3ec589f37dde3fdbaa8d73d2769a99a21d7b5bba", 0x14}, {&(0x7f0000000f00)="5359e746912c7edfffae738563983f522cf237d54fa05c1552ad58b1ea8db13e", 0x20}, {&(0x7f0000000f40)="682a80d5fa1dcf48a0ecba5d968690828463c843979bbdd103651e26ce941740806c697b8b3f3606fab09d2c497b97cf38245e63f9acb5ddccbbd4b58d69793aef9cec5512fb399e0806778cb30ee541f49500ed7574e99055ef7380ca2af7eed97062b59f65302db4b187e83f0307463046f7b1cdcdbddcd5976a0fb4d856bf8e055c46a742e908a6d7c065d1ebc3cb8442f1c541c518e6ed973d3b08fc3712077d18152d71b6e6f1b22f1455b36c301d9a04bb7264afeb63df5979160fd950a2a9ea0e5c2fa5c1ffc61dbda9438f8b3b8d95f7ab9c8408d648", 0xda}, {&(0x7f0000001040)="81037b7546e81b39cac9ed4e9b519e4b0e7831fcc66d14e5f39cd159f7b08e2edb9204d3d71a0e63187673834874140a8fecf30cd764b5060bbe2a9725a8402c91c7", 0x42}], 0x8, &(0x7f0000001140)=[{0x78, 0x109, 0x1, "b3940267bc04770b2b9b254771965d389029b7f8ca540a3dc786bc27e6a8d1e2a54ad314d563c2267f640a59c47a1064b30fe46f93b197de0881c58f50dadfeb88f7f5ab9ec845a4cb1022c85a934b1e3d4fa1ecad41a6ad582006091c0fd0b2107248619f"}, {0x90, 0x117, 0x2, "a276f3f777efa54b103d8e11b99b51d3b2470873fc7b0312d174d94d0bc98612ee4b0427ababf4da6f9433d343fc1157771c325747938d250e320e7c376ca9e83861d0875487e56adab2e1bde9e91e026d402eb2d7207229c61d270d27cf14aaf8817178e05cccd9096b0001ced552c7665bc6af8bdf3ba50f8bd04af047"}, {0xe0, 0x11, 0x4, "44d1481d1403e71cd71f3b06cfb1b66159e2569a06cdedb80c7b48f9e882570bd90fabaa09d5b06482618c476bb11f9074de6d12735a109ecc253c3f5639bd434facab467fd8a6eb439269d35cf52e79c553c9f46e01ad7f9f3875180743d0e302161d79f7bf959ad51fd9110ca59f590efed2c5f0c45e1c8aac37fd8c1f94e3c68a00e5187131b05c34ec0df092c185261f67a90ed29ddd3ef74c6cddb8b237a40601bd516e52f2534b58f1a2a6a83d510fa8db67210c4f72f1e54cf0d4cd501c17220f2d0fba23259c"}], 0x1e8}}], 0x3, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001480)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001400), &(0x7f0000001440)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001700), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=@base={0x16, 0x8000, 0x9, 0x2, 0x2000, 0x1, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x18, 0x20, &(0x7f0000001500)=@raw=[@map_fd={0x18, 0x4, 0x1, 0x0, r3}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @ldst={0x2, 0x2, 0x2, 0x6, 0x0, 0x1, 0xfffffffffffffffc}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x7, 0x1, 0x6, 0x9, 0xd, 0xfffffffffffffffc, 0xfffffffffffffffc}], &(0x7f0000001600)='syzkaller\x00', 0x761, 0x97, &(0x7f0000001640)=""/151, 0x41100, 0xa, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[r6], 0x0, 0x10, 0x400}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x30, 0x3, 0x1, 0x3, 0x0, 0x0, {0x6, 0x0, 0x3}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x2000c880) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000019c0)={@initdev, @dev, 0x0}, &(0x7f0000001a00)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001ac0)={'tunl0\x00', &(0x7f0000001a40)={'syztnl0\x00', r7, 0x700, 0x1, 0xa, 0x631, {{0x15, 0x4, 0x0, 0x4, 0x54, 0x66, 0x0, 0x1, 0x2f, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0xc, 0x3c, 0x0, 0x3, [0x1, 0x3]}, @ssrr={0x89, 0x7, 0xc7, [@empty]}, @timestamp_prespec={0x44, 0x2c, 0xff, 0x3, 0x5, [{@loopback, 0x3}, {@multicast2, 0x7ff}, {@private=0x7ff, 0x7fff}, {@local, 0xc}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8001}]}]}}}}}) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000001b00), 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x20, r2, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x76}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, &(0x7f0000001c00), &(0x7f0000001c40)=0x4) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r8, 0x8008f513, &(0x7f0000001c80)) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000001cc0)) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f0000001dc0)={r9}) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r10, 0x89e0, &(0x7f0000001e00)={'veth0_vlan\x00', 0x1000, 0xffffc00d}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$MRT_ADD_MFC(r10, 0x0, 0xcc, &(0x7f0000001f00)={@broadcast, @local, 0x0, "918e2f9262977215e17293dfe405fb8a06dc3aa7e628d82734ff3a098e0e39c1", 0x5, 0x5, 0x80000001, 0x40}, 0x3c) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001f80), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r11, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x34, r12, 0x301, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x56}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) 880.888316ms ago: executing program 5 (id=1686): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@generic={0x88a2}}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000140)={0x7, 'geneve0\x00', {0x5}, 0x3}) r2 = socket(0x2, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) connect$inet(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010028bd7000fcdbdf250a805f0000fcffffff000000080018004e234e2314000200fc0200000000000000000000000000011400010020010000000000000000000000000001"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000940)=@newlink={0x80, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x50, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e21}, @IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x40}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x2}, @IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e24}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x1}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x4}, @IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x4}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x4c}, @IFLA_MACSEC_SCB={0x5, 0xb, 0x80}]}}}]}, 0x80}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="4c00000002060500000000000000800000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000005000500020000000500010006000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=ANY=[@ANYBLOB="1f000000000000000000004bc0d5af00000008"], 0x50) socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x44, r6, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0d}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "cdf829613de05c780dd1b2b80c"}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="b8000000190001000040000000000000e0000002000000000000000000000000000000000000ebffffffffffffff000000000000000000000a000000870000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000006c0900000000000000000000000000000000000000000000000000000000000000000000000000000100000000000040fbffffffffffffff00000000000000000700000000000400020000000000000000000000000000000008"], 0xb8}}, 0x2c000010) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r11, 0x0, 0x41, 0x0, 0x68) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0xe8, 0xe8, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local, {[0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x2c4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) 829.114432ms ago: executing program 2 (id=1687): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x2c, r1, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_PBSS={0x4}]}, 0x2c}}, 0x0) 767.754811ms ago: executing program 4 (id=1688): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x14, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@ipv6_getnexthop={0x28, 0x6a, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r5}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x24004840) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x78, r9, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xff}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) accept4(r6, 0x0, &(0x7f0000000080), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21700, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r10, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0x2}}, [0x4, 0x4, 0xdb, 0x1, 0x8, 0x7fffffff, 0xfa, 0x4f, 0x3, 0x4, 0x23617915, 0x2, 0x750, 0x9, 0xfff]}, &(0x7f0000000000)=0x100) getsockopt$inet_sctp_SCTP_STATUS(r10, 0x84, 0xe, &(0x7f0000000180)={0x0, 0xffff, 0x2, 0x1, 0x100, 0x1, 0x9, 0xb55, {0x0, @in6={{0xa, 0x4e23, 0x604, @local, 0xc}}, 0xf, 0xb, 0x8, 0x3, 0xfffffffd}}, &(0x7f0000000240)=0xb0) 713.095732ms ago: executing program 5 (id=1689): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000140)) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 664.81163ms ago: executing program 2 (id=1690): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001000)=[{0x0, 0x0, &(0x7f0000000a00), 0x0, 0x0, 0x0, 0x2}], 0x1, 0x24040000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', 0x0}) pipe(&(0x7f0000001080)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f000000ce80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d40)=[{0x10, 0x6, 0xb65}, {0x10, 0x1, 0x1}], 0x20}}], 0x1, 0x880) sendmmsg(r1, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x2, 0x3, 0x2, {0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="a7b67b9c5ed1ffa981e4c2c298266f3a0ff83c64476e7e170acfb1a4bc3f0941e24081f04ca5306e311601cfd8f46cb3301ed56d53f9dfc29631d0cda8cf5153f44a1afd483d3fa9cb4b0b5b1a74e44ae172af50164169cd4e19af27c772020cdf7473dccfeceb2fbd15216b517015216a04645e74ee6057890ed2d4d649c9f3bc109954c9da48aa6b0680e40ce216fb03826af15c36343eda58c8e6224af5", 0x9f}], 0x1, &(0x7f0000000240)=[{0x68, 0x117, 0xe, "5dbcd566ffa55bc808817008abef53a87f6fb8eedd63865f82601ca25bb74d21ffc01b623adb40253df7fe560cb3df64e120e263622734684fffdec8d7c7b1fee6bca138aa020b920e8692f1123b8ef9a36547f67c95"}, {0x20, 0x104, 0x7, "aecbfee403f914f08a"}, {0x110, 0x10c, 0x6, "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"}, {0xd0, 0xc, 0x84a, "2aa89e9361bf377b5c5944b482bf1509b0d9630c27434f8b7e849b05b06e9aa2c6455407e1235898c6afa8a91e4087e809e2bd1cdeb4395539ebf529c18f53434dd53b32ec0d754f714e0ff1a345d0b46547d58350f5b5707956e3cb5f3b9b694c7c8ec3aa4a01d2aec6be111d9d03aa550d8126ef459fadb66cd4def33f71fae08cab555ccffd55b474b7b61b7d11a600f80fdac493236e4d19eefa4fd43f7bd181082e951478593b8df99ab344b5c1bfa1d95cfd2aa215ea20e9f5c9"}, {0x78, 0x10a, 0xa8, "ae0adc4ae83557a35f73cae9aa08ec71dac390fc4054b9334417f99211364dbdb3fe8d869c1b2b4bec7fee7deea2ed2d670d0f3ef06abbac3246406ec1caaf8b2a414f50d56c7e0d2a87666b2870356219fb7c5e85caa717366b551f62d1482fe4cb"}, {0xd0, 0x11, 0x3, "e3c5624691ad8dad175478727a856401d0bda9905ce65954316a6307e75495ed298b8811fe16be7262d36c7a89ce4326255d8c77bc6e3d4654017f0e08403b822f5011d3a269623a34a73de58e2973c81f0f5092e8f1feeac80e2f2b43c7140e6c370a8265970c3a2bb2ea496c4634b740a0c620fba3bc42bf41f974635b85869871eb23028f9956205a19779a86c4e136fcc4075765d850816b4f6ddb49c180747a3695a356ab1e04fdfea968029b9de7e2ff7067c4395b89b17e38530657"}], 0x3b0}}, {{&(0x7f0000000600)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x3fff}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000680)="84b0c1c8d4a0c51043185cc9fa9efb28ece12e370c6b02975782a52272440a3eeb013c8e228c1696754fb08c4e081d8e38c3a0158ecd8d04274d0ef5c6bf54a9128b116b54f395c3b743868fbf5cdd934f4c7ac7087c4a95926aef950ca67bb55424a4e8e155b3997e876b8345de95f58776b1dc1013c21eabe1f7c8c4620f215fdbc816c17c4c88a2c21cb01fa2aa07270275493c8812b28e3d0b5c056675b42283bba95892573b510ae017321ef0962a6cb11a1d03c602f7dd298d75032705d0876b1fb2", 0xc5}, {&(0x7f0000000780)="365acbaf26f9c1760a81e3b330db355917c27b4cdb1831a5917dc92fab4c5a722830aafef7b843c62fc05530195f62130d9b05820040819b6b14fbbf5c83e281322e2fd3b472fc66ef27c5ace9be958e04d428fc6714e98cf0bb9f90e517484c808dda4882e60ff4e8f3edad68e61c13d6ca09e4d16601afa06e105ec98d5a14a1437859e145add297b5783fd36203d4b422ff32c2069c4b541afb06f149cb9b6bffe8fcbf930ce6dec55906", 0xac}], 0x2, &(0x7f0000000840)=[{0x68, 0x10f, 0x4, "59bfe1c0dca5436415456afa371fcf05243d0fa76e09fa9ff73a8f2ba507acd7e5ab06a523e266e4f8a1134359fc62ddad0ccda86f51c99d25765ba0006216bc87f829d78c400d57f85d3796b53fa93520983fc21c454f"}], 0x68}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000008c0)="6c8a9519d2769c22da1f2226f1a78fa22d3f12c8884c954258949eda1bf46b3eedfa07d087762bbc1ba4d34f947ae65bc60733dcff1fc2ec1c39a28d47a66e3a37de9cecebcc034f96e610702395d7b0", 0x50}, {&(0x7f0000000940)='j', 0x1}, {&(0x7f0000000d40)="3bc267517e8c83b18482acdccbf35e152d1f789d87494138d7bd9d52243e9aa6977bd381b55511fa490b3282597d4cdf997346ed", 0x34}, {&(0x7f00000009c0)="d1bd2e882c82510871f3e1231e10215b40cad1f7e71a547c9218734860cfd67e8cd83f6c77f86f4eae4de0cd90720a0b294fe0315a179092033d32c13d2687faeb083857f952acb482f0b974d1d38eadb9be0f51878196ed235b08cf5109a9bc3a36f6ea8d6e64093d99abecee4ec1229aa6d79e85fd3659bb0fa4e811fd8fb753e857948c0b620ffeaed5685d2d83f70d05574fc3cd72e0dfec7daa9e7ef24d125bd41866b9eba57af2bf1281fcdd0a7d0e61978e9ffcb202d69853936d3d6e9f30b1415f7fa01ca839a9aea88cbcffad085666e7ca9a9c818eadeb97fc7c843cf44bb26c32fc0cbe77412d14a20a4982b97229b14de49b1d", 0xf9}], 0x4, &(0x7f0000000b00)=[{0x20, 0x114, 0x8, "7427771b150d530dba4a"}, {0x70, 0x111, 0x3e, "a34250bfbaebd5c8bd63af2b49126ab3a7e48e88e0da885638db0962821009cceb51d72178e6d25663f50612e7e43c58490088538c71f4589dfd4d8b2473bad04e41c5a5ed16e08897caf56c2718818d646e6eea4d434c4f24"}, {0xd8, 0x3a, 0x9e9c, "0cdec8c50943df4b8dbb5c5b952f7938110832e015ba61fe41c751096734fdcf9b1a5030b61bcf15da934e7572919f5fe3c231baff160bde3473c0bdb896b727debfce472679312a1f7abe0cba465b32f53c3f8258cbd59a334ca1da48682f6f172fdeda224bc6b2f0e7c229ef5382f3a927c9d91b147ca91df1a548c1a605b16da6873ac2bb3b4957f745bbd54ce8461409b6a15b38e73fabe404e3244b8935004672e22092df3d7b0b28c4fc9c86df33ddea8228c9d15cabeb7ea12bda041822fd"}], 0x168}}], 0x3, 0x0) 515.090228ms ago: executing program 2 (id=1691): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x8000, 0x700, 0xa, 0x8, {{0x12, 0x4, 0x3, 0x0, 0x48, 0x68, 0x0, 0x5, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x34, 0xd1, 0x1, 0x4, [{@multicast1}, {@multicast1, 0xc0}, {@loopback, 0x67}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@loopback, 0x4}, {@remote, 0x8}]}]}}}}}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv6_deladdrlabel={0x68, 0x49, 0x8, 0x70bd2b, 0x25dfdbfe, {0xa, 0x0, 0x78, 0x0, r3, 0x8bd}, [@IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFAL_LABEL={0x8, 0x2, 0x2}]}, 0x68}}, 0x28000010) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x84, r4, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) 457.042888ms ago: executing program 1 (id=1692): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000006a0001002ab05000fddbdf250a0000000000000008"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$phonet(0x23, 0x2, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$netlink(0x10, 0x3, 0x0) 456.206109ms ago: executing program 4 (id=1693): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005e000100000000005fa2aa9fd570c0"], 0x1c}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x6) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) close(0x4) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x88ee047ea9e8d0b}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)={0x208, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "117e18662b8c468db6f22f6bb3d07a2961e7f893dfef64699ecbf4d3dcf3ef236b12"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x270}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff01}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x20000000}, 0x80084) bpf$OBJ_GET_PROG(0x9, &(0x7f00000000c0)=@generic={0x0, 0x33}, 0x18) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000104000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="50c7000000000000240012800b00010067656e65766500001400028005000c00040000000500040006000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 439.656745ms ago: executing program 5 (id=1694): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000790000000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000012c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x10, 0x2, [@TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_TO={0x8, 0x2, 0x5d}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040000}, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x1, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x2}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0x7, &(0x7f0000001e00)=""/4088}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$kcm(0x2, 0x5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) sendmsg$inet(r6, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@dellink={0x28, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xc0a742c700a80d57, 0x301}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x1e}]}, 0x28}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40800}, 0x4040080) 423.266728ms ago: executing program 2 (id=1695): writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff00000000000000", 0x1d}], 0x1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x20000811) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) (async, rerun: 32) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000000000001c001280090001007866726d001000000c0002800800020001000000"], 0x3c}}, 0xc0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010030000000ffdbdf2500000000", @ANYRES32=r6, @ANYBLOB="0000000000100000240012800b0001006d616373"], 0x44}}, 0x0) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf250501f2800f0018007d3a2e9c5bc85c23277d0000140001"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x8000) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r8 = socket$netlink(0x10, 0x3, 0x10) (rerun: 64) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000540), r8) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r9, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r10, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400f9fffbff"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000300)={0x0, @multicast1, @multicast2}, &(0x7f0000000340)=0xc) (async) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000380)={@empty, 0x0}, &(0x7f00000003c0)=0x14) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r12, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3c040000", @ANYRES16=r9, @ANYBLOB="00042dbd7000fbdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="f00002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff03000008000600", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="fc00028040000100240001007072696f726974790000000000000000000000000000bf000000000000000000050003000e000000080004000600000008000600", @ANYRES32=r11, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000300000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="080007000000000008000100", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400fd590000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r6, @ANYBLOB], 0x43c}, 0x1, 0x0, 0x0, 0x4004}, 0x8c4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, 0x0}, 0x20) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) (async) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r13, 0x6, 0x1f, 0x0, &(0x7f0000000100)) 284.854324ms ago: executing program 0 (id=1696): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x19, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="763894147583ddd056fea56a8800", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000200)='blkio.bfq.io_queued\x00', 0x0, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/121, 0x79}], 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000002000000030000005800018044000400200001000a000004000000000000000000000000005885d6a76549ccd9000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2a4, r6, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xdb2d}]}, @TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @mcast2, 0x1}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd6e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}}}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa18f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9e800000}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x79}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x22b6}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="b70200000f000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000010000006a0a00fe000000008500000087000000bf0000000000000095000000000000005ecefab8f2e85c6c1ca711fc206bb8ad6ec561750379585e5a076d839240d29ce1f378ab3d790ec8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bd04000000000000009c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5f683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891184604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee8a1d4046930548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e101d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe151acc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394b9ba1a836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429ba63903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589eec11969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6d6fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f25005798ca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e279595ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9958fad67ccaba76408da35c9f1534c8bd48bbdf9594e8b4ce73f01dd1f9033c8aea8734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb3b379e221a5318849b6b0679b5d65ab855fc9f1d10022cc20603480ffb1e3392fad690ce56aaa717e56fd55aec3d9d6671f55d7bc33830a4095497586e8d15c2a32d3176d45b783cb27112a69c14134488b6dd302c3e92a7e659351b610ed5ba022f92d4bf26b0a5c10a3c8eb0fabdf0017995ea0c06b41fe6dda769729328d6ee80ab3b4aeeeee7926575d526431184b2034b5cdacc8eaab03cf45af6ec451f65705d8a4375d559e4c3ad80e942d237616d8f2fdd5afe4fdf21478228d9f6299bf67cf1e62fc11c285e18fb65eeb657bc7375401bb175f6d2625195ce8647945dbdfb7eacc06a24832d155059b0f0c36b9433eff190f4c4c160f0484d4d39f5f92e8bd49ad3df23b961fe7bf9e506c5098ca79deb7906257e4ce9035f3a6b29453ee41640ade8b5916f38d19ab6f2fd51a9fd9a2559411967460952acf5c549e5466ee2d8563397a5f028486220fae69611d9bc0f1a68d31ad1a4e387de687ab1537bd46703e4e5ae0f096f731916628bf743a49ea7b7d22c04d738ca439343aaab682d45dc91187e9ff08005358e1f3d864f36ee590fb0da9c958f15f9105c41add43a7c28874e58c31a7acb0467e0bd97f2ccd78615b5144267772381e7498bb98d9e8a3f98b505e5c9645e19d011dd86a1dc134fa4b21ff8ec2d054ae7e0044b4700cd54ce392c2ee515e86070f2df561c15f331a1babfa60504410fa56a848ba1f501c8eb0bd6856451d150cfaf95d6dc889be27e8915bb3670fc76bcbeb390f3cefb5429c84907a92c6eab2b15758194ece4b1461f622510bcff5c0f8354637856f94d71a0841180e78a3a837ae7847c479f5c9c54859cb85393f190042a5dc31197f2c463be8affe29869d71df330b3466fc79b3488b4a2a3e2aae9af6421cd0902347103f2384bf08e5230b37297b668be11b4428b9a8e8c259afa6c73dd87fcc165b2fea66a180bf048530a5849f849d37aca6874cb1d50defdb90b3da04a575db38825db87f6bb0013a5dabcc0e9783aaac0cbb5d6fc437f1e77bf69cae31a213ca2b90ece8cc70fa320c9ffd05618e7a6e6cf8ada6b3e62557174b6"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4}, 0x94) 283.75481ms ago: executing program 1 (id=1697): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000009500"/24], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000009500"/24], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000640)={'veth1\x00', 0x800}) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000640)={'veth1\x00', 0x800}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r9, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) getsockopt$IP6T_SO_GET_ENTRIES(r9, 0x29, 0x41, &(0x7f00000002c0)={'mangle\x00', 0x4f, "91ef1673848c5d921fa553af3e5f3e851b322c88f04cc3e3f6f663225e3cb4094f17343b36aad69bc2c132f904b3d9cacddf71514c8d78226f05b78577f6b9875981801881eb02e977498465740bc6"}, &(0x7f0000000340)=0x73) (async) getsockopt$IP6T_SO_GET_ENTRIES(r9, 0x29, 0x41, &(0x7f00000002c0)={'mangle\x00', 0x4f, "91ef1673848c5d921fa553af3e5f3e851b322c88f04cc3e3f6f663225e3cb4094f17343b36aad69bc2c132f904b3d9cacddf71514c8d78226f05b78577f6b9875981801881eb02e977498465740bc6"}, &(0x7f0000000340)=0x73) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0x7f, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r15, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800a1"], 0x48}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r15, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800a1"], 0x48}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, r2, 0x1, 0x80000000, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xa, 0x44}}}}, [@NL80211_ATTR_MESH_CONFIG={0x4}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, r2, 0x1, 0x80000000, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xa, 0x44}}}}, [@NL80211_ATTR_MESH_CONFIG={0x4}]}, 0x2c}}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000006880)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000006840)={&(0x7f00000067c0)={0x4c, r13, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$can_raw(0x1d, 0x3, 0x1) 274.318146ms ago: executing program 5 (id=1698): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e14", 0xfffffffffffffe4c, 0x20004811, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100090a0000002cbd7000fcdbdf25030006003c00400002004e23e0000001000000000000000003000500ff00000002004e206401010200000000000000000200130043"], 0x50}, 0x1, 0x7}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="7b2a0000000080e20000050010008000"], 0x28}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000180)=0x84000000) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x4000) (async) sendmsg$OSF_MSG_REMOVE(r5, 0x0, 0x40000) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010001fff030000000100000000000000", @ANYRES32=0x0, @ANYBLOB="08000000184400001c0012800b00010067656e65766500000c000280051c0c000100000008000a00269832ca381510ad84a1813ce9655986f0d4a60071028bdd3efbc6a6e7c2b256737a2550728ad9", @ANYRES32=r6, @ANYBLOB="4d647319628901f0570f1492bf54225b93580067a2"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r7, 0x40047211, &(0x7f00000001c0)) 264.714629ms ago: executing program 2 (id=1699): getpid() r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, &(0x7f0000000100)=""/205, 0x0, 0xcd, 0x1, 0x726}, 0x28) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) r8 = socket(0x10, 0x803, 0x2) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r10, @ANYRES16=r9], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="a595af62", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f00000002c0), 0xfffffff9, r11}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f00000002c0), 0xfffffff9, r11}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r11, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) (async) ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) 794.909µs ago: executing program 4 (id=1700): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000100)="7800000019001f05b9409b0dffff000d0207be040205060506144007430005000f000000fac8388827a685a168d9a446040045653600648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902003a03004a32000400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040081) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) 0s ago: executing program 0 (id=1701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) socketpair(0x15, 0x6, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r3, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'nr0\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xf9}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) (async) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, r4, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x24}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x40001) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xdc, 0x2, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_NAT_SRC={0xc8, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x40}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x2804c000}, 0x4) r6 = accept4(r1, &(0x7f00000005c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000640)=0x80, 0x800) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) sendmsg$NL80211_CMD_SET_NOACK_MAP(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, r7, 0x2, 0x70bd27, 0x2, {{}, {@void, @val={0xc, 0x99, {0x992a, 0x29}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x400}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000cc0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1800000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWSET={0x22c, 0x9, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_DESC={0x1c0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x19c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8d1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x805}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2cc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff1e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xf4d}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xd354}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7da2414daeee0f6a}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xe}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFT_MSG_DELCHAIN={0x58, 0x5, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_USERDATA={0x43, 0xc, "48f2f0fa477a9de6d59713a85150b4912c20c167d30f60fbbb6ff643bb3e964e0fd9dff66a46be288096d776d566df278ae313f6daa43e6a41d4904acf4020"}]}, @NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x80}]}, @NFT_MSG_NEWFLOWTABLE={0x10c, 0x16, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x68, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x84, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'wg1\x00'}]}]}]}, @NFT_MSG_NEWTABLE={0x4c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x3, 0x0, 0x0, {0xca0f409c78b1dc83, 0x0, 0xa}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x448}}, 0x40) (async) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000d00), r6) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d40), 0x1, 0x0) ioctl$TUNGETFILTER(r8, 0x801054db, &(0x7f0000000d80)=""/193) (async) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$bt_sco_SCO_CONNINFO(r6, 0x11, 0x2, &(0x7f0000000e80)=""/157, &(0x7f0000000f40)=0x9d) (async) r9 = socket$inet(0x2, 0xa, 0x8) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000fc0)=@security={'security\x00', 0xe, 0x4, 0x550, 0xffffffff, 0x350, 0x180, 0x0, 0xffffffff, 0xffffffff, 0x480, 0x480, 0x480, 0xffffffff, 0x4, &(0x7f0000000f80), {[{{@ipv6={@local, @dev={0xfe, 0x80, '\x00', 0x3a}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], [0xff, 0xff, 0xff, 0xff], 'veth0_virt_wifi\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x16, 0x4, 0x1, 0x20}, 0x0, 0x120, 0x180, 0x0, {}, [@common=@hbh={{0x48}, {0xfffffffc, 0x0, 0x0, [0x6, 0x100, 0x3, 0xc, 0x66a1, 0x8, 0x0, 0x0, 0x7f, 0x6, 0x4, 0x91, 0x7c, 0xf8ba, 0x8, 0xfcb], 0x9}}, @common=@frag={{0x30}, {[0x5, 0x3], 0xca7, 0x1a, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [0xffffff00, 0xff], 0x4e24, 0x4e21, 0x4e24, 0x4e20, 0x6, 0x6, 0x5986, 0xd, 0x5}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, [0xffffffff, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0xffffff00], 'dvmrp0\x00', 'hsr0\x00', {0xff}, {0xff}, 0x3c, 0x2, 0x1, 0x1}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xfffffff8, 'system_u:object_r:var_auth_t:s0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@icmp6={{0x28}, {0x4, 'a\'', 0x1}}, @common=@eui64={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x5}, {0x4, 0x0, 0x9}, {0x4, 0x0, 0x4}, 0xdf, 0x7f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) (async) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x30, 0x0, 0xd5bf69f4d940da27, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x240088d1}, 0x85) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001680)={0xffffff89, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000016c0)={r10}, 0x4) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000001700)=@rose={'rose', 0x0}, 0x10) r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmsg(r11, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001740)=""/219, 0xdb}, {&(0x7f0000001840)=""/204, 0xcc}, {&(0x7f0000001940)=""/35, 0x23}], 0x3, &(0x7f00000019c0)=""/85, 0x55}, 0x40012120) (async) sendto$inet6(r1, &(0x7f0000001a80)="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", 0xfb, 0x40050, &(0x7f0000001b80)={0xa, 0x4e24, 0x2f99a49, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$BTRFS_IOC_SET_FEATURES(r8, 0x40309439, &(0x7f0000001bc0)={0x3, 0x3, 0x10}) kernel console output (not intermixed with test programs): T6074] warning: `syz.1.28' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.108717][ T6085] netlink: zone id is out of range [ 100.119919][ T6085] netlink: zone id is out of range [ 100.126012][ T6085] netlink: set zone limit has 8 unknown bytes [ 100.460691][ T6092] bond1: option fail_over_mac: invalid value (127) [ 100.521682][ T6092] bond1 (unregistering): Released all slaves [ 100.847776][ T6108] netlink: 'syz.3.35': attribute type 3 has an invalid length. [ 101.528848][ T6099] infiniband syz1: set active [ 101.535949][ T6099] infiniband syz1: added syz_tun [ 101.573948][ T6099] syz1: rxe_create_cq: returned err = -12 [ 101.614269][ T6099] infiniband syz1: Couldn't create ib_mad CQ [ 101.629317][ T6099] infiniband syz1: Couldn't open port 1 [ 101.781922][ T6099] RDS/IB: syz1: added [ 101.796800][ T6099] smc: adding ib device syz1 with port count 1 [ 101.830517][ T6099] smc: ib device syz1 port 1 has no pnetid [ 102.552008][ T6144] bond1 (unregistering): Released all slaves [ 102.654465][ T6146] bond1 (unregistering): Released all slaves [ 102.901112][ T6169] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 102.934944][ T6171] Illegal XDP return value 4294967283 on prog (id 24) dev N/A, expect packet loss! [ 103.108020][ T6180] __nla_validate_parse: 4 callbacks suppressed [ 103.108041][ T6180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.52'. [ 103.349265][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'. [ 103.736169][ T5953] IPVS: starting estimator thread 0... [ 103.768528][ T6199] netlink: 104 bytes leftover after parsing attributes in process `syz.0.58'. [ 103.786738][ T6199] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 103.847723][ T6201] IPVS: using max 30 ests per chain, 72000 per kthread [ 104.033849][ T6208] netlink: 'syz.4.60': attribute type 1 has an invalid length. [ 104.088466][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.60'. [ 104.265554][ T6217] netlink: 'syz.4.64': attribute type 1 has an invalid length. [ 104.361411][ T6217] ip6t_srh: unknown srh match flags 4000 [ 104.384966][ T6220] bridge0: entered allmulticast mode [ 104.453786][ T6220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.65'. [ 104.798532][ T6230] Bluetooth: MGMT ver 1.23 [ 104.826678][ T6230] syz.4.69 uses obsolete (PF_INET,SOCK_PACKET) [ 104.871929][ T6235] netlink: 'syz.3.70': attribute type 4 has an invalid length. [ 105.460583][ T6251] tipc: Enabling of bearer rejected, failed to enable media [ 105.756439][ T6263] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.832722][ T6267] netlink: 180 bytes leftover after parsing attributes in process `syz.2.78'. [ 105.886079][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.77'. [ 106.027686][ T6269] netlink: 'syz.4.77': attribute type 1 has an invalid length. [ 106.036836][ T6269] netlink: 'syz.4.77': attribute type 2 has an invalid length. [ 106.057793][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.76'. [ 106.180254][ T6274] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 106.257581][ T6274] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 106.318957][ T6285] netlink: 'syz.4.80': attribute type 2 has an invalid length. [ 106.328134][ T6285] netlink: 'syz.4.80': attribute type 1 has an invalid length. [ 106.335948][ T6285] netlink: 'syz.4.80': attribute type 1 has an invalid length. [ 106.411325][ T6267] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.420430][ T6267] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.545695][ T6292] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.82'. [ 106.573543][ T6267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.594681][ T6267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.758286][ T30] audit: type=1800 audit(1765754280.478:2): pid=6272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.76" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 106.760091][ T6272] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 106.802034][ T5953] syz1: Port: 1 Link DOWN [ 106.807981][ T6272] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 106.825253][ T6272] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 106.864245][ T6242] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.906192][ T6242] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.930289][ T6242] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.967569][ T6242] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.096063][ T6305] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.191949][ T6300] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.491951][ T6316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.557091][ T6320] netlink: 'syz.1.90': attribute type 3 has an invalid length. [ 107.734287][ T6322] netlink: 24 bytes leftover after parsing attributes in process `syz.4.91'. [ 109.270916][ T6357] tipc: Invalid UDP bearer configuration [ 109.270981][ T6357] tipc: Enabling of bearer rejected, failed to enable media [ 109.503243][ T6368] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 109.600153][ T6368] team0: Port device bridge1 added [ 109.683407][ T6375] syzkaller0: entered promiscuous mode [ 109.694732][ T6375] syzkaller0: entered allmulticast mode [ 109.773273][ T6379] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 110.042033][ T6386] netlink: 'syz.2.108': attribute type 13 has an invalid length. [ 110.050903][ T6386] netlink: 'syz.2.108': attribute type 17 has an invalid length. [ 110.309177][ T6402] tipc: Enabling of bearer rejected, failed to enable media [ 110.761236][ T6414] bond1: option ad_select: invalid value (34) [ 110.772600][ T6414] bond1 (unregistering): Released all slaves [ 110.940096][ T6416] bond1: option ad_select: invalid value (34) [ 110.959869][ T6416] bond1 (unregistering): Released all slaves [ 111.389012][ T6441] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.601550][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'. [ 111.835896][ T6467] netlink: 96 bytes leftover after parsing attributes in process `syz.3.129'. [ 111.849867][ T6467] netlink: 32 bytes leftover after parsing attributes in process `syz.3.129'. [ 112.014680][ T6475] netlink: 28 bytes leftover after parsing attributes in process `syz.4.131'. [ 112.272167][ T6487] netlink: 96 bytes leftover after parsing attributes in process `syz.0.133'. [ 112.366234][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.134'. [ 112.573208][ T6498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.136'. [ 112.630420][ T6498] netlink: 'syz.1.136': attribute type 12 has an invalid length. [ 112.781030][ T6509] netlink: 24 bytes leftover after parsing attributes in process `syz.0.138'. [ 112.792746][ T6507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.139'. [ 112.820801][ T6504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.138'. [ 112.846942][ T6511] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 112.923303][ T6507] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.551462][ T6529] netlink: 'syz.0.144': attribute type 1 has an invalid length. [ 113.804436][ T6538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.818751][ T6538] bond0: (slave rose0): Enslaving as an active interface with an up link [ 114.156176][ T6558] netlink: 'syz.1.148': attribute type 1 has an invalid length. [ 114.207889][ T6558] workqueue: Failed to create a rescuer kthread for wq "phy2": -EINTR [ 114.379721][ T6571] netlink: 'syz.4.154': attribute type 2 has an invalid length. [ 114.410925][ T6573] netlink: 'syz.4.154': attribute type 2 has an invalid length. [ 114.791030][ T6601] netlink: 'syz.4.160': attribute type 5 has an invalid length. [ 114.822173][ T6601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.244486][ T6620] block nbd0: not configured, cannot reconfigure [ 116.151162][ T6649] tipc: Started in network mode [ 116.188475][ T6649] tipc: Node identity ac14140f, cluster identity 4711 [ 116.197104][ T6649] tipc: Enabled bearer , priority 10 [ 116.846275][ T6671] syzkaller0: entered promiscuous mode [ 116.885196][ T6671] syzkaller0: entered allmulticast mode [ 116.939235][ T6678] __nla_validate_parse: 63 callbacks suppressed [ 116.939256][ T6678] netlink: 32 bytes leftover after parsing attributes in process `syz.0.176'. [ 117.345184][ T9] tipc: Node number set to 2886997007 [ 117.653886][ T6694] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 117.693576][ T6694] netlink: 34 bytes leftover after parsing attributes in process `syz.4.181'. [ 117.717731][ T6694] netlink: 34 bytes leftover after parsing attributes in process `syz.4.181'. [ 117.851019][ T6699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.182'. [ 118.817865][ T6740] Bluetooth: MGMT ver 1.23 [ 118.893719][ T6742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.188'. [ 118.902059][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056953c00: rx timeout, send abort [ 118.944864][ T6742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.188'. [ 119.412078][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056953c00: abort rx timeout. Force session deactivation [ 120.087110][ T6765] netlink: 72 bytes leftover after parsing attributes in process `syz.0.193'. [ 120.233542][ T6770] openvswitch: netlink: IP tunnel dst address not specified [ 121.463287][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.196'. [ 121.588552][ T6788] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 122.016187][ T6794] ip6t_srh: unknown srh match flags 4000 [ 122.524688][ T6815] bridge0: entered promiscuous mode [ 122.550290][ T6815] bridge0: port 3(macvtap1) entered blocking state [ 122.572106][ T6815] bridge0: port 3(macvtap1) entered disabled state [ 122.593543][ T6815] macvtap1: entered allmulticast mode [ 122.619243][ T6815] macvtap1: left allmulticast mode [ 122.638657][ T6815] bridge0: left promiscuous mode [ 122.789291][ T6826] tipc: Started in network mode [ 122.814972][ T6826] tipc: Node identity e27ff962b38, cluster identity 4711 [ 122.851973][ T6826] tipc: Enabled bearer , priority 0 [ 122.890517][ T6828] syzkaller0: entered promiscuous mode [ 122.933963][ T6828] syzkaller0: entered allmulticast mode [ 122.960492][ T6824] syzkaller0: entered promiscuous mode [ 122.973745][ T6824] syzkaller0: entered allmulticast mode [ 123.061921][ T6826] tipc: Resetting bearer [ 123.077134][ T6823] tipc: Resetting bearer [ 123.129016][ T6823] tipc: Disabling bearer [ 123.558044][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 123.845240][ T6863] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.919085][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.220'. [ 123.958464][ T6882] netlink: 'syz.2.220': attribute type 5 has an invalid length. [ 123.966794][ T6882] netlink: 20 bytes leftover after parsing attributes in process `syz.2.220'. [ 124.040847][ T6882] geneve2: entered promiscuous mode [ 124.041347][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.221'. [ 124.046113][ T6882] geneve2: entered allmulticast mode [ 124.080387][ T6242] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 124.126432][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.221'. [ 124.156291][ T6242] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 124.204308][ T6863] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.252920][ T6242] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 124.268030][ T6242] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 124.298869][ T6892] netlink: 16 bytes leftover after parsing attributes in process `syz.2.223'. [ 124.374052][ T6863] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.550220][ T6863] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.684965][ T1151] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.724127][ T1151] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.751546][ T1151] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.780359][ T1151] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.801211][ T6909] syzkaller1: entered promiscuous mode [ 124.808574][ T6909] syzkaller1: entered allmulticast mode [ 124.836440][ T6904] syzkaller0: entered promiscuous mode [ 124.865512][ T6904] syzkaller0: entered allmulticast mode [ 124.995106][ T6282] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.092228][ T6113] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.159176][ T6925] tipc: Enabling of bearer rejected, failed to enable media [ 125.172310][ T6282] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.201228][ T6927] netlink: 16 bytes leftover after parsing attributes in process `syz.4.232'. [ 125.218126][ T6282] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.325875][ T6932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.233'. [ 125.495491][ T6941] netlink: 'syz.2.236': attribute type 2 has an invalid length. [ 125.525584][ T6941] netlink: 'syz.2.236': attribute type 15 has an invalid length. [ 125.715485][ T6952] netlink: 100 bytes leftover after parsing attributes in process `syz.2.237'. [ 125.755752][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'. [ 125.768138][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.237'. [ 125.821896][ T6952] netlink: 'syz.2.237': attribute type 14 has an invalid length. [ 125.830976][ T6952] netlink: 'syz.2.237': attribute type 12 has an invalid length. [ 126.611432][ T6985] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.303815][ T7009] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 127.432261][ T7016] netlink: 'syz.4.253': attribute type 5 has an invalid length. [ 127.646378][ T7037] netlink: 'syz.3.258': attribute type 10 has an invalid length. [ 127.720401][ T7037] team0: Port device dummy0 added [ 127.729418][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.738249][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.868664][ T7042] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.958153][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.601322][ T3005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.610783][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.771895][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.780408][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.078924][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.767312][ T7102] __nla_validate_parse: 4 callbacks suppressed [ 129.767336][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.274'. [ 129.808402][ T7102] netlink: 'syz.4.274': attribute type 5 has an invalid length. [ 129.827138][ T7102] netlink: 48 bytes leftover after parsing attributes in process `syz.4.274'. [ 129.901552][ T7102] geneve2: entered promiscuous mode [ 129.927592][ T7102] geneve2: entered allmulticast mode [ 129.978957][ T3563] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 130.010148][ T3563] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 130.053083][ T3563] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 130.134945][ T3563] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 130.585229][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.281'. [ 130.634953][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.281'. [ 131.522312][ T7155] pimreg1: tun_chr_ioctl cmd 2147767520 [ 131.589752][ T7158] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.283'. [ 131.878377][ T24] net_ratelimit: 9 callbacks suppressed [ 131.878399][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.895819][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.915854][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.944749][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.074280][ T7167] netlink: 132 bytes leftover after parsing attributes in process `syz.3.285'. [ 132.119905][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.220159][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.294814][ T7179] syz.3.287: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 132.317927][ T7179] CPU: 1 UID: 0 PID: 7179 Comm: syz.3.287 Not tainted syzkaller #0 PREEMPT(full) [ 132.317959][ T7179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 132.317980][ T7179] Call Trace: [ 132.317993][ T7179] [ 132.318003][ T7179] dump_stack_lvl+0x189/0x250 [ 132.318043][ T7179] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 132.318080][ T7179] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.318104][ T7179] ? __pfx__printk+0x10/0x10 [ 132.318132][ T7179] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 132.318162][ T7179] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 132.318200][ T7179] warn_alloc+0x214/0x310 [ 132.318240][ T7179] ? __pfx_warn_alloc+0x10/0x10 [ 132.318277][ T7179] ? __get_vm_area_node+0x28f/0x300 [ 132.318303][ T7179] ? xskq_create+0xbf/0x170 [ 132.318332][ T7179] __vmalloc_node_range_noprof+0x690/0x12d0 [ 132.318397][ T7179] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 132.318430][ T7179] ? __kasan_kmalloc+0x93/0xb0 [ 132.318467][ T7179] vmalloc_user_noprof+0xad/0xf0 [ 132.318495][ T7179] ? xskq_create+0xbf/0x170 [ 132.318520][ T7179] xskq_create+0xbf/0x170 [ 132.318613][ T7179] xsk_init_queue+0xb0/0x110 [ 132.318641][ T7179] xsk_setsockopt+0x57b/0x8d0 [ 132.318671][ T7179] ? __pfx_xsk_setsockopt+0x10/0x10 [ 132.318696][ T7179] ? __pfx_aa_sk_perm+0x10/0x10 [ 132.318733][ T7179] ? aa_sock_opt_perm+0xff/0x1a0 [ 132.318757][ T7179] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 132.318787][ T7179] ? __pfx_xsk_setsockopt+0x10/0x10 [ 132.318811][ T7179] do_sock_setsockopt+0x17c/0x1b0 [ 132.318850][ T7179] __x64_sys_setsockopt+0x13f/0x1b0 [ 132.318889][ T7179] do_syscall_64+0xfa/0xf80 [ 132.318919][ T7179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.318941][ T7179] ? clear_bhb_loop+0x60/0xb0 [ 132.318967][ T7179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.318988][ T7179] RIP: 0033:0x7f32b278f749 [ 132.319015][ T7179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.319033][ T7179] RSP: 002b:00007f32b36bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 132.319057][ T7179] RAX: ffffffffffffffda RBX: 00007f32b29e6090 RCX: 00007f32b278f749 [ 132.319073][ T7179] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000009 [ 132.319085][ T7179] RBP: 00007f32b2813f91 R08: 0000000000000004 R09: 0000000000000000 [ 132.319098][ T7179] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 132.319111][ T7179] R13: 00007f32b29e6128 R14: 00007f32b29e6090 R15: 00007ffdbe2069f8 [ 132.319149][ T7179] [ 132.321633][ T7179] Mem-Info: [ 132.343950][ T7181] syzkaller0: entered promiscuous mode [ 132.355530][ T7179] active_anon:7643 inactive_anon:0 isolated_anon:0 [ 132.355530][ T7179] active_file:2825 inactive_file:39892 isolated_file:0 [ 132.355530][ T7179] unevictable:3840 dirty:65 writeback:0 [ 132.355530][ T7179] slab_reclaimable:11199 slab_unreclaimable:126701 [ 132.355530][ T7179] mapped:33855 shmem:4226 pagetables:1112 [ 132.355530][ T7179] sec_pagetables:0 bounce:0 [ 132.355530][ T7179] kernel_misc_reclaimable:0 [ 132.355530][ T7179] free:1289399 free_pcp:14833 free_cma:0 [ 132.373235][ T7181] syzkaller0: entered allmulticast mode [ 132.430425][ T7179] Node 0 active_anon:30572kB inactive_anon:0kB active_file:11300kB inactive_file:159360kB unevictable:13824kB isolated(anon):0kB isolated(file):0kB mapped:135520kB dirty:256kB writeback:0kB shmem:15368kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12380kB pagetables:4300kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 132.539264][ T7175] tipc: Started in network mode [ 132.563946][ T7179] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 132.564020][ T7179] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 132.564088][ T7179] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 132.564137][ T7179] Node 0 DMA32 free:1251616kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30672kB inactive_anon:0kB active_file:11300kB inactive_file:159360kB unevictable:13824kB writepending:256kB zspages:0kB present:3129332kB managed:2564516kB mlocked:12288kB bounce:0kB free_pcp:41032kB local_pcp:32316kB free_cma:0kB [ 132.564203][ T7179] lowmem_reserve[]: 0 0 0 0 0 [ 132.600843][ T7175] tipc: Node identity 521d31997dd8, cluster identity 4711 [ 132.612835][ T7179] Node 0 [ 132.625104][ T7175] tipc: Enabled bearer , priority 0 [ 132.648718][ T7179] Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 132.904202][ T7179] lowmem_reserve[]: 0 0 0 0 0 [ 132.909478][ T7179] Node 1 Normal free:3890320kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18276kB local_pcp:11776kB free_cma:0kB [ 132.948877][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.957313][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.969774][ T7179] lowmem_reserve[]: 0 0 0 0 0 [ 132.974834][ T7179] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 132.988612][ T7179] Node 0 DMA32: 438*4kB (UME) 206*8kB (UME) 187*16kB (UME) 275*32kB (UME) 92*64kB (UM) 40*128kB (UM) 25*256kB (UME) 22*512kB (UE) 19*1024kB (UM) 2*2048kB (ME) 289*4096kB (UM) = 1251160kB [ 133.009602][ T7175] tipc: Resetting bearer [ 133.009655][ T7179] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 133.028695][ T7179] Node 1 Normal: 182*4kB (UE) 53*8kB (UME) 41*16kB (UME) 50*32kB (UME) 25*64kB (UME) 10*128kB (UME) 6*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3890320kB [ 133.064329][ T7175] tipc: Disabling bearer [ 133.079145][ T7179] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 133.089638][ T7179] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 133.100173][ T7179] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 133.110024][ T7179] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 133.119814][ T7179] 46939 total pagecache pages [ 133.124972][ T7179] 0 pages in swap cache [ 133.129268][ T7179] Free swap = 124996kB [ 133.133586][ T7179] Total swap = 124996kB [ 133.185603][ T7179] 2097051 pages RAM [ 133.197351][ T7179] 0 pages HighMem/MovableOnly [ 133.217683][ T7179] 424280 pages reserved [ 133.226552][ T7179] 0 pages cma reserved [ 133.720484][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.729280][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.805156][ T7199] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 134.034364][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.297'. [ 134.079271][ T7203] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.087454][ T7203] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.180673][ T7203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.199709][ T7203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.397955][ T50] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.419840][ T50] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.477088][ T50] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.496675][ T50] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.513576][ T50] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.522694][ T50] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.562895][ T50] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.593723][ T50] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.636153][ T7216] netlink: 5 bytes leftover after parsing attributes in process `syz.3.299'. [ 134.668260][ T7216] 0ªî{X¹¦: renamed from gretap0 [ 134.685675][ T7216] 0ªî{X¹¦: entered allmulticast mode [ 135.215602][ T7234] sctp: [Deprecated]: syz.0.304 (pid 7234) Use of int in maxseg socket option. [ 135.215602][ T7234] Use struct sctp_assoc_value instead [ 135.250904][ T7234] netlink: 40 bytes leftover after parsing attributes in process `syz.0.304'. [ 135.400202][ T7239] team0: Device gtp0 is up. Set it down before adding it as a team port [ 135.620855][ T7246] netlink: 'syz.2.308': attribute type 10 has an invalid length. [ 135.664156][ T7246] bridge0: port 3(macsec0) entered blocking state [ 135.708188][ T7246] bridge0: port 3(macsec0) entered disabled state [ 135.734908][ T7246] macsec0: entered allmulticast mode [ 135.778198][ T7246] veth1_macvtap: entered allmulticast mode [ 135.824878][ T7246] macsec0: entered promiscuous mode [ 136.618363][ T7282] netlink: 'syz.3.318': attribute type 11 has an invalid length. [ 136.632309][ T7282] netlink: 'syz.3.318': attribute type 11 has an invalid length. [ 136.667267][ T7282] netlink: 224 bytes leftover after parsing attributes in process `syz.3.318'. [ 137.080269][ T5953] net_ratelimit: 10 callbacks suppressed [ 137.080290][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.094616][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.250864][ T30] audit: type=1800 audit(1765754310.958:3): pid=7299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.323" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=397 res=0 errno=0 [ 137.357887][ T7284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.320'. [ 137.369044][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.324'. [ 137.769287][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.327'. [ 138.035385][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.330'. [ 138.079122][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.330'. [ 138.091807][ T7343] syzkaller0: entered promiscuous mode [ 138.097337][ T7343] syzkaller0: entered allmulticast mode [ 138.104730][ T7341] netlink: 'syz.0.330': attribute type 13 has an invalid length. [ 138.117231][ T7341] netlink: 'syz.0.330': attribute type 12 has an invalid length. [ 138.125610][ T181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.134319][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.215189][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.247202][ T7349] batadv1: entered promiscuous mode [ 138.290350][ T7351] netlink: 60 bytes leftover after parsing attributes in process `syz.2.332'. [ 138.377891][ T7356] netlink: 32 bytes leftover after parsing attributes in process `syz.2.332'. [ 138.839983][ T3005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.849298][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.955637][ T7376] netlink: 'syz.3.340': attribute type 10 has an invalid length. [ 138.964718][ T7376] netlink: 228 bytes leftover after parsing attributes in process `syz.3.340'. [ 139.158453][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.167606][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.320278][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.828500][ T7401] netlink: 'syz.3.343': attribute type 39 has an invalid length. [ 140.198382][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.533708][ T7420] geneve2: entered promiscuous mode [ 140.542613][ T1041] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.564132][ T1041] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.774187][ T1041] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.869027][ T1041] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.893730][ T7440] netlink: 124 bytes leftover after parsing attributes in process `syz.3.349'. [ 141.473066][ T7450] netlink: 176 bytes leftover after parsing attributes in process `syz.4.352'. [ 141.603512][ T7457] netlink: 'syz.2.353': attribute type 3 has an invalid length. [ 141.640473][ T7457] netlink: 'syz.2.353': attribute type 1 has an invalid length. [ 141.658352][ T7457] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.353'. [ 141.890105][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.353'. [ 142.003096][ T7457] netlink: 124 bytes leftover after parsing attributes in process `syz.2.353'. [ 142.278367][ T181] net_ratelimit: 3 callbacks suppressed [ 142.278390][ T181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.292775][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.360620][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.383592][ T7481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.392472][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.436148][ T7481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.445602][ T1101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.487643][ T7495] netlink: 28 bytes leftover after parsing attributes in process `syz.0.362'. [ 142.514583][ T7492] netlink: 'syz.4.359': attribute type 10 has an invalid length. [ 142.517913][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.568501][ T7481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.577323][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.680736][ T7492] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 142.745209][ T7498] IPVS: stopping master sync thread 7504 ... [ 142.752191][ T7504] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 143.099535][ T7519] bridge3: entered promiscuous mode [ 143.702091][ T7540] batadv_slave_0: entered promiscuous mode [ 143.945651][ T7548] pimreg: entered allmulticast mode [ 143.999938][ T7551] veth2: entered allmulticast mode [ 144.484209][ T7556] 8021q: VLANs not supported on wg0 [ 144.722808][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'. [ 144.751312][ T7569] hsr_slave_0: left promiscuous mode [ 144.788639][ T7569] hsr_slave_1: left promiscuous mode [ 144.794555][ T7578] netlink: 'syz.2.381': attribute type 21 has an invalid length. [ 144.933274][ T7578] netlink: 132 bytes leftover after parsing attributes in process `syz.2.381'. [ 144.952379][ T7578] netlink: 'syz.2.381': attribute type 1 has an invalid length. [ 144.983169][ T7583] SET target dimension over the limit! [ 145.069113][ T7589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'. [ 145.069513][ T7585] netlink: 24 bytes leftover after parsing attributes in process `syz.4.383'. [ 145.363300][ T7600] netlink: 'syz.1.388': attribute type 1 has an invalid length. [ 145.551733][ T7600] bond1: entered promiscuous mode [ 145.598088][ T7600] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.489707][ T7658] __nla_validate_parse: 1 callbacks suppressed [ 146.489728][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.402'. [ 146.535720][ T7633] netlink: 'syz.4.397': attribute type 13 has an invalid length. [ 146.763732][ T7669] x_tables: ip_tables: osf match: only valid for protocol 6 [ 147.117066][ T7688] netlink: 52 bytes leftover after parsing attributes in process `syz.3.409'. [ 148.498603][ T7739] tipc: Invalid UDP bearer configuration [ 148.498668][ T7739] tipc: Enabling of bearer rejected, failed to enable media [ 148.513532][ T7740] tipc: Invalid UDP bearer configuration [ 148.513582][ T7740] tipc: Enabling of bearer rejected, failed to enable media [ 148.711215][ T7750] netlink: 'syz.0.417': attribute type 1 has an invalid length. [ 148.719138][ T7750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.790613][ T7750] netlink: 'syz.0.417': attribute type 33 has an invalid length. [ 148.810529][ T7750] netlink: 152 bytes leftover after parsing attributes in process `syz.0.417'. [ 148.829188][ T7750] `: renamed from team0 (while UP) [ 148.859023][ T7754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'. [ 148.940530][ T7745] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 149.006058][ T7754] netlink: 16 bytes leftover after parsing attributes in process `syz.3.418'. [ 149.055241][ T7755] netlink: 'syz.3.418': attribute type 1 has an invalid length. [ 149.098186][ T7755] netlink: 224 bytes leftover after parsing attributes in process `syz.3.418'. [ 149.831800][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.428'. [ 149.851383][ T7790] macvlan3: entered promiscuous mode [ 149.856766][ T7790] bond0: entered promiscuous mode [ 149.867084][ T7790] bond_slave_0: entered promiscuous mode [ 149.887658][ T7790] bond_slave_1: entered promiscuous mode [ 149.907918][ T7790] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 150.066351][ T7799] netlink: 68 bytes leftover after parsing attributes in process `syz.3.431'. [ 150.407061][ T7810] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.435'. [ 151.006930][ T7820] syzkaller1: entered promiscuous mode [ 151.035045][ T7820] syzkaller1: entered allmulticast mode [ 151.155629][ T7831] batadv_slave_0: entered promiscuous mode [ 151.177662][ T7830] batadv_slave_0: left promiscuous mode [ 151.284541][ T7834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.443'. [ 151.348012][ T7838] batadv_slave_0: entered promiscuous mode [ 151.384992][ T7838] batman_adv: batadv0: Adding interface: macsec1 [ 151.408908][ T7838] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.460286][ T7838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.487848][ T7838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.500677][ T7838] batman_adv: batadv0: Interface activated: macsec1 [ 151.555604][ T7851] x_tables: duplicate underflow at hook 2 [ 151.559818][ T7837] netlink: 40 bytes leftover after parsing attributes in process `syz.2.444'. [ 151.562210][ T7851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.447'. [ 151.735358][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 151.791587][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.450'. [ 151.810233][ T7869] macsec0: left allmulticast mode [ 151.815332][ T7869] veth1_macvtap: left allmulticast mode [ 151.832891][ T7869] macsec0: left promiscuous mode [ 151.838565][ T7869] bridge0: port 3(macsec0) entered disabled state [ 151.855877][ T7869] bridge_slave_1: left allmulticast mode [ 151.863084][ T7869] bridge_slave_1: left promiscuous mode [ 151.869774][ T7869] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.884193][ T7869] bridge_slave_0: left allmulticast mode [ 151.890899][ T7869] bridge_slave_0: left promiscuous mode [ 151.901562][ T7869] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.521566][ T7898] netlink: 20 bytes leftover after parsing attributes in process `syz.0.456'. [ 152.726020][ T7901] netlink: 64 bytes leftover after parsing attributes in process `syz.1.457'. [ 152.931840][ T7906] syz.2.459 (7906) used obsolete PPPIOCDETACH ioctl [ 152.970011][ T7916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.460'. [ 152.985599][ T7908] bond2: invalid ARP target 0.0.0.0 specified for addition [ 153.007874][ T7908] bond2: option arp_ip_target: invalid value (0) [ 153.023243][ T7908] bond2 (unregistering): Released all slaves [ 153.096963][ T7922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.462'. [ 153.130177][ T7916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.460'. [ 153.142690][ T7922] netlink: 'syz.3.462': attribute type 1 has an invalid length. [ 153.151039][ T7922] netlink: 224 bytes leftover after parsing attributes in process `syz.3.462'. [ 153.379182][ T7933] netlink: 'syz.0.465': attribute type 1 has an invalid length. [ 153.398405][ T7935] netlink: 'syz.0.465': attribute type 1 has an invalid length. [ 153.556617][ T7932] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.612318][ T7950] netlink: 'syz.3.468': attribute type 1 has an invalid length. [ 153.708580][ T7954] netlink: 'syz.0.470': attribute type 1 has an invalid length. [ 153.811610][ T7954] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.493914][ T7992] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.556668][ T7999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.609428][ T7992] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.709650][ T8013] netlink: 'syz.2.485': attribute type 4 has an invalid length. [ 154.725499][ T7992] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.735291][ T8013] netlink: 'syz.2.485': attribute type 1 has an invalid length. [ 154.787109][ T7992] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.799288][ T8013] netlink: 'syz.2.485': attribute type 4 has an invalid length. [ 154.807152][ T8013] netlink: 'syz.2.485': attribute type 1 has an invalid length. [ 154.931355][ T3532] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.989017][ T3532] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.066956][ T3532] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.108492][ T3532] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.812938][ T8058] bridge4: port 1(ip6gretap1) entered blocking state [ 155.867618][ T8058] bridge4: port 1(ip6gretap1) entered disabled state [ 155.901690][ T8058] ip6gretap1: entered allmulticast mode [ 155.932654][ T8058] ip6gretap1: entered promiscuous mode [ 156.085464][ T8059] bridge4: port 2(veth3) entered blocking state [ 156.100419][ T8059] bridge4: port 2(veth3) entered disabled state [ 156.107084][ T8059] veth3: entered allmulticast mode [ 156.188216][ T8059] veth3: entered promiscuous mode [ 156.195626][ T8059] bridge4: port 2(veth3) entered blocking state [ 156.202261][ T8059] bridge4: port 2(veth3) entered forwarding state [ 156.220554][ T7846] bridge4: port 2(veth3) entered disabled state [ 156.339936][ T8072] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 156.358252][ T8069] bond1: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 156.380701][ T8069] bond1 (unregistering): Released all slaves [ 156.458591][ T8066] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 156.732816][ T8093] __nla_validate_parse: 8 callbacks suppressed [ 156.732836][ T8093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.507'. [ 156.812018][ T8093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.507'. [ 156.868035][ T8100] tipc: Enabling of bearer rejected, failed to enable media [ 157.025186][ T8112] tipc: New replicast peer: 0.0.0.0 [ 157.033125][ T8112] tipc: Enabled bearer , priority 10 [ 157.041041][ T8112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.513'. [ 157.050395][ T8112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.513'. [ 157.230578][ T8121] bond4: option packets_per_slave: invalid value (1048582) [ 157.257630][ T8121] bond4: option packets_per_slave: allowed values 0 - 65535 [ 157.281236][ T8121] bond4 (unregistering): Released all slaves [ 157.617705][ T8138] x_tables: duplicate entry at hook 2 [ 157.639325][ T8137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.922472][ T8143] ip6_vti0: entered promiscuous mode [ 157.938925][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.521'. [ 158.026512][ T8159] netlink: 'syz.1.524': attribute type 11 has an invalid length. [ 158.147529][ T181] tipc: Node number set to 801452441 [ 158.592957][ T8176] bond0: Error: Cannot enslave bond to itself. [ 158.788191][ T8181] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.796070][ T8181] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.147165][ T8181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.169342][ T8181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.372133][ T8187] syzkaller1: entered promiscuous mode [ 159.377914][ T8187] syzkaller1: entered allmulticast mode [ 159.394149][ T8206] pim6reg: entered allmulticast mode [ 159.417786][ T79] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.450618][ T79] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.767700][ T79] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.791575][ T79] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.977203][ T8241] netlink: 412 bytes leftover after parsing attributes in process `syz.1.539'. [ 160.026153][ T8236] bond0: Caught tx_queue_len zero misconfig [ 160.036669][ T8241] netlink: 32 bytes leftover after parsing attributes in process `syz.1.539'. [ 160.061526][ T8245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.156737][ T8253] netlink: 'syz.4.544': attribute type 5 has an invalid length. [ 160.630312][ T8276] netlink: 'syz.3.551': attribute type 13 has an invalid length. [ 160.639267][ T8276] netlink: 'syz.3.551': attribute type 17 has an invalid length. [ 160.658592][ T8276] 0ªî{X¹¦: left allmulticast mode [ 160.787202][ T8276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.815434][ T8276] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.844764][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.554'. [ 160.885277][ T8276] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.905737][ T8291] netlink: 'syz.4.554': attribute type 1 has an invalid length. [ 160.933034][ T8287] : entered promiscuous mode [ 160.952187][ T8292] netlink: 20 bytes leftover after parsing attributes in process `syz.0.556'. [ 160.979292][ T8291] bond1: entered promiscuous mode [ 160.984802][ T8291] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.060633][ T8287] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.077931][ T8287] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 161.129162][ T8287] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 161.142800][ T8297] netlink: 20 bytes leftover after parsing attributes in process `syz.0.556'. [ 161.153172][ T8297] nbd: device at index 64 is going down [ 161.162463][ T8287] bond1: (slave gre1): Opening slave failed [ 161.441281][ T8317] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 161.690593][ T8329] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 161.713702][ T8329] macvtap1: entered allmulticast mode [ 161.722012][ T8329] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 161.739814][ T8329] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 161.748079][ T8329] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 161.803901][ T8336] __nla_validate_parse: 2 callbacks suppressed [ 161.803922][ T8336] netlink: 264 bytes leftover after parsing attributes in process `syz.4.565'. [ 161.828949][ T8334] pimreg1: tun_chr_ioctl cmd 2147767520 [ 162.087535][ T8338] tunl0: Caught tx_queue_len zero misconfig [ 162.268087][ T8347] netlink: 20 bytes leftover after parsing attributes in process `syz.0.569'. [ 162.472864][ T8354] tipc: Started in network mode [ 162.478158][ T8354] tipc: Node identity ee97ec22fb9a, cluster identity 4711 [ 162.485616][ T8354] tipc: Enabled bearer , priority 0 [ 162.520963][ T8353] tipc: Disabling bearer [ 162.573823][ T8334] syzkaller1: entered promiscuous mode [ 162.584970][ T8334] syzkaller1: entered allmulticast mode [ 162.598331][ T8334] syzkaller1: left promiscuous mode [ 162.607659][ T8334] syzkaller1: left allmulticast mode [ 162.857196][ T8380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.576'. [ 162.972425][ T8386] x_tables: duplicate underflow at hook 1 [ 163.160135][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.579'. [ 163.172043][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.579'. [ 163.741143][ T8415] netlink: 20 bytes leftover after parsing attributes in process `syz.3.586'. [ 164.364552][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'. [ 164.383206][ T8446] netlink: 24 bytes leftover after parsing attributes in process `syz.4.593'. [ 164.957678][ T8467] netlink: 108 bytes leftover after parsing attributes in process `syz.1.598'. [ 164.974938][ T8467] netlink: 56 bytes leftover after parsing attributes in process `syz.1.598'. [ 165.956315][ T8492] tipc: Enabling of bearer rejected, failed to enable media [ 166.166252][ T8493] syzkaller1: entered promiscuous mode [ 166.203621][ T8493] syzkaller1: entered allmulticast mode [ 166.497759][ T8496] ip6gretap0: entered promiscuous mode [ 166.521765][ T8496] ip6gretap0: entered allmulticast mode [ 166.603023][ T8515] syzkaller1: entered promiscuous mode [ 166.623533][ T8515] syzkaller1: entered allmulticast mode [ 167.012833][ T8542] __nla_validate_parse: 1 callbacks suppressed [ 167.012855][ T8542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.612'. [ 167.028695][ T8544] netlink: 'syz.1.612': attribute type 1 has an invalid length. [ 167.054902][ T8542] tipc: Enabling of bearer rejected, failed to enable media [ 167.758074][ T8588] : entered promiscuous mode [ 168.264179][ T8611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.628'. [ 168.291131][ T8611] netlink: 16 bytes leftover after parsing attributes in process `syz.4.628'. [ 168.648026][ T8628] netlink: 16 bytes leftover after parsing attributes in process `syz.0.632'. [ 168.681647][ T8631] netlink: 'syz.3.633': attribute type 12 has an invalid length. [ 168.743313][ T8633] netlink: 52 bytes leftover after parsing attributes in process `syz.1.634'. [ 168.789568][ T8636] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.797309][ T8636] IPv6: NLM_F_CREATE should be set when creating new route [ 168.804696][ T8636] IPv6: NLM_F_CREATE should be set when creating new route [ 168.830287][ T8607] netlink: 60 bytes leftover after parsing attributes in process `syz.2.625'. [ 168.945108][ T8645] netlink: 'syz.3.633': attribute type 3 has an invalid length. [ 169.359739][ T8662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.641'. [ 170.003145][ T8691] batadv_slave_1: entered promiscuous mode [ 170.042608][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.649'. [ 170.055293][ T8698] netlink: 36 bytes leftover after parsing attributes in process `syz.1.649'. [ 170.095047][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.647'. [ 170.836708][ T8690] batadv_slave_1: left promiscuous mode [ 171.073969][ T8751] syzkaller0: entered promiscuous mode [ 171.091807][ T8751] syzkaller0: entered allmulticast mode [ 171.423338][ T8771] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 171.488823][ T8771] geneve3: entered promiscuous mode [ 171.499240][ T50] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 171.531674][ T50] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 171.552771][ T50] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 171.584318][ T50] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 171.654990][ T8783] syzkaller0: entered promiscuous mode [ 171.661212][ T8783] syzkaller0: entered allmulticast mode [ 171.721961][ T8783] tipc: Enabled bearer , priority 0 [ 171.752025][ T8782] tipc: Resetting bearer [ 171.798518][ T8782] tipc: Disabling bearer [ 172.161548][ T8809] : entered promiscuous mode [ 172.205768][ T8817] netlink: 'syz.4.672': attribute type 4 has an invalid length. [ 172.489708][ T8834] netlink: 'syz.0.676': attribute type 4 has an invalid length. [ 172.497997][ T8831] __nla_validate_parse: 2 callbacks suppressed [ 172.498017][ T8831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.677'. [ 172.504663][ T8834] netlink: 240 bytes leftover after parsing attributes in process `syz.0.676'. [ 172.590063][ T7848] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.609900][ T7848] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.629141][ T7848] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.670129][ T7848] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.315732][ T8856] team0 (unregistering): Port device team_slave_0 removed [ 173.331459][ T8856] team0 (unregistering): Port device team_slave_1 removed [ 173.357824][ T8856] team0 (unregistering): Port device bridge1 removed [ 173.421154][ T8867] netlink: 24 bytes leftover after parsing attributes in process `syz.4.683'. [ 173.484708][ T8869] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.683'. [ 173.522105][ T8867] bond0: ARP target 170.170.170.170 is already present [ 173.539285][ T8869] netlink: 'syz.4.683': attribute type 10 has an invalid length. [ 173.580002][ T8867] bond0: option arp_ip_target: invalid value (2863311530) [ 173.614436][ T8869] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 173.759069][ T8880] syzkaller0: entered promiscuous mode [ 173.774870][ T8880] syzkaller0: entered allmulticast mode [ 173.803076][ T8891] netlink: 'syz.3.690': attribute type 1 has an invalid length. [ 173.829955][ T8888] ip6gretap1: entered promiscuous mode [ 174.057964][ T8891] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.076489][ T8884] tipc: Enabled bearer , priority 0 [ 174.085254][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.691'. [ 174.146476][ T8899] syzkaller0: entered promiscuous mode [ 174.152793][ T8899] syzkaller0: entered allmulticast mode [ 174.297895][ T8908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.693'. [ 174.407335][ T8910] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 174.561529][ T8913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.694'. [ 174.661849][ T8898] tipc: Resetting bearer [ 174.737918][ T8898] tipc: Disabling bearer [ 174.816411][ T8924] netlink: 20 bytes leftover after parsing attributes in process `syz.3.697'. [ 174.828871][ T8924] netlink: 'syz.3.697': attribute type 1 has an invalid length. [ 174.926090][ T8924] bond2: entered promiscuous mode [ 174.932863][ T8924] 8021q: adding VLAN 0 to HW filter on device bond2 [ 175.208153][ T8941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.703'. [ 175.616879][ T8952] tipc: Started in network mode [ 175.635749][ T8952] tipc: Node identity 1eab0f8fd8c4, cluster identity 4711 [ 175.665501][ T8952] tipc: Enabled bearer , priority 0 [ 175.720676][ T8958] syzkaller0: entered promiscuous mode [ 175.736133][ T8958] syzkaller0: entered allmulticast mode [ 175.783085][ T8950] tipc: Resetting bearer [ 175.819332][ T8950] tipc: Disabling bearer [ 176.093848][ T8972] netlink: 'syz.0.709': attribute type 23 has an invalid length. [ 176.116730][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.709'. [ 176.126315][ T8974] veth1_to_batadv: entered promiscuous mode [ 176.233844][ T8981] netlink: 'syz.4.711': attribute type 1 has an invalid length. [ 176.341463][ T8981] bond2: entered promiscuous mode [ 176.370370][ T8981] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.543449][ T8990] 8021q: adding VLAN 0 to HW filter on device bond3 [ 176.619912][ T8990] bond2: (slave bond3): making interface the new active one [ 176.637545][ T8990] bond3: entered promiscuous mode [ 176.658552][ T8990] bond2: (slave bond3): Enslaving as an active interface with an up link [ 176.667121][ T8989] veth0: entered promiscuous mode [ 176.798252][ T8992] veth0: left promiscuous mode [ 176.939274][ T9007] tipc: New replicast peer: 0.0.0.0 [ 176.967923][ T9007] tipc: Enabled bearer , priority 10 [ 177.260821][ T9038] IPv6: NLM_F_CREATE should be specified when creating new route [ 177.316658][ T9035] netlink: 'syz.1.720': attribute type 2 has an invalid length. [ 177.342590][ T9035] netlink: 'syz.1.720': attribute type 1 has an invalid length. [ 177.885285][ T9060] tipc: Enabled bearer , priority 0 [ 177.913990][ T9074] lo speed is unknown, defaulting to 1000 [ 177.923970][ T9060] syzkaller0: entered promiscuous mode [ 177.940947][ T9060] syzkaller0: entered allmulticast mode [ 177.969557][ T9082] atomic_op ffff888026c28198 conn xmit_atomic 0000000000000000 [ 177.999786][ T9] tipc: Node number set to 1375730018 [ 178.005728][ T9074] lo speed is unknown, defaulting to 1000 [ 178.032628][ T9074] lo speed is unknown, defaulting to 1000 [ 178.274413][ T9093] netlink: 'syz.2.732': attribute type 1 has an invalid length. [ 178.498990][ T9074] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 178.554980][ T9059] tipc: Resetting bearer [ 178.594960][ T9074] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 178.639167][ T9059] tipc: Disabling bearer [ 178.697787][ T9074] lo speed is unknown, defaulting to 1000 [ 178.767696][ T9106] lo: entered allmulticast mode [ 178.775940][ T9074] lo speed is unknown, defaulting to 1000 [ 178.810771][ T9074] lo speed is unknown, defaulting to 1000 [ 178.819902][ T9074] lo speed is unknown, defaulting to 1000 [ 178.846800][ T9074] lo speed is unknown, defaulting to 1000 [ 178.865019][ T9074] lo speed is unknown, defaulting to 1000 [ 178.988404][ T9114] __nla_validate_parse: 5 callbacks suppressed [ 178.988428][ T9114] netlink: 60 bytes leftover after parsing attributes in process `syz.1.737'. [ 179.044667][ T9114] tipc: Started in network mode [ 179.050743][ T9114] tipc: Node identity bbbbbb01, cluster identity 4711 [ 179.058088][ T9114] tipc: Enabled bearer , priority 10 [ 179.076802][ T9120] netlink: 32 bytes leftover after parsing attributes in process `syz.2.738'. [ 179.129552][ T9122] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.739'. [ 179.165780][ T9122] netlink: 44 bytes leftover after parsing attributes in process `syz.4.739'. [ 179.441970][ T9136] netlink: 'syz.0.742': attribute type 14 has an invalid length. [ 179.473928][ T9135] netlink: 'syz.0.742': attribute type 14 has an invalid length. [ 179.491528][ T9104] lo: left allmulticast mode [ 179.953098][ T9157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.748'. [ 180.074112][ T9161] Bluetooth: MGMT ver 1.23 [ 180.263685][ T9] tipc: Node number set to 3149642497 [ 180.319487][ T9144] lo speed is unknown, defaulting to 1000 [ 180.454772][ T9174] netlink: 32 bytes leftover after parsing attributes in process `syz.4.754'. [ 180.504031][ T9174] netlink: 32 bytes leftover after parsing attributes in process `syz.4.754'. [ 180.590757][ T9174] netlink: 32 bytes leftover after parsing attributes in process `syz.4.754'. [ 180.652696][ T9174] netlink: 32 bytes leftover after parsing attributes in process `syz.4.754'. [ 180.675257][ T9174] netlink: 32 bytes leftover after parsing attributes in process `syz.4.754'. [ 180.734510][ T9179] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 181.231175][ T9188] macvlan0: Caught tx_queue_len zero misconfig [ 181.254487][ T9190] netlink: 'syz.1.760': attribute type 3 has an invalid length. [ 181.712385][ T9199] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 181.854221][ T9203] tipc: Enabling of bearer rejected, failed to enable media [ 182.169976][ T9225] mac80211_hwsim hwsim4 wlan0: Caught tx_queue_len zero misconfig [ 182.445771][ T9232] nbd: must specify at least one socket [ 182.588973][ T9249] netlink: 'syz.0.775': attribute type 12 has an invalid length. [ 182.713066][ T9261] batman_adv: batadv0: Adding interface: macsec1 [ 182.728100][ T9261] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.759241][ T9261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.770388][ T9261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.780472][ T9261] batman_adv: batadv0: Interface activated: macsec1 [ 182.891249][ T9269] bond4: option xmit_hash_policy: invalid value (10) [ 182.920265][ T9269] bond4 (unregistering): Released all slaves [ 183.598379][ T9311] pimreg: left allmulticast mode [ 183.669706][ T9315] openvswitch: netlink: IP tunnel TTL not specified. [ 183.671485][ T9301] macvtap1: entered promiscuous mode [ 183.687536][ T9301] macvtap1: entered allmulticast mode [ 183.718926][ T9317] chnl_net:caif_netlink_parms(): no params data found [ 185.101769][ T9333] dummy0: mtu less than device minimum [ 185.242168][ T9337] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 185.531503][ T9345] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.540126][ T9345] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.847057][ T9345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.860944][ T9345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.991823][ T9345] batman_adv: batadv0: Interface deactivated: macsec1 [ 186.043626][ T9329] lo speed is unknown, defaulting to 1000 [ 186.043683][ T7848] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.109839][ T7848] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.130358][ T7848] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 186.193930][ T7848] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.225679][ T7848] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.235769][ T7848] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 186.263450][ T9351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.271532][ T7848] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.291362][ T7848] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.304603][ T7848] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 186.328042][ T7848] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.360292][ T7848] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.378643][ T7848] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 186.438574][ T9358] syzkaller0: entered promiscuous mode [ 186.444717][ T9358] syzkaller0: entered allmulticast mode [ 186.485070][ T9362] __nla_validate_parse: 72 callbacks suppressed [ 186.485087][ T9362] netlink: 6 bytes leftover after parsing attributes in process `syz.4.806'. [ 186.514064][ T9362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.640635][ T9369] netlink: 24 bytes leftover after parsing attributes in process `syz.4.807'. [ 186.778337][ T9372] netlink: 28 bytes leftover after parsing attributes in process `syz.0.808'. [ 186.900322][ T9376] netlink: 84 bytes leftover after parsing attributes in process `syz.4.809'. [ 187.054928][ T9381] SET target dimension over the limit! [ 187.228969][ T9390] batadv1: entered promiscuous mode [ 187.522195][ T9408] tipc: Enabled bearer , priority 0 [ 187.532147][ T9408] syzkaller0: entered promiscuous mode [ 187.554316][ T9408] syzkaller0: entered allmulticast mode [ 187.586992][ T9408] tipc: Resetting bearer [ 187.620297][ T9406] tipc: Resetting bearer [ 187.643856][ T9406] tipc: Disabling bearer [ 187.844249][ T9415] netlink: 48 bytes leftover after parsing attributes in process `syz.0.824'. [ 188.000296][ T9426] tipc: Enabled bearer , priority 0 [ 188.161068][ T9427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.171573][ T9427] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.190248][ T9427] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.212360][ T9430] tipc: Disabling bearer [ 188.505300][ T9442] netlink: 32 bytes leftover after parsing attributes in process `syz.0.831'. [ 188.638515][ T9447] x_tables: duplicate underflow at hook 2 [ 188.711704][ T9451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.833'. [ 188.721088][ T9451] nbd: must specify a size in bytes for the device [ 189.203158][ T9478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.841'. [ 189.223253][ T9478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.841'. [ 189.239803][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.842'. [ 189.303052][ T9482] macvtap1: entered promiscuous mode [ 189.318326][ T9482] macvtap1: entered allmulticast mode [ 189.323869][ T9482] bond0: entered allmulticast mode [ 189.347851][ T9482] bond_slave_0: entered allmulticast mode [ 189.353712][ T9482] bond_slave_1: entered allmulticast mode [ 189.396827][ T9486] macvtap1: left promiscuous mode [ 189.403033][ T9486] macvtap1: left allmulticast mode [ 189.408904][ T9486] bond0: left allmulticast mode [ 189.414260][ T9486] bond_slave_0: left allmulticast mode [ 189.420524][ T9486] bond_slave_1: left allmulticast mode [ 189.528083][ T9501] batadv_slave_0: entered promiscuous mode [ 189.529870][ T9497] IPVS: length: 2741 != 8 [ 189.575613][ T9501] batadv_slave_0: left promiscuous mode [ 189.739791][ T9520] netlink: 'syz.2.851': attribute type 13 has an invalid length. [ 189.961367][ T9520] bond0: left promiscuous mode [ 189.966217][ T9520] bond_slave_0: left promiscuous mode [ 189.972496][ T9520] bond_slave_1: left promiscuous mode [ 189.995074][ T7844] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 190.017720][ T7844] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20002 - 0 [ 190.037035][ T7844] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 190.066970][ T7844] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20002 - 0 [ 190.097130][ T7844] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 190.106587][ T7844] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20002 - 0 [ 190.116170][ T7844] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 190.130774][ T7844] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20002 - 0 [ 190.199802][ T9532] netlink: 'syz.0.856': attribute type 1 has an invalid length. [ 190.287743][ T9535] netem: unknown loss type 0 [ 190.293264][ T9535] netem: change failed [ 190.368472][ T9535] nbd0: detected capacity change from 0 to 3 [ 190.389963][ T5842] block nbd0: Receive control failed (result -32) [ 190.471448][ T9542] tipc: Enabled bearer , priority 0 [ 190.557154][ T9542] syzkaller0: entered promiscuous mode [ 190.562903][ T9542] syzkaller0: entered allmulticast mode [ 191.972413][ T9548] bridge0: entered promiscuous mode [ 191.987439][ T9548] macsec1: entered promiscuous mode [ 192.002756][ T9556] tipc: Resetting bearer [ 192.031511][ T9562] tipc: Enabled bearer , priority 0 [ 192.040584][ T9564] syzkaller0: entered promiscuous mode [ 192.046365][ T9564] syzkaller0: entered allmulticast mode [ 192.067898][ T9540] tipc: Resetting bearer [ 192.126829][ T9540] tipc: Disabling bearer [ 192.142801][ T9568] tipc: Resetting bearer [ 192.162032][ T9568] tipc: Disabling bearer [ 192.273908][ T9583] __nla_validate_parse: 4 callbacks suppressed [ 192.273930][ T9583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.868'. [ 192.761350][ T9606] tipc: Resetting bearer [ 192.767667][ T9607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.873'. [ 192.904823][ T9607] 8021q: adding VLAN 0 to HW filter on device bond4 [ 192.931335][ T9610] syzkaller0: entered promiscuous mode [ 192.937187][ T9610] syzkaller0: entered allmulticast mode [ 192.951998][ T9614] ip6gre1: entered promiscuous mode [ 192.957262][ T9614] ip6gre1: entered allmulticast mode [ 193.319004][ T9617] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.523571][ T9617] netlink: 16 bytes leftover after parsing attributes in process `syz.2.879'. [ 193.537105][ T9617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.879'. [ 193.548921][ T9617] netlink: 24 bytes leftover after parsing attributes in process `syz.2.879'. [ 193.695769][ T9633] tipc: Enabled bearer , priority 0 [ 193.705979][ T9633] syzkaller0: entered promiscuous mode [ 193.733793][ T9633] syzkaller0: entered allmulticast mode [ 193.850010][ T9633] tipc: Resetting bearer [ 193.882778][ T9631] tipc: Resetting bearer [ 193.930513][ T9631] tipc: Disabling bearer [ 194.270991][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.887'. [ 194.321886][ T9660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.886'. [ 194.338601][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.887'. [ 194.542575][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 194.551519][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 194.561518][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 194.569662][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 194.591297][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 194.808486][ T9673] syzkaller1: entered promiscuous mode [ 194.828325][ T9673] syzkaller1: entered allmulticast mode [ 194.840058][ T9676] tipc: Enabling of bearer rejected, failed to enable media [ 195.499987][ T9698] netlink: 40 bytes leftover after parsing attributes in process `syz.2.897'. [ 195.816539][ T9665] chnl_net:caif_netlink_parms(): no params data found [ 195.952981][ T9714] syzkaller0: entered promiscuous mode [ 195.962916][ T9714] syzkaller0: entered allmulticast mode [ 196.054208][ T9715] netlink: 40 bytes leftover after parsing attributes in process `syz.2.900'. [ 196.274925][ T9721] wg1: entered promiscuous mode [ 196.280995][ T9721] wg1: entered allmulticast mode [ 196.395294][ T9665] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.404457][ T9665] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.411925][ T9665] bridge_slave_0: entered allmulticast mode [ 196.423653][ T9665] bridge_slave_0: entered promiscuous mode [ 196.446689][ T9665] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.475713][ T9665] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.493664][ T9665] bridge_slave_1: entered allmulticast mode [ 196.525387][ T9665] bridge_slave_1: entered promiscuous mode [ 196.687504][ T5842] Bluetooth: hci5: command tx timeout [ 198.130112][ T9665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.144800][ T9665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.273528][ T9665] team0: Port device team_slave_0 added [ 198.286336][ T9665] team0: Port device team_slave_1 added [ 198.414246][ T9665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.455525][ T9665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.530271][ T9665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.565029][ T9665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.579723][ T9665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.647905][ T9665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.684411][ T9759] syzkaller0: entered promiscuous mode [ 198.695690][ T9759] syzkaller0: entered allmulticast mode [ 198.757599][ T5842] Bluetooth: hci5: command tx timeout [ 198.893494][ T9768] tipc: Enabled bearer , priority 0 [ 199.040902][ T9771] nbd: must specify at least one socket [ 199.048975][ T9773] nbd: must specify at least one socket [ 199.191771][ T9758] tipc: Resetting bearer [ 199.209399][ T9758] tipc: Disabling bearer [ 199.297324][ T9665] hsr_slave_0: entered promiscuous mode [ 199.305114][ T9665] hsr_slave_1: entered promiscuous mode [ 199.312171][ T9665] debugfs: 'hsr0' already exists in 'hsr' [ 199.318612][ T9665] Cannot create hsr debugfs directory [ 199.562025][ T9795] x_tables: duplicate underflow at hook 2 [ 199.642522][ T1305] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 199.817267][ T9807] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.830505][ T9807] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.022381][ T9665] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 200.042478][ T9665] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 200.061465][ T9665] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 200.081483][ T9665] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 200.101455][ T9821] netlink: 'syz.2.926': attribute type 29 has an invalid length. [ 200.111162][ T9821] netlink: 'syz.2.926': attribute type 29 has an invalid length. [ 200.316499][ T9665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.345256][ T9835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.928'. [ 200.351302][ T9834] ªªªªªª: renamed from vlan0 (while UP) [ 200.381631][ T9665] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.429887][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.437294][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.495236][ T7844] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.502740][ T7844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.601644][ T9839] xt_HMARK: proto mask must be zero with L3 mode [ 200.713690][ T9846] netlink: 7 bytes leftover after parsing attributes in process `syz.2.930'. [ 200.848715][ T5842] Bluetooth: hci5: command tx timeout [ 201.184036][ T9866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.196273][ T9866] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.211587][ T9866] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 201.294128][ T9665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.503788][ T9877] syzkaller0: entered promiscuous mode [ 201.527593][ T9877] syzkaller0: entered allmulticast mode [ 201.732557][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.941'. [ 201.785305][ T9886] netlink: 44 bytes leftover after parsing attributes in process `syz.0.940'. [ 202.054595][ T9903] netlink: 24 bytes leftover after parsing attributes in process `syz.2.945'. [ 202.082979][ T9903] netlink: 24 bytes leftover after parsing attributes in process `syz.2.945'. [ 202.094227][ T9665] veth0_vlan: entered promiscuous mode [ 202.103992][ T9907] tipc: Enabled bearer , priority 0 [ 202.121264][ T9907] syzkaller0: entered promiscuous mode [ 202.128200][ T9907] syzkaller0: entered allmulticast mode [ 202.158434][ T9907] tipc: Resetting bearer [ 202.180905][ T9905] tipc: Resetting bearer [ 202.217338][ T9905] tipc: Disabling bearer [ 202.239611][ T9665] veth1_vlan: entered promiscuous mode [ 202.299529][ T9665] veth0_macvtap: entered promiscuous mode [ 202.324209][ T9665] veth1_macvtap: entered promiscuous mode [ 202.377228][ T9920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.950'. [ 202.393894][ T9665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.416944][ T9665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.470751][ T9922] netlink: 'syz.4.949': attribute type 10 has an invalid length. [ 202.502534][ T9922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.949'. [ 202.525061][ T9929] netlink: 32 bytes leftover after parsing attributes in process `syz.0.951'. [ 202.547957][ T9929] netlink: 44 bytes leftover after parsing attributes in process `syz.0.951'. [ 202.560234][ T3005] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.560504][ T9889] syz.1.941 (9889) used greatest stack depth: 17656 bytes left [ 202.608124][ T3005] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.651967][ T3005] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.672482][ T3005] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.927545][ T5842] Bluetooth: hci5: command tx timeout [ 202.960229][ T7859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.974195][ T7859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.070760][ T3005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.113399][ T3005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.334651][ T9941] bridge: RTM_NEWNEIGH with invalid ether address [ 203.765635][ T9957] IPv6: sit1: Disabled Multicast RS [ 204.379819][ T9978] openvswitch: netlink: Message has -2 unknown bytes. [ 204.547177][ T9988] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.000076][T10011] netlink: 'syz.5.974': attribute type 12 has an invalid length. [ 205.363288][T10028] x_tables: duplicate underflow at hook 1 [ 205.379197][T10027] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 205.474745][T10034] __nla_validate_parse: 6 callbacks suppressed [ 205.474767][T10034] netlink: 28 bytes leftover after parsing attributes in process `syz.4.978'. [ 205.873165][T10048] netlink: 'syz.2.982': attribute type 1 has an invalid length. [ 205.912182][T10048] netlink: 224 bytes leftover after parsing attributes in process `syz.2.982'. [ 206.039975][T10047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.096362][T10055] xt_CONNSECMARK: invalid mode: 66 [ 206.103928][T10048] vxcan0: entered allmulticast mode [ 206.723713][T10079] netlink: 16 bytes leftover after parsing attributes in process `syz.5.991'. [ 207.125242][T10082] netlink: 24 bytes leftover after parsing attributes in process `syz.1.992'. [ 207.278816][T10092] x_tables: duplicate underflow at hook 3 [ 207.780103][T10112] netlink: 'syz.2.997': attribute type 1 has an invalid length. [ 207.809557][T10113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.998'. [ 208.054499][T10120] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1000'. [ 208.114239][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1002'. [ 208.137754][T10120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.193405][T10122] ip6tnl1: entered promiscuous mode [ 208.475804][T10141] tipc: Enabled bearer , priority 0 [ 208.485079][T10141] syzkaller0: entered promiscuous mode [ 208.490777][T10141] syzkaller0: entered allmulticast mode [ 208.544404][T10148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1008'. [ 208.554734][T10141] tipc: Resetting bearer [ 208.571641][T10148] netlink: 'syz.2.1008': attribute type 7 has an invalid length. [ 208.583641][T10140] tipc: Resetting bearer [ 208.602128][T10148] netlink: 'syz.2.1008': attribute type 8 has an invalid length. [ 208.629375][T10140] tipc: Disabling bearer [ 208.664021][T10148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1008'. [ 208.812718][T10161] netlink: 'syz.1.1010': attribute type 10 has an invalid length. [ 208.861039][T10161] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 208.872631][T10164] syzkaller0: entered promiscuous mode [ 208.879167][T10164] syzkaller0: entered allmulticast mode [ 208.923049][T10167] netlink: 'syz.2.1012': attribute type 13 has an invalid length. [ 208.933132][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1011'. [ 208.968453][T10167] netlink: 'syz.2.1012': attribute type 17 has an invalid length. [ 209.313237][T10181] tipc: Enabled bearer , priority 0 [ 209.379903][T10175] tipc: Resetting bearer [ 209.495726][T10183] syzkaller0: entered promiscuous mode [ 209.516313][T10183] syzkaller0: entered allmulticast mode [ 209.531758][T10194] sctp: [Deprecated]: syz.2.1018 (pid 10194) Use of int in maxseg socket option. [ 209.531758][T10194] Use struct sctp_assoc_value instead [ 209.554211][T10193] tipc: Can't bind to reserved service type 1 [ 209.561102][T10174] tipc: Resetting bearer [ 209.589295][T10174] tipc: Disabling bearer [ 209.799936][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.096014][T10216] syzkaller0: entered promiscuous mode [ 210.101676][T10216] syzkaller0: entered allmulticast mode [ 211.173212][T10260] tipc: Started in network mode [ 211.194749][T10260] tipc: Node identity 82f2a5ca8e5e, cluster identity 4711 [ 211.203787][T10260] tipc: Enabled bearer , priority 0 [ 211.215679][T10263] __nla_validate_parse: 3 callbacks suppressed [ 211.215700][T10263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1039'. [ 211.244873][T10263] netlink: 'syz.2.1039': attribute type 27 has an invalid length. [ 211.263227][T10267] syzkaller0: entered promiscuous mode [ 211.284540][T10267] syzkaller0: entered allmulticast mode [ 211.316351][T10260] tipc: Resetting bearer [ 211.331865][T10258] tipc: Resetting bearer [ 211.361357][T10258] tipc: Disabling bearer [ 211.549911][T10274] netlink: 'syz.2.1042': attribute type 1 has an invalid length. [ 211.566299][T10276] netlink: 'syz.5.1043': attribute type 10 has an invalid length. [ 211.576449][T10274] netlink: 'syz.2.1042': attribute type 7 has an invalid length. [ 211.584413][T10274] netlink: 'syz.2.1042': attribute type 8 has an invalid length. [ 211.592569][T10276] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1043'. [ 211.604536][T10274] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1042'. [ 211.614434][T10274] NCSI netlink: No device for ifindex 65584 [ 211.657634][T10276] bond0: entered promiscuous mode [ 211.685667][T10276] bond_slave_0: entered promiscuous mode [ 211.693927][T10276] bond_slave_1: entered promiscuous mode [ 211.701940][T10276] bridge0: port 3(bond0) entered blocking state [ 211.708693][T10276] bridge0: port 3(bond0) entered disabled state [ 211.718798][T10276] bond0: entered allmulticast mode [ 211.758302][T10276] bond_slave_0: entered allmulticast mode [ 211.764345][T10276] bond_slave_1: entered allmulticast mode [ 211.793225][T10276] bridge0: port 3(bond0) entered blocking state [ 211.799730][T10276] bridge0: port 3(bond0) entered forwarding state [ 211.961333][ T5152] Bluetooth: hci0: command 0x0406 tx timeout [ 211.961364][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 211.970670][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 211.974168][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 212.020258][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1047'. [ 212.032704][T10296] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1047'. [ 212.044256][T10296] netlink: 'syz.5.1047': attribute type 14 has an invalid length. [ 212.052605][T10296] netlink: 'syz.5.1047': attribute type 13 has an invalid length. [ 212.108808][T10306] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1050'. [ 212.147838][T10304] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1050'. [ 212.204923][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1051'. [ 212.333288][T10313] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1052'. [ 212.373770][T10318] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.478194][T10318] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.547950][T10318] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.649969][T10318] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.999090][ T7848] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.061894][ T7848] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.156226][ T7848] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.215952][ T7848] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.305859][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1061'. [ 213.439485][T10347] bond2: Removing last ns target with arp_interval on [ 213.779689][T10371] tipc: Enabling of bearer rejected, failed to enable media [ 213.878901][ T3005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.887676][ T3005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.898187][T10377] xt_hashlimit: max too large, truncated to 1048576 [ 214.119358][T10382] can: request_module (can-proto-0) failed. [ 214.184607][T10391] netlink: 'syz.2.1073': attribute type 1 has an invalid length. [ 214.280762][T10394] vxcan0: entered allmulticast mode [ 214.705615][T10416] netlink: 'syz.5.1080': attribute type 11 has an invalid length. [ 216.500933][T10472] bond4: option arp_validate: invalid value (18446744073491447809) [ 216.523010][T10472] bond4 (unregistering): Released all slaves [ 216.550882][T10476] netlink: 'syz.4.1093': attribute type 13 has an invalid length. [ 217.574741][T10491] xt_hashlimit: size too large, truncated to 1048576 [ 217.682661][T10493] __nla_validate_parse: 10 callbacks suppressed [ 217.682683][T10493] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1097'. [ 218.456052][T10515] tipc: Enabling of bearer rejected, failed to enable media [ 218.707058][T10523] netlink: 'syz.1.1105': attribute type 10 has an invalid length. [ 218.715103][T10523] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1105'. [ 218.746119][T10527] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1107'. [ 219.036917][T10534] Cannot find del_set index 2 as target [ 219.093970][T10534] netlink: 'syz.4.1109': attribute type 1 has an invalid length. [ 219.217877][T10549] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1109'. [ 219.266057][T10552] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1112'. [ 219.297491][T10552] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1112'. [ 219.306593][T10552] netlink: 'syz.5.1112': attribute type 1 has an invalid length. [ 219.335964][T10544] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 219.391196][T10544] bond4: (slave batadv1): making interface the new active one [ 219.400344][T10544] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 219.431737][T10549] 8021q: adding VLAN 0 to HW filter on device bond4 [ 219.676343][T10568] wg1 speed is unknown, defaulting to 1000 [ 219.696587][T10568] wg1 speed is unknown, defaulting to 1000 [ 219.714684][T10568] wg1 speed is unknown, defaulting to 1000 [ 219.830220][T10568] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 219.975123][T10568] wg1 speed is unknown, defaulting to 1000 [ 220.016552][T10568] wg1 speed is unknown, defaulting to 1000 [ 220.039984][T10568] wg1 speed is unknown, defaulting to 1000 [ 220.062257][T10568] wg1 speed is unknown, defaulting to 1000 [ 220.091325][T10568] wg1 speed is unknown, defaulting to 1000 [ 220.129605][T10568] wg1 speed is unknown, defaulting to 1000 [ 220.255623][T10594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1125'. [ 220.326971][T10596] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1126'. [ 220.402636][T10597] syzkaller0: entered promiscuous mode [ 220.408701][T10597] syzkaller0: entered allmulticast mode [ 220.451142][T10601] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1127'. [ 220.484871][T10593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1124'. [ 220.696550][ T8209] IPVS: starting estimator thread 0... [ 220.808971][T10611] IPVS: using max 28 ests per chain, 67200 per kthread [ 220.827191][T10616] netlink: 'syz.2.1130': attribute type 1 has an invalid length. [ 221.131133][T10641] sctp: [Deprecated]: syz.1.1137 (pid 10641) Use of int in maxseg socket option. [ 221.131133][T10641] Use struct sctp_assoc_value instead [ 221.366365][T10650] netlink: 'syz.1.1141': attribute type 1 has an invalid length. [ 221.797451][ T5844] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 221.804629][ T5844] Bluetooth: hci0: command 0x0406 tx timeout [ 222.121921][T10683] tipc: Enabled bearer , priority 10 [ 222.167733][T10685] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 222.353657][T10683] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.854601][T10706] netlink: 'syz.0.1157': attribute type 3 has an invalid length. [ 222.890936][T10706] __nla_validate_parse: 7 callbacks suppressed [ 222.890958][T10706] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1157'. [ 222.922885][T10710] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1157'. [ 222.933996][T10711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1156'. [ 222.968153][T10711] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16) [ 222.976628][T10711] openvswitch: netlink: Message has 8 unknown bytes. [ 223.179904][T10704] wg1 speed is unknown, defaulting to 1000 [ 223.240676][ T8191] tipc: Node number set to 3329167247 [ 223.577328][T10739] netlink: 'syz.0.1165': attribute type 13 has an invalid length. [ 223.620585][T10743] netlink: 23 bytes leftover after parsing attributes in process `syz.2.1167'. [ 223.708888][T10748] netlink: 23 bytes leftover after parsing attributes in process `syz.2.1167'. [ 223.862893][T10739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.878576][T10739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.134968][T10754] macsec2: entered promiscuous mode [ 224.140535][T10754] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 224.151318][ T3532] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.184977][T10756] wg1 speed is unknown, defaulting to 1000 [ 224.195023][ T3532] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.214631][T10764] netlink: 'syz.2.1172': attribute type 2 has an invalid length. [ 224.215967][ T3532] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.233537][T10764] netlink: 'syz.2.1172': attribute type 2 has an invalid length. [ 224.249253][ T3532] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.249927][T10756] wg1 speed is unknown, defaulting to 1000 [ 224.291095][T10756] wg1 speed is unknown, defaulting to 1000 [ 224.322521][T10756] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 224.360761][T10756] wg1 speed is unknown, defaulting to 1000 [ 224.369457][T10756] wg1 speed is unknown, defaulting to 1000 [ 224.377963][T10756] wg1 speed is unknown, defaulting to 1000 [ 224.386072][T10756] wg1 speed is unknown, defaulting to 1000 [ 224.394553][T10756] wg1 speed is unknown, defaulting to 1000 [ 224.459419][T10756] wg1 speed is unknown, defaulting to 1000 [ 224.724911][T10784] netlink: 'syz.4.1175': attribute type 10 has an invalid length. [ 224.746958][T10784] bridge0: port 3(macsec0) entered blocking state [ 224.772539][T10784] bridge0: port 3(macsec0) entered disabled state [ 224.787262][T10784] macsec0: entered allmulticast mode [ 224.805712][T10784] veth1_macvtap: entered allmulticast mode [ 224.818458][T10784] macsec0: entered promiscuous mode [ 224.821328][T10793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1176'. [ 224.835277][T10789] 8021q: VLANs not supported on ipvlan1 [ 224.846906][T10793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1176'. [ 224.887621][T10793] netlink: 'syz.1.1176': attribute type 11 has an invalid length. [ 224.979460][T10800] netlink: 'syz.4.1179': attribute type 10 has an invalid length. [ 225.030532][T10801] netlink: 'syz.4.1179': attribute type 10 has an invalid length. [ 225.035185][T10800] batadv0: entered allmulticast mode [ 225.056440][T10801] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1179'. [ 225.090542][T10800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.104806][T10804] netlink: 'syz.1.1183': attribute type 3 has an invalid length. [ 225.121882][T10804] netlink: 'syz.1.1183': attribute type 3 has an invalid length. [ 225.132756][T10800] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 225.138816][T10804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1183'. [ 225.167669][T10801] batadv0: entered promiscuous mode [ 225.189443][T10801] bond0: (slave batadv0): Releasing backup interface [ 225.206524][T10801] bridge0: port 4(batadv0) entered blocking state [ 225.213573][T10801] bridge0: port 4(batadv0) entered disabled state [ 225.324765][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1184'. [ 225.641508][T10846] Bluetooth: MGMT ver 1.23 [ 225.707722][ T7859] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 225.717672][ T7859] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 225.996786][T10874] SET target dimension over the limit! [ 226.331590][T10890] IPVS: length: 247 != 8 [ 226.582062][T10893] syzkaller0: entered promiscuous mode [ 226.599789][T10893] syzkaller0: entered allmulticast mode [ 226.784666][T10913] macvtap1: entered promiscuous mode [ 226.803294][T10913] macvtap1: entered allmulticast mode [ 227.737426][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 227.743578][ T5844] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 227.982254][T10941] wg1 speed is unknown, defaulting to 1000 [ 228.010272][T10941] wg1 speed is unknown, defaulting to 1000 [ 228.143939][T10968] batadv_slave_1: entered promiscuous mode [ 228.353867][T10982] __nla_validate_parse: 16 callbacks suppressed [ 228.353887][T10982] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1224'. [ 228.571816][T10987] validate_nla: 2 callbacks suppressed [ 228.571836][T10987] netlink: 'syz.0.1226': attribute type 32 has an invalid length. [ 228.597405][T10987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1226'. [ 228.625705][T10992] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1226'. [ 228.674147][T10987] bond5: Setting coupled_control to off (0) [ 228.682422][T10994] netlink: 'syz.4.1228': attribute type 1 has an invalid length. [ 228.786065][T10992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1226'. [ 228.966821][T10997] bond5: (slave bridge3): making interface the new active one [ 228.979895][T10997] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 229.034672][T11001] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 229.042984][T10971] batadv_slave_1: left promiscuous mode [ 229.171055][T11001] syzkaller1: entered promiscuous mode [ 229.197142][T11001] syzkaller1: entered allmulticast mode [ 229.826361][T11026] bridge0: port 3(bond0) entered disabled state [ 229.833057][T11026] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.841076][T11026] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.185119][T11026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.221313][T11026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.609616][ T7848] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.617833][T11024] wg1 speed is unknown, defaulting to 1000 [ 230.633620][ T7848] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.708865][ T7848] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.734182][T11024] wg1 speed is unknown, defaulting to 1000 [ 230.740456][ T7848] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.849049][T11077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'. [ 231.142416][T11095] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 231.414195][T11104] netlink: 'syz.2.1250': attribute type 3 has an invalid length. [ 231.453325][T11104] syz_tun: entered allmulticast mode [ 231.543503][T11103] syz_tun: left allmulticast mode [ 231.820437][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1256'. [ 231.988482][T11133] bond0: (slave bridge0): Releasing backup interface [ 232.006135][T11133] bridge_slave_0: left allmulticast mode [ 232.087290][T11133] bridge_slave_0: left promiscuous mode [ 232.093475][T11133] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.109848][T11133] bridge_slave_1: left allmulticast mode [ 232.115832][T11133] bridge_slave_1: left promiscuous mode [ 232.123284][T11133] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.136001][T11133] bond0: (slave bond_slave_0): Releasing backup interface [ 232.145843][T11133] bond0: (slave bond_slave_1): Releasing backup interface [ 232.156267][T11133] team0: Port device team_slave_0 removed [ 232.166143][T11133] team0: Port device team_slave_1 removed [ 232.175303][T11133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.184845][T11133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.195405][T11133] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 232.225251][T11111] wg1 speed is unknown, defaulting to 1000 [ 232.286597][T11111] wg1 speed is unknown, defaulting to 1000 [ 232.318017][T11147] syzkaller0: entered promiscuous mode [ 232.330688][T11147] syzkaller0: entered allmulticast mode [ 232.638671][T11159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1265'. [ 232.955843][T11172] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1268'. [ 233.078545][T11178] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1270'. [ 233.113252][T11178] bridge4: entered allmulticast mode [ 233.137677][T11179] batadv_slave_0: entered allmulticast mode [ 233.276037][T11193] netlink: 'syz.5.1272': attribute type 12 has an invalid length. [ 233.356364][T11193] netlink: 'syz.5.1272': attribute type 4 has an invalid length. [ 233.525523][T11202] trusted_key: syz.0.1278 sent an empty control message without MSG_MORE. [ 234.065592][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1285'. [ 234.224343][T11237] xt_connbytes: Forcing CT accounting to be enabled [ 234.228113][T11238] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1285'. [ 234.242697][T11239] sctp: [Deprecated]: syz.5.1287 (pid 11239) Use of struct sctp_assoc_value in delayed_ack socket option. [ 234.242697][T11239] Use struct sctp_sack_info instead [ 234.700197][T11256] veth2: entered allmulticast mode [ 234.958510][T11213] wg1 speed is unknown, defaulting to 1000 [ 234.996819][T11263] netlink: 'syz.0.1281': attribute type 2 has an invalid length. [ 235.086598][T11219] bond6: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 235.151943][T11219] bond6 (unregistering): Released all slaves [ 235.210711][T11213] wg1 speed is unknown, defaulting to 1000 [ 235.360899][T11288] tipc: Enabled bearer , priority 0 [ 235.371330][T11285] tipc: Enabling of bearer rejected, already enabled [ 235.395284][T11294] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1297'. [ 235.459462][T11285] tipc: Disabling bearer [ 235.614955][T11304] tipc: Enabling of bearer rejected, already enabled [ 235.655995][T11304] netlink: 'syz.2.1302': attribute type 11 has an invalid length. [ 235.668274][T11304] netlink: 'syz.2.1302': attribute type 11 has an invalid length. [ 235.695674][T11304] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1302'. [ 236.282402][T11306] wg1 speed is unknown, defaulting to 1000 [ 236.292574][T11306] wg1 speed is unknown, defaulting to 1000 [ 236.712620][T11332] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1308'. [ 236.820168][ T7855] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 236.942118][T11325] syzkaller0: entered promiscuous mode [ 236.947806][T11325] syzkaller0: entered allmulticast mode [ 237.252154][T11345] syzkaller0: entered promiscuous mode [ 237.258615][T11345] syzkaller0: entered allmulticast mode [ 238.704950][T11369] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1315'. [ 238.810363][T11375] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1318'. [ 238.964431][T11384] netlink: 'syz.0.1321': attribute type 10 has an invalid length. [ 238.991851][T11384] `: Port device dummy0 added [ 239.001292][T11388] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1324'. [ 239.101799][T11396] netlink: 'syz.0.1321': attribute type 10 has an invalid length. [ 239.118168][T11390] tipc: Resetting bearer [ 239.199571][T11396] `: Port device dummy0 removed [ 239.214335][T11396] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 239.231286][T11392] netlink: 'syz.2.1323': attribute type 1 has an invalid length. [ 239.236156][T11401] netlink: 'syz.5.1325': attribute type 8 has an invalid length. [ 239.285947][T11389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1323'. [ 239.307249][T11392] bond6: entered promiscuous mode [ 239.314627][T11392] 8021q: adding VLAN 0 to HW filter on device bond6 [ 239.652542][T11414] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 239.912001][T11381] wg1 speed is unknown, defaulting to 1000 [ 239.922645][T11381] wg1 speed is unknown, defaulting to 1000 [ 240.415316][T11450] tap0: tun_chr_ioctl cmd 2147767521 [ 240.835182][T11467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1343'. [ 240.938462][ T43] IPVS: starting estimator thread 0... [ 240.946414][T11476] bond0: left allmulticast mode [ 240.961561][T11476] bond_slave_0: left allmulticast mode [ 240.972881][T11476] bond_slave_1: left allmulticast mode [ 240.991116][T11476] bond0: left promiscuous mode [ 241.009678][T11476] bond_slave_0: left promiscuous mode [ 241.028195][T11477] IPVS: using max 26 ests per chain, 62400 per kthread [ 241.033223][T11476] bond_slave_1: left promiscuous mode [ 241.089555][T11476] bridge0: port 3(bond0) entered disabled state [ 241.189870][T11476] bridge_slave_0: left allmulticast mode [ 241.195627][T11476] bridge_slave_0: left promiscuous mode [ 241.243692][T11488] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1351'. [ 241.275488][T11476] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.313153][T11476] bridge_slave_1: left allmulticast mode [ 241.342510][T11476] bridge_slave_1: left promiscuous mode [ 241.383596][T11476] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.449010][T11476] bond0: (slave bond_slave_0): Releasing backup interface [ 241.488998][T11476] bond0: (slave bond_slave_1): Releasing backup interface [ 241.514144][T11502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1350'. [ 241.524273][T11502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1350'. [ 241.578537][T11476] team0: Port device team_slave_0 removed [ 241.619447][T11476] team0: Port device team_slave_1 removed [ 241.625664][T11476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.659112][T11476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.692161][T11476] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 241.763141][T11506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1354'. [ 241.773155][T11506] netlink: 'syz.0.1354': attribute type 11 has an invalid length. [ 241.800175][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1355'. [ 241.810212][T11506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1354'. [ 241.834810][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1355'. [ 241.847571][T11506] netlink: 'syz.0.1354': attribute type 11 has an invalid length. [ 241.982301][T11516] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 242.003676][T11516] team0: Device ipvlan2 failed to register rx_handler [ 242.178302][T11533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1360'. [ 242.410616][T11510] wg1 speed is unknown, defaulting to 1000 [ 242.476376][T11510] wg1 speed is unknown, defaulting to 1000 [ 242.482983][T11550] netlink: 'syz.1.1366': attribute type 32 has an invalid length. [ 242.536922][T11550] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 243.125423][T11528] wg1 speed is unknown, defaulting to 1000 [ 243.162884][T11584] netlink: 'syz.5.1373': attribute type 1 has an invalid length. [ 243.170797][T11528] wg1 speed is unknown, defaulting to 1000 [ 243.554177][T11596] tipc: Enabled bearer , priority 1 [ 243.811998][T11605] netlink: 'syz.0.1377': attribute type 12 has an invalid length. [ 243.855651][T11605] netlink: 'syz.0.1377': attribute type 29 has an invalid length. [ 243.869895][T11605] netlink: 'syz.0.1377': attribute type 1 has an invalid length. [ 243.891072][T11605] netlink: 'syz.0.1377': attribute type 1 has an invalid length. [ 244.053809][T11615] tipc: Enabled bearer , priority 0 [ 244.085589][T11614] vxcan5: entered allmulticast mode [ 244.139950][T11622] netlink: 'syz.0.1382': attribute type 10 has an invalid length. [ 244.166384][T11622] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 244.200955][T11612] tipc: Disabling bearer [ 244.532672][T11632] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 244.544076][T11641] __nla_validate_parse: 7 callbacks suppressed [ 244.544095][T11641] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1387'. [ 244.578193][T11641] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1387'. [ 244.589605][T11641] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1387'. [ 244.600220][T11641] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1387'. [ 244.610175][T11641] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1387'. [ 244.635688][T11641] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1387'. [ 244.896176][T11634] wg1 speed is unknown, defaulting to 1000 [ 244.904993][T11634] wg1 speed is unknown, defaulting to 1000 [ 245.538117][T11665] tipc: Enabled bearer , priority 0 [ 245.545728][T11665] syzkaller0: entered promiscuous mode [ 245.554154][T11665] syzkaller0: entered allmulticast mode [ 245.556133][T11670] netlink: 'syz.2.1394': attribute type 1 has an invalid length. [ 245.588829][T11666] tipc: Resetting bearer [ 245.596896][T11664] tipc: Resetting bearer [ 245.621364][T11664] tipc: Disabling bearer [ 245.906547][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1399'. [ 245.906810][T11685] bond2: entered promiscuous mode [ 245.919853][T11688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1399'. [ 245.922171][T11689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1399'. [ 245.959090][T11685] bond2: entered allmulticast mode [ 245.964636][T11685] 8021q: adding VLAN 0 to HW filter on device bond2 [ 245.998042][T11689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1399'. [ 246.033719][T11685] 8021q: adding VLAN 0 to HW filter on device bond3 [ 246.060613][T11685] bond3: entered promiscuous mode [ 246.065815][T11685] bond3: entered allmulticast mode [ 246.098234][T11685] bond2: (slave bond3): Enslaving as a backup interface with a down link [ 246.130117][T11675] wg1 speed is unknown, defaulting to 1000 [ 246.178617][T11675] wg1 speed is unknown, defaulting to 1000 [ 246.324234][T11705] openvswitch: netlink: Actions may not be safe on all matching packets [ 247.017255][T11737] syzkaller0: entered promiscuous mode [ 247.033069][T11737] syzkaller0: entered allmulticast mode [ 247.330900][T11752] tipc: Enabled bearer , priority 0 [ 247.339708][T11751] syzkaller0: entered promiscuous mode [ 247.345827][T11751] syzkaller0: entered allmulticast mode [ 247.415564][T11748] tipc: Resetting bearer [ 247.471477][T11748] tipc: Disabling bearer [ 247.565325][T11764] validate_nla: 1 callbacks suppressed [ 247.565345][T11764] netlink: 'syz.0.1420': attribute type 1 has an invalid length. [ 248.115931][T11797] syzkaller0: entered promiscuous mode [ 248.122547][T11797] syzkaller0: entered allmulticast mode [ 248.165031][T11800] netlink: 'syz.1.1431': attribute type 18 has an invalid length. [ 248.175017][T11800] netlink: 'syz.1.1431': attribute type 18 has an invalid length. [ 248.191067][T11798] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 248.199410][T11798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.599009][T11819] x_tables: duplicate underflow at hook 3 [ 248.823416][T11823] 8021q: adding VLAN 0 to HW filter on device bond4 [ 249.900238][T11874] __nla_validate_parse: 13 callbacks suppressed [ 249.900263][T11874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1441'. [ 250.344566][T11900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1447'. [ 251.004408][T11933] tipc: Enabled bearer , priority 0 [ 251.013497][T11933] syzkaller0: entered promiscuous mode [ 251.020186][T11933] syzkaller0: entered allmulticast mode [ 251.033369][T11933] tipc: Resetting bearer [ 251.048528][T11931] tipc: Resetting bearer [ 251.065506][T11931] tipc: Disabling bearer [ 251.149856][ T5844] Bluetooth: hci5: link tx timeout [ 251.156360][ T5844] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 251.310484][T11942] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1456'. [ 251.310484][T11941] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1456'. [ 251.369251][T11937] IPVS: Error connecting to the multicast addr [ 251.377152][T11942] tipc: Enabled bearer , priority 0 [ 251.384953][T11942] syzkaller0: entered promiscuous mode [ 251.391390][T11942] syzkaller0: entered allmulticast mode [ 251.455347][T11941] tipc: Enabling of bearer rejected, already enabled [ 251.538360][T11941] tipc: Resetting bearer [ 251.565967][T11941] tipc: Disabling bearer [ 251.613865][T11951] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1458'. [ 251.626813][T11953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1459'. [ 251.855529][T11962] netlink: 'syz.2.1461': attribute type 1 has an invalid length. [ 252.016483][T11974] Cannot find del_set index 4 as target [ 252.119438][T11977] syzkaller0: entered promiscuous mode [ 252.124969][T11977] syzkaller0: entered allmulticast mode [ 252.140977][T11977] dummy0: entered allmulticast mode [ 252.162241][T11976] dummy0: left allmulticast mode [ 252.504521][T11953] wg1 speed is unknown, defaulting to 1000 [ 252.534011][T11953] wg1 speed is unknown, defaulting to 1000 [ 253.120406][T12008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1473'. [ 253.144092][T12005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1472'. [ 253.246885][ T5844] Bluetooth: hci5: command 0x0406 tx timeout [ 253.762248][T12042] bridge_slave_0: invalid flags given to default FDB implementation [ 253.961952][T12050] netlink: 'syz.5.1480': attribute type 1 has an invalid length. [ 253.993755][T12050] NCSI netlink: No device for ifindex 0 [ 254.264073][T12069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1487'. [ 254.476532][T12076] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 254.512634][T12078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1491'. [ 254.562831][T12076] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 255.175489][T12100] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1496'. [ 255.191743][T12075] wg1 speed is unknown, defaulting to 1000 [ 255.323131][T12072] bond5: option miimon: invalid value (18446744073709551607) [ 255.362655][T12072] bond5: option miimon: allowed values 0 - 2147483647 [ 255.379956][T12096] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1488'. [ 255.469780][T12072] bond5 (unregistering): Released all slaves [ 255.558728][T12075] wg1 speed is unknown, defaulting to 1000 [ 255.952080][T12130] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1502'. [ 255.965986][T12134] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1505'. [ 255.979633][T12125] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1504'. [ 256.116108][T12130] hsr_slave_0: left promiscuous mode [ 256.124176][T12130] hsr_slave_1: left promiscuous mode [ 256.148417][T12139] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1503'. [ 256.166898][T12139] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1503'. [ 256.196368][T12139] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1503'. [ 256.353462][T12146] netlink: 'syz.1.1510': attribute type 7 has an invalid length. [ 256.365494][T12146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1510'. [ 256.393587][T12149] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1508'. [ 256.681360][T12155] bond4: option mode: unable to set because the bond device is up [ 257.352232][T12202] xt_cgroup: path and classid specified [ 257.381040][T12199] sctp: [Deprecated]: syz.0.1521 (pid 12199) Use of int in maxseg socket option. [ 257.381040][T12199] Use struct sctp_assoc_value instead [ 257.714187][T12230] syzkaller1: entered promiscuous mode [ 257.720756][T12230] syzkaller1: entered allmulticast mode [ 257.990487][T12238] netlink: 'syz.2.1536': attribute type 1 has an invalid length. [ 258.022313][T12247] netlink: 'syz.5.1537': attribute type 1 has an invalid length. [ 259.087749][T12289] 8021q: adding VLAN 0 to HW filter on device bond6 [ 259.098359][T12291] bond6: option ad_select: unable to set because the bond device is up [ 259.111486][T12297] xt_hashlimit: max too large, truncated to 1048576 [ 259.470941][T12283] wg1 speed is unknown, defaulting to 1000 [ 259.509533][T12283] wg1 speed is unknown, defaulting to 1000 [ 259.861832][T12308] wg1 speed is unknown, defaulting to 1000 [ 259.869700][T12308] wg1 speed is unknown, defaulting to 1000 [ 261.083777][ T1305] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 261.400008][T12351] netlink: 'syz.2.1563': attribute type 5 has an invalid length. [ 261.585067][T12368] __nla_validate_parse: 8 callbacks suppressed [ 261.585088][T12368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1566'. [ 261.632635][T12368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1566'. [ 261.660647][T12368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1566'. [ 261.682829][T12373] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1567'. [ 262.794269][T12390] wg1 speed is unknown, defaulting to 1000 [ 262.818016][T12390] wg1 speed is unknown, defaulting to 1000 [ 263.824283][T12430] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1581'. [ 263.849986][T12430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1581'. [ 263.901630][T12432] netlink: 'syz.1.1581': attribute type 2 has an invalid length. [ 263.905496][T12430] bond0: entered promiscuous mode [ 263.926103][T12430] bond0: left promiscuous mode [ 263.935670][T12432] netlink: 'syz.1.1581': attribute type 1 has an invalid length. [ 263.945230][T12421] wg1 speed is unknown, defaulting to 1000 [ 263.951164][T12432] netlink: 'syz.1.1581': attribute type 1 has an invalid length. [ 263.966088][T12415] wg1 speed is unknown, defaulting to 1000 [ 263.968933][T12432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1581'. [ 263.976783][T12421] wg1 speed is unknown, defaulting to 1000 [ 263.991509][T12432] bond0: entered promiscuous mode [ 264.008454][T12432] bond0: left promiscuous mode [ 264.032835][T12418] wg1 speed is unknown, defaulting to 1000 [ 264.057034][T12415] wg1 speed is unknown, defaulting to 1000 [ 264.213451][T12418] wg1 speed is unknown, defaulting to 1000 [ 264.221496][T12434] netlink: 'syz.1.1582': attribute type 10 has an invalid length. [ 264.255713][T12434] team0: Cannot enslave team device to itself [ 264.669704][T12445] netlink: 'syz.1.1585': attribute type 21 has an invalid length. [ 264.720739][T12445] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1585'. [ 264.742443][T12445] netlink: 'syz.1.1585': attribute type 21 has an invalid length. [ 264.765145][T12445] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1585'. [ 266.073023][T12490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.155727][T12490] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.190630][T12490] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 266.283704][T12501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1599'. [ 266.489573][T12465] wg1 speed is unknown, defaulting to 1000 [ 266.497963][T12465] wg1 speed is unknown, defaulting to 1000 [ 266.688028][T12512] __nla_validate_parse: 1 callbacks suppressed [ 266.688048][T12512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1603'. [ 266.849451][T12513] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1603'. [ 266.888895][T12512] hsr_slave_1 (unregistering): left promiscuous mode [ 266.986157][T12513] bridge4: entered allmulticast mode [ 267.136952][T12482] wg1 speed is unknown, defaulting to 1000 [ 267.161435][T12482] wg1 speed is unknown, defaulting to 1000 [ 267.238272][T12522] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1605'. [ 267.451067][T12522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1605'. [ 268.078258][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1612'. [ 268.144142][T12546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.184545][T12552] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 268.422412][T12567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1616'. [ 268.442530][T12567] : entered promiscuous mode [ 268.454448][T12567] netlink: 'syz.5.1616': attribute type 1 has an invalid length. [ 268.508192][T12567] bond5: entered promiscuous mode [ 268.513724][T12567] 8021q: adding VLAN 0 to HW filter on device bond5 [ 268.530677][T12567] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1616'. [ 268.613155][T12577] netlink: 'syz.1.1617': attribute type 6 has an invalid length. [ 268.621989][T12577] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1617'. [ 268.633784][T12577] block nbd0: must specify backend [ 268.669040][T12579] sctp: [Deprecated]: syz.5.1618 (pid 12579) Use of struct sctp_assoc_value in delayed_ack socket option. [ 268.669040][T12579] Use struct sctp_sack_info instead [ 268.686458][T12579] sctp: [Deprecated]: syz.5.1618 (pid 12579) Use of struct sctp_assoc_value in delayed_ack socket option. [ 268.686458][T12579] Use struct sctp_sack_info instead [ 268.731535][T12579] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1618'. [ 268.890236][T12584] syzkaller0: entered promiscuous mode [ 268.895774][T12584] syzkaller0: entered allmulticast mode [ 268.919903][T12591] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1621'. [ 269.605538][T12619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.615032][T12619] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.628560][T12619] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 269.779576][T12634] netlink: 'syz.2.1632': attribute type 29 has an invalid length. [ 269.804137][T12634] netlink: 'syz.2.1632': attribute type 29 has an invalid length. [ 270.121866][T12648] netlink: zone id is out of range [ 270.131652][T12648] netlink: zone id is out of range [ 270.137074][T12648] netlink: zone id is out of range [ 270.142602][T12654] tipc: Enabling of bearer rejected, already enabled [ 270.142732][T12648] netlink: zone id is out of range [ 270.156049][T12648] netlink: zone id is out of range [ 270.156304][T12654] tipc: New replicast peer: 172.30.1.3 [ 270.161957][T12648] netlink: zone id is out of range [ 270.960447][T12661] wg1 speed is unknown, defaulting to 1000 [ 270.970509][T12661] wg1 speed is unknown, defaulting to 1000 [ 271.043962][T12689] netlink: 'syz.2.1641': attribute type 6 has an invalid length. [ 271.188454][T12698] netlink: 'syz.0.1653': attribute type 1 has an invalid length. [ 271.304712][T12698] bond7: entered promiscuous mode [ 271.310226][T12698] bond7: entered allmulticast mode [ 271.315797][T12698] 8021q: adding VLAN 0 to HW filter on device bond7 [ 271.698811][T12734] net_ratelimit: 47 callbacks suppressed [ 271.698831][T12734] openvswitch: netlink: Flow actions attr not present in new flow. [ 272.054543][T12743] syzkaller0: entered promiscuous mode [ 272.097474][T12743] syzkaller0: entered allmulticast mode [ 272.162897][T12753] netlink: 'syz.5.1666': attribute type 27 has an invalid length. [ 272.183586][T12750] openvswitch: netlink: Duplicate or invalid key (type 0). [ 272.190989][T12750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.373537][T12759] __nla_validate_parse: 14 callbacks suppressed [ 272.373560][T12759] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1668'. [ 272.494096][T12762] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1669'. [ 272.914755][T12760] wg1 speed is unknown, defaulting to 1000 [ 272.967694][T12760] wg1 speed is unknown, defaulting to 1000 [ 273.120282][T12779] netlink: 'syz.5.1676': attribute type 10 has an invalid length. [ 273.150402][T12779] team0: Device dummy0 is up. Set it down before adding it as a team port [ 273.815180][T12784] syzkaller1: entered promiscuous mode [ 273.855713][T12784] syzkaller1: entered allmulticast mode [ 274.199175][T12800] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1678'. [ 274.228347][T12800] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1678'. [ 274.258307][T12746] wg1 speed is unknown, defaulting to 1000 [ 274.282703][T12781] wg1 speed is unknown, defaulting to 1000 [ 274.291202][T12746] wg1 speed is unknown, defaulting to 1000 [ 274.373226][T12781] wg1 speed is unknown, defaulting to 1000 [ 275.140213][T12827] netlink: 'syz.2.1684': attribute type 3 has an invalid length. [ 275.459531][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1688'. [ 275.768671][T12850] syzkaller1: entered promiscuous mode [ 275.774249][T12850] syzkaller1: entered allmulticast mode [ 275.879910][T12859] netlink: 'syz.2.1699': attribute type 1 has an invalid length. [ 275.927066][T12866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1698'. [ 275.970517][T12859] bond7: entered promiscuous mode [ 275.976002][T12859] 8021q: adding VLAN 0 to HW filter on device bond7 [ 276.001436][T12865] tipc: Enabling of bearer rejected, failed to enable media [ 276.052823][T12864] IPVS: Scheduler module ip_vs_sip not found [ 276.103875][T12863] IPVS: Scheduler module ip_vs_sip not found [ 276.180600][T12880] netlink: 'syz.4.1700': attribute type 5 has an invalid length. [ 276.265531][T12887] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:19999 [ 276.473575][T12904] tipc: Enabled bearer , priority 0 [ 276.509933][T12904] syzkaller0: entered promiscuous mode [ 276.516629][T12904] syzkaller0: entered allmulticast mode [ 276.575313][T12895] tipc: Resetting bearer [ 276.606989][T12895] tipc: Disabling bearer [ 314.358065][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 322.520370][ T1305] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 328.917651][ T31] INFO: task syz.3.735:9106 blocked for more than 143 seconds. [ 328.925264][ T31] Not tainted syzkaller #0 [ 328.930599][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 328.939445][ T31] task:syz.3.735 state:D stack:26536 pid:9106 tgid:9104 ppid:5830 task_flags:0x400140 flags:0x00080002 [ 328.951596][ T31] Call Trace: [ 328.954902][ T31] [ 328.957933][ T31] __schedule+0x14bc/0x5000 [ 328.962495][ T31] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 328.967512][ T31] ? schedule+0x91/0x360 [ 328.972527][ T31] schedule+0x165/0x360 [ 328.976725][ T31] schedule_preempt_disabled+0x13/0x30 [ 328.982838][ T31] __mutex_lock+0x7e6/0x1350 [ 328.987845][ T31] ? __mutex_lock+0x5bb/0x1350 [ 328.992668][ T31] ? nfsd_nl_listener_set_doit+0x137/0x1660 [ 328.999022][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 329.037474][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 329.042696][ T31] nfsd_nl_listener_set_doit+0x137/0x1660 [ 329.107389][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 329.113220][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 329.147358][ T31] ? rcu_is_watching+0x15/0xb0 [ 329.152207][ T31] ? __nla_parse+0x40/0x60 [ 329.156667][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 329.183388][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 329.207366][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 329.213531][ T31] ? bpf_lsm_capable+0x9/0x20 [ 329.237354][ T31] ? security_capable+0x7e/0x2e0 [ 329.242386][ T31] genl_rcv_msg+0x60e/0x790 [ 329.246940][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.277474][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 329.283748][ T31] netlink_rcv_skb+0x208/0x470 [ 329.317369][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.322500][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 329.347552][ T31] ? down_read+0x274/0x2e0 [ 329.352049][ T31] ? genl_rcv+0xd/0x40 [ 329.356158][ T31] genl_rcv+0x28/0x40 [ 329.387358][ T31] netlink_unicast+0x82f/0x9e0 [ 329.392222][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 329.417470][ T31] ? netlink_sendmsg+0x642/0xb30 [ 329.422492][ T31] ? skb_put+0x11b/0x210 [ 329.426791][ T31] netlink_sendmsg+0x805/0xb30 [ 329.457530][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.462898][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 329.507374][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 329.512772][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.537537][ T31] __sock_sendmsg+0x21c/0x270 [ 329.542477][ T31] ____sys_sendmsg+0x505/0x820 [ 329.567386][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.572792][ T31] ? import_iovec+0x74/0xa0 [ 329.597532][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 329.602305][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.635979][ T31] ? futex_wake+0x4b2/0x560 [ 329.640807][ T31] ? __fget_files+0x2a/0x420 [ 329.645601][ T31] ? __fget_files+0x3a0/0x420 [ 329.677454][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 329.682490][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 329.697574][ T31] ? do_syscall_64+0xbe/0xf80 [ 329.702330][ T31] do_syscall_64+0xfa/0xf80 [ 329.706869][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.719495][ T31] ? clear_bhb_loop+0x60/0xb0 [ 329.724251][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.730228][ T31] RIP: 0033:0x7f32b278f749 [ 329.734657][ T31] RSP: 002b:00007f32b36de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.743115][ T31] RAX: ffffffffffffffda RBX: 00007f32b29e5fa0 RCX: 00007f32b278f749 [ 329.751210][ T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 000000000000000a [ 329.759349][ T31] RBP: 00007f32b2813f91 R08: 0000000000000000 R09: 0000000000000000 [ 329.767385][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.775359][ T31] R13: 00007f32b29e6038 R14: 00007f32b29e5fa0 R15: 00007ffdbe2069f8 [ 329.783396][ T31] [ 329.788432][ T31] [ 329.788432][ T31] Showing all locks held in the system: [ 329.796170][ T31] 1 lock held by khungtaskd/31: [ 329.827615][ T31] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 329.838951][ T31] 1 lock held by kworker/u8:9/3005: [ 329.844206][ T31] #0: ffff8880b883a7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 329.854275][ T31] 2 locks held by getty/5590: [ 329.859036][ T31] #0: ffff88814ddd80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 329.868938][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 329.879323][ T31] 3 locks held by syz-executor/5828: [ 329.884634][ T31] #0: ffff88807635cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 329.894692][ T31] #1: ffff88807635c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0xff0 [ 329.904632][ T31] #2: ffffffff8f467308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 329.914789][ T31] 3 locks held by syz-executor/5833: [ 329.920359][ T31] #0: ffff888076364ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 329.930520][ T31] #1: ffff8880763640c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0xff0 [ 329.940461][ T31] #2: ffffffff8f467308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 329.950648][ T31] 5 locks held by syz-executor/5839: [ 329.955958][ T31] #0: ffff88807636cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 329.966150][ T31] #1: ffff88807636c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0xff0 [ 329.976287][ T31] #2: ffffffff8f467308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 329.986497][ T31] #3: ffff888025476b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 329.996169][ T31] #4: ffffffff8df477f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 330.007206][ T31] 4 locks held by kworker/0:8/8191: [ 330.012606][ T31] 2 locks held by kworker/1:9/8209: [ 330.017915][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 330.029112][ T31] #1: ffffc9001b9d7b80 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 330.039817][ T31] 2 locks held by syz.3.735/9106: [ 330.044879][ T31] #0: ffffffff8f35d170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.053682][ T31] #1: ffffffff8e233a08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1660 [ 330.064142][ T31] 2 locks held by syz.3.735/9108: [ 330.073301][ T31] #0: ffffffff8f35d170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.082288][ T31] #1: ffffffff8e233a08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1660 [ 330.092707][ T31] 3 locks held by syz-executor/9665: [ 330.098141][ T31] #0: ffff88807cc90ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 330.108507][ T31] #1: ffff88807cc900c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0xff0 [ 330.118337][ T31] #2: ffffffff8f467308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 330.128617][ T31] [ 330.135390][ T31] ============================================= [ 330.135390][ T31] [ 330.199252][ T31] NMI backtrace for cpu 0 [ 330.199274][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 330.199290][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 330.199299][ T31] Call Trace: [ 330.199305][ T31] [ 330.199312][ T31] dump_stack_lvl+0x189/0x250 [ 330.199335][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.199351][ T31] ? __pfx__printk+0x10/0x10 [ 330.199381][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 330.199399][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 330.199415][ T31] ? __pfx__printk+0x10/0x10 [ 330.199438][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 330.199462][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 330.199480][ T31] watchdog+0xf3c/0xf80 [ 330.199502][ T31] ? watchdog+0x1e2/0xf80 [ 330.199524][ T31] kthread+0x711/0x8a0 [ 330.199545][ T31] ? __pfx_watchdog+0x10/0x10 [ 330.199562][ T31] ? __pfx_kthread+0x10/0x10 [ 330.199582][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 330.199599][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 330.199616][ T31] ? __pfx_kthread+0x10/0x10 [ 330.199634][ T31] ret_from_fork+0x599/0xb30 [ 330.199658][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 330.199688][ T31] ? __switch_to_asm+0x39/0x70 [ 330.199705][ T31] ? __switch_to_asm+0x33/0x70 [ 330.199721][ T31] ? __pfx_kthread+0x10/0x10 [ 330.199739][ T31] ret_from_fork_asm+0x1a/0x30 [ 330.199769][ T31] [ 330.199775][ T31] Sending NMI from CPU 0 to CPUs 1: [ 330.346626][ C1] NMI backtrace for cpu 1 [ 330.346652][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 330.346672][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 330.346683][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 330.346711][ C1] Code: 53 ec 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 0d 1f 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 330.346726][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 330.346743][ C1] RAX: 49fb012f3f168a00 RBX: ffffffff8197438a RCX: 49fb012f3f168a00 [ 330.346756][ C1] RDX: 0000000000000001 RSI: ffffffff8d76bd39 RDI: ffffffff8bbfc660 [ 330.346769][ C1] RBP: ffffc90000197f10 R08: ffff8880b893359b R09: 1ffff110171266b3 [ 330.346782][ C1] R10: dffffc0000000000 R11: ffffed10171266b4 R12: ffffffff8f805a70 [ 330.346795][ C1] R13: 1ffff11003952b70 R14: 0000000000000001 R15: 0000000000000001 [ 330.346807][ C1] FS: 0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 330.346821][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.346833][ C1] CR2: 00005578f3b2f000 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 330.346849][ C1] Call Trace: [ 330.346857][ C1] [ 330.346865][ C1] default_idle+0x13/0x20 [ 330.346890][ C1] default_idle_call+0x73/0xb0 [ 330.346917][ C1] do_idle+0x1ea/0x520 [ 330.346934][ C1] ? ct_nmi_exit+0x14b/0x1d0 [ 330.346959][ C1] ? __pfx_do_idle+0x10/0x10 [ 330.346986][ C1] cpu_startup_entry+0x44/0x60 [ 330.347004][ C1] start_secondary+0x101/0x110 [ 330.347028][ C1] common_startup_64+0x13e/0x147 [ 330.347059][ C1] [ 330.567917][ T7843] smc: removing ib device syz1 [ 330.866013][ T3532] bridge_slave_1: left allmulticast mode [ 330.872417][ T3532] bridge_slave_1: left promiscuous mode [ 330.879536][ T3532] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.888957][ T3532] bridge_slave_0: left allmulticast mode [ 330.894618][ T3532] bridge_slave_0: left promiscuous mode [ 330.900519][ T3532] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.132329][ T3532] bridge0 (unregistering): left allmulticast mode [ 331.334269][ T3532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.344669][ T3532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.354858][ T3532] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 331.366301][ T3532] bond0 (unregistering): Released all slaves [ 331.453341][ T3532] bond1 (unregistering): Released all slaves [ 331.539969][ T3532] bond2 (unregistering): Released all slaves [ 331.553939][ T3532] bond3 (unregistering): Released all slaves [ 331.646842][ T3532] bond4 (unregistering): Released all slaves [ 331.660582][ T3532] bond5 (unregistering): Released all slaves [ 331.748419][ T3532] bond6 (unregistering): Released all slaves [ 331.832844][ T3532] bond7 (unregistering): Released all slaves [ 331.969074][ T3532] tipc: Left network mode