last executing test programs: 3m11.342984492s ago: executing program 0 (id=520): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, 0x0, 0x0, 0xba5a, 0x0, 0x0, 0x40f00, 0x11}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r1}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r1}, 0x38) r2 = openat$cgroup_ro(r0, &(0x7f0000000180)='rdma.current\x00', 0x0, 0x0) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f0000000240)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "bddff730a979d9b52e732fd6a9c1b085", "ace06e88", "747a2aaf941f2665"}, 0x28) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x4, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10) (async) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500002c0006000000119078000000000000000000004e20001890780400000007740000fdffff6890ffffffffff"], 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000280)=@gcm_128={{0x304}, "41c000", "0cfcb67ecace717eb34a87013860510f", "15f4807f", "d4c27feb98ae71cc"}, 0x28) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) getsockopt$bt_hci(r3, 0x0, 0x1, &(0x7f00000000c0)=""/45, &(0x7f0000000140)=0x2d) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r5, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3m11.187547982s ago: executing program 0 (id=525): socket$netlink(0x10, 0x3, 0x13) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x61}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}}, 0x4) r1 = socket$inet6(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) 3m10.796083752s ago: executing program 0 (id=530): r0 = socket$inet6(0xa, 0x80003, 0xff) (async) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1c, 0x0, &(0x7f0000000140)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) r5 = socket$packet(0x11, 0x3, 0x300) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c00050019010700000008002600b4090000560333"], 0x398}}, 0x0) (async) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=ANY=[@ANYRESOCT=r6, @ANYRES16=r8, @ANYRES16=r5], 0x24}], 0x1, 0x0, 0x0, 0x4800}, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r10 = socket(0x400000000010, 0x2, 0x0) (async) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) (async) r13 = socket$inet6(0xa, 0x800, 0x9) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) (async) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20, r15, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x0) setsockopt$inet6_int(r13, 0x29, 0x16, &(0x7f0000fcb000), 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) 3m9.733612265s ago: executing program 0 (id=552): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x80000) bind$packet(r0, &(0x7f0000000080)={0x11, 0x4, r1, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x14) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f0000000140)=0x1e) (async) setsockopt$inet_int(r3, 0x0, 0xe, &(0x7f0000000180)=0x200, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x2, 0x7, 0xa2, 0x60002, r3, 0x53e, '\x00', 0x0, r2, 0x4, 0x2, 0x1}, 0x50) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xf6, r1, 0x1, 0x6, 0x6, @multicast}, 0x14) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000001740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001700)={&(0x7f0000000300)={0x13e8, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x70d9c123b8279319}, @ETHTOOL_A_LINKMODES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x1348, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffe311}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe771}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff59cb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x6c, 0x5, "f94893a03dd020104e1d2967c290b9738abb0db80af56c6437217246e007e3a4db44842899fddd510f89fef3fc466c767631e958de48043ca5e76ab5d762c8cde82fbb57a8d4b3432e3ac1778a9059838dcbd285a34e4f5647133f096da6e5e39eba477afc814b1c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xec, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ipvs\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ipvs\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '---}*\xa2-!@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '{/.(\x0e\xce\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x8d\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ipvs\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x69d5c525}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ipvs\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x96, 0x5, "284957ae896509b964c71defd46e26a872ff32f766a716e338d802e5affab9c5c157d77388af944e532d3ea327f1d3795b6bcb145bd0866cdeb9b42f703f6a4ae26d045a353003aac65b5a311c8dcd2419d499a8c431dbb8292e453a7a5aec5ed6fe237e8060a2d3b8c0b41aa28b451f18c61b496fe970af80ae8f07d0ed1487b77af132a1a930a727c1ee21bcd5b55a8560"}, @ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '-+\\{@:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x17&\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '&^/\xc0\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}, @ETHTOOL_A_LINKMODES_LANES={0x8}]}, 0x13e8}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000840) (async) sendto$packet(r2, &(0x7f0000001780)="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", 0xfd, 0x4001, &(0x7f0000001880)={0x11, 0xf6, r1, 0x1, 0xff, 0x6, @remote}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001900), r3) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x5c, r6, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20024001}, 0x54) (async) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, &(0x7f0000001a40)={0x0, 0x401, 0x8}) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000001e40)=0x1, 0x4) (async) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000001e80), 0x4) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000001ec0)={@private2, 0x62, r1}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001f00)={'team0\x00', 0x0}) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f80), r2) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000002080)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x5c, r9, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4144}, 0x40000d4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), r2) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x64, r10, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x92e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x8880}, 0x8000) (async) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000002280), r5) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x24, r11, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x94}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004810) (async) socketpair(0x8, 0x80000, 0x8, &(0x7f0000002380)={0xffffffffffffffff, 0xffffffffffffffff}) bind$xdp(r12, &(0x7f00000023c0)={0x2c, 0x0, r8, 0x38, r2}, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r13, 0x84, 0xf, &(0x7f0000002400)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x31}}}, 0x2, 0x62c0, 0x31771aef, 0xb, 0x7}, &(0x7f00000024c0)=0x98) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000002500)=@assoc_value={r14, 0x3}, 0x8) recvfrom(r2, &(0x7f0000002540)=""/27, 0x1b, 0x40012103, &(0x7f0000002580)=@pppol2tpin6={0x18, 0x1, {0x0, r12, 0x3, 0x0, 0x4, 0x1, {0xa, 0x4e24, 0xb2, @mcast2, 0xff800000}}}, 0x80) 3m9.548302029s ago: executing program 0 (id=557): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9f}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x99}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$sock(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000640)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000006c0)="56972d3c1cd6f96743c83e1fb3d9bfce1de00585e754b8dc11c5dd21706e1ea96e79b102ab471ddc09db699d5eb42475fe99ad9c32fd885cf9d18f32d1e9439b4fd62313546b6210902c512b57f726422ad4c167a599abc1e614df4d32e9845d4910e922b2344e902b1974654fe8600b8418fb743922310393d9d8a4d7020f6e84c171861ed00e230bdb6779d942cb866c2fb4248bffc1afc49f29c071614376a5c437423116b332ca493f128a58cdf4349962236817be503527a5d9ac61ad75cd3dd57a8ae269113a09046787eafa021012fe93e0ed384d88d686d9c7ccc26b43e1661668938416cb508c17c4b3c3f748347a36ee26c5fd2c9a56c720a94a639e90d5da7362c6d5324b8b3c3b6240cb1e2ef5fc3f1f850bcac6785207633b900aa76889d7a9f6de41cc11052bb1493a6a9275fb22c5c75ab413b9edd6abb364ab1d74e8d8e57715c2d3ca09b64cefbe20188123b1f5e90495807e620f0b458fd46cbb880a76584fca9a5a7a2962b253594fe44baf69207a2d9bb09c91ba108bcf9f164535c465f728139ecaa79a7901b078cff6de8f3c970a3e5b725ebf32df272d889bbdcec7f4e9349779a62c528d0095700b868c683d4180e73856e7419aa0eb72210823325932cca4d9a041163066ad8c117364b74ad6116d5d08390d21b77516a690fcaed8a13004cbf4ab277a270b6d81e60570b3cdf7b17ab9c9fe2ef6c5c55886e21edf752b1f39351042e4b2aaee9518a768c8558d97d074074647b27603e897b5acc0b2916bda07762d6a5983814b5a8f47cb53833c35b8fd18fd1ba10c95abf1d2c83718b2d4be81b446513504e9fd285a2aaa6af78b4610bd46564e549df9aa5d2dccd3a0323cceda636fd9f2a3ddc2526915a7bbcbe9470b20cc0b529092cc462a5696390f51b6300f247d3c4943bd205fc8b7466fb3eb36c9d8d48b236240a0ccc45c69b36984015cb4e9942d356890ad08c981c9622b899b9deab7223fd51d9356b6e63620b6f3c5b39c5fab433a27c5330a707cdcafaf9af1d833abe18188c2263d8b46a0d3c079506b99a1a651ab7378caf1762d3822cd3f5e4d9e9799373afc0c0a3bd386bd33c858e82d6f443253071a05cb9ae38510218725797782b9a2d25af41fba6e0a5659b10ae4d5cf023597396a33a7c9e1714cbf9aeadfdea6121cdf9b00e97cf4613295d7fabc71efff638ddfd37e09e453d6270f784bc3fe8d7536a632ee87dcdc754b4a94bc7eb627f44426a796785ee40ad762c94cd4a1943526ade77d328275b3410674555926fb3e108310ba051adb2d9966142ebad3e23393c1fcbca3a957e159f83c184b44354d42be78beae13d5c96f729fa48db85a486344aa2b147ee3eb8235678c604f4a2f075278f03141c364cae29470a9314fd9d1d5181755b16012c0ce113a1e19930181afe905d2b3e8a7d907576f6e4595a80f4398a27fc62362af6ad42a00d778bae345602314215e1e3a7af151a19e6520acf4a50cb014ecbdae9998de2fcc8fb33fb7fc58c88fc1cc6f589ae084a8a4659c045fdfcf44097cb94180f04f92730acd5a54cae7abeb26f7ee5edcda50642a82c615e3c1ed97fdc4bd2820b48c531a0c071b3a34ce8e537833e149683f69b95f1f2d1ec4e2b8688c23bd58939ff417725c66e496309e16bfd7b26628225e13f0e442916f4b6c113183633d89e47d4c2a1f070d79e9ffa636f6f1e776791109ed75fb47991183afbb134f62f7f7ce02042f2ef237344bee3d13c833d38ba5e06817a32e20416640a11325529008fa071f4089034d1e8a359de43052daebddef6a34186e072f67d13c063dc0001c4e5e29d9a6c32c1b640d1ad2aaa947942e2ea11a661616dad4fa7ee6bd2b7867d1709128d055bc4a05c4f0597a1a66f2f2cd3f8658d01942e02c6611ffec8cf8206f57123198019c8368ca57d91a28898f8015092ddb871b73440f255da20f2e587f304d61f968d10f1e223e35abd9565ead0f2cc289448b27405d5d09b14c9ed6a22492c6f7ff352f780377039bffa6bcd4b37345e2d8f76334eeba9324562786ebf3c4624c76c2219321aacf273c175ab4f35d0d8fe9555f4af0cab3709d9d6d552f940b73a67e1c5b11845f23038b2df4afebad6075ace88cf4b269225acec9b56479d1a948fc6e00a7b642e025733c8ec81cfd2cada5ffe32ed9fd7c97103820aee3f3c682dcf8d744dbabcb785a64b2a3d405ba420f06e743825e0bf892c33681190b9758d93f9edc1356665dc840a346aa3f25071d5dc69302949933faf3747c298c2a8401e9b934bd806d3221a02fb3efb4b15f24ff33d29e82d9f1a14473c5752c42fce539aebe0077fe41754e0473d55a110d558ebeb7bb1c6477690a9d650c858a1905579798f73d8d59f10372a78471953b08b2e8b98367522e73b18a2e073d2d8dc41d5a224c976e75bb5208b208a723390dc0e65149ca83b38f3167bb0e97415d78a9d77dd2141cb00757cc755db2cf565ee6a87fceddf3c3f8a29f5115cf439113c3a864a7199145b8e1ba99a70a40f4b40ea0830af3cbc4a3bf67add02a7615ac4b35da1fc173f5a8192695a92b8cd8068cb4ea933da2c2465c68e2d1c73cef8dfd44fa0cb531969d732c4d25472cd8bf1ae0b10166e76f58cf60e3cfad8d439153faaac3556e8410e95ea895979359ecd325c0727e80898180c90859b3e0ccc3321a057d47ca6d1fd0e58d2b8c431dd0e0b8947b2bef6513e5df2c432b175c131a7f1732d583566a364924bddd9ecdfa32bea897e4ca8679615b84d91c7332be717c40929d8fdcbdf3c6935ce2c44801082c807fefa79ccd3a8256130210f4492ce32586f4a3d9113d41937e98dccc85b80634868361ba86a97b5f3b54b20486d6ea1f826add9a80cd551296f7a83af447b262f7cb6fb9cba4d47ffcf3810216482f4a52312fe21f58b3c5ba5f13cc75f63b008e905f1162fe48baa01dd10af4619d394ab7412df03b0c5490323ce9d71af2f6632e10ff6053d7a51ece902947bfc196f3e28c5aabe6987de1fb5a32437481d4a740ec7ebd3197429c5c1a7052c317016b3df6dbed34239e0e13f6f0d2ab769c6388405c305551fe99c3e51d5c6fbccbebe289b8a6b62c896c683234b9d9ad82abcb087d4adeb372b0e8619fb6b4667c290416eb26a9144a398a7b9732f1431ac36b8e302131b93cc09fdeaa82afc62df77e301cebd1ad58b1250f658307e39e42ea6c0ce3afa34d1809b2e1241c51fe7214dd53bef950ffd0d18fbbb66f8f6d87d499504b0afc5d4fc4856c584f6afefa66402a0bd356dd261f2d8ec3fd9a7814d5e5bf148614c25dfcbd8b754d740e15aa4066682f73a56d70742ff19ce06c173d7b3ad08f8d2123d3c350ac807e990ff573c8e11bec7faf5fc34437e742cc8abfa72f1a139469a75711077d784fa0961a359598e3c6416d283420fc06aeaa3f0e003d385616f4654a0384ed17a58252951fded05da37646c59ca4373d21be31d251e188079afb37f9acc388b48371d81a4f1967a987480a43414e72dc75d8faaa8e976bf0b26dfe1a563fca4cf7c1628ed8ae0107bee4c904bcaf8a3a444259e7e44302cbfdf184c8822380031f1673c541d7432dd3612ab6d6ac14e2c5e8e23c9a56b4197e2a1c43044d2c32b0220a17b15743129e5840140c877585d0e9eea1030d658e2a6adf361476baa622206db8aef7fd5519925a39c842447b82fb927665c610e48eaffa1f74fa06dbbc63d7f4d7fb0726a12419cc0eb7985fe276647fae3e6db69ae8723062d98d663294febaa2c688cdd84fc9bb2486feb979dd31f52c9894e09d675f3f3328819a40f862803bf07944aba626a233db9fdf0d09b062957f31a802c145d6eee364f9d315a0bd2cfdc821847bf6922bef3809892bb2c5990c4bfeeb23a424b4941289dee016f1857bcb8f8ec081f40a29ea40e95a49a3eb0904520557a8ae21191f47053024e29f8bfa2e556a5ab6fd3bfc2d86cae17c438cb6f6a084498c568d607a5fefedf828c1ffc864b7b498db363f704d738e9947d388fc4e5ff81fbe8e373cb2c7681fbdefde12e7db8fef9c987e9e44640bdac492a6a1a3329b0d1bed5f9579f40f6fca23c060e45e8189db2b6996494437714423060383f1e89f396607025edcdda4aaba12c393c0089fbf25d627df466ae37ab74c9c90354b864799d372c88e87715b94c707860bd7d36e25c562065736ddba0b800665ce7ae9f3e05b1d781dfe242a769b1e27b221081b26cba6c65ed447ed46115d8a2cd30799a96887aa1f46e75a31ef1140594cd844b09ac0341dee162fbdd2e283f40a8479f74090c23bf06881bb66a7c94c1d445359564005370276c4279294298d63067a85f0809f5ee53196aa353d3eaac88bdac86ad55359997b9093b2b13662d10bd8a6823631b002674849da46e11763b4cf49c97c7e0caf4c63c0badc036ba411121c9c9db5b82a4cb108c07a02cde871b92fd0257e5c31aac57e3d3e8a00a285d7075e19b8545be9c88735a45cc305f526aeecd7ec4c7ee0b20f493d2d73f71c167acbf9484dfe19da770d662feb6e13c98b15556d5a05ec386b7855b7812a4cce750181c5de4b0ed8c231212b7e9b88a18b3f3d94dd9dac63982d360699e383e2a88cfd3bc418770e7514e9ac54e7f78d9763e265db157280ee128d799f988001c64adab9969e2a07a8017d89aa963d5f18d74e99739d85e8b36369690f220c27b8532a55a6f42f748d481710201f8ff6b38e7aab51237e3ee1a92161e3cf7c1fec5248b66a4a1ff75b224172b757dc35c2e66b917a54ed704c9be09e89c685ceee90ceaca3ee4ed75dee10465d22a14d0f4a226896356dd967fe60fe4b5a3eff1aaa2f146b54596cc547a1f53f997dbb1778ac8d47eea3bc5084830354e3c4835eea9f9e546b3ccf90223018bd6394b59419105d5327c3ab8118b098caf8890128218f4a7dc9cf10f8cc5cb4380a0677380b4bc6fd4f8f31dfc5b512131ed4efa88e9d1a71824767755bc0f70e39a2a9b8d06c43a5a8932e5a12a41ef7db2e90610a2b70ed4d700647f69998517307a5c6285131f074593687af674c03948a1dba36506b9797c8fc83d18b1b8a173d32f25f198829eee27585ead343e327b9395f3b3899f1397eaf2ef3ea7badbc132db9ad8766a5817addca3da6357c3bd1d47553a9a782e3d5a9d7f3652cbcce1adf242e9606ae1ab3766af2189da9649d263e8fea814dc8cb180fa53d0bc7d7340769f0fe88aee7e4ed1e777d04c74a72233e4ea95c8fae36ec9797669b6709b20d4cda69ab4da1cffc8a6c259cbcce75b05132cec887a0d9cc6bfc1b7e813cb1b9d14d9feb7b288f4e4d36575d56bee20ed651c49f21e717176683217918084482db807ae999523456b0b38933ee2b4f1d74b118b942be830a3bc1418f8d0ba4baa6b6788576d985dc7f9dad1ac39d417ca748ee307dfe4d1b67a9dbe6e78b36155df8ca2d0944fa6029b9d724fe0ef9e6bfef9adea1a0fc578a6f96282bdab5519c41a014ae63b96dc1bb6d8a132dbdda7894661d04cf8823df47c751ccba9be9abc4ec1c4407cb880d405d744ec8f6d2324f833cfadd8e40bf810238bd395b50b4b83a3ba5cb06adc2300621da43f6215ab1a668d3cede40105fe9345ca47f340aaadf24b17d1f82877736f062ecd7a09e1b860c999c782ceb9ab383bf5e1c84fb749a65fdf57941caccfb67d8c03bcc6300620b3fd5945495ee2c96f7d479f98682df0b8dc4a4689cea87765cdc8ca36d7a1f", 0x1000}, {&(0x7f00000016c0)="21c478e1cc479782e0e436840f6ce0066a0423eb5a0c87170ccddb3500f54e45ea7ea9dc52e624ca157988f20eec800c2f2ce01dbcee04bb7adfa3fa133caf50ab70bceab0e65da1b8b2b72b33408634cf576a2e8e8e035a6b165bc7b28d611f6a01635a54befd1ad38403c9c657925d050fd34794cae556d8551ffc3084b40c044f5a985ce88b8cfbe9314cd7ad2bdc53142b93c5e5607672ba8bed522c75247b34a1acacb3ddee70b0cee1174ce94daca87eb79465702d78f588b45161078627f676eda3f2be7dccfcce342135274d13e31f0337", 0xd5}], 0x2, &(0x7f0000001800)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @txtime={{0x18, 0x1, 0x3d, 0xc}}, @timestamping={{0x14, 0x1, 0x25, 0xd4}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x90}, 0x40001) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x311, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xb7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x17136a922482213b}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x30, &(0x7f0000000140)=""/48, 0x100, 0x68, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x7, 0xff, 0x2df9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000240)=[r0], &(0x7f0000000280)=[{0x4, 0x2, 0xf, 0x1}], 0x10, 0x921}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x32, 0x1, 0x800, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r2, 0x0, 0x25, 0x14, @val=@tcx={@void, @value=r1, @void, @void, r3}}, 0x1c) 3m9.398366242s ago: executing program 0 (id=561): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000040) 2m54.360222281s ago: executing program 32 (id=561): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000040) 2m37.136175233s ago: executing program 3 (id=981): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'TPROXY\x00'}, &(0x7f0000000400)=0x1e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000040)=0x10001, 0x4) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) (async) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f00000001c0)=0x6, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0xffff, 0x0, 0x8, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x5, 0x1]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x57}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}}}}}}, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) r3 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0x1058, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0x2, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x8, 0x2, 0x3, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0xff, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x800, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0x10, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x7fffffff, 0x9, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffffc, 0x5, 0x4, 0x6, 0x4, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xffff, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x8, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x9, 0xd160, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x1, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x13, 0x7ff, 0x1ff, 0xe25e, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0x80, 0x4e6, 0x5, 0x6]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xe, 0x7, 0x5, 0xfff, 0x8, 0x3, 0x7f, 0xfff, 0x4, 0x894, 0x9, 0x6, 0x4, 0x100, 0x6, 0x8001, 0x5, 0x2, 0x2, 0x7, 0x7ff, 0x2a651f85, 0x8, 0xee, 0x8f6, 0x1, 0x8, 0xd67, 0x6, 0x8, 0x8, 0x80000001, 0x45c, 0x1, 0x3ff, 0xff5f, 0x1, 0x294, 0x4, 0x7, 0x9, 0x200, 0x7, 0x3, 0x0, 0x4, 0x8005, 0x2, 0xfffffffe, 0x80000, 0x2, 0x1fd, 0x9, 0x5, 0xea, 0x1, 0x5, 0xf175, 0xc7, 0x1, 0x1000, 0xfffffde2, 0x800, 0xddf, 0x10, 0xdf1d, 0x6, 0x10, 0x3ff, 0x2, 0x0, 0x1, 0x0, 0x10, 0xbf3b, 0x5, 0x3, 0x4dd, 0x200, 0x4, 0x8, 0x4, 0x6, 0x5, 0x2, 0x5, 0xc, 0x81, 0xb41f, 0x9, 0x6, 0x41, 0x2, 0x9, 0x1, 0x6, 0x51e0, 0x103, 0x4, 0x78, 0x1, 0x3ff, 0x8000, 0x2, 0xda, 0x1, 0x6, 0x0, 0x200000, 0x3, 0x9, 0x5, 0x97, 0x800, 0x3, 0x7, 0x0, 0x0, 0x903, 0xf, 0x100, 0x7, 0x100, 0x1, 0x3, 0x2, 0x200, 0x7ff, 0x1, 0xc54, 0x879, 0x73, 0x81, 0x1000, 0x7e5, 0x583, 0x401, 0x0, 0xe0000000, 0x0, 0x4, 0xd, 0x192d, 0x247, 0x0, 0x985, 0x0, 0xf470, 0xfffffffa, 0x2b7, 0x3, 0x3, 0x8, 0x4, 0x1, 0x2, 0x8, 0x1, 0x4, 0x0, 0xff, 0x4, 0x80000000, 0xfffffffc, 0x7, 0x3ff, 0x8, 0x4, 0x4, 0x4, 0x8, 0x1, 0x6, 0x4fb, 0x1, 0x8, 0x200, 0x2, 0x252d5040, 0xda, 0x8, 0x5, 0x80000000, 0x0, 0x1, 0x3, 0x3800, 0x3, 0x2, 0x1000, 0x2, 0x0, 0x8, 0x4, 0xfffffff9, 0x100, 0x9, 0x9, 0x8, 0x10, 0x5, 0x9, 0x9, 0x8, 0x6, 0x5, 0x9, 0xa8, 0x5, 0x3, 0x10, 0x3, 0x7, 0x9, 0xf4b6, 0x2, 0x6a, 0x2, 0x3, 0x5, 0x8, 0x40, 0x3b, 0x4800000, 0x800, 0xdae, 0x9, 0x0, 0xfff, 0x9, 0xf, 0x26, 0x1, 0x2, 0x6, 0x6, 0x6, 0x0, 0xffffffff, 0x7, 0xfffffff9, 0xffffffff, 0xfffffff6, 0x10000, 0x3, 0x8000, 0x3231, 0x74e, 0x9, 0x8009, 0x1, 0xe7e1, 0x3db2, 0x375b, 0x9, 0x80]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x5, 0x80, 0x4af8, 0x5, 0x1, 0x1, 0x6, 0x7, 0x5, 0x9, 0x0, 0x9, 0x1, 0x5, 0xe, 0x3, 0xff, 0x8, 0x0, 0xfffffe00, 0x9, 0x3, 0x4, 0x9, 0x4, 0x4, 0xf, 0x6, 0x2, 0x4, 0x7, 0x4000, 0xfff, 0xf30a, 0x0, 0x4, 0xf, 0x9, 0x4, 0x7, 0x4961, 0xf, 0x1, 0x7, 0x4, 0x4, 0x0, 0x317, 0x2, 0x0, 0x6, 0x5, 0x40, 0x1, 0xffffffff, 0x847, 0x7d, 0x9, 0xffc00000, 0x613b, 0x7, 0xfffffffa, 0x0, 0x4a4, 0x200, 0xb44, 0x3, 0x9, 0x6, 0x3, 0x0, 0x6c5, 0x2, 0x7fffffff, 0x9, 0x8, 0x1, 0xd, 0x5, 0xfffffffa, 0x6, 0x479d, 0x7, 0xffffffff, 0xa, 0x5, 0x800, 0xc, 0x1, 0x7, 0x5e7b, 0x4, 0x10001, 0x6, 0x4, 0x16ab, 0xffff, 0x40, 0x9, 0x3, 0x6, 0x9, 0x3, 0xfffffff8, 0xfffffffe, 0xfffffff7, 0x8, 0x6, 0x5, 0x6, 0xc, 0x0, 0xa, 0x13b, 0x7fff, 0x9, 0x9132, 0x9, 0x1, 0x9, 0x9, 0xfffffffe, 0x0, 0x8, 0x5, 0x5, 0xe2dd, 0x3fd, 0x80a, 0x1, 0xb, 0xffff0000, 0x80, 0xe, 0x0, 0xa2, 0x400, 0x0, 0x48000000, 0x8, 0x0, 0x4, 0x6, 0x7, 0x80000001, 0x8, 0x97, 0x1, 0xb, 0x3, 0x9, 0x4, 0xb, 0x7fff, 0x100, 0x7ff, 0x100, 0x6, 0x5, 0x1, 0x5, 0x9, 0x400, 0xfd04, 0x3ff, 0xfffffff5, 0x3ff, 0xbfcb, 0x9, 0x1, 0xe329, 0x7, 0xfffffffc, 0x50000000, 0xec, 0x7, 0x1, 0x1000, 0x8000, 0x7, 0x7ffb, 0x3, 0xfffffff9, 0x2, 0x67, 0x1, 0x4, 0xd, 0xff, 0x6, 0x101, 0xcd1a, 0x8, 0x7, 0x5, 0x0, 0x80, 0x1ff, 0x1, 0x1, 0x7, 0xf, 0x1, 0x0, 0xe11, 0x6, 0x3, 0xfffffffc, 0x1ff, 0x1, 0x2, 0x2cae, 0xf3ff, 0x48d, 0x7fff, 0x9, 0x1000, 0xfffffe00, 0x37f4, 0x0, 0x9, 0x2000, 0x5, 0x2, 0xd, 0x6, 0x822, 0x8, 0x0, 0xbec9, 0x9, 0x5, 0x35, 0xc2a, 0x4b, 0xa, 0x80, 0x2000007, 0x1, 0x7, 0x0, 0x12, 0x1c, 0x2, 0x4, 0x8, 0x5704, 0xc975, 0x7, 0x1000, 0x365a8a29, 0x5624, 0x1e9019bc, 0x800, 0xfffffffa]}]}}]}, 0x1058}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES16], 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0xfffe) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) (async) r6 = socket$igmp6(0xa, 0x3, 0x2) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e1d, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x4400, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) (async) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) 2m36.502527324s ago: executing program 3 (id=990): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0xc0000) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000080)=0x5a0, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000100)={'ip6gre0\x00', @local}) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2250}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r4, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x73}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040050}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x700, 0x1, 0x400, 0x3ff, {{0x27, 0x4, 0x1, 0x7, 0x9c, 0x68, 0x0, 0x0, 0x4, 0x0, @local, @local, {[@noop, @generic={0x82, 0x11, "63891c1bd46bea0dc850bc64e225ba"}, @ssrr={0x89, 0x23, 0xba, [@empty, @multicast1, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x16}, @local, @multicast1, @local]}, @end, @timestamp={0x44, 0xc, 0xda, 0x0, 0x2, [0x5, 0x1]}, @ssrr={0x89, 0x7, 0x88, [@multicast1]}, @timestamp_addr={0x44, 0x3c, 0xc1, 0x1, 0x3, [{@empty, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x551e}, {@multicast1, 0xffffff7a}, {@private=0xa010102, 0x1000}, {@multicast1, 0x9}, {@empty, 0x2}]}]}}}}}) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x170, 0x12, 0x8, 0x70bd27, 0x25dfdbfe, {0xb, 0xb3, 0x3, 0xc0, {0x4e20, 0x4e22, [0x4, 0x9, 0x95], [0xec42, 0x1ff, 0x1, 0xa], r5, [0x1, 0x10]}, 0x3, 0x331}, [@INET_DIAG_REQ_BYTECODE={0xdf, 0x1, "a22fe3eb917534c4be881238bec027b4c8ceb9fa8c0506df051d364a6f1515d1b415ff8b16a5b3c174663530f1c43ffe393976705f05f81a9b43d1df80cf3a9404a9a76f4234bfd2dd129c4f489f5f51422c8ce69f91b3e39ef25983924749b0396182295d65c016c75ce3a874f3f39654b98b846480f2433fe60d5a1d95e0444a82faeef25b5ae064831f3a7c5bba36a2e82b795085d3de1f0b6369efd65afc2063f9978492d69dbc03279ebb0f1907632b478c658207a2df5af68957bf97f8e93c48ef70c098a0c3bbd7ab6600da1bd1e83452139ffbe33e44fe"}, @INET_DIAG_REQ_BYTECODE={0x41, 0x1, "6770275bfd18f0cb6b0ba2a46b3c5e14516974db9c822b96122c9664cf27584bab715ea53522017e5ebe7196daf6dcdc3da242c85914a30abbec29da74"}]}, 0x170}, 0x1, 0x0, 0x0, 0x1}, 0x40010) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r3, 0xffffffffffffffff}, 0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x4010, r6, 0xa3f54000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={r3, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x1, '\x00', r5, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x12, 0x10001, 0x6131a693, 0x587, 0x1000, 0xffffffffffffffff, 0x7, '\x00', r5, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x3c, &(0x7f00000006c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @printk, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}], &(0x7f00000008c0)='GPL\x00', 0x3, 0x5b, &(0x7f0000000900)=""/91, 0x41100, 0x40, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000009c0)={0x2, 0xe, 0x8001, 0x9a}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000b00)=[r6, r3, r3, r6, r8, r9, r6, r6, r3, r3], &(0x7f0000000b40)=[{0x0, 0x3, 0x3}, {0x5, 0x5, 0xb, 0x9}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xda49}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1c41cd2b359bffdc}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2d}]}, &(0x7f0000000d00)='GPL\x00', 0x9, 0x0, 0x0, 0x100, 0x42, '\x00', r5, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x24f71, 0xffffffffffffffff, 0x0, &(0x7f0000000d40)=[r8, r7, r9], 0x0, 0x10, 0x73ac}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001fc0)={&(0x7f0000000e40)="3efe3f7624ced160bd6cc59d3ce9e1b3e41392948e43acf3e24a4e48c33e99f666bc4917295a9d3b2bac72111c817e250211332c5a6328f5", &(0x7f0000000e80)=""/128, &(0x7f0000000f00)="d99eb513d8da5788e42a0d25eeee5b0d59990735c52a24a03d584c962c4d58565f6521f7a48064c5a89432a1aa95018caedb1178429bed69d1d67d078233679b8544a3ef5a4e5751cee74cf743d1021dc0a365df7b6a40d6810ba116866e24b7b8ca21dca9b78c85e73bea546bea8e93818bdf4a9abe05ca82fb769cc509adc53cfc440b4d0941a613039b66851f4a8b9d50c0294cfad11717a25895eec9ab16d2fa95d6f1f0742e80aa718ff4c4", &(0x7f0000000fc0)="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", 0x6, r7}, 0x38) pipe(&(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_WIPHY(r11, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x28, r4, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x22}, @void, @val={0xc, 0x99, {0xc, 0x4f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000014}, 0x8c0) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) shutdown(r12, 0x1) ioctl$F2FS_IOC_GET_FEATURES(r7, 0x8004f50c, &(0x7f0000002140)) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r10, 0x84, 0x78, &(0x7f0000002180), 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f00000021c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000002240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r10, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x3c, r4, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x7c6c43664d53adba}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x41) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000002380), r9) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r10, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x2c, r14, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x10, 0x18, {0xffe000, @bearer=@l2={'ib', 0x3a, 'wg1\x00'}}}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x5) 2m36.311023014s ago: executing program 3 (id=994): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c0000001b0a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r4, @ANYBLOB="38002f80"], 0x54}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x7, 0x2, 0x7f}}]}, 0x38}}, 0x4048010) 2m36.166941658s ago: executing program 3 (id=998): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={0x1c, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x6c00}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @default}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) close(r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="00012cbd7000fedbdf250300000008002b000200000008002c000d0000000a0009000180c2000001000008000b0003000000050038000100000008002b00003000000500350040000000"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4040001) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xe, 0x4, 0x80, 0x1, 0x7, 0x2b, 0x1}}, {0x6, 0x2, [0x6]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r9, 0x8b32, &(0x7f0000000040)) 2m35.773276158s ago: executing program 3 (id=1003): write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xfdef) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@private0, @in=@multicast2}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000080)=0xffffffffffffffea) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x37, 0x800, 0x70bd28, 0x25dfdbfd, {0x17}, [@typed={0x8, 0x142, 0x0, 0x0, @u32=0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4840) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40000) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'ovf\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002100210107000000000000000a000000000000000000000008001a"], 0x24}}, 0x4004000) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, r8, 0xc252d000) r9 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r9, 0x119, 0x1, &(0x7f0000000040)=0x7, 0x4) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="660a00000000000061119d0000000000850000006300000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) 2m35.506391861s ago: executing program 3 (id=1008): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r2, 0x990, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8}, @NL80211_ATTR_TXQ_QUANTUM={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1601c7c6b5fc7426}, 0x40800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r5, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_eeprom={0x7, 0x8, 0x7}}) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r4) 2m20.424109224s ago: executing program 33 (id=1008): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r2, 0x990, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8}, @NL80211_ATTR_TXQ_QUANTUM={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1601c7c6b5fc7426}, 0x40800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r5, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_eeprom={0x7, 0x8, 0x7}}) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r4) 9.027457724s ago: executing program 5 (id=3063): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xffffff1f, 0x2000000}}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x0, 0x3}, 0x94) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x207}, 0x20) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000040)) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x20000044) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'geneve1\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000540)="18", 0x5dc}], 0x1}, 0x4) 7.959403298s ago: executing program 5 (id=3079): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r1, 0x34da2000) 7.851692019s ago: executing program 5 (id=3082): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14}]}, 0x28}}, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd1, 0x0, 0x4) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x248, r2, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x157}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "c9c4fb229b9597a1220cd1d7f96a5ea4ff2c6698d0062301ccf917b7971436ebc2"}}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfb6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf0f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xac}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x248}}, 0x40044) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000031401002cbd7000f9dbdf250900020073797a31000000000800410072786500140033006c6f00000000000000000000000000000900020001000000000000000800410072786500140033006970766c616e300000000000000000008b969da831adfd"], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x810) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x2f, &(0x7f0000001240)="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", 0x108) ioctl$F2FS_IOC_GET_PIN_FILE(r5, 0x8004f50e, &(0x7f0000000000)) 5.196515012s ago: executing program 6 (id=3106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, &(0x7f0000000380)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64=r4, @ANYBLOB="010000000d00000000000100000000004af315031b7f18dc35a3e076000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = getuid() sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa00000000000000000000000000000000000000000000000000000001008000"/64, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="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"], 0x154}}, 0x4008010) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)={0x80, 0x1, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_LABELS_MASK={0x18, 0x17, [0x800, 0x80000000, 0x81, 0x51, 0xffff]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x28}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x240}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x290}]}, @CTA_LABELS_MASK={0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_ID={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x48000}, 0x40010) ioctl$TUNSETOWNER(r0, 0x400454cc, r6) connect(r3, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41, 0x1}, 0x1}}, 0x80) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="8903000000000000017380c888ca", 0xe}], 0x1) 3.754000369s ago: executing program 4 (id=3109): r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x12dc, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x12c8, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}, @m_sample={0x1068, 0x12, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3ff, 0x3, 0x4, 0x8, 0x7}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x2, 0x10000000, 0x10b, 0xa81}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0x208, 0x16, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d, 0xbf5, 0x10000000, 0x2, 0x6f3}, 0x36}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xfffffffe, 0x7, 0x4ae, 0x7}, 0x63}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x9e03, 0x10000000, 0x7, 0x5}, 0x80}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x4d, 0x8, 0x5, 0x8000}, 0x5b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x2, 0x0, 0x297}, 0x9}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x9, 0x4, 0x2, 0x9}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100000, 0x80000000, 0x2, 0x2, 0x6}, 0x8}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x800, 0x4dd, 0x5, 0x76a3, 0x9}, 0xc}}]}, {0xfc, 0x6, "dc36c8ac7a1a205a1cb7e44c971f8e0b5b03afcd5f21f78af93381c197cff927ac48c0167bd47d41820f269ab2c17fcfc551cc2de19b848601f649255f1be18f2825c3fd2288d034669e930dc18b3bd3778b6f14e7e4e73f0fc75fc4aded639b27d1288c29f85b22a0d3c5471d9ffa872b3844f1e24f4d0d4c6a2a5431fb4c63d373cd364c0d09ab6596b8dd49aadbca3575162309cc4a2daeae6e811549b6069be695ce2f8d99f06acbf32d025e95c57eb185f6075ba19463b197972479a0f8a3263727efd5c3a3a3bbe9393c7713e2c4daf189dccc8344b34cabf07a2254227c9a747e6eaba7bbe74057c335dd3871df39f8e13c1a92da"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x12dc}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004d968119f68f58d94773b9ab884100003c"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000140)=0x90) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r4, 0xb03, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040880) openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x86080, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 3.335296588s ago: executing program 4 (id=3111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a000100000000000000000081000000000000000000000008000f00fe00000001d66768716f36c1327f65263a3a1fea5e56e4fff17e2bd0e785960b2150b5d8e48bd9ca5963e05d884cc7048463004a1fd145e3bc3016cfa715191d003d0a26c78c6409129b2a85a6f88f1575b9aaac85fbfb607dc01ed0f57b8a614604"], 0x24}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001d000100000000000000ff00070000f47d7dab7d4c7fee9a3c9bf517db92b01604926b9745843073a76b91838fd37e67e538a11ca193e0a0e9f7e189c0f788e62314af9d453f40973ead9d1de59647cc994eae5ea5f66b0c010830fdabdf53caa5b279908e3520241afc6256bd0d1115a353c0f493cd6196b05a1aa8e95c9fa5d780ab5e729b2cace1155233cc6d57650029", @ANYRES32=r3, @ANYBLOB="000096040a000200aaaaaaaaaa0c00000600050000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x15, 0x0, 0x2}, {0x2d}, {0x40, 0x40}, {0x6}]}) 1.574876198s ago: executing program 2 (id=3120): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f00000010c0)={@map, 0xffffffffffffffff, 0x2c}, 0x20) r1 = socket$key(0xf, 0x3, 0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, &(0x7f00000000c0)) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x4, 0x8, 0x3, 0x20, 0x0, 0x0, 0x0, [@sadb_key={0x1e, 0x8, 0x730, 0x0, "636472ddfef22bede770be34024ae2d95d499eefd4b5975d12387696107b1b9c3a90d89d7a3ad624c9ff58bc310e25d1709bf5e8131cbd1e86b38b3d01f1f1768a7b3063a25a213e7ae880d9cb27e5388c3486e8bbcac9d5e8eeb89900d72b96b4380c5f334dd73399870debd9a8cadf8b366f9417216f5fe623eb9b95baf17e8d2fde41152ae5b0e50343c294a0962b4e73c154c198e180f1a49a1ead3818fa1e7bae87e5450623432dfdd6886438bb3be7b6e0c02133a6b4a24bedfedf141c1e153b5aa9ca8eeb4c59c36042123fb182c2c6f78a3a3cbfce7ed81e8229ed4336ba63369fff"}]}, 0x100}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000002600)=ANY=[@ANYBLOB="180000000000000000000000000000008110f4ff000000009500000700000000bf89c3"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x3], 0x5, 0x14, 0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$xdp(r4, &(0x7f00000025c0)={&(0x7f0000000280)={0x2c, 0x2, 0x0, 0x30}, 0x10, &(0x7f0000002580)=[{&(0x7f00000002c0)="1069ed2f1fbbba7db02c9118b6a04ba9d19b3adbdb309023e7388e16315008f83f94ad110f6c354a7560193d6f6aee69ca064ed3d4ac7f60a2f4d2dc3ea661f84e243757fd48d7b62c5046eb407797fba004c1b4f59b18b13d7c63f01c6d55ee978004", 0x63}, {&(0x7f0000000440)="bced8366b1eea73e471670b603b04e8de51eabb3d3d3547ca46660a9256fd6b7bb406c2b9c0220f541e611899bdd9ace981028de398fbd57e39f190aa4922338defd955cf816aa3c0726f0d98e5b3006bd9f8983353b2f44b402de19408559b49d31038796bef0195d6c1aafdd57f395e929bc7532c1880c61b4108d6cff6083e9f0c9b8cd4c9693dda71fa6a2d5db201d2d0209c974cac89e6bac6c42314889870a16f77fcfc3e4ca094a2932aeb9c3a699a641d38c7dbfcfa8a3fff4d41a5f5d9ba6a3d170e2a385ecab4587da2c22", 0xd0}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="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", 0x1000}], 0x4, 0x0, 0x0, 0xd0}, 0x4841) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000240)={'wg2\x00'}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=r7, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00df9e2b3ff2958a622777d2e1228a809c", @ANYBLOB="2466981b1ea224bd3fa6eb039dfb57c47b0d2640e3d93f7bad3663116bbd4571b04dc55ec1d6eb844370a238c047a0211913d7f515e513ac7f2722718f8c2247e0f25c5522e35c5e19b37f67682ddd5ad7d3723deadab6", @ANYBLOB="0a0001"], 0x48}}, 0x0) 1.57055235s ago: executing program 1 (id=3121): r0 = socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) (rerun: 32) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000600)={'team_slave_1\x00', &(0x7f0000000780)=@ethtool_rx_ntuple={0x35, {0xe, @usr_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x4005, 0x6, 0x1, 0x1}, @tcp_ip4_spec={@multicast1, @broadcast, 0x4e23, 0x4e22, 0x4}, 0x8004, 0x100, 0xffe, 0x3aa, 0xfffffffffffffffe}}}) (async) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000580)={0x0, 0x4}, &(0x7f00000005c0)=0x8) (rerun: 64) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000680)={r5, 0xff, 0x2e, "d94f8eb78ca37c2ec72dc58d829afd1757ad81fb5d63c6b251460ace9ee9fc2d3c8515cc6e8f4f7cb41ab6956cd8"}, 0x36) listen(r2, 0x8) r6 = accept4(r2, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r1, &(0x7f0000000440)="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", &(0x7f0000000340)=""/15}, 0x20) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000300)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x1a, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, 0x1c}, 0x94) (async) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="85f0555d518deb4a1b5fdf2668b47093ab697663baa8e9d42b0471dd826f420bcbf255eab6236b0387c33532bde293961e", 0x31}, {&(0x7f0000000040)="e634c571638243b0d7471145df71f3dead6372528e674961ca743969308d3200c9e9ee2abfc7f5cea618a03867ee692ae0d0d947661a51f0504ed106b1252aecab8385e4b97ee0a4375301737a1c814c4d0a4f72b387e14f7b4266a9500a1bc5900bb54d02ee843e7c88211644ae012ab2b3e74a73492ba17067ebd017bf92593b57e719dad6f89eb17a4c51d07fb8098a736624bc81f3e3cfc5819425bd40012e9cdfa623d093", 0xa7}, {&(0x7f0000000100)="9b9624a11492b297ea5254dccca794a0946f85a235a8bacfbdcd1b8860c2ea647cf1a81f82adc09c5c231bec71019bb4322f88e9d47625650f04e8c29a0b36238f8e60f2fc11a2e6b9eaf0ee56bb4169d59e2d1580a9fcfc7c796d7b9f069f00c652304ac9be41a196f052bbd41981b36afe4dd10631395c353b905f9b1d", 0x7e}], 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="110000000000000000000000010000000000000000000000140000000000000000000000020000000800000000000000140000000000000000000000010000000900000000000000100000000000000000000000070000001100000000000000000000000100000006000000000000001400000000000000200000000100000075080000000000001400000000000000000000000100000009000000000000001100000000000000000000000100000018000000000000004c000000000000000000000007000000443c1ff3e0000001000000027f00000100000009000000000000b800ac1414bb000000080000000000000007ac141444000003ff0000000000007fff00000000110000000000000000000000010000000300000000000000"], 0x120}, 0x44941) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001000010400000000000000000800c28a", @ANYRES32=0x0, @ANYBLOB="0002000000000000140012800b00010067656e6576650000040002800a0001000f"], 0x40}}, 0x0) 1.370322639s ago: executing program 1 (id=3122): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x28, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x400, {0x0, 0x0, 0x74, r4, {0xfff3, 0x4}, {0x0, 0xe}, {0xe, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48015}, 0x0) 1.369720102s ago: executing program 2 (id=3123): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = socket(0x22, 0x2, 0x2) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0xfffffffffffffda4, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x9) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, &(0x7f0000000800)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x3}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r2, @in={{0x2, 0x4e24, @multicast2}}, 0x5, 0x4}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x2000}]}}}]}, 0x3c}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 1.221806148s ago: executing program 5 (id=3124): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000008627d4d381b12dea0000000003000000000100000003000000020000000000000000000002"], 0x0, 0x4a}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000007e1b1f2995"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket(0x23, 0xa, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRES16=r5, @ANYRES32=r4, @ANYBLOB="00000000000000001c002b8008000800", @ANYRES32, @ANYRES16=r5, @ANYRES32=r4], 0x44}}, 0x0) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r3}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e00000043040000040000000900000002210300", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000000000000040000000c00"/24, @ANYRES32=r6, @ANYBLOB="408f6e437b472a8c4ab79e81d87c0bf5725fdd9fc180eba3c8406bc3ae70c6014acb0352e9d16c9736d14f7a37efb3fbec2f95a57b6c55700dbd922110c9c1680cf87c3824d5a10232dba3c421c322aa49c4997b615ed7ed888e7994648707811ceb4bfa00437bc9f7a802998c86251d0f420f19990d52975b4bbc9db3c8c255ce7d6a2b5732d5ac2e8985f0a2a05aba9f43154109188ca30599a74f347221d0598033c48e570d626a75c4ab45c58cbcaf26a9fa9af8497d2f4248c6"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.192962856s ago: executing program 2 (id=3125): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_timeval(r1, 0x1, 0x49, 0x0, &(0x7f00000001c0)) (async) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 1.131400779s ago: executing program 6 (id=3126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x2}}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x6, 0xfffffffe}, {0xc, 0x1}, {0xd}, {0x8, 0x2}, {0xf, 0x3}, {0x8, 0x5}, {0xe, 0x4}]}, @restrict={0x4, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x82, 0x0, 0x1, 0x2}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) r3 = socket$inet(0x2, 0x3, 0x30) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008a00000095"], &(0x7f0000000380)='GPL\x00'}, 0x90) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) 1.130564575s ago: executing program 4 (id=3127): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0xe4bd6a1de0769c90, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r1, 0x2e, 0x0, 0x7ff, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r4, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup, r0, 0x2a, 0x202c, 0x0, @void, @void, @value=r4, @void, r3}, 0x20) r6 = socket(0x1, 0x803, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x4, 0x0, &(0x7f0000000040)) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf2523090000", @ANYRES32=r8, @ANYBLOB="140002"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000090600010015"], 0x1c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x8, 0x32}, 0x9c) 1.024628334s ago: executing program 2 (id=3128): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="20002dbd7000fedbdf250400000008000400000000003c0003801400020076657468315f746f5f7465616d0002007465616d3000200000000000ffffff7f000000000080000008000600cf020000000000000000000000000000e219ab043af9e5451e0d2fed578f3f483d57ab3e2af4f679ab3f668623f5346726e2837e4b3b52ef8c5b1ed65a543d6cdd8d478946b727eccd1a58c4dd33a90a25fab0415724b9433a8f06f1043ae3991a060858572b035e55e72999dd253d30d91763bcdf29f203da"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000895) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x40}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000001d00)={0x1078, 0x40, 0x476c3ef3a6783be6, 0xfffffffe, 0x0, {0x1, 0x7c}, [@generic="5c48f0fc6db1a9dde4b1b376bdf63c4c05db31429f6b33f3aab796a5d851a39f13019391202d183fba01e5b4c4608e2533bfbb542cccc1d39240cc89c4da597d96a37090547f605eee30e97292c42d6dc932e29f52", @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @generic="1da5efcd10d872b16dcb951bea6f76ed81f8245b2d9d95f711f257425338318ff10e0b6a8d1711b0e2c2dd2721ca0e54a9ea4a484ca646609f6b24f487906798f1f36513e6a7f6a2661b1a70d3d14b843b0899912912fe741d3589996e670dc2a1285e0b1097c144c78e6a40d36390665c2d62f69cb2b9b54c3edc76aef4f57e7c36b7cf546354e9ea7630c76ca04bf157bdded20a3fd0b223c46fe50e2f51f927fce8725c2e027f60d40a9ee5c2fc8cf70d04d041fa2c5a753f336c5967caa9df4795629e94815b2307cb82283368c7940c341a9d5e95f84775388caff833d06a5d95c46d2ef81b22c4de91c8cdcafa2de1eb04efaf2dd63b52694f67055d2f5609be94851c3e25a3690e5bf51be2f4c8ca67b9026407a53e1e249dc19fef571b261c7e327f41b4175cd61c3bf47f9d28f01a6ef785146562cc63aa75bf23911242dc1a93e6c07031844c2f531a174b8d975f1ad18f5f54c1b02a0a2a7eb95745df9fa2dfecb08a59f86cf98522b50e29cf68c6687ad89ce67caf9aa4b844b6c381776d950cb5e511b2a1335db63a823ceafdecc721cbbfbd9e5f68f5f130aa4eed12c8f4492f84b369f409a383897af0d6ca3cf757373b1977c10ed40e65f461b494775663af1b9c6d7a603a59ca40d05f0b76bcec110a460b945bbc1065847b5adbd646f70acf9447eabd53825ba8f306f52d5996a7c5884119e16725225f6da67b826ad6e52b410d7dabd979fba4931b481e59c1dae617241215bfd2242616adba4c456920a1248c9c310e09b83816b63b0367e56dafd60df24d5273008ef61b664483ce693ba70c67801619f1233c5c03905d13cd068aa6f3ad7a1e6d34f07c646ff34341cd1f56cb147aa06c3a50693bcc3f74e3c17cb13ac032b7b1a71d3539f6dd7a2aba5fc3a4d065b20deea00ec9c413db6d545036a629c4c44f2b76a1fde393bdc432dad80e323940756cb2e77e3bdaf3be4cba3d036370b1452aa24ee2dbd4b99bffca84b895716574c221c4aa31290f19fb5a79e4285530d74777882e60d911d6fb8177d300fb0702bc415a2ce51617aa2e93032cf9eda47c83a5dc79525c5b15079992e0fea464b1196d7276bc7d97315a6a7579d612a323dbeb287de6b3db1dfdeee2a63b482899b8324bc757abdb6167175d184c2a41da2295ac7aa9325f019074b59fba1a1c6e2d70e12055f4b1a5a48e115bce857349472cfaf088ac9c39716f9901e8c85d1336fe573667d4fbe87fec44f48db36af888616ce76d4c8029fb1e52cd76b5b154d99737a3317bf2df8d87c26e1a8f88441f307c285daad34c9ed89d66fa44db0fddc3d5bcce73f31185e204e239b1f398bb4c518a5e288a7d17442737888526bf6ffa0b144a55ad55817c791f5c4db51b384399313f3ddef42badfcad42df90b314317475f681a5d0949ae0dfc8f22cb250aa5322212f459b5e97870cd07c761f6c5a6f1970a994972f7e5ba0b50d095913cd02e9cc202cb3cec8e5d5b42fdde4f33af79f3ad3c5e56409823d624baead15120e220e4eb6aaf6ae021a6bce86eace298bdad43fd92489d28d9607e03c7cdcd3eb648b2bd9dce6b20bbc35488117dc6375194a4a8782509682aec1baec832ae3b9a37cd0f49c0d0c887502976ba20f3e9c704f53ba300009109f1feab53f4bf5fd7c2700e42e879aee42843481ab807b330c867178d9d644cc4ae018b110ff592744af12b4c031dbae195cda1e2de825871ec9d20c4cfac87fe7694037cddca43401f2c58068b445214a840f5aa3bc460d5d441baa334461542571062fbc29b52f5809b445d8aa6ca812190868986538298ffd14ed92559c9aeb7d81c2a1c1ba3c4bee29459361b337f0121b82cc7ad7783313db3a270e48ad0e2be507245b7c6957794ba9c167dbdc83396a4d6bee703ff33826f8e43df9dafb07104b0a8faaa2dd363054e0be1cb28c3a6b9256e94e49a8e1225d34475b2ce2cfd96b5c0305e15bcd25688570333cbdf7ea54a5b575ab104f58315bb46a24d5a044718e37bbb946a2ae544ba4b5a8cbba3c58e3b02d155370d8a589bd99f5bdc8f87dc8d87b6cbcb922aaea496f46b4123d2ce70f57908e19abfb34ad75cf3ccdc7d2a68f540df56b4afc086a4c96f59d1a9510641448657ce5a50def77b33bda0d537ad3386e6a071768490ce1c74e694d160c7fff72fdcbfdc6cabaaf4fe2c40ca123e5b7c287b8879205d77cd32371a340329bcdcf87a19b7fc710dbd2933ec737ba0f1309b870f2d065d50af5efeebb981b56d0f15fd91f1c3e5b47bba575661c9e15429360237dc1567cc506aa777d2fb764ffc41387cac7835f19bd689944c4a623eb3815c90dd62bfd2d31e012acbd5f97fba41c2e920bcc8ef3719f09a5976ab7c398ba5f05022809b68490a4262e3fb8c3958e857bd3de1d324bb0abf7b834b69c91a07f4ab58c3bc9552b054a10592c4d95b60641a5fa80cb1d076fffc057cbc8fb0d5e0d48084035ebd2d33969e2e52cc55c48267bfc127aecb6df525ae00662916f6661132ca7ddba38705bb8d4f60645f4dc80f13e8dd82ca8671b5d1666a644211080bef8a669c9acbce23a89486cd68c5ac4d38cce56643c63a8701dd6d0cec24c2103340c312557a2996bf3001d714dd31b2514c72a2f67f51d77c2d18528fb141ff7c7aa035ad4aeddff82d73ed29075101017f317b0832c3a1ff172a14ab23dcc5e2937960acf831b103f7d9b1e4bf10335e473aa3b5dc619d119dc00531e68d85372a76b76aa0a571085dbf7b7d0e058ea4021e4b28ca1ef31beea5ba0ccbed95c91fbcfbe861b3d4da283004472c3dc7efce868ab240471a7145f0da962db6fc6162dbd8915f1c4a476cd76d94a659069fc73650a8b1645c8a19d9f72670b9c7120b1bb45a7f238360b0d1bb601470bead0c59d9a8231ed24914f62c3ff17866a3aaed38d3ee593036c6df7355dcd0bb46b6d76a596738f89cade566141d757cd3dd9644c0257f8b9d5321e364aa7f12ff3acc06dff64f6133f2b6f8878653b6532f68f7899b40c2af6c14383f3f8dae9b177fae51fe14f01e4399ac68a170715e794c63a22266c6cbabe4228eb4ebd936e040a2a4897bad5205387538f3dc1690bee69992a185e3528e9ce602c3d8416aeb96211ec1127f526c86e57da4ea1af6705278f2a0ad0a696bdaf6f2796855dbbabb93858cbe0e3718ebb160d7f99087b2a1949bed1c2d13e0f0329d8f4e63c55099e5c92ba882f5c3a6530395067b873b3f8f6aeb245848064332df7e2de7b8e52fd6bf09eab6deca79ebb354bfc9726991bc8a0cc424750dfe518ca40bc81ea06ccdbfd3da6eace356804936a1514f5a0594878cfdc716ef6a3b2aa685253dfb8c61b2c55b2d9bf38c38e9cabba1ed7d166f9dd5a1dcb0946716464f9577af20a2237e0b41222919d05649373b6d2901b40a6a2011cd949510f26204feb93e33ef9039dca978a438b8c04750d52f29fa02961cce103add63ec4d527ab63d630351ed08f47902006ad11c9744b344bc1b21437bfc910a9cd649afecceb5eb9a27eb6abbb6429c219370861acf4f5ae9551b589bb74dc1f610dac070710b57e7b2666770fd7a3dbad3f622191b14758e3c0804967e9cb0e0a53f13510913ba8da576584979ee4036fdc0400ebd13e6f765e1183862eec4df0edeb107f12caf97f8e4540cd127356a65d8947f43907d2aea88fe1ccc1e21db7450eb36924d411885aabe55fbe987e0f0d680abd46d972059afd6d0d648bbde7daeec4d5a7968be4756ce92acb7eaf1a6c09717beb639228c697611d73b77e9088d262319f28214007c0d61a328ae6b7a0b251fd771c296c488afb5b96846dbc62c1d7ab673c459e600e29c6c3f542d945c63d3a631095cdc0adb8859b7287e2493105c14f35e6c2bb9733190ecaf4e3672b2416d300454e69b8d9d228d0e4805b60f4b0698763b39f7bfe20754afc72e8613c44c97ac06ce4bf908f6e0dcbc57b9f8f5f16c7f61246d16c5a8edff1d678abcc83b241a2ae01e78f8e68447ac11e4b2c96712ffa1b2f966a4f66125ddbac03f990181a462499d803128fe3b266a986613cda755cdb4d05229c55f03e571d754703d1dc47c580515a97a44218e2433a60ed9bc268c50305ee0bb9d1776585962410d23fbd25ff3e0cb56c12ce8e0085d3b1376c4e98f4a2959fc45e86b4f98d66cd47b41dc2994f39a6f6a3f9dd5b525db94fcbfce13363b6500e7043a67ff05e83668514160459ec84e38eff894ba92a3692dd039feff78d6d97be0324e7aec4797722c60103623a3535e81445f38e4b740267e483476c56a469b3136f0d5fd501025b2704dc0148df2423203a37be88e8a8a0aaf58bb44ed8208f1378d74414db936189a8277e91356a38ad56717778b7e16ce42065aca3f3b82a5eb1ca80f7208b1fc44cd0b852de2b86746a88b30b0a4697956c8a10e7dbb56b91f1c9cb18128433591c5b966c0c6763fb92485286d93e79b79f2a04e8f87ba8b2f4e74325312c0b38c7d6878c1df707c26450961637dbccbe4c6a400b1f29c3b82c1848790db9091af628d56f5681e116cbc2acf68ba1593c786e7eaff73f74b306456510a493c2d196dfa0711bdbcc571e9544c5051af26a8982ed83b70392a96b92bc25159a2406ca3751150125164f8cf74ae064a19962cdc1da7c6dbf1c9fb4f8448bc3902bd42c0e42c8ed28d76f7531e50b3c3e48fa871206c70cd567fc660174f8ebf83d6d6ba3433aea4aa7715ca9dc0663117a2445405a97a0005f1b1481968d4cb827ba4dd83e7ecbc49dabb911be3061a8efd264c8cfd9c72927f95dcbc5f8d48406047a2c1aa055e880300d91582b2eda7a45a0eec7f1faec593a733d15d5391ae028b886ba93513df669d04013da96612626675e41d6f22f55e36e684a272f5121f058246d529b02dc2962b27984538315e568fb4b71c447c038334109b0c868e91ebcc9c916533a5757f641a653ac66fc87d49ccdac2aec5331ddb5b9559844d71769c78fa3f0c9d221a9f0666e5c82e8bdfa6cccf0d960abca48195e182719be5bfc1dfb817310b9f9fa0756fedb8e8d0d0790c493d65d6b7def658f6872c2525effe0fe8aaa9bd4f047102caa8bc9fcdd5d6330b1d1a94ecc590a6e567e85d77b27a77a90cd8814a50ea2cd0a90b39cab01ba2fe2e87fd80db919e7c032bdcff3af6510affdeb4a62301b54aea0742ffb8f2f7bf3c0e4fbf90851a534be9064226d1e7ffd5c3399b0abebb5ccb7a6ff018d6529ae4c7c9ba73351373465b62572f720b0200179a3bf6c2273546dc6e78e7a690b49070694cdf22ecb8c0986dd3141ff6857d92842538186c8e3ee411f8849c1b2c192fcec4c3e3967d87fb79ec35e5b28eba432afb88173cbf03064032382a9d2aecdb381fe39f2697327669ddfe6d0db2372bb77768cf410e9ba805637ca7accf2c0e8c3bf3f6018fa929e5f23eda701df6ea2b58a12342b9582652cdce1ec64b58e3d443f8304354244afcfc615ae7832d6e8f8dbc4a3ead3f717e8a43d0123e750e928c99e532e909bbc87c9b944821c0ac0ef4d3e9e2524ff7ab75706b62c1d8464e7b064a4143fa6dee19a9fd369663e685558a3e558094539b4a963c8b620fdbb4ead3142790285df604cd9cbe4f572e92755b9f28199dc5589893ac6f978492972008b321a47d874ca61ba950961318837a15e4b59f96784cc7d2009f062443263b691975c02fecf69d80e035504ff8865bd8d5213fe39a6de06219f311a1af9151e20cb"]}, 0x1078}, 0x1, 0x0, 0x0, 0x4044000}, 0xc000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000100)=@raw=[@jmp={0x5, 0x1, 0x4, 0x5, 0xa, 0xfffffffffffffff4, 0xfffffffffffffff0}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x1}], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xa, 0x40, 0x401}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r7], &(0x7f00000006c0)=[{0x5, 0x1, 0xd, 0x6}, {0x4, 0x2, 0x10, 0x3}, {0x1, 0x5, 0x6, 0x4}, {0x2, 0x3, 0x0, 0xc}, {0x5, 0x5, 0x0, 0x9}, {0x2, 0x4, 0xb}, {0x2, 0x1, 0x7, 0x4}, {0x2, 0x4, 0x5, 0x1}, {0x2, 0x4, 0x2, 0x8}], 0x10, 0x831}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x5, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018160000", @ANYRES32=0x1, @ANYBLOB="000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000085f8b709d0300000c0000008500000006000000"], &(0x7f0000000840)='syzkaller\x00', 0x9, 0x64, &(0x7f0000000880)=""/100, 0x41000, 0x2, '\x00', r10, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x9, 0x800, 0xb}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000980)=[{0x2, 0x1, 0x3, 0xc}, {0x4, 0x2, 0x0, 0xc}, {0x2, 0x1, 0x3, 0x9}], 0x10, 0x4}, 0x94) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r13, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r13, 0x0) r14 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80)={0xffffffffffffffff}, 0x4) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r15, &(0x7f0000000080)=ANY=[], 0x10448) r16 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r16, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$SIOCGIFHWADDR(r16, 0x8927, &(0x7f0000000000)={'team_slave_1\x00'}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r15, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b40)=ANY=[@ANYBLOB="540000001000390423bd7000fbdbdf2500000000", @ANYRES32=r10, @ANYBLOB="81b800000010000034002b8008000800", @ANYRES32=r11, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r12, @ANYBLOB="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", @ANYRES32=r13, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r14, @ANYBLOB="080003000400000008000100", @ANYRES32=r15, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844) sendto$packet(r7, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r10, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r6, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x24044845}, 0x0) 957.846711ms ago: executing program 4 (id=3129): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000000)=0x9f04, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r2], 0x24}}, 0x0) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 883.072833ms ago: executing program 6 (id=3130): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x4e20, 0x7f6, @remote, 0x7}}, 0x0, 0x0, 0xa, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000a08000140000000170900010073797a30000000000900020073797a3200"], 0x78}}, 0x10) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000001800010000000000000000001d0100000800050000fd000008000900", @ANYRES32=0x0, @ANYBLOB="05000d000100000008000a00", @ANYRES32=0x0, @ANYBLOB="15000100000000000000e2020000000000000070040000000c000b00000000000000000008"], 0x60}}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000200), &(0x7f00000003c0)=r2}, 0x20) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc020000000000000000000000000000040012000800280070cf00000c0019800500060014000000080004"], 0x8c}}, 0x0) 882.291885ms ago: executing program 5 (id=3131): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x2c, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0xc, 0x4, 0x4, 0xbf22, 0x400}, 0x48) ioctl$TUNSETOWNER(r4, 0x400454cc, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010102}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x440b0) 843.111048ms ago: executing program 4 (id=3132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = epoll_create1(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c00000000010106000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x7c}}, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000008580)={0x10000000}) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000008c80)={&(0x7f00000000c0)={0x54, 0x7, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x100}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x202}, @IPSET_ATTR_FLAGS={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x11}, 0x4004080) 768.927025ms ago: executing program 2 (id=3133): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x30020}}, 0x20}}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800babc00005c0016805800018054000c"], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000) 654.96869ms ago: executing program 6 (id=3134): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$sock_proto_private(r0, 0x89eb, &(0x7f00000001c0)="d18e4440875c49279258e9a1adfc38dc68219820d15f85ffb4fef5f14a69c4c03f029ac47468c48357e615126ea6fb6875674b82b4d7e8") setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="c60a0100000000006111b400000000008510000002000000850000000700000095000e000000000095000000000000003764e7be95cd1b051a0f3cd983c673d1cc389e632d686ff6bfc1884d28861b616a4e21cc0c6b735256c1d8389642393b41331d67072eac14cc61e5392e2bfdb6c35de43684005670f403f1fc05a286a2029fb37849d0ec6f224dd3578c7a5f29bfec9c769e5eb33f3737ee2f36d9d6bd53f70c048c0985405510c8994db5"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r4}, 0x10) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x1, r3, 0x0, r1}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000001d80)={'filter\x00', 0x111, 0x4, 0x3a0, 0x0, 0x1d0, 0x1d0, 0x2b8, 0x2b8, 0x2b8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @dev={0xac, 0x14, 0x14, 0x19}, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg1\x00', 'lo\x00', {}, {}, 0x0, 0x158}, 0xc0, 0xe8, 0x0, {0xb000000}}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x2}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) 654.717886ms ago: executing program 4 (id=3135): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x72}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c}}], 0x20}, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r11) sendmsg$DEVLINK_CMD_RATE_NEW(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002cbd7000fcdbdf254c0000000c00a7005d070000000000000e0001006e657464657673696d0000000f7673696d3000000c00a60004000000000000007f72e1a5d70cfa3769e8c61f66080b0d7a9b9628134e"], 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x4) r13 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r10) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r15 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r15, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bc4fffb619b45f0877ddd00f05b457a65d54acc046575978fa63c84996f91dfab8f854f66770283b1088bfc185ff58091c43079ec6138ced26655147f46b51bfd31de4c10572ee0d3e151a33e56aa57e2294f686849277bbba3266a2ec4f4679efde8cf247ef4edee54f85ac023655a75cf5aaa9fc7b3e00a70d007ef1437aaabca2e4a82a093dde658a28be78e5e7668201c2dc09bdf4e2eee54fb4ae974dec1d5579c96a7d4612dacf994e7757204be487b87ffca2c4ec540800008004000000000000"], 0xe0}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010029bd7000fedbdf250200000008000100", @ANYRES32=r8, @ANYBLOB="9749bf09036d08e603e3d40db18e17576a178842bfa035462fae2f37c18c6ab19fdf2ab48071cc0deb6277ed26ef636564689536201ea846f32bc8ea6a6ea92a2d5daca5f3c7c449d5b8c293b6e6a094fe1b33c40f19cf098f0c321dc29366d377e99b5d1ad54ce1921367fdad8a1f6e577e4678fbaf908017e60700000000000000db7cc2f68d35cbffd67633be29210a47b9fc81b8c36e5c3d53baefc6acf17145251e96656ca9c0d20000000000210f27956bf1dab720c43fb51f03307ccf68db8787f24710618f6f0957c55d758f534b319eec934ded3550c64af0913fca522e7ae13e2d43456231905d308772a27f04e10e398c"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r9], 0x4) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, 0x0) 626.103524ms ago: executing program 1 (id=3136): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000100100000b"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x0, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0xe23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x35, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000102010100000000000000000a0000004400018006000340000000002c00018014000300ff02000000000000000000000000000114000400000000000000000000000000000200010c000280050001"], 0x58}}, 0x0) 504.89625ms ago: executing program 1 (id=3137): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r1}, @CGW_SRC_IF={0x8, 0x9, r1}]}, 0x24}}, 0x0) 321.826497ms ago: executing program 2 (id=3138): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000002000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14, 0x800) sendto$packet(r4, 0x0, 0x0, 0x10040, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0x51, 0x6, @multicast}, 0x14) socket$inet6(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000240), 0x12) r7 = openat$cgroup_procs(r5, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x9) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000108000000090000000004000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014002b8008000100", @ANYRES32, @ANYBLOB="080003000200000008001b"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c015}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001340)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120a000d0000000401a80016000a003a40f8ff070000000000004dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc049e00360db70100000040fad95667e006dcdf63951f215ce29bf1d809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 259.726745ms ago: executing program 1 (id=3139): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x2c}, {0x80000006}]}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000400)=@ethtool_cmd={0x1e, 0x80000001, 0x2, 0x4e, 0x3, 0x0, 0x9, 0x8, 0x6, 0x4, 0x9, 0x0, 0x5, 0xb, 0x6, 0xc988, [0xd4, 0x6]}}) setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) 259.321082ms ago: executing program 6 (id=3140): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000100)=[{r0, 0x18d}], 0x1, 0x8001) (async) close(r0) (async) r2 = socket(0x40000000015, 0x5, 0x0) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x60}}, 0x0) (async, rerun: 64) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async, rerun: 32) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) (rerun: 32) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) (async) write$cgroup_subtree(r1, 0x0, 0xfffffc3f) 190.700679ms ago: executing program 5 (id=3141): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xe}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x0, 0x20000001, 0x8, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="dedd6a90a2512da3ad2c777a54ac28ae53403c664398423e8c212ca3ff3eb79eeea417f9868b34eb4d6c8add418b86f82d17ae5e26ebf05c7f6fd3ff418664658b581df9dfad6b77f40f6d0405ab53e19654a18f0b77a1865d3b9e1d8444ecded7e37a86192c0dc9bbf0dec97e582514d25f5d691df06b8b7d16", @ANYRES32=r1], 0x5c}, 0x1, 0x6c, 0x0, 0x48044}, 0x0) 159.391781ms ago: executing program 1 (id=3142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000711046000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x2f, 0x107, 0x70bd2b, 0x0, {0x9, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r2 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @private}, &(0x7f0000000100)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000140)=0x8, 0x4) 0s ago: executing program 6 (id=3143): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@map, 0xffffffffffffffff, 0xa}, 0x20) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0xfffffffffffffda4, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)=r2}, 0x1c) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x4, 0x0, r4, 0x6, '\x00', 0x0, r4, 0x0, 0x3, 0x2}, 0x50) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) bind$unix(r7, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x1e, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x924}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x40, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000280), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r8}, 0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x800000, @ipv4}, 0x1c) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000080)={0xa, 0x14e22, 0xffffffff, @empty}, 0x1c) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r11, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000589b6affff00057e0000000000000e00003900000003981501d151ba0101fe0000000a00020025000000000000", 0x45) pipe(&(0x7f0000000500)={0xffffffffffffffff}) unshare(0x400) r14 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r14, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYBLOB="02180000180000000000000000000000030005000000000002000000e000000200000000000000000800120000000000000000000000000010000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aa030006000000000002004374ffffffff000000000000000008001900000000000a00000000000000ff020000000000000000000000000001000000000a"], 0xc0}}, 0x0) r15 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r15, 0x3a, 0x1, 0x0, 0x0) splice(r13, 0x0, r12, 0x0, 0xffffffffffff8000, 0x0) kernel console output (not intermixed with test programs): ][T11968] syzkaller0: entered allmulticast mode [ 222.112724][T11981] geneve2: entered promiscuous mode [ 222.162786][T11984] ip6erspan0: entered allmulticast mode [ 222.367602][T11992] nbd6: detected capacity change from 0 to 63 [ 222.385478][T11995] block nbd6: NBD_DISCONNECT [ 222.401118][T11995] block nbd6: Disconnected due to user request. [ 222.409721][T11995] block nbd6: shutting down sockets [ 222.423795][T11992] netem: change failed [ 222.429575][ C0] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 222.439350][ C0] Buffer I/O error on dev nbd6, logical block 0, async page read [ 222.451321][ C0] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 222.460877][ C0] Buffer I/O error on dev nbd6, logical block 1, async page read [ 222.471030][ C0] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 222.480610][ C0] Buffer I/O error on dev nbd6, logical block 2, async page read [ 222.488482][ C0] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 222.498122][ C0] Buffer I/O error on dev nbd6, logical block 3, async page read [ 222.506193][ T6361] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 222.529884][ T6361] Buffer I/O error on dev nbd6, logical block 0, async page read [ 222.553203][ T6361] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 222.574338][T12009] netlink: 'syz.4.1682': attribute type 1 has an invalid length. [ 222.590960][T12009] netlink: 'syz.4.1682': attribute type 7 has an invalid length. [ 222.598878][ T6361] Buffer I/O error on dev nbd6, logical block 1, async page read [ 222.598982][ T6361] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 222.599005][ T6361] Buffer I/O error on dev nbd6, logical block 2, async page read [ 222.599042][ T6361] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 222.599063][ T6361] Buffer I/O error on dev nbd6, logical block 3, async page read [ 222.599109][ T6361] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 222.626681][T12009] netlink: 'syz.4.1682': attribute type 8 has an invalid length. [ 222.662416][ T6361] Buffer I/O error on dev nbd6, logical block 0, async page read [ 222.674340][ T6361] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 222.721325][ T6361] Buffer I/O error on dev nbd6, logical block 1, async page read [ 222.762491][ T6361] ldm_validate_partition_table(): Disk read failed. [ 222.777529][T10053] net_ratelimit: 121 callbacks suppressed [ 222.777547][T10053] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 222.819799][ T6361] Dev nbd6: unable to read RDB block 0 [ 222.831897][T10053] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 222.835168][ T6361] nbd6: unable to read partition table [ 222.871727][ T6361] ldm_validate_partition_table(): Disk read failed. [ 222.892910][T10053] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 222.915200][ T6361] Dev nbd6: unable to read RDB block 0 [ 222.957673][ T6361] nbd6: unable to read partition table [ 222.981090][ T50] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 222.992389][T12007] syzkaller0: entered promiscuous mode [ 223.018368][ T50] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 223.078661][T12007] syzkaller0: entered allmulticast mode [ 223.096347][ T50] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 223.115908][ T50] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 223.192729][T12041] xt_recent: Unsupported userspace flags (000000b1) [ 223.259901][ T12] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 223.297283][T10053] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 223.337135][ T7446] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.917664][T12061] bond11: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 224.961258][T12074] sctp: [Deprecated]: syz.1.1696 (pid 12074) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.961258][T12074] Use struct sctp_sack_info instead [ 225.191562][T12089] netlink: 'syz.6.1697': attribute type 83 has an invalid length. [ 225.214876][T12091] syzkaller0: entered promiscuous mode [ 225.231959][T12089] netlink: 'syz.6.1697': attribute type 5 has an invalid length. [ 225.244981][T12091] syzkaller0: entered allmulticast mode [ 225.267871][T12089] __nla_validate_parse: 10 callbacks suppressed [ 225.267888][T12089] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1697'. [ 225.642891][T12124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1706'. [ 225.668942][T12124] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 225.807009][T12131] netlink: 'syz.6.1707': attribute type 11 has an invalid length. [ 226.037836][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1712'. [ 226.049479][T12151] IPVS: length: 79 != 8 [ 226.416057][T12181] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 226.605840][T12189] netlink: 'syz.6.1724': attribute type 1 has an invalid length. [ 226.621526][T12189] netlink: 'syz.6.1724': attribute type 2 has an invalid length. [ 226.903239][T12197] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1727'. [ 226.996269][T12201] netlink: 'syz.4.1729': attribute type 5 has an invalid length. [ 227.133723][T12203] syzkaller0: entered promiscuous mode [ 227.139331][T12203] syzkaller0: entered allmulticast mode [ 227.211881][T12209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.226048][T12213] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1732'. [ 227.510857][T12227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1736'. [ 227.528745][T12227] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1736'. [ 227.806844][ T12] net_ratelimit: 160 callbacks suppressed [ 227.806864][ T12] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 227.837647][ T7446] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 227.866953][ T7446] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 227.887583][ T7446] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 227.929815][ T12] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 227.958918][ T7446] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 227.997315][ T1093] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 228.028979][T10053] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 228.060898][T10053] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 228.088645][T10053] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 229.302586][T12249] sctp: [Deprecated]: syz.4.1744 (pid 12249) Use of int in maxseg socket option. [ 229.302586][T12249] Use struct sctp_assoc_value instead [ 229.701506][T12276] xt_time: unknown flags 0xf4 [ 229.813385][T12283] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.1752'. [ 229.886232][T12286] 8021q: VLANs not supported on ipvlan1 [ 229.926001][T12286] veth5: entered promiscuous mode [ 229.940165][T12286] veth5: entered allmulticast mode [ 229.968565][T12293] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1756'. [ 230.343179][T12311] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1762'. [ 230.806247][ T9] IPVS: starting estimator thread 0... [ 230.928297][T12342] IPVS: using max 29 ests per chain, 69600 per kthread [ 231.101119][T12362] ieee802154 phy0 wpan0: encryption failed: -22 [ 231.129796][T12362] netlink: 'syz.1.1770': attribute type 11 has an invalid length. [ 231.319168][T12376] netlink: 'syz.2.1774': attribute type 4 has an invalid length. [ 231.343392][T12372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1775'. [ 231.396902][T12375] netlink: 'syz.2.1774': attribute type 4 has an invalid length. [ 231.417177][T12376] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1774'. [ 231.432930][T12375] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1774'. [ 231.495367][T12376] `: renamed from bond0 (while UP) [ 231.731086][T12396] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1780'. [ 231.893909][T12396] bond3: option packets_per_slave: invalid value (18446744073709551615) [ 231.922015][T12396] bond3: option packets_per_slave: allowed values 0 - 65535 [ 231.941923][T12396] bond3 (unregistering): Released all slaves [ 231.974051][T12409] netlink: 248 bytes leftover after parsing attributes in process `syz.5.1783'. [ 232.030621][T12409] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1783'. [ 232.080654][T12414] 8021q: adding VLAN 0 to HW filter on device bond5 [ 232.517370][T12448] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1789'. [ 232.613465][T12463] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 232.626053][T12462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'. [ 232.635952][T12461] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1791'. [ 232.646338][T12461] netlink: 'syz.4.1791': attribute type 2 has an invalid length. [ 232.695023][T12463] vxcan0: tx drop: invalid sa for name 0x0000000000000004 [ 232.911778][ T7444] net_ratelimit: 146 callbacks suppressed [ 232.911798][ T7444] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 232.941609][ T7444] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 233.081093][ T7444] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 233.147970][T10053] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 233.177158][ T7444] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 233.219117][T10053] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 233.268186][T10053] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 233.303094][T10053] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 233.440375][ T7446] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 233.473355][ T7446] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 233.808582][T12522] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 233.845773][T12518] can: request_module (can-proto-0) failed. [ 234.365012][T12559] lo: entered allmulticast mode [ 234.439928][T12562] lo: left allmulticast mode [ 234.603020][T12574] syzkaller0: entered promiscuous mode [ 234.608592][T12574] syzkaller0: entered allmulticast mode [ 234.662065][T12578] xt_CT: No such helper "syz0" [ 234.954192][T12605] syzkaller1: entered promiscuous mode [ 234.984394][T12605] syzkaller1: entered allmulticast mode [ 235.005893][T12605] syzkaller1: left promiscuous mode [ 235.015625][T12605] syzkaller1: left allmulticast mode [ 235.310047][T12635] sctp: [Deprecated]: syz.6.1838 (pid 12635) Use of int in max_burst socket option. [ 235.310047][T12635] Use struct sctp_assoc_value instead [ 235.493653][T12646] Bluetooth: MGMT ver 1.23 [ 235.497727][T12633] lo speed is unknown, defaulting to 1000 [ 235.503961][T12646] x_tables: duplicate underflow at hook 1 [ 235.505453][T12633] lo speed is unknown, defaulting to 1000 [ 235.544172][T12647] __nla_validate_parse: 16 callbacks suppressed [ 235.544190][T12647] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1838'. [ 235.881661][T12661] syzkaller0: entered promiscuous mode [ 235.897141][T12661] syzkaller0: entered allmulticast mode [ 236.052361][T12672] netlink: 'syz.2.1851': attribute type 10 has an invalid length. [ 236.518362][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1854'. [ 236.528243][T12683] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1854'. [ 237.734012][T12682] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 237.745208][T12683] bridge0: entered allmulticast mode [ 237.807502][T12692] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1857'. [ 237.981773][ T5835] Bluetooth: hci6: link tx timeout [ 237.987238][ T50] net_ratelimit: 153 callbacks suppressed [ 237.987255][ T50] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 237.993216][ T5835] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 238.007876][T12707] netlink: 'syz.5.1862': attribute type 21 has an invalid length. [ 238.023730][T12703] tipc: Enabling of bearer rejected, failed to enable media [ 238.044433][ T7446] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 238.096938][ T7444] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 238.120712][ T7444] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 238.147473][T12707] netlink: 'syz.5.1862': attribute type 6 has an invalid length. [ 238.155232][T12707] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1862'. [ 238.170073][ T7444] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 238.237101][ T7446] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 238.258630][T12714] syzkaller1: entered allmulticast mode [ 238.265333][ T7446] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 238.287281][ T7444] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 238.307254][ T7444] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 238.333349][T12729] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1868'. [ 238.336666][ T7446] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 238.507099][ T5831] Bluetooth: hci6: link tx timeout [ 238.512297][ T5831] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 238.672434][ T5831] Bluetooth: hci6: link tx timeout [ 238.679034][ T5831] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 238.689828][T12751] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1873'. [ 239.321352][T12779] bond3: option lp_interval: invalid value (0) [ 239.329039][T12793] sctp: [Deprecated]: syz.4.1883 (pid 12793) Use of int in maxseg socket option. [ 239.329039][T12793] Use struct sctp_assoc_value instead [ 239.347540][T12779] bond3: option lp_interval: allowed values 1 - 2147483647 [ 239.378332][T12779] bond3 (unregistering): Released all slaves [ 239.520562][T12798] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1887'. [ 239.614572][T12805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1889'. [ 239.722485][T12812] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 239.863174][T12826] xt_hashlimit: size too large, truncated to 1048576 [ 239.979659][T12832] xt_hashlimit: size too large, truncated to 1048576 [ 239.997487][T12835] tipc: Failed to remove unknown binding: 66,0,0/0:4003468769/4003468770 [ 240.038740][T12835] tipc: Failed to remove unknown binding: 66,0,0/0:4003468769/4003468770 [ 240.087861][ T5831] Bluetooth: hci6: command 0x0406 tx timeout [ 240.555545][T12865] netlink: 'syz.4.1902': attribute type 6 has an invalid length. [ 240.960409][T12891] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1908'. [ 241.207832][T12907] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1911'. [ 241.225099][T12906] netlink: 'syz.2.1910': attribute type 4 has an invalid length. [ 241.335194][T12913] bridge0: port 3(syz_tun) entered blocking state [ 241.386177][T12913] bridge0: port 3(syz_tun) entered disabled state [ 241.433266][T12913] syz_tun: entered allmulticast mode [ 241.473790][T12921] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1914'. [ 241.489280][T12913] syz_tun: entered promiscuous mode [ 241.566231][T12923] geneve2: entered promiscuous mode [ 241.584824][T12923] geneve2: entered allmulticast mode [ 241.604368][ T7446] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 241.656654][ T7446] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 241.690173][ T7446] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 241.703385][ T7446] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 241.789533][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1918'. [ 241.811932][T12927] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.843578][T12927] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.955742][T12949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1920'. [ 242.038778][T12927] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.049652][T12927] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.218772][T12927] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.239179][T12927] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.429536][T12927] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.459853][T12927] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.515834][T12983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1926'. [ 242.540640][T12976] xt_hashlimit: size too large, truncated to 1048576 [ 242.559434][T12983] netlink: 'syz.2.1926': attribute type 1 has an invalid length. [ 242.611640][T12983] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1926'. [ 242.818677][ T7444] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.832468][ T7444] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.899805][T13004] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1932'. [ 242.921847][ T7444] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.981768][ T7444] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.023688][ T7444] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.038886][ T50] net_ratelimit: 124 callbacks suppressed [ 243.038901][ T50] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 243.089226][ T7444] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.118791][ T50] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 243.121822][ T7444] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.156976][ T50] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 243.196418][ T7444] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.206861][ T50] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 243.267460][ T7446] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 243.300456][ T7446] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 243.456555][ T7446] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 243.486214][T13036] veth3: entered allmulticast mode [ 243.507045][ T7446] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 243.570162][ T7446] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 243.708582][ T50] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 244.086949][T13080] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20003 [ 244.097793][T13073] syzkaller0: entered promiscuous mode [ 244.103574][T13073] syzkaller0: entered allmulticast mode [ 244.227799][T13086] netlink: 'syz.6.1952': attribute type 2 has an invalid length. [ 244.580337][T13107] syzkaller1: entered promiscuous mode [ 244.589460][T13107] syzkaller1: entered allmulticast mode [ 244.597456][T13103] lo speed is unknown, defaulting to 1000 [ 244.628302][T13103] lo speed is unknown, defaulting to 1000 [ 244.727593][T13112] veth5: entered allmulticast mode [ 244.826423][T13117] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 244.842125][T13117] bond3 (unregistering): Released all slaves [ 245.070212][T13130] netlink: 'syz.4.1964': attribute type 1 has an invalid length. [ 245.192479][T13130] bond3: entered promiscuous mode [ 245.217873][T13143] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1963'. [ 245.246175][T13130] 8021q: adding VLAN 0 to HW filter on device bond3 [ 245.777185][T13175] netlink: 296 bytes leftover after parsing attributes in process `syz.1.1971'. [ 245.870288][T13179] syzkaller1: entered promiscuous mode [ 245.880370][T13179] syzkaller1: entered allmulticast mode [ 246.019702][T13191] FAULT_INJECTION: forcing a failure. [ 246.019702][T13191] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 246.053073][T13191] CPU: 1 UID: 0 PID: 13191 Comm: syz.5.1978 Not tainted syzkaller #0 PREEMPT(full) [ 246.053096][T13191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 246.053113][T13191] Call Trace: [ 246.053127][T13191] [ 246.053134][T13191] dump_stack_lvl+0xe8/0x150 [ 246.053160][T13191] should_fail_ex+0x412/0x560 [ 246.053186][T13191] _copy_from_user+0x2d/0xb0 [ 246.053211][T13191] ___sys_sendmsg+0x1c6/0x360 [ 246.053232][T13191] ? __lock_acquire+0x6b5/0x2cf0 [ 246.053256][T13191] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.053310][T13191] ? __fget_files+0x2a/0x420 [ 246.053328][T13191] ? __fget_files+0x3a0/0x420 [ 246.053355][T13191] __x64_sys_sendmsg+0x1bd/0x2a0 [ 246.053379][T13191] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 246.053408][T13191] ? __pfx_ksys_write+0x10/0x10 [ 246.053441][T13191] do_syscall_64+0xe2/0xf80 [ 246.053459][T13191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.053475][T13191] ? trace_irq_disable+0x37/0x100 [ 246.053491][T13191] ? clear_bhb_loop+0x60/0xb0 [ 246.053509][T13191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.053524][T13191] RIP: 0033:0x7fe30bf9aeb9 [ 246.053538][T13191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.053552][T13191] RSP: 002b:00007fe30a1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.053577][T13191] RAX: ffffffffffffffda RBX: 00007fe30c215fa0 RCX: 00007fe30bf9aeb9 [ 246.053589][T13191] RDX: 0000000000028000 RSI: 0000200000000080 RDI: 0000000000000005 [ 246.053601][T13191] RBP: 00007fe30a1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 246.053611][T13191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.053621][T13191] R13: 00007fe30c216038 R14: 00007fe30c215fa0 R15: 00007ffc6bc51928 [ 246.053648][T13191] [ 246.454061][T13195] lo speed is unknown, defaulting to 1000 [ 246.492033][T13195] lo speed is unknown, defaulting to 1000 [ 246.865932][T13223] netlink: 'syz.2.1986': attribute type 1 has an invalid length. [ 247.190650][T13237] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1991'. [ 247.229852][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1986'. [ 247.442283][T13256] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1994'. [ 247.494170][T13256] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 248.087674][ T50] net_ratelimit: 118 callbacks suppressed [ 248.087740][ T50] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 248.137856][ T1093] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 248.165246][ T1093] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 248.288065][ T7444] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 248.296365][ T7444] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 248.439173][ T7444] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 248.457898][ T7444] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 248.476738][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.485474][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.493837][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.515699][T13308] syzkaller0: entered promiscuous mode [ 248.522691][T13308] syzkaller0: entered allmulticast mode [ 248.572321][T13317] netlink: 'syz.4.2005': attribute type 1 has an invalid length. [ 248.918729][T13335] Bluetooth: MGMT ver 1.23 [ 248.926304][T13335] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 248.973835][T13340] netlink: 416 bytes leftover after parsing attributes in process `syz.5.2010'. [ 249.046866][T13346] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2010'. [ 249.197129][ T5831] Bluetooth: hci6: command 0x0406 tx timeout [ 249.224820][T13351] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2011'. [ 249.280732][T13355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2013'. [ 249.369464][T13353] netlink: 736 bytes leftover after parsing attributes in process `syz.4.2012'. [ 249.393875][T13353] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2012'. [ 249.513734][T13367] --map-set only usable from mangle table [ 249.743841][T13382] sctp: [Deprecated]: syz.5.2022 (pid 13382) Use of struct sctp_assoc_value in delayed_ack socket option. [ 249.743841][T13382] Use struct sctp_sack_info instead [ 249.808909][T13392] delete_channel: no stack [ 250.000609][T13407] netlink: 'syz.5.2027': attribute type 2 has an invalid length. [ 250.372060][T13429] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2031'. [ 250.839960][T13463] netlink: 'syz.5.2040': attribute type 1 has an invalid length. [ 250.860023][T13463] netlink: 'syz.5.2040': attribute type 2 has an invalid length. [ 250.962883][T13471] FAULT_INJECTION: forcing a failure. [ 250.962883][T13471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.087750][T13471] CPU: 0 UID: 0 PID: 13471 Comm: syz.2.2043 Not tainted syzkaller #0 PREEMPT(full) [ 251.087777][T13471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 251.087787][T13471] Call Trace: [ 251.087794][T13471] [ 251.087802][T13471] dump_stack_lvl+0xe8/0x150 [ 251.087829][T13471] should_fail_ex+0x412/0x560 [ 251.087853][T13471] _copy_from_iter+0x1d3/0x1670 [ 251.087881][T13471] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 251.087907][T13471] ? __pfx__copy_from_iter+0x10/0x10 [ 251.087928][T13471] ? __build_skb_around+0x22d/0x3c0 [ 251.087950][T13471] ? __alloc_skb+0x193/0x390 [ 251.087971][T13471] ? netlink_sendmsg+0x650/0xb40 [ 251.087987][T13471] ? skb_put+0x11b/0x210 [ 251.088009][T13471] netlink_sendmsg+0x6c0/0xb40 [ 251.088036][T13471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.088056][T13471] ? aa_sock_msg_perm+0xf1/0x1b0 [ 251.088077][T13471] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 251.088097][T13471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.088114][T13471] ____sys_sendmsg+0xa68/0xad0 [ 251.088134][T13471] ? __might_fault+0xaf/0x130 [ 251.088162][T13471] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.088192][T13471] ? import_iovec+0x73/0xa0 [ 251.088216][T13471] ___sys_sendmsg+0x2a5/0x360 [ 251.088235][T13471] ? __lock_acquire+0x6b5/0x2cf0 [ 251.088261][T13471] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.088314][T13471] ? __fget_files+0x2a/0x420 [ 251.088330][T13471] ? __fget_files+0x3a0/0x420 [ 251.088357][T13471] __x64_sys_sendmsg+0x1bd/0x2a0 [ 251.088380][T13471] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 251.088410][T13471] ? __pfx_ksys_write+0x10/0x10 [ 251.088465][T13471] do_syscall_64+0xe2/0xf80 [ 251.088483][T13471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.088499][T13471] ? trace_irq_disable+0x37/0x100 [ 251.088516][T13471] ? clear_bhb_loop+0x60/0xb0 [ 251.088535][T13471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.088552][T13471] RIP: 0033:0x7f429a19aeb9 [ 251.088567][T13471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.088582][T13471] RSP: 002b:00007f429b00c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.088601][T13471] RAX: ffffffffffffffda RBX: 00007f429a415fa0 RCX: 00007f429a19aeb9 [ 251.088614][T13471] RDX: 0000000000028000 RSI: 0000200000000080 RDI: 0000000000000005 [ 251.088625][T13471] RBP: 00007f429b00c090 R08: 0000000000000000 R09: 0000000000000000 [ 251.088636][T13471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.088647][T13471] R13: 00007f429a416038 R14: 00007f429a415fa0 R15: 00007ffc988602e8 [ 251.088676][T13471] [ 251.778316][T13500] netlink: 'syz.4.2051': attribute type 33 has an invalid length. [ 251.952130][T13517] bridge3: port 1(veth5) entered blocking state [ 252.013889][T13517] bridge3: port 1(veth5) entered disabled state [ 252.045414][T13517] veth5: entered allmulticast mode [ 252.053088][T13531] FAULT_INJECTION: forcing a failure. [ 252.053088][T13531] name failslab, interval 1, probability 0, space 0, times 1 [ 252.073847][T13517] veth5: entered promiscuous mode [ 252.084415][T13526] netlink: 'syz.5.2061': attribute type 29 has an invalid length. [ 252.084549][T13531] CPU: 0 UID: 0 PID: 13531 Comm: syz.4.2059 Not tainted syzkaller #0 PREEMPT(full) [ 252.084570][T13531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 252.084580][T13531] Call Trace: [ 252.084587][T13531] [ 252.084594][T13531] dump_stack_lvl+0xe8/0x150 [ 252.084681][T13531] should_fail_ex+0x412/0x560 [ 252.084717][T13531] should_failslab+0xa8/0x100 [ 252.084739][T13531] kmem_cache_alloc_noprof+0x87/0x6e0 [ 252.084761][T13531] ? __netlink_lookup+0xc6/0x8b0 [ 252.084780][T13531] ? skb_clone+0x212/0x3a0 [ 252.084805][T13531] skb_clone+0x212/0x3a0 [ 252.084828][T13531] __netlink_deliver_tap+0x404/0x850 [ 252.084856][T13531] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.084875][T13531] netlink_deliver_tap+0x19c/0x1b0 [ 252.084893][T13531] netlink_unicast+0x7e3/0x9b0 [ 252.084923][T13531] ? __pfx_netlink_unicast+0x10/0x10 [ 252.084945][T13531] ? __alloc_skb+0x193/0x390 [ 252.084963][T13531] ? netlink_sendmsg+0x650/0xb40 [ 252.084978][T13531] ? skb_put+0x11b/0x210 [ 252.085000][T13531] netlink_sendmsg+0x813/0xb40 [ 252.085025][T13531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.085045][T13531] ? aa_sock_msg_perm+0xf1/0x1b0 [ 252.085067][T13531] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 252.085085][T13531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.085102][T13531] ____sys_sendmsg+0xa68/0xad0 [ 252.085123][T13531] ? __might_fault+0xaf/0x130 [ 252.085152][T13531] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.085180][T13531] ? import_iovec+0x73/0xa0 [ 252.085206][T13531] ___sys_sendmsg+0x2a5/0x360 [ 252.085225][T13531] ? __lock_acquire+0x6b5/0x2cf0 [ 252.085250][T13531] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.085302][T13531] ? __fget_files+0x2a/0x420 [ 252.085319][T13531] ? __fget_files+0x3a0/0x420 [ 252.085346][T13531] __x64_sys_sendmsg+0x1bd/0x2a0 [ 252.085382][T13531] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 252.085411][T13531] ? __pfx_ksys_write+0x10/0x10 [ 252.085445][T13531] do_syscall_64+0xe2/0xf80 [ 252.085464][T13531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.085481][T13531] ? trace_irq_disable+0x37/0x100 [ 252.085496][T13531] ? clear_bhb_loop+0x60/0xb0 [ 252.085516][T13531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.085532][T13531] RIP: 0033:0x7f69b079aeb9 [ 252.085549][T13531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.085562][T13531] RSP: 002b:00007f69b15bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.085580][T13531] RAX: ffffffffffffffda RBX: 00007f69b0a15fa0 RCX: 00007f69b079aeb9 [ 252.085593][T13531] RDX: 0000000000028000 RSI: 0000200000000080 RDI: 0000000000000005 [ 252.085603][T13531] RBP: 00007f69b15bc090 R08: 0000000000000000 R09: 0000000000000000 [ 252.085614][T13531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.085624][T13531] R13: 00007f69b0a16038 R14: 00007f69b0a15fa0 R15: 00007ffe6b016108 [ 252.085652][T13531] [ 252.085715][T13531] netlink: 'syz.4.2059': attribute type 3 has an invalid length. [ 252.172828][T13527] bridge3: port 2(veth0_to_bond) entered blocking state [ 252.409089][T13527] bridge3: port 2(veth0_to_bond) entered disabled state [ 252.419762][T13527] veth0_to_bond: entered allmulticast mode [ 252.444205][T13527] veth0_to_bond: entered promiscuous mode [ 252.459088][T13532] netlink: 'syz.1.2060': attribute type 3 has an invalid length. [ 252.474328][T13543] ipvlan2: entered allmulticast mode [ 252.492976][T13543] bond0: entered allmulticast mode [ 252.510421][T13543] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 252.543924][T13543] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 252.764872][T13553] netlink: 'syz.2.2066': attribute type 9 has an invalid length. [ 252.818294][T13572] netlink: 'syz.4.2068': attribute type 1 has an invalid length. [ 252.873072][T13577] __nla_validate_parse: 5 callbacks suppressed [ 252.873088][T13577] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2070'. [ 252.968097][T13587] netlink: 'syz.5.2073': attribute type 142 has an invalid length. [ 253.117657][ T50] net_ratelimit: 123 callbacks suppressed [ 253.117678][ T50] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 253.167141][T10053] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 253.174996][T10053] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 253.241577][T13603] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 253.259906][T13608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.308733][ T1093] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 253.322614][ T1093] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 253.459994][ T3482] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 253.491094][ T3482] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 253.623631][T13630] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2084'. [ 253.638568][ T1093] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 253.672687][ T1093] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 253.706249][T13614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2081'. [ 253.974723][T13651] 8021q: adding VLAN 0 to HW filter on device bond6 [ 254.030285][T13652] 8021q: adding VLAN 0 to HW filter on device bond5 [ 254.068475][T13653] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2087'. [ 254.097146][T13658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2089'. [ 254.119489][T13655] bond5: (slave veth7): Enslaving as an active interface with a down link [ 254.168143][T13651] veth7: entered promiscuous mode [ 254.181610][T13651] bond6: (slave veth7): Enslaving as an active interface with a down link [ 254.224619][T13653] bond6: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 254.258937][T13660] syzkaller0: entered promiscuous mode [ 254.264498][T13660] syzkaller0: entered allmulticast mode [ 254.281119][T13647] bond5: (slave veth0_to_bond): making interface the new active one [ 254.292512][T13647] veth0_to_bond: entered promiscuous mode [ 254.300401][T13647] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 254.349023][T13660] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2090'. [ 254.433070][T13638] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 254.438286][T13652] bond5: (slave veth9): Enslaving as an active interface with a down link [ 254.463567][T13638] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 254.556380][T13674] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 254.650820][T13638] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 254.667807][T13638] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 254.978761][T13699] tipc: Trying to set illegal importance in message [ 255.478666][T13729] 8021q: adding VLAN 0 to HW filter on device bond3 [ 255.653480][T13750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2108'. [ 255.682144][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.797687][T13759] IPVS: set_ctl: invalid protocol: 22 100.1.1.1:20001 [ 255.951421][T13769] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.2114'. [ 255.990530][T13762] syzkaller0: entered promiscuous mode [ 256.005650][T13774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2113'. [ 256.019742][T13762] syzkaller0: entered allmulticast mode [ 256.151669][T13784] validate_nla: 6 callbacks suppressed [ 256.151688][T13784] netlink: 'syz.2.2116': attribute type 3 has an invalid length. [ 256.165749][T13784] netlink: 'syz.2.2116': attribute type 3 has an invalid length. [ 256.178438][T13778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2113'. [ 256.252846][T13783] gretap0: entered promiscuous mode [ 256.349087][T13785] gretap0: left promiscuous mode [ 256.529503][T13799] x_tables: unsorted underflow at hook 3 [ 256.536417][T13808] netlink: 'syz.4.2123': attribute type 6 has an invalid length. [ 256.623026][T13814] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 256.645049][T13815] netlink: 'syz.4.2123': attribute type 13 has an invalid length. [ 256.661676][T13815] netlink: 'syz.4.2123': attribute type 17 has an invalid length. [ 256.697678][T13808] netlink: 'syz.4.2123': attribute type 6 has an invalid length. [ 256.961420][ T798] lo speed is unknown, defaulting to 1000 [ 257.159489][T13840] tipc: Enabling of bearer rejected, failed to enable media [ 257.205908][T13844] ip6gre2: entered promiscuous mode [ 257.622386][T13869] netlink: 'syz.1.2140': attribute type 1 has an invalid length. [ 257.773414][T13873] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 257.784553][T13869] 8021q: adding VLAN 0 to HW filter on device bond6 [ 257.885787][T13869] syzkaller0: entered promiscuous mode [ 257.908362][T13869] syzkaller0: entered allmulticast mode [ 257.961181][T13895] netlink: 'syz.2.2145': attribute type 11 has an invalid length. [ 257.972264][T13895] __nla_validate_parse: 10 callbacks suppressed [ 257.972282][T13895] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2145'. [ 258.127903][ T36] net_ratelimit: 152 callbacks suppressed [ 258.127943][ T36] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 258.154370][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 258.308651][ T12] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 258.328613][T13915] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2149'. [ 258.370268][T10053] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 258.425150][T13922] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2149'. [ 258.437195][T10053] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 258.490186][T10053] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 258.512261][T10053] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 258.637171][T10053] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 258.656818][ T1093] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 258.690032][ T1093] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 258.708607][T13942] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2153'. [ 258.709282][T13938] netlink: 'syz.5.2154': attribute type 3 has an invalid length. [ 258.726066][T13939] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2152'. [ 258.736154][T13943] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2155'. [ 258.758361][T13931] netlink: 'syz.6.2153': attribute type 82 has an invalid length. [ 259.577209][T13984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.949694][T14002] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2169'. [ 260.111806][T14006] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2169'. [ 260.324134][T14011] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2170'. [ 260.333518][T14011] NCSI netlink: No device for ifindex 813332851 [ 262.217812][T14002] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 262.431942][T14055] syzkaller0: entered promiscuous mode [ 262.475209][T14055] syzkaller0: entered allmulticast mode [ 262.536114][T14069] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2180'. [ 262.595433][T14062] : entered promiscuous mode [ 263.136991][ T3482] net_ratelimit: 163 callbacks suppressed [ 263.137013][ T3482] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 263.197207][ T7446] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 263.213731][ T7446] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 263.225595][T14114] validate_nla: 2 callbacks suppressed [ 263.225612][T14114] netlink: 'syz.4.2197': attribute type 25 has an invalid length. [ 263.339773][T14114] netlink: 'syz.4.2197': attribute type 83 has an invalid length. [ 263.368657][ T12] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 263.453327][ T12] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 263.499209][T10053] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 263.526837][ T3482] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 263.558827][ T3482] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 263.587619][ T3482] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 263.595250][T14136] netdevsim netdevsim4 : renamed from netdevsim0 [ 263.697208][ T12] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 263.780078][T14140] bond7: option all_slaves_active: invalid value (222) [ 263.811636][T14140] bond7 (unregistering): Released all slaves [ 264.014668][T14165] smc: net device wlan0 applied user defined pnetid SYZ0 [ 264.029297][T14168] __nla_validate_parse: 2 callbacks suppressed [ 264.029314][T14168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2208'. [ 264.100965][T14168] bond0: option mode: unable to set because the bond device is up [ 264.175746][T14169] bond0: (slave veth11): Enslaving as an active interface with a down link [ 264.288396][T14179] syzkaller0: entered promiscuous mode [ 264.294180][T14179] syzkaller0: entered allmulticast mode [ 264.392965][T14185] tipc: Started in network mode [ 264.398835][T14185] tipc: Node identity 3e6bd7cf8244, cluster identity 4711 [ 264.413546][T14185] tipc: Enabled bearer , priority 0 [ 264.430227][T14185] syzkaller0: entered promiscuous mode [ 264.442754][T14185] syzkaller0: entered allmulticast mode [ 264.495154][T14185] netlink: 'syz.4.2214': attribute type 21 has an invalid length. [ 264.504730][T14185] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2214'. [ 264.532428][T14185] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2214'. [ 264.558716][T14185] tipc: Resetting bearer [ 264.672200][T14198] tipc: Enabling of bearer rejected, already enabled [ 264.772978][T14198] tipc: Resetting bearer [ 264.835838][T14198] tipc: Disabling bearer [ 265.020794][T14226] ip6_vti0: entered promiscuous mode [ 265.054255][T14226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2222'. [ 265.078220][T14229] netlink: 'syz.1.2223': attribute type 1 has an invalid length. [ 265.089753][T14230] netlink: 'syz.6.2224': attribute type 1 has an invalid length. [ 265.097120][T14229] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2223'. [ 265.242334][T14243] syzkaller0: entered promiscuous mode [ 265.267176][T14243] syzkaller0: entered allmulticast mode [ 265.507969][ T36] veth0_to_bond: left promiscuous mode [ 265.590192][T14263] netlink: 184 bytes leftover after parsing attributes in process `syz.6.2234'. [ 265.590372][T14269] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2235'. [ 265.630966][T14261] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2233'. [ 265.646328][T14269] netlink: 'syz.4.2235': attribute type 10 has an invalid length. [ 265.751723][T14269] veth0_vlan: left promiscuous mode [ 265.768288][T14269] veth0_vlan: entered promiscuous mode [ 265.784181][T14269] team0: Device veth0_vlan failed to register rx_handler [ 266.061378][T14286] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 266.063130][T14290] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 266.344318][T14285] ip6_vti0: left promiscuous mode [ 266.389091][ T5881] lo speed is unknown, defaulting to 1000 [ 266.395859][T14305] netlink: 'syz.1.2239': attribute type 29 has an invalid length. [ 266.417190][ T5881] syz0: Port: 1 Link DOWN [ 266.433959][ T5881] lo speed is unknown, defaulting to 1000 [ 266.439044][T14305] netlink: 'syz.1.2239': attribute type 29 has an invalid length. [ 266.778431][T14323] netlink: 'syz.2.2245': attribute type 16 has an invalid length. [ 266.838085][T14323] netlink: 'syz.2.2245': attribute type 17 has an invalid length. [ 266.935990][T14323] 8021q: adding VLAN 0 to HW filter on device ` [ 267.099086][T14346] netlink: 348 bytes leftover after parsing attributes in process `syz.5.2251'. [ 267.380992][T14366] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2254'. [ 267.694486][T14386] block nbd0: Unsupported socket: should be TCP or UNIX. [ 267.778307][T14385] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 268.118000][T14423] netem: change failed [ 268.152635][ T3482] net_ratelimit: 134 callbacks suppressed [ 268.152655][ T3482] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 268.199593][ T3482] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 268.237419][ T3482] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 268.257380][ T3482] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 268.268171][ T3482] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 268.414579][ T7444] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 268.453458][ T7444] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 268.477147][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.578308][ T12] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 268.592788][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 268.624768][T14463] validate_nla: 2 callbacks suppressed [ 268.624786][T14463] netlink: 'syz.4.2285': attribute type 3 has an invalid length. [ 268.920425][T14480] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.976340][T14480] bridge_slave_0 (unregistering): left allmulticast mode [ 268.984346][T14480] bridge_slave_0 (unregistering): left promiscuous mode [ 268.996029][T14480] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.055648][T14481] syzkaller0: entered promiscuous mode [ 269.066690][T14481] syzkaller0: entered allmulticast mode [ 269.174895][T14500] __nla_validate_parse: 7 callbacks suppressed [ 269.174913][T14500] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2296'. [ 269.208255][T14506] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2296'. [ 269.381519][T14514] syzkaller0: entered promiscuous mode [ 269.387798][T14514] syzkaller0: entered allmulticast mode [ 269.558111][T14527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2303'. [ 269.625660][T14530] netlink: 'syz.1.2304': attribute type 2 has an invalid length. [ 269.850898][T14546] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 269.955825][T14548] bond0 (unregistering): Released all slaves [ 270.204256][T14569] syzkaller0: entered promiscuous mode [ 270.216560][T14569] syzkaller0: entered allmulticast mode [ 270.370901][T14580] netlink: 'syz.1.2318': attribute type 3 has an invalid length. [ 270.629680][T14599] netlink: 'syz.5.2324': attribute type 21 has an invalid length. [ 270.728972][T14599] bond4: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 270.758440][T14599] bond4 (unregistering): Released all slaves [ 270.796226][T14612] vcan0: entered allmulticast mode [ 270.814459][T14607] syzkaller0: entered promiscuous mode [ 270.848982][T14607] syzkaller0: entered allmulticast mode [ 271.134157][T14629] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2331'. [ 271.139321][T14631] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2332'. [ 271.261761][T14618] netlink: 'syz.5.2327': attribute type 4 has an invalid length. [ 271.273048][T14631] bridge_slave_0: left allmulticast mode [ 271.273604][T14639] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2334'. [ 271.280008][T14631] bridge_slave_0: left promiscuous mode [ 271.294576][T14639] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2334'. [ 271.322244][T14631] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.423476][T14644] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2337'. [ 271.445817][T14644] netlink: 'syz.2.2337': attribute type 1 has an invalid length. [ 271.454714][T14644] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2337'. [ 271.838125][T14669] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2344'. [ 272.445318][T14716] netlink: 'syz.1.2358': attribute type 3 has an invalid length. [ 272.480468][T14714] netlink: 'syz.2.2357': attribute type 1 has an invalid length. [ 273.051396][T14750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.167165][ T50] net_ratelimit: 122 callbacks suppressed [ 273.167184][ T50] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 273.247246][ T50] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 273.297732][ T3482] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 273.327870][ T3482] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 273.335646][ T3482] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 273.467250][ T3482] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 273.475095][ T3482] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 273.607223][ T3482] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 273.627812][ T3482] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 273.639224][T14786] sctp: [Deprecated]: syz.6.2376 (pid 14786) Use of struct sctp_assoc_value in delayed_ack socket option. [ 273.639224][T14786] Use struct sctp_sack_info instead [ 273.656906][ T3482] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 273.685454][T14788] netlink: 'syz.2.2378': attribute type 29 has an invalid length. [ 273.707997][T14788] netlink: 'syz.2.2378': attribute type 29 has an invalid length. [ 273.905041][T14802] pim6reg1: entered promiscuous mode [ 273.913178][T14802] pim6reg1: entered allmulticast mode [ 274.004257][T14802] lo speed is unknown, defaulting to 1000 [ 274.027810][T14802] lo speed is unknown, defaulting to 1000 [ 274.311701][T14827] tap0: tun_chr_ioctl cmd 1074025678 [ 274.328602][T14827] tap0: group set to 0 [ 274.572354][T14842] __nla_validate_parse: 12 callbacks suppressed [ 274.572373][T14842] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2393'. [ 274.811101][T14851] syzkaller0: entered promiscuous mode [ 274.816842][T14851] syzkaller0: entered allmulticast mode [ 274.825959][T14853] lo: Caught tx_queue_len zero misconfig [ 274.863751][T14860] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2399'. [ 275.568199][T14851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.596156][T14851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.135439][ T50] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.196161][ T50] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.292751][T14911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2408'. [ 276.302268][ T50] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.326182][ T50] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.338019][ T50] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.351788][ T50] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.465954][T14917] netlink: 'syz.1.2410': attribute type 10 has an invalid length. [ 276.621715][ T50] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.633704][ T50] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.653955][T14917] veth0_macvtap: left promiscuous mode [ 276.901253][T14936] netlink: 'syz.2.2414': attribute type 3 has an invalid length. [ 277.092753][T14947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2420'. [ 277.119208][T14947] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2420'. [ 277.251664][T14957] netlink: 'syz.5.2424': attribute type 33 has an invalid length. [ 277.288754][T14959] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2425'. [ 277.313856][T14957] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 277.331559][T14957] bond4 (unregistering): Released all slaves [ 277.345918][T14959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2425'. [ 277.356006][T14959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2425'. [ 277.371990][T14959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2425'. [ 277.387361][T14959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2425'. [ 277.880238][T14990] IPVS: Unknown mcast interface: pimreg1 [ 278.087197][T15002] macsec0: entered promiscuous mode [ 278.092486][T15002] macsec0: entered allmulticast mode [ 278.099290][T15001] veth1_macvtap: entered allmulticast mode [ 278.110576][T15001] macsec0: left promiscuous mode [ 278.130902][T15001] macsec0: left allmulticast mode [ 278.135975][T15001] veth1_macvtap: left allmulticast mode [ 278.170028][T15011] x_tables: duplicate entry at hook 3 [ 278.175576][T15006] netlink: 'syz.6.2439': attribute type 33 has an invalid length. [ 278.183892][ T3482] net_ratelimit: 152 callbacks suppressed [ 278.183908][ T3482] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 278.209166][ T3482] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 278.337822][ T1093] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 278.348870][T14877] IPVS: starting estimator thread 0... [ 278.367969][ T1093] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 278.442026][T15021] IPVS: using max 31 ests per chain, 74400 per kthread [ 278.488222][ T7446] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 278.496008][ T7446] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 278.646869][ T1093] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 278.660790][T15038] FAULT_INJECTION: forcing a failure. [ 278.660790][T15038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.667791][ T1093] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 278.694800][T15038] CPU: 0 UID: 0 PID: 15038 Comm: syz.5.2450 Not tainted syzkaller #0 PREEMPT(full) [ 278.694826][T15038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 278.694837][T15038] Call Trace: [ 278.694844][T15038] [ 278.694852][T15038] dump_stack_lvl+0xe8/0x150 [ 278.694877][T15038] should_fail_ex+0x412/0x560 [ 278.694902][T15038] _copy_from_user+0x2d/0xb0 [ 278.694926][T15038] ___sys_sendmsg+0x1c6/0x360 [ 278.694947][T15038] ? __lock_acquire+0x6b5/0x2cf0 [ 278.694972][T15038] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.695025][T15038] ? __fget_files+0x2a/0x420 [ 278.695043][T15038] ? __fget_files+0x3a0/0x420 [ 278.695070][T15038] __x64_sys_sendmsg+0x1bd/0x2a0 [ 278.695093][T15038] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 278.695123][T15038] ? __pfx_ksys_write+0x10/0x10 [ 278.695156][T15038] do_syscall_64+0xe2/0xf80 [ 278.695174][T15038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.695189][T15038] ? trace_irq_disable+0x37/0x100 [ 278.695205][T15038] ? clear_bhb_loop+0x60/0xb0 [ 278.695224][T15038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.695241][T15038] RIP: 0033:0x7fe30bf9aeb9 [ 278.695257][T15038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.695271][T15038] RSP: 002b:00007fe30a1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.695290][T15038] RAX: ffffffffffffffda RBX: 00007fe30c215fa0 RCX: 00007fe30bf9aeb9 [ 278.695303][T15038] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000005 [ 278.695314][T15038] RBP: 00007fe30a1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 278.695324][T15038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.695335][T15038] R13: 00007fe30c216038 R14: 00007fe30c215fa0 R15: 00007ffc6bc51928 [ 278.695364][T15038] [ 278.809228][ T7444] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 278.997064][ T7444] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 279.025464][T15062] netlink: 'syz.5.2455': attribute type 3 has an invalid length. [ 279.162153][T15070] netlink: 'syz.2.2459': attribute type 1 has an invalid length. [ 279.287262][T15082] FAULT_INJECTION: forcing a failure. [ 279.287262][T15082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.343727][T15082] CPU: 0 UID: 0 PID: 15082 Comm: syz.4.2463 Not tainted syzkaller #0 PREEMPT(full) [ 279.343751][T15082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 279.343761][T15082] Call Trace: [ 279.343767][T15082] [ 279.343775][T15082] dump_stack_lvl+0xe8/0x150 [ 279.343799][T15082] should_fail_ex+0x412/0x560 [ 279.343822][T15082] _copy_from_user+0x2d/0xb0 [ 279.343846][T15082] __copy_msghdr+0x3c5/0x5b0 [ 279.343871][T15082] ___sys_sendmsg+0x213/0x360 [ 279.343890][T15082] ? __lock_acquire+0x6b5/0x2cf0 [ 279.343915][T15082] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.343966][T15082] ? __fget_files+0x2a/0x420 [ 279.343983][T15082] ? __fget_files+0x3a0/0x420 [ 279.344010][T15082] __x64_sys_sendmsg+0x1bd/0x2a0 [ 279.344032][T15082] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 279.344061][T15082] ? __pfx_ksys_write+0x10/0x10 [ 279.344098][T15082] do_syscall_64+0xe2/0xf80 [ 279.344116][T15082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.344133][T15082] ? clear_bhb_loop+0x60/0xb0 [ 279.344156][T15082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.344173][T15082] RIP: 0033:0x7f69b079aeb9 [ 279.344189][T15082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.344203][T15082] RSP: 002b:00007f69b15bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.344221][T15082] RAX: ffffffffffffffda RBX: 00007f69b0a15fa0 RCX: 00007f69b079aeb9 [ 279.344234][T15082] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000005 [ 279.344245][T15082] RBP: 00007f69b15bc090 R08: 0000000000000000 R09: 0000000000000000 [ 279.344255][T15082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.344265][T15082] R13: 00007f69b0a16038 R14: 00007f69b0a15fa0 R15: 00007ffe6b016108 [ 279.344294][T15082] [ 279.636019][T15099] netlink: 'syz.4.2467': attribute type 11 has an invalid length. [ 279.721030][T15101] netlink: 'syz.6.2469': attribute type 1 has an invalid length. [ 279.802708][T15108] __nla_validate_parse: 138 callbacks suppressed [ 279.802727][T15108] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2471'. [ 279.819894][T15101] 8021q: adding VLAN 0 to HW filter on device bond8 [ 279.841256][T15109] vlan3: entered promiscuous mode [ 279.852698][T15109] bond8: entered promiscuous mode [ 279.858181][T15109] vlan3: entered allmulticast mode [ 279.863749][T15109] bond8: entered allmulticast mode [ 279.901242][T15101] bond8: (slave bridge0): making interface the new active one [ 279.929622][T15101] bridge0: entered promiscuous mode [ 279.942792][T15101] bridge0: entered allmulticast mode [ 279.951336][T15101] bond8: (slave bridge0): Enslaving as an active interface with an up link [ 280.124388][T15130] FAULT_INJECTION: forcing a failure. [ 280.124388][T15130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.173802][T15131] lo speed is unknown, defaulting to 1000 [ 280.180177][T15130] CPU: 1 UID: 0 PID: 15130 Comm: syz.6.2477 Not tainted syzkaller #0 PREEMPT(full) [ 280.180201][T15130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 280.180212][T15130] Call Trace: [ 280.180219][T15130] [ 280.180226][T15130] dump_stack_lvl+0xe8/0x150 [ 280.180252][T15130] should_fail_ex+0x412/0x560 [ 280.180277][T15130] _copy_to_user+0x31/0xb0 [ 280.180303][T15130] simple_read_from_buffer+0xe1/0x170 [ 280.180327][T15130] proc_fail_nth_read+0x1bb/0x230 [ 280.180353][T15130] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 280.180378][T15130] ? rw_verify_area+0x2a6/0x4d0 [ 280.180399][T15130] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 280.180422][T15130] vfs_read+0x20c/0xa70 [ 280.180442][T15130] ? fdget_pos+0x246/0x320 [ 280.180465][T15130] ? __pfx___mutex_lock+0x10/0x10 [ 280.180484][T15130] ? __pfx_vfs_read+0x10/0x10 [ 280.180507][T15130] ? __fget_files+0x2a/0x420 [ 280.180529][T15130] ? __fget_files+0x3a0/0x420 [ 280.180546][T15130] ? __fget_files+0x2a/0x420 [ 280.180572][T15130] ksys_read+0x150/0x270 [ 280.180596][T15130] ? __pfx_ksys_read+0x10/0x10 [ 280.180634][T15130] do_syscall_64+0xe2/0xf80 [ 280.180651][T15130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.180667][T15130] ? trace_irq_disable+0x37/0x100 [ 280.180683][T15130] ? clear_bhb_loop+0x60/0xb0 [ 280.180703][T15130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.180720][T15130] RIP: 0033:0x7f700675b78e [ 280.180736][T15130] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 280.180750][T15130] RSP: 002b:00007f700772efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 280.180770][T15130] RAX: ffffffffffffffda RBX: 00007f700772f6c0 RCX: 00007f700675b78e [ 280.180783][T15130] RDX: 000000000000000f RSI: 00007f700772f0a0 RDI: 0000000000000007 [ 280.180794][T15130] RBP: 00007f700772f090 R08: 0000000000000000 R09: 0000000000000000 [ 280.180804][T15130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.180815][T15130] R13: 00007f7006a16038 R14: 00007f7006a15fa0 R15: 00007ffd3fa281c8 [ 280.180844][T15130] [ 280.400865][T15131] lo speed is unknown, defaulting to 1000 [ 280.656816][T15138] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2480'. [ 280.673543][T15141] netlink: 232 bytes leftover after parsing attributes in process `syz.5.2481'. [ 281.115533][T15167] netlink: 'syz.5.2487': attribute type 1 has an invalid length. [ 281.130485][T15167] netlink: 212 bytes leftover after parsing attributes in process `syz.5.2487'. [ 281.199079][T15169] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2488'. [ 281.447476][T15185] netlink: 'syz.1.2490': attribute type 4 has an invalid length. [ 281.493871][T14877] lo speed is unknown, defaulting to 1000 [ 281.499968][T15185] netlink: 'syz.1.2490': attribute type 4 has an invalid length. [ 281.521093][T14877] syz2: Port: 1 Link DOWN [ 281.534052][T14877] lo speed is unknown, defaulting to 1000 [ 281.557414][T14877] syz2: Port: 1 Link ACTIVE [ 282.274642][T15228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.328016][T15228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.372250][T15237] erspan0: entered promiscuous mode [ 282.381458][T15237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2503'. [ 282.476264][T15245] netlink: 252 bytes leftover after parsing attributes in process `syz.6.2510'. [ 282.497364][T15245] siw: device registration error -23 [ 282.521469][T15245] netlink: 'syz.6.2510': attribute type 3 has an invalid length. [ 282.542973][T15249] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20002 [ 282.643976][T15254] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2514'. [ 282.683800][T15254] bond9: option xmit_hash_policy: invalid value (64) [ 282.708715][T15254] bond9 (unregistering): Released all slaves [ 282.713740][T15261] netlink: 'syz.6.2514': attribute type 1 has an invalid length. [ 282.752589][T15257] gtp0: entered promiscuous mode [ 282.758894][T15257] gtp0: entered allmulticast mode [ 282.904873][T15268] xt_bpf: check failed: parse error [ 283.049701][T15278] syzkaller0: entered promiscuous mode [ 283.070714][T15278] syzkaller0: entered allmulticast mode [ 283.082494][T15283] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2524'. [ 283.134941][T15283] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2524'. [ 283.197920][ T1093] net_ratelimit: 109 callbacks suppressed [ 283.197937][ T1093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.214447][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.229589][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.267180][ T3482] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 283.314066][ T1093] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 283.347071][ T7446] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 283.380757][ T7446] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 283.407304][ T7446] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 283.417915][ T7446] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 283.506107][T15305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.849546][T15333] veth0: entered promiscuous mode [ 283.929802][T15339] netlink: 'syz.1.2539': attribute type 10 has an invalid length. [ 283.974892][T15339] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 284.008717][T15332] veth0: left promiscuous mode [ 284.167234][T15349] pim6reg1: entered promiscuous mode [ 284.172577][T15349] pim6reg1: entered allmulticast mode [ 284.525352][T15378] netlink: 'syz.5.2553': attribute type 11 has an invalid length. [ 284.851713][T15414] __nla_validate_parse: 8 callbacks suppressed [ 284.851729][T15414] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2560'. [ 284.870307][T15416] x_tables: duplicate underflow at hook 3 [ 284.900065][T15414] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2560'. [ 285.089775][T15431] netlink: 'syz.2.2568': attribute type 2 has an invalid length. [ 285.125525][T15431] netlink: 'syz.2.2568': attribute type 4 has an invalid length. [ 285.267977][T15450] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2565'. [ 285.296265][T15448] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2571'. [ 285.314874][T15448] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2571'. [ 285.427576][T15456] netlink: 'syz.2.2574': attribute type 2 has an invalid length. [ 285.452519][T15456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2574'. [ 285.467963][T15456] block nbd0: not configured, cannot reconfigure [ 285.474759][T15458] xt_ecn: cannot match TCP bits for non-tcp packets [ 285.549190][T15468] netlink: 'syz.6.2578': attribute type 1 has an invalid length. [ 285.674688][T15478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2580'. [ 286.021754][T15496] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 286.121409][T15496] bond9 (unregistering): Released all slaves [ 286.183856][T15508] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 286.215260][T15508] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2591'. [ 286.338785][T15513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2590'. [ 286.422308][T15520] syzkaller0: entered promiscuous mode [ 286.429604][T15520] syzkaller0: entered allmulticast mode [ 286.448092][T15520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2594'. [ 286.756737][T15533] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 286.762695][T15533] syzkaller1: Refused to change device type [ 287.119998][ T10] IPVS: starting estimator thread 0... [ 287.227229][T15566] IPVS: using max 38 ests per chain, 91200 per kthread [ 287.314032][T15578] netlink: 'syz.6.2613': attribute type 11 has an invalid length. [ 287.336788][T15578] netlink: 'syz.6.2613': attribute type 11 has an invalid length. [ 287.364064][T15577] netlink: 'syz.6.2613': attribute type 11 has an invalid length. [ 287.377741][T15577] netlink: 'syz.6.2613': attribute type 11 has an invalid length. [ 287.460055][T15591] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 287.611240][T15608] siw: device registration error -23 [ 287.895213][T15626] delete_channel: no stack [ 287.910350][T15626] delete_channel: no stack [ 287.924194][T15626] delete_channel: no stack [ 287.946420][T15626] delete_channel: no stack [ 287.960136][T15626] delete_channel: no stack [ 287.970122][T15626] delete_channel: no stack [ 287.975103][T15626] delete_channel: no stack [ 287.981049][T15626] delete_channel: no stack [ 287.985894][T15626] delete_channel: no stack [ 287.991536][T15626] delete_channel: no stack [ 287.996392][T15626] delete_channel: no stack [ 288.021711][T15626] delete_channel: no stack [ 288.033413][T15626] delete_channel: no stack [ 288.051095][T15626] delete_channel: no stack [ 288.059365][T15626] delete_channel: no stack [ 288.064041][T15626] delete_channel: no stack [ 288.070084][T15626] delete_channel: no stack [ 288.092923][T15626] delete_channel: no stack [ 288.107918][T15626] delete_channel: no stack [ 288.118052][T15626] delete_channel: no stack [ 288.129667][T15626] delete_channel: no stack [ 288.141825][T15626] delete_channel: no stack [ 288.158552][T15626] delete_channel: no stack [ 288.163256][T15626] delete_channel: no stack [ 288.174630][T15626] delete_channel: no stack [ 288.194979][T15626] delete_channel: no stack [ 288.217605][T15626] delete_channel: no stack [ 288.238140][T15626] delete_channel: no stack [ 288.242773][T15626] delete_channel: no stack [ 288.262201][T15626] delete_channel: no stack [ 288.301789][ T3482] net_ratelimit: 134 callbacks suppressed [ 288.301811][ T3482] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 288.315696][ T3482] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 288.323991][T15626] delete_channel: no stack [ 288.347499][T15626] delete_channel: no stack [ 288.352135][T15626] delete_channel: no stack [ 288.400346][T14877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.467315][ T1093] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 288.495444][ T1093] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 288.553634][T15657] netlink: 'syz.1.2633': attribute type 1 has an invalid length. [ 288.564318][T15648] netlink: 'syz.4.2631': attribute type 1 has an invalid length. [ 288.572810][T15648] netlink: 'syz.4.2631': attribute type 7 has an invalid length. [ 288.582156][T15648] netlink: 'syz.4.2631': attribute type 8 has an invalid length. [ 288.592243][T15648] NCSI netlink: No device for ifindex 65584 [ 288.617900][T10053] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 288.637430][T10053] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 288.668269][T10053] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 288.675758][T15651] ieee802154 phy0 wpan0: encryption failed: -22 [ 288.777362][T10053] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 288.787426][T10053] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 288.944889][T15671] syzkaller0: entered promiscuous mode [ 288.951364][T15671] syzkaller0: entered allmulticast mode [ 289.442018][T15713] netlink: 'syz.4.2654': attribute type 13 has an invalid length. [ 289.758124][T15746] netlink: 'syz.6.2661': attribute type 1 has an invalid length. [ 289.970710][T15761] __nla_validate_parse: 21 callbacks suppressed [ 289.970725][T15761] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2666'. [ 289.987574][T15762] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2666'. [ 290.014300][T15766] netlink: 1452 bytes leftover after parsing attributes in process `syz.4.2668'. [ 290.091344][T15775] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2670'. [ 290.115968][T15775] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2670'. [ 290.196831][T15775] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2670'. [ 290.206271][T15775] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2670'. [ 290.225085][T15775] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2670'. [ 290.236073][T15775] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2670'. [ 290.253552][T15775] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2670'. [ 291.109697][T15843] 8021q: VLANs not supported on caif0 [ 291.138106][T15839] syzkaller1: entered promiscuous mode [ 291.144002][T15839] syzkaller1: entered allmulticast mode [ 291.243489][T15846] hsr_slave_1 (unregistering): left promiscuous mode [ 291.315757][T15857] bond12: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 291.329870][T15857] bond12 (unregistering): Released all slaves [ 291.605342][T15870] lo speed is unknown, defaulting to 1000 [ 291.616229][T15870] lo speed is unknown, defaulting to 1000 [ 291.936072][T15882] bond12: entered promiscuous mode [ 291.941643][T15882] bond12: entered allmulticast mode [ 291.977772][T15882] 8021q: adding VLAN 0 to HW filter on device bond12 [ 292.294666][T15919] validate_nla: 3 callbacks suppressed [ 292.294684][T15919] netlink: 'syz.6.2711': attribute type 1 has an invalid length. [ 292.454419][ T1093] tipc: Subscription rejected, illegal request [ 292.633478][T15932] netlink: 'syz.1.2719': attribute type 21 has an invalid length. [ 292.658186][T15932] netlink: 'syz.1.2719': attribute type 21 has an invalid length. [ 292.845259][T15942] netlink: 'syz.1.2723': attribute type 2 has an invalid length. [ 293.326778][ T3482] net_ratelimit: 130 callbacks suppressed [ 293.326799][ T3482] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 293.415321][ T3482] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 293.529247][ T3482] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 293.549769][ T3482] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 293.583392][T15969] delete_channel: no stack [ 293.595622][T15967] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 293.607813][T15968] delete_channel: no stack [ 293.686597][ T7446] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 293.694376][ T7446] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 293.809743][T15973] syzkaller0: entered promiscuous mode [ 293.818684][T15973] syzkaller0: entered allmulticast mode [ 293.827923][T15978] bond0: (slave gre0): Error: Device type is different from other slaves [ 293.842260][T15985] netlink: 'syz.6.2734': attribute type 4 has an invalid length. [ 293.856892][T15984] netlink: 'syz.6.2734': attribute type 4 has an invalid length. [ 293.868674][ T3482] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 293.907331][ T3482] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 293.937816][ T3482] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 293.984658][T15994] netlink: 'syz.5.2733': attribute type 1 has an invalid length. [ 295.497254][T15992] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 295.530008][T16013] netlink: 'syz.2.2737': attribute type 3 has an invalid length. [ 295.557527][T16013] netlink: 'syz.2.2737': attribute type 3 has an invalid length. [ 295.762645][T16030] __nla_validate_parse: 79 callbacks suppressed [ 295.762664][T16030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2742'. [ 295.811519][T16031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2742'. [ 295.837070][T16033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2742'. [ 295.851988][T16031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.914728][T16032] netlink: 232 bytes leftover after parsing attributes in process `syz.5.2743'. [ 295.960879][T16041] netlink: 'syz.4.2744': attribute type 17 has an invalid length. [ 295.974216][T16031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.986069][T16046] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2743'. [ 296.056448][ T5888] lo speed is unknown, defaulting to 1000 [ 296.063452][ T5888] syz0: Port: 1 Link ACTIVE [ 296.136343][T14874] lo speed is unknown, defaulting to 1000 [ 296.136415][T16049] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2747'. [ 296.205724][T16055] syzkaller0: entered promiscuous mode [ 296.212005][T16055] syzkaller0: entered allmulticast mode [ 296.359639][T16065] ip6_vti0: entered allmulticast mode [ 296.382367][T16050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.552822][T16078] IPv6: Can't replace route, no match found [ 296.609824][T16081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2756'. [ 296.654954][T16084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2754'. [ 296.699023][T16086] syzkaller0: entered promiscuous mode [ 296.718646][T16086] syzkaller0: entered allmulticast mode [ 296.882037][T16097] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2762'. [ 296.907148][T16097] netlink: 260 bytes leftover after parsing attributes in process `syz.6.2762'. [ 297.082112][T16099] gre5: entered promiscuous mode [ 297.088692][T16099] gre5: entered allmulticast mode [ 297.110906][T16104] syzkaller0: entered promiscuous mode [ 297.122500][T16104] syzkaller0: entered allmulticast mode [ 297.196247][T16107] Cannot find add_set index 65532 as target [ 297.383640][T16120] validate_nla: 1 callbacks suppressed [ 297.383656][T16120] netlink: 'syz.5.2768': attribute type 2 has an invalid length. [ 297.423830][T16125] tipc: Failed to remove unknown binding: 66,0,0/2325842974:720987789/720987790 [ 297.448988][T16125] tipc: Failed to remove unknown binding: 66,0,0/2325842974:720987789/720987790 [ 297.453051][T16120] block nbd0: not configured, cannot reconfigure [ 297.693883][T16142] xt_CT: No such helper "syz1" [ 298.367377][T16184] net_ratelimit: 163 callbacks suppressed [ 298.367396][T16184] netlink: Unknown conntrack attr (type=2304, max=9) [ 298.387773][T10054] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 298.417368][T10054] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 298.537672][ T1093] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 298.559957][ T1093] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 298.617969][T10053] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 298.630057][T10053] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 298.757581][T10054] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 298.769703][T10054] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 298.782569][T16224] xt_bpf: check failed: parse error [ 298.848890][T16224] syzkaller1: entered promiscuous mode [ 298.854475][T16224] syzkaller1: entered allmulticast mode [ 298.900836][ T7446] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 298.916721][T16234] netlink: 'syz.4.2799': attribute type 1 has an invalid length. [ 298.924489][T16234] netlink: 'syz.4.2799': attribute type 2 has an invalid length. [ 298.953797][T16234] netlink: 'syz.4.2799': attribute type 1 has an invalid length. [ 298.987423][T16234] netlink: 'syz.4.2799': attribute type 2 has an invalid length. [ 299.154010][T16249] netlink: 'syz.2.2805': attribute type 7 has an invalid length. [ 299.176689][T16249] netlink: 'syz.2.2805': attribute type 8 has an invalid length. [ 299.233264][T16256] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 299.515129][T16273] pimreg: left allmulticast mode [ 299.518289][T16274] netlink: 'syz.1.2812': attribute type 13 has an invalid length. [ 299.828870][ T5831] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 299.839620][ T5831] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 299.848381][ T5831] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 299.856232][ T5831] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 299.865903][ T5831] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 299.933963][ T5835] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 299.948736][ T5835] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 299.959559][ T5835] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 299.968415][ T5835] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 299.976065][ T5835] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 300.023047][T16282] lo speed is unknown, defaulting to 1000 [ 300.030973][T16282] lo speed is unknown, defaulting to 1000 [ 300.159354][T16292] netlink: 'syz.4.2817': attribute type 15 has an invalid length. [ 300.273048][T16295] netlink: 'syz.4.2820': attribute type 33 has an invalid length. [ 300.357758][ T1093] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.371373][ T1093] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 300.482631][ T1093] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.516630][ T1093] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 300.593356][ T1093] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.606798][ T1093] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 300.700230][ T1093] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.726715][ T1093] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 301.051042][T16282] chnl_net:caif_netlink_parms(): no params data found [ 301.208959][ T1093] veth0_to_bond: left allmulticast mode [ 301.214914][ T1093] veth0_to_bond: left promiscuous mode [ 301.239133][ T1093] bridge3: port 2(veth0_to_bond) entered disabled state [ 301.270939][ T1093] veth5: left allmulticast mode [ 301.275827][ T1093] veth5: left promiscuous mode [ 301.283928][ T1093] bridge3: port 1(veth5) entered disabled state [ 301.307562][T16356] __nla_validate_parse: 17 callbacks suppressed [ 301.307581][T16356] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2835'. [ 301.448280][ T1093] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 301.710922][ T1093] bond9 (unregistering): (slave geneve3): Releasing active interface [ 301.783174][ T1093] bond4 (unregistering): (slave bridge1): Releasing backup interface [ 301.792773][ T1093] bridge1 (unregistering): left promiscuous mode [ 302.013650][ T1093] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.024081][ T1093] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.033784][ T1093] ` (unregistering): Released all slaves [ 302.044986][ T1093] bond1 (unregistering): Released all slaves [ 302.057803][ T1093] bond2 (unregistering): Released all slaves [ 302.077242][ T5835] Bluetooth: hci7: command tx timeout [ 302.173173][ T1093] bond3 (unregistering): Released all slaves [ 302.269217][ T1093] bond4 (unregistering): Released all slaves [ 302.366221][ T1093] bond5 (unregistering): Released all slaves [ 302.378423][ T1093] bond6 (unregistering): Released all slaves [ 302.390591][ T1093] bond7 (unregistering): Released all slaves [ 302.405648][ T1093] bond8 (unregistering): Released all slaves [ 302.419938][ T1093] bond9 (unregistering): Released all slaves [ 302.434643][ T1093] bond10 (unregistering): Released all slaves [ 302.449160][ T1093] bond11 (unregistering): Released all slaves [ 302.557546][ T1093] bond0 (unregistering): Released all slaves [ 302.658151][ T1093] bond12 (unregistering): Released all slaves [ 302.692273][T16356] gretap1: entered promiscuous mode [ 302.711960][T16356] gretap1: entered allmulticast mode [ 302.723514][T16362] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 302.777150][T16282] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.793268][T16282] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.802609][T16282] bridge_slave_0: entered allmulticast mode [ 302.813227][T16282] bridge_slave_0: entered promiscuous mode [ 302.830014][T16282] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.837680][T16282] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.844895][T16282] bridge_slave_1: entered allmulticast mode [ 302.853876][T16282] bridge_slave_1: entered promiscuous mode [ 302.876200][T16370] netlink: 380 bytes leftover after parsing attributes in process `syz.1.2838'. [ 302.970744][ T1093] 9: left promiscuous mode [ 303.035276][T16382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2843'. [ 303.043439][T16384] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2842'. [ 303.089672][T16282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.099450][T16384] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2842'. [ 303.120068][T16282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.129617][T16384] validate_nla: 1 callbacks suppressed [ 303.129635][T16384] netlink: 'syz.5.2842': attribute type 6 has an invalid length. [ 303.211777][T16382] macvtap1: entered promiscuous mode [ 303.218986][T16382] vlan0: entered promiscuous mode [ 303.224254][T16382] macvtap1: entered allmulticast mode [ 303.230384][T16382] vlan0: entered allmulticast mode [ 303.235512][T16382] veth0_vlan: entered allmulticast mode [ 303.245694][ T1093] tipc: Left network mode [ 303.276247][T16391] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2844'. [ 303.308252][T16282] team0: Port device team_slave_0 added [ 303.320269][T16282] team0: Port device team_slave_1 added [ 303.390921][T16389] IPVS: length: 8 != 1152 [ 303.517850][T16282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.524834][T16282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.585841][T16282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.641452][T16282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.649907][T16282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.677849][ T10] net_ratelimit: 82 callbacks suppressed [ 303.677863][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.726383][T16282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.919207][T16424] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2851'. [ 303.928857][T16425] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2851'. [ 303.955688][T16424] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2851'. [ 303.983625][T16425] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2851'. [ 304.158385][ T5835] Bluetooth: hci7: command tx timeout [ 304.372782][T16441] bond10: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 304.395966][T16441] bond10 (unregistering): Released all slaves [ 304.406741][T14874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.445307][T16282] hsr_slave_0: entered promiscuous mode [ 304.460344][T16282] hsr_slave_1: entered promiscuous mode [ 304.468575][T16282] debugfs: 'hsr0' already exists in 'hsr' [ 304.486381][T16282] Cannot create hsr debugfs directory [ 304.974870][T16456] netlink: 'syz.5.2858': attribute type 10 has an invalid length. [ 305.045819][T16456] team0: Device veth1_macvtap failed to register rx_handler [ 305.138488][T16460] netlink: 'syz.6.2859': attribute type 18 has an invalid length. [ 305.345094][ T1093] hsr_slave_0: left promiscuous mode [ 305.369813][T16475] netlink: 'syz.1.2861': attribute type 2 has an invalid length. [ 305.378279][T16475] netlink: 'syz.1.2861': attribute type 1 has an invalid length. [ 305.391128][ T1093] hsr_slave_1: left promiscuous mode [ 305.448788][T14874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.474295][ T1093] veth0_macvtap: left promiscuous mode [ 305.996908][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.006016][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.241353][ T5835] Bluetooth: hci7: command tx timeout [ 306.247606][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.473848][ T1093] vcan0 (unregistering): left allmulticast mode [ 306.481202][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.507293][T16466] syz_tun: left allmulticast mode [ 306.512446][T16466] syz_tun: left promiscuous mode [ 306.519234][T16466] bridge0: port 3(syz_tun) entered disabled state [ 306.531936][T16466] bridge_slave_0: left allmulticast mode [ 306.538631][T16466] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.551020][T16466] bridge_slave_1: left allmulticast mode [ 306.562756][T16466] bridge_slave_1: left promiscuous mode [ 306.569063][T16466] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.582839][T16466] bond0: (slave bond_slave_0): Releasing backup interface [ 306.597719][T16466] bond0: (slave bond_slave_1): Releasing backup interface [ 306.614087][T16466] team0: Port device team_slave_0 removed [ 306.632329][T16466] team0: Port device team_slave_1 removed [ 306.642375][T16466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.650735][T16466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.659870][T16466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.668066][T16466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.677539][T16466] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 306.696128][T16471] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 306.882342][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.973630][T16532] __nla_validate_parse: 2 callbacks suppressed [ 306.973647][T16532] netlink: 232 bytes leftover after parsing attributes in process `syz.5.2867'. [ 307.099391][T16533] team0: Port device team_slave_0 removed [ 307.269629][ T1093] IPVS: stop unused estimator thread 0... [ 307.385622][T16549] netlink: 'syz.6.2873': attribute type 3 has an invalid length. [ 307.493901][T16552] netlink: 'syz.4.2875': attribute type 39 has an invalid length. [ 307.514616][T16282] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 307.529746][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.552583][T16282] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 307.605690][T16557] ip6_vti0: left allmulticast mode [ 307.652946][T16282] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 307.697248][T16282] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 307.750064][T16568] netlink: 'syz.4.2880': attribute type 2 has an invalid length. [ 307.818177][T16571] veth0: entered promiscuous mode [ 307.838416][T16571] veth0: left promiscuous mode [ 307.847974][T16571] IPVS: ip_vs_add_dest(): server weight less than zero [ 307.865319][T16583] netlink: 'syz.1.2883': attribute type 7 has an invalid length. [ 307.886423][T16583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2883'. [ 308.082555][T16586] lo speed is unknown, defaulting to 1000 [ 308.088631][T16282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.092380][T16595] netlink: 'syz.6.2886': attribute type 10 has an invalid length. [ 308.141510][T16586] lo speed is unknown, defaulting to 1000 [ 308.192363][T16282] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.209532][ T7444] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.216750][ T7444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.303861][ T7444] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.311153][ T7444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.317610][ T5835] Bluetooth: hci7: command tx timeout [ 308.336107][T16606] netlink: 'syz.4.2889': attribute type 12 has an invalid length. [ 308.395127][T16606] bond5: option primary_reselect: invalid value (255) [ 308.417709][T16606] bond5 (unregistering): Released all slaves [ 308.813146][T16282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 308.898902][T16613] net_ratelimit: 3 callbacks suppressed [ 308.898922][T16613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.972648][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.994529][T16613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.017871][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.027949][T16613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.050178][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.064267][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.074785][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.098660][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.279154][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.411805][T16636] netlink: 576 bytes leftover after parsing attributes in process `syz.4.2894'. [ 309.496955][T16641] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2894'. [ 309.589316][T16282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.751303][T16282] veth0_vlan: entered promiscuous mode [ 309.810823][T16282] veth1_vlan: entered promiscuous mode [ 309.861846][T16671] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2901'. [ 310.006837][T16679] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2903'. [ 310.009674][T16282] veth0_macvtap: entered promiscuous mode [ 310.181616][T16282] veth1_macvtap: entered promiscuous mode [ 310.213583][T16691] netlink: 'syz.4.2905': attribute type 17 has an invalid length. [ 310.227486][T16691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2905'. [ 310.240214][T16690] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2906'. [ 310.248603][T16691] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2905'. [ 310.360020][T16701] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2908'. [ 310.386072][T16282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.432378][T16282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.511335][T10054] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.533407][T10054] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.553081][T10054] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.563909][T10054] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.778714][ T7444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.805921][ T7444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.885254][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.903961][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.454622][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 311.464937][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 311.474391][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 311.483401][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 311.502158][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 311.615271][T16749] lo speed is unknown, defaulting to 1000 [ 311.651631][T16749] lo speed is unknown, defaulting to 1000 [ 312.155719][T16782] lo speed is unknown, defaulting to 1000 [ 312.273186][T16782] lo speed is unknown, defaulting to 1000 [ 312.554599][T16749] chnl_net:caif_netlink_parms(): no params data found [ 312.722706][T16808] __nla_validate_parse: 1 callbacks suppressed [ 312.722725][T16808] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2936'. [ 312.872664][T10054] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.882516][T10054] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.962878][T16749] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.987451][T16749] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.994714][T16749] bridge_slave_0: entered allmulticast mode [ 313.005912][T16749] bridge_slave_0: entered promiscuous mode [ 313.016046][T10054] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.029516][T10054] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.050135][T16749] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.060583][T16749] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.070999][T16749] bridge_slave_1: entered allmulticast mode [ 313.079422][T16749] bridge_slave_1: entered promiscuous mode [ 313.241258][T16749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.285172][T16749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.482128][T16749] team0: Port device team_slave_0 added [ 313.519730][T16749] team0: Port device team_slave_1 added [ 313.587353][T16749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.594598][T16749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.597363][ T5831] Bluetooth: hci4: command tx timeout [ 313.626824][T16749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.661621][T16749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.669345][T16749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.719010][T16749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.858381][T16749] hsr_slave_0: entered promiscuous mode [ 313.908444][T16749] hsr_slave_1: entered promiscuous mode [ 313.914894][T16749] debugfs: 'hsr0' already exists in 'hsr' [ 313.947004][T16749] Cannot create hsr debugfs directory [ 313.952618][T16852] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2949'. [ 314.048874][T16865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2953'. [ 314.239066][T16873] team0: Device gtp1 is up. Set it down before adding it as a team port [ 314.360256][T16873] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2956'. [ 314.393242][T16873] netlink: 'syz.1.2956': attribute type 11 has an invalid length. [ 314.606393][T16749] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.627571][T16749] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 314.641579][T16749] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.652314][T16749] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 314.716588][ C0] net_ratelimit: 16 callbacks suppressed [ 314.716606][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.797130][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.801705][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2970'. [ 314.842816][T16749] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.865009][T16749] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 314.885019][T16924] netlink: 'syz.5.2971': attribute type 10 has an invalid length. [ 314.892047][T16749] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.903614][T16749] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 314.958921][T16917] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2970'. [ 314.970551][T16924] batman_adv: batadv0: Adding interface: netdevsim0 [ 314.994041][T16924] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.034859][T16924] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 315.089025][T16749] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.100306][T16749] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 315.110645][T16749] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.121233][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.121597][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.140182][T16749] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 315.152217][T16938] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2974'. [ 315.178303][T16939] lo: entered promiscuous mode [ 315.190408][T16937] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 315.205113][T16939] netlink: 'syz.2.2975': attribute type 2 has an invalid length. [ 315.207354][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.214272][T16935] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2974'. [ 315.234681][T16937] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 315.244543][T16939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.293854][T16749] netdevsim netdevsim4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.309452][T16749] netdevsim netdevsim4 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 315.320716][T16749] netdevsim netdevsim4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.321081][T16939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2975'. [ 315.331461][T16749] netdevsim netdevsim4 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 315.357984][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.391459][T16942] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 315.403726][T16942] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2976'. [ 315.502253][T16950] netlink: 'syz.1.2977': attribute type 7 has an invalid length. [ 315.510934][T16950] netlink: 'syz.1.2977': attribute type 8 has an invalid length. [ 315.585115][T16952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.587473][T16749] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 315.607770][T16749] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 315.627633][T16749] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 315.644176][T16749] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 315.679205][ T5831] Bluetooth: hci4: command tx timeout [ 315.822373][T16749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.837921][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.894606][T16749] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.918483][T10054] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.925783][T10054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.967240][ T7444] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.974411][ T7444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.023985][T16984] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 316.393319][T17004] syzkaller0: entered promiscuous mode [ 316.399596][T17004] syzkaller0: entered allmulticast mode [ 316.589621][T16749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.753221][T17028] xt_connbytes: Forcing CT accounting to be enabled [ 317.058803][T17052] siw: device registration error -23 [ 317.104807][T17050] lo speed is unknown, defaulting to 1000 [ 317.121654][T16749] veth0_vlan: entered promiscuous mode [ 317.127602][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.152907][T17050] lo speed is unknown, defaulting to 1000 [ 317.173869][T16749] veth1_vlan: entered promiscuous mode [ 317.332229][T16749] veth0_macvtap: entered promiscuous mode [ 317.356229][T16749] veth1_macvtap: entered promiscuous mode [ 317.403834][T16749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.429003][T16749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.449153][T10054] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.460204][T10054] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.476179][T10054] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.486101][T10054] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.764493][ T5831] Bluetooth: hci4: command tx timeout [ 317.774403][T17073] __nla_validate_parse: 11 callbacks suppressed [ 317.774420][T17073] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3017'. [ 317.787973][ T3482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.805728][ T3482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.841358][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.868609][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.016223][T17075] bond7: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 318.040870][T17075] bond7: entered promiscuous mode [ 318.100651][T17075] bond7: entered allmulticast mode [ 318.117518][T17075] 8021q: adding VLAN 0 to HW filter on device bond7 [ 318.541372][T17111] vcan0: entered promiscuous mode [ 318.554376][T17111] vcan0: entered allmulticast mode [ 318.574914][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 318.589333][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 318.599470][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 318.615023][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 318.623362][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 318.744880][T17113] lo speed is unknown, defaulting to 1000 [ 318.763701][T17118] tipc: Started in network mode [ 318.777723][T17118] tipc: Node identity e0000001, cluster identity 4711 [ 318.784653][T17118] tipc: Enabling of bearer rejected, failed to enable media [ 318.836175][T17113] lo speed is unknown, defaulting to 1000 [ 318.887647][T17124] sctp: [Deprecated]: syz.5.3031 (pid 17124) Use of int in maxseg socket option. [ 318.887647][T17124] Use struct sctp_assoc_value instead [ 319.142435][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.181702][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.427214][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.469168][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.483172][T17148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3037'. [ 319.494865][T17150] netlink: 'syz.6.3038': attribute type 9 has an invalid length. [ 319.510467][T17148] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3037'. [ 319.762684][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.792811][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.837941][ T5835] Bluetooth: hci4: command tx timeout [ 319.875415][T17175] : entered promiscuous mode [ 319.900022][T17165] netlink: 'syz.2.3042': attribute type 9 has an invalid length. [ 319.909089][T17165] netlink: 'syz.2.3042': attribute type 11 has an invalid length. [ 319.929531][T17165] netlink: 'syz.2.3042': attribute type 12 has an invalid length. [ 319.948105][T17165] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.3042'. [ 319.950556][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.986085][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.181299][T17193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3048'. [ 320.564070][ T50] team0: left allmulticast mode [ 320.574170][ T50] team_slave_0: left allmulticast mode [ 320.594450][ T50] team_slave_1: left allmulticast mode [ 320.673354][T17224] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3054'. [ 320.680585][ T50] team0: left promiscuous mode [ 320.688689][ T50] team_slave_0: left promiscuous mode [ 320.694352][ T50] team_slave_1: left promiscuous mode [ 320.707462][T17221] netlink: 'syz.5.3053': attribute type 17 has an invalid length. [ 320.715390][T17221] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3053'. [ 320.717909][ T5835] Bluetooth: hci3: command tx timeout [ 320.728737][T17221] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3053'. [ 320.741249][ T50] bridge0: port 3(team0) entered disabled state [ 320.771421][ T50] bridge_slave_1: left allmulticast mode [ 320.777818][ T50] bridge_slave_1: left promiscuous mode [ 320.783600][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.908893][T17239] netlink: 'syz.2.3057': attribute type 4 has an invalid length. [ 320.923219][T17245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3058'. [ 321.363982][ T50] dvmrp0 (unregistering): left allmulticast mode [ 321.404692][T17262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3061'. [ 321.894815][ T50]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.905137][ T50]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.914826][ T50]  (unregistering): Released all slaves [ 322.012608][ T50] bond0 (unregistering): (slave veth11): Releasing active interface [ 322.022026][ T50] bond0 (unregistering): Released all slaves [ 322.127389][ T50] bond1 (unregistering): Released all slaves [ 322.139831][ T50] bond2 (unregistering): Released all slaves [ 322.250391][ T50] bond3 (unregistering): Released all slaves [ 322.356056][ T50] bond4 (unregistering): Released all slaves [ 322.457059][ T50] bond5 (unregistering): (slave veth7): Releasing active interface [ 322.465017][ T50] veth0_to_bond: entered promiscuous mode [ 322.473043][ T50] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 322.484599][ T50] bond5 (unregistering): (slave veth9): Releasing active interface [ 322.494903][ T50] bond5 (unregistering): Released all slaves [ 322.592195][ T50] bond6 (unregistering): Released all slaves [ 322.604135][ T50] bond7 (unregistering): Released all slaves [ 322.676304][T17235] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 322.682474][T17235] syzkaller1: linktype set to 823 [ 322.778224][ T50] : left promiscuous mode [ 322.799531][ T5835] Bluetooth: hci3: command tx timeout [ 322.890864][T17113] chnl_net:caif_netlink_parms(): no params data found [ 322.916440][T17270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3065'. [ 322.975253][ T50] tipc: Left network mode [ 323.092231][T17279] net_ratelimit: 10 callbacks suppressed [ 323.092250][T17279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 323.093603][T17275] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3066'. [ 323.329939][T17113] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.340621][T17113] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.349035][T17113] bridge_slave_0: entered allmulticast mode [ 323.362189][T17113] bridge_slave_0: entered promiscuous mode [ 323.389171][T17113] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.396387][T17113] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.404091][T17113] bridge_slave_1: entered allmulticast mode [ 323.413922][T17113] bridge_slave_1: entered promiscuous mode [ 323.500268][T17303] netlink: 'syz.6.3072': attribute type 22 has an invalid length. [ 323.525115][T17303] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3072'. [ 323.570535][T17306] siw: device registration error -23 [ 323.593822][T17113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.655374][T17113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.706534][T17312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3074'. [ 323.835163][T17113] team0: Port device team_slave_0 added [ 323.883244][T17113] team0: Port device team_slave_1 added [ 323.940541][T17327] netlink: 'syz.2.3080': attribute type 1 has an invalid length. [ 323.946796][ T30] audit: type=1804 audit(1770327357.537:6): pid=17328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3079" name="/newroot/447/cgroup.controllers" dev="tmpfs" ino=2325 res=1 errno=0 [ 323.964294][T17327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3080'. [ 324.033251][ T30] audit: type=1800 audit(1770327357.547:7): pid=17328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3079" name="cgroup.controllers" dev="tmpfs" ino=2325 res=0 errno=0 [ 324.070234][T17332] netlink: 'syz.4.3081': attribute type 2 has an invalid length. [ 324.091784][T17336] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3082'. [ 324.121795][T17113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.131615][T17338] netlink: 'syz.4.3081': attribute type 1 has an invalid length. [ 324.139656][T17338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.154513][T17113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.192781][T17113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.303572][T17113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.317447][T17113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.352938][T17113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.658441][T17355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3086'. [ 324.660012][T17336] infiniband : set down [ 324.672321][T17336] infiniband : added ipvlan0 [ 324.734636][T17336] RDS/IB: : added [ 324.742080][T17336] smc: adding ib device  with port count 1 [ 324.750487][ T30] audit: type=1804 audit(1770327358.317:8): pid=17358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3087" name="/newroot/380/cgroup.controllers" dev="tmpfs" ino=1946 res=1 errno=0 [ 324.781380][ T30] audit: type=1800 audit(1770327358.347:9): pid=17358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3087" name="cgroup.controllers" dev="tmpfs" ino=1946 res=0 errno=0 [ 324.807170][T17336] smc: ib device  port 1 has no pnetid [ 324.863879][T17113] hsr_slave_0: entered promiscuous mode [ 324.877698][ T5835] Bluetooth: hci3: command tx timeout [ 324.889934][T17113] hsr_slave_1: entered promiscuous mode [ 324.914477][T17113] debugfs: 'hsr0' already exists in 'hsr' [ 324.945653][T17113] Cannot create hsr debugfs directory [ 325.291591][T17380] netlink: 'syz.4.3093': attribute type 10 has an invalid length. [ 325.316062][T17380] team0: Port device dummy0 added [ 325.356819][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.365388][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.373904][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.429431][T17386] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3095'. [ 325.448522][T17388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3094'. [ 326.262495][ T50] hsr_slave_0: left promiscuous mode [ 326.274551][ T50] hsr_slave_1: left promiscuous mode [ 326.282377][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.302781][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.342077][ T50] vlan0: left allmulticast mode [ 326.347041][ T50] veth0_vlan: left allmulticast mode [ 326.352368][ T50] vlan0: left promiscuous mode [ 326.358685][ T50] veth1_macvtap: left promiscuous mode [ 326.364254][ T50] veth1_vlan: left promiscuous mode [ 326.370004][ T50] veth0_vlan: left promiscuous mode [ 326.398176][T17439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3104'. [ 326.957028][ T5835] Bluetooth: hci3: command tx timeout [ 327.370522][ T50] team0 (unregistering): Port device team_slave_1 removed [ 327.423376][ T50] team0 (unregistering): Port device team_slave_0 removed [ 327.815879][T14874] lo speed is unknown, defaulting to 1000 [ 327.816797][T17444] tipc: Enabling of bearer rejected, failed to enable media [ 327.822926][T14874] syz2: Port: 1 Link DOWN [ 327.990388][T17113] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 328.011332][T17463] netlink: 'syz.2.3108': attribute type 2 has an invalid length. [ 328.021549][T17464] __nla_validate_parse: 3 callbacks suppressed [ 328.021568][T17464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3107'. [ 328.054628][T17463] 9: entered promiscuous mode [ 328.086718][T17113] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 328.122704][T17113] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 328.149275][T17113] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 328.277656][T17476] syzkaller1: entered promiscuous mode [ 328.315428][T17476] syzkaller1: entered allmulticast mode [ 328.338150][T17484] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3109'. [ 328.577978][T17490] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3111'. [ 328.699650][T17492] netlink: 'syz.2.3112': attribute type 16 has an invalid length. [ 328.727246][T17113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.782023][T17113] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.806120][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.813352][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.849420][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.856596][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.931127][T17113] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 328.967113][T17113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.234908][T17515] netlink: 'syz.2.3115': attribute type 1 has an invalid length. [ 329.289950][T17515] 8021q: adding VLAN 0 to HW filter on device bond1 [ 329.341636][T17519] bond1: (slave geneve2): making interface the new active one [ 329.358882][T17519] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 329.456119][T17113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.560355][T17526] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3116'. [ 329.582028][T17113] veth0_vlan: entered promiscuous mode [ 329.589540][T17525] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3116'. [ 329.612154][T17113] veth1_vlan: entered promiscuous mode [ 329.684813][T17113] veth0_macvtap: entered promiscuous mode [ 329.712592][T17113] veth1_macvtap: entered promiscuous mode [ 329.762332][T17531] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3117'. [ 329.762689][T17113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.798884][T17113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.818726][ T1093] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.833135][ T1093] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.869525][ T1093] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.887989][ T1093] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.023825][T10053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.034529][T10053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.065137][T17537] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3118'. [ 330.090490][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.099926][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.359042][T17549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3120'. [ 330.547525][T17562] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3123'. [ 330.585425][T17561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3122'. [ 330.600662][T17561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.645727][T17561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.684058][T17561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.716308][T17561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.772747][T17571] netlink: 'syz.2.3125': attribute type 1 has an invalid length. [ 330.844952][T17572] netlink: 'syz.4.3127': attribute type 2 has an invalid length. [ 330.854814][T17572] netlink: 'syz.4.3127': attribute type 2 has an invalid length. [ 330.909785][ T50] IPVS: stop unused estimator thread 0... [ 331.056229][T17587] netlink: 'syz.5.3131': attribute type 1 has an invalid length. [ 331.116935][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.125446][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.133930][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.215578][T17587] bond8: entered promiscuous mode [ 331.244629][T17587] 8021q: adding VLAN 0 to HW filter on device bond8 [ 331.293778][T17597] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 331.312932][T17597] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 331.411026][T17595] x_tables: unsorted underflow at hook 4 [ 331.429371][T17601] netlink: 'syz.4.3135': attribute type 1 has an invalid length. [ 331.450559][T17593] 8021q: adding VLAN 0 to HW filter on device bond8 [ 331.459061][T17593] bond8: (slave vti0): The slave device specified does not support setting the MAC address [ 331.469986][T17593] bond8: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 331.483305][T17593] bond8: (slave vti0): making interface the new active one [ 331.492806][T17593] vti0: entered promiscuous mode [ 331.499557][T17593] bond8: (slave vti0): Enslaving as an active interface with an up link [ 331.753842][T17621] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 331.828762][T17621] netlink: 'syz.2.3138': attribute type 13 has an invalid length. [ 331.839638][ T31] INFO: task syz.3.1008:9552 blocked for more than 143 seconds. [ 331.850888][ T31] Not tainted syzkaller #0 [ 331.855873][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.867702][ T31] task:syz.3.1008 state:D stack:25904 pid:9552 tgid:9546 ppid:5823 task_flags:0x400040 flags:0x00080002 [ 331.878196][T17638] bond9: Unable to set up delay as MII monitoring is disabled [ 331.881124][ T31] Call Trace: [ 331.891523][ T31] [ 331.894575][ T31] __schedule+0x14ea/0x5050 [ 331.898826][T17621] netlink: 'syz.2.3138': attribute type 58 has an invalid length. [ 331.899651][ T31] ? __pfx___schedule+0x10/0x10 [ 331.911928][ T31] ? schedule+0x90/0x360 [ 331.916283][ T31] schedule+0x164/0x360 [ 331.921100][ T31] schedule_preempt_disabled+0x13/0x30 [ 331.928270][ T31] __mutex_lock+0x7fe/0x1300 [ 331.932994][ T31] ? __mutex_lock+0x5ac/0x1300 [ 331.938386][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 331.944649][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 331.951077][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 331.957234][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 331.962736][ T31] nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 331.969366][ T31] ? kasan_save_track+0x3e/0x80 [ 331.974329][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 331.979710][ T31] ? __kmalloc_node_track_caller_noprof+0x558/0x7f0 [ 331.986430][ T31] ? kmalloc_reserve+0x136/0x290 [ 331.992079][ T31] ? __alloc_skb+0x204/0x390 [ 331.997333][ T31] ? netlink_dump+0x1ef/0xe80 [ 332.002110][ T31] ? __netlink_dump_start+0x5cb/0x7e0 [ 332.008421][ T31] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 332.014428][ T31] ? genl_rcv_msg+0x5e8/0x7a0 [ 332.019694][ T31] ? netlink_rcv_skb+0x232/0x4b0 [ 332.024747][ T31] ? netlink_unicast+0x80f/0x9b0 [ 332.031130][ T31] ? netlink_sendmsg+0x813/0xb40 [ 332.036179][ T31] ? ____sys_sendmsg+0xa68/0xad0 [ 332.041727][ T31] ? ___sys_sendmsg+0x2a5/0x360 [ 332.047518][ T31] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 332.052734][ T31] ? do_syscall_64+0xe2/0xf80 [ 332.058082][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.064253][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 332.072274][ T31] ? rcu_is_watching+0x15/0xb0 [ 332.077740][ T31] ? trace_kmalloc+0x1f/0xb0 [ 332.082829][ T31] ? __kmalloc_node_track_caller_noprof+0x577/0x7f0 [ 332.090183][ T31] ? __build_skb_around+0x22d/0x3c0 [ 332.095507][ T31] genl_dumpit+0x10b/0x1b0 [ 332.100558][ T31] netlink_dump+0x722/0xe80 [ 332.105180][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 332.111077][ T31] ? genl_start+0x499/0x6c0 [ 332.115671][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 332.121507][ T31] genl_family_rcv_msg_dumpit+0x213/0x310 [ 332.127891][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 332.134886][ T31] ? genl_get_cmd+0x4a8/0x930 [ 332.140332][ T31] ? __pfx_genl_start+0x10/0x10 [ 332.145191][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 332.150595][ T31] ? __pfx_genl_done+0x10/0x10 [ 332.155468][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 332.162114][ T31] genl_rcv_msg+0x5e8/0x7a0 [ 332.167388][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 332.172437][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 332.179602][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 332.184988][ T31] ? __skb_clone+0x63/0x7a0 [ 332.189652][ T31] netlink_rcv_skb+0x232/0x4b0 [ 332.194425][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 332.199508][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 332.204812][ T31] ? genl_rcv+0x19/0x40 [ 332.209223][ T31] ? down_read+0x272/0x2e0 [ 332.213647][ T31] ? genl_rcv+0xd/0x40 [ 332.218097][ T31] genl_rcv+0x28/0x40 [ 332.222077][ T31] netlink_unicast+0x80f/0x9b0 [ 332.227340][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 332.233286][ T31] ? __alloc_skb+0x193/0x390 [ 332.238457][ T31] ? netlink_sendmsg+0x650/0xb40 [ 332.243436][ T31] ? skb_put+0x11b/0x210 [ 332.248328][ T31] netlink_sendmsg+0x813/0xb40 [ 332.253356][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.259143][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 332.264263][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 332.270073][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.275450][ T31] ____sys_sendmsg+0xa68/0xad0 [ 332.280760][ T31] ? __might_fault+0xaf/0x130 [ 332.285445][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.291274][ T31] ? import_iovec+0x73/0xa0 [ 332.295785][ T31] ___sys_sendmsg+0x2a5/0x360 [ 332.300966][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 332.305933][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 332.311700][ T31] ? futex_wake+0x4ac/0x580 [ 332.316265][ T31] ? __fget_files+0x2a/0x420 [ 332.321427][ T31] ? __fget_files+0x3a0/0x420 [ 332.326121][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 332.331477][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 332.338140][ T31] ? rcu_is_watching+0x15/0xb0 [ 332.342918][ T31] do_syscall_64+0xe2/0xf80 [ 332.347924][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.353985][ T31] ? trace_irq_disable+0x37/0x100 [ 332.359615][ T31] ? clear_bhb_loop+0x60/0xb0 [ 332.364298][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.371655][ T31] RIP: 0033:0x7fe92e39aeb9 [ 332.376130][ T31] RSP: 002b:00007fe92f2f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.385103][ T31] RAX: ffffffffffffffda RBX: 00007fe92e615fa0 RCX: 00007fe92e39aeb9 [ 332.393438][ T31] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000003 [ 332.401997][ T31] RBP: 00007fe92e408c1f R08: 0000000000000000 R09: 0000000000000000 [ 332.410366][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.418993][ T31] R13: 00007fe92e616038 R14: 00007fe92e615fa0 R15: 00007ffe10854b88 [ 332.427551][ T31] [ 332.430714][ T31] [ 332.430714][ T31] Showing all locks held in the system: [ 332.432704][T17638] bond9 (unregistering): Released all slaves [ 332.440040][ T31] 3 locks held by kworker/u8:0/12: [ 332.451137][ T31] #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 332.464259][ T31] #1: ffffc90000117bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 332.475997][ T31] #2: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 332.492462][ T31] 1 lock held by khungtaskd/31: [ 332.497684][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 332.508089][ T31] 1 lock held by dhcpcd/5489: [ 332.512845][ T31] #0: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_deladdr+0x1c1/0x790 [ 332.522692][ T31] 2 locks held by getty/5587: [ 332.527752][ T31] #0: ffff88814cd8d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 332.537899][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 332.549311][ T31] 3 locks held by kworker/u8:12/7444: [ 332.554691][ T31] #0: ffff88814cc79148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 332.567470][ T31] #1: ffffc9001b997bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 332.580691][ T31] #2: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 332.590306][ T31] 2 locks held by syz.0.561/7982: [ 332.595448][ T31] #0: ffffffff8fa1a170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.603866][ T31] #1: ffffffff8e879368 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 332.614390][ T31] 3 locks held by syz.3.1008/9552: [ 332.619705][ T31] #0: ffffffff8fa1a170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.628218][ T31] #1: ffff88807d1896f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 332.639142][ T31] #2: ffffffff8e879368 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 332.650350][ T31] 4 locks held by kworker/u8:14/10053: [ 332.655814][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 332.666085][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 332.675316][ T31] #2: ffff8880b86260d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x8ee/0xf30 [ 332.684368][ T31] #3: ffffffff9a2a70c8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 332.694872][ T31] 1 lock held by syz.4.3135/17600: [ 332.700248][ T31] #0: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: ppp_release+0x87/0x1f0 [ 332.709181][ T31] 1 lock held by syz.2.3138/17620: [ 332.714289][ T31] #0: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: bpf_xdp_link_release+0x29/0x540 [ 332.728410][ T31] 1 lock held by syz.2.3138/17621: [ 332.733528][ T31] #0: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 332.743292][ T31] 3 locks held by syz.5.3141/17638: [ 332.748755][ T31] #0: ffffffff8fef5058 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 332.758449][ T31] #1: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 332.767668][ T31] #2: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 332.778898][ T31] 2 locks held by syz.5.3141/17639: [ 332.784124][ T31] #0: ffffffff8fef5058 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 332.793654][ T31] #1: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 332.803019][ T31] 2 locks held by syz.6.3143/17646: [ 332.808540][ T31] #0: ffff88807df14708 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 332.818807][ T31] #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 332.830025][ T31] [ 332.832930][ T31] ============================================= [ 332.832930][ T31] [ 332.842599][ T31] NMI backtrace for cpu 1 [ 332.842615][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 332.842630][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 332.842656][ T31] Call Trace: [ 332.842663][ T31] [ 332.842670][ T31] dump_stack_lvl+0xe8/0x150 [ 332.842694][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 332.842715][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 332.842739][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 332.842763][ T31] sys_info+0x135/0x170 [ 332.842780][ T31] watchdog+0xf90/0xfe0 [ 332.842803][ T31] ? watchdog+0x209/0xfe0 [ 332.842825][ T31] kthread+0x726/0x8b0 [ 332.842847][ T31] ? __pfx_watchdog+0x10/0x10 [ 332.842863][ T31] ? __pfx_kthread+0x10/0x10 [ 332.842884][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.842906][ T31] ? __pfx_kthread+0x10/0x10 [ 332.842924][ T31] ret_from_fork+0x51b/0xa40 [ 332.842957][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 332.842978][ T31] ? __switch_to+0xc82/0x1410 [ 332.843004][ T31] ? __pfx_kthread+0x10/0x10 [ 332.843024][ T31] ret_from_fork_asm+0x1a/0x30 [ 332.843059][ T31] [ 332.843066][ T31] Sending NMI from CPU 1 to CPUs 0: [ 332.863945][T17639] bond9: Unable to set up delay as MII monitoring is disabled [ 332.867364][ C0] NMI backtrace for cpu 0 [ 332.867377][ C0] CPU: 0 UID: 0 PID: 17639 Comm: syz.5.3141 Not tainted syzkaller #0 PREEMPT(full) [ 332.867395][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 332.867404][ C0] RIP: 0010:pie_calculate_probability+0x377/0x7e0 [ 332.867428][ C0] Code: cf be 22 f8 4c 01 fb 49 81 fe cb 9a 3b 00 49 0f 42 df 4c 8d 3c 2b 49 bc 00 00 00 00 00 fc ff df 48 8b 44 24 20 42 80 3c 20 00 <4c> 8b 74 24 48 74 08 4c 89 f7 e8 ea 06 8b f8 4d 89 3e 31 ff 48 89 [ 332.867441][ C0] RSP: 0018:ffffc90000007b88 EFLAGS: 00000246 [ 332.867455][ C0] RAX: 1ffff92004423012 RBX: fffffff0a3da8872 RCX: ffff8880202d8000 [ 332.867466][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 00000000003b9aca [ 332.867476][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 332.867485][ C0] R10: dffffc0000000000 R11: fffff52000000f74 R12: dffffc0000000000 [ 332.867495][ C0] R13: 0019999999999998 R14: 0000000000000000 R15: fffffff0a3da8872 [ 332.867506][ C0] FS: 00007fe30a1d56c0(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000 [ 332.867518][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 332.867528][ C0] CR2: 00007ffd3fa26de0 CR3: 0000000078542000 CR4: 00000000003526f0 [ 332.867541][ C0] Call Trace: [ 332.867548][ C0] [ 332.867560][ C0] fq_pie_timer+0x288/0x5b0 [ 332.867579][ C0] ? fq_pie_timer+0x4d/0x5b0 [ 332.867599][ C0] call_timer_fn+0x192/0x5a0 [ 332.867617][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 332.867634][ C0] ? call_timer_fn+0xd4/0x5a0 [ 332.867651][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 332.867674][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.867692][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 332.867717][ C0] __run_timer_base+0x652/0x8b0 [ 332.867734][ C0] ? ktime_get+0x45/0x200 [ 332.867755][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 332.867775][ C0] ? sched_clock_cpu+0x74/0x440 [ 332.867796][ C0] run_timer_softirq+0xb7/0x170 [ 332.867813][ C0] handle_softirqs+0x22a/0x7c0 [ 332.867828][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 332.867844][ C0] __irq_exit_rcu+0x5f/0x150 [ 332.867856][ C0] irq_exit_rcu+0x9/0x30 [ 332.867868][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 332.867883][ C0] [ 332.867888][ C0] [ 332.867893][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 332.867908][ C0] RIP: 0010:vprintk_emit+0x45d/0x560 [ 332.867923][ C0] Code: 0f 84 44 ff ff ff e8 e2 45 21 00 fb eb 44 e8 da 45 21 00 e8 a5 cd f3 09 4d 85 f6 74 94 e8 cb 45 21 00 fb 48 c7 c7 60 c7 54 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 3b 1b [ 332.867934][ C0] RSP: 0018:ffffc9000c196900 EFLAGS: 00000293 [ 332.867946][ C0] RAX: ffffffff81a33185 RBX: ffffffff81a32fff RCX: ffff8880202d8000 [ 332.867957][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e54c760 [ 332.867966][ C0] RBP: ffffc9000c1969b0 R08: ffffffff8fef1a77 R09: 1ffffffff1fde34e [ 332.867978][ C0] R10: dffffc0000000000 R11: fffffbfff1fde34f R12: 0000000000000000 [ 332.867988][ C0] R13: 000000000000003b R14: 0000000000000200 R15: 1ffff92001832d24 [ 332.868000][ C0] ? vprintk_emit+0x2cf/0x560 [ 332.868014][ C0] ? vprintk_emit+0x455/0x560 [ 332.868030][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 332.868048][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 332.868067][ C0] _printk+0xdd/0x130 [ 332.868087][ C0] ? __pfx__printk+0x10/0x10 [ 332.868103][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 332.868121][ C0] ? __netdev_printk+0x36f/0x480 [ 332.868137][ C0] netdev_err+0x11e/0x180 [ 332.868156][ C0] ? bond_opt_parse+0x49d/0x8a0 [ 332.868172][ C0] ? __pfx_netdev_err+0x10/0x10 [ 332.868198][ C0] _bond_option_delay_set+0x128/0x2c0 [ 332.868217][ C0] __bond_opt_set+0x252/0xd50 [ 332.868234][ C0] bond_changelink+0x4ad/0x2770 [ 332.868254][ C0] ? __pfx_bond_changelink+0x10/0x10 [ 332.868275][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 332.868294][ C0] ? timer_init_key+0x161/0x2b0 [ 332.868312][ C0] bond_newlink+0x83/0xd0 [ 332.868325][ C0] ? __pfx_bond_newlink+0x10/0x10 [ 332.868338][ C0] rtnl_newlink_create+0x329/0xb70 [ 332.868358][ C0] ? __mutex_lock+0x5ac/0x1300 [ 332.868374][ C0] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 332.868392][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 332.868412][ C0] ? ns_capable+0x89/0xe0 [ 332.868431][ C0] rtnl_newlink+0x1666/0x1be0 [ 332.868453][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 332.868467][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.868497][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 332.868517][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 332.868533][ C0] ? kmem_cache_free+0x195/0x610 [ 332.868547][ C0] ? nlmon_xmit+0xb0/0x100 [ 332.868567][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 332.868588][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 332.868600][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 332.868613][ C0] ? __dev_queue_xmit+0x274/0x3850 [ 332.868630][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 332.868642][ C0] ? __dev_queue_xmit+0x274/0x3850 [ 332.868662][ C0] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 332.868684][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 332.868703][ C0] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 332.868719][ C0] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 332.868734][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 332.868747][ C0] ? ref_tracker_free+0x693/0x840 [ 332.868763][ C0] ? __copy_skb_header+0xa3/0x4a0 [ 332.868781][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 332.868797][ C0] ? __skb_clone+0x63/0x7a0 [ 332.868821][ C0] netlink_rcv_skb+0x232/0x4b0 [ 332.868835][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 332.868851][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 332.868870][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 332.868888][ C0] netlink_unicast+0x80f/0x9b0 [ 332.868910][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 332.868927][ C0] ? __alloc_skb+0x193/0x390 [ 332.868943][ C0] ? netlink_sendmsg+0x650/0xb40 [ 332.868956][ C0] ? skb_put+0x11b/0x210 [ 332.868973][ C0] netlink_sendmsg+0x813/0xb40 [ 332.868991][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.869006][ C0] ? lruvec_stat_mod_folio+0x70/0x4b0 [ 332.869022][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 332.869039][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 332.869055][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.869069][ C0] ____sys_sendmsg+0xa68/0xad0 [ 332.869085][ C0] ? __might_fault+0xaf/0x130 [ 332.869106][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.869127][ C0] ? import_iovec+0x73/0xa0 [ 332.869147][ C0] ___sys_sendmsg+0x2a5/0x360 [ 332.869162][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 332.869181][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 332.869214][ C0] ? __fget_files+0x2a/0x420 [ 332.869228][ C0] ? __fget_files+0x3a0/0x420 [ 332.869247][ C0] __x64_sys_sendmsg+0x1bd/0x2a0 [ 332.869264][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 332.869281][ C0] ? __se_sys_rt_sigprocmask+0x22f/0x2a0 [ 332.869299][ C0] ? do_user_addr_fault+0xc7c/0x1360 [ 332.869322][ C0] do_syscall_64+0xe2/0xf80 [ 332.869337][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.869350][ C0] ? trace_irq_disable+0x37/0x100 [ 332.869363][ C0] ? clear_bhb_loop+0x60/0xb0 [ 332.869379][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.869393][ C0] RIP: 0033:0x7fe30bf9aeb9 [ 332.869405][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.869417][ C0] RSP: 002b:00007fe30a1d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.869431][ C0] RAX: ffffffffffffffda RBX: 00007fe30c216090 RCX: 00007fe30bf9aeb9 [ 332.869442][ C0] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 332.869452][ C0] RBP: 00007fe30c008c1f R08: 0000000000000000 R09: 0000000000000000 [ 332.869461][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.869470][ C0] R13: 00007fe30c216128 R14: 00007fe30c216090 R15: 00007ffc6bc51928 [ 332.869488][ C0] [ 332.893225][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 332.893244][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 332.893264][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 332.893275][ T31] Call Trace: [ 332.893283][ T31] [ 332.893291][ T31] vpanic+0x1e0/0x670 [ 332.893318][ T31] panic+0xc5/0xd0 [ 332.893337][ T31] ? __pfx_panic+0x10/0x10 [ 332.893357][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 332.893387][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 332.893414][ T31] watchdog+0xfda/0xfe0 [ 332.893437][ T31] ? watchdog+0x209/0xfe0 [ 332.893461][ T31] kthread+0x726/0x8b0 [ 332.893482][ T31] ? __pfx_watchdog+0x10/0x10 [ 332.893499][ T31] ? __pfx_kthread+0x10/0x10 [ 332.893520][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.893542][ T31] ? __pfx_kthread+0x10/0x10 [ 332.893562][ T31] ret_from_fork+0x51b/0xa40 [ 332.893588][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 332.893610][ T31] ? __switch_to+0xc82/0x1410 [ 332.893634][ T31] ? __pfx_kthread+0x10/0x10 [ 332.893654][ T31] ret_from_fork_asm+0x1a/0x30 [ 332.893689][ T31] [ 332.899703][ T31] Kernel Offset: disabled