last executing test programs: 9m30.475987743s ago: executing program 4 (id=5): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007ce2fb29be1e99d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_STAB={0x104, 0x2, "1c1f15f3c5e23d27d29a00dd397b5c11d4cf201c1a0619fc314514ab71788e4079fdbe4f2a0d60b83a7d04c1d709981110401e5e10685abbad9b6f18e303e902c77244658a099a36fa486760c4941ea7df64250af29a4935de5d244f0549d93679b3d4fb358c2076bc6b1c9735ff8243f088e67455ba14975d12e5903ceeb7a23d62ecb5253ad444ef726b58a00f13f22ccc84cc06c9912b621c3ddc5f3229dc84c0880b5c6faefe33413b34a146e592fc15ae234dac030f05bb99eab08dfd2cb5659c6fc21fb7da6c380165ddde4659e75538dc864a53f691e1d785d6e6f73a03abf2120bce67e2d50075fd811b3e03a1cc2d66335bdee19738a0c1fb79b77d"}, @TCA_CHOKE_MAX_P={0xe, 0x3, 0x8}]}}]}, 0x154}}, 0x0) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000080)=[{0x0, 0x1, {0x2, 0xff, 0x2}, {0x1, 0x1, 0x3}, 0xfe, 0x2}, {0x1, 0x1, {0x0, 0xf0, 0x3}, {0x2, 0x1}}], 0x40) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r3) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x200, r6, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4ba}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x265}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x432}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbe25}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb888}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffff7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10) connect$vsock_stream(r7, &(0x7f0000006000)={0x28, 0x0, 0x2711}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007ce2fb29be1e99d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet6(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0xe, 0x3, 0x8}]}}]}, 0x154}}, 0x0) (async) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000080)=[{0x0, 0x1, {0x2, 0xff, 0x2}, {0x1, 0x1, 0x3}, 0xfe, 0x2}, {0x1, 0x1, {0x0, 0xf0, 0x3}, {0x2, 0x1}}], 0x40) (async) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r3) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x200, r6, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4ba}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x265}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x432}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbe25}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb888}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffff7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10) (async) connect$vsock_stream(r7, &(0x7f0000006000)={0x28, 0x0, 0x2711}, 0x10) (async) 9m29.919943459s ago: executing program 32 (id=5): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007ce2fb29be1e99d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0xe, 0x3, 0x8}]}}]}, 0x154}}, 0x0) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000080)=[{0x0, 0x1, {0x2, 0xff, 0x2}, {0x1, 0x1, 0x3}, 0xfe, 0x2}, {0x1, 0x1, {0x0, 0xf0, 0x3}, {0x2, 0x1}}], 0x40) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r3) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x200, r6, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4ba}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x265}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x432}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbe25}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb888}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffff7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10) connect$vsock_stream(r7, &(0x7f0000006000)={0x28, 0x0, 0x2711}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007ce2fb29be1e99d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet6(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_STAB={0x104, 0x2, "1c1f15f3c5e23d27d29a00dd397b5c11d4cf201c1a0619fc314514ab71788e4079fdbe4f2a0d60b83a7d04c1d709981110401e5e10685abbad9b6f18e303e902c77244658a099a36fa486760c4941ea7df64250af29a4935de5d244f0549d93679b3d4fb358c2076bc6b1c9735ff8243f088e67455ba14975d12e5903ceeb7a23d62ecb5253ad444ef726b58a00f13f22ccc84cc06c9912b621c3ddc5f3229dc84c0880b5c6faefe33413b34a146e592fc15ae234dac030f05bb99eab08dfd2cb5659c6fc21fb7da6c380165ddde4659e75538dc864a53f691e1d785d6e6f73a03abf2120bce67e2d50075fd811b3e03a1cc2d66335bdee19738a0c1fb79b77d"}, @TCA_CHOKE_MAX_P={0xe, 0x3, 0x8}]}}]}, 0x154}}, 0x0) (async) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000080)=[{0x0, 0x1, {0x2, 0xff, 0x2}, {0x1, 0x1, 0x3}, 0xfe, 0x2}, {0x1, 0x1, {0x0, 0xf0, 0x3}, {0x2, 0x1}}], 0x40) (async) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r3) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x200, r6, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4ba}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x265}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x432}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbe25}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb888}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffff7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10) (async) connect$vsock_stream(r7, &(0x7f0000006000)={0x28, 0x0, 0x2711}, 0x10) (async) 9m29.876567241s ago: executing program 1 (id=2): socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x0, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x3}, {0xa, 0xd}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x8000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x12) sendfile(r1, r2, 0x0, 0xf03a0001) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9m29.549959186s ago: executing program 33 (id=2): socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x0, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x3}, {0xa, 0xd}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x8000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x12) sendfile(r1, r2, 0x0, 0xf03a0001) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9m29.524364932s ago: executing program 3 (id=4): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f00000000c0)="d2664e3de44e5781659d1c2224a19de44fba87cf2fcf751c9b218685", 0xffffffffffffffe7, 0x2c000891, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r6, &(0x7f0000001140), 0x700, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x6, 0x6, 0x0, 0xffffffffffffffff, 0x3}, 0x50) socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x2, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r11}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 9m29.478619707s ago: executing program 34 (id=4): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f00000000c0)="d2664e3de44e5781659d1c2224a19de44fba87cf2fcf751c9b218685", 0xffffffffffffffe7, 0x2c000891, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r6, &(0x7f0000001140), 0x700, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x6, 0x6, 0x0, 0xffffffffffffffff, 0x3}, 0x50) socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x2, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r11}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 5.089974993s ago: executing program 0 (id=5120): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x5f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x55}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f0000000300), 0xc, &(0x7f0000000340)={&(0x7f0000000e80)={0x10a4, 0x29, 0x900, 0x70bd25, 0x25dfdbfc, {}, [@typed={0x4, 0xd, 0x0, 0x0, @binary}, @generic="7068e9bfe975159b352c4d6b6507a51adab1cf61c758c106439154d1b6f824d0c2fefc5faf8fc810c967c4c67e6d81f4e0365f17d41a27fe216188490b14f29e1f157dbf9009896af6ea1f9f796fecf07eb6f40b1f0e8468030e5d5436d1326d8e381fb22eebc7df92bc3b0c75c62a8f763b08ab3f8e7f438b793c3054fe1b1f792994464e22a1388323", @generic="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"]}, 0x10a4}, 0x1, 0x0, 0x0, 0x2000000}, 0x1) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01030000000000000000320000000c009900000000000000000005001801"], 0x40}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe0, r4, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "152d2a0a7544d546df2f7000d75e5942bc8fea436476cf70"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4935ce735cef6a8ee110a0b3dc8d81eb5831afd40f3e1103"}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b927f11197e275747dd667df892470edc526ff53260930cc"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0xe0}, 0x1, 0x0, 0x0, 0x10004800}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe18}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.96217534s ago: executing program 0 (id=5124): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="180000005a000d"], 0x18}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000060000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001400)={r1}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000400000003000006040000000400000007000000020000000400000004000000fcffffff002e71a0"], 0x0, 0x45, 0x0, 0x1, 0x80000001}, 0x28) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4082, 0xff2}, {0x0}], 0x2}, 0x5}], 0x1, 0x2000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000012c0)={0x2c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x40000) (async) close(r6) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="6d9310000000f4dbdf25010000000c00060000000000020000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048890}, 0x880) (async, rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (rerun: 32) 4.441908026s ago: executing program 6 (id=5129): syz_emit_ethernet(0xb6, &(0x7f0000001640)={@broadcast, @dev, @void, {@ipv4={0x800, @igmp={{0x28, 0x4, 0x3, 0x9, 0xa8, 0x64, 0x0, 0x80, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @private=0xa010101, {[@cipso={0x86, 0x15, 0x3, [{0x1, 0xf, "6dd39812e5daf2923d08771996"}]}, @generic={0x44, 0x12, "d0af5b404948c1d59dc7c39de6c14bc4"}, @rr={0x7, 0x17, 0x47, [@local, @rand_addr=0x64010100, @multicast1, @multicast2, @broadcast]}, @timestamp_addr={0x44, 0x34, 0x72, 0x1, 0x2, [{@broadcast, 0xabb}, {@loopback, 0x7}, {@broadcast, 0xf}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x24}, 0xfff}, {@local, 0x3ff}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0xc1, 0x1, 0x1, [{@rand_addr=0x64010100, 0x9}, {@dev={0xac, 0x14, 0x14, 0xc}, 0xfff}]}]}}, {0x22, 0xe2, 0x0, @multicast2}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff78}, 0x94) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r2, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000580)=0x14, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) unshare(0x22020600) unshare(0x2a020400) unshare(0x60400) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000015c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="000000002000000014"], 0x34}}, 0x0) socket$packet(0x11, 0x3, 0x300) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a1589836c736d2341f7", 0x21}, {&(0x7f0000000040)="df3b46a1330000000000000000000000000000f1", 0x14}, {&(0x7f00000005c0)="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", 0xe8f}, {&(0x7f00000033c0)="d6d038091fcf458c47fa6bd5a8edbf8f968178124964b4b012f8047c9716eb31", 0x20}], 0x6}, 0x40000) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) 4.230706368s ago: executing program 0 (id=5131): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r2 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf2514000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000000514010010bd7000ffdbdf25080001"], 0x20}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xf, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000006118b4000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, r5, 0x0, 0x0, 0xfffffffffffffe90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.110128717s ago: executing program 6 (id=5132): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010003b15000000000000000000565a6fb1e30bae605c02470dc41f5509e3b39bb8b852ff341916b32d3c9d51ae7e83df7658637d9b77fb5986f085723a25e264346f4bbe83748e1260377b9ea45a1c7c8f6f6023b200"/100, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e) accept$unix(r1, &(0x7f0000000200)=@abs, &(0x7f0000000100)=0x6e) 4.000041252s ago: executing program 6 (id=5134): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0xbc914b49a8246e7, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x18b, 0x151, 0x4}}]}]}, @IFLA_IFALIASn={0x4}]}, 0x50}}, 0x0) 3.893942132s ago: executing program 5 (id=5135): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x0, 0x42}, 0x80, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a3409777277"], 0xa) sendmsg$can_bcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001240)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r10}, 0x10) r12 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r11}, 0x8) close(r12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xbc}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r9, @ANYBLOB="00410000000000001c002b8008000100", @ANYRES32, @ANYBLOB="0800030019000000080008"], 0x3c}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r6}, 0x10, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x10) r13 = socket(0x10, 0x3, 0x0) r14 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000240)=@newqdisc={0x7c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x7}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7ff}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x2}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0xfffffffc}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x792b}, @qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x20000000}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x4}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x8}]}}]}, 0x7c}}, 0x0) close(r2) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0x3, {0x2, 0x90, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x24}}, 0x0) 3.893431902s ago: executing program 0 (id=5136): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045"], 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0xff03}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c}}}}]}]}, 0x70}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045"], 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) (async) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0xff03}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c}}}}]}]}, 0x70}}, 0x0) (async) 3.814666135s ago: executing program 6 (id=5137): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f00000008c0)='.', 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r3, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/203, 0xcb}, {&(0x7f0000000340)=""/257, 0x101}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x80000000}], 0x4, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10) listen(r0, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 3.626923517s ago: executing program 7 (id=5138): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)="10", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x7, 0xe, 0x9, 0x0, 0x1, 0x8, 0xa7, 0x4, 0x5, 0xf1, 0xb, 0x7, 0x0, 0x7}, 0xe) poll(&(0x7f00000001c0)=[{r0, 0x4689}], 0x1, 0x81) shutdown(r0, 0x1) (async) shutdown(r0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8004"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) socket(0x2b, 0x1, 0xfffffffc) (async) socket(0x2b, 0x1, 0xfffffffc) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x101, 0x0, 0x0, {0x3}}, 0x14}}, 0x24008000) r4 = socket$nl_rdma(0x10, 0x3, 0x14) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getroute={0x1c, 0x1a, 0x10, 0x74bd26, 0x25dfdbfc, {0x2, 0x80, 0x0, 0xd, 0xfc, 0x3, 0x0, 0xb, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getroute={0x1c, 0x1a, 0x10, 0x74bd26, 0x25dfdbfc, {0x2, 0x80, 0x0, 0xd, 0xfc, 0x3, 0x0, 0xb, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) getsockname$packet(r5, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000080000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000080000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x20, 0x68, 0x400, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_FDB={0x4}]}, 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r6, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r10 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r10, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) 3.401626863s ago: executing program 5 (id=5139): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x22000001) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f00)=@newtfilter={0x890, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0xb, 0xe}}, [@filter_kind_options=@f_route={{0xa}, {0x860, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r4}, @TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x4, 0x8, 0x1, 0xbc4e, 0x1000, 0x6, 0x401, 0x4, 0xfffffff9, 0x7, 0x2, 0xdd, 0x10000, 0xcc9, 0x0, 0x8, 0xe2, 0xffffffff, 0x7ff, 0x5, 0xd, 0xd181e86b, 0xc2b, 0xfffffff9, 0x3, 0x80000001, 0xbb, 0x26c7014f, 0x8, 0x9, 0xffffffff, 0x4, 0x3, 0x5, 0x4, 0x2, 0xfffffffc, 0x6, 0x6d, 0x0, 0x8, 0x5000, 0x2, 0xf, 0x5, 0x1, 0x7, 0xffffffff, 0x8, 0x8, 0x6, 0x1, 0x2, 0x4, 0x7f, 0x0, 0x6, 0x1, 0x8, 0x4, 0x5, 0xfffffff8, 0x7, 0x0, 0x800000, 0x7b, 0x8, 0x6, 0x4890, 0xc8ef, 0xa5, 0x4, 0xa8a1, 0x70c, 0x6, 0x7, 0x401, 0x3, 0x4, 0x8001, 0x0, 0x3, 0x80000000, 0x9, 0x5, 0x1, 0x2, 0x5, 0x10000, 0x6, 0x6, 0x3, 0xffd, 0x2, 0xf, 0x1000, 0x1, 0x80000000, 0x8, 0x1000, 0x9, 0x8, 0x9, 0x7, 0x0, 0x0, 0x1, 0x3, 0x275d, 0x200, 0x7, 0x100, 0x1, 0x8, 0x10000, 0x40, 0x2fc9, 0x2, 0x6, 0xfff, 0x800, 0x7, 0x3, 0x0, 0x8, 0x18, 0x9, 0x3, 0x2, 0x2, 0x8, 0xb, 0x8, 0x40, 0xa5, 0x9, 0x0, 0x1, 0x1ff, 0x3, 0x4, 0x101, 0x0, 0x0, 0x1, 0x98bf, 0x3, 0xfff, 0x9, 0x67d, 0xc2c3, 0x7, 0x0, 0xe771, 0xfffff962, 0x0, 0x7, 0x0, 0x9, 0x6, 0x6, 0x8, 0x5, 0x0, 0x3, 0x10, 0x40, 0x8, 0x6, 0x0, 0x1, 0x3, 0x8, 0x8b2, 0x8d1, 0x7, 0x800, 0x6, 0xb8, 0x5, 0x27, 0x5, 0x16cf, 0x4, 0x9, 0x8, 0x0, 0x0, 0x7fffffff, 0x8, 0x84d, 0x5, 0x0, 0xfffffffa, 0x9, 0x7, 0xfffffffb, 0x2, 0x9, 0x0, 0x3, 0x80000000, 0x9e16, 0x4, 0x401, 0x9, 0xf5, 0x4, 0x5, 0x4, 0x5, 0xfffffffc, 0x44, 0x4f82, 0x0, 0xffffff80, 0x0, 0x4, 0x7, 0x5, 0x2, 0xdfcb, 0x7fff, 0x53c, 0x9, 0x5, 0x5, 0x1000, 0x3, 0x1, 0x7, 0x2, 0x4, 0x9, 0x0, 0x9, 0x800, 0x1, 0x4, 0x6, 0x10, 0xb3, 0x8, 0x2, 0x8, 0x0, 0x6, 0xc, 0x8, 0xd, 0x5, 0xfa, 0x4, 0x100, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x400, 0xbbb, 0xffffffff, 0xffff, 0x85c, 0x6, 0x9, 0x7, 0xef, 0x8001, 0x3, 0x7, 0x9, 0x46f8, 0x1, 0x5, 0x9, 0x5, 0x2, 0x4, 0x6, 0x8, 0x400, 0x4, 0x81, 0x9, 0x8, 0xf, 0x28, 0x9, 0x100, 0x43b74c2c, 0x1, 0x5, 0xd, 0x0, 0x48000000, 0x0, 0xda1, 0x81, 0x44, 0x4e, 0x1, 0x4, 0x2, 0x2, 0x3fd8, 0x101, 0xf9, 0x69ba, 0xd2, 0x3, 0xe, 0x0, 0xbd, 0x9, 0x1ff, 0x1, 0x6, 0xfff, 0x40, 0xc34, 0xfffffff8, 0xc0000000, 0x0, 0x6, 0x80000000, 0xf4, 0x3, 0x5, 0x74, 0x10, 0x8, 0x3, 0x9, 0x127, 0x3, 0x2, 0x1, 0xf8e, 0x1, 0x9, 0x5, 0x8, 0x36, 0x80000001, 0x6, 0x9, 0xfff, 0x10000, 0xfffffff8, 0x1, 0x6dd6, 0x9, 0x2, 0x8, 0x5bd, 0xfffffffd, 0xe0, 0x34, 0x6, 0x3, 0x4, 0xfc, 0xbf26053a, 0x1, 0xfffffff7, 0x3, 0x1000, 0x1, 0x80, 0x2, 0x2, 0x3ff, 0xffffffff, 0x0, 0x4, 0x7, 0x0, 0x3, 0x2, 0x0, 0x200, 0x9, 0x3, 0x1, 0x9, 0x6f26, 0x7, 0x6, 0x7, 0xed1, 0x5, 0x3, 0xd6, 0x2, 0x8, 0x1000, 0x7, 0x80, 0x8001, 0x2, 0x4, 0x0, 0x1, 0x800, 0x7, 0x3a, 0x7, 0x80000001, 0x0, 0x81, 0x3, 0x0, 0x1b8, 0x2, 0x0, 0x4, 0x80, 0x3, 0x1, 0x2, 0x0, 0x80, 0x1, 0x2, 0x401, 0x0, 0x1, 0x1, 0x96731ac4, 0x7, 0x4798, 0x7, 0x6, 0x7, 0x244e4f, 0x7fff, 0x0, 0x81, 0xfffffffa, 0x9, 0xb6, 0x1, 0x6cb, 0x2, 0x4, 0xff, 0x5, 0x9, 0x7, 0x9, 0x4, 0x0, 0x4, 0x3, 0x1, 0x2, 0x1, 0x200, 0xc800, 0x9, 0x94cb, 0xfffffff9, 0x5, 0xffffff20, 0x1, 0x9, 0x6, 0x4, 0x7fff, 0x7, 0x2, 0x5, 0x7, 0x6, 0x80, 0xa9, 0x2, 0x6, 0xd36, 0x5, 0x8, 0x4, 0x10000, 0x7, 0x8001, 0x8001, 0x7, 0x0, 0x502, 0x2a3c, 0x10, 0x94a4, 0x5, 0x7d98, 0x9, 0x3ffb1c8d, 0x2, 0x7f, 0xc20, 0x6, 0x5, 0x5aa9987b, 0xcf, 0x7, 0x6, 0x9, 0x6, 0x6, 0x100, 0x0, 0x4, 0x8, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x400, 0x8, 0xfffff0f9, 0x8, 0x10001, {0xc, 0x2, 0xd, 0x0, 0x7, 0xc}, {0x5, 0x0, 0x54b3, 0x3a, 0x6, 0x5}, 0xfffffffd, 0x32e7, 0x4}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xcd}]}}]}, 0x890}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 3.374372412s ago: executing program 7 (id=5140): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) r0 = socket(0x36, 0x4, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@private=0xa010101, 0x1, 0x0, 0x20, 0x0, [{@empty}, {@empty}]}}) 3.31416795s ago: executing program 7 (id=5141): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)="a761e10611", 0x5}], 0x1, &(0x7f00000005c0)=[{0x10, 0x1, 0x2}], 0x10}, 0x8000) sendmmsg$alg(r5, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d40)="d8750288189987d0fabb09b23867772c615b8004f5071a7715f73be32aea3bb1ecc3e0814fb9b752a6d48b1d4d68a4282f76c2c6535ec3ec0fe9843311", 0x3d}], 0x1}], 0x1, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb023, 0x241}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}}, 0x0) recvmmsg(r5, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x7}, {&(0x7f0000000940)=""/53, 0x35}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x193, &(0x7f0000000040)=ANY=[@ANYRES8=r3], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', r3}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x2c, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, 0x4120}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r8}]}]}, 0x2c}}, 0x4008000) 2.321705042s ago: executing program 2 (id=5142): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000080)={0x4, {{0x2, 0x4e21, @rand_addr=0x64010100}}}, 0x88) (async, rerun: 32) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x1406, 0x400, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xc891) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x15c, 0x15, 0x4, 0x70bd2a, 0x25dfdbfd, {0x29, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x92, 0x1, "8d2ab6e94c3731f16ae0dc81755dc67e3a3a6e047bf370b9450060069e9c0055946815d6d1b9884c461e59d6c7c05a3ddf93e46ee6575e26286c6130341563337936e87f8f0e81ed4ab9c490ef50f5c96012f64495996eddc8bf2836aed430950fde18b03db158d8fe78eb1eda562c297699c94f10f1098007d83c324a0cb0c5f08a3324c983f6e2667f1c6dbf94"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "3e4b55d9c39a72bd2804c09569d11efe135562ef1f62e47b4b761917ddc546a28db1b4df9704c77d836407154da0a93e14210bbe7963d1ba113fb111c24e92adde673527caea8fbc9f0bd3c3290c8f5f6a7f9c6e5695d15b2b9e9ae1aadca8efc570e38d8eef8ea048e761a83ba2d52d597ce682397b"}, @INET_DIAG_REQ_BYTECODE={0x16, 0x1, "9dc6c1d70dd7a279582de7a4a7fc5b2baf6a"}, @INET_DIAG_REQ_BYTECODE={0x20, 0x1, "2a6f99c68d9761c878c87030ced822b093b6190533e451b7ebdeb3ff"}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000bc0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000580)={0x5e8, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0x420, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4030fdf7505cfaaff5a68b0cd4ccd64d72ba16633afec240514fe1867cd0780e"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x395, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7c76e4e5b63017657cb67863d5ea8cb6310b16bac52fcb64095a6ea3796e25ac"}]}, {0x2f8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x17c, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xb}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x110, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "640318d078a944dfa7df02c17b063dc6f00fe089f3f84ab4784d2fb82a8623ef"}]}, {0x88, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x7, @loopback, 0x6}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6da6c8ac4ee9ea184ab621c03309ab4f4443b25aef28cb80b7a007255a36450f"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x170, 0x8, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x7, @remote, 0xc}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7ff, @mcast1, 0x9}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0xb4, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x0, @mcast2, 0x8}}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b65e07a21bc33607e40336d0c2b763f3585d143bd27305c03b60251af6f9c0b4"}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x5e8}, 0x1, 0x0, 0x0, 0x4004000}, 0x1) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000c00)={'bridge_slave_1\x00', 0x2}) (async) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000c80)={'nat\x00', 0x0, 0x0, 0x0, [0x8000000000000001, 0x43d, 0xf12a, 0x40, 0x5, 0x7], 0x6, &(0x7f0000000c40)=[{}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r4) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, r6, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc041}, 0x20000100) (async) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x30, r0, 0xa7199000) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000f00)={'batadv_slave_1\x00', 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000f40)={0x0, 0x0}, &(0x7f0000000f80)=0xc) sendmsg$nl_xfrm(r7, &(0x7f0000001200)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000fc0)=@expire={0x1d4, 0x18, 0x300, 0x70bd28, 0x25dfdbff, {{{@in=@multicast1, @in6=@local, 0x4e20, 0x0, 0x4e22, 0x8000, 0x2, 0x80, 0x20, 0x67, r8, r9}, {@in=@local, 0x4d6, 0x32}, @in=@empty, {0xffffffffffff5563, 0x2, 0x1, 0x10001, 0x8000000000000000, 0x5, 0x0, 0x8}, {0x1, 0xc24f, 0x9d59, 0x8}, {0x0, 0x74b3, 0x3}, 0x70bd28, 0x3505, 0x2, 0x1, 0x2, 0x68}, 0x1}, [@replay_thresh={0x8, 0xb, 0x5}, @XFRMA_SET_MARK={0x8, 0x1d, 0x400}, @algo_auth_trunc={0x7d, 0x14, {{'sha1-generic\x00'}, 0x188, 0x180, "976df164678cffa0ccdda56202b8e5ab6a364041d8e8c64a3705429fcf1d48f2db93303c940bbd7be27493c2b9dae311e4"}}, @replay_thresh={0x8, 0xb, 0x5}, @mark={0xc, 0x15, {0x35075c, 0x200}}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd27, 0x70bd2d, 0x70bd2b, 0x70bd2a, 0x9, [0xfb7, 0x6, 0x8]}}, @replay_val={0x10, 0xa, {0x70bd2a, 0x70bd25, 0x8}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4048}, 0x20000000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001240)="b8cccc3021f05ec4e1559709d3ea68212d932e14a09d7fb956547ed7bfec644510b70f559c39b99ef9dc38df7df2fce42f835c4e8f042a1b8a496f238bb1f7812c001bbc8757ffb7d44723f682849d15204b78268b62447b476494e2aec5804210c5f42313cd59939fb1b7a0b8a63d3f4021c9c719aaa487abd33fcad6", 0x7d) (async) socketpair(0x1a, 0x80000, 0x7, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, &(0x7f0000001300)={0x3800, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x0, 0x6, [{{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e20, @private=0xa010101}}]}, 0x390) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r11, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x40, 0x2, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x18}]}, 0x40}, 0x1, 0x0, 0x0, 0x845}, 0x40) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000002980)={0xf, 0x2, &(0x7f0000001800)=@raw=[@map_fd={0x18, 0x5, 0x1, 0x0, 0x1}], &(0x7f0000001840)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000001880)=""/4096, 0x41000, 0x44, '\x00', r8, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002880)={0x1, 0xb, 0x0, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f00000028c0)=[r4, 0xffffffffffffffff, 0x1], &(0x7f0000002900)=[{0x4, 0x2, 0x8}, {0x4, 0x2, 0x3, 0xc}, {0x0, 0x3, 0xd, 0x4}, {0x1, 0x2, 0x3, 0x2}, {0x3, 0x1, 0xd}], 0x10, 0x6f6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002a80)={{0x1}, &(0x7f00000017c0), &(0x7f0000002a40)=r12}, 0x20) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000002ac0)={0x0, 0x8}, &(0x7f0000002b00)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f0000002b40)={r13, 0x1ff}, &(0x7f0000002b80)=0x8) sendmsg$nl_generic(r4, &(0x7f0000002c80)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x40, 0x26, 0x400, 0x70bd27, 0x25dfdbfc, {0x15}, [@typed={0x8, 0x4a, 0x0, 0x0, @fd=r7}, @generic="66640167068f3a12acbe65d3c5995900c399ef7a68261087c2686613475b2058a3db"]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000002cc0)={r14, 0xfffffff7}, 0x8) 2.196576598s ago: executing program 2 (id=5143): r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)=""/101, 0x65}, {&(0x7f0000000180)=""/117, 0x75}, {&(0x7f0000000200)=""/56, 0x38}, {&(0x7f0000000240)=""/169, 0xa9}], 0x4}, 0x10042) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000380)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x18, 0xfffffff0, 0x8, 0x3, 0x2024, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x50) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000440)={0x40, 0x8, 0x1, 0x2, 0x3, 0x0, [{0x5, 0x8a, 0x6, '\x00', 0x100}, {0x8b, 0xd0dc, 0x4, '\x00', 0x1102}, {0x100000001, 0x1ff, 0x5, '\x00', 0x2002}]}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x6f1}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4c040}, 0x24008001) recvmmsg(r0, &(0x7f0000004000)=[{{&(0x7f0000000680)=@ieee802154, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000700)=""/208, 0xd0}, {&(0x7f0000000800)=""/159, 0x9f}], 0x2, &(0x7f0000000900)=""/130, 0x82}, 0x4}, {{&(0x7f00000009c0)=@generic, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000a40)=""/223, 0xdf}], 0x1}, 0xa7e}, {{&(0x7f0000000b80)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000c00)}, {&(0x7f0000000c40)=""/208, 0xd0}, {&(0x7f0000000d40)=""/107, 0x6b}, {&(0x7f0000000dc0)=""/10, 0xa}], 0x4, &(0x7f0000000e40)=""/239, 0xef}, 0xc}, {{&(0x7f0000000f40)=@nfc, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000fc0)=""/50, 0x32}, {&(0x7f0000001000)=""/82, 0x52}, {&(0x7f0000001080)=""/40, 0x28}, {&(0x7f00000010c0)=""/214, 0xd6}], 0x4, &(0x7f0000001200)=""/4096, 0x1000}}, {{&(0x7f0000002200)=@alg, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002280)=""/250, 0xfa}, {&(0x7f0000002380)=""/62, 0x3e}], 0x2, &(0x7f0000002400)=""/240, 0xf0}, 0x1}, {{&(0x7f0000002500)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002580)=""/57, 0x39}], 0x1, &(0x7f0000002600)=""/80, 0x50}, 0x3}, {{&(0x7f0000002680)=@isdn, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002700)=""/205, 0xcd}, {&(0x7f0000002800)=""/9, 0x9}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/32, 0x20}, {&(0x7f0000003880)=""/253, 0xfd}, {&(0x7f0000003980)=""/140, 0x8c}, {&(0x7f0000003a40)=""/104, 0x68}, {&(0x7f0000003ac0)=""/172, 0xac}], 0x8}, 0x7}, {{&(0x7f0000003c00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000003c80)}, {&(0x7f0000003cc0)=""/56, 0x38}, {&(0x7f0000003d00)=""/130, 0x82}], 0x3, &(0x7f0000003e00)=""/180, 0xb4}, 0x1ff}, {{&(0x7f0000003ec0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003f40)=""/8, 0x8}], 0x1, &(0x7f0000003fc0)=""/52, 0x34}, 0x401}], 0x9, 0x10003, &(0x7f0000004240)={0x0, 0x3938700}) syz_genetlink_get_family_id$smc(&(0x7f0000004280), r3) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000004380)={&(0x7f00000042c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004340)={&(0x7f0000004300)={0x20, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000043c0)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000004400)=@assoc_value={0x0}, &(0x7f0000004440)=0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000004680)={'tunl0\x00', &(0x7f0000004600)={'syztnl2\x00', 0x0, 0x10, 0x7, 0x7f, 0xf, {{0x17, 0x4, 0x3, 0x8, 0x5c, 0x65, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @dev={0xac, 0x14, 0x14, 0x39}, {[@rr={0x7, 0x7, 0x27, [@multicast1]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0x5, "339ebb"}, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0x9f, [@rand_addr=0x64010101, @multicast2, @multicast2]}, @rr={0x7, 0xf, 0xfa, [@dev={0xac, 0x14, 0x14, 0x38}, @multicast2, @multicast1]}, @rr={0x7, 0xb, 0x2c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @rr={0x7, 0x7, 0xb2, [@local]}]}}}}}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004900)={&(0x7f00000046c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf8, 0xf8, 0xa, [@fwd={0x9}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x2, 0xffffffffffffffff}, @enum64={0x2, 0x9, 0x0, 0x13, 0x0, 0x0, [{0xa, 0x2, 0x4}, {0x7, 0x4, 0x1}, {0x8, 0x4, 0x200}, {0x3, 0x589b, 0x5}, {0x1, 0xfffffffa, 0x3}, {0xb, 0x1, 0x5}, {0x8, 0x70000000, 0x8}, {0x5, 0x5, 0x9}, {0xf, 0x80000000, 0xc1}]}, @ptr={0xe, 0x0, 0x0, 0x2, 0x3}, @typedef={0xc, 0x0, 0x0, 0x8, 0x3}, @float={0x4, 0x0, 0x0, 0x10, 0xc}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x68, 0x0, 0x6f, 0x7}, @union={0x1, 0x2, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x5, 0xfffffffa}, {0x9, 0x4, 0x6}]}]}, {0x0, [0x61, 0x30, 0x61, 0x4f, 0x61, 0x30, 0x5f, 0x0]}}, &(0x7f0000004800)=""/241, 0x11a, 0xf1, 0x0, 0x5}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000004c80)={0xffffffffffffffff, 0xe0, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000049c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000004a00)=[0x0, 0x0, 0x0], &(0x7f0000004a40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x57, &(0x7f0000004a80)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000004ac0), &(0x7f0000004b00), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000004b40)}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000004cc0)={0xb, 0x17, &(0x7f0000004480)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfff}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9d}}, @exit, @call={0x85, 0x0, 0x0, 0xd0}], &(0x7f0000004540)='GPL\x00', 0x1, 0x4d, &(0x7f0000004580)=""/77, 0x41100, 0x0, '\x00', r5, @fallback=0x2f, r6, 0x8, &(0x7f0000004940)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000004980)={0x5, 0x8, 0xe40, 0x1}, 0x10, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffa45d}, 0x94) ioctl$SIOCGETVIFCNT(r3, 0x89e0, &(0x7f0000004d80)) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000001, 0x6cb62f93f830ffbb, 0xffffffffffffffff, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8982, &(0x7f0000004dc0)) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000004e40)=@generic={&(0x7f0000004e00)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r10, 0x8040942d, &(0x7f0000004e80)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000004ec0)={0x7, 0x8209, 0x5, 0x2, r4}, 0x10) pread64(r8, &(0x7f0000004f00)=""/55, 0x37, 0x1000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000004f40)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x8, &(0x7f0000004f80)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000004fc0)={'wlan1\x00'}) ioctl$F2FS_IOC_RESIZE_FS(r6, 0x4008f510, &(0x7f0000005000)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000006200)=@base={0x38, 0x0, 0x4d3c0d29, 0x9, 0x800, r1, 0x6, '\x00', r5, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x50) 913.126036ms ago: executing program 0 (id=5144): r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x5, 0x20000000, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xf, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000580)=[{0x3, 0x2, 0xd, 0xb}, {0x4, 0x2, 0x1, 0xc}, {0x4, 0x1, 0xe, 0xa}, {0x5, 0x3, 0xb, 0x8}], 0x10, 0x623}, 0x94) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0xd8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000063060000bca30000000000002403000020fef6ff720af0fff8ffffff71a4f0ff000000001f030000000000002e100200000000002604fdffffff000014010000630000001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000093bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98dde20358d1148272abd23da767f8c549ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb46ffffffffffffff7f1569b33d21dae356e5c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d22891202d0f5ad94b081fcd507acc9b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb9439901fb39f1d78aa60ead1883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10880fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1b9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa2000000000000000906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000fbff00ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554b15dca5f77a08a83431a87881fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f783e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bcb0addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43737a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab7493c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a44434600e64a6a274000000000088b3e63a000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e727bf10d6335332f45b8e87383930f1a4724434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc946acfb3d1a56e9ec13ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdce1f7ffffffffffffcf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b338a59c0c0247bc9412e19204caaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af11210200000000000000484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea170ab651a039d7102923e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b187ab8e0d179e6ad0dc758975e9cf77f703e742b77521149d8fdeae4b92d5edc232ca356fb86784b865adda7c921dc475276837b2619922de4d96850172602fac7d165e32419a622bdef7c91385c87c30b8a144d9b01784a8060670455f76b207517f66cf32fa0772975e0963b7373dba424beadf60d5bd08ea73e2b5620a5754455006934679b10e596821e2bd380d472c9096ca4c55d6106d0b88e38f6c54abc952c81617a06f93465241070fea3d9fc786e2625572ff2068ff84361b3883cc2c8b9a0a2f70119db13b47c924c73216bb12d1e68a03a08aa682ede113691db07b50f5e6fde6252f1520c"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffef3, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) 888.231104ms ago: executing program 6 (id=5145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0xfff1, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000ee, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r9, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r10}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000003c0007010000000000000000017c00001c00fc80180008800e0031002a27262d2e2b2a7b2e0000000400a7800c00018006000600800a0000080002"], 0x4c}, 0x1, 0x0, 0x0, 0x8}, 0x400c040) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r11) r12 = socket$unix(0x1, 0x1, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) 837.724309ms ago: executing program 5 (id=5146): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x2, 0xa, 0x300) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010300000000fcdbdf2524000000180001801400020076657468315f766c616e000000007a00"], 0x2c}}, 0x20000000) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), r1) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r6, 0x200, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000082}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x60, 0x10, 0x40d, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0xfffff000}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) 836.872908ms ago: executing program 2 (id=5147): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x26c42, 0x0) (rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r1 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 64) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x68, 0x10, 0x439, 0x70bd2b, 0x0, {}, [@IFLA_PORT_SELF={0x48, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "666805e2d72a5b8558f9ef5071409776"}, @IFLA_PORT_PROFILE={0xb, 0x2, 'filter\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d73bcd5426ab0dd0883397d878b487f2"}]}]}, 0x68}}, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffff0000, 0x80000001, 0x0, 0x1, 0xffffffff}, 0x0, 0x0, 0x4, 0x8, 0x80000001, 0x14, 0x0, 0x0, 0x0, 0x0, {0x0, 0x400000, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [0x5, 0x7fff, 0xd, 0x1, 0x100000001, 0x7]}, &(0x7f00000000c0)=0x78) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000f982c00fe8000000000000000000000000000aafc0000000000000000000000000000003a00"], 0xfce) 829.157364ms ago: executing program 7 (id=5148): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x0, 0x1c}, 0x28) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a31000000000800054000000002090002"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000001900)={0x0, 0x16, 0x4, 0x1000, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, 0x10) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x401}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x10, 0x1}, {0x1, 0x9}, {0x9, 0x3}}}, 0x5b}, 0x1, 0x0, 0x0, 0x44851}, 0x4) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r6, &(0x7f00000002c0)=ANY=[], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x101, 0x0}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r8, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x4, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}, @NFTA_LIMIT_RATE={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%pK \x00'}, 0x20) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x74, &(0x7f00000000c0)=""/116, 0x40f00, 0x18, '\x00', r5, @fallback=0x2, r6, 0x8, &(0x7f0000000140)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, r7, r8, 0x6, &(0x7f0000000400)=[r10, r11, 0x1, r12, r13], &(0x7f0000000440)=[{0x5, 0x2, 0x9, 0x3}, {0x3, 0x4, 0x8, 0x4}, {0x5, 0x3, 0x10, 0xc}, {0x0, 0x4, 0xb, 0x6}, {0x1, 0x4, 0x9, 0x1}, {0x1, 0x3, 0x6, 0x1}]}, 0x94) 768.501729ms ago: executing program 0 (id=5149): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x28, 0x0, 0x1, 0x8}, 0x28) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) unshare(0x2a020400) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x1, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x2}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0xff8, &(0x7f0000001e00)=""/4088, 0x40f00}, 0x94) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14) socket(0x1d, 0x2, 0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in={{0x2, 0x4e22, @empty}}, 0x2, 0x2, 0x614, 0x1, 0x2d, 0x7, 0x4}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) 633.866469ms ago: executing program 5 (id=5150): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2000030a, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r1], 0x48) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x48, 0x0, 0x68) r4 = socket$kcm(0xa, 0x1, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=r4], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5}) r7 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r7}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r5}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0x75, r2}, 0x38) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r3}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYRES8=r6], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000200)={0x3, &(0x7f0000000140)=[{0x48, 0x5, 0x73, 0xffe00003}, {0x6, 0x85, 0x6, 0x10400}, {0x8, 0x81, 0x2, 0x2}]}, 0x10) sendmsg$netlink(r9, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="180000002e003303"], 0x18}], 0x1, 0x0, 0x0, 0x20000000}, 0x40040000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x20e, 0x126, 0x0, &(0x7f00000007c0)="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", 0x0, 0x31, 0x6000000000000000}, 0x50) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100006000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a", 0x65, 0x0, 0x0, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r10) sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYRES64], 0x28}}, 0x0) socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_int(r6, 0x0, 0x15, 0x0, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r13 = accept4(r12, 0x0, 0x0, 0x800) sendmmsg$alg(r13, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x20) 473.174129ms ago: executing program 2 (id=5151): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) (async) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x7, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b529, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {}, {0x8, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x8, 0x7, 0x0, 0x5}}]}}]}, 0x44}}, 0x4008000) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b529, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {}, {0x8, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x8, 0x7, 0x0, 0x5}}]}}]}, 0x44}}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'caif0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x18, 0x24, 0x301, 0x70bd29, 0x25dfdbf7, {0x5}, [@typed={0x4, 0x11a, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r11, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 431.662095ms ago: executing program 7 (id=5152): r0 = socket(0x2, 0xa, 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001140)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESOCT=r0], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000a58000000060a0b0400000000000000000200000024000480200001800700010063740000140002800800024000000000080004400000000d0900010073797a30000000000900020073797a3200000000050007402d000000140000001100010000000000000000000000000a"], 0x80}}, 0x40) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_eeprom={0x43, 0x2, 0x6}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r4, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r5, &(0x7f00000002c0)=ANY=[], 0xfdef) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000001100), 0x4) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r7, 0x107, 0x18, 0x0, &(0x7f00000000c0)) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="4800db3ece1bc99fdb35f14988a100000206010100004cbca2173b3e00000000010000000900020073797a320000000005000400010000000900020073797a31000000000900020073797a320000000005000500"], 0x48}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendmsg$can_raw(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r10}, 0x10, &(0x7f0000001080)={&(0x7f0000001180)=@canfd={{0x3, 0x1, 0x1}, 0x3a, 0x1, 0x0, 0x0, "1c49ef8b036ed420c88b05fd694b271d785450681b07c5eccb8922ff4a70204c0af52439e9b0bfa06391ac07002f97bf3ef1f45e4e3a009b323bed13ed63acfb"}, 0x48}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000001040)) 277.635707ms ago: executing program 5 (id=5153): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c00)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000c40)='syz0\x00', 0x1ff) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) socketpair(0x5e2043a40385914e, 0x80000, 0x3c000, &(0x7f0000000340)) (async) socketpair(0x5e2043a40385914e, 0x80000, 0x3c000, &(0x7f0000000340)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000bc0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000a00)={0x1b4, r5, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffff5, 0x5a}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_SETUP={0xe0, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x7}, @NL80211_MESH_SETUP_IE={0xc1, 0x3, "b2758161d380ca6045cc0be6f39cd2c419e4d1b9c3df90a7917d3daae3a5c66a97c253893b56371d740fdeb778cee3d3b94a7dfa1fdbc6cd8a87052c2786e90f5304288eac72a67ec733ef2b2a9adabe5ff30b9a1830abb9ac29a8ade548f9c7bfc7dc4c352c9238353f8d23c281dc91b5b6226015738301bcb26ddf3a2079c3f7f79bc52782f87999c47f20fd97d1d3db40bac72b4a9fc57ced44d98e9815965d49bccc06dd1fed72a2239a3b220ff16ed23018464249883a878f33d3"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_TX_RATES={0xa0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x0, 0x2, 0x2, 0x8, 0x80, 0x5, 0x2]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7ff, 0x1, 0xd8fb, 0x1, 0x4, 0x3, 0x9]}}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x3, 0x6}, {0x4, 0x1e}, {0x0, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x3, 0x98a, 0x9, 0xa2d, 0xf, 0x1e67]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd613, 0x3, 0x0, 0x2, 0x639, 0x8, 0xc, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0x16, 0x4, 0x6c, 0x2a, 0x1b, 0x1b, 0x2, 0x6c, 0xc, 0xc, 0x30, 0x5, 0x6, 0x5, 0xb, 0x6, 0x48, 0x6c]}]}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xffffffff}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x8004}, 0x2008804) (async) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000bc0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000a00)={0x1b4, r5, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffff5, 0x5a}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_SETUP={0xe0, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x7}, @NL80211_MESH_SETUP_IE={0xc1, 0x3, "b2758161d380ca6045cc0be6f39cd2c419e4d1b9c3df90a7917d3daae3a5c66a97c253893b56371d740fdeb778cee3d3b94a7dfa1fdbc6cd8a87052c2786e90f5304288eac72a67ec733ef2b2a9adabe5ff30b9a1830abb9ac29a8ade548f9c7bfc7dc4c352c9238353f8d23c281dc91b5b6226015738301bcb26ddf3a2079c3f7f79bc52782f87999c47f20fd97d1d3db40bac72b4a9fc57ced44d98e9815965d49bccc06dd1fed72a2239a3b220ff16ed23018464249883a878f33d3"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_TX_RATES={0xa0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x0, 0x2, 0x2, 0x8, 0x80, 0x5, 0x2]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7ff, 0x1, 0xd8fb, 0x1, 0x4, 0x3, 0x9]}}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x3, 0x6}, {0x4, 0x1e}, {0x0, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x3, 0x98a, 0x9, 0xa2d, 0xf, 0x1e67]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd613, 0x3, 0x0, 0x2, 0x639, 0x8, 0xc, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0x16, 0x4, 0x6c, 0x2a, 0x1b, 0x1b, 0x2, 0x6c, 0xc, 0xc, 0x30, 0x5, 0x6, 0x5, 0xb, 0x6, 0x48, 0x6c]}]}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xffffffff}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x8004}, 0x2008804) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) socket(0x15, 0x5, 0x0) (async) r6 = socket(0x15, 0x5, 0x0) bind$inet(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x49}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0xf7, 0x2, 0x2, 0x40, @mcast2, @private2, 0x7800, 0x700, 0x6, 0x4}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0xf7, 0x2, 0x2, 0x40, @mcast2, @private2, 0x7800, 0x700, 0x6, 0x4}}) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000300)={r7, 0x1, 0x6, @multicast}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', r8, 0x0, 0x4}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', r8, 0x0, 0x4}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) setsockopt$packet_int(r11, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r11, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 275.317291ms ago: executing program 6 (id=5154): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000f40000000000000020000018010000202070250000000000202020db1af8ff00000000bfa100000000000017010000f0ffffffb702000008000000b70300000080000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0xdd, &(0x7f0000000440)=""/221, 0x0, 0x66}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000940)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xe, 0x14, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3}, @exit, @generic={0x6, 0x4, 0x2, 0x9, 0x5}, @generic={0x9, 0x6, 0x4, 0x1, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='GPL\x00', 0x514, 0xa0, &(0x7f0000000800)=""/160, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x5, 0x0, 0x8000, 0x9}, 0x10, r3, 0xffffffffffffffff, 0x1, &(0x7f0000000980)=[r2, r2, r2, r2, r2, r2], &(0x7f0000000a00)=[{0x3, 0x1, 0xa, 0x2}], 0x10, 0x7}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x100}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7183}, @func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x15, &(0x7f0000000100)=""/21, 0x41000, 0x1, '\x00', r1, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x3, 0x6c, 0x8}, 0x10, r3, r0, 0x4, &(0x7f0000000380)=[r4], &(0x7f00000003c0)=[{0x4, 0x3, 0x2, 0x6}, {0x2, 0x4, 0xa, 0x8}, {0x5, 0x1, 0x3, 0x2}, {0x2, 0x5, 0x7, 0x3}], 0x10, 0x5}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket$nl_audit(0x10, 0x3, 0x9) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r11, 0x8907, 0x0) read(r11, &(0x7f0000000000)=""/149, 0xaa) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r14 = accept$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @dev}, &(0x7f0000000700)=0x10) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r14, 0x6, 0x15, &(0x7f0000000780)=0x7f, 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x5c, r13, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xe4}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)={0x24, 0x3a, 0x4, 0x70bd27, 0x25dfdbfd, "", [@typed={0xc, 0x58, 0x0, 0x0, @u64}, @typed={0x5, 0xc1, 0x0, 0x0, @str='\x00'}]}, 0x24}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYRES32=r9, @ANYRES32, @ANYRES32=r10, @ANYRES32], 0x70, 0x50}, 0x200400c4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000b00)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e21, 0x60, 0xa, 0x80, 0x20, 0x2b, r1, r5}, {0x1, 0x8, 0x0, 0x5, 0x5, 0x4, 0x463b, 0x3}, {0x8000000000000001, 0x947, 0x19acd71b, 0x6}, 0x7ff, 0x6e6bb8, 0x0, 0x1, 0x1, 0x2}, {{@in6=@loopback, 0x4d5, 0x32}, 0xa, @in=@empty, 0x3506, 0x2, 0x0, 0x3, 0x10001, 0xd, 0x8}}, 0xe8) 147.508069ms ago: executing program 5 (id=5155): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="f07ca2a5ddef2d495ba3c21a71e6da3785230a40f3a5dfedbc1ec673e7334f395602b4da2aa2612d9bb0601c6a07014f12b5d7fcb2bf9321a7720d5d35edc88f5d6efa0a01b86e07ba3951267ec41fd398895774152bbf131785011d5e329f623e4a54cab4978df5fff95c923dad73bbae58", @ANYRES32=r0, @ANYRES32], 0x48) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) (async) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) shutdown(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000080)=0x59cc, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1200000008000000080000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000688158bb77c17055e0780c766aadb6d2ffbac2100ae3e4", @ANYRES32=0x0, @ANYRES32], 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1200000008000000080000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000688158bb77c17055e0780c766aadb6d2ffbac2100ae3e4", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095", @ANYRES64, @ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095", @ANYRES64, @ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r4, @ANYBLOB="d393ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300b868a7e05da10c0c2c3c6c23246c00"/27], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="8021000000800400140003006e657464657673696d3000000000"], 0x4c}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="8021000000800400140003006e657464657673696d3000000000"], 0x4c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140faff"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140faff"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8044) r9 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmsg$inet(r9, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0xffff, @private=0xa010102}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="08001efdff00f180", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x400c880) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="b5af2000000000000000010000000c00018008000100", @ANYRES32=r12, @ANYBLOB="eaa0559790ffd899d3c5c482a07d2764a735498f74"], 0x20}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) 90.627961ms ago: executing program 2 (id=5156): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)='\x00'/14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}, 0x28) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc8b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x62, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r5}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000000000000001dc0d6c878f064eb", @ANYRES16=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r8, 0x6, 0x9, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xfff3, 0xe}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000084) 33.788514ms ago: executing program 7 (id=5157): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket(0x29, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4844}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000980)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f00000008c0)={0x98, 0x0, 0x1, 0x0, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_NAT_DST={0x84, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140), 0x4) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=ANY=[@ANYBLOB="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", @ANYRESOCT=r2], 0x1ec}}, 0x10) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0xffff, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) r3 = socket$inet_sctp(0x2, 0x0, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000030000000900010073797a310000000014000000020a010400000000000000080000000034000000140a03000000000000000000030000000800e19b2ef000090000000000000031000000000900020073797a3000000000140000001100010000000000000000000000000a338c03f24f0f9cff363289f93c8eb93ab6170ca8f621224e96b662da9f8a9fe4629d7357009fa4a8c91ba61a53d5e834c448931d18ff3d5ddf207f47e91be8deaada6aa92f36a2b18ea4056453580fdb6f253d69deaa7ae7358e9d3af444"], 0x90}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e006f9721acbd0848ab8b27000000f32700000505f600040b00000020400000ceb51321b283eceded2694787ce15243e5210056ca4454e727ca8c2da9e6a773902036442e85dc21b1793d3ad5f11de42e1cd3e6a2603a06ebf1b0255bf9d2469adf", @ANYRES32=r3, @ANYBLOB="1000"/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0100000000000000020000000300"/28], 0x50) setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000005c0)=0x3, 0x4) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000dc0)=@RTM_NEWNSID={0x54, 0x58, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NETNSA_FD={0x8, 0x3, r5}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8, 0x2, r6}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8}, @NETNSA_PID={0x8, 0x2, r7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000009c0)) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) 0s ago: executing program 2 (id=5158): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e25, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000001440)="95", 0x1}], 0x1}}], 0x2, 0x20000004) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x8000}) r2 = socket$kcm(0x2, 0x0, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f00000000c0)=0x9, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000880)={r3, 0x7fffffffffffffff, 0x2, 0x8}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="05000000000000007111ac00000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91f7bf447837", @ANYRES8, @ANYRESOCT=0x0], &(0x7f0000000580)='syzkaller\x00', 0x5, 0xcf, &(0x7f0000000480)=""/207, 0x0, 0x53, '\x00', 0x0, @fallback, r4, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r7, 0x0) connect$unix(r6, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) accept(r7, &(0x7f0000000280)=@generic, &(0x7f0000000000)=0xfffffee8) r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000240)=ANY=[@ANYRESDEC], 0x28) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r5, 0xf504, 0x0) r9 = socket(0x2, 0x3, 0x6) bind$inet(r9, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r9, 0x0, 0x0, 0x48812, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$SIOCX25GSUBSCRIP(r9, 0x89e0, &(0x7f0000000680)={'pim6reg0\x00', 0x5, 0x80000001}) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$ARPT_SO_GET_ENTRIES(r10, 0x0, 0x61, &(0x7f0000000780)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000a9000200ee6b9712192bebf0b74ce47b28c973bf07aa7d10c600001dcf5ac18ff7ed06e4a0fd83e7a4e44bae1a1a307c95fa0ac0cc6fa67673901a9715dc6e6aad32345d7bd23d83e1582b54a19715f0c650955a815665f3b2c87cd9b58243f350341d3f0c2a4d996dfff1258dea5e1dad77e62682e384bf3c5682587d00fd893aa95bd35d37719bf969629ab6f058b855efc42f055e1dbfd11edc6ce7c9c15288ee2afbeecace0a58d33b34fc5131aa588ce64871"], &(0x7f0000000040)=0xcd) kernel console output (not intermixed with test programs): [T18479] tipc: Resetting bearer [ 451.217078][T18504] macsec1: entered promiscuous mode [ 451.222465][T18504] macvlan1: entered promiscuous mode [ 451.233910][T18504] macvlan1: left promiscuous mode [ 451.288958][ T5184] Bluetooth: hci3: command tx timeout [ 451.322186][T18430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.354038][T18478] tipc: Resetting bearer [ 451.406825][T18478] tipc: Disabling bearer [ 451.423353][T18430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.603026][T18430] team0: Port device team_slave_0 added [ 451.633789][T18430] team0: Port device team_slave_1 added [ 451.808166][T18430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.821821][T18430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.854009][T18430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.867891][T18430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.875690][T18430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.903279][T18430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.361060][ T5184] Bluetooth: hci3: command tx timeout [ 453.509643][T17640] bond0 (unregistering): Released all slaves [ 453.528008][T17640] bond1 (unregistering): Released all slaves [ 453.544859][T17640] bond2 (unregistering): Released all slaves [ 453.560622][T17640] bond3 (unregistering): Released all slaves [ 453.723293][T17640] bond4 (unregistering): Released all slaves [ 453.740807][T17640] bond5 (unregistering): Released all slaves [ 453.770277][T18530] tipc: Enabled bearer , priority 0 [ 453.782554][T18540] __nla_validate_parse: 7 callbacks suppressed [ 453.782574][T18540] netlink: 788 bytes leftover after parsing attributes in process `syz.0.3260'. [ 453.840117][T18544] tipc: Resetting bearer [ 453.941114][T17640] : left promiscuous mode [ 454.038512][T18550] tipc: Disabling bearer [ 454.222777][T17640] tipc: Left network mode [ 454.343024][T18430] hsr_slave_0: entered promiscuous mode [ 454.369647][T18430] hsr_slave_1: entered promiscuous mode [ 454.600384][T18566] syzkaller0: entered promiscuous mode [ 454.606699][T18566] syzkaller0: entered allmulticast mode [ 454.679784][T18571] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 454.687890][T18571] syzkaller0: Linktype set failed because interface is up [ 455.070034][T18609] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3275'. [ 455.095588][T18609] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3275'. [ 455.129263][T18609] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3275'. [ 455.171767][T17640] hsr_slave_0: left promiscuous mode [ 455.285642][T18616] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3277'. [ 455.442291][ T5864] Bluetooth: hci3: command tx timeout [ 455.569996][T18627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3276'. [ 456.521315][T18617] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3276'. [ 456.902979][T18640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3282'. [ 456.920859][T18641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3282'. [ 456.930406][T18641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3282'. [ 456.930610][T18640] netlink: 'syz.2.3282': attribute type 5 has an invalid length. [ 456.942778][T18641] netlink: 'syz.2.3282': attribute type 5 has an invalid length. [ 456.967169][T18641] netlink: 'syz.2.3282': attribute type 6 has an invalid length. [ 456.992856][T18640] netlink: 'syz.2.3282': attribute type 6 has an invalid length. [ 457.064658][T18649] tipc: Started in network mode [ 457.076732][T18649] tipc: Node identity ba6c1879a12, cluster identity 4711 [ 457.084137][T18649] tipc: Enabled bearer , priority 0 [ 457.123389][T18650] syzkaller0: entered promiscuous mode [ 457.138634][T18650] syzkaller0: entered allmulticast mode [ 457.223780][T18649] tipc: Resetting bearer [ 457.258076][T18649] tipc: Disabling bearer [ 457.296246][T17640] IPVS: stop unused estimator thread 0... [ 457.322160][T17648] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.354563][T17648] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.377526][T17644] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.417806][T17644] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.519537][ T5864] Bluetooth: hci3: command 0x0419 tx timeout [ 457.611669][T18430] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 457.916021][T18430] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 457.972027][T18430] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 458.023105][T18430] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 458.386546][T18698] netlink: 'syz.6.3293': attribute type 1 has an invalid length. [ 458.856473][T18695] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.041020][T18695] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.106315][T18713] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20000 [ 459.281828][T18695] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.466636][T18695] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.529976][T18430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.597258][ T5184] Bluetooth: hci3: command 0x0419 tx timeout [ 459.672652][T18430] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.757003][ T7705] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.764588][ T7705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.827279][T17649] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.834668][T17649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.891096][T18730] __nla_validate_parse: 6 callbacks suppressed [ 459.891119][T18730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3302'. [ 459.956161][ T7705] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.091168][ T7705] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.174190][ T7705] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.328158][ T7705] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.417408][T18740] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3304'. [ 460.449276][T18740] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3304'. [ 460.756960][T18756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3306'. [ 460.788763][T18755] geneve2: entered promiscuous mode [ 460.810267][T18755] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3306'. [ 460.821287][T18755] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3306'. [ 460.845241][T18755] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3306'. [ 460.917465][T18430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.075001][T18765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3308'. [ 461.347998][T18773] sctp: [Deprecated]: syz.5.3309 (pid 18773) Use of int in max_burst socket option deprecated. [ 461.347998][T18773] Use struct sctp_assoc_value instead [ 461.710727][T18780] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3309'. [ 461.727823][T18784] syzkaller0: entered promiscuous mode [ 461.733443][T18784] syzkaller0: entered allmulticast mode [ 461.764669][T18759] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3307'. [ 461.956966][T18430] veth0_vlan: entered promiscuous mode [ 462.013527][T18430] veth1_vlan: entered promiscuous mode [ 462.462983][T18430] veth0_macvtap: entered promiscuous mode [ 462.500670][T18430] veth1_macvtap: entered promiscuous mode [ 462.601526][T18430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.667203][T18821] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 462.714598][T18430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.745905][T17644] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.766962][T17644] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.802485][T17644] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.828901][T17644] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.998339][ T7705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.029001][ T7705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.137062][ T4554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.145745][ T4554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.619535][T18855] netlink: 'syz.7.3329': attribute type 3 has an invalid length. [ 463.640693][T18855] netlink: 'syz.7.3329': attribute type 3 has an invalid length. [ 463.786353][T18857] tipc: Enabled bearer , priority 0 [ 463.814677][T18857] syzkaller0: entered promiscuous mode [ 463.831270][T18857] syzkaller0: entered allmulticast mode [ 463.912474][T18858] veth5: entered promiscuous mode [ 464.038021][T18857] tipc: Resetting bearer [ 464.074438][T18854] tipc: Resetting bearer [ 464.122619][T18854] tipc: Disabling bearer [ 464.439667][T18873] netlink: 'syz.0.3332': attribute type 7 has an invalid length. [ 464.682110][T18875] lo speed is unknown, defaulting to 1000 [ 464.761826][T18881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 465.027549][T18875] lo speed is unknown, defaulting to 1000 [ 465.066549][T18875] lo speed is unknown, defaulting to 1000 [ 465.307907][T18898] netlink: 'syz.7.3340': attribute type 10 has an invalid length. [ 465.459493][T18898] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 466.046994][T18875] infiniband syz0: set active [ 466.052901][ T6985] lo speed is unknown, defaulting to 1000 [ 466.067569][T18875] infiniband syz0: added lo [ 466.081686][T18875] syz0: rxe_create_cq: returned err = -12 [ 466.091612][T18875] infiniband syz0: Couldn't create ib_mad CQ [ 466.098125][T18875] infiniband syz0: Couldn't open port 1 [ 466.152435][T18875] RDS/IB: syz0: added [ 466.168734][T18875] smc: adding ib device syz0 with port count 1 [ 466.174967][T18875] smc: ib device syz0 port 1 has pnetid [ 466.189598][T18922] tipc: Started in network mode [ 466.194624][T18922] tipc: Node identity 080211000001, cluster identity 4711 [ 466.202532][T18922] tipc: Enabled bearer , priority 0 [ 466.224277][ T7013] lo speed is unknown, defaulting to 1000 [ 466.230342][T18922] mac80211_hwsim hwsim54 syzkaller0: entered promiscuous mode [ 466.239565][T18922] mac80211_hwsim hwsim54 syzkaller0: entered allmulticast mode [ 466.247973][T18875] lo speed is unknown, defaulting to 1000 [ 466.294131][T18922] tipc: Resetting bearer [ 466.509366][T18927] netlink: 'syz.0.3349': attribute type 10 has an invalid length. [ 466.525914][T18925] pim6reg: entered allmulticast mode [ 466.531475][T18927] __nla_validate_parse: 14 callbacks suppressed [ 466.531496][T18927] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3349'. [ 466.549429][T18928] pim6reg: left allmulticast mode [ 466.589400][T18925] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 466.632854][T18927] !: entered promiscuous mode [ 466.638071][T18927] !: entered allmulticast mode [ 466.652914][T18927] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 466.704520][T18929] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3349'. [ 466.838592][ T5924] IPVS: starting estimator thread 0... [ 466.863099][T18875] lo speed is unknown, defaulting to 1000 [ 466.883162][T18934] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3351'. [ 466.892720][T18934] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3351'. [ 466.955287][T18933] IPVS: using max 25 ests per chain, 60000 per kthread [ 467.296102][ T5876] tipc: Node number set to 134418688 [ 467.424785][T18949] netlink: 'syz.0.3354': attribute type 10 has an invalid length. [ 467.483456][T18949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.528497][T18949] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 467.568399][T18936] lo speed is unknown, defaulting to 1000 [ 467.622896][T18949] netlink: 'syz.0.3354': attribute type 10 has an invalid length. [ 467.663593][T18949] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3354'. [ 467.713063][T18949] batadv0: entered promiscuous mode [ 467.735683][T18949] batadv0: entered allmulticast mode [ 467.753409][T18949] bond0: (slave batadv0): Releasing backup interface [ 467.787951][T18949] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 467.968425][T18959] sock: sock_set_timeout: `syz.5.3355' (pid 18959) tries to set negative timeout [ 468.115539][T18875] lo speed is unknown, defaulting to 1000 [ 468.241223][T18963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.253279][T18963] bond0: (slave rose0): Enslaving as an active interface with an up link [ 468.605640][T18875] lo speed is unknown, defaulting to 1000 [ 469.066897][T18875] lo speed is unknown, defaulting to 1000 [ 469.372690][T18875] lo speed is unknown, defaulting to 1000 [ 469.833002][T18875] lo speed is unknown, defaulting to 1000 [ 469.947202][T19002] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3366'. [ 470.567971][T19013] tipc: Enabled bearer , priority 0 [ 470.639541][T19013] tipc: Disabling bearer [ 470.912410][T19024] netlink: 'syz.6.3373': attribute type 10 has an invalid length. [ 472.074666][T19066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.156184][T19066] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3382'. [ 472.343049][T19070] mac80211_hwsim hwsim51 wlan1: entered allmulticast mode [ 472.442849][T19070] bridge_slave_0: left allmulticast mode [ 472.481637][T19070] bridge_slave_0: left promiscuous mode [ 472.503885][T19070] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.534542][T19082] netlink: 'syz.2.3387': attribute type 5 has an invalid length. [ 472.561614][T19082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3387'. [ 472.572206][T19070] bridge_slave_1: left allmulticast mode [ 472.580613][T19084] netlink: 'syz.5.3384': attribute type 10 has an invalid length. [ 472.599544][T19070] bridge_slave_1: left promiscuous mode [ 472.640303][T19070] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.675600][T19070] bond0: (slave bond_slave_0): Releasing backup interface [ 472.683234][T19088] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3388'. [ 472.704822][T19070] bond0: (slave bond_slave_1): Releasing backup interface [ 472.726439][T19070] team0: Port device team_slave_0 removed [ 472.744826][T19070] team0: Port device team_slave_1 removed [ 472.752177][T19070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.762135][T19070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.778651][T19070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.787146][T19070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.861803][T19084] mac80211_hwsim hwsim51 wlan1: left allmulticast mode [ 472.899561][T19084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.915472][T19084] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 473.145922][T19098] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3390'. [ 473.152154][T19099] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3391'. [ 473.698654][T19123] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3398'. [ 473.716230][T19128] tipc: Enabled bearer , priority 0 [ 473.723708][T19123] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 473.738288][T19123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.834811][T19128] tipc: Resetting bearer [ 473.878765][T19125] tipc: Resetting bearer [ 473.946728][T19125] tipc: Disabling bearer [ 474.209578][T19144] netlink: 'syz.7.3405': attribute type 9 has an invalid length. [ 474.290050][T19144] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3405'. [ 474.513807][T19159] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3411'. [ 474.590500][T19157] netlink: 'syz.2.3409': attribute type 1 has an invalid length. [ 474.598961][T19157] netlink: 'syz.2.3409': attribute type 5 has an invalid length. [ 474.677695][T19157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3409'. [ 474.695325][T19157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3409'. [ 474.773311][T19163] batadv_slave_1: entered promiscuous mode [ 475.264402][T19180] netlink: 'syz.6.3418': attribute type 32 has an invalid length. [ 475.391358][T19184] tipc: Enabling of bearer rejected, already enabled [ 475.859682][T19209] netlink: 'syz.6.3426': attribute type 1 has an invalid length. [ 475.951962][T19213] 8021q: adding VLAN 0 to HW filter on device bond1 [ 476.069357][ T5924] IPVS: starting estimator thread 0... [ 476.158456][T19216] IPVS: using max 24 ests per chain, 57600 per kthread [ 476.302986][T19226] Bluetooth: MGMT ver 1.23 [ 476.310964][T19224] netlink: 'syz.2.3431': attribute type 21 has an invalid length. [ 476.546525][T19209] bond1 (unregistering): Released all slaves [ 476.628286][T19229] lo speed is unknown, defaulting to 1000 [ 477.088609][T19228] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 477.101962][T19228] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 477.221878][T19250] netlink: 'syz.0.3437': attribute type 1 has an invalid length. [ 477.232560][T19250] __nla_validate_parse: 12 callbacks suppressed [ 477.232581][T19250] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3437'. [ 477.262720][T19228] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 477.286389][T19228] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 477.343547][T19228] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 477.358277][T19228] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 477.562779][T19228] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 477.570679][T19228] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 477.664400][T19228] tipc: Resetting bearer [ 478.105795][T19261] netlink: 6 bytes leftover after parsing attributes in process `syz.5.3438'. [ 478.140897][T19261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 478.224038][T19263] bond0: (slave ip_vti0): Error: Device type is different from other slaves [ 478.313757][T19275] tipc: Enabling of bearer rejected, failed to enable media [ 478.352507][T19265] lo speed is unknown, defaulting to 1000 [ 479.380157][T19279] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 479.712083][T19309] lo speed is unknown, defaulting to 1000 [ 479.739458][T19323] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3458'. [ 480.086682][T19338] IPv6: addrconf: prefix option has invalid lifetime [ 480.093831][T19338] IPv6: addrconf: prefix option has invalid lifetime [ 480.100605][T19338] IPv6: addrconf: prefix option has invalid lifetime [ 480.292427][T19338] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3462'. [ 480.336690][T19345] netlink: 212924 bytes leftover after parsing attributes in process `syz.5.3462'. [ 480.934430][T19377] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3473'. [ 481.069258][T19377] bridge_slave_1: left allmulticast mode [ 481.076574][T19377] bridge_slave_1: left promiscuous mode [ 481.082604][T19377] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.102032][T19377] bridge_slave_0: left allmulticast mode [ 481.108377][T19377] bridge_slave_0: left promiscuous mode [ 481.122308][T19377] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.804514][T19410] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3482'. [ 481.942473][T19416] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3483'. [ 482.063999][T19409] lo speed is unknown, defaulting to 1000 [ 482.218444][T19425] IPVS: length: 49 != 24 [ 482.296614][T19427] syz_tun: entered promiscuous mode [ 482.728656][T19439] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3490'. [ 483.039764][T19445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3491'. [ 483.080571][T19445] openvswitch: netlink: Flow actions attr not present in new flow. [ 483.154191][T19443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3491'. [ 483.573024][T19470] mac80211_hwsim hwsim54 syzkaller0: left promiscuous mode [ 483.704620][T19470] mac80211_hwsim hwsim54 syzkaller0: left allmulticast mode [ 483.808453][T19475] lo speed is unknown, defaulting to 1000 [ 484.165784][T19491] netlink: 'syz.6.3504': attribute type 1 has an invalid length. [ 484.217295][T19492] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3504'. [ 484.252463][T19491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 484.466464][T19504] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3506'. [ 484.710056][T19511] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3509'. [ 484.744386][T19519] netlink: 'syz.0.3512': attribute type 3 has an invalid length. [ 484.763391][T19513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3510'. [ 484.773580][T19519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3512'. [ 484.793882][T19511] bond2: entered promiscuous mode [ 484.804132][T19511] bond2: entered allmulticast mode [ 484.810203][T19511] 8021q: adding VLAN 0 to HW filter on device bond2 [ 484.828657][T19513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3510'. [ 484.842055][T19521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3512'. [ 485.704439][T19544] tipc: Enabling of bearer rejected, already enabled [ 485.727510][T19544] mac80211_hwsim hwsim54 syzkaller0: entered promiscuous mode [ 485.737260][T19544] mac80211_hwsim hwsim54 syzkaller0: entered allmulticast mode [ 486.146907][T19564] lo speed is unknown, defaulting to 1000 [ 486.222614][T19570] netlink: 'syz.6.3526': attribute type 3 has an invalid length. [ 486.271593][T19573] !: renamed from dummy0 (while UP) [ 486.469279][T19570] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.020242][T19570] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.448009][T19570] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.566715][T19612] batadv0: entered promiscuous mode [ 487.629143][T19570] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.939917][T19627] netlink: 'syz.5.3538': attribute type 1 has an invalid length. [ 488.072243][T19627] 8021q: adding VLAN 0 to HW filter on device bond3 [ 488.079468][T19636] __nla_validate_parse: 2 callbacks suppressed [ 488.079487][T19636] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3538'. [ 488.131593][T19627] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3538'. [ 488.258610][T17672] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.353893][T17644] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.473209][T17644] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.586920][T17640] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.762094][T19654] netlink: 'syz.6.3544': attribute type 1 has an invalid length. [ 488.808557][T19657] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 488.824836][T19654] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3544'. [ 489.411895][T19671] bond2: left promiscuous mode [ 489.417380][T19671] bond2: left allmulticast mode [ 489.445052][T17640] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.480252][T17640] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.510145][T17640] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.547444][T17640] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.605617][T19688] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3556'. [ 489.614799][T19688] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3556'. [ 489.634856][T19688] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3556'. [ 489.681091][T19690] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3557'. [ 489.693287][T19694] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3557'. [ 489.743071][T19688] netlink: 6040 bytes leftover after parsing attributes in process `syz.2.3556'. [ 489.891436][T19692] bond0: (slave wlan1): Releasing backup interface [ 489.952468][T19692] netlink: 'syz.5.3555': attribute type 10 has an invalid length. [ 490.010675][T19692] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 490.030255][T19711] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3560'. [ 490.202082][T19718] 8021q: VLANs not supported on ip_vti0 [ 490.238508][T19722] netlink: 'syz.0.3564': attribute type 10 has an invalid length. [ 490.423382][T19733] netlink: 'syz.2.3568': attribute type 15 has an invalid length. [ 491.082631][T19766] lo speed is unknown, defaulting to 1000 [ 492.487797][T19787] netlink: 'syz.2.3584': attribute type 1 has an invalid length. [ 492.516153][T19787] netlink: 'syz.2.3584': attribute type 1 has an invalid length. [ 493.279267][T19811] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 493.553091][T19820] lo speed is unknown, defaulting to 1000 [ 493.699442][T19823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.733687][T19823] __nla_validate_parse: 11 callbacks suppressed [ 493.733712][T19823] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3596'. [ 493.933243][T19830] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3598'. [ 493.955474][T19830] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3598'. [ 493.979869][T19830] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3598'. [ 494.012599][T19830] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3598'. [ 494.531648][T19845] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3601'. [ 494.556346][T19822] lo speed is unknown, defaulting to 1000 [ 494.947848][T19852] netlink: 'syz.2.3602': attribute type 2 has an invalid length. [ 494.956130][T19852] netlink: 'syz.2.3602': attribute type 5 has an invalid length. [ 495.127124][T19823] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 495.867759][T19872] netlink: 'syz.2.3606': attribute type 13 has an invalid length. [ 495.911933][T19873] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3607'. [ 495.928366][T19872] netlink: 'syz.2.3606': attribute type 17 has an invalid length. [ 496.463028][T19872] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 496.492025][ T7013] lo speed is unknown, defaulting to 1000 [ 496.652679][T19875] netlink: 'syz.5.3607': attribute type 1 has an invalid length. [ 496.661955][T19875] netlink: 5624 bytes leftover after parsing attributes in process `syz.5.3607'. [ 496.883507][T19874] lo speed is unknown, defaulting to 1000 [ 496.886973][T19899] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3611'. [ 496.934963][T19901] pim6reg1: entered promiscuous mode [ 496.943198][T19901] pim6reg1: entered allmulticast mode [ 497.087128][T19906] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3614'. [ 497.499576][T19921] 8021q: VLANs not supported on bond0 [ 497.630196][T19923] lo speed is unknown, defaulting to 1000 [ 497.809207][T19932] netlink: 'syz.5.3621': attribute type 21 has an invalid length. [ 497.830074][T19936] netlink: zone id is out of range [ 497.839007][T19936] netlink: zone id is out of range [ 497.844174][T19936] netlink: zone id is out of range [ 497.851299][T19936] netlink: zone id is out of range [ 497.856895][T19936] netlink: zone id is out of range [ 497.862036][T19936] netlink: zone id is out of range [ 497.877841][T19936] netlink: zone id is out of range [ 497.890275][T19932] netlink: 'syz.5.3621': attribute type 6 has an invalid length. [ 498.332808][T19943] 8021q: VLANs not supported on sit0 [ 498.351123][T19928] lo speed is unknown, defaulting to 1000 [ 498.353828][T19943] net_ratelimit: 4 callbacks suppressed [ 498.353846][T19943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.807035][T19959] netlink: 'syz.6.3626': attribute type 1 has an invalid length. [ 498.807165][T19960] __nla_validate_parse: 12 callbacks suppressed [ 498.807178][T19960] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3627'. [ 498.827900][T19959] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3626'. [ 498.859709][T19961] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3627'. [ 498.951883][T19959] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3626'. [ 499.119438][T19960] netdevsim netdevsim7: Direct firmware load for ./file0 failed with error -2 [ 499.131594][T19960] netdevsim netdevsim7: Falling back to sysfs fallback for: ./file0 [ 499.179307][T19961] batadv_slave_0: entered promiscuous mode [ 499.624087][T19958] batadv_slave_0: left promiscuous mode [ 499.719832][T19977] syzkaller1: entered promiscuous mode [ 499.734386][T19977] syzkaller1: entered allmulticast mode [ 499.933971][T19987] netlink: 'syz.7.3633': attribute type 1 has an invalid length. [ 499.967643][T19989] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3634'. [ 499.997752][T19992] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3633'. [ 500.255050][T20008] bond0: Error: Cannot enslave bond to itself. [ 500.262660][T20008] bond0: option packets_per_slave: invalid value (18446744071562067968) [ 500.272344][T20008] bond0: option packets_per_slave: allowed values 0 - 65535 [ 500.670088][T20028] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3645'. [ 500.726570][T20032] netlink: 'syz.5.3645': attribute type 1 has an invalid length. [ 500.838872][T20041] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3649'. [ 501.008716][T20051] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3651'. [ 501.021408][T20051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3651'. [ 501.247998][T20058] lo speed is unknown, defaulting to 1000 [ 501.569274][T20074] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 501.729001][T20082] syzkaller1: entered promiscuous mode [ 501.734532][T20082] syzkaller1: entered allmulticast mode [ 501.816039][T20087] netlink: 'syz.5.3661': attribute type 23 has an invalid length. [ 501.999417][T20091] lo speed is unknown, defaulting to 1000 [ 502.358828][T20113] netlink: 'syz.5.3669': attribute type 1 has an invalid length. [ 502.441187][T20113] netlink: 'syz.5.3669': attribute type 1 has an invalid length. [ 502.733723][T20129] veth5: entered allmulticast mode [ 502.868494][T20095] netlink: 'syz.6.3662': attribute type 13 has an invalid length. [ 502.889017][T20095] netlink: 'syz.6.3662': attribute type 17 has an invalid length. [ 503.202994][T20095] ip6gretap0: left allmulticast mode [ 503.307968][T20095] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.319630][T20095] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 503.504024][T20158] gtp0: entered promiscuous mode [ 503.522914][T20158] gtp0: entered allmulticast mode [ 503.896465][T20174] veth1_to_batadv: entered promiscuous mode [ 503.926813][T20178] __nla_validate_parse: 15 callbacks suppressed [ 503.926835][T20178] netlink: 277 bytes leftover after parsing attributes in process `syz.5.3685'. [ 503.962622][T20180] mac80211_hwsim hwsim54 syzkaller0: left promiscuous mode [ 503.985284][T20180] mac80211_hwsim hwsim54 syzkaller0: left allmulticast mode [ 504.004159][T20178] netlink: 277 bytes leftover after parsing attributes in process `syz.5.3685'. [ 504.481062][T20198] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3691'. [ 504.807217][T20194] netlink: 'syz.5.3689': attribute type 23 has an invalid length. [ 504.989142][T20220] ªªªªª»: renamed from veth0_to_bond (while UP) [ 505.561165][T20235] netlink: 'syz.6.3697': attribute type 10 has an invalid length. [ 505.571212][T20229] mac80211_hwsim hwsim46 wlan1: entered allmulticast mode [ 505.629074][T20232] bond0: (slave wlan1): Releasing backup interface [ 505.798597][ T5924] syz1: Port: 1 Link DOWN [ 505.849774][T20247] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3700'. [ 506.249733][T20266] dummy0: entered promiscuous mode [ 506.270162][T20266] vlan2: entered promiscuous mode [ 506.376883][T20274] netlink: 'syz.0.3707': attribute type 6 has an invalid length. [ 506.643168][T20286] netlink: 'syz.5.3710': attribute type 1 has an invalid length. [ 506.652226][T20286] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.3710'. [ 506.671000][T20286] netlink: 'syz.5.3710': attribute type 1 has an invalid length. [ 506.713883][T20286] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.3710'. [ 506.735690][T20294] netlink: 'syz.5.3710': attribute type 1 has an invalid length. [ 506.743752][T20293] netlink: 'syz.5.3710': attribute type 1 has an invalid length. [ 506.758918][T20294] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.3710'. [ 506.849574][T20293] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.3710'. [ 506.950994][T20308] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3715'. [ 507.261314][T20332] mac80211_hwsim hwsim54 syzkaller0: entered promiscuous mode [ 507.270522][T20332] mac80211_hwsim hwsim54 syzkaller0: entered allmulticast mode [ 507.304269][T20330] team0: entered promiscuous mode [ 507.347140][T20331] tipc: Enabling of bearer rejected, already enabled [ 507.368329][T20329] team0: left promiscuous mode [ 507.654986][T20347] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3726'. [ 508.470239][T20370] tipc: Invalid UDP bearer configuration [ 508.470299][T20370] tipc: Enabling of bearer rejected, failed to enable media [ 508.476544][T20346] delete_channel: no stack [ 509.264545][T20398] __nla_validate_parse: 5 callbacks suppressed [ 509.264566][T20398] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3742'. [ 509.431559][T20407] netlink: 'syz.0.3744': attribute type 1 has an invalid length. [ 509.619144][T20407] 8021q: adding VLAN 0 to HW filter on device bond2 [ 509.636008][T20420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3744'. [ 509.705239][T20411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3744'. [ 509.784038][T20409] lo speed is unknown, defaulting to 1000 [ 509.926513][T20428] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3746'. [ 509.966838][T20432] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3744'. [ 509.979383][T20428] IPVS: Error joining to the multicast group [ 510.190944][T20437] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode [ 510.879123][T20464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3756'. [ 511.085757][T20470] netlink: 'syz.6.3758': attribute type 2 has an invalid length. [ 511.719524][T20484] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3763'. [ 511.759236][T20486] netlink: 'syz.5.3764': attribute type 13 has an invalid length. [ 511.767681][T20486] netlink: 'syz.5.3764': attribute type 17 has an invalid length. [ 511.908929][T20486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.933754][T20486] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.966086][T20486] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 511.999646][T20495] netlink: 'syz.7.3766': attribute type 12 has an invalid length. [ 512.016535][T20489] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3765'. [ 512.225930][T20501] nbd0: detected capacity change from 0 to 549764202496 [ 512.256415][ T5184] block nbd0: Receive control failed (result -32) [ 512.403604][T20507] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3772'. [ 512.448009][T20508] 8021q: VLANs not supported on wg2 [ 512.450053][T20514] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3774'. [ 512.475055][T20513] syzkaller0: refused to change device tx_queue_len [ 513.303822][T20554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.515930][T20563] netlink: 'syz.0.3787': attribute type 1 has an invalid length. [ 513.571839][T20563] netlink: 'syz.0.3787': attribute type 2 has an invalid length. [ 514.265761][T20600] __nla_validate_parse: 3 callbacks suppressed [ 514.265784][T20600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3797'. [ 514.322498][T20600] : entered promiscuous mode [ 514.330440][T20602] netlink: 'syz.5.3798': attribute type 9 has an invalid length. [ 514.335056][T20605] netlink: 'syz.0.3799': attribute type 3 has an invalid length. [ 514.359366][T20605] syz_tun: entered allmulticast mode [ 514.365291][T20602] netlink: 'syz.5.3798': attribute type 6 has an invalid length. [ 514.391225][T20605] siw: device registration error -23 [ 514.452289][T20605] erspan0: left allmulticast mode [ 514.549509][T20605] !: left promiscuous mode [ 514.554094][T20605] !: left allmulticast mode [ 514.631056][T20605] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 514.711594][T20603] syz_tun: left allmulticast mode [ 514.900444][T20619] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3804'. [ 515.445608][T20644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3807'. [ 515.693314][T20652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3807'. [ 516.505732][T20694] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3820'. [ 516.959870][T20719] syzkaller1: entered promiscuous mode [ 516.971855][T20719] syzkaller1: entered allmulticast mode [ 517.070707][T20725] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3828'. [ 517.219090][T20730] tipc: Enabling of bearer rejected, already enabled [ 517.350546][T20737] netlink: 'syz.7.3830': attribute type 10 has an invalid length. [ 517.396379][T20737] netlink: 1041 bytes leftover after parsing attributes in process `syz.7.3830'. [ 517.502914][T20742] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3834'. [ 517.820267][T20761] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3840'. [ 518.124461][T20778] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3845'. [ 518.697831][T20800] netlink: 'syz.7.3851': attribute type 15 has an invalid length. [ 518.777996][T20801] veth1: entered promiscuous mode [ 518.812579][T20801] netlink: 'syz.2.3850': attribute type 1 has an invalid length. [ 518.834858][T20801] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 519.209189][T20824] netlink: 'syz.6.3856': attribute type 1 has an invalid length. [ 519.210463][T20822] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 519.228984][T20820] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 519.259807][T20824] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 519.335419][T17648] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 519.374783][T20835] veth0: entered promiscuous mode [ 519.392033][T20835] __nla_validate_parse: 7 callbacks suppressed [ 519.392054][T20835] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3860'. [ 519.412703][T20844] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3859'. [ 519.711602][T20866] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 520.242730][T20876] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3868'. [ 520.271440][T20876] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3868'. [ 520.379704][T20879] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 520.406942][T20875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3867'. [ 520.641580][T20894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3872'. [ 520.731495][T20903] nbd: nbd6 already in use [ 520.751288][T20903] block nbd6: NBD_DISCONNECT [ 520.780194][T20903] block nbd6: Send disconnect failed -32 [ 520.788054][T20903] block nbd6: shutting down sockets [ 520.819258][T20908] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3879'. [ 520.861036][T20907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3879'. [ 520.893519][T20907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3879'. [ 520.935410][T20908] team0: Mode changed to "broadcast" [ 521.046834][T17668] vlan0: left promiscuous mode [ 521.051674][T17668] veth1: left promiscuous mode [ 521.062556][T17668] bridge7: port 2(vlan0) entered disabled state [ 521.084671][T17668] veth0_to_bond: left allmulticast mode [ 521.093303][T17668] veth0_to_bond: left promiscuous mode [ 521.099543][T17668] bridge7: port 1(veth0_to_bond) entered disabled state [ 521.189215][T20932] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:20003 [ 521.400637][T20937] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3884'. [ 521.529480][T17668] bond3 (unregistering): (slave gretap3): Releasing active interface [ 521.631846][T17668] team0: Port device geneve0 removed [ 521.662464][T17668] tipc: Disabling bearer [ 522.211584][T17668] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 522.222009][T17668] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 522.229697][T17668] bond0 (unregistering): Released all slaves [ 522.383185][T17668] bond1 (unregistering): (slave 0!): Releasing active interface [ 522.393425][T17668] bond1 (unregistering): Released all slaves [ 522.410654][T17668] bond2 (unregistering): Released all slaves [ 522.552926][T17668] bond3 (unregistering): Released all slaves [ 522.821033][T20950] tipc: Enabled bearer , priority 0 [ 522.832363][T20951] syzkaller0: entered promiscuous mode [ 522.842455][T20951] syzkaller0: entered allmulticast mode [ 522.900189][T20950] tipc: Resetting bearer [ 523.090889][T20962] veth0: entered promiscuous mode [ 523.186353][T20962] veth0 (unregistering): left promiscuous mode [ 523.370044][T20975] netlink: 'syz.6.3898': attribute type 15 has an invalid length. [ 523.386249][T20976] netlink: 'syz.5.3899': attribute type 1 has an invalid length. [ 523.394254][T20976] netlink: 'syz.5.3899': attribute type 1 has an invalid length. [ 523.885431][ T5876] tipc: Node number set to 457971833 [ 524.107316][T21011] lo speed is unknown, defaulting to 1000 [ 524.350191][T21019] tipc: Enabled bearer , priority 0 [ 524.364738][T21017] syzkaller0: entered promiscuous mode [ 524.396062][T21017] syzkaller0: entered allmulticast mode [ 524.403386][T17668] _ÐZ`Ô€@ÿÿ: left promiscuous mode [ 524.757002][T21013] netlink: 'syz.5.3911': attribute type 11 has an invalid length. [ 524.916072][T21018] tipc: Resetting bearer [ 525.011199][T21018] tipc: Disabling bearer [ 525.036654][T17668] þ`Ì: left promiscuous mode [ 525.141922][T21029] pim6reg1: entered promiscuous mode [ 525.165761][T21029] pim6reg1: entered allmulticast mode [ 525.261193][T17668] tipc: Left network mode [ 525.279364][T21050] netlink: 'syz.0.3919': attribute type 1 has an invalid length. [ 525.383483][T21050] 8021q: adding VLAN 0 to HW filter on device bond3 [ 525.912944][T21080] netlink: 'syz.2.3924': attribute type 4 has an invalid length. [ 526.041928][T21070] syzkaller1: entered promiscuous mode [ 526.051158][T21070] syzkaller1: entered allmulticast mode [ 526.323995][T21087] rdma_rxe: rxe_newlink: failed to add macvlan1 [ 526.522630][T21095] netlink: 'syz.2.3931': attribute type 1 has an invalid length. [ 526.583153][T21098] netlink: 'syz.2.3931': attribute type 16 has an invalid length. [ 526.592285][T21098] netlink: 'syz.2.3931': attribute type 17 has an invalid length. [ 527.181572][T21107] netlink: 'syz.0.3935': attribute type 13 has an invalid length. [ 528.743561][T21095] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 528.919504][T21112] __nla_validate_parse: 8 callbacks suppressed [ 528.919526][T21112] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3936'. [ 529.086657][T21121] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3939'. [ 529.097169][T21107] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 529.158393][T21104] lo speed is unknown, defaulting to 1000 [ 529.198446][T21121] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3939'. [ 529.646434][T21145] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3943'. [ 529.708589][T21145] pim6reg: entered allmulticast mode [ 529.767388][T21145] pim6reg: left allmulticast mode [ 529.952398][T21140] lo speed is unknown, defaulting to 1000 [ 530.300060][T21167] validate_nla: 1 callbacks suppressed [ 530.300081][T21167] netlink: 'syz.6.3944': attribute type 1 has an invalid length. [ 530.528295][T21183] netlink: 'syz.2.3954': attribute type 1 has an invalid length. [ 530.634094][T21191] netlink: 'syz.5.3956': attribute type 5 has an invalid length. [ 530.727596][T21189] netlink: 9280 bytes leftover after parsing attributes in process `syz.5.3956'. [ 531.259423][T17668] hsr_slave_0: left promiscuous mode [ 531.279116][T17668] hsr_slave_1: left promiscuous mode [ 531.403431][T17668] pim6reg9 (unregistering): left allmulticast mode [ 531.437726][T21223] netlink: 'syz.2.3961': attribute type 10 has an invalid length. [ 531.502184][T21224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3961'. [ 531.564862][T21225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3961'. [ 531.593740][T17668] team0 (unregistering): Port device macvlan0 removed [ 532.453833][T21215] bridge_slave_0: left allmulticast mode [ 532.477657][T21215] bridge_slave_0: left promiscuous mode [ 532.483600][T21215] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.559692][T21215] bridge_slave_1: left allmulticast mode [ 532.565846][T21215] bridge_slave_1: left promiscuous mode [ 532.572137][T21215] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.633873][T21215] bond0: (slave bond_slave_0): Releasing backup interface [ 532.661043][T21215] bond0: (slave bond_slave_1): Releasing backup interface [ 532.683320][T21215] team0: Port device team_slave_0 removed [ 532.697563][T21215] team0: Port device team_slave_1 removed [ 532.704400][T21215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.712738][T21215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.721641][T21215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.729587][T21215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.748065][T21215] bond1: (slave ip6gretap1): Releasing active interface [ 532.755596][T21215] bond1: (slave ip6gretap1): the permanent HWaddr of slave - c6:ff:c4:af:9a:88 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 532.782059][T21215] bond1: (slave veth3): Releasing active interface [ 532.985756][T21230] lo speed is unknown, defaulting to 1000 [ 532.986725][T21232] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3966'. [ 533.043643][T21232] netlink: 488 bytes leftover after parsing attributes in process `syz.2.3966'. [ 533.059916][T21232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3966'. [ 533.080106][T21234] netlink: 'syz.5.3967': attribute type 3 has an invalid length. [ 533.145817][T21234] netlink: 'syz.5.3967': attribute type 3 has an invalid length. [ 533.184152][T21236] netlink: 'syz.5.3967': attribute type 9 has an invalid length. [ 533.197404][T17668] IPVS: stop unused estimator thread 0... [ 534.224552][T21265] IPv6: sit1: Disabled Multicast RS [ 534.842412][T21292] __nla_validate_parse: 1 callbacks suppressed [ 534.842432][T21292] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3985'. [ 535.250578][T21314] lo speed is unknown, defaulting to 1000 [ 535.296279][T21316] netlink: 'syz.0.3991': attribute type 1 has an invalid length. [ 535.345757][T21307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 535.398188][T21319] batadv_slave_0: entered promiscuous mode [ 535.475500][T21321] 8021q: adding VLAN 0 to HW filter on device bond4 [ 535.910557][T21335] bond0: Master is either lo or non-ether device [ 536.328693][T21354] netlink: 'syz.2.4001': attribute type 1 has an invalid length. [ 536.380217][T21354] netlink: 'syz.2.4001': attribute type 1 has an invalid length. [ 536.961077][T21383] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4010'. [ 537.036753][T21396] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4013'. [ 537.612646][T21432] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4024'. [ 537.939489][T21446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4028'. [ 538.383034][T21464] netlink: 'syz.0.4035': attribute type 1 has an invalid length. [ 538.396552][T21464] netlink: 'syz.0.4035': attribute type 2 has an invalid length. [ 538.843507][T21479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4038'. [ 539.722248][T21532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.063362][T21536] netlink: 'syz.0.4051': attribute type 10 has an invalid length. [ 540.071397][T21536] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4051'. [ 540.087730][T21536] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 540.793653][T21560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4056'. [ 541.054876][T21568] lo speed is unknown, defaulting to 1000 [ 541.398757][T21586] netlink: set zone limit has 4 unknown bytes [ 542.372948][T21601] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4067'. [ 542.635246][T21589] lo speed is unknown, defaulting to 1000 [ 544.669685][T21631] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4074'. [ 544.840781][T21635] team0: entered promiscuous mode [ 544.964537][T21639] smc: net device bond0 applied user defined pnetid SYZ2 [ 544.977677][T21638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4076'. [ 544.987742][T21638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4076'. [ 545.010023][T21639] netlink: 14 bytes leftover after parsing attributes in process `syz.7.4077'. [ 545.120547][T21639] smc: removing net device bond0 with user defined pnetid SYZ2 [ 545.150080][T21639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.176018][T21639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.218222][T21639] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 545.228276][T21639] bond0 (unregistering): Released all slaves [ 545.563315][T21662] tipc: Failed to remove unknown binding: 66,1,1/903595897:2258903604/2258903606 [ 545.597347][T21662] tipc: Failed to remove unknown binding: 66,1,1/903595897:2258903604/2258903606 [ 545.803764][T21673] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4089'. [ 545.890633][T21673] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4089'. [ 545.927275][T21678] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4087'. [ 545.941452][T21673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 546.044665][T21686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4090'. [ 546.530375][T21707] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 546.588188][T21707] netlink: 'syz.2.4095': attribute type 5 has an invalid length. [ 546.648872][T21707] netlink: 'syz.2.4095': attribute type 12 has an invalid length. [ 546.905668][T21719] netlink: 'syz.5.4097': attribute type 1 has an invalid length. [ 547.023650][T21725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4097'. [ 547.153958][T21719] bond5: (slave gretap1): making interface the new active one [ 547.167476][T21719] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 547.308674][T21733] netlink: 'syz.0.4102': attribute type 1 has an invalid length. [ 547.332662][T21733] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4102'. [ 547.348778][T21733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4102'. [ 547.358900][T21735] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4103'. [ 547.512902][T21745] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 547.523692][T21745] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4107'. [ 547.553622][T21745] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4107'. [ 548.314341][T21781] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 549.157225][T21817] lo speed is unknown, defaulting to 1000 [ 549.326095][T21823] syzkaller1: entered promiscuous mode [ 549.363226][T21823] syzkaller1: entered allmulticast mode [ 549.764979][T21839] geneve2: entered promiscuous mode [ 549.783236][T21842] smc: net device bond0 applied user defined pnetid SYZ2 [ 550.159680][T21842] smc: removing net device bond0 with user defined pnetid SYZ2 [ 550.168014][T21842] bond0 (unregistering): Released all slaves [ 550.582531][T21862] netlink: 'syz.0.4143': attribute type 23 has an invalid length. [ 550.682777][T21865] syzkaller1: entered promiscuous mode [ 550.688835][T21865] syzkaller1: entered allmulticast mode [ 550.907451][ T4554] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.929315][ T4554] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.948856][ T4554] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.976377][ T4554] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.338730][T21895] __nla_validate_parse: 6 callbacks suppressed [ 551.338751][T21895] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4150'. [ 551.505582][T21900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4152'. [ 551.522869][T21904] tipc: Started in network mode [ 551.535487][T21904] tipc: Node identity e20fc40107d9, cluster identity 4711 [ 551.549255][T21904] tipc: Enabled bearer , priority 0 [ 551.620186][T21904] tipc: Resetting bearer [ 551.750445][T21904] tipc: Disabling bearer [ 551.930997][T21928] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4160'. [ 551.932939][T21927] netlink: 'syz.2.4157': attribute type 23 has an invalid length. [ 552.022533][T21928] sctp: [Deprecated]: syz.7.4160 (pid 21928) Use of struct sctp_assoc_value in delayed_ack socket option. [ 552.022533][T21928] Use struct sctp_sack_info instead [ 552.075881][T21942] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4160'. [ 552.085545][T21942] netlink: 15 bytes leftover after parsing attributes in process `syz.7.4160'. [ 552.980321][T21975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4167'. [ 553.168621][T21979] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4170'. [ 554.121282][ T13] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.185631][ T13] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.205282][ T13] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.213875][ T13] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.360142][T21992] netlink: 'syz.6.4173': attribute type 6 has an invalid length. [ 554.363506][T21990] netlink: 'syz.0.4174': attribute type 1 has an invalid length. [ 554.384179][T21996] netlink: 'syz.7.4175': attribute type 5 has an invalid length. [ 554.442651][T21990] 8021q: adding VLAN 0 to HW filter on device bond4 [ 554.594306][T22002] 8021q: adding VLAN 0 to HW filter on device bond4 [ 554.624913][T22002] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 554.663385][T22002] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 554.784126][T21990] bond4: (slave bridge3): Enslaving as an active interface with a down link [ 554.793744][T22012] nbd: must specify an index to disconnect [ 555.014814][T22018] tipc: Enabling of bearer rejected, already enabled [ 555.147658][T22024] syzkaller1: entered promiscuous mode [ 555.153492][T22024] syzkaller1: entered allmulticast mode [ 555.190782][T22024] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4180'. [ 555.478629][T22024] syz_tun: entered promiscuous mode [ 555.497943][T22024] syz_tun: left promiscuous mode [ 555.699273][T22043] netlink: 'syz.5.4184': attribute type 10 has an invalid length. [ 555.717949][T22043] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4184'. [ 555.776727][T22043] team0: Port device geneve0 added [ 555.805790][T22046] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4187'. [ 555.814850][T22046] netlink: 'syz.7.4187': attribute type 18 has an invalid length. [ 555.823160][T17642] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.843693][T22035] syzkaller1: entered promiscuous mode [ 555.852251][T22035] syzkaller1: entered allmulticast mode [ 555.888373][T17642] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.906513][T17642] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.018238][T22035] batadv_slave_0: left promiscuous mode [ 556.074062][T22035] tipc: Resetting bearer [ 556.100925][T22035] syzkaller0: left promiscuous mode [ 556.116971][T22035] syzkaller0: left allmulticast mode [ 556.159726][T22035] syzkaller1: left promiscuous mode [ 556.175551][T22035] syzkaller1: left allmulticast mode [ 556.206274][T17642] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.225398][T17642] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.234414][T17642] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.303346][T17642] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.338878][T17642] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.351898][T17642] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.381516][T17642] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.444238][T22067] __nla_validate_parse: 2 callbacks suppressed [ 556.444267][T22067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4192'. [ 556.532810][T22069] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4193'. [ 556.566842][T22073] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4195'. [ 556.609652][T22071] netlink: 'syz.0.4194': attribute type 3 has an invalid length. [ 556.748930][T22088] sctp: [Deprecated]: syz.2.4198 (pid 22088) Use of struct sctp_assoc_value in delayed_ack socket option. [ 556.748930][T22088] Use struct sctp_sack_info instead [ 556.804495][T22088] netlink: 'syz.2.4198': attribute type 13 has an invalid length. [ 556.830169][T22088] netlink: 'syz.2.4198': attribute type 17 has an invalid length. [ 556.858758][T22095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4199'. [ 556.866100][T22088] team0: left promiscuous mode [ 556.874589][T22088] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.891115][T22088] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 556.923788][T22095] xfrm1: entered promiscuous mode [ 556.931070][T22095] xfrm1: entered allmulticast mode [ 557.023932][T22102] netlink: 'syz.0.4203': attribute type 1 has an invalid length. [ 557.118599][T22102] bond5: (slave veth7): Enslaving as an active interface with a down link [ 557.138489][T22102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4203'. [ 557.151092][T22102] 8021q: adding VLAN 0 to HW filter on device bond5 [ 557.399419][T22118] lo speed is unknown, defaulting to 1000 [ 557.498569][T22120] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 557.555873][T22127] syzkaller0: entered promiscuous mode [ 557.576962][T22127] syzkaller0: entered allmulticast mode [ 557.903702][T22131] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4212'. [ 558.060991][T22137] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4214'. [ 558.197575][T22139] ip6tnl1: entered promiscuous mode [ 558.213431][T22139] ip6tnl1: entered allmulticast mode [ 558.619245][T22164] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4220'. [ 558.634249][T22164] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4220'. [ 558.878919][T22170] IPv6: sit1: Disabled Multicast RS [ 559.569367][T22196] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4231'. [ 560.412779][T22246] tipc: Enabling of bearer rejected, failed to enable media [ 560.800856][T22270] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 560.861788][T22269] lo speed is unknown, defaulting to 1000 [ 560.980422][T22281] netlink: 'syz.7.4252': attribute type 2 has an invalid length. [ 561.007558][T22281] k›*·]‘: entered promiscuous mode [ 561.103020][T22281] syz_tun: left promiscuous mode [ 561.188310][T22281] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 561.261226][T22290] netlink: 'syz.5.4255': attribute type 1 has an invalid length. [ 561.301721][T22292] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 561.339080][T22292] gretap1: entered promiscuous mode [ 561.354728][T22292] gretap1: entered allmulticast mode [ 561.580923][T22290] 8021q: adding VLAN 0 to HW filter on device bond6 [ 562.492757][T22326] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 562.735716][T22336] netlink: 'syz.7.4263': attribute type 4 has an invalid length. [ 563.326021][T22353] syzkaller1: entered allmulticast mode [ 563.348434][T22357] syzkaller1: left allmulticast mode [ 563.596284][T22366] __nla_validate_parse: 13 callbacks suppressed [ 563.596309][T22366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4272'. [ 563.635556][T22366] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4272'. [ 563.663864][T22366] netlink: 'syz.5.4272': attribute type 7 has an invalid length. [ 563.721569][T22371] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4274'. [ 564.464538][T22400] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.4284'. [ 564.491265][T22402] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4285'. [ 564.501094][T22402] 8021q: VLANs not supported on sit0 [ 565.043765][T22425] netlink: 65051 bytes leftover after parsing attributes in process `syz.5.4292'. [ 565.220426][T22435] netlink: 'syz.6.4294': attribute type 1 has an invalid length. [ 565.257364][T22434] netlink: 'syz.6.4294': attribute type 1 has an invalid length. [ 565.268090][T22434] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4294'. [ 565.686981][T22447] netlink: 'syz.2.4298': attribute type 9 has an invalid length. [ 565.710002][T22447] sctp: [Deprecated]: syz.2.4298 (pid 22447) Use of int in max_burst socket option. [ 565.710002][T22447] Use struct sctp_assoc_value instead [ 565.753826][T22449] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4299'. [ 565.961489][T22453] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 565.974163][T22453] Bluetooth: MGMT ver 1.23 [ 566.044562][T22456] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4302'. [ 566.067324][T22457] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4303'. [ 566.319516][T22469] pim6reg1: entered promiscuous mode [ 566.330338][T22469] pim6reg1: entered allmulticast mode [ 566.757085][T22484] team0: Port device geneve0 removed [ 566.778330][T22484] bond0: (slave wlan1): Releasing backup interface [ 566.799560][T22484] bond5: (slave gretap1): Releasing active interface [ 567.919159][T22522] lo speed is unknown, defaulting to 1000 [ 567.941521][T22517] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 568.086064][T22528] netlink: 'syz.7.4322': attribute type 4 has an invalid length. [ 568.991985][T22571] __nla_validate_parse: 7 callbacks suppressed [ 568.992006][T22571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4330'. [ 569.259472][T22529] lo speed is unknown, defaulting to 1000 [ 569.380343][T22582] tipc: Enabling of bearer rejected, failed to enable media [ 569.399930][T22581] netlink: 'syz.6.4332': attribute type 29 has an invalid length. [ 569.408713][T22581] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4332'. [ 569.549802][T22586] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4334'. [ 569.719804][T22586] syzkaller0: entered promiscuous mode [ 569.729177][T22586] syzkaller0: entered allmulticast mode [ 571.803626][T22534] lo speed is unknown, defaulting to 1000 [ 571.946725][T22608] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4339'. [ 571.974166][T22607] netlink: 'syz.7.4338': attribute type 1 has an invalid length. [ 571.991686][T22608] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4339'. [ 571.995622][T22607] netlink: 'syz.7.4338': attribute type 2 has an invalid length. [ 572.010705][T22607] netlink: 'syz.7.4338': attribute type 1 has an invalid length. [ 572.018990][T22607] netlink: 'syz.7.4338': attribute type 2 has an invalid length. [ 572.033737][T22607] netlink: 'syz.7.4338': attribute type 1 has an invalid length. [ 572.050053][T22607] netlink: 'syz.7.4338': attribute type 1 has an invalid length. [ 572.067061][T22610] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4340'. [ 572.189169][T22614] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4342'. [ 572.454349][T22622] netlink: 'syz.7.4344': attribute type 10 has an invalid length. [ 572.583892][T22624] netlink: 216 bytes leftover after parsing attributes in process `syz.0.4345'. [ 572.618361][T22624] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4345'. [ 572.660737][T22624] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4345'. [ 573.560138][T22652] lo speed is unknown, defaulting to 1000 [ 573.566562][T22662] netlink: 'syz.7.4352': attribute type 12 has an invalid length. [ 573.924973][ T6998] IPVS: starting estimator thread 0... [ 574.015666][T22669] IPVS: using max 23 ests per chain, 55200 per kthread [ 575.963455][T22665] lo speed is unknown, defaulting to 1000 [ 576.034999][T22675] __nla_validate_parse: 2 callbacks suppressed [ 576.035019][T22675] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4356'. [ 576.187539][T22675] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4356'. [ 576.224265][T22678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4357'. [ 576.334232][T22682] netlink: zone id is out of range [ 576.369062][T22682] netlink: zone id is out of range [ 576.374260][T22682] netlink: zone id is out of range [ 576.397517][T22682] netlink: zone id is out of range [ 576.403009][T22682] netlink: zone id is out of range [ 576.415693][T22682] netlink: zone id is out of range [ 576.435385][T22682] netlink: zone id is out of range [ 576.441889][T22682] netlink: zone id is out of range [ 576.458877][T22682] netlink: del zone limit has 8 unknown bytes [ 576.786781][T22693] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4360'. [ 577.081208][T22705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4364'. [ 577.101005][T22705] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4364'. [ 577.151607][T22700] delete_channel: no stack [ 577.168445][T22704] netlink: 'syz.5.4365': attribute type 2 has an invalid length. [ 577.188793][T22704] netlink: 'syz.5.4365': attribute type 8 has an invalid length. [ 577.205159][T22704] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4365'. [ 577.233824][T22701] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4363'. [ 577.305919][T22704] tipc: Enabling of bearer rejected, already enabled [ 577.403531][T22708] netlink: 'syz.2.4363': attribute type 1 has an invalid length. [ 577.484986][T22708] netlink: 'syz.2.4363': attribute type 1 has an invalid length. [ 577.576460][T22708] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4363'. [ 577.704195][T22721] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4370'. [ 578.292352][T22743] netlink: 'syz.5.4375': attribute type 4 has an invalid length. [ 578.354261][T22739] veth1: left promiscuous mode [ 578.546952][T22739] veth3: left promiscuous mode [ 578.572678][T22739] gretap1: left promiscuous mode [ 578.581884][T22739] gretap1: left allmulticast mode [ 578.594390][ T7017] lo speed is unknown, defaulting to 1000 [ 578.600376][ T7017] syz0: Port: 1 Link DOWN [ 578.695396][T17648] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.720461][T17648] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.750433][ T7017] lo speed is unknown, defaulting to 1000 [ 578.802588][T17648] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.829117][T17648] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.845814][T22749] lo speed is unknown, defaulting to 1000 [ 579.349194][T22778] netlink: 'syz.5.4383': attribute type 1 has an invalid length. [ 579.551040][T22778] 8021q: adding VLAN 0 to HW filter on device bond7 [ 579.808576][T22793] netlink: 'syz.7.4385': attribute type 1 has an invalid length. [ 579.889572][T22793] smc: adding net device bond0 with user defined pnetid SYZ2 [ 579.900715][T22793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.286830][T22805] lo speed is unknown, defaulting to 1000 [ 581.262441][T22816] lo speed is unknown, defaulting to 1000 [ 581.345436][ T6998] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 581.353364][T22854] netlink: 'syz.0.4402': attribute type 1 has an invalid length. [ 581.363174][T22854] __nla_validate_parse: 90 callbacks suppressed [ 581.363195][T22854] netlink: 208 bytes leftover after parsing attributes in process `syz.0.4402'. [ 581.425328][ T6998] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 581.534981][ T8615] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 581.833764][T22861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 582.583093][T17648] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 582.606163][T17648] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 583.186848][T22901] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4416'. [ 583.249853][T22901] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4416'. [ 583.356020][ T6989] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 583.586387][T22911] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4420'. [ 583.983197][T22935] netlink: 'syz.6.4427': attribute type 1 has an invalid length. [ 584.103841][T22935] 8021q: adding VLAN 0 to HW filter on device bond2 [ 584.226420][T22941] veth7: entered promiscuous mode [ 584.279338][T22941] bond2: (slave veth7): Enslaving as an active interface with a down link [ 584.324791][T22935] erspan0: entered allmulticast mode [ 584.378270][T22935] bond2: (slave erspan0): making interface the new active one [ 584.400140][T22952] netlink: 'syz.7.4430': attribute type 1 has an invalid length. [ 584.417389][T22935] erspan0: entered promiscuous mode [ 584.429276][T22952] netlink: 228 bytes leftover after parsing attributes in process `syz.7.4430'. [ 584.433175][T22935] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 584.608353][T22964] netlink: 'syz.7.4434': attribute type 6 has an invalid length. [ 584.629477][T22964] netlink: 'syz.7.4434': attribute type 7 has an invalid length. [ 584.647319][T22964] netlink: 'syz.7.4434': attribute type 8 has an invalid length. [ 584.666525][T22964] netlink: 'syz.7.4434': attribute type 15 has an invalid length. [ 584.854783][T22972] netlink: 'syz.7.4435': attribute type 1 has an invalid length. [ 584.866617][T22972] netlink: 236 bytes leftover after parsing attributes in process `syz.7.4435'. [ 585.028485][T22978] netlink: 'syz.5.4438': attribute type 1 has an invalid length. [ 585.067727][T22978] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4438'. [ 585.085949][T22983] sctp: [Deprecated]: syz.2.4439 (pid 22983) Use of struct sctp_assoc_value in delayed_ack socket option. [ 585.085949][T22983] Use struct sctp_sack_info instead [ 585.110695][T22979] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4438'. [ 585.122702][T22986] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4441'. [ 585.142296][T22983] sctp: [Deprecated]: syz.2.4439 (pid 22983) Use of struct sctp_assoc_value in delayed_ack socket option. [ 585.142296][T22983] Use struct sctp_sack_info instead [ 585.159315][T22986] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4441'. [ 585.162610][T22979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.199063][T22986] netlink: 'syz.7.4441': attribute type 12 has an invalid length. [ 585.241440][T22986] netlink: 'syz.7.4441': attribute type 11 has an invalid length. [ 585.319697][ T4554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.332053][T22996] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 585.354477][ T4554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.572139][T23011] netlink: 'syz.6.4445': attribute type 31 has an invalid length. [ 586.109670][T23039] batadv1: entered promiscuous mode [ 586.117233][T23039] batadv1: entered allmulticast mode [ 586.412946][T23056] __nla_validate_parse: 5 callbacks suppressed [ 586.412967][T23056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4461'. [ 586.424262][T23049] lo speed is unknown, defaulting to 1000 [ 586.504750][T23052] veth0_to_bridge: entered allmulticast mode [ 586.561222][T23047] gretap0: refused to change device tx_queue_len [ 586.580428][T23047] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 586.897897][T23071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4465'. [ 587.036565][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 587.052322][T23076] IPv6: Can't replace route, no match found [ 587.465633][ T6987] IPVS: starting estimator thread 0... [ 587.559791][T23096] IPVS: using max 23 ests per chain, 55200 per kthread [ 587.591472][T23090] lo speed is unknown, defaulting to 1000 [ 587.943258][T23108] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4475'. [ 587.974503][T23108] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4475'. [ 588.063730][T23108] syz0: rxe_newlink: already configured on lo [ 588.287869][T23108] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.323965][T23108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 588.434702][ T6984] lo speed is unknown, defaulting to 1000 [ 588.453210][ T6984] syz0: Port: 1 Link ACTIVE [ 588.467981][ T7012] lo speed is unknown, defaulting to 1000 [ 588.889780][T23134] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 588.893263][T23136] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4483'. [ 588.913967][T23138] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 589.083832][T23149] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4486'. [ 589.123268][T23147] netlink: 1 bytes leftover after parsing attributes in process `syz.5.4485'. [ 589.309084][T23160] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4488'. [ 589.342624][T23160] tipc: Invalid UDP bearer configuration [ 589.342694][T23160] tipc: Enabling of bearer rejected, failed to enable media [ 589.520323][T23155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4488'. [ 590.043150][T23180] syzkaller1: entered promiscuous mode [ 590.053842][T23180] syzkaller1: entered allmulticast mode [ 590.203313][T23187] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4494'. [ 591.568050][T23235] validate_nla: 5 callbacks suppressed [ 591.568073][T23235] netlink: 'syz.6.4499': attribute type 11 has an invalid length. [ 591.721102][T23241] __nla_validate_parse: 2 callbacks suppressed [ 591.721124][T23241] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4499'. [ 591.872923][T23243] tipc: Enabled bearer , priority 0 [ 591.884488][T23243] syzkaller0: entered promiscuous mode [ 591.895533][T23246] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4503'. [ 591.905012][T23246] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4503'. [ 591.925317][T23243] syzkaller0: entered allmulticast mode [ 591.955554][T23246] rdma_rxe: rxe_newlink: failed to add lo [ 591.964126][T23243] syzkaller0: mtu less than device minimum [ 591.987176][T23242] tipc: Resetting bearer [ 592.039339][T23242] tipc: Disabling bearer [ 592.104173][T23246] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 592.416287][T23262] syz_tun: entered allmulticast mode [ 592.451309][T23261] dvmrp8: entered allmulticast mode [ 592.566659][T23269] syz_tun: left allmulticast mode [ 592.571916][T23269] dvmrp8: left allmulticast mode [ 593.028450][T23278] lo speed is unknown, defaulting to 1000 [ 593.199556][T23294] nbd: must specify an index to disconnect [ 593.230205][T23294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4517'. [ 593.695509][T23308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4520'. [ 593.718478][T23308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4520'. [ 593.748135][T23308] netlink: 'syz.0.4520': attribute type 12 has an invalid length. [ 593.786676][T23308] netlink: 'syz.0.4520': attribute type 11 has an invalid length. [ 593.857736][T23308] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4520'. [ 593.903112][T23308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4520'. [ 594.003047][T23317] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4522'. [ 594.173047][T23322] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 594.190915][T23322] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4523'. [ 594.695825][ T4554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.724901][ T4554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.175911][T23353] lo speed is unknown, defaulting to 1000 [ 595.196608][ T4554] wlan1: Trigger new scan to find an IBSS to join [ 595.349945][T23333] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 595.422212][T23366] netlink: 'syz.6.4537': attribute type 10 has an invalid length. [ 595.451755][T23366] mac80211_hwsim hwsim46 wlan1: left allmulticast mode [ 595.476843][T23366] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 595.700366][T17668] erspan0: left promiscuous mode [ 595.902076][T23377] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 595.920501][T23378] netlink: 'syz.7.4540': attribute type 4 has an invalid length. [ 595.950888][T23377] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 596.414947][T23395] lo speed is unknown, defaulting to 1000 [ 596.475372][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 596.593706][T23408] netlink: 'syz.2.4549': attribute type 10 has an invalid length. [ 596.810585][T23417] __nla_validate_parse: 4 callbacks suppressed [ 596.810606][T23417] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4550'. [ 596.857773][T23419] netlink: 'syz.2.4552': attribute type 3 has an invalid length. [ 596.859200][T23417] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4550'. [ 596.897660][T23417] netlink: 'syz.7.4550': attribute type 4 has an invalid length. [ 596.915603][T23420] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4550'. [ 597.713577][T23440] tipc: Enabled bearer , priority 0 [ 597.980302][T23440] syzkaller0: entered promiscuous mode [ 598.001211][T23440] syzkaller0: entered allmulticast mode [ 598.016650][T23440] tipc: Resetting bearer [ 598.114326][T23439] tipc: Resetting bearer [ 598.322571][T23454] netlink: 'syz.6.4559': attribute type 1 has an invalid length. [ 598.674278][T23464] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4561'. [ 598.835788][ T6987] tipc: Node number set to 1379036040 [ 600.604124][T23439] tipc: Disabling bearer [ 600.623541][T23458] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4561'. [ 600.758767][T23467] netlink: 788 bytes leftover after parsing attributes in process `syz.2.4562'. [ 600.804786][T23472] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4563'. [ 600.853683][T23476] netlink: 'syz.5.4564': attribute type 3 has an invalid length. [ 600.919539][T23477] netlink: 'syz.6.4565': attribute type 1 has an invalid length. [ 601.149570][T23477] 8021q: adding VLAN 0 to HW filter on device bond4 [ 601.247644][T23500] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20000 [ 601.253915][T23488] vlan0: entered promiscuous mode [ 601.277426][T23498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4568'. [ 601.289070][T23488] bond4: entered promiscuous mode [ 601.300813][T23488] vlan0: entered allmulticast mode [ 601.304670][T23502] netlink: 'syz.0.4566': attribute type 1 has an invalid length. [ 601.327244][T23502] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4566'. [ 601.335009][T23488] bond4: entered allmulticast mode [ 601.368639][T23505] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4568'. [ 601.370955][T23492] bond4: (slave gretap2): making interface the new active one [ 601.393448][T23507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 601.397778][T23492] gretap2: entered promiscuous mode [ 601.410204][T23492] gretap2: entered allmulticast mode [ 601.419399][T23492] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 601.952222][T23518] __nla_validate_parse: 1 callbacks suppressed [ 601.952241][T23518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4572'. [ 602.021980][T23542] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4578'. [ 602.067535][T23542] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4578'. [ 602.118642][T23518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4572'. [ 602.342735][T23557] tipc: Enabled bearer , priority 0 [ 602.376495][T23557] syzkaller0: entered promiscuous mode [ 602.395834][T23557] syzkaller0: entered allmulticast mode [ 602.418122][T23557] tipc: Resetting bearer [ 602.449226][T23557] netlink: 'syz.6.4580': attribute type 11 has an invalid length. [ 602.548526][T23556] tipc: Resetting bearer [ 602.622304][T23556] tipc: Disabling bearer [ 602.673021][T23578] geneve2: entered allmulticast mode [ 602.680969][ T4554] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 602.705546][ T4554] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 602.776614][T23581] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4588'. [ 602.787317][T23589] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4587'. [ 602.827740][T23589] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 602.979247][ T4554] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 603.007316][ T4554] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 603.051569][T23597] netlink: 'syz.7.4592': attribute type 2 has an invalid length. [ 603.882097][T23631] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4598'. [ 604.286302][T23648] netlink: 'syz.7.4601': attribute type 1 has an invalid length. [ 604.287992][T23647] netlink: 'syz.2.4604': attribute type 1 has an invalid length. [ 604.305355][T23648] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4601'. [ 604.374467][T23647] smc: adding net device bond0 with user defined pnetid SYZ2 [ 604.501705][T23647] bond0: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 604.590479][T23647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.593093][T23665] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4607'. [ 604.607937][T17642] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 604.753571][T17648] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 604.770601][T23663] veth7: entered promiscuous mode [ 604.801824][T23663] bond0: (slave veth7): Enslaving as a backup interface with a down link [ 604.881794][T23683] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4613'. [ 604.916013][T23672] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 604.954032][T23672] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 605.070029][T23675] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 605.153945][T23675] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 605.529740][T23668] tipc: New replicast peer: 255.255.255.255 [ 605.539944][T23668] tipc: Enabled bearer , priority 26 [ 605.807819][T23690] lo speed is unknown, defaulting to 1000 [ 605.859939][T23699] netlink: 'syz.7.4615': attribute type 1 has an invalid length. [ 606.290181][T23715] netlink: 'syz.7.4620': attribute type 1 has an invalid length. [ 607.255538][T23689] lo speed is unknown, defaulting to 1000 [ 607.489564][T23735] __nla_validate_parse: 3 callbacks suppressed [ 607.489584][T23735] netlink: 212 bytes leftover after parsing attributes in process `syz.7.4625'. [ 607.518082][T23732] syzkaller0: entered promiscuous mode [ 607.523784][T23732] syzkaller0: entered allmulticast mode [ 608.041914][T23724] lo speed is unknown, defaulting to 1000 [ 608.101385][T23747] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.4629'. [ 608.190038][T23748] netlink: 'syz.7.4629': attribute type 2 has an invalid length. [ 609.463932][T23755] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4632'. [ 611.082043][T23757] netlink: 'syz.7.4632': attribute type 2 has an invalid length. [ 611.325307][T23782] netlink: 'syz.2.4638': attribute type 1 has an invalid length. [ 611.344483][T23782] netlink: 'syz.2.4638': attribute type 1 has an invalid length. [ 611.378117][T23782] netlink: 'syz.2.4638': attribute type 2 has an invalid length. [ 611.434448][T23775] netlink: 'syz.2.4638': attribute type 1 has an invalid length. [ 611.447046][T23775] netlink: 'syz.2.4638': attribute type 1 has an invalid length. [ 611.454879][T23775] netlink: 'syz.2.4638': attribute type 2 has an invalid length. [ 611.983063][T23804] netlink: 108 bytes leftover after parsing attributes in process `syz.7.4643'. [ 612.119219][T23813] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4645'. [ 612.580578][T23828] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4650'. [ 612.611295][T23826] netlink: 'syz.7.4648': attribute type 4 has an invalid length. [ 612.693166][T23834] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 613.053168][T23853] lo speed is unknown, defaulting to 1000 [ 613.651035][T23873] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4664'. [ 613.755965][ T6987] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 613.975806][ T6987] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 614.095623][T23879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4656'. [ 614.395268][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 614.551039][T23884] sctp: [Deprecated]: syz.6.4666 (pid 23884) Use of int in maxseg socket option. [ 614.551039][T23884] Use struct sctp_assoc_value instead [ 614.565436][T23891] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4668'. [ 614.606240][T23891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4668'. [ 614.653878][T23891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4668'. [ 614.718906][ T5184] Bluetooth: hci1: command tx timeout [ 614.725021][T23889] tipc: Enabling of bearer rejected, failed to enable media [ 614.754811][T23897] netlink: 'syz.2.4669': attribute type 13 has an invalid length. [ 614.795876][T23896] netlink: 'syz.2.4669': attribute type 13 has an invalid length. [ 614.848637][T23897] netlink: 'syz.2.4669': attribute type 17 has an invalid length. [ 614.858906][T23896] netlink: 'syz.2.4669': attribute type 17 has an invalid length. [ 614.973293][T23897] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.048346][T23897] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 615.140190][T23896] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 615.229615][T23914] netlink: 228 bytes leftover after parsing attributes in process `syz.6.4673'. [ 615.763459][T23928] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 615.868807][T23928] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 615.943318][T23939] netlink: 'syz.5.4680': attribute type 21 has an invalid length. [ 615.961288][T23928] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 615.979833][T23939] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4680'. [ 616.040055][T23928] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 616.088148][T23945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4684'. [ 616.243804][ T8615] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 616.271636][ T8615] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 616.294408][ T8615] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 616.328454][ T8615] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 616.500758][T23965] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4690'. [ 616.554612][T23970] netlink: 'syz.6.4693': attribute type 4 has an invalid length. [ 616.831220][T23988] netlink: 'syz.0.4697': attribute type 1 has an invalid length. [ 617.017868][T23988] 8021q: adding VLAN 0 to HW filter on device bond6 [ 617.042857][T23988] vlan2: entered allmulticast mode [ 617.073464][T23988] veth1: entered allmulticast mode [ 617.133442][T23988] bond6: (slave vlan2): making interface the new active one [ 617.147922][T23988] bond6: (slave vlan2): Enslaving as an active interface with an up link [ 617.342664][T24024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.451234][T24025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.537534][T24036] tipc: Enabled bearer , priority 0 [ 617.549730][T24036] syzkaller0: entered promiscuous mode [ 617.556804][T24036] syzkaller0: entered allmulticast mode [ 617.635965][T24036] tipc: Resetting bearer [ 617.658995][T24035] tipc: Resetting bearer [ 617.693535][T24035] tipc: Disabling bearer [ 617.753588][T24047] __nla_validate_parse: 1 callbacks suppressed [ 617.753608][T24047] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4714'. [ 617.890411][T24056] bridge0: port 1(syz_tun) entered blocking state [ 617.920377][T24056] bridge0: port 1(syz_tun) entered disabled state [ 617.945960][T24062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4717'. [ 617.960786][T24056] syz_tun: entered allmulticast mode [ 617.969109][T24056] syz_tun: entered promiscuous mode [ 617.979087][T24056] bridge0: port 1(syz_tun) entered blocking state [ 617.986052][T24056] bridge0: port 1(syz_tun) entered forwarding state [ 618.008181][T24065] tipc: Enabling of bearer rejected, already enabled [ 618.024673][T24064] netlink: 'syz.6.4719': attribute type 8 has an invalid length. [ 618.113875][T24057] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4718'. [ 618.527617][T24097] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4729'. [ 618.617461][T24104] netlink: 'syz.7.4731': attribute type 10 has an invalid length. [ 618.641628][T24104] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4731'. [ 618.796206][T24104] team0: Port device geneve0 added [ 619.030334][T24132] tipc: Enabling of bearer rejected, already enabled [ 619.057983][T24132] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4737'. [ 619.144816][T24132] tipc: Enabling of bearer rejected, already enabled [ 619.167296][T24144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4740'. [ 619.321284][T24153] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4742'. [ 619.844995][T24182] netlink: 'syz.5.4749': attribute type 1 has an invalid length. [ 619.918128][T24184] bridge4: entered allmulticast mode [ 620.076573][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.085417][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.213267][T24195] tipc: Enabled bearer , priority 0 [ 620.226726][T24195] syzkaller0: entered promiscuous mode [ 620.270819][T24199] netlink: 'syz.5.4756': attribute type 10 has an invalid length. [ 620.280444][T24200] netlink: 'syz.5.4756': attribute type 10 has an invalid length. [ 620.288108][T24195] syzkaller0: entered allmulticast mode [ 620.416070][T24195] tipc: Resetting bearer [ 620.440156][T24195] netlink: 'syz.6.4754': attribute type 1 has an invalid length. [ 620.484678][T24193] tipc: Resetting bearer [ 620.523374][T24193] tipc: Disabling bearer [ 620.683090][T24222] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4761'. [ 620.768704][T24226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 620.778709][T24226] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4761'. [ 620.864659][T24232] netlink: 'syz.6.4762': attribute type 39 has an invalid length. [ 620.909686][T24207] smc: removing net device bond0 with user defined pnetid SYZ2 [ 620.919959][T24207] bond0 (unregistering): Released all slaves [ 620.950069][T24213] syzkaller1: entered promiscuous mode [ 620.957509][T24213] syzkaller1: entered allmulticast mode [ 621.115489][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.264852][T24239] tipc: Enabled bearer , priority 0 [ 621.273460][T24224] syzkaller0: entered promiscuous mode [ 621.280833][T24224] syzkaller0: entered allmulticast mode [ 621.562566][T24223] tipc: Resetting bearer [ 621.670780][T24223] tipc: Disabling bearer [ 622.155294][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.159644][T24285] lo speed is unknown, defaulting to 1000 [ 622.497112][T24297] only policy match revision 0 supported [ 622.497134][T24297] unable to load match [ 622.520265][T24299] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 622.531122][T24300] only policy match revision 0 supported [ 622.531143][T24300] unable to load match [ 622.540396][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.276004][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.304719][T24313] syzkaller1: entered promiscuous mode [ 623.319196][T24315] __nla_validate_parse: 9 callbacks suppressed [ 623.319216][T24315] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4784'. [ 623.335360][T24313] syzkaller1: entered allmulticast mode [ 623.345464][T24315] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4784'. [ 623.404562][T24318] netlink: 'syz.2.4785': attribute type 1 has an invalid length. [ 623.589996][T24329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4785'. [ 623.636044][T24329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4785'. [ 623.705362][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.927608][T24337] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4788'. [ 623.985588][T24323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4785'. [ 624.000687][ T7012] IPVS: rr: FWM 3 0x00000003 - no destination available [ 624.100007][T24341] lo speed is unknown, defaulting to 1000 [ 624.378399][T24357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.724963][T24372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4799'. [ 624.803863][T24375] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4800'. [ 625.135599][T24367] lo speed is unknown, defaulting to 1000 [ 625.275651][ C0] net_ratelimit: 1 callbacks suppressed [ 625.275680][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.650974][T24390] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4804'. [ 625.679730][T24391] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4804'. [ 625.796463][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.809767][T24391] veth0: entered promiscuous mode [ 625.882383][T24400] can: request_module (can-proto-0) failed. [ 626.132236][T24411] tipc: Enabling of bearer rejected, already enabled [ 626.512576][T24389] veth0: left promiscuous mode [ 626.834493][T24423] lo speed is unknown, defaulting to 1000 [ 627.250796][T24436] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 627.274779][T24436] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 627.675451][ T5184] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 628.383848][T24480] tipc: Enabled bearer , priority 0 [ 628.403134][T24480] syzkaller0: entered promiscuous mode [ 628.415358][T24480] syzkaller0: entered allmulticast mode [ 628.474384][T24480] tipc: Resetting bearer [ 628.527596][T24481] sctp: [Deprecated]: syz.5.4823 (pid 24481) Use of int in max_burst socket option. [ 628.527596][T24481] Use struct sctp_assoc_value instead [ 628.552569][T24479] tipc: Resetting bearer [ 628.593070][T24479] tipc: Disabling bearer [ 628.688946][T24488] __nla_validate_parse: 3 callbacks suppressed [ 628.688967][T24488] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4826'. [ 628.725425][T24488] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4826'. [ 628.734526][T24488] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4826'. [ 628.803249][T24488] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4826'. [ 629.000101][T24498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4829'. [ 629.104921][T24509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4831'. [ 629.130538][T24509] gretap0: entered promiscuous mode [ 629.294884][T24505] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.431379][T24505] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.458475][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.470962][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.552617][T24505] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.713252][T24505] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.759540][T17648] IPVS: rr: FWM 3 0x00000003 - no destination available [ 629.969390][ T13] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.973008][T24535] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4840'. [ 629.982751][ T13] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.086424][ T13] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.099694][ T13] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.181100][T24545] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4844'. [ 630.313724][T24551] erspan0: entered promiscuous mode [ 630.327858][T24551] batman_adv: batadv0: Adding interface: macvlan0 [ 630.334686][T24551] batman_adv: batadv0: Interface activated: macvlan0 [ 630.651015][T24568] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4851'. [ 630.662366][T24569] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4851'. [ 630.840484][T24575] netlink: 'syz.6.4845': attribute type 1 has an invalid length. [ 630.883793][T24575] netlink: 'syz.6.4845': attribute type 1 has an invalid length. [ 631.923728][T24630] netlink: 'syz.5.4870': attribute type 7 has an invalid length. [ 631.973164][T24630] : entered promiscuous mode [ 632.241216][T24645] netlink: 'syz.6.4872': attribute type 1 has an invalid length. [ 632.264295][T24642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 632.322222][T24639] netlink: 'syz.6.4872': attribute type 1 has an invalid length. [ 632.822674][T24671] netlink: 'syz.2.4880': attribute type 10 has an invalid length. [ 632.873146][T24662] syz_tun: left allmulticast mode [ 632.890002][T24662] syz_tun: left promiscuous mode [ 632.891287][T24674] netlink: 'syz.2.4880': attribute type 10 has an invalid length. [ 632.925762][T24662] bridge0: port 1(syz_tun) entered disabled state [ 633.005490][T24676] netlink: 'syz.7.4882': attribute type 11 has an invalid length. [ 633.234100][T24671] team0: Port device dummy0 added [ 633.286870][T24674] team0: Port device dummy0 removed [ 633.420429][T24683] lo speed is unknown, defaulting to 1000 [ 634.279351][T24726] __nla_validate_parse: 13 callbacks suppressed [ 634.279373][T24726] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4894'. [ 634.379736][T24732] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4897'. [ 634.439874][T24732] netlink: 'syz.5.4897': attribute type 1 has an invalid length. [ 634.481487][T24721] lo speed is unknown, defaulting to 1000 [ 634.494318][T24732] bond8: (slave gretap2): making interface the new active one [ 634.500863][T24729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4893'. [ 634.504203][T24732] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 634.590883][T24729] bond0: entered promiscuous mode [ 634.618957][T24729] bond0: left promiscuous mode [ 634.877181][ T8615] IPVS: rr: FWM 3 0x00000003 - no destination available [ 635.017596][T24728] lo speed is unknown, defaulting to 1000 [ 635.083430][T24757] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4903'. [ 635.288613][T24761] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4904'. [ 635.429748][T24761] 8021q: adding VLAN 0 to HW filter on device bond5 [ 635.499742][T24766] bond5: (slave batadv1): Opening slave failed [ 635.797870][T24781] netlink: 'syz.0.4909': attribute type 10 has an invalid length. [ 635.806918][T24781] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4909'. [ 635.869291][T24781] !: entered promiscuous mode [ 635.874221][T24781] !: entered allmulticast mode [ 635.887756][T24781] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 635.906205][T24783] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4910'. [ 636.075397][ T5184] block nbd2: Receive control failed (result -32) [ 636.158856][T24798] netlink: 'syz.2.4916': attribute type 1 has an invalid length. [ 636.199894][T24800] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4915'. [ 636.632657][T24814] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4919'. [ 637.023203][T24800] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 637.426807][T24833] lo speed is unknown, defaulting to 1000 [ 637.659031][T24856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4932'. [ 637.926973][T24862] bond2: (slave erspan0): Releasing active interface [ 637.977774][T24862] bond0: (slave wlan1): Releasing backup interface [ 638.031254][T24862] bond2: (slave veth7): Releasing active interface [ 638.070892][T24862] bond4: (slave gretap2): Releasing active interface [ 638.100141][T24862] gretap2: left promiscuous mode [ 638.120059][T24862] gretap2: left allmulticast mode [ 638.227578][T24864] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 638.248423][T24863] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 638.293771][T24867] ªªªªªª: renamed from wg2 [ 638.693618][T24891] netlink: 'syz.7.4942': attribute type 2 has an invalid length. [ 638.737606][T24894] netlink: 'syz.0.4925': attribute type 19 has an invalid length. [ 638.787981][T24891] þ: entered promiscuous mode [ 639.039273][T24904] netlink: 'syz.7.4944': attribute type 13 has an invalid length. [ 639.346588][T24918] __nla_validate_parse: 5 callbacks suppressed [ 639.346619][T24918] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4949'. [ 639.359547][T24920] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4950'. [ 639.501921][T24929] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4951'. [ 639.525407][T24929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4951'. [ 639.540768][T24929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4951'. [ 639.632995][T24931] bond0: entered promiscuous mode [ 639.680830][T24931] batadv0: entered promiscuous mode [ 639.730899][T24931] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 639.818929][T24931] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 639.819420][T24943] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4955'. [ 639.870669][T24931] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 639.891239][T24943] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4955'. [ 639.903328][T24943] netlink: 'syz.2.4955': attribute type 6 has an invalid length. [ 639.925717][T24943] netlink: 'syz.2.4955': attribute type 5 has an invalid length. [ 639.945204][T24943] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4955'. [ 639.997611][ T8615] IPVS: rr: FWM 3 0x00000003 - no destination available [ 640.906839][T24971] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4959'. [ 641.000812][T24966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4959'. [ 641.124642][T24978] lo speed is unknown, defaulting to 1000 [ 641.269588][T24991] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 641.481535][T24997] tipc: Enabled bearer , priority 0 [ 641.510250][T24997] syzkaller0: entered promiscuous mode [ 641.528418][T24997] syzkaller0: entered allmulticast mode [ 641.583838][T24997] tipc: Resetting bearer [ 641.643559][T24996] tipc: Resetting bearer [ 641.702619][T24996] tipc: Disabling bearer [ 641.819934][T25012] syzkaller0: entered promiscuous mode [ 641.825746][T25012] syzkaller0: entered allmulticast mode [ 642.044245][T25014] pim6reg: entered allmulticast mode [ 642.057173][T25014] pim6reg: left allmulticast mode [ 642.370359][T25026] netlink: 'syz.0.4980': attribute type 1 has an invalid length. [ 642.699646][T25036] netlink: 'syz.0.4983': attribute type 21 has an invalid length. [ 642.713228][T25036] netlink: 'syz.0.4983': attribute type 22 has an invalid length. [ 642.744569][T25036] netlink: 'syz.0.4983': attribute type 23 has an invalid length. [ 643.021674][T25047] netlink: 'syz.6.4986': attribute type 12 has an invalid length. [ 643.145625][T25047] bond6: entered promiscuous mode [ 643.151460][T25047] 8021q: adding VLAN 0 to HW filter on device bond6 [ 643.346072][T25047] bond6 (unregistering): Released all slaves [ 643.392502][T25048] lo speed is unknown, defaulting to 1000 [ 643.952023][T25054] lo speed is unknown, defaulting to 1000 [ 644.080772][T25081] tipc: Enabled bearer , priority 0 [ 644.174919][T25081] tipc: Disabling bearer [ 644.450573][T25093] __nla_validate_parse: 10 callbacks suppressed [ 644.450593][T25093] netlink: 400 bytes leftover after parsing attributes in process `syz.6.4998'. [ 644.459727][T25061] lo speed is unknown, defaulting to 1000 [ 644.705805][T25097] tipc: Enabled bearer , priority 0 [ 644.714220][T25097] syzkaller0: entered promiscuous mode [ 644.752467][T25097] syzkaller0: entered allmulticast mode [ 644.779042][T25098] tipc: Resetting bearer [ 644.793926][T25096] tipc: Resetting bearer [ 644.831930][T25096] tipc: Disabling bearer [ 645.772835][ T49] IPVS: rr: FWM 3 0x00000003 - no destination available [ 646.852681][T25137] tipc: Enabled bearer , priority 0 [ 646.869798][T25142] netlink: 'syz.2.5015': attribute type 1 has an invalid length. [ 646.880510][T25138] syzkaller0: mtu less than device minimum [ 646.917395][T25138] tipc: Disabling bearer [ 647.222130][T25156] vlan3: entered promiscuous mode [ 647.251900][T25156] gretap0: entered promiscuous mode [ 647.331126][T25158] gretap0: left promiscuous mode [ 647.484514][T25158] geneve2: left allmulticast mode [ 647.528970][T25158] veth7: left promiscuous mode [ 647.565788][T25151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5018'. [ 647.576323][T25151] tipc: Enabling of bearer rejected, failed to enable media [ 647.584328][T25171] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5020'. [ 647.641408][ T6987] lo speed is unknown, defaulting to 1000 [ 647.656095][ T49] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 647.685662][ T6987] syz0: Port: 1 Link DOWN [ 647.698510][ T49] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 647.726107][ T6989] lo speed is unknown, defaulting to 1000 [ 647.732887][ T49] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 647.764444][ T49] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 648.173473][T25195] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5027'. [ 648.199809][T25200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5029'. [ 648.209353][T25195] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5027'. [ 648.224697][T25195] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5027'. [ 648.292865][T25195] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5027'. [ 648.442678][T25211] netlink: 'syz.6.5031': attribute type 3 has an invalid length. [ 648.462990][T25211] netlink: 'syz.6.5031': attribute type 6 has an invalid length. [ 648.501692][T25214] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5033'. [ 648.811536][T25224] lo speed is unknown, defaulting to 1000 [ 649.117102][T25238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5038'. [ 649.464785][T25257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5043'. [ 649.504738][T25257] sctp: [Deprecated]: syz.0.5043 (pid 25257) Use of int in max_burst socket option deprecated. [ 649.504738][T25257] Use struct sctp_assoc_value instead [ 649.528105][T25259] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5044'. [ 649.651059][T25263] netlink: 'syz.5.5046': attribute type 3 has an invalid length. [ 649.663537][T25232] lo speed is unknown, defaulting to 1000 [ 650.577956][T25291] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5051'. [ 650.601710][T25291] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5051'. [ 650.707822][T25291] syz_tun: entered promiscuous mode [ 650.752663][T25291] syz_tun: left promiscuous mode [ 650.796308][T17641] IPVS: rr: FWM 3 0x00000003 - no destination available [ 650.857698][T25300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5054'. [ 651.038063][T25305] netlink: 'syz.7.5056': attribute type 3 has an invalid length. [ 651.070530][T25303] lo speed is unknown, defaulting to 1000 [ 651.092557][T25305] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5056'. [ 651.248717][T25312] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5059'. [ 651.451648][T25315] smc: adding net device bond0 with user defined pnetid SYZ2 [ 651.461643][T25315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.515336][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 651.807074][T25331] GUP no longer grows the stack in syz.6.5064 (25331): 200000003000-20000000a000 (200000001000) [ 651.872413][T25331] CPU: 1 UID: 0 PID: 25331 Comm: syz.6.5064 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 651.872444][T25331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 651.872455][T25331] Call Trace: [ 651.872463][T25331] [ 651.872473][T25331] dump_stack_lvl+0x189/0x250 [ 651.872515][T25331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 651.872537][T25331] ? __pfx__printk+0x10/0x10 [ 651.872558][T25331] ? find_vma+0xe7/0x160 [ 651.872598][T25331] __get_user_pages+0x24d0/0x2ce0 [ 651.872626][T25331] ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190 [ 651.872682][T25331] ? rcu_is_watching+0x15/0xb0 [ 651.872710][T25331] __gup_longterm_locked+0xde9/0x1660 [ 651.872751][T25331] ? sanity_check_pinned_pages+0x123a/0x1300 [ 651.872786][T25331] gup_fast_fallback+0x1e6a/0x2010 [ 651.872852][T25331] ? __pfx_gup_fast_fallback+0x10/0x10 [ 651.872874][T25331] ? stack_trace_save+0x9c/0xe0 [ 651.872897][T25331] ? __pfx_stack_trace_save+0x10/0x10 [ 651.872933][T25331] ? pin_user_pages_fast+0x4d/0xb0 [ 651.872961][T25331] iov_iter_extract_pages+0x35a/0x5e0 [ 651.872994][T25331] extract_iter_to_sg+0xe46/0x24e0 [ 651.873045][T25331] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 651.873095][T25331] ? __asan_memset+0x22/0x50 [ 651.873119][T25331] af_alg_get_rsgl+0x436/0x810 [ 651.873168][T25331] aead_recvmsg+0x4cc/0x13f0 [ 651.873207][T25331] ? rcu_is_watching+0x15/0xb0 [ 651.873236][T25331] ? __pfx_aead_recvmsg+0x10/0x10 [ 651.873264][T25331] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 651.873285][T25331] ? __pfx_aead_recvmsg+0x10/0x10 [ 651.873309][T25331] sock_recvmsg_nosec+0x186/0x1c0 [ 651.873419][T25331] ____sys_recvmsg+0x3aa/0x460 [ 651.873450][T25331] ? __pfx_____sys_recvmsg+0x10/0x10 [ 651.873488][T25331] ? import_iovec+0x74/0xa0 [ 651.873513][T25331] ___sys_recvmsg+0x1b5/0x510 [ 651.873540][T25331] ? __pfx____sys_recvmsg+0x10/0x10 [ 651.873596][T25331] ? __might_fault+0xb0/0x130 [ 651.873627][T25331] do_recvmmsg+0x307/0x770 [ 651.873660][T25331] ? __pfx_do_recvmmsg+0x10/0x10 [ 651.873678][T25331] ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0 [ 651.873723][T25331] ? __pfx_do_futex+0x10/0x10 [ 651.873769][T25331] __x64_sys_recvmmsg+0x190/0x240 [ 651.873794][T25331] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 651.873812][T25331] ? rcu_is_watching+0x15/0xb0 [ 651.873838][T25331] ? do_syscall_64+0xbe/0x3b0 [ 651.873871][T25331] do_syscall_64+0xfa/0x3b0 [ 651.873896][T25331] ? lockdep_hardirqs_on+0x9c/0x150 [ 651.873920][T25331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.873940][T25331] ? clear_bhb_loop+0x60/0xb0 [ 651.873965][T25331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.873983][T25331] RIP: 0033:0x7f806778ebe9 [ 651.874001][T25331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.874019][T25331] RSP: 002b:00007f806855b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 651.874041][T25331] RAX: ffffffffffffffda RBX: 00007f80679b5fa0 RCX: 00007f806778ebe9 [ 651.874054][T25331] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000e [ 651.874066][T25331] RBP: 00007f8067811e19 R08: 0000000000000000 R09: 0000000000000000 [ 651.874077][T25331] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000 [ 651.874088][T25331] R13: 00007f80679b6038 R14: 00007f80679b5fa0 R15: 00007ffe0ab13248 [ 651.874125][T25331] [ 652.843113][T25375] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5077'. [ 653.133331][T25385] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5079'. [ 653.193936][T25389] netlink: 'syz.2.5082': attribute type 4 has an invalid length. [ 653.271740][T25387] lo speed is unknown, defaulting to 1000 [ 653.299606][T25392] sctp: [Deprecated]: syz.5.5083 (pid 25392) Use of int in maxseg socket option. [ 653.299606][T25392] Use struct sctp_assoc_value instead [ 653.423627][T25405] tipc: Enabling of bearer rejected, failed to enable media [ 653.527246][ T2986] nci: nci_rx_work: unknown MT 0x1 [ 653.733193][T25415] sctp: [Deprecated]: syz.5.5090 (pid 25415) Use of struct sctp_assoc_value in delayed_ack socket option. [ 653.733193][T25415] Use struct sctp_sack_info instead [ 653.829928][T25423] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5092'. [ 654.178974][T25434] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 654.183230][T25435] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 654.868012][T25452] syzkaller0: entered promiscuous mode [ 654.874131][T25452] syzkaller0: entered allmulticast mode [ 655.273264][T25467] __nla_validate_parse: 1 callbacks suppressed [ 655.273282][T25467] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5105'. [ 655.783332][T25476] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5107'. [ 655.997264][T17641] IPVS: rr: FWM 3 0x00000003 - no destination available [ 658.601419][T25487] lo speed is unknown, defaulting to 1000 [ 658.704511][T25495] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5112'. [ 658.721035][T25495] netlink: 128 bytes leftover after parsing attributes in process `syz.7.5112'. [ 659.950709][T25523] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5123'. [ 659.977606][T25523] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5123'. [ 660.119773][T25531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5124'. [ 660.350259][T25540] netlink: 'syz.6.5126': attribute type 83 has an invalid length. [ 660.874742][T25556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5131'. [ 660.919804][T25557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5131'. [ 660.930186][T25559] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5132'. [ 661.070794][T25564] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 661.125836][T25566] tipc: Enabled bearer , priority 0 [ 661.227446][T25566] syzkaller0: entered promiscuous mode [ 661.249210][T25566] syzkaller0: entered allmulticast mode [ 661.262418][T25566] tipc: Resetting bearer [ 661.287227][T25574] batadv_slave_1: entered promiscuous mode [ 661.401222][T25579] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5137'. [ 661.428077][T25575] tipc: Resetting bearer [ 661.768542][T17641] IPVS: rr: FWM 3 0x00000003 - no destination available [ 663.996428][T25575] tipc: Disabling bearer [ 664.009317][T25592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.018712][T25592] batadv_slave_0: entered promiscuous mode [ 664.188164][T25603] tipc: Enabled bearer , priority 0 [ 664.195953][T25603] syzkaller0: entered promiscuous mode [ 664.201810][T25603] syzkaller0: entered allmulticast mode [ 664.219987][T25603] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5145'. [ 664.240818][T25603] : entered promiscuous mode [ 664.363088][T25609] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.377868][T25609] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.493449][T25601] tipc: Resetting bearer [ 664.583277][T25601] tipc: Disabling bearer [ 664.613119][T25631] tipc: Enabled bearer , priority 0 [ 664.667117][T25609] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.702649][T25609] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.730333][T25632] tipc: Enabling of bearer rejected, already enabled [ 664.809886][T25631] tipc: Disabling bearer [ 664.870092][T25609] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.889218][T25609] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.928110][T25648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5155'. [ 664.988068][T25649] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5155'. [ 664.998524][T25654] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5157'. [ 665.004218][T25609] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 665.011375][T25654] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5157'. [ 665.024735][T25609] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.059056][T25654] [ 665.061447][T25654] ====================================================== [ 665.068580][T25654] WARNING: possible circular locking dependency detected [ 665.075620][T25654] 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 Not tainted [ 665.082743][T25654] ------------------------------------------------------ [ 665.089756][T25654] syz.7.5157/25654 is trying to acquire lock: [ 665.095814][T25654] ffffffff8f68d298 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 665.105297][T25654] [ 665.105297][T25654] but task is already holding lock: [ 665.112666][T25654] ffff8880539ed770 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 665.122010][T25654] [ 665.122010][T25654] which lock already depends on the new lock. [ 665.122010][T25654] [ 665.132430][T25654] [ 665.132430][T25654] the existing dependency chain (in reverse order) is: [ 665.141491][T25654] [ 665.141491][T25654] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 665.149524][T25654] lock_acquire+0x120/0x360 [ 665.154596][T25654] _raw_spin_lock_bh+0x36/0x50 [ 665.159918][T25654] nr_rt_device_down+0x12a/0x720 [ 665.165414][T25654] nr_device_event+0x137/0x150 [ 665.170742][T25654] notifier_call_chain+0x1b6/0x3e0 [ 665.176405][T25654] netif_close_many+0x29c/0x410 [ 665.181813][T25654] netif_close+0x158/0x210 [ 665.186766][T25654] dev_close+0x10a/0x220 [ 665.191528][T25654] bpq_device_event+0x377/0x6a0 [ 665.196892][T25654] notifier_call_chain+0x1b6/0x3e0 [ 665.202526][T25654] netif_close_many+0x29c/0x410 [ 665.207909][T25654] netif_close+0x158/0x210 [ 665.212946][T25654] dev_close+0x10a/0x220 [ 665.217737][T25654] bond_setup_by_slave+0x5f/0x3f0 [ 665.223359][T25654] bond_enslave+0x7a0/0x3a20 [ 665.228552][T25654] bond_do_ioctl+0x635/0x9b0 [ 665.233674][T25654] dev_ifsioc+0x908/0xf00 [ 665.238599][T25654] dev_ioctl+0x7b4/0x1150 [ 665.243465][T25654] sock_do_ioctl+0x22c/0x300 [ 665.248674][T25654] sock_ioctl+0x576/0x790 [ 665.253523][T25654] __se_sys_ioctl+0xf9/0x170 [ 665.258873][T25654] do_syscall_64+0xfa/0x3b0 [ 665.263999][T25654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.270507][T25654] [ 665.270507][T25654] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 665.278419][T25654] lock_acquire+0x120/0x360 [ 665.283476][T25654] _raw_spin_lock_bh+0x36/0x50 [ 665.288782][T25654] nr_rt_device_down+0xa9/0x720 [ 665.294174][T25654] nr_device_event+0x137/0x150 [ 665.299454][T25654] notifier_call_chain+0x1b6/0x3e0 [ 665.305095][T25654] netif_close_many+0x29c/0x410 [ 665.310473][T25654] netif_close+0x158/0x210 [ 665.315414][T25654] dev_close+0x10a/0x220 [ 665.320180][T25654] bpq_device_event+0x377/0x6a0 [ 665.325574][T25654] notifier_call_chain+0x1b6/0x3e0 [ 665.331199][T25654] netif_close_many+0x29c/0x410 [ 665.336570][T25654] netif_close+0x158/0x210 [ 665.341505][T25654] dev_close+0x10a/0x220 [ 665.346305][T25654] bond_setup_by_slave+0x5f/0x3f0 [ 665.351848][T25654] bond_enslave+0x7a0/0x3a20 [ 665.356964][T25654] bond_do_ioctl+0x635/0x9b0 [ 665.362197][T25654] dev_ifsioc+0x908/0xf00 [ 665.367082][T25654] dev_ioctl+0x7b4/0x1150 [ 665.372035][T25654] sock_do_ioctl+0x22c/0x300 [ 665.377170][T25654] sock_ioctl+0x576/0x790 [ 665.382033][T25654] __se_sys_ioctl+0xf9/0x170 [ 665.387249][T25654] do_syscall_64+0xfa/0x3b0 [ 665.392306][T25654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.398747][T25654] [ 665.398747][T25654] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 665.406674][T25654] validate_chain+0xb9b/0x2140 [ 665.411969][T25654] __lock_acquire+0xab9/0xd20 [ 665.417179][T25654] lock_acquire+0x120/0x360 [ 665.422311][T25654] _raw_spin_lock_bh+0x36/0x50 [ 665.427616][T25654] nr_remove_neigh+0x25/0xe0 [ 665.432923][T25654] nr_add_node+0x1d9f/0x2570 [ 665.438037][T25654] nr_rt_ioctl+0xc12/0xd50 [ 665.443066][T25654] sock_do_ioctl+0xd9/0x300 [ 665.448088][T25654] sock_ioctl+0x576/0x790 [ 665.452945][T25654] __se_sys_ioctl+0xf9/0x170 [ 665.458085][T25654] do_syscall_64+0xfa/0x3b0 [ 665.463123][T25654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.469611][T25654] [ 665.469611][T25654] other info that might help us debug this: [ 665.469611][T25654] [ 665.479859][T25654] Chain exists of: [ 665.479859][T25654] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 665.479859][T25654] [ 665.493758][T25654] Possible unsafe locking scenario: [ 665.493758][T25654] [ 665.501203][T25654] CPU0 CPU1 [ 665.506654][T25654] ---- ---- [ 665.512112][T25654] lock(&nr_node->node_lock); [ 665.516880][T25654] lock(nr_node_list_lock); [ 665.523994][T25654] lock(&nr_node->node_lock); [ 665.531280][T25654] lock(nr_neigh_list_lock); [ 665.535953][T25654] [ 665.535953][T25654] *** DEADLOCK *** [ 665.535953][T25654] [ 665.544090][T25654] 1 lock held by syz.7.5157/25654: [ 665.549379][T25654] #0: ffff8880539ed770 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 665.559196][T25654] [ 665.559196][T25654] stack backtrace: [ 665.565117][T25654] CPU: 1 UID: 0 PID: 25654 Comm: syz.7.5157 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 665.565146][T25654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 665.565159][T25654] Call Trace: [ 665.565166][T25654] [ 665.565174][T25654] dump_stack_lvl+0x189/0x250 [ 665.565211][T25654] ? __pfx_dump_stack_lvl+0x10/0x10 [ 665.565234][T25654] ? __pfx__printk+0x10/0x10 [ 665.565258][T25654] ? stack_trace_save+0x9c/0xe0 [ 665.565288][T25654] print_circular_bug+0x2ee/0x310 [ 665.565310][T25654] check_noncircular+0x134/0x160 [ 665.565333][T25654] validate_chain+0xb9b/0x2140 [ 665.565352][T25654] ? do_syscall_64+0xfa/0x3b0 [ 665.565391][T25654] __lock_acquire+0xab9/0xd20 [ 665.565421][T25654] ? nr_remove_neigh+0x25/0xe0 [ 665.565444][T25654] lock_acquire+0x120/0x360 [ 665.565468][T25654] ? nr_remove_neigh+0x25/0xe0 [ 665.565494][T25654] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 665.565516][T25654] ? nr_remove_neigh+0x25/0xe0 [ 665.565538][T25654] _raw_spin_lock_bh+0x36/0x50 [ 665.565560][T25654] ? nr_remove_neigh+0x25/0xe0 [ 665.565582][T25654] nr_remove_neigh+0x25/0xe0 [ 665.565605][T25654] nr_add_node+0x1d9f/0x2570 [ 665.565630][T25654] ? dev_get_by_name+0x21/0x200 [ 665.565652][T25654] ? dev_get_by_name+0x21/0x200 [ 665.565671][T25654] ? dev_get_by_name+0x21/0x200 [ 665.565688][T25654] ? nr_call_to_digi+0x136/0x1b0 [ 665.565701][T25654] nr_rt_ioctl+0xc12/0xd50 [ 665.565716][T25654] ? kasan_quarantine_put+0xdd/0x220 [ 665.565730][T25654] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 665.565745][T25654] ? apparmor_capable+0x137/0x1b0 [ 665.565759][T25654] ? capable+0x89/0xe0 [ 665.565770][T25654] ? nr_ioctl+0x1b1/0x3b0 [ 665.565781][T25654] sock_do_ioctl+0xd9/0x300 [ 665.565794][T25654] ? __pfx_sock_do_ioctl+0x10/0x10 [ 665.565806][T25654] ? __lock_acquire+0xab9/0xd20 [ 665.565824][T25654] sock_ioctl+0x576/0x790 [ 665.565837][T25654] ? __pfx_sock_ioctl+0x10/0x10 [ 665.565849][T25654] ? __fget_files+0x2a/0x420 [ 665.565858][T25654] ? __fget_files+0x3a0/0x420 [ 665.565866][T25654] ? __fget_files+0x2a/0x420 [ 665.565876][T25654] ? bpf_lsm_file_ioctl+0x9/0x20 [ 665.565889][T25654] ? __pfx_sock_ioctl+0x10/0x10 [ 665.565901][T25654] __se_sys_ioctl+0xf9/0x170 [ 665.565922][T25654] do_syscall_64+0xfa/0x3b0 [ 665.565946][T25654] ? lockdep_hardirqs_on+0x9c/0x150 [ 665.565969][T25654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.565988][T25654] ? clear_bhb_loop+0x60/0xb0 [ 665.566008][T25654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.566026][T25654] RIP: 0033:0x7fc72f18ebe9 [ 665.566043][T25654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.566053][T25654] RSP: 002b:00007fc730078038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 665.566067][T25654] RAX: ffffffffffffffda RBX: 00007fc72f3b5fa0 RCX: 00007fc72f18ebe9 [ 665.566076][T25654] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000004 [ 665.566083][T25654] RBP: 00007fc72f211e19 R08: 0000000000000000 R09: 0000000000000000 [ 665.566090][T25654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 665.566097][T25654] R13: 00007fc72f3b6038 R14: 00007fc72f3b5fa0 R15: 00007ffde35b6ab8 [ 665.566109][T25654] [ 665.971837][T25654] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5157'. [ 665.984015][ T7710] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.992665][ T7710] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.002278][ T7710] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 666.011374][ T7710] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.027449][T17641] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 666.036139][T17641] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.048929][T17641] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 666.059365][T17641] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.515765][ T2986] IPVS: rr: FWM 3 0x00000003 - no destination available [ 673.276012][ T2986] IPVS: rr: FWM 3 0x00000003 - no destination available