last executing test programs: 2m14.312627328s ago: executing program 2 (id=2053): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@can={{}, 0x86, 0x0, 0x4, 0x2, '\x00\x00\x00\x00\a\x00'}, 0x10}}, 0x4000004) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000000000000900000000000000010000000000000000004e0100000000000007000000000000000000000005000000000000000000000001040000000000000000000001000000ff00000000000000070000000000010005000000000000000000000000000000000000000000000000000000000000000000000000000000d253ba9f4656413ef57d066f8c1cec18934783d034c4853200449b30305f27ae1872b7fa69926375a3c7e4821feb2a1a843a12"]) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x7}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000640)=0x2, &(0x7f0000000700)=0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r1) sendmsg$TIPC_NL_KEY_FLUSH(r5, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000880)={0x2dc, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x544}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd99}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xbe93}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe036bd7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xdb}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x91}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8d1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffe3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x40001}, 0x24000841) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000440)="713048af", 0x4}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000001340)="ba", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000002c0)="750af1fbc9eb42083732a192b1750ba2239850b0adc4ba1bedbda65fa79312c5d03dd9caf549fe0be06e72a6a3711381d87faf038894121cee818b372f05bf7ebf155e4075c9c85011ea636529b5b2c4f061fa125a2a45c5bdcbc6bc437e92792d9fa1f0792141396025465e493a892e4207bce38611ac7b85579b8b", 0x7c}, {&(0x7f0000000340)="e4", 0x1}], 0x2}}], 0x4, 0x4000000) 2m14.31193863s ago: executing program 3 (id=2054): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) accept$phonet_pipe(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x1, 0x0, &(0x7f00000000c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r7, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) r9 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r8, &(0x7f00000000c0), &(0x7f0000000280)=@udp=r9}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r8, &(0x7f0000000540)='X&z', 0x0}, 0x20) recvmsg(r7, &(0x7f0000002a00)={0x0, 0x0, 0x0}, 0x10000) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000440)='kmem_cache_free\x00', r11}, 0x18) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r14) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r15, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r10, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r13], 0x4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) 2m14.162732484s ago: executing program 2 (id=2058): accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600180003600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0800089e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x34, r2, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x2}]}]}, 0x34}}, 0x0) 2m13.888847875s ago: executing program 2 (id=2062): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x6, 0xc5, 0x8, 0x8, @private0, @local, 0x700, 0x7800, 0xfffffffe, 0x7}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0x3c, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x3c}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000002c0)=@delqdisc={0x64, 0x25, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x8, 0xfff2}, {0x2, 0x5}, {0xfff1, 0xc}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffff8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_RATE={0x6, 0x5, {0xf5, 0x7}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xd9f9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8001}, @TCA_RATE={0x6, 0x5, {0x4c, 0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r4 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x0, @llc={0x1a, 0x204, 0xf6, 0x0, 0x0, 0x8, @multicast}, @l2tp={0x2, 0x0, @private=0xa010100}, @isdn={0x22, 0x7, 0xfa, 0x81, 0x8}, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x200, 0x15, 0x4}) 2m13.883036922s ago: executing program 3 (id=2063): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x9000, @rand_addr=' \x01\x00'}], 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)=""/47, &(0x7f0000000040)=0x2f) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r3}]}, 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000de000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000010230000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000ddaa000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0}, 0x94) 2m13.704781797s ago: executing program 2 (id=2066): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000240)={0x1, 0x8}, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$netlink(r2, &(0x7f0000000040), &(0x7f00000000c0)=0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030400001b00feffffff00009398d401113d484c9a92b866aec71b32685a52f3bf5bbed9280149c31a5d3520132345d05e964f9444f888628bbd85fe6e93f25cfe307fd5f61002450a00d2a667a2ccd4fdcf01a4a669303385", @ANYRES32=r3, @ANYBLOB="46060800000000002c00128009000100626f6e64000000001c00028008000f0000000000080013000200000005001d0004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000690}, 0x20048040) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) write$cgroup_subtree(r9, &(0x7f00000001c0)={[{0x2d, 'rdma'}, {0x2d, 'net_prio'}, {0x2d, 'rdma'}, {0x2d, 'memory'}]}, 0x1e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r10, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) sendfile(r6, r8, 0x0, 0x401) r11 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f00000000c0)={r12}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r13], 0x54}}, 0x0) 2m13.700505867s ago: executing program 3 (id=2067): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x8, 0xfa04, 0xd0, 0x6c02, 0x1a0, 0x194, 0x194, 0x1a0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xd0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x1, 0x33, 0x5, 0x8}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x5, 0x1}, {0x4, 0x4}, {0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x7, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000002c0)={r0, 0x3, 0x1, 0x9}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x4, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x24000004) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x6b}, 0x1, 0x0, 0x0, 0x2200c080}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006800010002000000fceeff7f00000000000000000c000200010000000d00000004000400"], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) getsockname$packet(r1, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000900)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000009c0)={'ip6gre0\x00', &(0x7f0000000940)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x5, 0x2, 0x4, @empty, @loopback, 0x3165b7ba1288596f, 0x80, 0xfffffffb, 0x8}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000ac0)={'gre0\x00', &(0x7f0000000a00)={'gretap0\x00', 0x0, 0x20, 0x7, 0x7, 0x10000, {{0x28, 0x4, 0x1, 0x7, 0xa0, 0x67, 0x0, 0xc, 0x2f, 0x0, @local, @private=0xa010102, {[@rr={0x7, 0xf, 0xd, [@multicast1, @private=0xa010102, @loopback]}, @lsrr={0x83, 0x23, 0x43, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1, @loopback, @remote, @local, @broadcast, @empty]}, @rr={0x7, 0x2b, 0x38, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x24}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast]}, @rr={0x7, 0xb, 0xd6, [@dev={0xac, 0x14, 0x14, 0x41}, @local]}, @end, @cipso={0x86, 0x1a, 0xfffffffffffffffc, [{0x7, 0x8, "7f140d5d7166"}, {0x5, 0x8, "fed2fc1045e7"}, {0x7, 0x2}, {0x6, 0x2}]}, @noop, @generic={0x88, 0x6, 'NJju'}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000bc0)={'gretap0\x00', &(0x7f0000000b00)={'sit0\x00', 0x0, 0x10, 0x7, 0x3ba, 0x7f, {{0x1b, 0x4, 0x2, 0x7, 0x6c, 0x64, 0x0, 0x3, 0x2f, 0x0, @multicast2, @broadcast, {[@end, @ssrr={0x89, 0x7, 0xc6, [@multicast1]}, @noop, @timestamp={0x44, 0x20, 0x95, 0x0, 0x4, [0x8, 0x4, 0x8, 0x1, 0x40, 0x4d, 0x3]}, @timestamp_prespec={0x44, 0x2c, 0x85, 0x3, 0x5, [{@local, 0x8}, {@rand_addr=0x64010100, 0x81}, {@local, 0x2}, {@private, 0x4}, {@broadcast, 0xfff}]}]}}}}}) (async) getsockname$packet(r1, &(0x7f0000000c00)={0x11, 0x0, 0x0}, &(0x7f0000000c40)=0x14) (async) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000c80)={@private2, 0x0}, &(0x7f0000000cc0)=0x14) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={&(0x7f0000000380), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x300, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0xe}, {0xffe0, 0x7}, {0x2, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x401}]}, 0x44}}, 0x4000010) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000005c0)={'lo\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf25020751ff", @ANYRES32=r12, @ANYBLOB="0800020095242322"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) (async) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="90000000100003051d0000e300000000d0bbd7000007004b58b0ba4e4726a26ae27c27d2779b59e0c00cfe34b10545d0f66ff84641b27377e8911b86727620f857cdcff0c2410c", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15], 0x90}, 0x1, 0x0, 0x0, 0x890}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000fc0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f80)={&(0x7f0000001000)=ANY=[@ANYBLOB="7c020000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fcdbdf25130000006800018008000300010000000800030001000000140002006e6574706369300000000000000000001400020076657468315f746f5f68737200000000140002006361696630000000000000000000000008000300d0c2413408000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000680001800800030000000000140002006970366772653000000000000000000014000200776c616e300000000000000000000000080003000200000014000200626f6e645f736c6176655f3000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="4400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e310000000000000000000000140002006970766c616e3100000000000000000008000100", @ANYRES32=r4, @ANYBLOB="1c00018008000100", @ANYRES32=r5, @ANYBLOB="08000300020000000800030000000000480001801400020076657468315f746f5f6873720000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="080003000100000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="200001800800030002000000140002007465616d300000000000000000000000280001800800030000000000140002006970366772653000000000000000000008000300030000006000018014000200776c616e3000000000000000000000001400020070696d7265670000000000000000000008000100", @ANYRES32=r12, @ANYBLOB="08000300010000000800030002000000140002006e72300000000000000000000000000008000300010000001400018008000100", @ANYRES32=r14, @ANYBLOB="080003000200000034000180140002006772657461703000000000000000000014000200677265300000000000000000000000000800030000000000"], 0x27c}, 0x1, 0x0, 0x0, 0x10}, 0x40041) r16 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r16, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m13.552481659s ago: executing program 3 (id=2069): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40}, 0x1c) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x5, 0xf}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 2m13.424749803s ago: executing program 3 (id=2070): socket$netlink(0x10, 0x3, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) recvfrom$phonet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x220008e8}, 0x800) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x5f) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="013d99", 0x3}], 0x1}}], 0x2, 0x0) shutdown(r8, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x0, 0xfffffffffffffffe, &(0x7f0000000440)='GPL\x00', 0xfffffffc, 0x86, &(0x7f0000000600)=""/134, 0x41100, 0x20, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xf, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000780)=[0xffffffffffffffff], &(0x7f00000007c0)=[{0xefb7, 0x5, 0xc, 0xb}, {0x3, 0x1, 0x3, 0x9}], 0x10, 0x12b}, 0x94) setsockopt(r8, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r9) sendmsg$NFC_CMD_ENABLE_SE(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000ffdbdf25110000000800150002000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x71eff8d2059dfe60}, 0xc004) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[], 0x4c}}, 0x0) 2m13.41021517s ago: executing program 2 (id=2071): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffd17, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xc4}, 0x4000810) 2m12.996886346s ago: executing program 2 (id=2073): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xb, 0x81, 0x6, 0xfff9, 0x10, 0x2, 0x8, 'syz0\x00'}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) write(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) (async) r3 = socket(0x2, 0x80000, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x1406, 0x200, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x800) 2m12.738943578s ago: executing program 32 (id=2073): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xb, 0x81, 0x6, 0xfff9, 0x10, 0x2, 0x8, 'syz0\x00'}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) write(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) (async) r3 = socket(0x2, 0x80000, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x1406, 0x200, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x800) 2m12.732306095s ago: executing program 3 (id=2075): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c020000130000042abd7000fbdbdf250a0280044e204e230200000002000000050000000300000005000000000000230000000003000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 2m12.639550844s ago: executing program 33 (id=2075): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c020000130000042abd7000fbdbdf250a0280044e204e230200000002000000050000000300000005000000000000230000000003000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 9.522857885s ago: executing program 4 (id=2901): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf250501f2800f0018007d3a2e9c5bc85c23277d0000140001"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x4000881) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x50}, 0x1, 0x7}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, r7, 0x607, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}}, 0x4008000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x4, 0x4, 0x4, 0xdfdd, 0x14, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r8, 0x0, 0x0}, 0x20) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000005480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100fa00ffff090000000800000008000300", @ANYRES32=r11], 0x5c}}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = socket(0x8, 0x3, 0x10001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r15) r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r13) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000940)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r14, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="01002dbd7000ffdbdf252e0000000c0005000201aaaaaaaaaaaa08000200", @ANYRES32=r17, @ANYBLOB="85c441be5bb7f1414142612be7cdccd84cb60f6bb4a315d9ffa3c6aa70340cc460c47b82e68eef94ec64cd700e3f7318c73bcda69e6fd4664e1fde2343bb1c87eff62f1ba5234a78224e28e2283e6ea010562a2d7861e7952ce17d27dfce098c4bdc92d7c5cf62d92d83bb0e184362ca08101b93d5e3b1e71b44d8abe1ad2e5e23fda29374070b4b350b87e93001c45e18034ae4e0f208c12f2ee4cfcbf9abc5f7cce210b6da38e21b62d329a29b621bb06dd7cd15fa32"], 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, r7, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r17}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r19 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r19, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="1c0000000d0603000000000000000000000000000500010900000000"], 0x1c}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r18, @ANYBLOB="0c002f80070001"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 8.869104124s ago: executing program 4 (id=2907): unshare(0x480) (async) r0 = socket(0x2a, 0x1, 0x203) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfcf}]}, 0x40}}, 0x0) 8.692724914s ago: executing program 4 (id=2911): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0x0, 0xfff1}, {0xa, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c0002800800034000000016080001400000"], 0x110}}, 0x40040) 8.445560578s ago: executing program 4 (id=2917): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) unshare(0x22020600) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x5761, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x81}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 7.995760177s ago: executing program 4 (id=2923): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xfffc}, {0xb, 0xf}}}, 0x24}}, 0x80800) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x200008c1}, 0x810) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.834838575s ago: executing program 4 (id=2926): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0x201}, 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002fc0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000240093a74b91128009000100626f6e64000000001400028008b07759c4d292ce88"], 0x44}}, 0x4008000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'veth1_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0xfffffffe, 0x0, 0x4, 0x1, 0x1, 0x7, 0x2f4}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r6, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x1e, 0x33, @mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x40}, @device_b, @broadcast, @from_mac=@broadcast, {0x8, 0x10}}, 0x11, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8847}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9100}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4048091}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff3, 0xffe0}, {0xa, 0xe}, {0xfff9, 0x7}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0xc040) 2.394834478s ago: executing program 0 (id=2993): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) socket$netlink(0x10, 0x3, 0x1c) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124e00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000140600000fff07006706000020000000350200000ee60000bf25000000000000bd350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000014000000000000009500000000000000db13d5d8b740f2cdaabc8383c8f56b8c2b84a800ea6553f3ef4392b3815dcf00c3eebc52267b042d19d6e31e25e589d5f2692c75a547d6f186641ae8c557ccff3878a93b51a0389749df734f49ed5078b10f1e7f2b37626a3ace1ea89f7d2c570720a86853e26168761f0a53358f7ee2baa0e6a67a98a0d57ac09f36cfefbbc7492bbe7cdf64971a57fd64efd46c26"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000014"], 0x30}}, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x2, @any, 0xe8}, 0xe) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000780040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) writev(r1, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240004460103000000000000000000002a000008000340000020020600124000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0xfffffe4e}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES64=r1, @ANYBLOB="df1d4e549af8c6bfad5f3475b7c344d631db81afabaa9ad83fff6dad559a8380948cecb84cefd9721054c5d16b7b8ceebce52aa54c36271eb2596c92b2983a06024acd77500ae1db2fc884167e9ae36eace03897093825f01505fac229c6f2755b3b80f43e66b9eee850797a78af88a4d33bfd267d708522dbc6b86e6bc0db3301672c7a36fcb0a6e3ba6eed386785b435e3c6f0cdb275058ab38c644f81c0adaf9294353bf8029a367ee74556b40e95eb21c41519541a975920", @ANYRES16=r3, @ANYRESDEC=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 2.32341477s ago: executing program 1 (id=2994): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r4 = accept(r2, 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0x6) setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r4}, 0x20) recvmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x4c, r1, 0x1, 0x0, 0x25dfdbff, {0x3a}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) 2.232422188s ago: executing program 0 (id=2996): r0 = socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000500)={'wg2\x00'}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x2c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x2c}}, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x264, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x168, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xdd, 0x3, "fbea3b6ad63a6cacb580312cb7008bceaa2a4f32caeb006f524a7aaabe47472f2dd629c37bc8124293d3a82b7b3046be4252efdfc12b330c357262f8279612cd2d1c96cf50be62dc25ab92fa4928078990542bb4a482395a7727eeac2552aff52195c4dc084dda2123b7d859b008fda3c70c1c22ec1ec8aa720f34f80b7f9c0eecd73949cacd77f7c7f3a0279d0d0c06ca2b50ab8133abee30a2b12f77dbec0abd5a86b0d2fae1ecd1b90ee65031f412df6cb094fada2c241aaa425f362e8fb7a7c16a3999e00ba75c1aca4662714c9a4f15322ec9606b1dc8"}, @TIPC_NLA_NODE_ID={0x81, 0x3, "b1a3464f38fb7e81bd66a644d137c89aae3c309b88b6f178e9e9ecd01bf6916250ff504de56ddaedc32d933e5681106d933bb87331e946e5276bb24d3b5d53e972920e48855cc6c0ab9147fc57e0f687dd1244549095afda8e1fc3420b1b081a172289373cab5ff01dab2cfb41de8106060e739246ca032ac5cef7a39b"}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xda0}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x26d0}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x500000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7795}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x48600}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xdda}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x118) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 1.996869269s ago: executing program 1 (id=2999): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x169}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r2, 0xfd}, &(0x7f0000000280)=0x8) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x40047440, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14}]}}]}, 0x44}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x84, &(0x7f0000000000)={r11, @in={{0x2, 0x0, @empty}}}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000380)={r11, 0x6c, &(0x7f0000000300)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e20, 0xfffffff8, @rand_addr=' \x01\x00', 0x100}, @in={0x2, 0x4e22, @broadcast}]}, &(0x7f00000003c0)=0x10) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x30011}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x64010102}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1.668947451s ago: executing program 6 (id=3002): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080), &(0x7f0000000100)=0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, 0x0, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000300)={{r3}, 0x0, 0x0, @inherit={0x50, &(0x7f00000000c0)={0x0, 0x1, 0x8000, 0xe8, {0x24, 0x7, 0x8, 0x7f, 0xffffffffffffffff}, [0x4]}}, @name="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"}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) write$tun(r2, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58815068b91"}]}}}}}}, 0x4e) 1.611233391s ago: executing program 1 (id=3003): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0x0) getpeername$tipc(r0, &(0x7f0000000000)=@id, &(0x7f00000000c0)=0x10) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x35288}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x7}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x4}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x7}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r7, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close(r6) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x8931, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x8931, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="8985b0428f08f9400702b71dd84520fd6f2cc33bbe78b7f85b50a60286979c21392551cdfd05ffd6290d32f9b7a463032699b338beb20196dd0d4cf42773865f5038c3a07675d4dcf4f37eef460c9b684e96bc6a17b57e524d3b4f340cfda311cd895fe671683745f8f1aa4e41d5e891a65929dcd7c0195b37f5efaf088b1b737cfa4df973e4999121d5b81e7a50e074dab93363f4d7b90676beadfa4d88d4ad0d411fbdf9ffe98cf5af27714e5a78e297a0ad1e5ff9ee6714fa834376f4", 0xbe) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="8985b0428f08f9400702b71dd84520fd6f2cc33bbe78b7f85b50a60286979c21392551cdfd05ffd6290d32f9b7a463032699b338beb20196dd0d4cf42773865f5038c3a07675d4dcf4f37eef460c9b684e96bc6a17b57e524d3b4f340cfda311cd895fe671683745f8f1aa4e41d5e891a65929dcd7c0195b37f5efaf088b1b737cfa4df973e4999121d5b81e7a50e074dab93363f4d7b90676beadfa4d88d4ad0d411fbdf9ffe98cf5af27714e5a78e297a0ad1e5ff9ee6714fa834376f4", 0xbe) bind$packet(r4, &(0x7f0000000080)={0x11, 0x4, r5, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xd}, {0xfff1, 0xfff2}, {0xffe0}}}, 0x24}}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 1.450827236s ago: executing program 5 (id=3005): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4aef6a06}, [@call={0x85, 0x0, 0x0, 0x43}, @generic={0x77, 0x2, 0xe, 0x8, 0x5}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write(r0, &(0x7f0000000200)="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", 0x10e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) close(r1) 1.392907561s ago: executing program 6 (id=3006): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x5}}, 0x4000000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x2, @mcast1, 0x4}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={r3, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x3}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) 1.391508677s ago: executing program 0 (id=3007): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="5402000017000100000000000040523ee83c00000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x8941, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r2, &(0x7f0000000180)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000006c0)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r7}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 1.330000702s ago: executing program 5 (id=3008): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x3) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000004c0)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0x1}, 0x18) (async) r6 = socket$inet6(0xa, 0x5, 0x8) (async) r7 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r7, 0x29, 0x4a, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$FITHAW(r6, 0xc0045878) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000800)=[{0x0, 0x3, {0x2, 0x1}, {0x0, 0xf0, 0x2}, 0x2, 0xff}, {0x2, 0x3, {0x1, 0xff, 0x2}, {0x1, 0x1, 0x1}, 0xfd, 0x2}], 0x40) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x74, r5, {0xc, 0xa}, {0x0, 0xfff1}, {0x2, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x24000850) (async, rerun: 32) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000)=0x5, 0x2) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x112}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 1.227334697s ago: executing program 5 (id=3009): unshare(0x2a000400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) unshare(0x30000200) unshare(0x8060400) (async) unshare(0x8060400) 1.152906728s ago: executing program 1 (id=3010): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv4_newrule={0x64, 0x20, 0x400, 0x70bd2c, 0x25dfdbfb, {0x2, 0x14, 0x0, 0x4, 0xff, 0x0, 0x0, 0x0, 0x8}, [@FRA_SRC={0x8, 0x2, @rand_addr=0x64010100}, @FRA_SRC={0x8, 0x2, @multicast1}, @FRA_FLOW={0x8, 0xb, 0xa}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7fffffffffffffff}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x9}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0xfffffff9}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40800}, 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r1, 0x2) accept4(r1, 0x0, 0x0, 0x80800) poll(0x0, 0x0, 0xffffffffffbffff8) 1.125639838s ago: executing program 5 (id=3011): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffe, 0x8000, 0x7, 0x81}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001c0000012cbd7000ffdbdf2507000000", @ANYRES32=r4, @ANYBLOB="80000202080004000000000008000f00010000000e7fc414c4856da4983e5bd1706237042873a48fc45d424a448c9857"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) setsockopt$inet_int(r1, 0x0, 0x19, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xfffffffffffffff8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001d00010000000000ffdbdf2507000000", @ANYRES32=r6, @ANYBLOB="800007000a00020001809e53e017009a5ddc050001000000"], 0x30}}, 0x48080) 1.023715421s ago: executing program 6 (id=3012): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x2004c051) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r1) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'dummy0\x00', 0x1}) setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x35, 0x301, 0x70bd26, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x68, r2, 0x258adf87ce8a55b7, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) 916.923803ms ago: executing program 0 (id=3013): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) sendto$ax25(r1, 0x0, 0x0, 0xc891, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff000000000000000000008000", @ANYRES32=0x0, @ANYBLOB="0000000012620400240012800b000100697036746e6c000014000280050009000400000008000100", @ANYRES32=r4, @ANYBLOB="0800040000050040"], 0x4c}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000000)=0xb, 0x4) 763.071534ms ago: executing program 6 (id=3014): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'wg1\x00', {0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x43}}}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) close(r1) 665.406342ms ago: executing program 5 (id=3015): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0xf, 0x800, 0x4) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2a, 0xfffff001, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x80000001, 0x3, 0x8, 0xb, 0x101, 0xffffcbef, 0x183, 0x5, 0x7, 0x1, 0x14, 0xb, 0x1a, 0x3, 0xd0b, 0x38f4}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 600.778207ms ago: executing program 0 (id=3016): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc0000001000010400000000000000000a01010100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xfc}}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x1170, 0x1398, 0x0, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0x0, 0xff000000], [0xffffffff, 0xffffffff], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x0, 0x6f}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x308, 0x804, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0xfffffffe, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x1}}, @common=@eui64={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x3c}}, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000ac0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff00007edcff48d744", 0x58}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)={0x38, r2, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbf8, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000100), r1) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x8000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={0x0, 0x0, 0x4008, r3}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 480.211671ms ago: executing program 6 (id=3017): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4020) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b2b, &(0x7f0000000080)={'veth0_to_team\x00'}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r4}, 0x10) socket(0x40000000015, 0x5, 0x0) (async) r5 = socket(0x40000000015, 0x5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES8=r2, @ANYRESOCT=r2, @ANYRES32=r4, @ANYRESOCT=r3, @ANYRESOCT=r1, @ANYRES16=r5], &(0x7f0000000880)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r6}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) r7 = socket(0x15, 0x5, 0x0) connect$rose(r7, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40) accept4(r0, 0x0, 0x0, 0x800) (async) r8 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) (async) sendmmsg$alg(r8, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="100000001f14000425bd7000f6dbdf25"], 0x10}}, 0x0) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x1c0, 0x194, 0x194, 0x1c0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x32}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x1a5, 0xc20, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x1, 0x10, [0x18, 0x2f, 0x22, 0x8, 0x1d, 0x18, 0x15, 0x2e, 0x29, 0x2a, 0xe, 0x2, 0x1a, 0x31, 0x39, 0x3f], 0x0, 0x8e, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x340, 0x340, 0x0, 0x340, 0x270, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0xff000000], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) recvmsg(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200d9a555830000080000000100000080000000a90379ffbb70823bbf8b530545c3ce321e28335f3bb36c172c23a13bb3c1a7fbfbd4c5c871f8c708e7d9c7", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200d9a555830000080000000100000080000000a90379ffbb70823bbf8b530545c3ce321e28335f3bb36c172c23a13bb3c1a7fbfbd4c5c871f8c708e7d9c7", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe) sendmsg$alg(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="02000000751acbc37e3f3c975ca42ff9eaca612497c4490d2f6f5c815bfdd938e5474531a3210bcf0d99b96375692e0ce6bfb89eb2a07d3645c05c1adb1ca4688feee47ca8b22b354ccf7cfae7", 0x4d}], 0x1}, 0x0) (async) sendmsg$alg(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="02000000751acbc37e3f3c975ca42ff9eaca612497c4490d2f6f5c815bfdd938e5474531a3210bcf0d99b96375692e0ce6bfb89eb2a07d3645c05c1adb1ca4688feee47ca8b22b354ccf7cfae7", 0x4d}], 0x1}, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) r11 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x890b, &(0x7f0000000000)) 361.724737ms ago: executing program 0 (id=3018): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r6], 0x44}}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x2}, 0x1c) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) r12 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r12, &(0x7f0000000800)='u', 0x1, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r12, 0xda8c) accept4(r12, &(0x7f0000000340)=@nfc, 0x0, 0x0) r13 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @private0, [0xff, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xff000000], 'wlan0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x2c, 0xc7, 0x6, 0x61}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x8, 0xe, 0x2}}, @common=@srh1={{0x90}, {0x3a, 0x2, 0xf, 0x0, 0x9, @private1, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0xd}, [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0x0, 0xffffff00], 0x13a8, 0x1e8}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x4, 0x6}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388) sendmmsg$inet6(r11, &(0x7f0000000f40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c, 0x0}}, {{&(0x7f0000000d00)={0xa, 0x4e20, 0xff, @private0, 0x10001}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@rthdr={{0x28, 0x29, 0x39, {0x33, 0x2, 0x2, 0x21, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}], 0x28}}], 0x2, 0x40000) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x8}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r14, 0x84, 0x72, &(0x7f0000000340)={r15, 0x2, 0x10}, 0xc) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x200, 0xfffffffc, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 264.915873ms ago: executing program 1 (id=3019): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) syz_emit_ethernet(0x96, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6010104000600600fe8009000000000000000000000000bbfe8000000000000000000000000000aa08004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="84c2000090780000030009000402fe06e2d4c3d902040600220a2298e693942403cd22094f9f6420b115a3220346131294210c439a5bea3444d82baa1f668c79"], 0x0) socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x0, 0xfd, 0xd2, &(0x7f00000000c0)="612799cf567d1f4cdfad12e0823b40b458ece45ddb7570ade69efa641b1daf21e01fabfe6d3ef425c16c93fff519b4d72a888ed85719ca8af5a301aec927c29b94b6f7d098f1964ddce9459631640054f0530cd440a17e88466711f9b7ca7153ac7a3c2a162df7761fb31dd71b9d6ae61aa0ef885c33f41fa1f48c1ccccdac63863b66521b25409f995915887aa3dd1edfc714a529d41f1bfa3ee8b8c728837665ae89e55a5d45d14deda317059d3456d91de9d5612c40a0a79a80d5ae8251853995bc029065847de5524e64e87a7f675f7a8730350a2bc51bf6b0a2eb5c631afbfaa5d19dd7eb36673dddbc561e4b18ec3eefc93fbb216075f2cd77e4", &(0x7f0000000440)=""/210, 0x400, 0x0, 0xda, 0x5e, &(0x7f0000000540)="e8132b8ad8ea0d7365755a477ba2fa9f7184642ba177cd75c3005621ea3a1a72767aa3ca307c19a5c38937aed32f3b94477a28466ca0c9cd19cec9c7508d98070f52fb2dffaabcf28cc918e7a269b91da5a8dda8a5e78e603b9aa04d73a84fc91771a7d39a2d4f3f9d3e1ff29bfecb1c2df0e4bbc0d6fdec97e0218c8e2da80fa13a822fa613417406ca9555fde0198614c4aab0e3e13328f9c967102d279834d6940940e75017b49ae8fed80c898d589f2d7d658f65c380044b42310f0edf7a1538d28507f738226eff9427adc7b84e06322fbe526eac6a2818", &(0x7f0000000280)="72ed96628cd1c2d66bed460abefb555ed02d72c7c8ea3c4d9a2d3a7760d93315b02d5340a2c53141828c23efcbc1984de4e26fdcca7f3d64515797ea53d5be9a1236389d8b85271842a072ade3ab4666afd675fb58529b343d58ce4a8809", 0x2, 0x0, 0x40}, 0x50) close(r0) 184.501536ms ago: executing program 1 (id=3020): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x100000c, 0x810, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff91}, 0x48) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000080)={r4, 0xb796, 0x7}, 0x8) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000500000000000000c70d000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000078500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095000000000000009f0a76bb1c5a0afb9efa6357745e3043a01123e8a7227842ab4af1b3e7633eabc7493d81a152a5d4d01295fcac1e1f3c948c9ea8795d22ec9d07dffdda8a85df495f6d829577384c87788d6328c34e57c4c610031d5438785f5eac2a73b06cfc37bf7ce9144cbe9e048768f9391e8b86a0eb227f1c16138fe4fa2ed83c0accba6a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x24}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0xfffffffffffffd8c}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000280)={0x0, 'bond_slave_0\x00', {0x4}, 0x2}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x6bf1c2d5adba8c32}) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r8, 0x10f, 0x83, &(0x7f0000000340), &(0x7f0000000100)=0x3) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x304) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x1, @null, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @null, 0xf30, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) 174.489838ms ago: executing program 6 (id=3021): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r2) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r5, &(0x7f0000000080)={0x11, 0x4, r6, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xd}, {0xfff1, 0xfff2}, {0xffe0}}}, 0x24}}, 0x40000) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd24, 0x0, {0x0, 0x0, 0x0, r11, {0xfff1}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x34, r3, 0x20, 0x70bd22, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0xfffffffffffffdee}, @FOU_ATTR_IFINDEX={0x0, 0xb, r9}, @FOU_ATTR_IFINDEX={0x0, 0xb, r11}, @FOU_ATTR_LOCAL_V4={0x0, 0x6, @dev={0xac, 0x14, 0x14, 0xb}}, @FOU_ATTR_TYPE, @FOU_ATTR_LOCAL_V6={0x0, 0x7, @mcast2}]}, 0x5d}, 0x1, 0x0, 0x0, 0x20044000}, 0x20008041) 0s ago: executing program 5 (id=3022): unshare(0x10480) r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x43, 0x0, &(0x7f0000000100)={0x2, 0x0, @broadcast, 0x4}, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) shutdown(r1, 0x0) kernel console output (not intermixed with test programs): rocess `syz.2.1185'. [ 168.085493][T10206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1185'. [ 168.165368][T10206] bond0: entered promiscuous mode [ 168.197745][T10206] geneve1: entered promiscuous mode [ 168.235477][T10206] batadv0: entered promiscuous mode [ 168.243224][T10206] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 168.256773][T10206] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 168.268514][T10206] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 168.576557][T10234] validate_nla: 1 callbacks suppressed [ 168.576574][T10234] netlink: 'syz.2.1193': attribute type 1 has an invalid length. [ 168.666024][T10242] sctp: [Deprecated]: syz.1.1195 (pid 10242) Use of int in max_burst socket option. [ 168.666024][T10242] Use struct sctp_assoc_value instead [ 168.683610][T10242] 0ªî{X¹¦: renamed from gretap0 [ 168.692078][T10242] 0ªî{X¹¦: entered allmulticast mode [ 168.723603][T10242] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 168.996879][T10251] bond6: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 169.026380][T10251] bond6 (unregistering): Released all slaves [ 169.241726][T10226] delete_channel: no stack [ 169.476579][T10280] openvswitch: netlink: IP tunnel dst address not specified [ 169.574918][T10287] netlink: 'syz.0.1209': attribute type 25 has an invalid length. [ 169.679017][T10292] netlink: 'syz.3.1212': attribute type 1 has an invalid length. [ 169.720699][T10295] netlink: 'syz.1.1213': attribute type 1 has an invalid length. [ 169.878255][T10295] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 169.892903][T10295] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 169.935163][T10302] gretap0: entered promiscuous mode [ 170.044717][T10318] netlink: 'syz.4.1218': attribute type 2 has an invalid length. [ 170.131901][T10321] __nla_validate_parse: 11 callbacks suppressed [ 170.131918][T10321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1219'. [ 170.164598][T10321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1219'. [ 170.193878][T10325] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1221'. [ 170.283796][T10331] netlink: 'syz.3.1222': attribute type 21 has an invalid length. [ 170.291482][T10330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.291931][T10331] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1222'. [ 170.440692][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1224'. [ 170.520542][T10336] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 170.680701][T10345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.746897][T10344] can: request_module (can-proto-0) failed. [ 171.356507][T10367] xt_CT: You must specify a L4 protocol and not use inversions on it [ 171.684750][T10381] netlink: 'syz.3.1236': attribute type 9 has an invalid length. [ 171.725076][T10381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1236'. [ 171.743059][T10374] syzkaller0: entered promiscuous mode [ 171.748567][T10374] syzkaller0: entered allmulticast mode [ 171.765759][T10381] netlink: 'syz.3.1236': attribute type 9 has an invalid length. [ 171.773930][T10381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1236'. [ 171.912455][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1239'. [ 171.929846][T10386] openvswitch: netlink: Missing key (keys=40, expected=80) [ 171.950476][T10386] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1239'. [ 173.430945][ T7222] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.439892][ T7222] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.448137][ T7222] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.634370][ T7222] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.641734][T10419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1245'. [ 173.663109][T10414] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 173.928303][T10436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.266392][T10459] netlink: 'syz.3.1258': attribute type 4 has an invalid length. [ 174.800967][T10485] netlink: 'syz.1.1265': attribute type 1 has an invalid length. [ 194.346814][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.422253][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 196.424002][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 196.429766][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 235.649900][T10533] __nla_validate_parse: 4 callbacks suppressed [ 235.649917][T10533] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1274'. [ 235.691166][T10533] sctp: [Deprecated]: syz.1.1274 (pid 10533) Use of int in max_burst socket option. [ 235.691166][T10533] Use struct sctp_assoc_value instead [ 235.728514][T10542] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1274'. [ 236.063965][T10561] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 236.128708][T10565] ieee802154 phy1 wpan1: encryption failed: -22 [ 236.151456][T10565] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1284'. [ 236.226168][T10570] sctp: [Deprecated]: syz.4.1286 (pid 10570) Use of int in max_burst socket option deprecated. [ 236.226168][T10570] Use struct sctp_assoc_value instead [ 236.357884][T10584] netlink: 'syz.4.1290': attribute type 83 has an invalid length. [ 236.573072][T10592] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1292'. [ 237.153030][T10599] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1294'. [ 237.443943][T10612] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1299'. [ 237.477375][T10614] xt_hashlimit: size too large, truncated to 1048576 [ 237.606854][T10629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1299'. [ 237.981029][T10641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1304'. [ 238.034904][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1304'. [ 238.950202][T10634] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 238.951949][T10645] netlink: 'syz.3.1305': attribute type 29 has an invalid length. [ 238.992329][T10648] netlink: 'syz.3.1305': attribute type 29 has an invalid length. [ 239.204613][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1311'. [ 239.294733][T10662] xt_cgroup: invalid path, errno=-2 [ 239.757454][T10699] openvswitch: netlink: Tunnel attr 15060 out of range max 16 [ 239.920061][T10708] netlink: 'syz.1.1323': attribute type 15 has an invalid length. [ 240.013820][T10715] syz_tun: entered allmulticast mode [ 240.131212][T10721] netlink: 'syz.2.1327': attribute type 28 has an invalid length. [ 240.141177][T10721] netlink: 'syz.2.1327': attribute type 3 has an invalid length. [ 240.207878][T10720] erspan0: entered promiscuous mode [ 240.225402][T10710] syz_tun: left allmulticast mode [ 240.914147][T10771] netlink: 'syz.4.1344': attribute type 1 has an invalid length. [ 240.972368][T10776] __nla_validate_parse: 8 callbacks suppressed [ 240.972385][T10776] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1343'. [ 241.144734][T10786] netlink: 'syz.3.1347': attribute type 8 has an invalid length. [ 241.155458][T10786] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1347'. [ 241.212490][T10789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1349'. [ 241.423028][T10786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.441035][T10786] bond0 (unregistering): Released all slaves [ 241.689540][T10811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.754248][T10815] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1358'. [ 241.909567][T10829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1361'. [ 242.321720][T10850] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1364'. [ 242.768133][T10880] macvtap1: entered promiscuous mode [ 242.775562][T10880] macvtap1: entered allmulticast mode [ 242.778369][T10882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1376'. [ 242.904893][T10887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1379'. [ 242.964108][T10889] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 243.025545][T10894] netlink: 'syz.2.1381': attribute type 33 has an invalid length. [ 243.056991][T10894] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 243.072117][T10894] bond6 (unregistering): Released all slaves [ 243.430848][T10911] team0: Device wireguard0 is of different type [ 243.600508][T10928] netlink: 'syz.3.1389': attribute type 1 has an invalid length. [ 243.691582][T10928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.703845][T10929] sctp: [Deprecated]: syz.2.1388 (pid 10929) Use of int in max_burst socket option. [ 243.703845][T10929] Use struct sctp_assoc_value instead [ 243.709735][T10933] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1391'. [ 243.736629][T10928] bond0: (slave gretap1): making interface the new active one [ 243.785420][T10928] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 243.933027][T10940] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1394'. [ 244.105581][T10947] 8021q: adding VLAN 0 to HW filter on device bond6 [ 244.315636][T10972] netlink: 'syz.3.1401': attribute type 13 has an invalid length. [ 244.326627][T10972] netlink: 'syz.3.1401': attribute type 17 has an invalid length. [ 244.482649][T10983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.531861][T10972] veth1_to_bridge: left promiscuous mode [ 244.633751][T10972] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.646613][T10972] ip6gre1: left allmulticast mode [ 244.655307][ T7231] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x41 [ 244.689038][T10972] bond2: left allmulticast mode [ 244.694301][T10972] 8021q: adding VLAN 0 to HW filter on device bond2 [ 244.703934][T10972] veth3: left promiscuous mode [ 244.711778][T10972] veth5: left promiscuous mode [ 244.720040][T10972] vlan2: left allmulticast mode [ 244.724906][T10972] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 244.742132][T10972] 8021q: adding VLAN 0 to HW filter on device bond3 [ 244.780441][T10972] 8021q: adding VLAN 0 to HW filter on device bond5 [ 244.816591][ T7222] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.823862][ T7222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.882007][T11003] tipc: Enabled bearer , priority 0 [ 244.917982][T11004] syzkaller0: entered promiscuous mode [ 244.925183][T11004] syzkaller0: entered allmulticast mode [ 244.946742][T11000] tipc: Resetting bearer [ 244.961894][T10998] tipc: Resetting bearer [ 244.985337][T10998] tipc: Disabling bearer [ 245.020918][ T7231] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 245.030724][ T7231] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 245.040019][ T7231] bond2: (slave veth3): making interface the new active one [ 245.051470][ T7231] bond2: active interface up! [ 245.306317][T11024] netlink: 'syz.2.1415': attribute type 9 has an invalid length. [ 245.726050][T11037] sch_fq: defrate 0 ignored. [ 245.766583][T11050] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 245.984430][T11064] __nla_validate_parse: 39 callbacks suppressed [ 245.984518][T11064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1428'. [ 246.056480][T11064] netlink: 'syz.2.1428': attribute type 26 has an invalid length. [ 246.075804][T11064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1428'. [ 246.119165][T11064] netlink: 'syz.2.1428': attribute type 26 has an invalid length. [ 246.157206][T11064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1428'. [ 246.358086][T11080] netlink: 652 bytes leftover after parsing attributes in process `syz.0.1431'. [ 246.367600][T11087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1433'. [ 246.620947][T11099] Set syz1 is full, maxelem 65536 reached [ 246.741528][T11108] netlink: 'syz.2.1443': attribute type 10 has an invalid length. [ 246.893048][T11118] netlink: 'syz.4.1441': attribute type 13 has an invalid length. [ 247.028563][T11122] vlan3: entered promiscuous mode [ 247.052448][T11122] bridge0: entered promiscuous mode [ 247.349747][T11139] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1451'. [ 247.466131][T11145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1451'. [ 247.546967][T11140] syzkaller0: entered promiscuous mode [ 247.559663][T11140] syzkaller0: entered allmulticast mode [ 247.827165][T11156] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20002 [ 249.268831][T11170] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1457'. [ 249.358614][T11179] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 249.490577][T11189] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1461'. [ 249.522588][T11190] bridge0: port 3(batadv1) entered blocking state [ 249.529563][T11190] bridge0: port 3(batadv1) entered disabled state [ 249.536169][T11190] batadv1: entered allmulticast mode [ 249.560697][T11190] batadv1: entered promiscuous mode [ 249.814048][T11212] vcan0: tx drop: invalid sa for name 0x2000000000000000 [ 249.831866][T11213] ÏŒÿÿ: renamed from ip_vti0 [ 249.989579][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1471'. [ 250.019346][ T1135] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 250.029284][ T1135] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 250.131091][T11232] netlink: 'syz.4.1474': attribute type 1 has an invalid length. [ 250.448267][T11246] netlink: 'syz.2.1477': attribute type 12 has an invalid length. [ 250.601998][T11253] xt_hashlimit: size too large, truncated to 1048576 [ 250.849180][T11268] netlink: 'syz.1.1485': attribute type 2 has an invalid length. [ 251.178576][T11279] __nla_validate_parse: 8 callbacks suppressed [ 251.178593][T11279] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.1489'. [ 251.194952][T11279] openvswitch: netlink: Missing key (keys=40, expected=100) [ 251.275584][T11294] netlink: 'syz.0.1489': attribute type 1 has an invalid length. [ 251.379559][ T5149] Bluetooth: hci0: command tx timeout [ 251.734295][T11319] netlink: 'syz.2.1499': attribute type 1 has an invalid length. [ 251.756611][T11316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1499'. [ 251.782189][T11319] netlink: 14894 bytes leftover after parsing attributes in process `syz.2.1499'. [ 251.824388][T11316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1499'. [ 251.870804][T11330] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1502'. [ 251.900872][T11328] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1501'. [ 251.910376][T11331] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1501'. [ 252.019738][T11331] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 252.052258][T11331] 0ªî{X¹¦: entered allmulticast mode [ 252.075164][T11331] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 252.112904][T11328] 0ªî{X¹¦: left allmulticast mode [ 252.126269][T11327] netlink: 'syz.3.1501': attribute type 1 has an invalid length. [ 252.249718][T11338] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1505'. [ 252.316113][T11354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1510'. [ 252.326829][ T6946] IPVS: starting estimator thread 0... [ 252.350779][T11354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1510'. [ 252.416528][T11359] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 252.429324][T11357] IPVS: using max 35 ests per chain, 84000 per kthread [ 252.577004][T11370] macvtap1: entered promiscuous mode [ 252.619843][T11370] vlan0: entered promiscuous mode [ 252.637334][T11370] macvtap1: entered allmulticast mode [ 252.645137][T11370] vlan0: entered allmulticast mode [ 252.650713][T11370] veth0_vlan: entered allmulticast mode [ 252.687013][T11375] macvtap2: entered promiscuous mode [ 252.700562][T11375] macvtap2: entered allmulticast mode [ 253.025210][T11399] tipc: Enabled bearer , priority 0 [ 253.044870][T11399] syzkaller0: entered promiscuous mode [ 253.052663][T11403] netlink: 'syz.3.1523': attribute type 1 has an invalid length. [ 253.071733][T11399] syzkaller0: entered allmulticast mode [ 253.404430][T11409] tipc: Resetting bearer [ 253.428638][T11398] tipc: Resetting bearer [ 253.534624][T11398] tipc: Disabling bearer [ 253.562555][T11431] netlink: 'syz.1.1528': attribute type 11 has an invalid length. [ 253.577378][T11429] nbd: must specify at least one socket [ 253.855114][T11442] Set syz1 is full, maxelem 65536 reached [ 253.912969][T11440] syzkaller1: entered promiscuous mode [ 253.930886][T11440] syzkaller1: entered allmulticast mode [ 253.943892][T11445] ip6tnl3: entered promiscuous mode [ 253.988364][T11440] syz_tun (unregistering): left allmulticast mode [ 254.004729][T11453] sctp: [Deprecated]: syz.3.1538 (pid 11453) Use of int in max_burst socket option deprecated. [ 254.004729][T11453] Use struct sctp_assoc_value instead [ 254.162890][T11459] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.320585][T11461] tipc: Enabled bearer , priority 0 [ 254.345445][T11460] tipc: Disabling bearer [ 254.395442][T11474] netlink: 'syz.0.1546': attribute type 1 has an invalid length. [ 254.498093][T11477] syzkaller0: entered promiscuous mode [ 254.505171][T11477] syzkaller0: entered allmulticast mode [ 254.658683][T11489] xt_ipcomp: unknown flags 1D [ 255.138404][T11521] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 255.782824][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.448123][T11550] netlink: 'syz.0.1565': attribute type 3 has an invalid length. [ 256.550162][T11550] netlink: 'syz.0.1565': attribute type 3 has an invalid length. [ 256.682032][T11570] __nla_validate_parse: 14 callbacks suppressed [ 256.682049][T11570] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1572'. [ 256.697951][T11570] netlink: 'syz.0.1572': attribute type 9 has an invalid length. [ 256.719914][T11570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1572'. [ 256.729639][T11570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1572'. [ 256.746171][T11570] netlink: 'syz.0.1572': attribute type 20 has an invalid length. [ 256.777419][T11570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1572'. [ 256.824274][T11570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1572'. [ 256.889699][T11570] netlink: 'syz.0.1572': attribute type 20 has an invalid length. [ 256.915879][T11576] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1574'. [ 256.937931][T11576] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1574'. [ 257.154076][T11589] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1577'. [ 257.398228][T11604] 8021q: adding VLAN 0 to HW filter on device bond7 [ 257.408652][T11601] tipc: Started in network mode [ 257.414826][T11601] tipc: Node identity 0e89888d6278, cluster identity 4711 [ 257.423868][T11601] tipc: Enabled bearer , priority 0 [ 257.541121][T11615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1587'. [ 257.551535][T11601] syzkaller0: entered promiscuous mode [ 257.557171][T11601] syzkaller0: entered allmulticast mode [ 257.563477][T11615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1587'. [ 257.589569][T11601] tipc: Resetting bearer [ 257.629187][T11600] tipc: Resetting bearer [ 257.687915][T11600] tipc: Disabling bearer [ 257.946662][T11633] : entered promiscuous mode [ 258.370926][T11652] block nbd3: server does not support multiple connections per device. [ 258.391311][T11652] block nbd3: shutting down sockets [ 258.888590][T11690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.940689][T11690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.195652][T11713] x_tables: duplicate underflow at hook 1 [ 259.730356][T11748] netlink: 'syz.4.1626': attribute type 10 has an invalid length. [ 259.742408][T11748] batadv0: entered promiscuous mode [ 259.752537][T11748] batadv0: entered allmulticast mode [ 259.779762][T11748] bridge0: port 3(batadv0) entered blocking state [ 259.813628][T11748] bridge0: port 3(batadv0) entered disabled state [ 259.872961][T11748] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 259.890702][T11748] bond1: (slave lo): Enslaving as a backup interface with an up link [ 259.900519][T11748] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 260.087390][T11759] gtp0: entered promiscuous mode [ 260.139357][T11759] gtp0: entered allmulticast mode [ 260.221012][T11774] IPVS: length: 18 != 8 [ 260.229154][T11766] syzkaller1: entered promiscuous mode [ 260.234680][T11766] syzkaller1: entered allmulticast mode [ 260.279098][ T7236] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 260.288466][ T7236] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 260.479667][T11787] vlan4: entered promiscuous mode [ 261.161914][T11831] netlink: 'syz.2.1650': attribute type 29 has an invalid length. [ 261.219209][T11831] netlink: 'syz.2.1650': attribute type 29 has an invalid length. [ 261.423025][T11843] openvswitch: netlink: Tunnel attr 15060 out of range max 16 [ 261.637156][T11855] netlink: 'syz.0.1655': attribute type 1 has an invalid length. [ 262.127591][T11885] netlink: 'syz.0.1667': attribute type 1 has an invalid length. [ 262.209619][T11885] 8021q: adding VLAN 0 to HW filter on device bond3 [ 262.247850][T11891] bond3: (slave ip6gretap1): making interface the new active one [ 262.257246][T11891] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 262.268123][T11896] syzkaller0: entered promiscuous mode [ 262.274104][T11896] syzkaller0: entered allmulticast mode [ 262.283856][T11896] __nla_validate_parse: 14 callbacks suppressed [ 262.283871][T11896] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1670'. [ 262.372333][T11902] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1672'. [ 262.423126][T11904] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1673'. [ 262.446965][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1673'. [ 262.491707][T11908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1674'. [ 262.501805][T11908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1674'. [ 262.769667][T11921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1680'. [ 262.971966][T11932] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1682'. [ 264.616138][T11966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1694'. [ 264.627479][T11968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1693'. [ 264.729464][T11973] syzkaller1: entered promiscuous mode [ 264.761332][T11973] syzkaller1: entered allmulticast mode [ 264.781614][T11973] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:20003 [ 264.834121][T11980] netlink: 'syz.3.1699': attribute type 9 has an invalid length. [ 265.304118][T12009] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 265.335882][T12009] bond4 (unregistering): Released all slaves [ 265.381263][T12016] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 265.840603][T12040] syzkaller0: entered promiscuous mode [ 265.846172][T12040] syzkaller0: entered allmulticast mode [ 265.854445][T12043] netlink: 'syz.0.1721': attribute type 22 has an invalid length. [ 265.872911][ T7212] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.874133][T12043] netlink: 'syz.0.1721': attribute type 22 has an invalid length. [ 265.882330][ T7212] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.905014][ T7212] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.915180][ T7212] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.064728][T12054] FAULT_INJECTION: forcing a failure. [ 266.064728][T12054] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 266.102793][T12054] CPU: 0 UID: 0 PID: 12054 Comm: syz.2.1723 Not tainted syzkaller #0 PREEMPT(full) [ 266.102840][T12054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 266.102867][T12054] Call Trace: [ 266.102875][T12054] [ 266.102883][T12054] dump_stack_lvl+0x189/0x250 [ 266.102921][T12054] ? __pfx____ratelimit+0x10/0x10 [ 266.102951][T12054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.102973][T12054] ? __pfx__printk+0x10/0x10 [ 266.102992][T12054] ? __might_fault+0xb0/0x130 [ 266.103027][T12054] should_fail_ex+0x414/0x560 [ 266.103057][T12054] _copy_from_iter+0x1de/0x1790 [ 266.103083][T12054] ? rcu_is_watching+0x15/0xb0 [ 266.103106][T12054] ? kmalloc_reserve+0xbd/0x290 [ 266.103123][T12054] ? __pfx__copy_from_iter+0x10/0x10 [ 266.103145][T12054] ? __build_skb_around+0x262/0x3f0 [ 266.103172][T12054] ? netlink_sendmsg+0x642/0xb30 [ 266.103187][T12054] ? skb_put+0x11b/0x210 [ 266.103207][T12054] netlink_sendmsg+0x6b2/0xb30 [ 266.103234][T12054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.103255][T12054] ? aa_sock_msg_perm+0xf1/0x1d0 [ 266.103280][T12054] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 266.103298][T12054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.103315][T12054] __sock_sendmsg+0x21c/0x270 [ 266.103341][T12054] ____sys_sendmsg+0x505/0x830 [ 266.103365][T12054] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.103393][T12054] ? import_iovec+0x74/0xa0 [ 266.103418][T12054] ___sys_sendmsg+0x21f/0x2a0 [ 266.103439][T12054] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.103493][T12054] ? __fget_files+0x2a/0x420 [ 266.103509][T12054] ? __fget_files+0x3a0/0x420 [ 266.103536][T12054] __x64_sys_sendmsg+0x19b/0x260 [ 266.103558][T12054] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 266.103586][T12054] ? __pfx_ksys_write+0x10/0x10 [ 266.103614][T12054] ? do_syscall_64+0xbe/0xfa0 [ 266.103640][T12054] do_syscall_64+0xfa/0xfa0 [ 266.103661][T12054] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.103683][T12054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.103699][T12054] ? clear_bhb_loop+0x60/0xb0 [ 266.103718][T12054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.103735][T12054] RIP: 0033:0x7f41d918f6c9 [ 266.103758][T12054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.103773][T12054] RSP: 002b:00007f41d9f59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.103799][T12054] RAX: ffffffffffffffda RBX: 00007f41d93e5fa0 RCX: 00007f41d918f6c9 [ 266.103811][T12054] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 0000000000000005 [ 266.103823][T12054] RBP: 00007f41d9f59090 R08: 0000000000000000 R09: 0000000000000000 [ 266.103834][T12054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.103844][T12054] R13: 00007f41d93e6038 R14: 00007f41d93e5fa0 R15: 00007ffe8015bda8 [ 266.103875][T12054] [ 267.824690][T12061] !: renamed from dummy0 (while UP) [ 268.046968][T12085] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 268.076079][T12085] bond4 (unregistering): Released all slaves [ 268.080087][T12096] __nla_validate_parse: 14 callbacks suppressed [ 268.080103][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1730'. [ 268.114927][T12091] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 268.115848][T12096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1730'. [ 268.258052][T12103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.276679][T12103] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1735'. [ 268.327961][T12107] FAULT_INJECTION: forcing a failure. [ 268.327961][T12107] name failslab, interval 1, probability 0, space 0, times 1 [ 268.340912][T12107] CPU: 0 UID: 0 PID: 12107 Comm: syz.0.1737 Not tainted syzkaller #0 PREEMPT(full) [ 268.340936][T12107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 268.340945][T12107] Call Trace: [ 268.340952][T12107] [ 268.340960][T12107] dump_stack_lvl+0x189/0x250 [ 268.340988][T12107] ? __pfx____ratelimit+0x10/0x10 [ 268.341010][T12107] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.341032][T12107] ? __pfx__printk+0x10/0x10 [ 268.341055][T12107] ? __lock_acquire+0xab9/0xd20 [ 268.341079][T12107] should_fail_ex+0x414/0x560 [ 268.341107][T12107] should_failslab+0xa8/0x100 [ 268.341126][T12107] kmem_cache_alloc_noprof+0x74/0x6e0 [ 268.341149][T12107] ? skb_clone+0x212/0x3a0 [ 268.341174][T12107] skb_clone+0x212/0x3a0 [ 268.341197][T12107] __netlink_deliver_tap+0x404/0x850 [ 268.341227][T12107] ? netlink_deliver_tap+0x2e/0x1b0 [ 268.341245][T12107] netlink_deliver_tap+0x19c/0x1b0 [ 268.341263][T12107] netlink_unicast+0x7fa/0x9e0 [ 268.341293][T12107] ? __pfx_netlink_unicast+0x10/0x10 [ 268.341318][T12107] ? netlink_sendmsg+0x642/0xb30 [ 268.341333][T12107] ? skb_put+0x11b/0x210 [ 268.341352][T12107] netlink_sendmsg+0x805/0xb30 [ 268.341378][T12107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.341398][T12107] ? aa_sock_msg_perm+0xf1/0x1d0 [ 268.341423][T12107] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 268.341440][T12107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.341456][T12107] __sock_sendmsg+0x21c/0x270 [ 268.341480][T12107] ____sys_sendmsg+0x505/0x830 [ 268.341504][T12107] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.341530][T12107] ? import_iovec+0x74/0xa0 [ 268.341554][T12107] ___sys_sendmsg+0x21f/0x2a0 [ 268.341574][T12107] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.341628][T12107] ? __fget_files+0x2a/0x420 [ 268.341644][T12107] ? __fget_files+0x3a0/0x420 [ 268.341671][T12107] __x64_sys_sendmsg+0x19b/0x260 [ 268.341702][T12107] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 268.341730][T12107] ? __pfx_ksys_write+0x10/0x10 [ 268.341758][T12107] ? do_syscall_64+0xbe/0xfa0 [ 268.341785][T12107] do_syscall_64+0xfa/0xfa0 [ 268.341806][T12107] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.341829][T12107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.341845][T12107] ? clear_bhb_loop+0x60/0xb0 [ 268.341865][T12107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.341881][T12107] RIP: 0033:0x7fc67438f6c9 [ 268.341897][T12107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.341911][T12107] RSP: 002b:00007fc6752d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.341929][T12107] RAX: ffffffffffffffda RBX: 00007fc6745e5fa0 RCX: 00007fc67438f6c9 [ 268.341941][T12107] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 0000000000000005 [ 268.341952][T12107] RBP: 00007fc6752d5090 R08: 0000000000000000 R09: 0000000000000000 [ 268.341963][T12107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.341973][T12107] R13: 00007fc6745e6038 R14: 00007fc6745e5fa0 R15: 00007fff6495c688 [ 268.342004][T12107] [ 269.152944][T12149] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1747'. [ 269.453573][T12163] netlink: 'syz.3.1751': attribute type 1 has an invalid length. [ 269.476734][T12163] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1751'. [ 269.504877][T12169] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1753'. [ 270.024059][T12204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1761'. [ 270.051915][T12205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1761'. [ 270.090314][T12203] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1761'. [ 270.139184][T12211] FAULT_INJECTION: forcing a failure. [ 270.139184][T12211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.160901][T12211] CPU: 0 UID: 0 PID: 12211 Comm: syz.4.1763 Not tainted syzkaller #0 PREEMPT(full) [ 270.160923][T12211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 270.160933][T12211] Call Trace: [ 270.160940][T12211] [ 270.160947][T12211] dump_stack_lvl+0x189/0x250 [ 270.160974][T12211] ? __pfx____ratelimit+0x10/0x10 [ 270.160996][T12211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.161017][T12211] ? __pfx__printk+0x10/0x10 [ 270.161047][T12211] should_fail_ex+0x414/0x560 [ 270.161074][T12211] _copy_to_user+0x31/0xb0 [ 270.161097][T12211] simple_read_from_buffer+0xe1/0x170 [ 270.161125][T12211] proc_fail_nth_read+0x1b3/0x220 [ 270.161149][T12211] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 270.161173][T12211] ? rw_verify_area+0x2a6/0x4d0 [ 270.161194][T12211] ? __lock_acquire+0xab9/0xd20 [ 270.161210][T12211] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 270.161232][T12211] vfs_read+0x200/0xa30 [ 270.161253][T12211] ? fdget_pos+0x247/0x320 [ 270.161274][T12211] ? __pfx___mutex_lock+0x10/0x10 [ 270.161297][T12211] ? __pfx_vfs_read+0x10/0x10 [ 270.161320][T12211] ? __fget_files+0x2a/0x420 [ 270.161341][T12211] ? __fget_files+0x3a0/0x420 [ 270.161356][T12211] ? __fget_files+0x2a/0x420 [ 270.161380][T12211] ksys_read+0x145/0x250 [ 270.161403][T12211] ? __pfx_ksys_read+0x10/0x10 [ 270.161428][T12211] ? do_syscall_64+0xbe/0xfa0 [ 270.161454][T12211] do_syscall_64+0xfa/0xfa0 [ 270.161475][T12211] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.161493][T12211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.161509][T12211] ? clear_bhb_loop+0x60/0xb0 [ 270.161528][T12211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.161543][T12211] RIP: 0033:0x7f4711b8e0dc [ 270.161567][T12211] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 270.161582][T12211] RSP: 002b:00007f4712a96030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 270.161601][T12211] RAX: ffffffffffffffda RBX: 00007f4711de5fa0 RCX: 00007f4711b8e0dc [ 270.161613][T12211] RDX: 000000000000000f RSI: 00007f4712a960a0 RDI: 0000000000000006 [ 270.161623][T12211] RBP: 00007f4712a96090 R08: 0000000000000000 R09: 0000000000000000 [ 270.161633][T12211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.161643][T12211] R13: 00007f4711de6038 R14: 00007f4711de5fa0 R15: 00007ffd2472b148 [ 270.161674][T12211] [ 270.409683][T12203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1761'. [ 270.773193][T12233] netlink: 'syz.4.1773': attribute type 2 has an invalid length. [ 271.321110][T12264] syzkaller0: entered promiscuous mode [ 271.362180][T12264] syzkaller0: entered allmulticast mode [ 271.711617][T12287] sctp: [Deprecated]: syz.1.1789 (pid 12287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 271.711617][T12287] Use struct sctp_sack_info instead [ 271.735238][T12287] sctp: [Deprecated]: syz.1.1789 (pid 12287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 271.735238][T12287] Use struct sctp_sack_info instead [ 272.072383][T12309] netlink: 'syz.0.1797': attribute type 1 has an invalid length. [ 272.136876][T12315] sock: sock_set_timeout: `syz.2.1800' (pid 12315) tries to set negative timeout [ 272.152555][T12309] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 272.174297][T12313] bridge0: port 3(batadv2) entered blocking state [ 272.228443][T12313] bridge0: port 3(batadv2) entered disabled state [ 272.306506][T12313] batadv2: entered allmulticast mode [ 272.337825][T12313] batadv2: entered promiscuous mode [ 272.423884][T12337] netlink: 'syz.0.1805': attribute type 10 has an invalid length. [ 272.519164][T12335] IPVS: set_ctl: invalid protocol: 119 172.20.20.52:20004 [ 272.543193][T12337] batman_adv: batadv0: Adding interface: netdevsim0 [ 272.554479][T12337] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.589432][T12337] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 272.660652][T12351] netlink: 'syz.1.1809': attribute type 23 has an invalid length. [ 272.672920][ T7219] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 272.682336][ T7219] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 272.747563][T12356] netlink: 'syz.2.1810': attribute type 7 has an invalid length. [ 273.052135][ T5149] block nbd3: Receive control failed (result -107) [ 273.197439][T12384] __nla_validate_parse: 17 callbacks suppressed [ 273.197457][T12384] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1818'. [ 273.586791][T12401] syzkaller0: entered promiscuous mode [ 273.608869][T12401] syzkaller0: entered allmulticast mode [ 274.103106][T12426] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 274.245216][T12432] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1831'. [ 274.344222][T12438] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1833'. [ 274.448996][T12432] can: request_module (can-proto-0) failed. [ 275.022398][T12481] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1844'. [ 275.052319][T12481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.072336][T12483] netlink: 'syz.4.1845': attribute type 29 has an invalid length. [ 275.120961][T12485] tipc: Enabling of bearer rejected, failed to enable media [ 275.262487][T12487] syzkaller0: entered promiscuous mode [ 275.268088][T12487] syzkaller0: entered allmulticast mode [ 275.356690][T12498] bridge3: entered promiscuous mode [ 275.368815][T12498] bridge3: entered allmulticast mode [ 275.390644][T12506] netlink: 'syz.1.1850': attribute type 6 has an invalid length. [ 277.317936][T12551] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1864'. [ 277.372379][T12555] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1865'. [ 277.412776][T12555] bond6 (unregistering): Released all slaves [ 277.468435][T12560] netlink: 'syz.2.1867': attribute type 33 has an invalid length. [ 277.479874][T12560] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1867'. [ 277.824219][T12574] netlink: 'syz.2.1870': attribute type 1 has an invalid length. [ 277.896668][T12579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1871'. [ 277.929668][T12574] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 277.965358][T12574] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 277.985467][T12574] bond8: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 278.160432][T12585] syzkaller1: entered promiscuous mode [ 278.192024][T12585] syzkaller1: entered allmulticast mode [ 278.236137][T12590] syz.2.1875: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 278.256103][T12590] CPU: 0 UID: 0 PID: 12590 Comm: syz.2.1875 Not tainted syzkaller #0 PREEMPT(full) [ 278.256128][T12590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 278.256140][T12590] Call Trace: [ 278.256147][T12590] [ 278.256155][T12590] dump_stack_lvl+0x189/0x250 [ 278.256185][T12590] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.256207][T12590] ? __pfx__printk+0x10/0x10 [ 278.256226][T12590] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 278.256250][T12590] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 278.256274][T12590] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 278.256299][T12590] warn_alloc+0x214/0x310 [ 278.256329][T12590] ? __pfx_warn_alloc+0x10/0x10 [ 278.256363][T12590] ? __get_vm_area_node+0x28f/0x300 [ 278.256386][T12590] ? nf_tables_newset+0x1330/0x2540 [ 278.256411][T12590] __vmalloc_node_range_noprof+0x690/0x12d0 [ 278.256465][T12590] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 278.256488][T12590] ? nf_tables_newset+0x1330/0x2540 [ 278.256512][T12590] ? rcu_is_watching+0x15/0xb0 [ 278.256532][T12590] ? nf_tables_newset+0x1330/0x2540 [ 278.256553][T12590] __kvmalloc_node_noprof+0x674/0x910 [ 278.256578][T12590] ? nf_tables_newset+0x1330/0x2540 [ 278.256602][T12590] ? nft_set_lookup+0x128/0x150 [ 278.256623][T12590] ? nft_hash_privsize+0xf/0xf0 [ 278.256644][T12590] nf_tables_newset+0x1330/0x2540 [ 278.256677][T12590] ? __pfx_nf_tables_newset+0x10/0x10 [ 278.256718][T12590] ? __nla_parse+0x40/0x60 [ 278.256742][T12590] nfnetlink_rcv+0x11d9/0x2590 [ 278.256810][T12590] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 278.256881][T12590] ? netlink_deliver_tap+0x2e/0x1b0 [ 278.256916][T12590] netlink_unicast+0x82f/0x9e0 [ 278.256949][T12590] ? __pfx_netlink_unicast+0x10/0x10 [ 278.256973][T12590] ? netlink_sendmsg+0x642/0xb30 [ 278.256987][T12590] ? skb_put+0x11b/0x210 [ 278.257011][T12590] netlink_sendmsg+0x805/0xb30 [ 278.257038][T12590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.257058][T12590] ? aa_sock_msg_perm+0xf1/0x1d0 [ 278.257085][T12590] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 278.257101][T12590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.257120][T12590] __sock_sendmsg+0x21c/0x270 [ 278.257146][T12590] ____sys_sendmsg+0x505/0x830 [ 278.257170][T12590] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.257198][T12590] ? import_iovec+0x74/0xa0 [ 278.257224][T12590] ___sys_sendmsg+0x21f/0x2a0 [ 278.257245][T12590] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.257299][T12590] ? __fget_files+0x2a/0x420 [ 278.257315][T12590] ? __fget_files+0x3a0/0x420 [ 278.257347][T12590] __x64_sys_sendmsg+0x19b/0x260 [ 278.257368][T12590] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 278.257403][T12590] ? do_syscall_64+0xbe/0xfa0 [ 278.257430][T12590] do_syscall_64+0xfa/0xfa0 [ 278.257451][T12590] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.257473][T12590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.257490][T12590] ? clear_bhb_loop+0x60/0xb0 [ 278.257511][T12590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.257527][T12590] RIP: 0033:0x7f41d918f6c9 [ 278.257543][T12590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.257557][T12590] RSP: 002b:00007f41d73d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.257576][T12590] RAX: ffffffffffffffda RBX: 00007f41d93e6180 RCX: 00007f41d918f6c9 [ 278.257589][T12590] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000020 [ 278.257600][T12590] RBP: 00007f41d9211f91 R08: 0000000000000000 R09: 0000000000000000 [ 278.257611][T12590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.257621][T12590] R13: 00007f41d93e6218 R14: 00007f41d93e6180 R15: 00007ffe8015bda8 [ 278.257652][T12590] [ 278.257736][T12590] Mem-Info: [ 278.623968][T12590] active_anon:5968 inactive_anon:0 isolated_anon:0 [ 278.623968][T12590] active_file:3143 inactive_file:39942 isolated_file:0 [ 278.623968][T12590] unevictable:768 dirty:68 writeback:0 [ 278.623968][T12590] slab_reclaimable:10883 slab_unreclaimable:142851 [ 278.623968][T12590] mapped:29397 shmem:1356 pagetables:1203 [ 278.623968][T12590] sec_pagetables:0 bounce:0 [ 278.623968][T12590] kernel_misc_reclaimable:0 [ 278.623968][T12590] free:1280227 free_pcp:13139 free_cma:0 [ 278.671778][T12590] Node 0 active_anon:23872kB inactive_anon:0kB active_file:12572kB inactive_file:159568kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117588kB dirty:272kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14768kB pagetables:4688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 278.706981][T12590] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 278.738124][T12590] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 278.768114][T12590] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 278.774044][T12590] Node 0 DMA32 free:1213128kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23872kB inactive_anon:0kB active_file:12572kB inactive_file:159568kB unevictable:1536kB writepending:272kB zspages:0kB present:3129332kB managed:2565164kB mlocked:0kB bounce:0kB free_pcp:32632kB local_pcp:19128kB free_cma:0kB [ 278.809001][T12590] lowmem_reserve[]: 0 0 0 0 0 [ 278.813845][T12590] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 278.819021][T12598] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1876'. [ 278.855515][T12590] lowmem_reserve[]: 0 0 0 0 0 [ 278.860649][T12590] Node 1 Normal free:3892420kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19808kB local_pcp:12736kB free_cma:0kB [ 278.902427][T12590] lowmem_reserve[]: 0 0 0 0 0 [ 278.907294][T12590] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 278.966697][T12590] Node 0 DMA32: 358*4kB (M) 669*8kB (UM) 524*16kB (UME) 107*32kB (UM) 119*64kB (UM) 46*128kB (UME) 35*256kB (UM) 27*512kB (UM) 15*1024kB (UM) 4*2048kB (M) 277*4096kB (UM) = 1213024kB [ 279.042523][T12590] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 279.102324][T12608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1881'. [ 279.122910][T12590] Node 1 Normal: 231*4kB (UME) 53*8kB (UME) 44*16kB (UME) 136*32kB (UME) 31*64kB (UME) 8*128kB (UME) 2*256kB (M) 3*512kB (ME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3892420kB [ 279.142654][T12590] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 279.153977][T12590] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 279.164170][T12590] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 279.175811][T12590] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 279.192499][T12590] 44437 total pagecache pages [ 279.238967][T12590] 0 pages in swap cache [ 279.252306][T12590] Free swap = 124996kB [ 279.263422][T12590] Total swap = 124996kB [ 279.274602][T12590] 2097051 pages RAM [ 279.283884][T12590] 0 pages HighMem/MovableOnly [ 279.294815][T12590] 424118 pages reserved [ 279.302805][T12590] 0 pages cma reserved [ 279.348572][T12619] syzkaller1: entered promiscuous mode [ 279.365084][T12619] syzkaller1: entered allmulticast mode [ 279.469375][T12622] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1886'. [ 279.699903][T12635] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1889'. [ 279.862762][T12642] syzkaller1: entered promiscuous mode [ 279.868278][T12642] syzkaller1: entered allmulticast mode [ 280.057375][T12656] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 280.140485][T12656] bond9 (unregistering): Released all slaves [ 280.271391][T12663] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 280.285963][T12663] bond9 (unregistering): Released all slaves [ 280.326763][T12673] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 280.520894][T12692] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1901'. [ 280.576473][T12699] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1901'. [ 280.579212][T12692] gretap0: entered promiscuous mode [ 280.625570][T12697] tipc: Enabled bearer , priority 0 [ 280.643318][T12697] syzkaller0: entered promiscuous mode [ 280.665621][T12697] syzkaller0: entered allmulticast mode [ 280.695380][T12699] 0ªî{X¹¦: renamed from gretap0 [ 280.745936][T12699] 0ªî{X¹¦: left promiscuous mode [ 280.770342][T12708] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1904'. [ 280.778816][T12699] 0ªî{X¹¦: entered allmulticast mode [ 280.802847][T12708] netlink: 'syz.0.1904': attribute type 7 has an invalid length. [ 280.816071][T12708] netlink: 'syz.0.1904': attribute type 8 has an invalid length. [ 280.823509][T12699] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 280.830492][T12708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1904'. [ 280.912000][T12720] tipc: Resetting bearer [ 280.913801][T12722] digital: digital_start_poll: Unknown protocol [ 280.957769][T12694] tipc: Resetting bearer [ 280.979077][T12716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.006687][T12694] tipc: Disabling bearer [ 281.120127][T12729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1907'. [ 281.291338][T12735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1910'. [ 281.323101][T12739] wg0: entered allmulticast mode [ 281.562374][T12760] netlink: 'syz.3.1917': attribute type 1 has an invalid length. [ 281.572103][T12757] chnl_net:caif_netlink_parms(): no params data found [ 281.807798][T12777] netlink: 'syz.4.1920': attribute type 7 has an invalid length. [ 281.976562][T12792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.173340][T12804] syzkaller0: entered promiscuous mode [ 282.190371][T12804] syzkaller0: entered allmulticast mode [ 282.230560][T12806] tipc: New replicast peer: 255.255.255.255 [ 282.250721][T12806] tipc: Enabled bearer , priority 10 [ 282.364229][T12816] syzkaller0: entered promiscuous mode [ 282.370856][T12816] syzkaller0: entered allmulticast mode [ 283.054933][T12831] netlink: 'syz.0.1935': attribute type 1 has an invalid length. [ 283.809674][T12838] netlink: 'syz.2.1937': attribute type 1 has an invalid length. [ 283.936235][T12838] 8021q: adding VLAN 0 to HW filter on device bond9 [ 284.005436][T12844] bond9: (slave veth5): Enslaving as an active interface with a down link [ 284.039459][T12850] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 284.049300][T12851] batadv_slave_0: entered promiscuous mode [ 284.143468][T12838] bond9: (slave veth7): Enslaving as an active interface with a down link [ 284.353984][T12878] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:0 [ 284.360913][T12877] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:0 [ 284.379507][T12877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.399729][T12881] __nla_validate_parse: 6 callbacks suppressed [ 284.399746][T12881] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1948'. [ 284.529649][T12887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1951'. [ 284.600101][T12891] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 284.690223][T12842] batadv_slave_0: left promiscuous mode [ 285.111867][T12920] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1959'. [ 285.335581][T12934] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1963'. [ 285.353655][T12934] netlink: 'syz.4.1963': attribute type 1 has an invalid length. [ 285.390548][T12938] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1964'. [ 285.410673][T12937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1965'. [ 285.550928][T12944] openvswitch: netlink: Key 6 has unexpected len 182 expected 2 [ 285.814297][T12959] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1970'. [ 285.825306][T12959] openvswitch: netlink: Message has 536 unknown bytes. [ 285.832541][T12959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.845316][T12960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1970'. [ 286.019892][ T5149] Bluetooth: hci4: command 0x0406 tx timeout [ 286.623449][T12965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1972'. [ 286.693134][T12964] gretap0: entered promiscuous mode [ 286.759814][T12988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1977'. [ 286.855519][T12992] netlink: 'syz.2.1979': attribute type 12 has an invalid length. [ 287.003075][T12999] netlink: 'syz.2.1984': attribute type 11 has an invalid length. [ 287.311368][T13020] netlink: 'syz.4.1990': attribute type 12 has an invalid length. [ 288.485337][T13097] netlink: 'syz.4.2011': attribute type 10 has an invalid length. [ 288.682637][T13109] bond6: invalid ARP target 0.0.0.0 specified for addition [ 288.691116][T13109] bond6: option arp_ip_target: invalid value (0) [ 288.710872][T13109] bond6 (unregistering): Released all slaves [ 289.742865][T13176] tipc: Enabling of bearer rejected, media not registered [ 289.826466][T13174] __nla_validate_parse: 9 callbacks suppressed [ 289.826482][T13174] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2026'. [ 289.895658][T13190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2029'. [ 290.398932][T13212] netlink: 'syz.3.2035': attribute type 1 has an invalid length. [ 290.405072][T13216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2036'. [ 290.445131][T13216] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2036'. [ 290.489949][T13216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2036'. [ 290.490055][T13212] bond6: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 290.505077][T13216] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2036'. [ 290.562575][T13212] bond6: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 290.582563][T13226] netlink: 'syz.3.2035': attribute type 1 has an invalid length. [ 290.591436][T13212] bond6: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 290.665680][T13235] xt_ecn: cannot match TCP bits for non-tcp packets [ 290.745315][T13239] bridge0: mtu less than device minimum [ 290.853962][ T6946] IPVS: starting estimator thread 0... [ 290.880666][T13244] netlink: 'syz.4.2041': attribute type 1 has an invalid length. [ 290.948845][T13247] IPVS: using max 30 ests per chain, 72000 per kthread [ 291.086731][T13257] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2043'. [ 291.191579][T13265] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2047'. [ 291.266782][T13273] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2050'. [ 291.460614][T13282] netlink: 'syz.4.2055': attribute type 1 has an invalid length. [ 291.553297][T13282] 8021q: adding VLAN 0 to HW filter on device bond8 [ 291.674125][T13287] bond8: (slave veth3): Enslaving as an active interface with a down link [ 291.777195][T13308] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2061'. [ 292.037694][T13322] netlink: 'syz.2.2066': attribute type 1 has an invalid length. [ 292.108001][T13322] 8021q: adding VLAN 0 to HW filter on device bond10 [ 292.296528][T13337] openvswitch: netlink: Message has 4 unknown bytes. [ 292.618166][T13344] netlink: 'syz.1.2072': attribute type 13 has an invalid length. [ 292.635066][T13344] 0ªî{X¹¦: refused to change device tx_queue_len [ 292.642025][T13344] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 293.129905][T13350] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 293.515304][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 293.527245][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 293.536514][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 293.547251][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 293.556257][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 293.627279][T13366] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 293.671081][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 293.681409][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 293.691534][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 293.703108][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 293.712895][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 293.891554][T13377] syzkaller1: entered promiscuous mode [ 293.903960][T13377] syzkaller1: entered allmulticast mode [ 294.322060][T13393] netlink: 'syz.0.2092': attribute type 4 has an invalid length. [ 294.376336][T13397] netlink: 'syz.0.2092': attribute type 4 has an invalid length. [ 294.644961][T13412] sit1: entered promiscuous mode [ 294.653038][T13412] sit1: entered allmulticast mode [ 294.848461][T13359] chnl_net:caif_netlink_parms(): no params data found [ 294.914784][T13425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.972067][T13430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.001335][T13431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.038260][T13430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.095660][T13430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.163244][T13431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.173607][T13430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.180473][T13431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.210269][T13430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.222310][T13430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.236121][T13430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.272931][T13430] __nla_validate_parse: 10 callbacks suppressed [ 295.272947][T13430] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2104'. [ 295.320080][T13430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.345330][T13431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.445057][T13452] vlan0 (unregistering): left allmulticast mode [ 295.453483][T13452] veth0_vlan (unregistering): left allmulticast mode [ 295.460790][T13452] vlan0 (unregistering): left promiscuous mode [ 295.497418][T13359] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.505083][T13359] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.513071][T13359] bridge_slave_0: entered allmulticast mode [ 295.522739][T13359] bridge_slave_0: entered promiscuous mode [ 295.532722][T13359] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.540051][T13359] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.547360][T13359] bridge_slave_1: entered allmulticast mode [ 295.554927][T13359] bridge_slave_1: entered promiscuous mode [ 295.559449][T13461] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2110'. [ 295.619028][ T5149] Bluetooth: hci1: command tx timeout [ 295.627840][T13368] chnl_net:caif_netlink_parms(): no params data found [ 295.642469][T13465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2111'. [ 295.676454][T13465] block nbd4: Unsupported socket: should be TCP or UNIX. [ 295.693422][T13359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.757883][T13359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.778928][ T5149] Bluetooth: hci3: command tx timeout [ 295.899567][T13476] tipc: Enabled bearer , priority 0 [ 295.908299][T13359] team0: Port device team_slave_0 added [ 295.916862][T13359] team0: Port device team_slave_1 added [ 295.947189][T13368] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.965092][T13368] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.973713][T13368] bridge_slave_0: entered allmulticast mode [ 295.981547][T13368] bridge_slave_0: entered promiscuous mode [ 296.092564][T13485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.115741][T13487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.162770][T13473] tipc: Disabling bearer [ 296.179995][T13368] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.187484][T13368] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.196095][T13368] bridge_slave_1: entered allmulticast mode [ 296.204886][T13368] bridge_slave_1: entered promiscuous mode [ 296.287288][T13359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.295515][T13359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.322161][T13359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.334857][T13359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.341945][T13359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.368770][T13359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.444174][T13499] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2121'. [ 296.491032][T13368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.612445][T13368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.629810][T13359] hsr_slave_0: entered promiscuous mode [ 296.637077][T13359] hsr_slave_1: entered promiscuous mode [ 296.644360][T13359] debugfs: 'hsr0' already exists in 'hsr' [ 296.651099][T13359] Cannot create hsr debugfs directory [ 296.755436][T13368] team0: Port device team_slave_0 added [ 296.777459][T13368] team0: Port device team_slave_1 added [ 296.929390][T13522] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2129'. [ 296.953303][T13368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.960835][T13368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.987763][T13368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.017347][T13368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.024842][T13368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.051955][T13368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.199073][T13368] hsr_slave_0: entered promiscuous mode [ 297.205770][T13368] hsr_slave_1: entered promiscuous mode [ 297.212792][T13368] debugfs: 'hsr0' already exists in 'hsr' [ 297.218548][T13368] Cannot create hsr debugfs directory [ 297.452856][T13359] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 297.472614][T13539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2134'. [ 297.481286][T13359] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 297.495631][T13359] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 297.516577][T13359] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 297.604413][T13368] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 297.616470][T13368] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 297.629818][T13368] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 297.645811][T13368] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 297.699095][ T5149] Bluetooth: hci1: command tx timeout [ 297.734205][T13359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.766252][T13359] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.791794][T13368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.801650][ T7231] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.808927][ T7231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.824285][ T7231] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.831558][ T7231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.858288][T13368] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.865320][ T5149] Bluetooth: hci3: command tx timeout [ 297.884199][ T7231] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.891471][ T7231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.911130][ T7233] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.918313][ T7233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.172562][T13562] netlink: 'syz.0.2135': attribute type 29 has an invalid length. [ 298.198645][T13562] netlink: 'syz.0.2135': attribute type 29 has an invalid length. [ 298.236582][T13562] netlink: 548 bytes leftover after parsing attributes in process `syz.0.2135'. [ 298.258207][T13566] netlink: 'syz.4.2136': attribute type 4 has an invalid length. [ 298.276781][T13566] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2136'. [ 298.395033][T13359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.459744][T13368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.482619][T13572] : entered promiscuous mode [ 298.677189][T13585] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2140'. [ 298.813349][T13594] netlink: 'syz.4.2142': attribute type 10 has an invalid length. [ 298.859213][T13594] veth0_virt_wifi: entered allmulticast mode [ 298.891193][T13594] team0: Port device veth0_virt_wifi added [ 299.172651][T13359] veth0_vlan: entered promiscuous mode [ 299.219714][T13359] veth1_vlan: entered promiscuous mode [ 299.287059][T13368] veth0_vlan: entered promiscuous mode [ 299.360116][T13359] veth0_macvtap: entered promiscuous mode [ 299.375982][T13368] veth1_vlan: entered promiscuous mode [ 299.396739][T13359] veth1_macvtap: entered promiscuous mode [ 299.406876][T13619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2149'. [ 299.422982][T13620] netlink: 'syz.1.2150': attribute type 29 has an invalid length. [ 299.435177][T13620] netlink: 'syz.1.2150': attribute type 29 has an invalid length. [ 299.453550][T13620] unsupported nla_type 58 [ 299.510696][T13620] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 299.537037][T13620] team0: Device macvtap1 is already an upper device of the team interface [ 299.692793][ T7233] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20126 - 0 [ 299.703799][ T7233] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20126 - 0 [ 299.717361][T13359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.743561][ T7233] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20126 - 0 [ 299.753510][ T7233] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20126 - 0 [ 299.779310][ T5149] Bluetooth: hci1: command tx timeout [ 299.805540][T13359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.838561][ T7219] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.871350][T13637] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 299.879344][T13368] veth0_macvtap: entered promiscuous mode [ 299.924552][ T7219] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.933842][ T7219] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.947210][ T7219] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.952346][ T5149] Bluetooth: hci3: command tx timeout [ 299.971928][T13368] veth1_macvtap: entered promiscuous mode [ 300.028568][T13368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.041374][T13368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.139921][ T7231] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.170345][ T7231] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.234221][ T7231] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.248136][ T7231] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.334433][ T7231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.368172][ T7231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.464679][ T7212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.495480][ T7212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.526273][ T7231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.549935][ T7231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.653068][ T7238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.681291][ T7238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.883172][T13680] netlink: 'syz.4.2166': attribute type 3 has an invalid length. [ 300.906050][T13681] netlink: 'syz.5.2167': attribute type 4 has an invalid length. [ 301.107042][T13691] IPv6: addrconf: prefix option has invalid lifetime [ 301.179580][T13694] netlink: 'syz.6.2171': attribute type 1 has an invalid length. [ 301.208532][T13694] __nla_validate_parse: 3 callbacks suppressed [ 301.208549][T13694] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2171'. [ 301.237480][T13694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.301227][T13701] netlink: 'syz.1.2172': attribute type 1 has an invalid length. [ 301.531101][T13709] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2176'. [ 301.573108][ T5149] block nbd4: Receive control failed (result -32) [ 301.712090][T13718] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2176'. [ 301.714414][T13724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2180'. [ 301.859340][ T5149] Bluetooth: hci1: command tx timeout [ 302.023052][ T5149] Bluetooth: hci3: command tx timeout [ 302.318964][T13750] tipc: Enabled bearer , priority 2 [ 302.348224][T13750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2189'. [ 302.488108][T13761] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2193'. [ 302.556629][T13765] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2194'. [ 302.586374][T13765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2194'. [ 302.607849][T13771] sctp: [Deprecated]: syz.4.2197 (pid 13771) Use of struct sctp_assoc_value in delayed_ack socket option. [ 302.607849][T13771] Use struct sctp_sack_info instead [ 302.791772][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2198'. [ 302.840480][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2198'. [ 303.682394][T13840] IPVS: set_ctl: invalid protocol: 58 172.20.20.60:20000 [ 303.720331][T13842] 8021q: VLANs not supported on wlan0 [ 304.354501][T13879] validate_nla: 6 callbacks suppressed [ 304.354518][T13879] netlink: 'syz.1.2224': attribute type 1 has an invalid length. [ 304.381089][T13879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.466145][T13885] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 304.493275][T13885] : renamed from hsr0 (while UP) [ 304.968517][T13916] netlink: 'syz.5.2234': attribute type 32 has an invalid length. [ 305.080549][T13924] syzkaller0: create flow: hash 1614574909 index 2 [ 305.414829][ T7238] syzkaller0: tun_net_xmit 76 [ 305.424528][ T7238] syzkaller0: tun_net_xmit 48 [ 305.440046][ T6933] syzkaller0: tun_net_xmit 76 [ 305.472165][T13919] syzkaller0: delete flow: hash 1614574909 index 2 [ 305.519139][ T6933] syzkaller0: tun_net_xmit 76 [ 307.381874][T13978] __nla_validate_parse: 12 callbacks suppressed [ 307.381893][T13978] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2244'. [ 307.520438][T13982] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2247'. [ 307.600362][T13987] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2248'. [ 307.673146][T13992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2251'. [ 307.698932][T13992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2251'. [ 307.831382][T14006] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2253'. [ 307.919043][T14011] macvlan2: entered promiscuous mode [ 307.941735][T14011] macvlan2: entered allmulticast mode [ 308.032993][T14022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2258'. [ 308.170237][T14030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2261'. [ 308.237224][T14033] netlink: 'syz.4.2262': attribute type 2 has an invalid length. [ 308.283463][T14038] netlink: 'syz.5.2264': attribute type 3 has an invalid length. [ 308.303281][T14033] bond9: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 308.346579][T14033] bond9 (unregistering): Released all slaves [ 308.602674][T14051] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2268'. [ 308.690031][T14057] netlink: 'syz.0.2269': attribute type 1 has an invalid length. [ 308.722378][T14057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2269'. [ 308.999804][T14075] x_tables: duplicate underflow at hook 1 [ 309.081556][T14081] syzkaller0: entered promiscuous mode [ 309.087078][T14081] syzkaller0: entered allmulticast mode [ 309.122756][T14083] netlink: 'syz.0.2279': attribute type 1 has an invalid length. [ 309.187771][T14090] netlink: 'syz.6.2280': attribute type 23 has an invalid length. [ 309.413959][T14100] netlink: 'syz.5.2286': attribute type 2 has an invalid length. [ 309.424180][T14100] IPv6: Can't replace route, no match found [ 310.303514][T14170] netlink: 'syz.6.2302': attribute type 1 has an invalid length. [ 310.325244][T14172] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 310.524858][T14178] vxcan2: entered allmulticast mode [ 310.530769][T14184] SET target dimension over the limit! [ 310.861509][T14207] netlink: 'syz.5.2315': attribute type 3 has an invalid length. [ 311.039311][T14215] netlink: 'syz.1.2319': attribute type 3 has an invalid length. [ 311.047091][T14215] netlink: 'syz.1.2319': attribute type 2 has an invalid length. [ 311.141521][T14220] syzkaller1: entered promiscuous mode [ 311.147099][T14220] syzkaller1: entered allmulticast mode [ 311.425830][T14232] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 311.506101][T14241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.317887][T14299] openvswitch: netlink: IP tunnel dst address not specified [ 312.914373][T14339] __nla_validate_parse: 22 callbacks suppressed [ 312.914392][T14339] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2354'. [ 312.930393][ T7219] nci: nci_ntf_packet: unknown ntf opcode 0x303 [ 313.082864][T14355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2358'. [ 313.124176][T14355] vlan0: entered allmulticast mode [ 313.132792][T14355] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 313.177628][T14364] netlink: 'syz.5.2360': attribute type 5 has an invalid length. [ 313.335648][T14376] netlink: 'syz.5.2364': attribute type 4 has an invalid length. [ 313.458850][ T5149] Bluetooth: hci0: command tx timeout [ 313.718573][T14388] netlink: 'syz.4.2369': attribute type 8 has an invalid length. [ 313.751178][T14386] pimreg3: entered allmulticast mode [ 314.415388][T14414] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2375'. [ 314.765830][T14441] bond2: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 314.783700][T14441] bond2: entered promiscuous mode [ 314.789028][T14441] bond2: entered allmulticast mode [ 314.794719][T14441] 8021q: adding VLAN 0 to HW filter on device bond2 [ 376.087569][T14459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2389'. [ 376.371968][T14476] vcan0: tx address claim with dlc 0 [ 376.396786][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2392'. [ 376.720043][T14497] netlink: 'syz.6.2399': attribute type 9 has an invalid length. [ 376.728009][T14497] netlink: 'syz.6.2399': attribute type 6 has an invalid length. [ 377.015618][T14505] x_tables: unsorted entry at hook 3 [ 377.036586][T14477] veth3: entered allmulticast mode [ 377.065675][T14513] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2403'. [ 377.397115][T14532] set match dimension is over the limit! [ 377.726849][T14554] tipc: Started in network mode [ 377.741389][T14554] tipc: Node identity e0000001, cluster identity 4711 [ 377.757247][T14554] tipc: Enabling of bearer rejected, failed to enable media [ 377.926118][T14560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2414'. [ 378.518363][T14582] : renamed from bridge_slave_0 [ 378.599470][T14588] IPVS: set_ctl: invalid protocol: 196 127.0.0.1:20001 [ 378.648914][T14588] x_tables: duplicate underflow at hook 3 [ 378.717767][T14592] FAULT_INJECTION: forcing a failure. [ 378.717767][T14592] name failslab, interval 1, probability 0, space 0, times 0 [ 378.769223][T14592] CPU: 1 UID: 0 PID: 14592 Comm: syz.6.2429 Not tainted syzkaller #0 PREEMPT(full) [ 378.769260][T14592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 378.769282][T14592] Call Trace: [ 378.769290][T14592] [ 378.769299][T14592] dump_stack_lvl+0x189/0x250 [ 378.769327][T14592] ? __pfx____ratelimit+0x10/0x10 [ 378.769349][T14592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.769371][T14592] ? __pfx__printk+0x10/0x10 [ 378.769396][T14592] ? __lock_acquire+0xab9/0xd20 [ 378.769420][T14592] should_fail_ex+0x414/0x560 [ 378.769451][T14592] should_failslab+0xa8/0x100 [ 378.769471][T14592] kmem_cache_alloc_noprof+0x74/0x6e0 [ 378.769495][T14592] ? skb_clone+0x212/0x3a0 [ 378.769520][T14592] skb_clone+0x212/0x3a0 [ 378.769543][T14592] __netlink_deliver_tap+0x404/0x850 [ 378.769574][T14592] ? netlink_deliver_tap+0x2e/0x1b0 [ 378.769592][T14592] netlink_deliver_tap+0x19c/0x1b0 [ 378.769611][T14592] netlink_unicast+0x7fa/0x9e0 [ 378.769644][T14592] ? __pfx_netlink_unicast+0x10/0x10 [ 378.769669][T14592] ? netlink_sendmsg+0x642/0xb30 [ 378.769684][T14592] ? skb_put+0x11b/0x210 [ 378.769704][T14592] netlink_sendmsg+0x805/0xb30 [ 378.769730][T14592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.769751][T14592] ? aa_sock_msg_perm+0xf1/0x1d0 [ 378.769777][T14592] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 378.769794][T14592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.769812][T14592] __sock_sendmsg+0x21c/0x270 [ 378.769838][T14592] ____sys_sendmsg+0x505/0x830 [ 378.769867][T14592] ? __pfx_____sys_sendmsg+0x10/0x10 [ 378.769895][T14592] ? import_iovec+0x74/0xa0 [ 378.769921][T14592] ___sys_sendmsg+0x21f/0x2a0 [ 378.769943][T14592] ? __pfx____sys_sendmsg+0x10/0x10 [ 378.769998][T14592] ? __fget_files+0x2a/0x420 [ 378.770014][T14592] ? __fget_files+0x3a0/0x420 [ 378.770042][T14592] __x64_sys_sendmsg+0x19b/0x260 [ 378.770064][T14592] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 378.770093][T14592] ? __pfx_ksys_write+0x10/0x10 [ 378.770128][T14592] ? do_syscall_64+0xbe/0xfa0 [ 378.770154][T14592] do_syscall_64+0xfa/0xfa0 [ 378.770175][T14592] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.770197][T14592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.770214][T14592] ? clear_bhb_loop+0x60/0xb0 [ 378.770236][T14592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.770253][T14592] RIP: 0033:0x7f97fd98f6c9 [ 378.770270][T14592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.770285][T14592] RSP: 002b:00007f97fe84d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.770305][T14592] RAX: ffffffffffffffda RBX: 00007f97fdbe5fa0 RCX: 00007f97fd98f6c9 [ 378.770319][T14592] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 378.770330][T14592] RBP: 00007f97fe84d090 R08: 0000000000000000 R09: 0000000000000000 [ 378.770342][T14592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.770352][T14592] R13: 00007f97fdbe6038 R14: 00007f97fdbe5fa0 R15: 00007ffc62117188 [ 378.770383][T14592] [ 378.770521][T14592] netlink: 'syz.6.2429': attribute type 2 has an invalid length. [ 378.973406][T14607] netlink: 'syz.1.2431': attribute type 1 has an invalid length. [ 379.050546][T14592] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2429'. [ 379.093345][T14612] ip6tnl1: entered promiscuous mode [ 379.206249][T14612] ip6tnl1: entered allmulticast mode [ 379.674658][T14645] tipc: Enabling of bearer rejected, failed to enable media [ 379.744324][T14650] FAULT_INJECTION: forcing a failure. [ 379.744324][T14650] name failslab, interval 1, probability 0, space 0, times 0 [ 379.781627][T14650] CPU: 0 UID: 0 PID: 14650 Comm: syz.5.2445 Not tainted syzkaller #0 PREEMPT(full) [ 379.781653][T14650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 379.781664][T14650] Call Trace: [ 379.781671][T14650] [ 379.781679][T14650] dump_stack_lvl+0x189/0x250 [ 379.781706][T14650] ? __pfx____ratelimit+0x10/0x10 [ 379.781727][T14650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.781747][T14650] ? __pfx__printk+0x10/0x10 [ 379.781772][T14650] ? __pfx___might_resched+0x10/0x10 [ 379.781790][T14650] ? fs_reclaim_acquire+0x7d/0x100 [ 379.781820][T14650] should_fail_ex+0x414/0x560 [ 379.781851][T14650] should_failslab+0xa8/0x100 [ 379.781871][T14650] __kmalloc_noprof+0xcb/0x7f0 [ 379.781893][T14650] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 379.781916][T14650] ? __local_bh_enable_ip+0x12d/0x1c0 [ 379.781940][T14650] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 379.781967][T14650] genl_family_rcv_msg_doit+0xb8/0x300 [ 379.781994][T14650] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 379.782023][T14650] ? apparmor_capable+0x137/0x1b0 [ 379.782053][T14650] ? bpf_lsm_capable+0x9/0x20 [ 379.782072][T14650] ? security_capable+0x7e/0x2e0 [ 379.782102][T14650] genl_rcv_msg+0x60e/0x790 [ 379.782129][T14650] ? __pfx_genl_rcv_msg+0x10/0x10 [ 379.782149][T14650] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 379.782166][T14650] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 379.782188][T14650] ? __pfx_nl80211_post_doit+0x10/0x10 [ 379.782208][T14650] ? __asan_memcpy+0x40/0x70 [ 379.782228][T14650] ? __pfx_ref_tracker_free+0x10/0x10 [ 379.782254][T14650] netlink_rcv_skb+0x208/0x470 [ 379.782277][T14650] ? __lock_acquire+0xab9/0xd20 [ 379.782294][T14650] ? __pfx_genl_rcv_msg+0x10/0x10 [ 379.782316][T14650] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 379.782361][T14650] ? down_read+0x1ad/0x2e0 [ 379.782380][T14650] genl_rcv+0x28/0x40 [ 379.782399][T14650] netlink_unicast+0x82f/0x9e0 [ 379.782431][T14650] ? __pfx_netlink_unicast+0x10/0x10 [ 379.782457][T14650] ? netlink_sendmsg+0x642/0xb30 [ 379.782471][T14650] ? skb_put+0x11b/0x210 [ 379.782493][T14650] netlink_sendmsg+0x805/0xb30 [ 379.782519][T14650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.782538][T14650] ? aa_sock_msg_perm+0xf1/0x1d0 [ 379.782562][T14650] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 379.782578][T14650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.782593][T14650] __sock_sendmsg+0x21c/0x270 [ 379.782615][T14650] ____sys_sendmsg+0x505/0x830 [ 379.782637][T14650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 379.782664][T14650] ? import_iovec+0x74/0xa0 [ 379.782688][T14650] ___sys_sendmsg+0x21f/0x2a0 [ 379.782709][T14650] ? __pfx____sys_sendmsg+0x10/0x10 [ 379.782762][T14650] ? __fget_files+0x2a/0x420 [ 379.782778][T14650] ? __fget_files+0x3a0/0x420 [ 379.782805][T14650] __x64_sys_sendmsg+0x19b/0x260 [ 379.782825][T14650] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 379.782853][T14650] ? __pfx_ksys_write+0x10/0x10 [ 379.782879][T14650] ? do_syscall_64+0xbe/0xfa0 [ 379.782903][T14650] do_syscall_64+0xfa/0xfa0 [ 379.782924][T14650] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.782946][T14650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.782963][T14650] ? clear_bhb_loop+0x60/0xb0 [ 379.782985][T14650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.783002][T14650] RIP: 0033:0x7efc2ff8f6c9 [ 379.783019][T14650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.783034][T14650] RSP: 002b:00007efc30ddd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.783061][T14650] RAX: ffffffffffffffda RBX: 00007efc301e5fa0 RCX: 00007efc2ff8f6c9 [ 379.783074][T14650] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 379.783085][T14650] RBP: 00007efc30ddd090 R08: 0000000000000000 R09: 0000000000000000 [ 379.783097][T14650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.783107][T14650] R13: 00007efc301e6038 R14: 00007efc301e5fa0 R15: 00007ffe8644dfc8 [ 379.783140][T14650] [ 380.226268][ T5149] Bluetooth: hci3: link tx timeout [ 380.232621][ T5149] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 380.243133][ T5149] Bluetooth: hci3: link tx timeout [ 380.248616][ T5149] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 380.302636][T14663] tipc: Started in network mode [ 380.333233][T14663] tipc: Node identity 8a8b35ef7f03, cluster identity 4711 [ 380.365741][T14663] tipc: Enabled bearer , priority 0 [ 380.379661][T14667] syzkaller0: entered promiscuous mode [ 380.385307][T14667] syzkaller0: entered allmulticast mode [ 380.397324][T14668] netlink: 4968 bytes leftover after parsing attributes in process `syz.0.2451'. [ 380.492316][T14663] tipc: Resetting bearer [ 380.515249][T14660] tipc: Resetting bearer [ 380.604574][T14660] tipc: Disabling bearer [ 380.623810][T14674] tipc: New replicast peer: 255.255.255.255 [ 380.633204][T14674] tipc: Enabled bearer , priority 10 [ 380.830146][T14689] netem: unknown loss type 0 [ 380.851045][T14689] netem: change failed [ 380.856395][T14693] netlink: 'syz.4.2459': attribute type 1 has an invalid length. [ 380.910992][T14697] netlink: 'syz.0.2460': attribute type 10 has an invalid length. [ 380.929057][T14697] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2460'. [ 380.992624][T14697] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 381.259502][T14713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.636476][T14733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2472'. [ 381.749006][ T5831] tipc: Node number set to 3758096385 [ 381.888270][T14748] bond0: default FDB implementation only supports local addresses [ 381.912723][T14752] x_tables: duplicate underflow at hook 1 [ 382.339143][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 382.381427][T14771] netlink: 'syz.0.2485': attribute type 12 has an invalid length. [ 382.390251][T14771] netlink: 'syz.0.2485': attribute type 29 has an invalid length. [ 382.398176][T14771] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2485'. [ 382.414203][T14771] netlink: 'syz.0.2485': attribute type 1 has an invalid length. [ 382.603371][T14778] ipt_ECN: cannot use operation on non-tcp rule [ 382.657147][T14780] netlink: 'syz.6.2489': attribute type 2 has an invalid length. [ 382.672433][T14780] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2489'. [ 382.730550][T14788] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2491'. [ 383.060202][T14803] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.2496'. [ 383.318583][T14823] batadv_slave_1: entered promiscuous mode [ 383.331085][T14822] batadv_slave_1: left promiscuous mode [ 383.960057][T14855] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2514'. [ 383.992784][T14858] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2515'. [ 384.354013][T14874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2519'. [ 384.379644][T14878] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2518'. [ 384.389067][T14874] bridge_slave_1: left allmulticast mode [ 384.394727][T14874] bridge_slave_1: left promiscuous mode [ 384.428319][T14874] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.471184][T14874] bridge_slave_0: left allmulticast mode [ 384.477109][T14874] bridge_slave_0: left promiscuous mode [ 384.489664][T14874] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.498399][T14883] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2521'. [ 384.685810][T14892] netlink: 'syz.5.2524': attribute type 1 has an invalid length. [ 385.173791][T14916] SET target dimension over the limit! [ 385.176765][T14915] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 386.038107][T14979] xt_ecn: cannot match TCP bits for non-tcp packets [ 386.765874][T15019] block nbd0: NBD_DISCONNECT [ 386.770639][T15019] block nbd0: Send disconnect failed -32 [ 386.777471][T15019] block nbd0: shutting down sockets [ 387.183356][ T7231] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.340699][T15032] 8021q: adding VLAN 0 to HW filter on device bond6 [ 387.513938][T15032] __nla_validate_parse: 6 callbacks suppressed [ 387.513956][T15032] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2558'. [ 387.606694][ T7231] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.071299][ T7231] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.420972][ T7231] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.519891][T15077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2565'. [ 388.551398][T14479] udevd[14479]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 388.569013][T15077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2565'. [ 388.578002][T15077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2565'. [ 388.815676][T15091] bond0: (slave rose0): Error: Device can not be enslaved while up [ 388.825827][T15077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2565'. [ 388.847041][T15077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2565'. [ 388.877060][T15077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2565'. [ 389.651875][ T7231] dummy0: left allmulticast mode [ 389.691646][ T7231] bridge0: port 1(dummy0) entered disabled state [ 390.111934][T15154] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2584'. [ 390.122803][T15154] netlink: 'syz.5.2584': attribute type 8 has an invalid length. [ 390.476457][ T7231] dvmrp6 (unregistering): left allmulticast mode [ 390.498345][ T7231] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 390.509290][ T7231] geneve1 (unregistering): left promiscuous mode [ 390.704441][T15181] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2586'. [ 390.850890][ T7231] bond0 (unregistering): left promiscuous mode [ 390.857772][ T7231] bond0 (unregistering): Released all slaves [ 390.871876][ T7231] bond1 (unregistering): Released all slaves [ 390.985281][ T7231] bond2 (unregistering): Released all slaves [ 391.089667][ T7231] bond3 (unregistering): Released all slaves [ 391.187440][ T7231] bond4 (unregistering): Released all slaves [ 391.284659][ T7231] bond5 (unregistering): Released all slaves [ 391.383644][ T7231] bond6 (unregistering): Released all slaves [ 391.484441][ T7231] bond7 (unregistering): Released all slaves [ 391.498237][ T7231] bond8 (unregistering): Released all slaves [ 391.597835][ T7231] bond9 (unregistering): (slave veth5): Releasing active interface [ 391.610802][ T7231] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 391.623877][ T7231] bond9 (unregistering): (slave veth7): Releasing active interface [ 391.634142][ T7231] bond9 (unregistering): Released all slaves [ 391.731522][ T7231] bond10 (unregistering): Released all slaves [ 391.958310][T15157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.972946][T15157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.062913][T15157] bond2: left promiscuous mode [ 392.067721][T15157] bond2: left allmulticast mode [ 392.089520][T15172] tipc: Enabled bearer , priority 0 [ 392.096688][T15173] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 392.121299][T15173] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 392.129651][T15173] tipc: Resetting bearer [ 392.151784][ T7236] tipc: Resetting bearer [ 392.352492][ T7231] tipc: Left network mode [ 392.358346][ T7238] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.378274][ T7238] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.415734][ T7238] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.648564][T15212] netlink: 'syz.6.2591': attribute type 1 has an invalid length. [ 393.036097][ T7238] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.051731][T15211] tipc: Enabling of bearer rejected, already enabled [ 393.051974][T15224] netlink: 'syz.5.2592': attribute type 1 has an invalid length. [ 393.114761][T15220] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2590'. [ 393.160956][T15222] tipc: Resetting bearer [ 393.166832][ T6938] tipc: Node number set to 1827768461 [ 393.201847][T15224] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 393.351809][T15241] atomic_op ffff88807eb33198 conn xmit_atomic 0000000000000000 [ 393.718962][T15261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2596'. [ 394.432828][T15288] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 394.703810][ T7231] batadv0: left promiscuous mode [ 394.802626][ T7231] hsr_slave_0: left promiscuous mode [ 394.831361][ T7231] hsr_slave_1: left promiscuous mode [ 394.897084][ T7231] vlan0: left allmulticast mode [ 394.909747][ T7231] veth0_vlan: left allmulticast mode [ 394.927148][ T7231] vlan0: left promiscuous mode [ 395.157653][ T7231] pim6reg (unregistering): left allmulticast mode [ 396.152142][T15332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2608'. [ 396.423485][T15346] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 396.507536][T15346] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 396.530950][T15360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2613'. [ 396.544052][T15346] gretap1: entered promiscuous mode [ 396.568783][T15360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2613'. [ 396.577888][T15346] gretap1: entered allmulticast mode [ 396.684983][T15364] netlink: 'syz.6.2615': attribute type 3 has an invalid length. [ 396.713612][T15364] netlink: 766 bytes leftover after parsing attributes in process `syz.6.2615'. [ 396.822809][T15369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2616'. [ 396.887894][T15370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2616'. [ 397.111228][ T7231] IPVS: stop unused estimator thread 0... [ 397.323469][T15397] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2621'. [ 397.354286][T15397] netlink: 'syz.6.2621': attribute type 11 has an invalid length. [ 397.375360][T15402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2622'. [ 397.403237][ T7211] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.412734][T15397] netlink: 'syz.6.2621': attribute type 11 has an invalid length. [ 397.507698][ T7211] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.527810][T15411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.541885][ T7211] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.574873][T15402] macvlan3: entered promiscuous mode [ 397.580740][T15402] macvlan3: entered allmulticast mode [ 397.587745][T15402] bond4: (slave macvlan3): Opening slave failed [ 397.697714][T15409] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 397.725713][T15409] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 397.775401][ T7211] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.820805][T15402] sctp: [Deprecated]: syz.0.2622 (pid 15402) Use of int in maxseg socket option. [ 397.820805][T15402] Use struct sctp_assoc_value instead [ 398.276114][ T6935] IPVS: starting estimator thread 0... [ 398.362057][T15452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.379779][T15450] IPVS: using max 30 ests per chain, 72000 per kthread [ 398.543964][T15465] netlink: 'syz.0.2638': attribute type 1 has an invalid length. [ 398.756427][T15475] __nla_validate_parse: 1 callbacks suppressed [ 398.756445][T15475] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2641'. [ 398.842260][T15470] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.912996][T15470] bridge_slave_0: left allmulticast mode [ 398.920978][T15470] bridge_slave_0: left promiscuous mode [ 398.926845][T15470] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.945266][T15470] bridge_slave_1: left allmulticast mode [ 398.953337][T15470] bridge_slave_1: left promiscuous mode [ 398.961730][T15470] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.986456][T15470] bond0: (slave bond_slave_0): Releasing backup interface [ 398.994826][T15470] bond_slave_0: left allmulticast mode [ 399.007722][T15470] bond0: (slave bond_slave_1): Releasing backup interface [ 399.017395][T15470] bond_slave_1: left allmulticast mode [ 399.037289][T15470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.052975][T15470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.073848][T15470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.084611][T15470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.100795][T15470] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 399.118156][T15480] tipc: Enabling of bearer rejected, already enabled [ 399.389578][T15502] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2647'. [ 399.438813][T15502] block nbd0: not configured, cannot reconfigure [ 399.496100][T15513] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2647'. [ 399.531998][T15517] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2649'. [ 399.559635][T15513] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2647'. [ 399.610574][T15521] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2650'. [ 399.622115][T15513] netlink: 'syz.1.2647': attribute type 5 has an invalid length. [ 399.630873][T15521] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2650'. [ 399.640503][T15513] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2647'. [ 399.658194][T15521] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2650'. [ 399.695036][T15521] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2650'. [ 399.970930][T15542] netlink: 'syz.5.2658': attribute type 1 has an invalid length. [ 400.114588][T15542] bond3: entered promiscuous mode [ 400.115551][T15551] netlink: 'syz.1.2659': attribute type 1 has an invalid length. [ 400.149265][T15542] 8021q: adding VLAN 0 to HW filter on device bond3 [ 400.266192][T15545] 8021q: adding VLAN 0 to HW filter on device bond3 [ 400.286214][T15545] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 400.311196][T15545] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 400.353561][T15545] bond3: (slave gre1): making interface the new active one [ 400.407996][T15545] gre1: entered promiscuous mode [ 400.450721][T15545] bond3: (slave gre1): Enslaving as an active interface with an up link [ 400.742162][T15587] caif0: Master is either lo or non-ether device [ 401.185845][T15607] macvtap2: entered promiscuous mode [ 401.198095][T15607] macvtap2: entered allmulticast mode [ 401.204872][T15604] netlink: 'syz.0.2671': attribute type 10 has an invalid length. [ 401.327469][T15600] tipc: Resetting bearer [ 401.938055][T15640] tipc: Enabled bearer , priority 0 [ 401.947021][T15640] syzkaller0: entered promiscuous mode [ 401.972856][T15640] syzkaller0: entered allmulticast mode [ 402.011615][T15640] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 402.109053][T15640] tipc: Resetting bearer [ 402.129560][T15638] tipc: Resetting bearer [ 402.242722][T15638] tipc: Disabling bearer [ 402.438784][T15665] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 402.478500][T15665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.580164][T15673] netlink: 'syz.5.2687': attribute type 10 has an invalid length. [ 402.624181][T15673] bond0: (slave wlan1): Opening slave failed [ 402.660694][T15671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.977597][T15692] macvlan0: entered allmulticast mode [ 403.800090][T15745] __nla_validate_parse: 8 callbacks suppressed [ 403.800108][T15745] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2702'. [ 403.934564][T15737] bond6: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 404.008523][T15737] bond6 (unregistering): Released all slaves [ 404.061876][T15745] erspan0: entered promiscuous mode [ 404.539416][T15773] tipc: Enabled bearer , priority 0 [ 404.581370][T15770] syzkaller0: entered promiscuous mode [ 404.586888][T15770] syzkaller0: entered allmulticast mode [ 404.619285][T15770] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2709'. [ 404.629911][T15770] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2709'. [ 404.642229][T15770] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2709'. [ 404.664820][T15770] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2709'. [ 404.689482][T15776] tipc: Enabling of bearer rejected, failed to enable media [ 404.729469][T15769] tipc: Resetting bearer [ 404.860499][T15769] tipc: Disabling bearer [ 405.397100][T15824] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2717'. [ 405.442389][T15831] only policy match revision 0 supported [ 405.442408][T15831] unable to load match [ 405.566026][T15835] IPv6: NLM_F_CREATE should be specified when creating new route [ 405.673749][T15842] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2723'. [ 405.838275][T15848] netlink: 'syz.0.2725': attribute type 8 has an invalid length. [ 406.073964][T15861] dvmrp8: entered allmulticast mode [ 406.250444][ T6935] IPVS: starting estimator thread 0... [ 406.261187][T15874] netlink: 'syz.0.2733': attribute type 1 has an invalid length. [ 406.308120][T15879] ·: renamed from batadv_slave_0 [ 406.315146][T15874] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2733'. [ 406.368904][T15876] IPVS: using max 30 ests per chain, 72000 per kthread [ 406.586869][T15891] netlink: 'syz.6.2736': attribute type 5 has an invalid length. [ 406.663624][T15905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2738'. [ 406.793618][T15905] bond7: Invalid ad_actor_system MAC address. [ 406.835741][T15905] bond7: option ad_actor_system: invalid value (1) [ 406.849574][T15905] bond7 (unregistering): Released all slaves [ 406.939314][T15911] veth1_to_bridge: entered allmulticast mode [ 407.162583][T15929] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2745'. [ 407.187267][T15928] IPVS: set_ctl: invalid protocol: 25965 114.121.46.101:30309 [ 407.755583][T15970] netlink: 'syz.0.2755': attribute type 3 has an invalid length. [ 407.805563][T15970] netlink: 'syz.0.2755': attribute type 2 has an invalid length. [ 407.997228][T15984] netlink: 'syz.1.2760': attribute type 1 has an invalid length. [ 408.034478][T15981] syzkaller0: entered promiscuous mode [ 408.042530][T15984] netlink: 'syz.1.2760': attribute type 1 has an invalid length. [ 408.052564][T15981] syzkaller0: entered allmulticast mode [ 408.083611][T15984] netlink: 'syz.1.2760': attribute type 1 has an invalid length. [ 408.261051][T15996] tipc: Enabled bearer , priority 0 [ 408.270298][T15991] syzkaller0: entered promiscuous mode [ 408.299946][T15991] syzkaller0: entered allmulticast mode [ 408.333375][T16000] tipc: Enabled bearer , priority 10 [ 408.404278][T15991] tipc: Resetting bearer [ 408.463571][T15990] tipc: Resetting bearer [ 408.498347][T15990] tipc: Disabling bearer [ 408.795095][T16030] netlink: 'syz.0.2773': attribute type 5 has an invalid length. [ 408.938877][T16040] __nla_validate_parse: 11 callbacks suppressed [ 408.938896][T16040] netlink: 184 bytes leftover after parsing attributes in process `syz.6.2775'. [ 408.988638][T16042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2776'. [ 409.008391][T16039] delete_channel: no stack [ 409.040141][T16042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2776'. [ 409.586253][T16075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 409.625375][T16078] tipc: Enabling of bearer rejected, already enabled [ 410.102739][T16101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2791'. [ 410.143607][T16096] netlink: 'syz.6.2790': attribute type 1 has an invalid length. [ 410.370003][T16117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2795'. [ 410.655498][T16138] tipc: Enabled bearer , priority 0 [ 410.670550][T16138] syzkaller0: entered promiscuous mode [ 410.683923][T16138] syzkaller0: entered allmulticast mode [ 410.742831][T16138] tipc: Resetting bearer [ 410.762549][T16142] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2800'. [ 410.901697][T16153] openvswitch: netlink: Unknown nsh attribute 0 [ 410.916455][T16153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.074138][T16165] netlink: 'syz.1.2807': attribute type 64 has an invalid length. [ 411.093315][T16166] netlink: 'syz.4.2806': attribute type 21 has an invalid length. [ 411.101655][T16166] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2806'. [ 411.127428][T16165] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2807'. [ 411.284333][T16178] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2810'. [ 411.322414][T16183] netlink: 'syz.6.2808': attribute type 39 has an invalid length. [ 411.463734][ T5149] Bluetooth: hci4: command 0x0406 tx timeout [ 411.499067][T16194] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2813'. [ 411.527238][T16132] tipc: Resetting bearer [ 411.580998][T16132] tipc: Disabling bearer [ 412.154353][T16226] netlink: 'syz.0.2824': attribute type 11 has an invalid length. [ 412.423328][T16241] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 412.449312][T16250] sctp: [Deprecated]: syz.6.2830 (pid 16250) Use of int in maxseg socket option. [ 412.449312][T16250] Use struct sctp_assoc_value instead [ 412.515513][T16250] IPVS: set_ctl: invalid protocol: 135 10.1.1.0:20004 [ 412.768351][T16270] validate_nla: 2 callbacks suppressed [ 412.768369][T16270] netlink: 'syz.6.2835': attribute type 1 has an invalid length. [ 412.861201][T16270] gretap1: entered promiscuous mode [ 412.880622][T16273] syzkaller0: entered promiscuous mode [ 412.908982][T16273] syzkaller0: entered allmulticast mode [ 413.492742][T16316] netdevsim netdevsim5: Direct firmware load for lookup_extent_enter failed with error -2 [ 413.531672][T16316] netdevsim netdevsim5: Falling back to sysfs fallback for: lookup_extent_enter [ 413.858133][T16325] bond7: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 413.873742][T16325] bond7 (unregistering): Released all slaves [ 414.098120][T16353] __nla_validate_parse: 5 callbacks suppressed [ 414.098138][T16353] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2856'. [ 414.245133][T16361] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2859'. [ 414.707114][T16393] Bluetooth: MGMT ver 1.23 [ 414.722419][T16391] netlink: 'syz.5.2869': attribute type 10 has an invalid length. [ 414.731810][T16391] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2869'. [ 414.743125][T16391] batadv0: entered promiscuous mode [ 414.748841][T16391] batadv0: entered allmulticast mode [ 414.754324][T16391] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 414.911791][T16408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2872'. [ 415.023075][T16412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2874'. [ 415.058220][T16403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.081232][T16412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2874'. [ 415.125852][T16419] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2877'. [ 415.267473][T16425] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 415.280647][T16430] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2880'. [ 415.290297][ T7211] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 415.300273][ T7236] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 415.310790][T16419] netlink: 'syz.5.2877': attribute type 29 has an invalid length. [ 415.319308][T16419] netlink: 'syz.5.2877': attribute type 29 has an invalid length. [ 415.359481][T16436] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20001 [ 415.366778][ T7236] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 415.409447][ T7231] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 415.456017][T16442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2884'. [ 415.799459][T16462] pim6reg1: entered promiscuous mode [ 415.804804][T16462] pim6reg1: entered allmulticast mode [ 415.848591][T16468] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2892'. [ 415.939103][T16472] netlink: 'syz.4.2895': attribute type 2 has an invalid length. [ 416.051264][T16472] v: renamed from vlan0 (while UP) [ 416.438034][T16506] C: renamed from team_slave_0 [ 416.483737][T16506] netlink: 'syz.0.2902': attribute type 1 has an invalid length. [ 416.509976][T16506] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 416.586105][ T5149] Bluetooth: hci1: command 0x0406 tx timeout [ 416.707411][T16521] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20003 [ 416.716230][T16521] netlink: zone id is out of range [ 416.724080][T16521] netlink: zone id is out of range [ 416.732425][T16521] netlink: zone id is out of range [ 416.737572][T16521] netlink: zone id is out of range [ 416.747559][T16521] netlink: zone id is out of range [ 416.753673][T16521] netlink: zone id is out of range [ 416.759443][T16521] netlink: zone id is out of range [ 416.764584][T16521] netlink: zone id is out of range [ 416.830292][T16527] tipc: Enabled bearer , priority 10 [ 416.981693][T16540] netlink: 'syz.6.2910': attribute type 1 has an invalid length. [ 417.005101][T16540] netlink: 'syz.6.2910': attribute type 1 has an invalid length. [ 417.049082][T16542] netlink: 'syz.4.2911': attribute type 14 has an invalid length. [ 417.057117][T16542] netlink: 'syz.4.2911': attribute type 13 has an invalid length. [ 417.163144][T16547] team0: Port device geneve0 added [ 417.170810][ T7212] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.211892][ T7212] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.279339][ T7212] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.291871][ T7212] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.198272][T16602] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 418.210487][T16602] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 418.237904][T16602] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 418.965885][T16626] syzkaller0: entered promiscuous mode [ 418.988008][T16626] syzkaller0: entered allmulticast mode [ 419.019559][ T5149] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 419.030256][ T5149] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 419.041111][ T5149] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 419.055050][ T5149] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 419.063393][ T5149] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 419.169339][T16634] 8021q: adding VLAN 0 to HW filter on device bond5 [ 419.319864][T16653] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20002 [ 419.518887][T16661] validate_nla: 2 callbacks suppressed [ 419.518903][T16661] netlink: 'syz.5.2945': attribute type 2 has an invalid length. [ 419.552462][T16665] __nla_validate_parse: 23 callbacks suppressed [ 419.552479][T16665] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2947'. [ 419.578536][T16665] xt_policy: neither incoming nor outgoing policy selected [ 419.626739][T16659] macvtap0: entered allmulticast mode [ 419.750510][T16671] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2948'. [ 419.820084][T16676] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2950'. [ 420.335775][T16699] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2958'. [ 420.376678][T16699] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2958'. [ 420.856866][T16630] chnl_net:caif_netlink_parms(): no params data found [ 420.946072][T16742] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2964'. [ 421.139678][ T5839] Bluetooth: hci2: command tx timeout [ 421.186408][T16749] ip6gre1: entered promiscuous mode [ 421.206734][T16749] ip6gre1: entered allmulticast mode [ 421.462066][T16752] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.477476][T16752] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.745220][T16752] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.772435][T16752] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.786278][T16794] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2973'. [ 421.818632][T16630] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.843726][T16630] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.854494][T16630] bridge_slave_0: entered allmulticast mode [ 421.867371][T16630] bridge_slave_0: entered promiscuous mode [ 421.905946][T16788] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2973'. [ 421.935511][T16792] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2973'. [ 421.980161][T16630] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.009580][T16630] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.016944][T16630] bridge_slave_1: entered allmulticast mode [ 422.037502][T16630] bridge_slave_1: entered promiscuous mode [ 422.143783][T16813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2977'. [ 422.176976][T16630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.195129][T16813] xt_ecn: cannot match TCP bits for non-tcp packets [ 422.287312][T16752] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.314676][T16752] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.337930][T16630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.393807][T16826] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 422.558376][T16752] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.573015][T16752] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.618203][T16630] team0: Port device team_slave_0 added [ 422.636836][T16630] team0: Port device team_slave_1 added [ 422.661411][ T6938] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 422.681157][T16630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.688208][T16630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.715421][T16630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.760452][T16630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.767432][T16630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.812322][T16630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.847215][ T7219] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.858551][ T7219] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.925307][ T7219] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.934084][ T7219] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.984147][T16851] syzkaller0: entered promiscuous mode [ 422.999497][T16851] syzkaller0: entered allmulticast mode [ 423.006867][T16850] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 423.029943][ T7219] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.038376][ T7219] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.053006][T16630] hsr_slave_0: entered promiscuous mode [ 423.060858][T16630] hsr_slave_1: entered promiscuous mode [ 423.068479][T16630] debugfs: 'hsr0' already exists in 'hsr' [ 423.087008][T16630] Cannot create hsr debugfs directory [ 423.111579][ T7219] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.121579][ T7219] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.224647][ T5839] Bluetooth: hci2: command tx timeout [ 423.619719][T16885] netlink: 'syz.6.2997': attribute type 5 has an invalid length. [ 423.627492][T16885] netlink: 'syz.6.2997': attribute type 6 has an invalid length. [ 423.685655][T16882] netlink: 'syz.0.2996': attribute type 1 has an invalid length. [ 423.801139][T16630] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.817969][T16630] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20126 - 0 [ 423.921454][T16882] syzkaller1: entered promiscuous mode [ 423.927242][T16882] syzkaller1: entered allmulticast mode [ 423.992072][T16630] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.002773][T16630] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20126 - 0 [ 424.150167][T16912] netlink: 'syz.5.3004': attribute type 1 has an invalid length. [ 424.164703][T16630] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.169690][T16912] netlink: 'syz.5.3004': attribute type 1 has an invalid length. [ 424.176085][T16630] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20126 - 0 [ 424.186769][T16912] netlink: 'syz.5.3004': attribute type 1 has an invalid length. [ 424.201718][T16912] netlink: 'syz.5.3004': attribute type 2 has an invalid length. [ 424.308239][T16630] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.338184][T16630] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20126 - 0 [ 424.364259][T16921] netlink: 'syz.6.3006': attribute type 1 has an invalid length. [ 424.571693][T16930] bond1: (slave bridge3): making interface the new active one [ 424.590665][T16930] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 424.743080][T16943] __nla_validate_parse: 9 callbacks suppressed [ 424.743096][T16943] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3011'. [ 424.885741][T16948] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 425.110036][T16630] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 425.156584][T16630] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 425.175031][T16956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3016'. [ 425.223469][T16956] xt_ecn: cannot match TCP bits for non-tcp packets [ 425.309300][ T5839] Bluetooth: hci2: command tx timeout [ 425.329799][T16630] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 425.360486][T16630] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 425.432428][T16973] netlink: 'syz.0.3018': attribute type 1 has an invalid length. [ 425.454522][T16962] xt_TCPMSS: Only works on TCP SYN packets [ 425.525469][T16973] 8021q: adding VLAN 0 to HW filter on device bond7 [ 425.576734][T16977] vlan1: entered promiscuous mode [ 425.603583][T16977] bond7: entered promiscuous mode [ 425.617991][T16977] vlan1: entered allmulticast mode [ 425.637100][T16977] bond7: entered allmulticast mode [ 425.666344][T16973] bond7: (slave gretap2): making interface the new active one [ 425.701759][T16973] gretap2: entered promiscuous mode [ 425.707370][T16973] gretap2: entered allmulticast mode [ 425.730786][T16973] [ 425.733173][T16973] ====================================================== [ 425.740469][T16973] WARNING: possible circular locking dependency detected [ 425.747793][T16973] syzkaller #0 Not tainted [ 425.752217][T16973] ------------------------------------------------------ [ 425.759236][T16973] syz.0.3018/16973 is trying to acquire lock: [ 425.765304][T16973] ffff88807a41af30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 425.774389][T16973] [ 425.774389][T16973] but task is already holding lock: [ 425.781761][T16973] ffff888059b58158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 425.791645][T16973] [ 425.791645][T16973] which lock already depends on the new lock. [ 425.791645][T16973] [ 425.802051][T16973] [ 425.802051][T16973] the existing dependency chain (in reverse order) is: [ 425.811069][T16973] [ 425.811069][T16973] -> #1 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 425.819416][T16973] lock_acquire+0x120/0x360 [ 425.824434][T16973] _raw_spin_lock+0x2e/0x40 [ 425.829447][T16973] sch_direct_xmit+0x153/0x4b0 [ 425.834725][T16973] __dev_queue_xmit+0x1857/0x3b50 [ 425.840259][T16973] hsr_forward_skb+0x158b/0x2860 [ 425.845721][T16973] hsr_dev_xmit+0x242/0x360 [ 425.850995][T16973] dev_hard_start_xmit+0x2d7/0x830 [ 425.856618][T16973] __dev_queue_xmit+0x1b8d/0x3b50 [ 425.862170][T16973] ip6_finish_output2+0xfb3/0x1480 [ 425.867810][T16973] ip6_output+0x340/0x550 [ 425.872735][T16973] NF_HOOK+0x9e/0x380 [ 425.877227][T16973] mld_sendpack+0x8d4/0xe60 [ 425.882244][T16973] mld_ifc_work+0x83e/0xd60 [ 425.887267][T16973] process_scheduled_works+0xae1/0x17b0 [ 425.893364][T16973] worker_thread+0x8a0/0xda0 [ 425.898469][T16973] kthread+0x711/0x8a0 [ 425.903072][T16973] ret_from_fork+0x4bc/0x870 [ 425.908169][T16973] ret_from_fork_asm+0x1a/0x30 [ 425.913445][T16973] [ 425.913445][T16973] -> #0 (&hsr->seqnr_lock){+.-.}-{3:3}: [ 425.921163][T16973] validate_chain+0xb9b/0x2140 [ 425.926705][T16973] __lock_acquire+0xab9/0xd20 [ 425.931896][T16973] lock_acquire+0x120/0x360 [ 425.936909][T16973] _raw_spin_lock_bh+0x36/0x50 [ 425.942188][T16973] hsr_dev_xmit+0x237/0x360 [ 425.947213][T16973] dev_hard_start_xmit+0x2d7/0x830 [ 425.952834][T16973] __dev_queue_xmit+0x1b8d/0x3b50 [ 425.958412][T16973] NF_HOOK+0x310/0x3a0 [ 425.962997][T16973] arp_xmit+0x16c/0x270 [ 425.967671][T16973] arp_solicit+0xc1d/0xe60 [ 425.972599][T16973] __neigh_event_send+0xf70/0x1560 [ 425.978223][T16973] neigh_resolve_output+0x198/0x750 [ 425.983936][T16973] ip_finish_output2+0xd40/0x1160 [ 425.989477][T16973] ip_output+0x29f/0x450 [ 425.994240][T16973] iptunnel_xmit+0x5f8/0xa90 [ 425.999339][T16973] ip_tunnel_xmit+0x1c41/0x2390 [ 426.004704][T16973] gre_tap_xmit+0x590/0x7a0 [ 426.009717][T16973] dev_hard_start_xmit+0x2d7/0x830 [ 426.015336][T16973] sch_direct_xmit+0x241/0x4b0 [ 426.020611][T16973] __dev_queue_xmit+0x1857/0x3b50 [ 426.026172][T16973] alb_send_lp_vid+0x324/0x510 [ 426.031450][T16973] alb_send_learning_packets+0x10d/0x2c0 [ 426.037595][T16973] alb_fasten_mac_swap+0x665/0xfa0 [ 426.043221][T16973] bond_alb_handle_active_change+0xc10/0xec0 [ 426.049716][T16973] bond_change_active_slave+0x1048/0x3770 [ 426.055951][T16973] bond_select_active_slave+0x8e2/0xd00 [ 426.062023][T16973] bond_enslave+0x214a/0x3850 [ 426.067212][T16973] do_set_master+0x533/0x6d0 [ 426.072310][T16973] rtnl_newlink_create+0x677/0xb00 [ 426.077928][T16973] rtnl_newlink+0x16e4/0x1c80 [ 426.083120][T16973] rtnetlink_rcv_msg+0x7cf/0xb70 [ 426.088567][T16973] netlink_rcv_skb+0x208/0x470 [ 426.093862][T16973] netlink_unicast+0x82f/0x9e0 [ 426.099515][T16973] netlink_sendmsg+0x805/0xb30 [ 426.104794][T16973] __sock_sendmsg+0x21c/0x270 [ 426.109984][T16973] ____sys_sendmsg+0x505/0x830 [ 426.115259][T16973] ___sys_sendmsg+0x21f/0x2a0 [ 426.120450][T16973] __x64_sys_sendmsg+0x19b/0x260 [ 426.125893][T16973] do_syscall_64+0xfa/0xfa0 [ 426.130905][T16973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.137307][T16973] [ 426.137307][T16973] other info that might help us debug this: [ 426.137307][T16973] [ 426.147525][T16973] Possible unsafe locking scenario: [ 426.147525][T16973] [ 426.154956][T16973] CPU0 CPU1 [ 426.160304][T16973] ---- ---- [ 426.165647][T16973] lock(&qdisc_xmit_lock_key#4); [ 426.170665][T16973] lock(&hsr->seqnr_lock); [ 426.177676][T16973] lock(&qdisc_xmit_lock_key#4); [ 426.185225][T16973] lock(&hsr->seqnr_lock); [ 426.189722][T16973] [ 426.189722][T16973] *** DEADLOCK *** [ 426.189722][T16973] [ 426.197847][T16973] 10 locks held by syz.0.3018/16973: [ 426.203118][T16973] #0: ffffffff8f7e7b30 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 426.212602][T16973] #1: ffffffff8f2cb1c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 426.221652][T16973] #2: ffffffff8df3d340 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 426.231562][T16973] #3: ffff888052dc2258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x138a/0x3b50 [ 426.244172][T16973] #4: ffff888059b58158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 426.254442][T16973] #5: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 426.263399][T16973] #6: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x1160 [ 426.273314][T16973] #7: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 426.282096][T16973] #8: ffffffff8df3d340 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 426.292014][T16973] #9: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 426.301158][T16973] [ 426.301158][T16973] stack backtrace: [ 426.307039][T16973] CPU: 0 UID: 0 PID: 16973 Comm: syz.0.3018 Not tainted syzkaller #0 PREEMPT(full) [ 426.307057][T16973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 426.307069][T16973] Call Trace: [ 426.307076][T16973] [ 426.307083][T16973] dump_stack_lvl+0x189/0x250 [ 426.307107][T16973] ? __pfx_dump_stack_lvl+0x10/0x10 [ 426.307125][T16973] ? __pfx__printk+0x10/0x10 [ 426.307138][T16973] ? stack_trace_save+0x9c/0xe0 [ 426.307160][T16973] print_circular_bug+0x2ee/0x310 [ 426.307179][T16973] check_noncircular+0x134/0x160 [ 426.307197][T16973] validate_chain+0xb9b/0x2140 [ 426.307214][T16973] ? tpacket_rcv+0x1d32/0x31c0 [ 426.307240][T16973] __lock_acquire+0xab9/0xd20 [ 426.307256][T16973] ? hsr_dev_xmit+0x237/0x360 [ 426.307270][T16973] lock_acquire+0x120/0x360 [ 426.307282][T16973] ? hsr_dev_xmit+0x237/0x360 [ 426.307300][T16973] ? hsr_dev_xmit+0x237/0x360 [ 426.307314][T16973] _raw_spin_lock_bh+0x36/0x50 [ 426.307331][T16973] ? hsr_dev_xmit+0x237/0x360 [ 426.307349][T16973] hsr_dev_xmit+0x237/0x360 [ 426.307363][T16973] ? hsr_dev_xmit+0x2d/0x360 [ 426.307377][T16973] dev_hard_start_xmit+0x2d7/0x830 [ 426.307399][T16973] __dev_queue_xmit+0x1b8d/0x3b50 [ 426.307415][T16973] ? lockdep_hardirqs_on+0x9c/0x150 [ 426.307436][T16973] ? __dev_queue_xmit+0x27b/0x3b50 [ 426.307454][T16973] ? arpt_do_table+0x1dc4/0x1fd0 [ 426.307474][T16973] ? __pfx___dev_queue_xmit+0x10/0x10 [ 426.307493][T16973] ? arpt_do_table+0x238/0x1fd0 [ 426.307511][T16973] ? __pfx_arpt_do_table+0x10/0x10 [ 426.307534][T16973] ? NF_HOOK+0x9e/0x3a0 [ 426.307554][T16973] NF_HOOK+0x310/0x3a0 [ 426.307579][T16973] ? __pfx_arp_xmit_finish+0x10/0x10 [ 426.307597][T16973] ? NF_HOOK+0x9e/0x3a0 [ 426.307615][T16973] ? __pfx_NF_HOOK+0x10/0x10 [ 426.307635][T16973] ? __pfx_arp_xmit_finish+0x10/0x10 [ 426.307657][T16973] arp_xmit+0x16c/0x270 [ 426.307676][T16973] ? arp_xmit+0x23/0x270 [ 426.307694][T16973] arp_solicit+0xc1d/0xe60 [ 426.307716][T16973] ? arp_solicit+0x11a/0xe60 [ 426.307736][T16973] ? __pfx_arp_solicit+0x10/0x10 [ 426.307758][T16973] ? __neigh_event_send+0xf08/0x1560 [ 426.307778][T16973] ? __pfx_arp_solicit+0x10/0x10 [ 426.307797][T16973] __neigh_event_send+0xf70/0x1560 [ 426.307820][T16973] neigh_resolve_output+0x198/0x750 [ 426.307841][T16973] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 426.307864][T16973] ip_finish_output2+0xd40/0x1160 [ 426.307882][T16973] ? ip_skb_dst_mtu+0x18d/0xb70 [ 426.307901][T16973] ? ip_finish_output2+0x452/0x1160 [ 426.307920][T16973] ? __pfx_ip_finish_output2+0x10/0x10 [ 426.307939][T16973] ? ip_skb_dst_mtu+0x18d/0xb70 [ 426.307956][T16973] ? ip_skb_dst_mtu+0x917/0xb70 [ 426.307973][T16973] ? ip_finish_output+0x33a/0x3f0 [ 426.307991][T16973] ip_output+0x29f/0x450 [ 426.308008][T16973] ? ip_output+0x5b/0x450 [ 426.308025][T16973] iptunnel_xmit+0x5f8/0xa90 [ 426.308045][T16973] ip_tunnel_xmit+0x1c41/0x2390 [ 426.308066][T16973] ? tpacket_rcv+0x1d32/0x31c0 [ 426.308092][T16973] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 426.308110][T16973] ? gre_build_header+0x3fd/0xa40 [ 426.308131][T16973] ? __pfx_gre_build_header+0x10/0x10 [ 426.308149][T16973] ? iptunnel_handle_offloads+0x2fd/0x630 [ 426.308166][T16973] gre_tap_xmit+0x590/0x7a0 [ 426.308185][T16973] ? __pfx_gre_tap_xmit+0x10/0x10 [ 426.308206][T16973] dev_hard_start_xmit+0x2d7/0x830 [ 426.308226][T16973] sch_direct_xmit+0x241/0x4b0 [ 426.308248][T16973] ? __pfx_sch_direct_xmit+0x10/0x10 [ 426.308266][T16973] ? netlink_sendmsg+0x805/0xb30 [ 426.308282][T16973] __dev_queue_xmit+0x1857/0x3b50 [ 426.308301][T16973] ? __dev_queue_xmit+0x27b/0x3b50 [ 426.308321][T16973] ? __pfx___dev_queue_xmit+0x10/0x10 [ 426.308337][T16973] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 426.308355][T16973] ? kmem_cache_alloc_node_noprof+0x483/0x710 [ 426.308374][T16973] ? kmalloc_reserve+0xbd/0x290 [ 426.308389][T16973] ? __build_skb_around+0x262/0x3f0 [ 426.308414][T16973] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 426.308427][T16973] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 426.308445][T16973] ? alb_send_lp_vid+0x139/0x510 [ 426.308467][T16973] alb_send_lp_vid+0x324/0x510 [ 426.308489][T16973] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 426.308511][T16973] ? __pfx_alb_set_slave_mac_addr+0x10/0x10 [ 426.308533][T16973] alb_send_learning_packets+0x10d/0x2c0 [ 426.308554][T16973] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 426.308612][T16973] ? alb_swap_mac_addr+0x221/0x320 [ 426.308631][T16973] ? dev_addr_check+0x20/0x250 [ 426.308648][T16973] alb_fasten_mac_swap+0x665/0xfa0 [ 426.308673][T16973] bond_alb_handle_active_change+0xc10/0xec0 [ 426.308696][T16973] ? __pfx_bond_alb_handle_active_change+0x10/0x10 [ 426.308717][T16973] ? __kasan_kmalloc+0x93/0xb0 [ 426.308742][T16973] ? __local_bh_enable_ip+0x12d/0x1c0 [ 426.308762][T16973] bond_change_active_slave+0x1048/0x3770 [ 426.308787][T16973] ? __pfx_bond_change_active_slave+0x10/0x10 [ 426.308805][T16973] ? __queue_work+0x102/0xfb0 [ 426.308823][T16973] ? __queue_work+0xc56/0xfb0 [ 426.308840][T16973] ? mod_delayed_work_on+0x128/0x200 [ 426.308856][T16973] ? lockdep_hardirqs_on+0x9c/0x150 [ 426.308874][T16973] ? mod_delayed_work_on+0x1ac/0x200 [ 426.308891][T16973] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 426.308908][T16973] ? netdev_change_features+0x8d/0xd0 [ 426.308927][T16973] bond_select_active_slave+0x8e2/0xd00 [ 426.308949][T16973] ? __pfx_bond_select_active_slave+0x10/0x10 [ 426.308969][T16973] ? __pfx_bond_set_carrier+0x10/0x10 [ 426.308988][T16973] ? netdev_is_rx_handler_busy+0x6e/0x140 [ 426.309004][T16973] ? __pfx_bond_handle_frame+0x10/0x10 [ 426.309024][T16973] bond_enslave+0x214a/0x3850 [ 426.309043][T16973] ? sock_def_readable+0x30f/0x550 [ 426.309059][T16973] ? sock_def_readable+0xbe/0x550 [ 426.309084][T16973] ? __pfx_bond_enslave+0x10/0x10 [ 426.309107][T16973] ? __pfx___dev_notify_flags+0x10/0x10 [ 426.309122][T16973] ? mutex_is_locked+0x17/0x50 [ 426.309138][T16973] do_set_master+0x533/0x6d0 [ 426.309154][T16973] rtnl_newlink_create+0x677/0xb00 [ 426.309172][T16973] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 426.309186][T16973] ? __pfx___mutex_lock+0x10/0x10 [ 426.309209][T16973] ? ns_capable+0x8a/0xf0 [ 426.309224][T16973] rtnl_newlink+0x16e4/0x1c80 [ 426.309248][T16973] ? __pfx_rtnl_newlink+0x10/0x10 [ 426.309269][T16973] ? css_rstat_updated+0x23a/0x4f0 [ 426.309289][T16973] ? __lock_acquire+0xab9/0xd20 [ 426.309306][T16973] ? __lock_acquire+0xab9/0xd20 [ 426.309325][T16973] ? is_bpf_text_address+0x26/0x2b0 [ 426.309341][T16973] ? is_bpf_text_address+0x292/0x2b0 [ 426.309356][T16973] ? is_bpf_text_address+0x26/0x2b0 [ 426.309373][T16973] ? __lock_acquire+0xab9/0xd20 [ 426.309393][T16973] ? __pfx_rtnl_newlink+0x10/0x10 [ 426.309412][T16973] rtnetlink_rcv_msg+0x7cf/0xb70 [ 426.309431][T16973] ? __lock_acquire+0xab9/0xd20 [ 426.309444][T16973] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 426.309463][T16973] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 426.309488][T16973] netlink_rcv_skb+0x208/0x470 [ 426.309508][T16973] ? __lock_acquire+0xab9/0xd20 [ 426.309521][T16973] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 426.309541][T16973] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 426.309564][T16973] ? netlink_deliver_tap+0x2e/0x1b0 [ 426.309584][T16973] netlink_unicast+0x82f/0x9e0 [ 426.309605][T16973] ? __pfx_netlink_unicast+0x10/0x10 [ 426.309624][T16973] ? netlink_sendmsg+0x642/0xb30 [ 426.309636][T16973] ? skb_put+0x11b/0x210 [ 426.309650][T16973] netlink_sendmsg+0x805/0xb30 [ 426.309665][T16973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.309679][T16973] ? aa_sock_msg_perm+0xf1/0x1d0 [ 426.309700][T16973] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 426.309714][T16973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.309726][T16973] __sock_sendmsg+0x21c/0x270 [ 426.309746][T16973] ____sys_sendmsg+0x505/0x830 [ 426.309762][T16973] ? __pfx_____sys_sendmsg+0x10/0x10 [ 426.309778][T16973] ? import_iovec+0x74/0xa0 [ 426.309796][T16973] ___sys_sendmsg+0x21f/0x2a0 [ 426.309810][T16973] ? __pfx____sys_sendmsg+0x10/0x10 [ 426.309837][T16973] ? __fget_files+0x2a/0x420 [ 426.309851][T16973] ? __fget_files+0x3a0/0x420 [ 426.309867][T16973] __x64_sys_sendmsg+0x19b/0x260 [ 426.309881][T16973] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 426.309901][T16973] ? do_syscall_64+0xbe/0xfa0 [ 426.309921][T16973] do_syscall_64+0xfa/0xfa0 [ 426.309939][T16973] ? lockdep_hardirqs_on+0x9c/0x150 [ 426.309957][T16973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.309971][T16973] ? clear_bhb_loop+0x60/0xb0 [ 426.309986][T16973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.310005][T16973] RIP: 0033:0x7fc67438f6c9 [ 426.310019][T16973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.310032][T16973] RSP: 002b:00007fc6752d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.310048][T16973] RAX: ffffffffffffffda RBX: 00007fc6745e5fa0 RCX: 00007fc67438f6c9 [ 426.310058][T16973] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 426.310068][T16973] RBP: 00007fc674411f91 R08: 0000000000000000 R09: 0000000000000000 [ 426.310077][T16973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.310086][T16973] R13: 00007fc6745e6038 R14: 00007fc6745e5fa0 R15: 00007fff6495c688 [ 426.310102][T16973] [ 426.318051][T16986] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3021'. [ 426.320958][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 426.400058][T16988] netlink: 'syz.6.3021': attribute type 1 has an invalid length. [ 426.438050][T16973] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 426.451339][T16983] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3021'. [ 426.515502][T16630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.673180][T16973] syz.0.3018 (16973) used greatest stack depth: 15624 bytes left [ 427.273669][T16986] hsr_slave_0 (unregistering): left promiscuous mode [ 427.282243][T16979] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3020'. [ 427.292422][T16979] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3020'. [ 427.323917][T16983] team0: Port device team_slave_1 removed [ 427.345804][T16630] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.362257][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.369503][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.378894][ T5839] Bluetooth: hci2: command tx timeout [ 427.384628][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.391757][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.567701][T16630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.682459][T16630] veth0_vlan: entered promiscuous mode [ 427.691689][T16630] veth1_vlan: entered promiscuous mode [ 427.712622][T16630] veth0_macvtap: entered promiscuous mode [ 427.721384][T16630] veth1_macvtap: entered promiscuous mode [ 427.734348][T16630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.746612][T16630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.758426][ T7211] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.767544][ T7211] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.777319][ T7211] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.786987][ T7211] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.821290][T16630] ieee80211 phy31: Selected rate control algorithm 'minstrel_ht' [ 427.846598][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.850369][T16630] ieee80211 phy32: Selected rate control algorithm 'minstrel_ht' [ 427.859552][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.880935][ T7222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.888937][ T7222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.980069][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!