last executing test programs: 2.283256361s ago: executing program 1 (id=459): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a0000000000006111a400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bind$alg(r0, &(0x7f0000000700)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0xffffffffffffffce) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@call={0x85, 0x0, 0x0, 0x3b}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000011c0)={0x20, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x4, 0x3}]}, 0x20}}, 0xc010) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) bind$rds(r5, &(0x7f00000007c0)={0x2, 0x4e24, @loopback}, 0x10) bind$bt_sco(r5, &(0x7f0000000780), 0x8) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0xf4, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20004000}, 0x10) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000000), 0x0) socket(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbe, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x94, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000005c0)={'gre0\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x8, 0x7800, 0x9, 0x5, {{0x22, 0x4, 0x1, 0x37, 0x88, 0x68, 0x0, 0x15, 0x4, 0x0, @private=0xa010101, @broadcast, {[@end, @ssrr={0x89, 0x17, 0x83, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @initdev={0xac, 0x1e, 0x3, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @end, @ra={0x94, 0x4}, @end, @cipso={0x86, 0x12, 0x1, [{0x7, 0xc, "427ff244d925ddf153db"}]}, @lsrr={0x83, 0x17, 0xaa, [@empty, @local, @dev={0xac, 0x14, 0x14, 0x32}, @empty, @empty]}, @lsrr={0x83, 0xb, 0x6a, [@remote, @dev={0xac, 0x14, 0x14, 0x3a}]}, @timestamp={0x44, 0x14, 0xfb, 0x0, 0x6, [0x4, 0xfffffffd, 0x5, 0x1]}, @generic={0x83, 0xd, "751f54f5ea7eab0b52dc72"}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x80, r3, 0x4, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20044041}, 0x20004840) 1.891689433s ago: executing program 1 (id=463): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x6c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x6ff05}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_TTL={0x5, 0x8, 0x6}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x6c}}, 0x0) 1.888246893s ago: executing program 0 (id=467): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000f322774845fbc76a5274848cee6d00000000001c000a800b00017fff656eff001400030067656e6576653100"/70], 0x50}}, 0x0) 1.879984021s ago: executing program 1 (id=468): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x4, 0x8, 0x3, 0x20, 0x0, 0x0, 0x0, [@sadb_key={0x1e, 0x8, 0x730, 0x0, "636472ddfef22bede770be34024ae2d95d499eefd4b5975d12387696107b1b9c3a90d89d7a3ad624c9ff58bc310e25d1709bf5e8131cbd1e86b38b3d01f1f1768a7b3063a25a213e7ae880d9cb27e5388c3486e8bbcac9d5e8eeb89900d72b96b4380c5f334dd73399870debd9a8cadf8b366f9417216f5fe623eb9b95baf17e8d2fde41152ae5b0e50343c294a0962b4e73c154c198e180f1a49a1ead3818fa1e7bae87e5450623432dfdd6886438bb3be7b6e0c02133a6b4a24bedfedf141c1e153b5aa9ca8eeb4c59c36042123fb182c2c6f78a3a3cbfce7ed81e8229ed4336ba63369fff"}]}, 0x100}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="05000063b56fec316a22dfd6a3f34680b75e000300000000000000", @ANYRES64=0x0, @ANYBLOB="660a000001"], 0x48}}, 0x0) read(r6, &(0x7f0000001480)=""/4096, 0x38) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES64=r4, @ANYRESDEC=r5, @ANYBLOB="0a0001", @ANYRES16=r6, @ANYBLOB="f54f0eaf3420fac77f4939d0b95943b5e3652e0b02cc391b1ed2b700249ace35f7cdfc3269821ca36fe123ad07f2d4dce7cfbc6a04de0764015ce8f333466c652bfd4d64577df226c9cb6f34fc0c9684896be0135ea28da2fd605f094b49d62b097fcb8ef90b190fe7c7a312e269ab9af26aeff19fd54f04237cc81e2f003fe6dccad5009b08f709", @ANYRES16], 0x48}}, 0x0) 1.849169548s ago: executing program 0 (id=471): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, 0x0, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@mcast2, 0x0}, &(0x7f0000000180)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x4, 0xf3, 0x40, 0xffff, 0x0, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x40, 0x7, 0x8fc8}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x700, 0x0, 0xe8e, 0x0, {{0x1a, 0x4, 0x1, 0x0, 0x68, 0x66, 0x0, 0x1, 0x2, 0x0, @multicast2, @broadcast, {[@timestamp_addr={0x44, 0x14, 0x6d, 0x1, 0x3, [{@empty, 0x9}, {@remote, 0xb7}]}, @timestamp_prespec={0x44, 0x34, 0x89, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x10000}, {@remote, 0x10001}, {@rand_addr=0x64010101, 0x5}, {@local, 0x6}, {@remote}]}, @lsrr={0x83, 0xb, 0x5e, [@remote, @empty]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x80, 0x8706, 0xa6, 0x7, {{0x1e, 0x4, 0x0, 0x1c, 0x78, 0x64, 0x0, 0x1, 0x4, 0x0, @private=0xa010102, @broadcast, {[@noop, @cipso={0x86, 0x3b, 0x3, [{0x0, 0x3, 'p'}, {0x7, 0xb, "9f9252511f3b4ac83d"}, {0x1, 0xd, "3100d0af3b867036001034"}, {0x0, 0x8, "a23827eb9c4a"}, {0x5, 0x2}, {0x5, 0xa, "b588cce3b9bf07a4"}, {0x7, 0x3, "ed"}, {0x2, 0x3, "1b"}]}, @lsrr={0x83, 0x1b, 0x80, [@rand_addr=0x64010101, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x11}, @local, @dev={0xac, 0x14, 0x14, 0x19}]}, @cipso={0x86, 0xa, 0x2, [{0x7, 0x4, "9878"}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'team_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r15, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x80000001, 0x3, 0x8, 0xb, 0x101, 0xffffcbef, 0x183, 0x5, 0x7, 0x1, 0x14, 0xb, 0x1a, 0x3, 0xd0b, 0x38f4}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB="e8010000", @ANYRES16=r2, @ANYBLOB="00032dbd7000fbdbdf25190000005c000180140002006e657464657673696d3000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000140002006272696467655f736c6176655f3100000800030002000000080003000200000008000300010000002c0001801400020076657468305f766c616e00000000000014000200697036746e6c30000000000000000000340001801400020076657468315f746f5f7465616d0000001400020069705f7674693000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="27000190da35c1ae", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=r6, @ANYBLOB="08000300020000002000018014000200776c616e3000000000000000000000000800030003000000500001801400020076657468315f766972745f776966690008000100", @ANYRES32=r7, @ANYBLOB="08000300030000001400020076657468315f746f5f626f6e640000001400020073797a5f74756e000000000000000000380001801400020073797a6b616c6c65723000000000000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="080003000300000008000100", @ANYRES32=r10, @ANYBLOB="240001800800030003000000080003000000000008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="280001801400020070696d7265670000000000000000000008000100", @ANYRES32=r15, @ANYBLOB="0800030000000000"], 0x1e8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x80}}, 0x24054010) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710433000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1.740515052s ago: executing program 3 (id=473): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x21}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) (async) syz_emit_ethernet(0x32, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa02000800490000240000000000009078ac1414bbac1414358907efffffffff860600000000000000eff5bc7c1c7ce117351fb5a969928b6c108b939e9649b068e5d710f3dffaf7b97c9c7c77d295e0b2346068e851a2513db07e87164b2afcb013087335ec7db0bfc20de6cb6c330b881057c3d999f8179fb26a18c5e162d4b0a587d8b6b42cbdf5a3b94bcf30286217c4c5c42e54e104c5998b55b56d060600000071b88b832071141344169e0ce40e5795422add554fbba13d94308491362e982ec461629efba1"], 0x0) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) (async) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x5, 0x4c3, 0x0, {}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "d5bea2784d005b17"}}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x40090) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1.569586738s ago: executing program 3 (id=474): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x20, 0x2000, 0x2, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x3}, @NL80211_ATTR_TXQ_LIMIT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r1, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x4c}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000841) 1.51032369s ago: executing program 3 (id=476): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a080006"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@typedef={0x8, 0x0, 0x0, 0x8, 0x2}, @volatile]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x2e]}}, &(0x7f0000000200)=""/201, 0x3b, 0xc9, 0x1}, 0x20) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000c80)={'veth0_to_batadv\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@loopback, 0x0, 0x0, 0x0, 0x100, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, {{@in6=@loopback}, 0x0, @in=@remote}}, 0xe8) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in6=@empty}}, &(0x7f0000000280)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="61123000000000006113680000000000bf2000000000000015000600071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd70}, 0x2d) sendmsg$nl_xfrm(r4, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000380)=ANY=[@ANYBLOB="980400001300000327bd7000fbdbdf2520010000000000000000000000000000fe8000000000000000000000000000aa4e2108754e23000d020000002b000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="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"], 0x498}, 0x1, 0x0, 0x0, 0x8890}, 0x44008004) 1.45796682s ago: executing program 0 (id=477): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207f00000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000000c0)=0x60) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f00000003c0)=0x395, 0x4) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r4) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, r5, 0x3, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}]}, 0x24}}, 0x4044844) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x82, &(0x7f00000001c0)={r6, 0x40, 0x8}, 0x8) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000400)="e7fd26fd563cbf02e85de7338b8e2714", 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000240)={r6, @in={{0x2, 0x4e23, @broadcast}}}, &(0x7f0000000100)=0x84) 1.341306439s ago: executing program 3 (id=479): r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x1f) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) 1.251108144s ago: executing program 2 (id=481): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r0, 0xd7735000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) 1.149668698s ago: executing program 2 (id=482): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076"], 0xe8}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async) r2 = socket(0x14, 0x2, 0x4) getsockopt$inet_buf(r2, 0x0, 0x4, 0x0, &(0x7f0000000ac0)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) 1.017640792s ago: executing program 4 (id=484): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x1c00, @remote, 0x10001}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x0) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f000000a080)) (async) syz_emit_ethernet(0x116, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)={0x0, 0x1, [0x468, 0xd04, 0xee0, 0x742]}) 965.830315ms ago: executing program 1 (id=485): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x2f}]}}]}, 0x3c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r5}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001200)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket(0x10, 0x3, 0x6) r9 = socket(0x10, 0x3, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000000)={0xdd, 0x4, 0x3, 0x21, 0x0, 0x9, 0xe8, 0xa0, 0x7, 0x3, 0x3, 0x3, 0x86, 0xf}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f0000000080)={r11, @in6={{0xa, 0x4e23, 0x5, @remote, 0x3}}}, &(0x7f0000000240)=0x84) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r13 = socket(0x28, 0x1, 0x0) connect$packet(r13, &(0x7f0000000500)={0x28}, 0x14) connect$packet(r13, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SIOCX25GDTEFACILITIES(r13, 0x89ea, &(0x7f00000018c0)) 900.935716ms ago: executing program 4 (id=486): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="80010000100001000000000000000000ac574400000000000000007f000001000000000000000000000000000000000000000002000000000a00ff8000000000", @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x180}}, 0x0) 803.790399ms ago: executing program 4 (id=487): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x4000004) (async) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012bbd7000fddbdf250500000005000600030000000800110000000c6b07bff0959adffd1a00bfa2bb2f5c76d71e2e21a49f0fd672378dc9d9107a8c57ce1d1446984a14242e652c4381563d868153d97cc06fc16b59ab8a3b", @ANYRES32=r1, @ANYBLOB="08001100ffffffff06001c008100000008000a0002000000050021000000000008001700", @ANYRES32=r3, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40044) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400ccb5070cda0113800900010076657468000000000400", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x2}, {0x0}, &(0x7f0000001880)=[{0x0}], 0x1}}], 0x48, 0x24080080}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r6, 0x29, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="07e3fb265a669270e44c65c47bbd030aa7841bb4405ca8b9fe2e0ef1a13d7f81fe07353baf03de812806670e258eddef96a60d7433ff69e00e4a516fae16706bc2e53e76aaced0c3d7ae4e51b85c25400cecc8f578a2fa2bea3c01b0b0c20e44afaa17e76aa6c6442559a611809d14afa0d0b5b7ce402486b59cc00b8c199108fa50c9dd74b5838398e05b51ce48df95d6213ca29a71c93c16e8903c40754c8c14a65e97848ca0f5666a"], 0x8) (async) shutdown(r6, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}) (async) write(r8, &(0x7f0000000100)="520003000100b8", 0x7) r10 = socket(0x10, 0x3, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0xffffffffffffffd7, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x20004000) (async) sendmsg$nl_route_sched(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2a, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x6, 0xfff1}, {0xfff1, 0x2}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) 720.118441ms ago: executing program 1 (id=488): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x97}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) sendmmsg$inet6(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001700)='y', 0x1}], 0x1}}], 0x1, 0x0) close(r1) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040), 0x4) 657.832527ms ago: executing program 4 (id=489): r0 = socket(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x84, 0x0, 0x0, @fd=r3}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) (rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000400)="e8", &(0x7f0000000480)=@tcp6=r0, 0x1}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x24, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 652.531068ms ago: executing program 2 (id=490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, 0x1, 0x7, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) (async) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000180)=0x8, 0x4) (async) r1 = socket(0x2a, 0x0, 0x4) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x77}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8008) (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004014}, 0x42) (async) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0xb, 0x6, 0x401, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) (async) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, 0xd, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x5) (async) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000006c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r2, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x14, 0x34, @random="aa93a341952fd725c5fa7b88ab128b88"}]}, 0x30}}, 0x4000011) (async, rerun: 64) sendmsg$nl_generic(r1, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xe4, 0x2c, 0x800, 0x70bd2a, 0x25dfdbff, {0x18}, [@generic="b99af1b92702b3c0c7656711b1cd4545f93b83b85c48699aa5c96648d9c277b7ae942424e13a9cbe72af5e5cfb1ac8ef8daeffa6cd64ef251007143e2f20c4a4a0077fdb3dffe85b558e9b03620a04c732c628e9be3bc2a4f9404a750ab031d693b8eb043d7497447481a2c8e46c74f61ea296236ec2ef927e2558767c86c17bcd03e8e24729ec418726e81db65369e75a7ee46934853c06f0fc4798539de13775a48be34ace285c8d3905203ef1b0a9d1dda802ef9b2cacfbb081012fc02695e3f0d1c813a8785513fadbd0d882"]}, 0xe4}, 0x1, 0x0, 0x0, 0x1}, 0x2004c080) (async, rerun: 64) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000a00), &(0x7f0000000a80)=0x68) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x80, 0x3, 0x8, 0x301, 0x0, 0x0, {0x8, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x899d}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x20008004) (async) r5 = accept4$vsock_stream(r1, &(0x7f0000000c00)={0x28, 0x0, 0x2711}, 0x10, 0x800) listen(r5, 0x8) r6 = accept4$inet(r1, 0x0, &(0x7f0000000c40), 0x800) accept4$inet(r6, &(0x7f0000000c80)={0x2, 0x0, @multicast1}, &(0x7f0000000cc0)=0x10, 0x800) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r1) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d80), r1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000ec0)={'gretap0\x00', &(0x7f0000000e00)={'syztnl0\x00', 0x0, 0x30, 0x88, 0x9, 0x1, {{0x19, 0x4, 0x1, 0x17, 0x64, 0x65, 0x0, 0x9a, 0x2f, 0x0, @loopback, @broadcast, {[@timestamp_addr={0x44, 0x2c, 0x8b, 0x1, 0x6, [{@empty, 0x3789}, {@private=0xa010101, 0x4}, {@empty, 0x1}, {@local, 0x9}, {@multicast1, 0x7}]}, @generic={0x88, 0xf, "24e2ef5d8b3b87872be9b9506c"}, @timestamp_prespec={0x44, 0x14, 0xea, 0x3, 0xa, [{@rand_addr=0x64010101, 0x6}, {@multicast1, 0x9b}]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f00000021c0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002180)={&(0x7f0000000f00)={0x1244, r8, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0x108, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xfc, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'pci\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '0000:00:10.0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '@[-@$(@&{:]*-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff0001}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'pci\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xabb5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x25}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff00}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_WOL_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_WOL_SOPASS={0x59, 0x3, "4e3e624f40bac1f349bb9d584d9a77fb0a18611726c68de33d569a5bc10506d11ca02cd2c8cc9a9696fec42bf1842ea74ae40728d2d42de11fc4a73f78784b6b3d3abb4d13a5fee36366516ad7019dbbe8260c0988"}, @ETHTOOL_A_WOL_SOPASS={0x3e, 0x3, "baff6a790ce89b100aec3b7c88b239eb12c9cba56d1cfc00b2c5fffca8872c0363bf06464396a604bd0b34869358a5d5a450d7be97aba1fe0d98"}, @ETHTOOL_A_WOL_SOPASS={0x25, 0x3, "9930b77ddbfa2496ae64f9a098c4184e6230c8cb61aac96efb6e56c9aa55dafa1a"}, @ETHTOOL_A_WOL_MODES={0x1018, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x13e}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}]}, 0x1244}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x1c, r7, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40010) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000002300), r0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000002440)={0x2, 0x3, 0x0, 0x7ff, 0x9, 0xb, 0x7, 0x8}, 0x20) 568.728357ms ago: executing program 0 (id=491): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x3, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @empty}}}}]}]}, 0x60}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d103000008000340000000012c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a310000"], 0x4ec}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 541.848806ms ago: executing program 1 (id=492): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)={0x44, r1, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000180), &(0x7f0000000080)=0x68) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r7, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r4, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 449.191567ms ago: executing program 2 (id=493): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000000)={'dummy0\x00', @random="e80300001000"}) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x118, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x104, 0x11, 0x0, 0x1, [@nested={0x100, 0xcf, 0x0, 0x1, [@generic="d478b585fcf4962925eb81095dd3d92e983e841d6ef7368187237f5e91a74d57e8aaee05ec6319", @generic="8f3bec68ef62803fe98daf2de4c76a713091d7d093f16995a391c42d5dfc312e9b67f3e831135df00a399b5234733f156436b0ed25721632972efdd7a775655ff99c2abdc650ece6458a5f9db07c36adc6ebcfe60b70e5a54a83041bc8e1c08dc0afd69868eddb1e9634f84ef01b3f9c31b8c76a0e2ac9dba5adc10a3c9a2360cb2fe6e11e9efcaff1b39dd49895a112f947e4923d9b5c428a37b673f33f3ed02d225807d47efe0a590665b49bf5eaa0890c512f2a01eb6713c6b3539790dca05a2632596c591745bbbf4953c0a783a881f8cf755e"]}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x84}, 0x300) 447.194288ms ago: executing program 3 (id=494): syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000007000000000086dd609a0d0000442fff7c000000000000000000000000000000fe8000000000000000000000000000aa042088be0000000000000800000086dd080088be00000000100600020100000000000000080022eb00000000203200000200000000000000000000000800655800000000"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x50000, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, &(0x7f00000001c0)=0x1c) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03007f7201005204020000ab9f2627980003c36195e5fd8712a477b64911ea3e67ce26ddf085c2ad7a09cbacf1388e8b555fd97ff1b8e2b87ace9a9355605924461303e95ee03985f8016bee3d5309dbf7c3e813cc7082910f5aefcc04000000000000001182de7792c4b6a63edf2325588df22fdd36033785313c50000f58e1f796502d027aaf47513a2b33adfa5faa43c60c7d4664c03adc89febe688995fbc42b06e38ca58730c5e41d000000000000fc9e748847c4"], 0xb7) 442.927847ms ago: executing program 4 (id=495): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000000d1401d2d9cd7000040000000800010000000000080003"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) sendfile(r2, r2, 0x0, 0x9) close(r1) 405.350475ms ago: executing program 0 (id=496): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x42b5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3f, &(0x7f0000000480)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xa2, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0), 0x8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x50) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x14, 0x3, 0x8fb, 0x8, 0x210, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x1e, &(0x7f00000001c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x0, 0x100}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}], &(0x7f00000002c0)='GPL\x00', 0x7, 0x86, &(0x7f0000000300)=""/134, 0x41100, 0x44, '\x00', r3, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x4, 0x2, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000008c0)=[r6, r7, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000900)=[{0x1, 0x4, 0xa, 0x1}, {0x3, 0x2, 0x5, 0x3}, {0x5, 0x1, 0x1, 0xa}], 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xa, 0x5, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x6}, [@map_val={0x18, 0x9, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xff800000}]}, &(0x7f0000000a40)='syzkaller\x00', 0x1, 0x52, &(0x7f0000000a80)=""/82, 0x81e00, 0x0, '\x00', r3, @fallback=0x2, r5, 0x8, &(0x7f0000000b00)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x1, 0xe, 0x400, 0x5637}, 0x10, r4, r5, 0x7, 0x0, &(0x7f0000000b80)=[{0x0, 0x3, 0xb, 0x4}, {0x2, 0x1, 0x4, 0x3}, {0x2, 0x3, 0x5, 0x6}, {0x1, 0x1, 0xe, 0xc}, {0x3, 0x1, 0xd}, {0x3, 0x3, 0xf, 0x8}, {0x1, 0x5, 0xf, 0x3}], 0x10, 0x2}, 0x94) r9 = accept$inet(r5, &(0x7f0000000cc0)={0x2, 0x0, @empty}, &(0x7f0000000d00)=0x10) setsockopt$MRT_DONE(r9, 0x0, 0xc9, 0x0, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000f80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x15c, r10, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc89}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4943a4b7}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x54d}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf1}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6c3}]}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}]}]}, 0x15c}}, 0x840) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001000)={'ip_vti0\x00', &(0x7f0000000fc0)={'gretap0\x00', r3, 0x20, 0x700, 0x84c2, 0x100000, {{0x6, 0x4, 0x1, 0x20, 0x18, 0x66, 0x0, 0xfa, 0x29, 0x0, @multicast2, @rand_addr=0x64010102, {[@end]}}}}}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000001100)={&(0x7f0000001040), 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x18, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000080) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0x7, &(0x7f0000001140)={0x10, 0x4, 0x2}, 0x10) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001400)={0x6, 0x11, &(0x7f0000001180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1da, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6, 0x0, 0x2, 0x8001, 0x3}, @map_fd={0x18, 0x9, 0x1, 0x0, r5}, @map_fd={0x18, 0x4, 0x1, 0x0, r7}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000001240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000012c0)={0x0, 0xe, 0x0, 0xfffffff1}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001300)=[r6, r7, r5, r7, r7, r8, r8], &(0x7f0000001340)=[{0x2, 0x2, 0x9, 0x9}, {0x5, 0x4, 0x3, 0x3}, {0x4, 0x2, 0x5, 0x3}, {0x2, 0x3, 0x3, 0xa}, {0x4, 0x4, 0x2, 0x4}, {0x2, 0x3, 0xb, 0x2}, {0x0, 0x4, 0xc, 0xc}, {0x0, 0x1, 0x3, 0x7}, {0x2, 0x3, 0x2, 0x5}]}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f00000014c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0xb, [@type_tag={0x5, 0x0, 0x0, 0x12, 0x3}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x72, 0x0, 0x76, 0x2}, @union={0x5, 0x9, 0x0, 0x5, 0x0, 0x88, [{0xf, 0x4, 0x81}, {0x0, 0x4, 0x6}, {0x2, 0x2, 0x6}, {0x8, 0x3, 0x2}, {0xb, 0x4, 0x5}, {0x8, 0x5, 0xffff}, {0xc, 0x2, 0x80000000}, {0xb, 0x5, 0x3}, {0x4, 0x4, 0x1000}]}, @const={0xf, 0x0, 0x0, 0xa, 0x3}, @union={0x2, 0x2, 0x0, 0x5, 0x1, 0x40, [{0xd, 0x2, 0x5}, {0x7, 0x0, 0x6}]}]}, {0x0, [0x30, 0x5f, 0x0, 0x0, 0x30, 0x61, 0x2e, 0x2e, 0x30]}}, &(0x7f00000015c0)=""/177, 0xe7, 0xb1, 0x0, 0x8, 0x10000}, 0x28) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r5) sendmsg$NL80211_CMD_DEAUTHENTICATE(r11, &(0x7f0000001900)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001740)={0x168, r13, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x23, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x7}, 0x80, 0x7, @device_a, 0x9}}, @chsw_timing={0x68, 0x4, {0x2b72, 0x7b}}, @supported_rates]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x2e, 0x2a, [@prep={0x83, 0x1f, {{}, 0x3, 0xe1, @broadcast, 0xffffffdb, @void, 0xe, 0x10001, @broadcast, 0x1f}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1, 0xb6, 0x5}}, @dsss={0x3, 0x1, 0xe}]}, @NL80211_ATTR_IE={0xf1, 0x2a, [@ht={0x2d, 0x1a, {0x1, 0x1, 0x1, 0x0, {0x7, 0xbc0, 0x0, 0xba, 0x0, 0x0, 0x1, 0x1}, 0x6, 0x8, 0x5}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @fast_bss_trans={0x37, 0xaa, {0x0, 0x6, "d7b986c4316833ba9fed91038d167e26", "24b83e79df30b45bca84d909797fd759801b10b07e3341f1cb0726ec8b68f9be", "eda56d4642623cdcd97c023d48aaec60af6505a3d1b292b763ba209b585f9eb0", [{0x3, 0x16, "c2bd7c508c3c5e33c0af4ad4c126686438dc050b64bb"}, {0x3, 0x7, "77f4646134b2e1"}, {0x4, 0x4, "84d3b0c6"}, {0x2, 0x3, "97f137"}, {0x2, 0x1c, "6dedc453995e6aa0d5195a68366a6a944508fe2d9561d552e1e21f13"}, {0x4, 0xc, "5dc8675a1674f6a3b7b30dcc"}]}}, @gcr_ga={0xbd, 0x6, @broadcast}, @sec_chan_ofs={0x3e, 0x1}, @perr={0x84, 0x15, {0x6, 0x1, [{{0x0, 0x1}, @broadcast, 0x4, @value=@broadcast, 0x6}]}}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000001dc0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x384, 0x9, 0xa, 0x5, 0x0, 0x0, {0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_EXPRESSIONS={0x2a4, 0x12, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x13}]}}}, {0x288, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x274, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_IMMEDIATE_DATA={0x260, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5f, 0x1, "7245d621e22bfd3d4a6ee07d4fc1797bd96816cc1db0d2a842b7b287f558d5637812cda0b1531f23776454f2d1e1c78c30d2d73ab9d6997ec5460a6ceb656f5273f2768c5942e3783c53c9bc9df4f41b514da8fced6e9ef5508ed6"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xe6, 0x1, "7851386053fa8696f2e2ba8e09e1c962e7aa80cb46206b5820c8e722ad7be68f2e55c84b0eb7c632e37b9c0a25c48b8095176e078c96a95a3400943fd76b88691e4017d1961411cb802cf8f8d58dbfe62bc668aa07a04eb0fb10a10cca64835eba051796963e9286058a2aab00b068cc55c9b2081a6f3e79a02e8c99d0f2bd9d06d88404f78056729c260c8db5fa23ee13fdc03c50a37e3a9428117ff5cc65a474ffde601d7d03dd1beb2e34db6fdcce52e514dad7b74741b6c9175d60042537396e6cb88b1387ee804197f6414bbe764a3d1f43832a86c019ead8613a44e93fdfb9"}, @NFTA_DATA_VALUE={0x7a, 0x1, "d88d217ace6795c466e27ba439f352da66bb5b212187e8d96e3fb0b23c00e8467e7b375197cbc3bfaae0ac4ed4499d3d4900aee778236ac782b04e0acf7e9b712a12c8a803f5363222da375c6bb7e83be20caf0969236a19ac1ac7b2aabbefa5872020ed2e5e272b5de7aee8bde08d81a8860e60654c"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x26, 0x1, "af90ba1f383b189d473c77db739008ef1dba4ea6f8186bb35a579af58c5fb597f269"}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_SET_USERDATA={0xb5, 0xd, 0x1, 0x0, "6c306384f2e1353675b9029e1c9e4744ab4883e851f45f229345d92f78820a5532e3eb89c589425018edc3248b281359da3ef4c939c5cb66b4f14e435b5e552a25b81cdda468f177d7aebac378dbb40e51fb2f0a5ce1bc57e87c37b4e60825574babab1a4c90409f7c954801e243768063631518412faf41648572b5fafe1a41fa4e07c33a95444d852ab842b351a3c833b5af38e687ff167feed501da47fb9f68e9991931406f739fdf17021f10105cb9"}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3c8}, 0x1, 0x0, 0x0, 0x4}, 0x0) getpeername(r0, &(0x7f0000001e00)=@un=@abs, &(0x7f0000001e80)=0x80) ioctl$PPPOEIOCDFWD(r5, 0xb101, 0x0) r14 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r14, 0x8915, &(0x7f0000001ec0)={'ip6_vti0\x00', {0x2, 0x0, @dev}}) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x10, 0xb, &(0x7f0000001f00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x65da}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000001f80)='syzkaller\x00', 0x85c, 0x5a, &(0x7f0000001fc0)=""/90, 0x41100, 0x8, '\x00', r3, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002040)={0x2, 0xd, 0x200000, 0x4}, 0x10, r4, r12, 0x2, &(0x7f0000002080)=[r1, r7, r2, r6, r7, r1, r1, r5, r14, r6], &(0x7f00000020c0)=[{0x5, 0x4, 0xb, 0xc}, {0x0, 0x5, 0xa, 0xa}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002480)={r15, 0x0, 0x60, 0xe9, &(0x7f00000021c0)="69d8434e6f455eda5bff75db84520712aa2340f6eba089bf94fd6fa09c73abe89f14e280ffffaeaadd8005ec1bfa19a88a2867fb8889e220392e6ba22358b7f8e862a34faa17592df51cf7e05b31aa0ceb958ca4e09d1ede2f5d0df99d96362a", &(0x7f0000002240)=""/233, 0x8, 0x0, 0xb, 0xc1, &(0x7f0000002340)="52fa4037a0f6e0f519790c", &(0x7f0000002380)="4a2f6efe159b34d975940a3fc87fff12f587d438bf1d7ca7c523a358706729453bd637dd39c1ffec165598e1a21a9d8a5fcd06bba9ee80880ad9c1728a4a43ae7a8da8bbf1d71f3f40e173ee35030ccb3f3c837ca9d0292c4072b65494cd65f742196300277b19398d9c2c54d1446e395ddbc459bdf47b028c2da53747d371fd1c23083181e57089f84f6ed40ca6674abb4b61ece145cdb5eea1098a9d802e8b1e0e9ea4eaa657b331ce5880b64975b777da305ae5d6a10342f267d537c9b4c975", 0x2, 0x0, 0x3}, 0x50) 253.747548ms ago: executing program 3 (id=497): r0 = socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket(0x18, 0x0, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@updpolicy={0x3b4, 0x19, 0x1, 0x70bd2c, 0x25dfdbfe, {{@in=@private=0xa010102, @in6=@mcast1, 0x4e20, 0x9, 0x4e24, 0x20, 0xa, 0x20, 0x80, 0x5e}, {0x0, 0x9ab8, 0x9, 0x2, 0x6, 0x200, 0x8, 0x54}, {0x8000000000000003, 0x6, 0x72b1, 0x4e}, 0x4, 0x0, 0x0, 0x0, 0x3, 0x2}, [@algo_comp={0xf5, 0x3, {{'lzs\x00'}, 0x568, "55e356c4f6d87293c81b5b2b2db5082848e0a2dbc2d3b0ca2ed76b9c1c6be632d948793f20965884b9f80dd67cee42d302b3e1550191c17b679c51c197becb6457393cd180f7ee6c0aa7a578f23660f29c95e992a8bafef3aef852522b130f3047827aaaa7a8844bf8ef3846804445c7084984902cccf076814b6dd9ad00a87e9bef222cbaa6b18e65111057539ef8b3aff89d0db5458dacfb2dbe699ee871b495b6559d01f71c7e9c7d6f396e"}}, @srcaddr={0x14, 0xd, @in=@broadcast}, @XFRMA_SET_MARK={0x8, 0x1d, 0x6f}, @replay_esn_val={0x24, 0x17, {0x2, 0x70bd25, 0x70bd29, 0x70bd26, 0x70bd26, 0x950a, [0x6, 0xfffffffe]}}, @policy_type={0xa}, @algo_auth={0xe5, 0x1, {{'blake2b-512-generic\x00'}, 0x4e8, "bbcc2513e952f607b58f4f2bf7545eadba7fa6b6bbe2951d06bc20a2ab8bffe736478eb0c6cc1c804a3d3421a4cbcf6c82d73ddf3c61ae67f831e32d49ca9a9803649f41197abdff92fb87ef5b8b20c917ded26cebd29deeef113890af00e99258459d73bf667e391237fcc96b69fda2b0c2d73395f68b7f2db9820be388df5381839c0219dea079f53fe3839bbc437219c2bdb30798e9b6fb720c4c49"}}, @algo_aead={0x89, 0x12, {{'rfc4106-gcm-aesni\x00'}, 0x1e8, 0x140, "4b25e54240d7121505c6b19bd25d7e015f642e378aa6dea4d77d645877606cc65b5940e64de31915e90fdd88cd3c78d0195fcb583fbcb7c02e93d4952d"}}, @tmpl={0x44, 0x5, [{{@in6=@private1, 0x535, 0x6c}, 0xa, @in6=@empty, 0x3506, 0x4, 0x2, 0x8c, 0xcb5e, 0x8, 0x7}]}]}, 0x3b4}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e60, 0x22, @mcast2, 0xd}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) sendto$inet6(r3, &(0x7f00000001c0)="805ef154", 0x4, 0x3b00, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x2}, {0x0, 0xb400, 0x2, 0x100000000000000, 0x0, 0x6}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x157, 0xfffffff7, 0xae8}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x70}}, 0xf0}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r4, 0x4040942c, &(0x7f0000000300)={0x0, 0xceb, [0x1000, 0x80000001, 0x3, 0x9, 0x1, 0x8000000000000000]}) r6 = socket$kcm(0x2, 0x3, 0x2) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000100), 0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x0, 0x4, 0x0, 0x3, 0x14, 0x2}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xb0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "31150048d5e06bdc339f0b82e56e05e9a3f461bf8f05c607f304e7fe0700221b", "b54970b8807c69e8aba2815e90ed451c3c1a9dff75f0f264e44cbb999c8f292e5aa143fd63ea1886e0cd425df0d8e5e7", "2bed86cd87cd326b66a3ca343e29e347dc61214ad793ad9f48b4d287", {"b15c14be998215153aaf76bbf0aead9a", "5cd7bcd4dc8e1acb0a78f4793cfd119c"}}}}}, 0xbe) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x8000000003, 0x4, 0x0, 0x0, 0x800003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x2) socket$tipc(0x1e, 0x5, 0x0) 208.907726ms ago: executing program 4 (id=498): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) poll(&(0x7f00000001c0)=[{r2, 0x2}, {r3, 0x1102}], 0x2, 0xc511) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendto$packet(r4, &(0x7f0000000040)="2ddd71", 0x3, 0x4000000, &(0x7f0000000180)={0x11, 0x1a, r5, 0x1, 0x7, 0x6, @broadcast}, 0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) syz_emit_ethernet(0x55, &(0x7f0000000240)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60a70ddb00003a6cfe880000000000000000000000000001ff0200000000000000000000000000013a00000600000000fe80000000000000000000000000001cfe880000000000000000000000000001fc0100000000000000000000000000010000000000000000000000000000000100000000000000000000ffffac1414bb2f000000000000000001000000000000ff5c8117a0576a28506d0a4a67a62b6617f0069d3b544f27b0de317bc87558f732616ac8cf19fd229faab8432ff5adda3aacb4618fe92a8e39d8e9f88e1524c888a8c182d227f023749ec16ec75ab71fce44c4017aec37f24b5a341b90628e796552acef0b5504df6c3b64b985fd4b987d78c62bcba436eed9e6e8704b8763b2d1e2383f5babddf7f815f03acf0b4bef1b4462a1bdba01d62b69bcec5359569a"], 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000010000000ac1414bb000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000020000000000000000000000000000000000000000009000000000000000000000000000000006f56000000000000000000000000000000000000000000000001000000000000000a000000000000008000"/112], 0xb8}}, 0x0) 189.924709ms ago: executing program 0 (id=499): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)={0x30, r2, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x30}}, 0x20000000) (async) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2, @mcast1, 0x5, 0x3}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000a40)="f4000900062b2c25fe80000000000000dc8b66cc00000000000000000000000000000000e4986919", 0x28}], 0x1}, 0x0) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xbe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async, rerun: 32) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0xffffffffffffff56, 0x10, 0x503, 0x70bd26, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r6}, @IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1000009, 0x81}}]}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x80000001}}]}]}}}, @IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x9c}}, 0x0) (async, rerun: 64) sendmsg$ETHTOOL_MSG_WOL_SET(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x248, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_SOPASS={0x52, 0x3, "549e9fcacaa45c8a4b659d74cb8b170b10ca9f10c447bf5645041ed55b6f3114af19516d76699749ad81ee388b44516b126159aeead5ca94fab9598ad667e4deab6041ff757ea379fd8d13bdf2bb"}, @ETHTOOL_A_WOL_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_WOL_MODES={0x74, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x6f, 0x5, "48c85891cd20e5451a40fb40df5c9a8acb18cfd98017c7f0f4d3ef652720a485c9cd9fbc0869df87386cd684046d20bb41e5ba3f6502ce11b81e32c0393c3537d136cef81442be3f3d3e39d15e8f493afc1cb7e209906fc3d56fb85906ae7774c9c969dd2e609a3a517587"}]}, @ETHTOOL_A_WOL_MODES={0x110, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffb7e}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x862}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000001}, @ETHTOOL_A_BITSET_MASK={0xa7, 0x5, "87e6e58c9f1928ce456de400d18ae75cc6e576d8c1f921ad9b823ac4a2bb713d523ef3fd4c07fd06dbb6dbf253634f022a23e0faf50b65baef959ed45326b3de573811be1ebb61d52f11a3ab7a424623d211e0e269b83f842fc92b7f012b9b5c62ce9e7d6155cf14cb0259487097690b1e77b5e936ecbb72b60830fcd8ad6c4d9143cd2e20b8d5a387f39a4b62b3eb5953f661f1bb1ee54d0ebf908e23070c763cf694"}, @ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '$@^),[.+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}]}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x800}, 0xc000) (async, rerun: 64) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x34, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x810) 137.925288ms ago: executing program 2 (id=500): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001400030400000000000000542d"], 0x44}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x34, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x300}}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x42}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044864}, 0x1084) sendmsg$IEEE802154_START_REQ(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x4c, r6, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x80}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xff}, @IEEE802154_ATTR_PAN_COORD={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040050) sendmsg$netlink(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="14010000200001010000000000000000020100800c00"], 0x114}], 0x1}, 0x0) 0s ago: executing program 2 (id=501): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000300)=ANY=[@ANYBLOB="e00000027f00000100000000010000007f00000180c553191854663434800377d61d13c7061b36c1e2bd36e6ffbcc41efc8dbb378ca8ef9dc3850dc2f12febe7cf0395208e7ebbdc40faa9811b35399b79592dd55aea53d361e4c0ee"], 0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000240)={'tunl0\x00', r3, 0x700, 0x700, 0x4, 0x3, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x66, 0x0, 0x9, 0x29, 0x0, @broadcast, @remote, {[@generic={0x94, 0x2}, @cipso={0x86, 0x55, 0x2, [{0x4, 0x5, "71155c"}, {0x2, 0xd, "da2b35c41df0856fa45510"}, {0x1, 0x7, "2c0f1f01e2"}, {0x2, 0x12, "8fbd7823513e08e40ef6ff212f4cfa36"}, {0x6, 0x6, "292b5498"}, {0x6, 0x4, "7f7c"}, {0x0, 0x3, "b3"}, {0x5, 0x6, "b8393923"}, {0x7, 0x9, "a1a9e7c0d5df9a"}, {0x5, 0x8, "bb70602bb0d3"}]}, @rr={0x7, 0xb, 0xf5, [@dev={0xac, 0x14, 0x14, 0x1f}, @remote]}, @lsrr={0x83, 0x13, 0x46, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @broadcast, @local]}, @generic={0x86, 0x3, 'D'}, @timestamp={0x44, 0x8, 0xe1, 0x0, 0x7, [0x1000]}]}}}}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.49' (ED25519) to the list of known hosts. [ 83.049023][ T5815] cgroup: Unknown subsys name 'net' [ 83.184524][ T5815] cgroup: Unknown subsys name 'cpuset' [ 83.193670][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.868030][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.731643][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.739771][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.740861][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.747752][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.755974][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.769513][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.771312][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.779627][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.791450][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.802774][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.810572][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.810906][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.830793][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.838549][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.841333][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.854822][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.860609][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.863478][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.870477][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.880807][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.891452][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.891825][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.906751][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.916535][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.923716][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.473278][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 88.597080][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 88.842819][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.850048][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.859506][ T5828] bridge_slave_0: entered allmulticast mode [ 88.867097][ T5828] bridge_slave_0: entered promiscuous mode [ 88.876243][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 88.900729][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.908112][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.915668][ T5828] bridge_slave_1: entered allmulticast mode [ 88.922961][ T5828] bridge_slave_1: entered promiscuous mode [ 89.003717][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 89.018754][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.034550][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 89.074368][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.096575][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.104252][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.111665][ T5831] bridge_slave_0: entered allmulticast mode [ 89.118975][ T5831] bridge_slave_0: entered promiscuous mode [ 89.171532][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.178706][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.186576][ T5831] bridge_slave_1: entered allmulticast mode [ 89.193947][ T5831] bridge_slave_1: entered promiscuous mode [ 89.271294][ T5828] team0: Port device team_slave_0 added [ 89.284013][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.291812][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.299152][ T5825] bridge_slave_0: entered allmulticast mode [ 89.306914][ T5825] bridge_slave_0: entered promiscuous mode [ 89.334421][ T5828] team0: Port device team_slave_1 added [ 89.347041][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.354313][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.361681][ T5825] bridge_slave_1: entered allmulticast mode [ 89.368959][ T5825] bridge_slave_1: entered promiscuous mode [ 89.393529][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.455139][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.506951][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.544780][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.551840][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.577837][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.589722][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.597627][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.604907][ T5826] bridge_slave_0: entered allmulticast mode [ 89.612803][ T5826] bridge_slave_0: entered promiscuous mode [ 89.622866][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.650007][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.657214][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.664689][ T5830] bridge_slave_0: entered allmulticast mode [ 89.672088][ T5830] bridge_slave_0: entered promiscuous mode [ 89.680700][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.687674][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.713697][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.733496][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.740752][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.747959][ T5826] bridge_slave_1: entered allmulticast mode [ 89.755679][ T5826] bridge_slave_1: entered promiscuous mode [ 89.776757][ T5831] team0: Port device team_slave_0 added [ 89.782951][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.790096][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.797874][ T5830] bridge_slave_1: entered allmulticast mode [ 89.805349][ T5830] bridge_slave_1: entered promiscuous mode [ 89.868926][ T5831] team0: Port device team_slave_1 added [ 89.906209][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.917660][ T5825] team0: Port device team_slave_0 added [ 89.931565][ T52] Bluetooth: hci2: command tx timeout [ 89.942020][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.966173][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.991008][ T5825] team0: Port device team_slave_1 added [ 90.010478][ T52] Bluetooth: hci0: command tx timeout [ 90.012291][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.016205][ T52] Bluetooth: hci3: command tx timeout [ 90.031459][ T5840] Bluetooth: hci4: command tx timeout [ 90.031478][ T5842] Bluetooth: hci1: command tx timeout [ 90.051280][ T5828] hsr_slave_0: entered promiscuous mode [ 90.057752][ T5828] hsr_slave_1: entered promiscuous mode [ 90.091044][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.098039][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.125107][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.151657][ T5830] team0: Port device team_slave_0 added [ 90.175724][ T5826] team0: Port device team_slave_0 added [ 90.195468][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.203000][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.229039][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.242113][ T5830] team0: Port device team_slave_1 added [ 90.255977][ T5826] team0: Port device team_slave_1 added [ 90.262849][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.269818][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.296166][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.351788][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.358777][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.385237][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.417315][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.424709][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.450987][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.506300][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.513379][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.540756][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.552805][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.559772][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.586161][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.599061][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.606115][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.632249][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.723719][ T5831] hsr_slave_0: entered promiscuous mode [ 90.730173][ T5831] hsr_slave_1: entered promiscuous mode [ 90.736600][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 90.742472][ T5831] Cannot create hsr debugfs directory [ 90.774254][ T5825] hsr_slave_0: entered promiscuous mode [ 90.781291][ T5825] hsr_slave_1: entered promiscuous mode [ 90.787507][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 90.793399][ T5825] Cannot create hsr debugfs directory [ 90.915229][ T5826] hsr_slave_0: entered promiscuous mode [ 90.921654][ T5826] hsr_slave_1: entered promiscuous mode [ 90.927912][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 90.933803][ T5826] Cannot create hsr debugfs directory [ 90.957764][ T5830] hsr_slave_0: entered promiscuous mode [ 90.964222][ T5830] hsr_slave_1: entered promiscuous mode [ 90.970454][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 90.976214][ T5830] Cannot create hsr debugfs directory [ 91.415031][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.427894][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.439830][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.482047][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.556725][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.569314][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.581306][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.593994][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.707882][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.721657][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.736253][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.748231][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.850226][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.869139][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.882132][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.897935][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.908750][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.937462][ T9] cfg80211: failed to load regulatory.db [ 91.989105][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.010962][ T52] Bluetooth: hci2: command tx timeout [ 92.046995][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.058887][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.074338][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.081807][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.091436][ T52] Bluetooth: hci3: command tx timeout [ 92.094483][ T5839] Bluetooth: hci4: command tx timeout [ 92.100738][ T52] Bluetooth: hci0: command tx timeout [ 92.105581][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.114828][ T3546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.122562][ T5840] Bluetooth: hci1: command tx timeout [ 92.138051][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.148646][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.247380][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.322203][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.352636][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.367026][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.409038][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.416267][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.463524][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.470826][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.491836][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.514300][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.546011][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.553250][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.589296][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.596550][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.628189][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.635384][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.674122][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.681279][ T3546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.723122][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.741577][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.814095][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.875232][ T3546] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.882469][ T3546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.955496][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.962750][ T3546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.034519][ T5828] veth0_vlan: entered promiscuous mode [ 93.084968][ T5828] veth1_vlan: entered promiscuous mode [ 93.166086][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.298735][ T5828] veth0_macvtap: entered promiscuous mode [ 93.351216][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.360124][ T5828] veth1_macvtap: entered promiscuous mode [ 93.377416][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.422627][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.455158][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.473169][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.519438][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.529515][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.562363][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.572252][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.585311][ T5830] veth0_vlan: entered promiscuous mode [ 93.637158][ T5830] veth1_vlan: entered promiscuous mode [ 93.697279][ T5825] veth0_vlan: entered promiscuous mode [ 93.707078][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.742866][ T5830] veth0_macvtap: entered promiscuous mode [ 93.760456][ T5831] veth0_vlan: entered promiscuous mode [ 93.770045][ T5825] veth1_vlan: entered promiscuous mode [ 93.814395][ T5830] veth1_macvtap: entered promiscuous mode [ 93.845231][ T3546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.858212][ T3546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.869932][ T5831] veth1_vlan: entered promiscuous mode [ 93.922894][ T5825] veth0_macvtap: entered promiscuous mode [ 93.959188][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.971255][ T5825] veth1_macvtap: entered promiscuous mode [ 93.996228][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.009178][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.024654][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.047933][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.085824][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.094879][ T5840] Bluetooth: hci2: command tx timeout [ 94.116400][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.151908][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.153392][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.161199][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.175470][ T5840] Bluetooth: hci1: command tx timeout [ 94.189242][ T52] Bluetooth: hci0: command tx timeout [ 94.189607][ T5839] Bluetooth: hci4: command tx timeout [ 94.195130][ T52] Bluetooth: hci3: command tx timeout [ 94.211316][ T5831] veth0_macvtap: entered promiscuous mode [ 94.223424][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.238042][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.253790][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.294281][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.307718][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.359807][ T5831] veth1_macvtap: entered promiscuous mode [ 94.381615][ T5948] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 94.391110][ T5948] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 94.417207][ T5950] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2'. [ 94.443830][ T5950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 94.459227][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.471029][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.482493][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.516652][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.566642][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.577430][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.600158][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.609317][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.622227][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.630471][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.642666][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.661918][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.718643][ T5826] veth0_vlan: entered promiscuous mode [ 94.735355][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.745046][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.814216][ T5826] veth1_vlan: entered promiscuous mode [ 94.874236][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.904803][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.964256][ T5955] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4'. [ 94.974408][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.984345][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.019777][ T5826] veth0_macvtap: entered promiscuous mode [ 95.044100][ T5826] veth1_macvtap: entered promiscuous mode [ 95.104899][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.145671][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.189922][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.218262][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.231408][ T5960] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 95.249684][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.273165][ T5958] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 95.293207][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.303313][ T5958] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 95.338796][ T5960] Zero length message leads to an empty skb [ 95.500122][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.520252][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.606857][ T5967] openvswitch: netlink: EtherType 50a is less than min 600 [ 95.619745][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.641116][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.171357][ T5839] Bluetooth: hci2: command tx timeout [ 96.250541][ T5842] Bluetooth: hci1: command tx timeout [ 96.256098][ T5842] Bluetooth: hci3: command tx timeout [ 96.261757][ T5842] Bluetooth: hci0: command tx timeout [ 96.267333][ T5839] Bluetooth: hci4: command tx timeout [ 96.319898][ T5979] syzkaller1: entered promiscuous mode [ 96.340549][ T5979] syzkaller1: entered allmulticast mode [ 96.623852][ T5993] netlink: 104 bytes leftover after parsing attributes in process `syz.4.14'. [ 96.765208][ T5995] netlink: 68 bytes leftover after parsing attributes in process `syz.1.15'. [ 97.103390][ T6011] netlink: 120 bytes leftover after parsing attributes in process `syz.1.20'. [ 97.334873][ T6015] syzkaller0: entered promiscuous mode [ 97.342042][ T6015] syzkaller0: entered allmulticast mode [ 97.390093][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25'. [ 97.398989][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25'. [ 97.862510][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29'. [ 97.992789][ T6053] netlink: 294 bytes leftover after parsing attributes in process `syz.4.32'. [ 98.002044][ T6053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.668066][ T6041] bond0: entered promiscuous mode [ 98.673353][ T6041] bond_slave_0: entered promiscuous mode [ 98.679288][ T6041] bond_slave_1: entered promiscuous mode [ 98.690204][ T6041] batadv0: entered promiscuous mode [ 98.698706][ T6041] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 98.907414][ T6056] syzkaller0: entered promiscuous mode [ 98.923661][ T6056] syzkaller0: entered allmulticast mode [ 99.023297][ T6063] xt_recent: Unsupported userspace flags (000000b1) [ 99.036294][ T6067] netlink: 'syz.3.36': attribute type 30 has an invalid length. [ 99.045393][ T6064] Illegal XDP return value 4294967289 on prog (id 7) dev N/A, expect packet loss! [ 99.255481][ T5919] IPVS: starting estimator thread 0... [ 99.261952][ T6073] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 99.285532][ T6075] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 99.360769][ T6074] IPVS: using max 28 ests per chain, 67200 per kthread [ 100.262171][ T6114] tipc: Started in network mode [ 100.287638][ T6114] tipc: Node identity 6ef78363f588, cluster identity 4711 [ 100.295294][ T6114] tipc: Enabled bearer , priority 0 [ 100.346769][ T6115] syzkaller0: entered promiscuous mode [ 100.381930][ T6115] syzkaller0: entered allmulticast mode [ 100.606399][ T6124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.57'. [ 100.717360][ T6113] tipc: Resetting bearer [ 100.773999][ T6113] tipc: Disabling bearer [ 100.847873][ T6139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.065279][ T6153] x_tables: duplicate entry at hook 2 [ 101.084359][ T6153] netlink: 16 bytes leftover after parsing attributes in process `syz.2.63'. [ 101.097850][ T6156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.65'. [ 101.139006][ T6159] netlink: 'syz.0.65': attribute type 1 has an invalid length. [ 101.161335][ T6159] nbd: error processing sock list [ 101.512031][ T6172] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.512182][ T6174] tipc: Started in network mode [ 101.534293][ T6174] tipc: Node identity 1e13ea95c4c2, cluster identity 4711 [ 101.541155][ T6172] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.580215][ T6174] tipc: Enabled bearer , priority 0 [ 101.598947][ T6177] syzkaller0: entered promiscuous mode [ 101.605163][ T6177] syzkaller0: entered allmulticast mode [ 101.628661][ T6174] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 101.674662][ T6176] netlink: 'syz.0.73': attribute type 1 has an invalid length. [ 101.695196][ T6174] tipc: Resetting bearer [ 101.748321][ T6170] tipc: Resetting bearer [ 101.784272][ T6170] tipc: Disabling bearer [ 102.357407][ T6212] netlink: 32 bytes leftover after parsing attributes in process `syz.1.84'. [ 102.397659][ T6213] netlink: 16 bytes leftover after parsing attributes in process `syz.3.85'. [ 102.468182][ T6213] netlink: 'syz.3.85': attribute type 1 has an invalid length. [ 102.542432][ T6217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.87'. [ 102.551418][ T6217] bridge_slave_1: left allmulticast mode [ 102.562568][ T6217] bridge_slave_1: left promiscuous mode [ 102.593300][ T6217] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.745128][ T6217] bridge_slave_0: left allmulticast mode [ 102.755826][ T6217] bridge_slave_0: left promiscuous mode [ 102.769586][ T6217] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.787631][ T6229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.88'. [ 102.841661][ T6230] netlink: 'syz.3.91': attribute type 7 has an invalid length. [ 102.869407][ T6230] netlink: 'syz.3.91': attribute type 8 has an invalid length. [ 102.889547][ T6221] netlink: 52 bytes leftover after parsing attributes in process `syz.1.90'. [ 103.133521][ T60] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.146494][ T60] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.198058][ T60] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.224282][ T60] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.321825][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.95'. [ 103.331015][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.95'. [ 103.506529][ T6261] bridge0: port 3(syz_tun) entered blocking state [ 103.550618][ T6261] bridge0: port 3(syz_tun) entered disabled state [ 103.573843][ T6261] syz_tun: entered allmulticast mode [ 103.596399][ T6261] syz_tun: entered promiscuous mode [ 103.605763][ T6261] bridge0: port 3(syz_tun) entered blocking state [ 103.612730][ T6261] bridge0: port 3(syz_tun) entered forwarding state [ 104.330600][ T6296] warning: `syz.1.108' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.372897][ T6301] netlink: 'syz.4.109': attribute type 2 has an invalid length. [ 104.374257][ T6294] IPVS: Scheduler module ip_vs_sip not found [ 104.449975][ T6301] 9: entered promiscuous mode [ 104.946414][ T6315] netlink: 'syz.1.115': attribute type 2 has an invalid length. [ 104.962291][ T6315] netlink: 'syz.1.115': attribute type 1 has an invalid length. [ 105.104419][ T6320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.553887][ T6336] netlink: 'syz.0.119': attribute type 3 has an invalid length. [ 105.717777][ T6341] __nla_validate_parse: 7 callbacks suppressed [ 105.717796][ T6341] netlink: 71 bytes leftover after parsing attributes in process `syz.2.120'. [ 106.706835][ T6369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.127'. [ 106.737618][ T6369] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 106.782690][ T6374] IPv6: NLM_F_CREATE should be specified when creating new route [ 106.797039][ T6374] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 106.804565][ T6374] IPv6: NLM_F_CREATE should be set when creating new route [ 107.001513][ T6384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'. [ 107.023813][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.131'. [ 107.045709][ T6384] netlink: 'syz.2.131': attribute type 12 has an invalid length. [ 107.069491][ T6384] netlink: 'syz.2.131': attribute type 11 has an invalid length. [ 107.151932][ T6391] dvmrp0: entered allmulticast mode [ 107.450030][ T6400] netlink: 'syz.0.136': attribute type 1 has an invalid length. [ 107.473064][ T6408] netlink: 'syz.1.139': attribute type 1 has an invalid length. [ 107.540177][ T6400] netlink: 'syz.0.136': attribute type 4 has an invalid length. [ 107.588563][ T6400] netlink: 9422 bytes leftover after parsing attributes in process `syz.0.136'. [ 107.666841][ T6423] netlink: 'syz.1.142': attribute type 3 has an invalid length. [ 107.810900][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.143'. [ 107.840487][ T6426] Unsupported xt match [ 107.840507][ T6426] unable to load match [ 107.886842][ T6427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.143'. [ 107.955775][ T6426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.143'. [ 108.004896][ T6436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.145'. [ 108.133647][ T6440] IPVS: ip_vs_edit_dest(): server weight less than zero [ 108.656106][ T6441] bond1: entered promiscuous mode [ 108.662068][ T6441] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.691874][ T6462] netlink: 40 bytes leftover after parsing attributes in process `syz.0.152'. [ 109.584824][ T6235] Set syz1 is full, maxelem 65536 reached [ 109.716404][ T6507] validate_nla: 1 callbacks suppressed [ 109.716424][ T6507] netlink: 'syz.1.166': attribute type 29 has an invalid length. [ 109.749653][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059c93400: rx timeout, send abort [ 109.776282][ T6513] netlink: 'syz.1.166': attribute type 29 has an invalid length. [ 109.800562][ T6507] unsupported nla_type 58 [ 110.037585][ T3546] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.049248][ T3546] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.080071][ T3546] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.124376][ T3546] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.250178][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059c93000: rx timeout, send abort [ 110.259556][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059c93400: abort rx timeout. Force session deactivation [ 110.421233][ T6547] openvswitch: netlink: Message has 4 unknown bytes. [ 110.758585][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059c93000: abort rx timeout. Force session deactivation [ 111.099121][ T6586] xt_HMARK: proto mask must be zero with L3 mode [ 111.617138][ T6591] __nla_validate_parse: 12 callbacks suppressed [ 111.617159][ T6591] netlink: 7 bytes leftover after parsing attributes in process `syz.4.191'. [ 111.633303][ T6591] netlink: 7 bytes leftover after parsing attributes in process `syz.4.191'. [ 111.944258][ T6577] netlink: 2 bytes leftover after parsing attributes in process `syz.1.188'. [ 111.973027][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.191'. [ 112.003364][ T6589] netlink: 'syz.4.191': attribute type 30 has an invalid length. [ 112.053662][ T194] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.070597][ T194] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.079377][ T194] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.121924][ T194] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.331797][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 112.407465][ T6617] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20002 [ 112.419768][ T6618] netlink: 68 bytes leftover after parsing attributes in process `syz.3.198'. [ 112.612196][ T6628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.201'. [ 112.748612][ T6639] netlink: 'syz.1.199': attribute type 2 has an invalid length. [ 112.756481][ T6639] netlink: 188 bytes leftover after parsing attributes in process `syz.1.199'. [ 112.872306][ T6643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.933688][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.207'. [ 112.959840][ T6652] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 112.978506][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.207'. [ 113.221912][ T6664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.213'. [ 113.402966][ T24] IPVS: starting estimator thread 0... [ 113.418809][ T6678] macsec1: entered promiscuous mode [ 113.445856][ T6681] vlan2: entered allmulticast mode [ 113.500435][ T6683] IPVS: using max 28 ests per chain, 67200 per kthread [ 113.633540][ T6697] netlink: 'syz.0.224': attribute type 1 has an invalid length. [ 113.705045][ T6697] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.749811][ T6706] netlink: 'syz.4.227': attribute type 1 has an invalid length. [ 113.754274][ T6698] bond1: (slave gretap1): making interface the new active one [ 113.767889][ T6698] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 113.854316][ T6715] Bluetooth: MGMT ver 1.23 [ 113.885179][ T6706] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.944362][ T6717] xt_CT: No such helper "snmp_trap" [ 114.122806][ T6713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.163768][ T6717] bond1: (slave geneve2): making interface the new active one [ 114.204425][ T6717] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 114.347859][ T6735] --map-set only usable from mangle table [ 115.908266][ T6864] netlink: 'syz.3.260': attribute type 23 has an invalid length. [ 115.929302][ T6864] sock: sock_timestamping_bind_phc: sock not bind to device [ 116.018075][ T6867] team_slave_0: entered promiscuous mode [ 116.024028][ T6867] team_slave_1: entered promiscuous mode [ 116.051137][ T6867] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 116.058502][ T6867] team0: Device macvtap1 is already an upper device of the team interface [ 116.083152][ T6867] team_slave_0: left promiscuous mode [ 116.088694][ T6867] team_slave_1: left promiscuous mode [ 116.201964][ T6876] syzkaller0: entered promiscuous mode [ 116.209079][ T6876] syzkaller0: entered allmulticast mode [ 116.340153][ T6891] netlink: 'syz.4.269': attribute type 1 has an invalid length. [ 116.530898][ T6905] trusted_key: syz.1.272 sent an empty control message without MSG_MORE. [ 116.689576][ T6917] __nla_validate_parse: 16 callbacks suppressed [ 116.689597][ T6917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.277'. [ 116.713714][ T6913] netlink: 104 bytes leftover after parsing attributes in process `syz.0.276'. [ 116.723394][ T6918] netlink: 76 bytes leftover after parsing attributes in process `syz.4.275'. [ 116.767951][ T6918] nbd: illegal input index -8454144 [ 116.850939][ T6922] IPv6: NLM_F_CREATE should be specified when creating new route [ 116.906794][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.281'. [ 117.000169][ T6930] netlink: 340 bytes leftover after parsing attributes in process `syz.1.282'. [ 117.018243][ T6934] xt_CT: You must specify a L4 protocol and not use inversions on it [ 117.065983][ T6938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.283'. [ 117.112446][ T6940] netlink: 24 bytes leftover after parsing attributes in process `syz.4.286'. [ 117.181072][ T6944] netlink: 'syz.1.287': attribute type 1 has an invalid length. [ 117.327438][ T2981] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.352325][ T2981] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.395907][ T2981] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.454291][ T2981] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.521993][ T6963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.291'. [ 117.566130][ T6965] netlink: 44 bytes leftover after parsing attributes in process `syz.0.292'. [ 117.582848][ T6963] netlink: 'syz.2.291': attribute type 4 has an invalid length. [ 117.632541][ T6967] dvmrp0: entered allmulticast mode [ 117.779824][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.295'. [ 117.810502][ T6973] openvswitch: netlink: Flow actions attr not present in new flow. [ 117.892755][ T6983] netlink: 'syz.1.298': attribute type 22 has an invalid length. [ 118.013429][ T6983] netlink: 'syz.1.298': attribute type 22 has an invalid length. [ 138.014398][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.021538][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.974298][ T7002] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 144.177006][ T7015] netlink: 'syz.0.308': attribute type 11 has an invalid length. [ 144.195810][ T7015] __nla_validate_parse: 3 callbacks suppressed [ 144.195829][ T7015] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.308'. [ 144.242153][ T7020] netlink: 'syz.0.308': attribute type 11 has an invalid length. [ 144.250671][ T7020] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.308'. [ 144.282014][ T7029] netlink: 'syz.0.308': attribute type 1 has an invalid length. [ 144.404087][ T7015] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 144.440971][ T7015] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 144.453462][ T7015] bond2: (slave xfrm1): making interface the new active one [ 144.464078][ T7015] bond2: (slave xfrm1): Enslaving as an active interface with an up link [ 144.483273][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.308'. [ 144.555462][ T7015] bond2 (unregistering): (slave xfrm1): Releasing backup interface [ 144.588497][ T7015] bond2 (unregistering): Released all slaves [ 144.749265][ T7044] tipc: Enabled bearer , priority 2 [ 144.788520][ T7044] netlink: 72 bytes leftover after parsing attributes in process `syz.1.315'. [ 144.842390][ T7044] bond3 (unregistering): Released all slaves [ 144.851887][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'. [ 145.115737][ T7062] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 145.374152][ T7068] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 145.384129][ T7068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.522468][ T7072] netlink: 'syz.0.322': attribute type 16 has an invalid length. [ 145.570398][ T7072] netlink: 'syz.0.322': attribute type 17 has an invalid length. [ 145.777436][ T7072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.829625][ T5941] tipc: Node number set to 2608825187 [ 145.902669][ T7085] wlan1: mtu greater than device maximum [ 145.986911][ T7092] netlink: 'syz.1.329': attribute type 33 has an invalid length. [ 146.286308][ T7106] tipc: Enabled bearer , priority 0 [ 146.316350][ T7106] syzkaller0: entered promiscuous mode [ 146.330893][ T7106] syzkaller0: entered allmulticast mode [ 146.390168][ T7116] netlink: 'syz.2.336': attribute type 1 has an invalid length. [ 146.407344][ T7115] openvswitch: netlink: Missing key (keys=40, expected=80) [ 146.419188][ T7116] netlink: 'syz.2.336': attribute type 1 has an invalid length. [ 146.471782][ T7106] tipc: Resetting bearer [ 146.515099][ T7106] tipc: Disabling bearer [ 146.592342][ T7135] netlink: 24 bytes leftover after parsing attributes in process `syz.0.339'. [ 146.603701][ T7134] netlink: 20 bytes leftover after parsing attributes in process `syz.2.342'. [ 146.731535][ T7148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.340'. [ 146.760468][ T7148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.340'. [ 146.839779][ T7153] netlink: 1 bytes leftover after parsing attributes in process `syz.3.344'. [ 146.856703][ T7153] xt_policy: neither incoming nor outgoing policy selected [ 146.956443][ T7156] xt_CT: You must specify a L4 protocol and not use inversions on it [ 147.502637][ T7187] : entered promiscuous mode [ 147.799325][ T7167] infiniband sy: set active [ 147.805443][ T7167] infiniband sy: added bond_slave_0 [ 147.874054][ T7167] RDS/IB: sy: added [ 147.878841][ T7167] smc: adding ib device sy with port count 1 [ 147.885577][ T7167] smc: ib device sy port 1 has no pnetid [ 148.122558][ T7205] syzkaller0: entered promiscuous mode [ 148.155895][ T7205] syzkaller0: entered allmulticast mode [ 149.224812][ T7260] netlink: 'syz.1.366': attribute type 10 has an invalid length. [ 149.235493][ T7256] __nla_validate_parse: 3 callbacks suppressed [ 149.235510][ T7256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.364'. [ 149.259125][ T7260] netlink: 40 bytes leftover after parsing attributes in process `syz.1.366'. [ 149.283120][ T7260] dummy0: entered promiscuous mode [ 149.289468][ T7256] openvswitch: netlink: Flow actions attr not present in new flow. [ 149.304493][ T7267] netlink: 256 bytes leftover after parsing attributes in process `syz.3.368'. [ 149.320423][ T7260] bridge0: port 4(dummy0) entered blocking state [ 149.338202][ T7260] bridge0: port 4(dummy0) entered disabled state [ 149.357872][ T7260] dummy0: entered allmulticast mode [ 149.374688][ T7260] bridge0: port 4(dummy0) entered blocking state [ 149.381250][ T7260] bridge0: port 4(dummy0) entered forwarding state [ 149.622486][ T7277] netlink: 'syz.1.369': attribute type 1 has an invalid length. [ 149.725807][ T7277] 8021q: adding VLAN 0 to HW filter on device bond3 [ 149.766472][ T7274] block nbd0: Unsupported socket: should be TCP or UNIX. [ 149.803547][ T7282] netlink: 56 bytes leftover after parsing attributes in process `syz.3.370'. [ 149.847158][ T7282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.370'. [ 149.888610][ T7284] netem: change failed [ 149.920750][ T7282] netlink: 31 bytes leftover after parsing attributes in process `syz.3.370'. [ 149.948217][ T7282] netlink: 'syz.3.370': attribute type 2 has an invalid length. [ 149.956961][ T7282] netlink: 31 bytes leftover after parsing attributes in process `syz.3.370'. [ 151.160956][ T7337] netlink: 'syz.1.384': attribute type 6 has an invalid length. [ 151.174524][ T7339] netlink: 'syz.1.384': attribute type 6 has an invalid length. [ 151.794015][ T7374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.395'. [ 151.814769][ T7371] xt_hashlimit: size too large, truncated to 1048576 [ 151.825523][ T7376] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 151.918709][ T7382] netlink: 24 bytes leftover after parsing attributes in process `syz.1.393'. [ 151.947591][ T7382] netlink: 68 bytes leftover after parsing attributes in process `syz.1.393'. [ 152.010976][ T7372] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.018959][ T7372] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.303355][ T7372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.326596][ T7372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.552883][ T7379] syzkaller0: entered promiscuous mode [ 152.558610][ T7379] syzkaller0: entered allmulticast mode [ 152.588079][ T7381] geneve3: entered promiscuous mode [ 152.606987][ T7381] geneve3: entered allmulticast mode [ 152.625702][ T6834] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.656860][ T6834] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.685315][ T6834] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 152.717592][ T6834] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.756949][ T6834] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.776485][ T6834] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 152.910465][ T6834] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.919693][ T6834] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.967874][ T6834] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 153.018640][ T6834] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.034572][ T6834] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.060742][ T6834] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 153.106862][ T7432] netlink: 'syz.4.407': attribute type 14 has an invalid length. [ 153.107082][ T7430] netlink: 'syz.4.407': attribute type 14 has an invalid length. [ 153.169314][ T7439] netlink: 'syz.2.409': attribute type 83 has an invalid length. [ 153.184378][ T7432] netlink: 'syz.4.407': attribute type 14 has an invalid length. [ 153.254906][ T7430] netlink: 'syz.4.407': attribute type 14 has an invalid length. [ 153.369823][ T7443] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 153.496443][ T7451] : entered promiscuous mode [ 153.615646][ T7458] tipc: Enabled bearer , priority 0 [ 153.638049][ T7458] syzkaller0: entered promiscuous mode [ 153.644366][ T7458] syzkaller0: entered allmulticast mode [ 153.676352][ T7455] tipc: Resetting bearer [ 153.719435][ T7455] tipc: Disabling bearer [ 153.799238][ T7470] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 153.860780][ T7470] netlink: 'syz.0.420': attribute type 1 has an invalid length. [ 153.929980][ T7472] bond2 (unregistering): Released all slaves [ 153.988472][ T7475] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 154.001750][ T7475] bond2 (unregistering): Released all slaves [ 154.354130][ T7492] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 154.370157][ T7492] bond1 (unregistering): Released all slaves [ 154.415637][ T7514] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 154.490035][ T7516] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 154.559267][ T7514] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 154.611704][ T6834] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 154.654038][ T6834] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 154.665666][ T6834] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 154.681453][ T6834] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 154.924188][ T7536] validate_nla: 2 callbacks suppressed [ 154.924208][ T7536] netlink: 'syz.0.436': attribute type 1 has an invalid length. [ 154.938153][ T7536] netlink: 'syz.0.436': attribute type 7 has an invalid length. [ 154.947005][ T7536] netlink: 'syz.0.436': attribute type 8 has an invalid length. [ 154.955401][ T7536] __nla_validate_parse: 12 callbacks suppressed [ 154.955427][ T7536] netlink: 132 bytes leftover after parsing attributes in process `syz.0.436'. [ 155.064934][ T7541] tipc: Enabled bearer , priority 0 [ 155.074757][ T7541] netlink: 'syz.3.439': attribute type 12 has an invalid length. [ 155.084631][ T7541] netlink: 'syz.3.439': attribute type 29 has an invalid length. [ 155.111487][ T7541] netlink: 148 bytes leftover after parsing attributes in process `syz.3.439'. [ 155.135005][ T7541] netlink: 'syz.3.439': attribute type 3 has an invalid length. [ 155.155069][ T7541] netlink: 'syz.3.439': attribute type 2 has an invalid length. [ 155.163348][ T7541] netlink: 'syz.3.439': attribute type 3 has an invalid length. [ 155.171717][ T7541] netlink: 7 bytes leftover after parsing attributes in process `syz.3.439'. [ 155.183712][ T7541] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 155.197680][ T7541] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 155.226210][ T7539] tipc: Disabling bearer [ 155.248235][ T7555] netlink: 'syz.2.443': attribute type 1 has an invalid length. [ 155.292599][ T7555] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.334923][ T7555] veth3: entered promiscuous mode [ 155.344081][ T7555] bond2: (slave veth3): Enslaving as an active interface with an up link [ 155.606430][ T7569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.447'. [ 155.622658][ T43] hid-generic 0005:15C2:5508.0001: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 155.657020][ T7569] veth5: entered promiscuous mode [ 155.662348][ T7569] veth5: entered allmulticast mode [ 155.668678][ T7572] netlink: 16 bytes leftover after parsing attributes in process `syz.3.448'. [ 155.749649][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'. [ 156.245173][ T7609] netlink: 16 bytes leftover after parsing attributes in process `syz.2.458'. [ 156.323433][ T7613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.413208][ T7614] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 156.517319][ T7628] netlink: 48 bytes leftover after parsing attributes in process `syz.0.467'. [ 156.891730][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.474'. [ 157.013795][ T7660] tipc: Enabling not permitted [ 157.019733][ T7660] tipc: Enabling of bearer rejected, failed to enable media [ 157.033131][ T7662] netlink: 104 bytes leftover after parsing attributes in process `syz.3.476'. [ 157.177213][ T7670] bond0: (slave erspan0): Opening slave failed [ 157.979557][ T7708] tipc: Enabling of bearer rejected, failed to enable media [ 158.127216][ T7717] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 158.376054][ T7726] syzkaller1: entered promiscuous mode [ 158.395643][ T7726] syzkaller1: entered allmulticast mode [ 158.408444][ T7735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.408732][ T7733] netlink: 'syz.2.500': attribute type 9 has an invalid length. [ 158.420243][ T7735] [ 158.428004][ T7735] ====================================================== [ 158.435040][ T7735] WARNING: possible circular locking dependency detected [ 158.442087][ T7735] syzkaller #0 Not tainted [ 158.446518][ T7735] ------------------------------------------------------ [ 158.453559][ T7735] syz.0.499/7735 is trying to acquire lock: [ 158.459469][ T7735] ffff888073b84218 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x22b7/0x3b50 [ 158.471697][ T7735] [ 158.471697][ T7735] but task is already holding lock: [ 158.479167][ T7735] ffff88805ce1e958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 158.489078][ T7735] [ 158.489078][ T7735] which lock already depends on the new lock. [ 158.489078][ T7735] [ 158.499509][ T7735] [ 158.499509][ T7735] the existing dependency chain (in reverse order) is: [ 158.508548][ T7735] [ 158.508548][ T7735] -> #1 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 158.516863][ T7735] lock_acquire+0x120/0x360 [ 158.521917][ T7735] _raw_spin_lock+0x2e/0x40 [ 158.526958][ T7735] sch_direct_xmit+0x153/0x4b0 [ 158.532250][ T7735] __dev_queue_xmit+0x1857/0x3b50 [ 158.537811][ T7735] ip6_finish_output2+0xfb3/0x1480 [ 158.543482][ T7735] ip6_output+0x340/0x550 [ 158.548345][ T7735] NF_HOOK+0x9e/0x380 [ 158.552863][ T7735] mld_sendpack+0x8d4/0xe60 [ 158.557895][ T7735] mld_ifc_work+0x83e/0xd60 [ 158.562933][ T7735] process_scheduled_works+0xae1/0x17b0 [ 158.569011][ T7735] worker_thread+0x8a0/0xda0 [ 158.574124][ T7735] kthread+0x711/0x8a0 [ 158.578725][ T7735] ret_from_fork+0x4bc/0x870 [ 158.583852][ T7735] ret_from_fork_asm+0x1a/0x30 [ 158.589174][ T7735] [ 158.589174][ T7735] -> #0 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}: [ 158.599536][ T7735] validate_chain+0xb9b/0x2140 [ 158.604831][ T7735] __lock_acquire+0xab9/0xd20 [ 158.610035][ T7735] lock_acquire+0x120/0x360 [ 158.615060][ T7735] _raw_spin_lock+0x2e/0x40 [ 158.620101][ T7735] __dev_queue_xmit+0x22b7/0x3b50 [ 158.625656][ T7735] ip6_finish_output2+0xfb3/0x1480 [ 158.631312][ T7735] ip6_output+0x340/0x550 [ 158.636177][ T7735] ndisc_send_skb+0xbce/0x1510 [ 158.641489][ T7735] ndisc_solicit+0x444/0x610 [ 158.646613][ T7735] __neigh_event_send+0xf70/0x1560 [ 158.652258][ T7735] neigh_resolve_output+0x198/0x750 [ 158.657991][ T7735] ip6_finish_output2+0xfb3/0x1480 [ 158.663635][ T7735] ip6_output+0x340/0x550 [ 158.668489][ T7735] ip6_send_skb+0x1d5/0x390 [ 158.673609][ T7735] icmp6_send+0x12c6/0x1940 [ 158.678635][ T7735] ip6_link_failure+0x3b/0x4c0 [ 158.683964][ T7735] ip_tunnel_xmit+0x175b/0x2390 [ 158.689346][ T7735] __gre_xmit+0x19a/0x240 [ 158.694206][ T7735] erspan_xmit+0xa04/0x1220 [ 158.699246][ T7735] dev_hard_start_xmit+0x2d7/0x830 [ 158.704893][ T7735] sch_direct_xmit+0x241/0x4b0 [ 158.710194][ T7735] __qdisc_run+0xaa0/0x1540 [ 158.715228][ T7735] __dev_queue_xmit+0x1056/0x3b50 [ 158.720778][ T7735] ip6_finish_output2+0xfb3/0x1480 [ 158.726447][ T7735] ip6_output+0x340/0x550 [ 158.731411][ T7735] ip6_mr_output+0x4e9/0x1100 [ 158.736802][ T7735] rawv6_send_hdrinc+0xe16/0x17a0 [ 158.742348][ T7735] rawv6_sendmsg+0x12ee/0x1830 [ 158.747652][ T7735] __sock_sendmsg+0x19c/0x270 [ 158.752859][ T7735] ____sys_sendmsg+0x505/0x830 [ 158.758163][ T7735] ___sys_sendmsg+0x21f/0x2a0 [ 158.763396][ T7735] __x64_sys_sendmsg+0x19b/0x260 [ 158.768859][ T7735] do_syscall_64+0xfa/0xfa0 [ 158.773903][ T7735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.780339][ T7735] [ 158.780339][ T7735] other info that might help us debug this: [ 158.780339][ T7735] [ 158.790657][ T7735] Possible unsafe locking scenario: [ 158.790657][ T7735] [ 158.798102][ T7735] CPU0 CPU1 [ 158.803470][ T7735] ---- ---- [ 158.808861][ T7735] lock(&qdisc_xmit_lock_key#4); [ 158.813900][ T7735] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 158.823544][ T7735] lock(&qdisc_xmit_lock_key#4); [ 158.831101][ T7735] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 158.838221][ T7735] [ 158.838221][ T7735] *** DEADLOCK *** [ 158.838221][ T7735] [ 158.846365][ T7735] 12 locks held by syz.0.499/7735: [ 158.851491][ T7735] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: rawv6_send_hdrinc+0xc9f/0x17a0 [ 158.861267][ T7735] #1: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_mr_output+0x1ca/0x1100 [ 158.870678][ T7735] #2: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 158.879755][ T7735] #3: ffffffff8df3d700 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 158.889716][ T7735] #4: ffff88805ce1e958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 158.900011][ T7735] #5: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: icmp6_send+0x1e9/0x1940 [ 158.909199][ T7735] #6: ffff88802f788a20 (k-slock-AF_INET6){+.-.}-{3:3}, at: icmp6_send+0xc5c/0x1940 [ 158.918613][ T7735] #7: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_send_skb+0x10f/0x390 [ 158.927866][ T7735] #8: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 158.936979][ T7735] #9: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x1e4/0x1510 [ 158.946478][ T7735] #10: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 158.956594][ T7735] #11: ffffffff8df3d700 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 158.966699][ T7735] [ 158.966699][ T7735] stack backtrace: [ 158.972612][ T7735] CPU: 1 UID: 0 PID: 7735 Comm: syz.0.499 Not tainted syzkaller #0 PREEMPT(full) [ 158.972631][ T7735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 158.972648][ T7735] Call Trace: [ 158.972654][ T7735] [ 158.972661][ T7735] dump_stack_lvl+0x189/0x250 [ 158.972688][ T7735] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.972710][ T7735] ? __pfx__printk+0x10/0x10 [ 158.972727][ T7735] ? print_lock_name+0xde/0x100 [ 158.972744][ T7735] print_circular_bug+0x2ee/0x310 [ 158.972766][ T7735] check_noncircular+0x134/0x160 [ 158.972789][ T7735] validate_chain+0xb9b/0x2140 [ 158.972817][ T7735] __lock_acquire+0xab9/0xd20 [ 158.972835][ T7735] ? __dev_queue_xmit+0x22b7/0x3b50 [ 158.972853][ T7735] lock_acquire+0x120/0x360 [ 158.972867][ T7735] ? __dev_queue_xmit+0x22b7/0x3b50 [ 158.972887][ T7735] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 158.972908][ T7735] ? check_noncircular+0xe0/0x160 [ 158.972931][ T7735] _raw_spin_lock+0x2e/0x40 [ 158.972950][ T7735] ? __dev_queue_xmit+0x22b7/0x3b50 [ 158.972968][ T7735] __dev_queue_xmit+0x22b7/0x3b50 [ 158.972992][ T7735] ? __dev_queue_xmit+0x27b/0x3b50 [ 158.973014][ T7735] ? neigh_resolve_output+0x438/0x750 [ 158.973039][ T7735] ? __pfx___dev_queue_xmit+0x10/0x10 [ 158.973058][ T7735] ? read_seqbegin+0x122/0x250 [ 158.973079][ T7735] ? neigh_resolve_output+0x438/0x750 [ 158.973101][ T7735] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.973124][ T7735] ? read_seqbegin+0x1ac/0x250 [ 158.973146][ T7735] ? __pfx_read_seqbegin+0x10/0x10 [ 158.973173][ T7735] ? __local_bh_enable_ip+0x12d/0x1c0 [ 158.973190][ T7735] ? eth_header+0x11b/0x200 [ 158.973207][ T7735] ? __asan_memcpy+0x40/0x70 [ 158.973229][ T7735] ? eth_header+0x11b/0x200 [ 158.973245][ T7735] ? __pfx_eth_header+0x10/0x10 [ 158.973260][ T7735] ? neigh_resolve_output+0x624/0x750 [ 158.973290][ T7735] ip6_finish_output2+0xfb3/0x1480 [ 158.973320][ T7735] ? __pfx_ip6_finish_output2+0x10/0x10 [ 158.973345][ T7735] ? ip6_mtu+0x7d/0x490 [ 158.973365][ T7735] ? ip6_mtu+0x38c/0x490 [ 158.973386][ T7735] ? ip6_finish_output+0x2ef/0x4e0 [ 158.973407][ T7735] ? ip6_output+0x126/0x550 [ 158.973428][ T7735] ip6_output+0x340/0x550 [ 158.973451][ T7735] ndisc_send_skb+0xbce/0x1510 [ 158.973469][ T7735] ? ndisc_send_skb+0x1e4/0x1510 [ 158.973489][ T7735] ? __pfx_ndisc_send_skb+0x10/0x10 [ 158.973507][ T7735] ? __pfx_dst_output+0x10/0x10 [ 158.973527][ T7735] ? ipv6_get_lladdr+0x2b/0x3f0 [ 158.973542][ T7735] ? ipv6_get_lladdr+0x2b/0x3f0 [ 158.973556][ T7735] ? ipv6_get_lladdr+0x2b/0x3f0 [ 158.973572][ T7735] ? ipv6_get_lladdr+0x378/0x3f0 [ 158.973587][ T7735] ? ipv6_get_lladdr+0x2b/0x3f0 [ 158.973603][ T7735] ndisc_solicit+0x444/0x610 [ 158.973624][ T7735] ? __pfx_ndisc_solicit+0x10/0x10 [ 158.973646][ T7735] ? __neigh_event_send+0xf08/0x1560 [ 158.973670][ T7735] ? __pfx_ndisc_solicit+0x10/0x10 [ 158.973688][ T7735] __neigh_event_send+0xf70/0x1560 [ 158.973714][ T7735] ? ___neigh_create+0x1c83/0x2260 [ 158.973737][ T7735] neigh_resolve_output+0x198/0x750 [ 158.973767][ T7735] ip6_finish_output2+0xfb3/0x1480 [ 158.973796][ T7735] ? __pfx_ip6_finish_output2+0x10/0x10 [ 158.973821][ T7735] ? ip6_mtu+0x7d/0x490 [ 158.973841][ T7735] ? ip6_mtu+0x38c/0x490 [ 158.973862][ T7735] ? ip6_finish_output+0x2ef/0x4e0 [ 158.973883][ T7735] ? ip6_output+0x126/0x550 [ 158.973904][ T7735] ip6_output+0x340/0x550 [ 158.973926][ T7735] ? ip6_send_skb+0x10f/0x390 [ 158.973950][ T7735] ip6_send_skb+0x1d5/0x390 [ 158.973974][ T7735] icmp6_send+0x12c6/0x1940 [ 158.973991][ T7735] ? icmp6_send+0x1e9/0x1940 [ 158.974014][ T7735] ? __pfx_icmp6_send+0x10/0x10 [ 158.974031][ T7735] ? __lock_acquire+0xab9/0xd20 [ 158.974053][ T7735] ? ip6_neigh_lookup+0x14e/0x470 [ 158.974071][ T7735] ? ip6_neigh_lookup+0x14e/0x470 [ 158.974088][ T7735] ? ip6_neigh_lookup+0x397/0x470 [ 158.974104][ T7735] ? ip6_neigh_lookup+0x14e/0x470 [ 158.974122][ T7735] ? __pfx_ip6_neigh_lookup+0x10/0x10 [ 158.974138][ T7735] ? __lock_acquire+0xab9/0xd20 [ 158.974154][ T7735] ip6_link_failure+0x3b/0x4c0 [ 158.974178][ T7735] ip_tunnel_xmit+0x175b/0x2390 [ 158.974203][ T7735] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.974226][ T7735] ? ip_tunnel_xmit+0x110/0x2390 [ 158.974251][ T7735] ? console_flush_all+0x7ee/0xb10 [ 158.974276][ T7735] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 158.974299][ T7735] ? gre_build_header+0x31c/0xa40 [ 158.974324][ T7735] ? __pfx_gre_build_header+0x10/0x10 [ 158.974347][ T7735] ? __pfx_skb_network_protocol+0x10/0x10 [ 158.974366][ T7735] __gre_xmit+0x19a/0x240 [ 158.974388][ T7735] ? __pfx___gre_xmit+0x10/0x10 [ 158.974409][ T7735] ? __asan_memset+0x22/0x50 [ 158.974429][ T7735] ? erspan_build_header+0x19c/0x370 [ 158.974454][ T7735] erspan_xmit+0xa04/0x1220 [ 158.974483][ T7735] ? __pfx_erspan_xmit+0x10/0x10 [ 158.974505][ T7735] ? __lock_acquire+0xab9/0xd20 [ 158.974523][ T7735] dev_hard_start_xmit+0x2d7/0x830 [ 158.974547][ T7735] sch_direct_xmit+0x241/0x4b0 [ 158.974573][ T7735] ? __pfx_sch_direct_xmit+0x10/0x10 [ 158.974596][ T7735] ? gred_dequeue+0x4a6/0x680 [ 158.974620][ T7735] __qdisc_run+0xaa0/0x1540 [ 158.974650][ T7735] __dev_queue_xmit+0x1056/0x3b50 [ 158.974669][ T7735] ? register_lock_class+0x51/0x320 [ 158.974687][ T7735] ? __dev_queue_xmit+0x27b/0x3b50 [ 158.974711][ T7735] ? __pfx___dev_queue_xmit+0x10/0x10 [ 158.974730][ T7735] ? read_seqbegin+0x122/0x250 [ 158.974752][ T7735] ? neigh_resolve_output+0x438/0x750 [ 158.974774][ T7735] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.974797][ T7735] ? read_seqbegin+0x1ac/0x250 [ 158.974819][ T7735] ? __pfx_read_seqbegin+0x10/0x10 [ 158.974840][ T7735] ? __local_bh_enable_ip+0x12d/0x1c0 [ 158.974857][ T7735] ? eth_header+0x11b/0x200 [ 158.974873][ T7735] ? __asan_memcpy+0x40/0x70 [ 158.974894][ T7735] ? eth_header+0x11b/0x200 [ 158.974910][ T7735] ? __pfx_eth_header+0x10/0x10 [ 158.974926][ T7735] ? neigh_resolve_output+0x624/0x750 [ 158.974956][ T7735] ip6_finish_output2+0xfb3/0x1480 [ 158.974985][ T7735] ? __pfx_ip6_finish_output2+0x10/0x10 [ 158.975010][ T7735] ? ip6_mtu+0x7d/0x490 [ 158.975030][ T7735] ? ip6_mtu+0x38c/0x490 [ 158.975051][ T7735] ? ip6_finish_output+0x2ef/0x4e0 [ 158.975072][ T7735] ? ip6_output+0x126/0x550 [ 158.975093][ T7735] ip6_output+0x340/0x550 [ 158.975115][ T7735] ip6_mr_output+0x4e9/0x1100 [ 158.975143][ T7735] ? ip6_mr_output+0x1ca/0x1100 [ 158.975173][ T7735] ? __pfx_ip6_mr_output+0x10/0x10 [ 158.975201][ T7735] ? ip6t_do_table+0x1db/0x1560 [ 158.975225][ T7735] ? __pfx_ip6t_do_table+0x10/0x10 [ 158.975254][ T7735] ? skb_dst+0x4f/0xd0 [ 158.975269][ T7735] ? dst_output+0x17b/0x1c0 [ 158.975285][ T7735] ? rawv6_send_hdrinc+0xc9f/0x17a0 [ 158.975302][ T7735] rawv6_send_hdrinc+0xe16/0x17a0 [ 158.975325][ T7735] ? __pfx_rawv6_send_hdrinc+0x10/0x10 [ 158.975340][ T7735] ? txopt_get+0x335/0x3f0 [ 158.975356][ T7735] ? __pfx_dst_output+0x10/0x10 [ 158.975371][ T7735] ? __pfx_txopt_get+0x10/0x10 [ 158.975390][ T7735] rawv6_sendmsg+0x12ee/0x1830 [ 158.975412][ T7735] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 158.975436][ T7735] ? __pfx_aa_sk_perm+0x10/0x10 [ 158.975460][ T7735] ? sock_rps_record_flow+0x19/0x410 [ 158.975486][ T7735] ? inet_sendmsg+0x2f4/0x370 [ 158.975499][ T7735] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 158.975516][ T7735] __sock_sendmsg+0x19c/0x270 [ 158.975539][ T7735] ____sys_sendmsg+0x505/0x830 [ 158.975558][ T7735] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.975578][ T7735] ? import_iovec+0x74/0xa0 [ 158.975599][ T7735] ___sys_sendmsg+0x21f/0x2a0 [ 158.975617][ T7735] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.975647][ T7735] ? __fget_files+0x2a/0x420 [ 158.975661][ T7735] ? __fget_files+0x3a0/0x420 [ 158.975680][ T7735] __x64_sys_sendmsg+0x19b/0x260 [ 158.975697][ T7735] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 158.975720][ T7735] ? do_syscall_64+0xbe/0xfa0 [ 158.975745][ T7735] do_syscall_64+0xfa/0xfa0 [ 158.975767][ T7735] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.975789][ T7735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.975804][ T7735] ? clear_bhb_loop+0x60/0xb0 [ 158.975822][ T7735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.975837][ T7735] RIP: 0033:0x7f98d4b8f6c9 [ 158.975852][ T7735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.975865][ T7735] RSP: 002b:00007f98d5a07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.975881][ T7735] RAX: ffffffffffffffda RBX: 00007f98d4de6090 RCX: 00007f98d4b8f6c9 [ 158.975893][ T7735] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 158.975903][ T7735] RBP: 00007f98d4c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 158.975913][ T7735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.975923][ T7735] R13: 00007f98d4de6128 R14: 00007f98d4de6090 R15: 00007fff0b418a38 [ 158.975942][ T7735] [ 159.814529][ T7735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.825981][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.867896][ T7735] syz.0.499 (7735) used greatest stack depth: 17928 bytes left [ 160.890630][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog