last executing test programs: 2.869900071s ago: executing program 0 (id=687): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='tlb_flush\x00', r3, 0x0, 0x6}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000340)={'wg2\x00', {0x2, 0x4e24, @empty}}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d08023f000000040000a118000200ff020000091d00000000000000000001a80016ea1f00084003eb4bd04554bf2a31cf1f2e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb090000001fb791643a5e885913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b34113", 0xd9}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000e80040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="020408032000000000000400000000001e00080030070000636472ddfef22bede770be34024ae2d95d499eefd4b5975d12387696107b1b9c3a90d89d7a3ad624c9ff58bc310e25d1709bf5e8131cbd1e86b38b3d01f1f1768a7b3063a25a213e7ae880d9cb27e5388c3486e8bbcac9d5e8eeb89900d72b96b4380c5f334dd73399870debd9a8cadf8b366f9417216f5fe623eb9b95baf17e8d2fde41152a19c6723b2f87bed3a2e5b0e50343c294a0962b4e73c154c198e180f1a49a1ead3818fa1e7bae87e5450623432dfdd6886438bb3be7b6e0c02133a6b4a24bedfedf141c1e153b5aa9ca8eeb4c59c36042123fb182c2c6f78a3a3cbfce7ed81e8229ed4336ba63369fff0000"], 0x100}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) 2.815128691s ago: executing program 0 (id=689): r0 = socket$packet(0x11, 0xa, 0x300) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0xd}], 0x1, 0x2, 0x0) 2.623939037s ago: executing program 1 (id=695): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x8084) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x0, 0x0, 0x168, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x108, 0x168, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x12}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x4, 0x0, 0x1, 0x1, 0x4], 0x1, 0x5}, {0x4, [0x5, 0x4, 0x2, 0x2, 0x1, 0x3], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x0, 0x2, 0x4, 0x5, 0x1], 0x1, 0x2}, {0x2, [0x0, 0x7, 0x0, 0x0, 0x2, 0x1]}}}}, {{@uncond, 0x0, 0x20, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x23}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xd, 0xf, [0x33, 0x3e, 0x25, 0x23, 0x25, 0x2b, 0xb, 0x21, 0x12, 0x15, 0x1c, 0x8, 0x16, 0x37, 0x3b, 0x3a], 0x1, 0x9044, 0xff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303010000000000000000000000100800010001010000"], 0x1c}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 2.496995308s ago: executing program 0 (id=697): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a001000000000000000000008001f0000000000"], 0xd4}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000480), &(0x7f0000000500)=0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000000)={0x68}, 0x2) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f0000000200), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000350000009c0000000000000025000000fffffff19500000d000000004bea11fade2d6950bdaebf39f5d5e2c5dec1e666c3a573"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) 2.474699162s ago: executing program 1 (id=698): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x34}}, 0x20008000) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x7dc48146, 0x7fffffff, 0x5539e0cf}, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000400)={0xa}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000003c0)={0x1008}) syz_emit_ethernet(0x1e, &(0x7f0000001940)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@can={0xc, {{0x0, 0x0, 0x1, 0x1}, 0x7, 0x1, 0x0, 0x0, "5ac0c7d61001e90f"}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4576b8cac910389907dff0500000000000079109b0000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e20, 0x4, 0x4e24, 0x0, 0x2}, {0x8001, 0x65ad, 0x1, 0x0, 0xfffffffffffffff8, 0x802b, 0x8000000000000000, 0xfffffffffffffff7}, {0x2, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x2, 0x6c}, 0x2, @in=@empty, 0x40000, 0x5, 0x0, 0xb7, 0x10000000}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00d9c4fef89fdd7f2c275d2019fc62d6d5396ae92edc9a6a1d126ef146da6e71e40ac167", @ANYRESOCT=r0], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) 1.881656827s ago: executing program 2 (id=705): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001840)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000f7dac8fc21b0218d48becab3e900e8a029636fb7595b57af6e5e760fcf8d91579778bec50fb94a1e86a9eb59950716aff3a60f24aa84efce614f54caf65ab4374245b2ed73179c0fee9da9a024384850b7bc1d509959e0f065080cbc6dcc9b7e73d418a968b9fffaf2ea2b9aacf35fc5ddd299885c50e25bb7d09b0b1e9bed421d4588fa71121a637338a7ebb264c33686176c2b12f31a68b1e9a7af0f035a30ce44d33d9687d8257e035dc10708d376e09e04c272ba5fc466dc2e359cc5db9930c6637db67fdfc4ddf232a4b7561c10dd4f7114229c24535c15472228c673f6e4b10511f2e355f4dd72e1a88e2b20483efa13e3c53f94db772635bb88f425cfcf1c5da04c24a0c43e580c5d50b15d728865608a907f99b67e5fc7ba40bf886e321a1afb0ab180f5be2fab31cfec42a1147f49555d369f58a50c37d763a1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x263, 0xffffffffffffffff}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x263, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) socket(0x2a, 0x2, 0x0) (async) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xf, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xf, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x80, 0x7800, 0x2, 0x3, {{0x1a, 0x4, 0x2, 0x21, 0x68, 0x65, 0x0, 0xc, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@ssrr={0x89, 0x7, 0xd8, [@multicast1]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x3f, 0x3, 0xc, [{@local, 0x9}, {@loopback, 0x4}, {@rand_addr=0x64010101}, {@local, 0x3}, {@multicast1, 0x1}, {@loopback, 0x2000}, {@multicast1, 0x3b4}, {@rand_addr=0x64010102, 0x10000}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x7}]}]}}}}}) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xffffffffffffffcb, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000015c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001580)={&(0x7f0000000200)={0x1378, r3, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x180, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x97, 0x5, "7877e6ace8407e93720e41fdf6fa15d91f9444f380d1f3cd1d75021371f108c628dffe5317c89062eb91f3057e3dc121fd5ac8df74ace2cdeb831bfcb8e84612785e2e0381ef87598499bd85168cf2b68209817a0c6a3b9e7346ac1e091efe1e7c5e80f85461bf53c7a31eca3c69426a9925295e53a57bac2ee977da9133eae4eff4c265e59ba719385631bcc6fbfc9e8d40ce"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfff}, @ETHTOOL_A_BITSET_MASK={0xc3, 0x5, "3d1b53fda68bd0e4751406d7c5d3340a3b8acaf189f126588d5a9d8cc53862e4e5b89cfea5a415497a0f5ff158044929ee6cc215416f60de4a47a810b16c72c2462a90a6e09515b9b909a567236d8e3e85fa497860f3b62ceb7f3e1ad4139ae459fc912aa2b8b5a316ed67269a92a7a34af09c447e2f93be0f1f250eeaa33311d43e8d3a13be13fcf2094968b9068963ea7a5469fc1bebbd9386f52838894c9a479ef9ec8f5dceb8feea6c65b54d8a8e2fb26fa0444e5963b74b84642f518e"}]}, @ETHTOOL_A_FEATURES_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1104, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x7, 0x4, "4502fe"}, @ETHTOOL_A_BITSET_VALUE={0x98, 0x4, "dfa9639a5f4492c918784a87952a2ca8612b2ac8d4f7fa8da78fb3a067ac466e9814cac90fef86abe5c79d52fdddd494d1f14f9e5ae60af2aa8f40491627f3b4fe47cc75204ae721e79fde6afaf564c57b4a52844d4bbf673fd2c04852cff2fe4e01e010d85c12fc379d14a1b570e2c60bcf23de541080440495f452371fae76c559878d108c959b0def895f0af8928b2bb422e8"}, @ETHTOOL_A_BITSET_VALUE={0x3b, 0x4, "0db66abfeb22896eba7e238a8b7a55bfd90301c9d8a69e59451dfb8bad97a59425bca2269e5c63ceb0adad5c5d3825215f22bb4668d166"}]}]}, 0x1378}, 0x1, 0x0, 0x0, 0x2000c085}, 0x480c0) 1.847065115s ago: executing program 4 (id=706): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0xfffffffa, 0x1000, 0x3a, 0x770, 0xfffffffd, 0xbabd}, 0x1c) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_open_procfs$namespace(0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffdd) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000002060102000000000004000000000000000001000600000012000300686173683a6e65742c706f72740000006b78679fe400911fbe8dc087cd592533613720e3fefde65b6145b1d30a31b499b938c52fee93c53e14bca58a7338524583baf364a2d0844361ee41a8ed007be86fdcfa7c43b439c526f3efd001385ab6a51d2c746808512fd0bcce"], 0x30}}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f00000001c0)={0x1, 'gre0\x00', 0x3}, 0x18) (async) close(r1) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @private0, 0xf}, 0x1c) (async) listen(r3, 0x0) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(r1, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x6) (async) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="ff000000000200000400010000002800018014000400000000000f00fdffffffffffac1414aa060001000a008000080006dd024e4fec83848ea0992b000800000000000066902e4aa1925d538da89d1c4d4c208b42c82d0b50f20d1bc8318cdd776b6a1e6bc9dbdfd71dd262fc350f3db222ff4fbf608a8f3461d0769e"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000009c0)=""/4117, 0x1015}], 0x1}, 0xfffffff9}], 0x1, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x200000000000001f, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000000)={0x3, 0x7}, 0x10}, 0x94) 1.816935067s ago: executing program 2 (id=707): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="180000002e000106000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="d537afb48654acf2b7bd776aeebad317d4ee7d04c968e2e4096230b79fd49f38fe1f2ae80e0b24277f6ff2e1f2ea62f6a9555369e00db9a402d19d71ed6fe8ac5d15bb5485456b31e79a303fd1f0780ba72d2905e865d264fd99cea332e8ea848a3804040d7d712f9bca540227e9f84a1e3efee420dda4"], 0x18}], 0x1}, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r2) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2496005b565fa2fbb80fd0351603821f7200", @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf2501000000080002000100000008000100", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0xffffffffffffff9e, &(0x7f0000000140)={&(0x7f00000013c0)={0x24, r7, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x14d, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc000000000000000000000000000000ac1414bb00000000000000000000000000000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000007000000000000000000000000000000fdfffffffffdffff00000000000000000000000000000000feffffffffffffff00000009000000000100000000000000000000000000000009000000000000000000020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r9, &(0x7f0000000340)={0xa, 0x4e1c, 0x0, @mcast1, 0x5}, 0x1c) setsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000240)=0x3ff, 0x4) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80000001300e9", @ANYRESDEC=r9, @ANYRESHEX=r1], 0xb8}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f00000005c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0088a80a0081003c0086dd60cb653e00603afffe8000000000000000000000000000f8fe8000000000000000000000000000aa890090780000000020010000000000000000000000000000fc01000000000000000000000000000004b29595f429ae08a565c9a41d413a70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c692056"], 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newnexthop={0x38, 0x68, 0x102, 0x70bd26, 0x25dfdbfe, {0x2, 0x0, 0x3, 0x0, 0x23}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUP={0xc, 0x2, [{0x0, 0x8}]}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_TABLE={0x8, 0x3, 0x10}}]}, 0x38}}, 0x48c4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_DOWN(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010027bd7000ffd9df250300080008000100b7"], 0x1c}, 0x1, 0x0, 0x0, 0x48810}, 0x0) 1.677823963s ago: executing program 3 (id=708): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e22, @private=0xa010100}, @in6={0xa, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x36}, 0x3ff}, @in6={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x22}, 0x9}, @in6={0xa, 0x4e23, 0x2, @empty}], 0x74) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="68020000381a2196a98c6ec520198b8d5d7826e7f980904918b7bf2dd3d7cd98da77a9987482d60a628117fb12d68f8f2819191b4769b623722dc24a29fecbeeb0cf75cfab11cd8e11b721db245458ea4a5479ad69a107d83242ba4f13e175a521d63d10329e60cd32b24c0700fb7096137bb8cb9b3366fa8c0d4fba19e94fe13dedb83a24", @ANYRES16=r1, @ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x10}, 0x800) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @mcast2, @mcast2={0xe}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000f10000000000000020000018010000202070250000000000202020db09f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1}, 0x94) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000002e0001000000000000000000040019800400128084f14b3081ba2f06fb9bc034915dd8c28047c030915b"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) 1.677339998s ago: executing program 4 (id=709): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000400)={0x0, 0x2, "00dbff", 0xc, 0x9b}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x0, 0x3, 0x40, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x8000, 0x9c4b, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x7800, 0x1, 0x1, 0xffffffda, {{0x16, 0x4, 0x1, 0x3d, 0x58, 0x65, 0x0, 0x8, 0x29, 0x0, @private=0xa010100, @broadcast, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x9, 0x0, [{0x6, 0x3, "10"}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x2e, 0x3, [{0x5, 0x6, "368e8a5c"}, {0x7, 0xe, "d30bc2e6bf3fbe8bab30d784"}, {0x2, 0xc, "f6e48621b050a7e10d8a"}, {0x5, 0x8, "2529e5c4e682"}]}, @end]}}}}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000002c0)=0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=@ipv6_newroute={0x64, 0x18, 0x800, 0x70bd28, 0x25dfdbff, {0xa, 0x0, 0x0, 0x4, 0xfe, 0x0, 0xff, 0x6, 0x400}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_GATEWAY={0x14, 0x5, @private1}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x4, 0x7e, r3}}, @RTA_PRIORITY={0x8, 0x6, 0x2}, @RTA_UID={0x8, 0x19, r4}, @RTA_MARK={0x8, 0x10, 0x7fff}, @RTA_UID={0x8, 0x19, r4}]}, 0x64}, 0x1, 0x0, 0x0, 0x8091}, 0x20000010) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000500)={0x0, 0x1000, "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"}, &(0x7f0000000040)=0x1008) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r7, 0x2) shutdown(r6, 0x0) connect$unix(r6, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r8 = accept(r7, 0x0, 0x0) sendto$inet6(r8, &(0x7f0000002240)='\x00', 0x1, 0x400440e9, 0x0, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc, 0x9, 0x0, 0x0, 0x0, 0x0, r5}}], 0x30}], 0x1, 0x0) 1.65175839s ago: executing program 2 (id=710): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe46a}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe46a}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80000001}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x0) 1.596086574s ago: executing program 3 (id=711): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@gettaction={0x68, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x34}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'vlan\x00'}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40020}, 0x14004000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x0, r0}, 0x18) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="c00000001b0089fd0000000000000000fc000000000000000000000000000000ffffffff0000000000000000000000000000000000000000020080602f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xc0}}, 0x0) (async) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x40000000, @dev, 0x5}, 0x1c) (async) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB], 0xc0) (async) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) (async) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, 0x0, 0x0) (async) r6 = socket(0xa, 0x2400000001, 0x0) ioctl$sock_ifreq(r6, 0x8948, &(0x7f0000000100)={'vlan0\x00', @ifru_names='veth1_to_team\x00'}) (async) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 1.522074494s ago: executing program 0 (id=712): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000029c0)={'ip6gre0\x00', 0x0}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r3, 0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffffe}, 0x42) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='pim6reg\x00', 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4009}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x8042) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$netlink(0x10, 0x3, 0x0) splice(r7, 0x0, r9, 0x0, 0x10d00, 0xf) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r7) r12 = ioctl$NS_GET_PARENT(r7, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x86024100}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)={0xf8, r11, 0x400, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r12}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4804}, 0xb2f6dcd02d43fe1c) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r9, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0xe0, r10, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x60, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8a}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2006c040}, 0x20000084) r13 = socket(0x25, 0x1, 0x0) close(r13) getsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f0000000040)={@broadcast, @initdev, @multicast1}, &(0x7f00000000c0)=0xc) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="376134586d13fd2902e15eb337eca61800"/32, @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) 1.521657577s ago: executing program 1 (id=713): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, r3, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r3, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x3, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r5, &(0x7f0000000700), 0x0}, 0x20) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'veth1_to_bridge\x00', &(0x7f0000000240)=@ethtool_rxfh={0x47, 0x101, 0x10, 0xffffff16, 0x7f, "03c807", 0x5, [0x781, 0x928, 0x4, 0x20000]}}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtaction={0x118, 0x30, 0x1, 0x0, 0x0, {}, [{0x104, 0x1, [@m_ife={0x100, 0x7, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa}, @TCA_IFE_DMAC={0xa, 0x3, @random="0993803ad3b9"}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1bd, 0x2b72, 0x2, 0x4, 0x2}, 0x1}}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x7c, 0x6, "8f5b81a4dd996e466eda29972f72bc3e958ff69afb0ad4c92eaff8e7d3ba8191d0f818d610fa880d47f1434a875a91a1788acfee7cb31214e959661967983544341a4977973bb90e0e78f6fa066fdcfeb623a9ede97c8386668b3bd4bebc0fa38bc2976164f96c21f02527981a6ca99017b45ee43bed5a0d"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x118}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d31800000001000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xe8}, 0x94) 1.373050491s ago: executing program 3 (id=714): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=@newtaction={0x74, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r6, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x80000000}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x2}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r9, 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000180)={0x0, 0x8, 0x3, 0x8, @vifc_lcl_ifindex=r4, @multicast2}, 0x10) 1.344821947s ago: executing program 2 (id=715): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0xf}, {0xffe0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x24040950) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r3, 0x0) poll(&(0x7f0000000200)=[{r3, 0x401}], 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000000000008000700", @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000000080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000060006"], 0x50}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) select(0xe, &(0x7f0000000000)={0x7}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x40132, 0xffffffffffffffff, 0x32e64000) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)={0x84, r10, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x7}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x11}, @ETHTOOL_A_COALESCE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x40}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0xfffeffff}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x84}}, 0x4004005) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, r8, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xbdaa}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x50000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa000000000000000}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x840) setsockopt$packet_int(r2, 0x107, 0x18, 0x0, 0x0) close(r0) 768.788585ms ago: executing program 1 (id=716): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r3, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r3, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x60, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000080)=0xc, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, r2, 0x0, 0x12}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x1b}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x30008095}, 0x0) 768.281494ms ago: executing program 2 (id=717): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000040)) (async) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) (async) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x70) sendmsg$rds(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0}}], 0x30}, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast2, @in6=@dev, 0xfffd, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x265d}, {0x0, 0x4, 0x0, 0x1}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0xffffffff, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7}}, 0xe8) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000080)=0x2800, 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000280)=@llc={0x1a, 0x101, 0x81, 0x6, 0xfd, 0xfe, @multicast}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000480)="d4572123539ea00fe3401a1e3c1200e5626b5160023559a6224051f1b87a3c1fb6e01084c1a79985a743619da86af1ee33d85229975e255b1f558ac47f091ed7dfce95dc4f2b6ff87aaeb092583b246bb3c74690cf78d81b5b423def95d572ca857a7058", 0x64}, {&(0x7f0000000380)="fc884a8b68fff7d0a17c9595f18b930a1e0e50b219cd9aacca6b60a2e112622cd628754ec2e4f8e94471f61da4e6347308c843716259e4fa9eecf91629e16a18bae2", 0x42}], 0x2, &(0x7f0000001640)=[{0xb8, 0x109, 0x3, "67712adc99a8ec963d1983974f086c269660130f4fca56fc6af08459cd07f5e7f45868119bba6f675fcdfea8ccb80f65052e041ff0e1e1d93719e7732632fef7c28699c95537b9abc4552f95fbde267e147470021406bbc492dc84ed9b400cd936e5c4804549766457a58293e805e2a117c585b1f187c88d9243ae4afba92176618eb328c9a0ee00afb9e6428e7f97bf4f98e43316d5683001b600c1bbce70d53d8294ab2e16ce"}, {0x20, 0x118, 0x14000, "482a443768bf77bfcda5ed6ad18a35"}, {0xc8, 0x112, 0x9, "8cf5c1630ea1e8089f2e64426878baa8fdc1260c4f8aa031b71a3710bc1b6a0cb4a0f5db5599d96bd1eadf01ab532369d02e41cbdca7be2d278d74d89fdad0c416ce55eba17782aba9528bce32dd96d4d70f432cacc81414867e78bdcd36427a2e27f6561875d32699699ecc5c9629544ebf7d642c14522832fbc183b53c79f01ced485c2a3db3bf37818c03dee68f8fb262fbe64b66db7702e8dfe0b9af54bb2bc4c680e6282a29cb3aa88e19298c2c4dac0d9219"}, {0x1010, 0x10e, 0x10001, "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"}, {0x108, 0x114, 0xff, "0efd35d1700027c0b2a61ff441a9ecb9aa12225bb9bc6214078d1103559085b4ceeca2bfdda5490b72f7437dc218362a2f845686f84af0403874bfa34fdef454feefa6025d14c31fb80de770a6d7d37dec17f87c9fbb19239f8c0cd003592f0bcff598bf90406275378d4b556eac34a01a44dc73ca9f04678fdd7cebd9d08ac31767322825f804ed447ce374d35a9ca51c716f654116ae827eaedbfc4cae495eaceb4ae723585c7ebfe4638effe4d40da3c092bbc48139f6770f33b64f53b5247cc10e6efecb1e0adcd39922063b1ee5b3abc1aa13d4ad9d4821da12ef02047b0ba16341a65566db3b4093a35bae6e4fd7402c7ed7c9af"}, {0x48, 0x119, 0x80000001, "492678d078fa555c1513c6b6b36de3443a534911e691c9cf24997b0a76cac58bac00d5bd0d6f3233c1de295e9f910e9b769e4a36"}], 0x1300}}], 0x1, 0x0) 767.66517ms ago: executing program 0 (id=718): socket(0x40000000015, 0x5, 0x0) (async) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$l2tp6(r0, &(0x7f0000000200)={0xa, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x12}, 0x200000, 0x2}, 0x20) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080), 0x0) shutdown(r1, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x3, @loopback, 0xfffffffc}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x3, @loopback, 0xfffffffc}, 0x1c) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x5, 0x0, 0x200, 0xfffffffffffffff8, 0x8001, 0x200}, {0xf, 0x4, 0x8, 0x3, 0x0, 0xc4c}], ['\x00', '\x00', '\x00']}) (async) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x5, 0x0, 0x200, 0xfffffffffffffff8, 0x8001, 0x200}, {0xf, 0x4, 0x8, 0x3, 0x0, 0xc4c}], ['\x00', '\x00', '\x00']}) 697.842125ms ago: executing program 3 (id=719): bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x3, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {0x2}, {}, {}, {0xffffffff, 0x4}, {}]}, @fwd, @volatile={0xc}, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}, {0x0, [0x5f]}}, 0x0, 0x97}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES16], 0x0, 0x26}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x10001, 0x8}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000003c0)='reno', 0x4) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000380)="a5121f84d648e169") r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400"], 0x0, 0x34}, 0x28) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd701004000000040000000800090002"], 0x34}}, 0x20000034) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\t', @ANYRES16=r5, @ANYBLOB="00002cbd7000fcdbdf250600000005001200ff0000000c00100008000000000000000c0016000700000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x24000000) pipe(&(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d3000000000000009500"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40}, 0x94) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r9, &(0x7f00000000c0)=""/3, 0x3, 0x0, 0x0, 0x0) 697.340495ms ago: executing program 4 (id=720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) (async, rerun: 64) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0d40000000000000000000000000000000008000100544545000900020073797a32000000a3000b337bf6fd15000000000100000a"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80001040}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x3c}, @void, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8850}, 0x8c16ef5f8e08ca98) 595.597893ms ago: executing program 0 (id=721): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000380)=0x3, &(0x7f00000004c0)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f00000000c0)=@ethtool_gstrings={0x1b, 0x6}}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000040)="92d9c21b010300", 0x94}], 0x1) r6 = socket(0x10, 0x803, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth1_to_hsr\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0xe, 0x10}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xa, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r11, 0x84, 0x7, &(0x7f0000000100)={0x5}, 0x4) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, &(0x7f0000000540), 0x6c}, 0x38) sendto$inet6(r11, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000048}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x80, 0x0, 0xfffffcc6, &(0x7f0000000600)=ANY=[@ANYRESOCT=r8], 0x10b8}, 0x200008c0) syz_emit_ethernet(0x7a, &(0x7f0000000680)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "76db40", 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0xfffc}, {}, {}, {0x8, 0x88be, 0x4, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x2, {0x8, 0x1}}}}}}}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000024000100e5ff0000000000000000000000000600e900ff00cdf5d4913ebaad4fdc9a2db7a027ef8730d0"], 0x1c}}, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f00000000c0)) 578.93903ms ago: executing program 1 (id=722): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001000)={0xffffffffffffffff}) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x6) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x10000, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0x1, 0xffff}, {0x2, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8041}, 0x800) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_stats={0x1d, 0x1, [0x10]}}) 401.821817ms ago: executing program 4 (id=723): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x50) (async) listen(r0, 0x50) sendmsg$inet(r0, &(0x7f00000019c0)={&(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000380)="8cefbb785a23", 0x6}], 0x1}, 0x4000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x158, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x114, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x10}]}}}, {0x2c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x44, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x63}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x27}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xea}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_INNER_NUM={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x180}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x158, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x114, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x10}]}}}, {0x2c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x44, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x63}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x27}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xea}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_INNER_NUM={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x180}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='lp', 0x2) 390.798015ms ago: executing program 3 (id=724): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1e}}, &(0x7f0000000480)='GPL\x00'}, 0x80) 342.647088ms ago: executing program 2 (id=725): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 209.873127ms ago: executing program 4 (id=726): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4000000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0xfffe, &(0x7f0000000100)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a24001280110001006272696467655f736c617676000000000c00058006001f00d5000000140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) preadv(r4, &(0x7f0000000440)=[{&(0x7f0000000240)=""/249, 0xf9}, {&(0x7f0000000340)=""/243, 0xf3}], 0x2, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c0130"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 97.775084ms ago: executing program 3 (id=727): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x852, 0x8, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b3, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6c, 0x5, 0x0, 0xac, 0x7, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x7d3e, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x5288, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0x80000ec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x7fff, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x2, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb827, 0x100, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff9, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x1, 0x3, 0x9, 0xc, 0x7, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0xe, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x6, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xfffc, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0x6, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0xa, 0x59, 0xfff, 0x2, 0x101, 0x5f502dc5, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x5, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x8, 0x5, 0x1, 0xdbec, {0x8, 0x2, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000140)=0x1) 91.766135ms ago: executing program 1 (id=728): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000000)=0x60) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x2f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 0s ago: executing program 4 (id=729): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$rxrpc(0x21, 0x2, 0xa) listen(r1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x800, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.221' (ED25519) to the list of known hosts. [ 67.957040][ T5814] cgroup: Unknown subsys name 'net' [ 68.091647][ T5814] cgroup: Unknown subsys name 'cpuset' [ 68.100939][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.473769][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.515411][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.528323][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.747879][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.756222][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.764078][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.772327][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.780106][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.875106][ T5147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.884019][ T5147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.892521][ T5147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.901037][ T5147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.947413][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.955366][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.000276][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.009072][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.017405][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.018720][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.033885][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.042327][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.051702][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.069870][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.078509][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.082170][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.097714][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.116576][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.129014][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.138168][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.307864][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 72.532570][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.539986][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.547490][ T5824] bridge_slave_0: entered allmulticast mode [ 72.555608][ T5824] bridge_slave_0: entered promiscuous mode [ 72.596451][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.603965][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.611306][ T5824] bridge_slave_1: entered allmulticast mode [ 72.619002][ T5824] bridge_slave_1: entered promiscuous mode [ 72.672396][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.690274][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.821692][ T5824] team0: Port device team_slave_0 added [ 72.866395][ T5824] team0: Port device team_slave_1 added [ 72.933114][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 72.984375][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.991398][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.018785][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.062015][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.069332][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.095458][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.144378][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 73.157510][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 73.285088][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 73.323829][ T5824] hsr_slave_0: entered promiscuous mode [ 73.330340][ T5824] hsr_slave_1: entered promiscuous mode [ 73.356719][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.364035][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.371562][ T5838] bridge_slave_0: entered allmulticast mode [ 73.378687][ T5838] bridge_slave_0: entered promiscuous mode [ 73.387323][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.394554][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.401829][ T5838] bridge_slave_1: entered allmulticast mode [ 73.408990][ T5838] bridge_slave_1: entered promiscuous mode [ 73.505078][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.512756][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.520337][ T5830] bridge_slave_0: entered allmulticast mode [ 73.527294][ T5830] bridge_slave_0: entered promiscuous mode [ 73.536979][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.567680][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.575151][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.582555][ T5830] bridge_slave_1: entered allmulticast mode [ 73.589544][ T5830] bridge_slave_1: entered promiscuous mode [ 73.598461][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.612822][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.620084][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.627257][ T5836] bridge_slave_0: entered allmulticast mode [ 73.634779][ T5836] bridge_slave_0: entered promiscuous mode [ 73.684350][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.691605][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.699382][ T5836] bridge_slave_1: entered allmulticast mode [ 73.706301][ T5836] bridge_slave_1: entered promiscuous mode [ 73.781772][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.793255][ T5838] team0: Port device team_slave_0 added [ 73.812795][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.829283][ T5147] Bluetooth: hci0: command tx timeout [ 73.831070][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.846021][ T5838] team0: Port device team_slave_1 added [ 73.852199][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.859909][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.867140][ T5832] bridge_slave_0: entered allmulticast mode [ 73.874167][ T5832] bridge_slave_0: entered promiscuous mode [ 73.884233][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.933162][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.940763][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.948171][ T5832] bridge_slave_1: entered allmulticast mode [ 73.955816][ T5832] bridge_slave_1: entered promiscuous mode [ 73.988483][ T5147] Bluetooth: hci1: command tx timeout [ 74.018026][ T5836] team0: Port device team_slave_0 added [ 74.031788][ T5830] team0: Port device team_slave_0 added [ 74.052970][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.060288][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.086364][ T5147] Bluetooth: hci2: command tx timeout [ 74.086880][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.116994][ T5836] team0: Port device team_slave_1 added [ 74.124599][ T5830] team0: Port device team_slave_1 added [ 74.137891][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.144981][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.171139][ T5147] Bluetooth: hci3: command tx timeout [ 74.171586][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.190637][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.228434][ T5147] Bluetooth: hci4: command tx timeout [ 74.236087][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.271962][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.279371][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.305741][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.370351][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.377321][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.403933][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.415646][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.423115][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.449263][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.461891][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.468895][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.494851][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.517535][ T5832] team0: Port device team_slave_0 added [ 74.558719][ T5838] hsr_slave_0: entered promiscuous mode [ 74.564973][ T5838] hsr_slave_1: entered promiscuous mode [ 74.571297][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 74.577083][ T5838] Cannot create hsr debugfs directory [ 74.584617][ T5832] team0: Port device team_slave_1 added [ 74.638393][ T5830] hsr_slave_0: entered promiscuous mode [ 74.644767][ T5830] hsr_slave_1: entered promiscuous mode [ 74.651286][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 74.657195][ T5830] Cannot create hsr debugfs directory [ 74.716285][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.723467][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.749418][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.790990][ T5836] hsr_slave_0: entered promiscuous mode [ 74.797252][ T5836] hsr_slave_1: entered promiscuous mode [ 74.804275][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 74.810216][ T5836] Cannot create hsr debugfs directory [ 74.816463][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.823685][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.849827][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.938054][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.991444][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.003145][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.023300][ T5832] hsr_slave_0: entered promiscuous mode [ 75.029987][ T5832] hsr_slave_1: entered promiscuous mode [ 75.037483][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 75.043294][ T5832] Cannot create hsr debugfs directory [ 75.074081][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.385981][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.397240][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.407262][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.436017][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.531652][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.545182][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.555558][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.565814][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.617293][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.682927][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.725543][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.732952][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.743853][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.754590][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.764875][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.786574][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.799955][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.807159][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.909293][ T5147] Bluetooth: hci0: command tx timeout [ 75.916235][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.927700][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.939062][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.950376][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.973850][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.026274][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.045473][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.068700][ T5147] Bluetooth: hci1: command tx timeout [ 76.081795][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.088955][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.105211][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.112386][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.139575][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.149475][ T5147] Bluetooth: hci2: command tx timeout [ 76.230158][ T5147] Bluetooth: hci3: command tx timeout [ 76.278012][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.308477][ T5147] Bluetooth: hci4: command tx timeout [ 76.319994][ T3478] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.327131][ T3478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.370791][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.377951][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.425019][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.440908][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.466893][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.537438][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.557319][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.564741][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.576410][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.583605][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.597027][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.667984][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.720308][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.727465][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.755803][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.770748][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.777856][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.917103][ T5824] veth0_vlan: entered promiscuous mode [ 76.970417][ T5824] veth1_vlan: entered promiscuous mode [ 77.004793][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.042704][ T5838] veth0_vlan: entered promiscuous mode [ 77.074909][ T5838] veth1_vlan: entered promiscuous mode [ 77.144616][ T5824] veth0_macvtap: entered promiscuous mode [ 77.186141][ T5838] veth0_macvtap: entered promiscuous mode [ 77.215465][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.229293][ T5824] veth1_macvtap: entered promiscuous mode [ 77.250815][ T5838] veth1_macvtap: entered promiscuous mode [ 77.272699][ T5830] veth0_vlan: entered promiscuous mode [ 77.294018][ T5830] veth1_vlan: entered promiscuous mode [ 77.320554][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.342039][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.351841][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.364277][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.377787][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.406736][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.434615][ T5832] veth0_vlan: entered promiscuous mode [ 77.449886][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.474522][ T5830] veth0_macvtap: entered promiscuous mode [ 77.493209][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.505186][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.531092][ T5832] veth1_vlan: entered promiscuous mode [ 77.544045][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.554426][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.591749][ T5830] veth1_macvtap: entered promiscuous mode [ 77.613539][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.626912][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.703551][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.725524][ T4495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.733829][ T5832] veth0_macvtap: entered promiscuous mode [ 77.750352][ T4495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.786655][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.814315][ T5832] veth1_macvtap: entered promiscuous mode [ 77.832971][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.840176][ T1026] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.852870][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.883539][ T1026] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.895041][ T1026] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.911857][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.925996][ T1026] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.958557][ T1026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.966412][ T1026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.972325][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.982073][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.993150][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.995066][ T5147] Bluetooth: hci0: command tx timeout [ 78.023141][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.033050][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.058631][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.072096][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.103895][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.146497][ T5836] veth0_vlan: entered promiscuous mode [ 78.152213][ T5147] Bluetooth: hci1: command tx timeout [ 78.228944][ T5147] Bluetooth: hci2: command tx timeout [ 78.281014][ T5836] veth1_vlan: entered promiscuous mode [ 78.282263][ T5937] Bluetooth: MGMT ver 1.23 [ 78.292406][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.308853][ T5147] Bluetooth: hci3: command tx timeout [ 78.322321][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.345196][ T3478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.356211][ T5940] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 78.377466][ T5836] veth0_macvtap: entered promiscuous mode [ 78.388787][ T5147] Bluetooth: hci4: command tx timeout [ 78.395114][ T5836] veth1_macvtap: entered promiscuous mode [ 78.398004][ T3478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.459339][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.481957][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.508572][ T5943] netlink: 'syz.2.3': attribute type 16 has an invalid length. [ 78.510689][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.532397][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.541028][ T5943] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 78.563231][ T4495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.572719][ T4495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.623971][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.657249][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.717709][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.752129][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.059300][ T5965] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.087614][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.106843][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.163014][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'. [ 79.238026][ T5974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.259702][ T5974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.301512][ T5974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.321267][ T5974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.395385][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.424322][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.639278][ T5994] netlink: 56 bytes leftover after parsing attributes in process `syz.3.14'. [ 79.674059][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14'. [ 79.725839][ T5994] netlink: 31 bytes leftover after parsing attributes in process `syz.3.14'. [ 79.750049][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16'. [ 79.803054][ T5994] netlink: 'syz.3.14': attribute type 2 has an invalid length. [ 79.832355][ T5994] netlink: 31 bytes leftover after parsing attributes in process `syz.3.14'. [ 79.902155][ T6007] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 79.965185][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 79.983495][ T6007] netlink: 'syz.1.17': attribute type 1 has an invalid length. [ 80.000067][ T6008] netlink: 'syz.4.5': attribute type 30 has an invalid length. [ 80.070794][ T5147] Bluetooth: hci0: command tx timeout [ 80.133528][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 80.173670][ T6009] netlink: 'syz.4.5': attribute type 30 has an invalid length. [ 80.228555][ T5147] Bluetooth: hci1: command tx timeout [ 80.267827][ T6012] veth3: entered promiscuous mode [ 80.309506][ T5147] Bluetooth: hci2: command tx timeout [ 80.324309][ T3478] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.324327][ T6019] wg1 speed is unknown, defaulting to 1000 [ 80.382444][ T6019] wg1 speed is unknown, defaulting to 1000 [ 80.390244][ T5147] Bluetooth: hci3: command tx timeout [ 80.395822][ T3478] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.404798][ T3478] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.415695][ T3478] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.432477][ T6019] wg1 speed is unknown, defaulting to 1000 [ 80.441115][ T6029] syzkaller0: entered promiscuous mode [ 80.469061][ T5147] Bluetooth: hci4: command tx timeout [ 80.477024][ T6033] netlink: 92 bytes leftover after parsing attributes in process `syz.4.25'. [ 80.485853][ T6029] syzkaller0: entered allmulticast mode [ 80.496918][ T6019] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 80.553854][ T6019] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 80.755600][ T6042] Zero length message leads to an empty skb [ 80.757371][ T6019] wg1 speed is unknown, defaulting to 1000 [ 80.801866][ T6019] wg1 speed is unknown, defaulting to 1000 [ 80.810735][ T6019] wg1 speed is unknown, defaulting to 1000 [ 80.821374][ T6019] wg1 speed is unknown, defaulting to 1000 [ 80.830942][ T6019] wg1 speed is unknown, defaulting to 1000 [ 81.555488][ T6085] netlink: 'syz.2.39': attribute type 9 has an invalid length. [ 81.608950][ T6088] netlink: 'syz.2.39': attribute type 9 has an invalid length. [ 82.213434][ T6120] pimreg: entered allmulticast mode [ 82.443988][ T6130] tipc: Started in network mode [ 82.499549][ T6130] tipc: Node identity ac14140f, cluster identity 4711 [ 82.506850][ T6130] tipc: New replicast peer: 255.255.255.255 [ 82.532663][ T6130] tipc: Enabled bearer , priority 10 [ 82.641604][ T6134] xt_hashlimit: max too large, truncated to 1048576 [ 82.957990][ T6151] netlink: 'syz.2.59': attribute type 2 has an invalid length. [ 83.649463][ T5907] tipc: Node number set to 2886997007 [ 83.779360][ T6194] warning: `syz.0.72' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.817883][ T6194] bond1: entered allmulticast mode [ 83.826008][ T6194] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.054974][ T6194] bond1 (unregistering): Released all slaves [ 84.574881][ T6224] sctp: [Deprecated]: syz.2.76 (pid 6224) Use of struct sctp_assoc_value in delayed_ack socket option. [ 84.574881][ T6224] Use struct sctp_sack_info instead [ 84.957460][ T6252] netlink: 'syz.1.84': attribute type 4 has an invalid length. [ 85.116329][ T6262] ieee802154 phy0 wpan0: encryption failed: -22 [ 85.172941][ T6262] netlink: 'syz.0.85': attribute type 11 has an invalid length. [ 85.198356][ T6262] __nla_validate_parse: 7 callbacks suppressed [ 85.198373][ T6262] netlink: 224 bytes leftover after parsing attributes in process `syz.0.85'. [ 85.340516][ T6273] x_tables: unsorted entry at hook 2 [ 85.465382][ T6282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 85.489703][ T6282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 85.515377][ T6286] netlink: 184 bytes leftover after parsing attributes in process `syz.1.96'. [ 85.546405][ T6286] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.96'. [ 85.576567][ T6286] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 85.727080][ T6294] syzkaller0: entered promiscuous mode [ 85.756314][ T6294] syzkaller0: entered allmulticast mode [ 85.846888][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 85.896542][ T6298] bond1: option xmit_hash_policy: invalid value (64) [ 85.905094][ T6298] bond1 (unregistering): Released all slaves [ 85.924621][ T6309] netlink: 132 bytes leftover after parsing attributes in process `syz.2.100'. [ 85.937689][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'. [ 85.949843][ T6309] netlink: 44 bytes leftover after parsing attributes in process `syz.2.100'. [ 86.080324][ T6314] nbd0: detected capacity change from 0 to 127 [ 86.099147][ T5147] block nbd0: Receive control failed (result -32) [ 86.108221][ T5841] block nbd0: Send control failed (result -32) [ 86.138698][ T5841] block nbd0: Request send failed, requeueing [ 86.159740][ T96] block nbd0: Dead connection, failed to find a fallback [ 86.167068][ T96] block nbd0: shutting down sockets [ 86.172948][ T96] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 86.184200][ T96] Buffer I/O error on dev nbd0, logical block 0, async page read [ 86.188474][ T5841] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 86.224903][ T5841] Buffer I/O error on dev nbd0, logical block 1, async page read [ 86.234820][ T5841] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 86.246486][ T5841] Buffer I/O error on dev nbd0, logical block 2, async page read [ 86.254795][ T5841] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 86.265069][ T5841] Buffer I/O error on dev nbd0, logical block 3, async page read [ 86.276581][ T5841] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 86.287178][ T5841] Buffer I/O error on dev nbd0, logical block 0, async page read [ 86.294796][ T6322] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 86.295816][ T5841] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 86.328422][ T5841] Buffer I/O error on dev nbd0, logical block 1, async page read [ 86.336846][ T5841] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 86.344086][ T6322] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 86.346884][ T5841] Buffer I/O error on dev nbd0, logical block 2, async page read [ 86.363154][ T5841] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 86.373448][ T5841] Buffer I/O error on dev nbd0, logical block 3, async page read [ 86.383247][ T5841] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 86.395483][ T5841] Buffer I/O error on dev nbd0, logical block 0, async page read [ 86.404964][ T5841] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 86.415235][ T5841] Buffer I/O error on dev nbd0, logical block 1, async page read [ 86.429951][ T5841] ldm_validate_partition_table(): Disk read failed. [ 86.443984][ T6326] gre0: entered promiscuous mode [ 86.448894][ T5841] Dev nbd0: unable to read RDB block 0 [ 86.449676][ T6326] gre0: entered allmulticast mode [ 86.456508][ T5841] nbd0: unable to read partition table [ 86.515896][ T5841] ldm_validate_partition_table(): Disk read failed. [ 86.537740][ T6328] netlink: 'syz.3.108': attribute type 1 has an invalid length. [ 86.571411][ T5841] Dev nbd0: unable to read RDB block 0 [ 86.579907][ T5841] nbd0: unable to read partition table [ 86.695723][ T6335] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 86.857110][ T6337] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 86.866317][ T6337] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 86.871708][ T6348] netlink: 'syz.4.114': attribute type 18 has an invalid length. [ 86.903715][ T89] cfg80211: failed to load regulatory.db [ 86.919693][ T6347] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.113'. [ 86.949819][ T6347] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 87.058439][ T6344] syzkaller1: entered promiscuous mode [ 87.065909][ T6344] syzkaller1: entered allmulticast mode [ 87.149350][ T6363] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.214800][ T6360] netlink: 'syz.3.115': attribute type 6 has an invalid length. [ 87.293448][ T6371] netlink: 'syz.0.119': attribute type 1 has an invalid length. [ 87.303249][ T6370] veth3: entered allmulticast mode [ 87.310629][ T6371] netlink: 'syz.0.119': attribute type 2 has an invalid length. [ 87.321820][ T6372] netlink: 'syz.0.119': attribute type 1 has an invalid length. [ 87.344217][ T6374] netlink: 'syz.2.120': attribute type 1 has an invalid length. [ 87.351923][ T6372] netlink: 'syz.0.119': attribute type 2 has an invalid length. [ 87.629872][ T6391] netlink: 'syz.3.121': attribute type 1 has an invalid length. [ 87.841917][ T6391] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.976494][ T6398] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.983720][ T6398] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 87.997673][ T6398] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 88.014220][ T6379] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 88.097368][ T6414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.278337][ T6414] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 88.301362][ T6413] delete_channel: no stack [ 88.355040][ T6433] bridge0: port 3(team0) entered blocking state [ 88.361591][ T6433] bridge0: port 3(team0) entered disabled state [ 88.368058][ T6433] team0: entered allmulticast mode [ 88.373390][ T6433] team_slave_0: entered allmulticast mode [ 88.386637][ T6433] team_slave_1: entered allmulticast mode [ 88.422740][ T6433] team0: entered promiscuous mode [ 88.462663][ T6433] team_slave_0: entered promiscuous mode [ 88.511527][ T6433] team_slave_1: entered promiscuous mode [ 88.519036][ T6433] bridge0: port 3(team0) entered blocking state [ 88.525541][ T6433] bridge0: port 3(team0) entered forwarding state [ 88.690647][ T6445] tipc: Enabling of bearer rejected, failed to enable media [ 88.755158][ T6452] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 88.802428][ T6450] 8021q: adding VLAN 0 to HW filter on device bond3 [ 88.827249][ T6450] bond2: (slave bond3): making interface the new active one [ 88.855185][ T6450] bond2: (slave bond3): Enslaving as an active interface with an up link [ 88.871487][ T6456] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 88.884159][ T6456] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 89.023155][ T6463] bond2: entered promiscuous mode [ 89.031019][ T6463] bond2: entered allmulticast mode [ 89.036844][ T6463] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.133414][ T6478] Bluetooth: MGMT ver 1.23 [ 89.339825][ T6492] openvswitch: netlink: Missing key (keys=40, expected=80) [ 89.399129][ T6489] bond3: option miimon: invalid value (18446744073709551585) [ 89.407532][ T6489] bond3: option miimon: allowed values 0 - 2147483647 [ 89.434039][ T6489] bond3 (unregistering): Released all slaves [ 89.980096][ T6525] gretap1: entered promiscuous mode [ 90.005661][ T6525] bond1: (slave gretap1): making interface the new active one [ 90.016924][ T6525] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 90.052949][ T6529] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 90.076382][ T6529] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 90.110782][ T6529] gretap2: entered promiscuous mode [ 90.132104][ T6529] gretap2: entered allmulticast mode [ 90.183678][ T6544] xt_TCPMSS: Only works on TCP SYN packets [ 90.233046][ T6513] bond1: entered promiscuous mode [ 90.259363][ T6513] macvlan3: entered promiscuous mode [ 90.267078][ T6513] macvlan3: entered allmulticast mode [ 90.273771][ T6513] bond1: entered allmulticast mode [ 90.280553][ T6513] gretap1: entered allmulticast mode [ 90.287540][ T6513] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 90.301709][ T6513] bond1: left promiscuous mode [ 90.970252][ T6595] validate_nla: 5 callbacks suppressed [ 90.970270][ T6595] netlink: 'syz.4.167': attribute type 11 has an invalid length. [ 91.830436][ T6592] netlink: 'syz.1.168': attribute type 1 has an invalid length. [ 91.838120][ T6592] netlink: 'syz.1.168': attribute type 7 has an invalid length. [ 91.851523][ T6592] netlink: 'syz.1.168': attribute type 8 has an invalid length. [ 91.887383][ T6592] __nla_validate_parse: 8 callbacks suppressed [ 91.887400][ T6592] netlink: 208 bytes leftover after parsing attributes in process `syz.1.168'. [ 91.927267][ T6592] NCSI netlink: No device for ifindex 65584 [ 92.265439][ T6622] netlink: 84 bytes leftover after parsing attributes in process `syz.1.175'. [ 92.639248][ T6646] netlink: 20 bytes leftover after parsing attributes in process `syz.4.181'. [ 92.754316][ T6649] netlink: 104 bytes leftover after parsing attributes in process `syz.4.183'. [ 92.786044][ T6650] netlink: 104 bytes leftover after parsing attributes in process `syz.4.183'. [ 92.912654][ T6653] netlink: 28 bytes leftover after parsing attributes in process `syz.1.185'. [ 92.980574][ T6663] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 93.123757][ T6669] netlink: 96 bytes leftover after parsing attributes in process `syz.0.190'. [ 93.155788][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'. [ 93.216527][ T6672] sit0: entered promiscuous mode [ 93.250053][ T6672] netlink: 'syz.3.191': attribute type 1 has an invalid length. [ 93.266074][ T6672] netlink: 1 bytes leftover after parsing attributes in process `syz.3.191'. [ 93.424633][ T6691] sock: sock_set_timeout: `syz.4.196' (pid 6691) tries to set negative timeout [ 93.459779][ T6688] nbd4: detected capacity change from 0 to 63 [ 93.477314][ T5147] block nbd4: Receive control failed (result -104) [ 93.665046][ T6701] SET target dimension over the limit! [ 93.713814][ T6705] trusted_key: syz.0.203 sent an empty control message without MSG_MORE. [ 94.433665][ T6759] tipc: Started in network mode [ 94.469807][ T6759] tipc: Node identity ac14140f, cluster identity 4711 [ 94.491746][ T6759] tipc: New replicast peer: 255.255.255.255 [ 94.505934][ T6759] tipc: Enabled bearer , priority 10 [ 94.556608][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.216'. [ 94.574667][ T6769] netlink: 'syz.1.219': attribute type 5 has an invalid length. [ 95.263004][ T6804] netlink: 'syz.4.229': attribute type 1 has an invalid length. [ 95.439379][ T6824] netlink: 'syz.1.231': attribute type 1 has an invalid length. [ 95.546308][ T6830] netlink: 'syz.3.233': attribute type 33 has an invalid length. [ 95.583828][ T6833] netlink: 'syz.1.231': attribute type 21 has an invalid length. [ 96.567312][ T6824] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 96.587149][ T5827] tipc: Node number set to 2886997007 [ 96.850609][ T6858] x_tables: duplicate underflow at hook 1 [ 97.092722][ T6872] __nla_validate_parse: 9 callbacks suppressed [ 97.092738][ T6872] netlink: 1 bytes leftover after parsing attributes in process `syz.3.245'. [ 97.115195][ T6870] netlink: 'syz.0.243': attribute type 10 has an invalid length. [ 97.148519][ T6870] netlink: 40 bytes leftover after parsing attributes in process `syz.0.243'. [ 97.197618][ T6878] netlink: zone id is out of range [ 97.215946][ T6870] team0: Port device geneve0 added [ 97.222055][ T6878] netlink: set zone limit has 4 unknown bytes [ 97.333564][ T6883] netlink: 284 bytes leftover after parsing attributes in process `syz.1.247'. [ 97.502200][ T6894] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 97.526835][ T6894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.617136][ T6900] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 97.641856][ T6899] netlink: 164 bytes leftover after parsing attributes in process `syz.2.252'. [ 97.667814][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'. [ 97.699235][ T6904] netlink: 'syz.1.254': attribute type 83 has an invalid length. [ 97.770401][ T6906] delete_channel: no stack [ 97.811942][ T6908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.256'. [ 98.065704][ T6919] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 98.147571][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.261'. [ 98.323909][ T6945] netlink: 'syz.1.265': attribute type 1 has an invalid length. [ 98.351281][ T6945] netlink: 224 bytes leftover after parsing attributes in process `syz.1.265'. [ 98.739772][ T6974] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 98.750382][ T6973] netlink: 84 bytes leftover after parsing attributes in process `syz.2.273'. [ 98.788956][ T6974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.791647][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.273'. [ 98.828964][ T6981] team0: Device gtp0 is of different type [ 99.068725][ T6995] sctp: [Deprecated]: syz.3.281 (pid 6995) Use of struct sctp_assoc_value in delayed_ack socket option. [ 99.068725][ T6995] Use struct sctp_sack_info instead [ 99.172051][ T6999] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 99.188117][ T6999] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 99.214257][ T6999] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 99.365117][ T7017] netlink: 'syz.3.286': attribute type 1 has an invalid length. [ 99.375083][ T7017] netlink: 'syz.3.286': attribute type 1 has an invalid length. [ 99.563391][ T7032] netlink: 'syz.2.291': attribute type 1 has an invalid length. [ 99.694969][ T7032] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.780906][ T6991] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 100.121554][ T7068] tipc: Started in network mode [ 100.138494][ T7068] tipc: Node identity 2eca56ce8a16, cluster identity 4711 [ 100.147446][ T7068] tipc: Enabled bearer , priority 0 [ 100.343989][ T7067] tipc: Disabling bearer [ 100.766337][ T7107] netlink: 'syz.3.311': attribute type 1 has an invalid length. [ 100.810507][ T7110] Bluetooth: MGMT ver 1.23 [ 100.850407][ T7116] netlink: 'syz.2.314': attribute type 1 has an invalid length. [ 100.894852][ T7116] bond2: (slave gretap1): making interface the new active one [ 100.903415][ T7116] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 100.964458][ T7122] IPVS: set_ctl: invalid protocol: 4 100.1.1.2:20002 [ 101.748532][ T7184] tipc: Started in network mode [ 101.758348][ T7184] tipc: Node identity 1e83ae4d3df5, cluster identity 4711 [ 101.776065][ T7184] tipc: Enabled bearer , priority 0 [ 101.795630][ T7184] syzkaller0: entered promiscuous mode [ 101.807872][ T7184] syzkaller0: entered allmulticast mode [ 101.839344][ T7183] tipc: Resetting bearer [ 101.907592][ T7183] tipc: Disabling bearer [ 102.136832][ T7209] vlan2: entered promiscuous mode [ 102.152549][ T7209] vlan2: entered allmulticast mode [ 102.163777][ T7209] hsr_slave_1: entered allmulticast mode [ 102.258935][ T7212] wg1 speed is unknown, defaulting to 1000 [ 102.282883][ T7209] wg1 speed is unknown, defaulting to 1000 [ 102.769098][ T7233] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 102.816026][ T7240] __nla_validate_parse: 9 callbacks suppressed [ 102.816043][ T7240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.350'. [ 102.875516][ T5835] Bluetooth: hci2: command 0x0401 tx timeout [ 102.888459][ T5147] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 103.054635][ T7249] netlink: 48 bytes leftover after parsing attributes in process `syz.0.353'. [ 103.064265][ T7249] netlink: 48 bytes leftover after parsing attributes in process `syz.0.353'. [ 103.077186][ T7250] netlink: 48 bytes leftover after parsing attributes in process `syz.0.353'. [ 103.217734][ T7250] netlink: 48 bytes leftover after parsing attributes in process `syz.0.353'. [ 103.469052][ T7272] netlink: 'syz.3.358': attribute type 8 has an invalid length. [ 103.538735][ T7272] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.547125][ T7272] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.734788][ T7285] netlink: 'syz.3.361': attribute type 11 has an invalid length. [ 103.778635][ T7288] netlink: 'syz.3.361': attribute type 11 has an invalid length. [ 103.975634][ T7296] netem: incorrect ge model size [ 103.996528][ T7296] netem: change failed [ 104.285906][ T7318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.369'. [ 104.441707][ T7320] netlink: 'syz.1.370': attribute type 1 has an invalid length. [ 104.462854][ T7322] netlink: 'syz.0.371': attribute type 83 has an invalid length. [ 104.752851][ T7337] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 104.759582][ T7337] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 104.875149][ T7345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.379'. [ 104.958034][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'. [ 105.260754][ T7365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.385'. [ 105.282372][ T7365] netlink: 24 bytes leftover after parsing attributes in process `syz.3.385'. [ 105.547936][ T7382] tipc: Enabling of bearer rejected, failed to enable media [ 105.740109][ T7396] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 106.722952][ T7450] netlink: 'syz.1.407': attribute type 1 has an invalid length. [ 106.850764][ T7459] bond3: (slave geneve2): making interface the new active one [ 106.879841][ T7459] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 106.901623][ T1026] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 106.939963][ T1026] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 106.960231][ T1026] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 106.994901][ T7465] gretap1: entered promiscuous mode [ 107.043614][ T1026] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 107.157179][ T7480] netlink: 'syz.3.417': attribute type 1 has an invalid length. [ 107.234452][ T7480] 8021q: adding VLAN 0 to HW filter on device bond5 [ 107.308625][ T7486] bond5: (slave veth3): Enslaving as an active interface with a down link [ 107.387840][ T7495] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 107.422623][ T7495] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 107.770839][ T7513] bond2: option all_slaves_active: invalid value (222) [ 107.797618][ T7513] bond2 (unregistering): Released all slaves [ 107.865692][ T7519] macvtap1: entered promiscuous mode [ 107.872986][ T7519] vlan0: entered promiscuous mode [ 107.879327][ T7519] macvtap1: entered allmulticast mode [ 107.884819][ T7519] vlan0: entered allmulticast mode [ 107.894171][ T7519] veth0_vlan: entered allmulticast mode [ 107.956265][ T7526] macvtap2: entered promiscuous mode [ 107.972697][ T7526] macvtap2: entered allmulticast mode [ 108.263108][ T7547] bridge0: port 3(ipvlan3) entered blocking state [ 108.278758][ T7547] bridge0: port 3(ipvlan3) entered disabled state [ 108.289590][ T7547] ipvlan3: entered allmulticast mode [ 108.294924][ T7547] bridge0: entered allmulticast mode [ 108.306343][ T7547] ipvlan3: left allmulticast mode [ 108.312227][ T7547] bridge0: left allmulticast mode [ 108.355823][ T7549] ipt_REJECT: TCP_RESET invalid for non-tcp [ 108.373238][ T7549] __nla_validate_parse: 9 callbacks suppressed [ 108.373255][ T7549] netlink: 288 bytes leftover after parsing attributes in process `syz.2.439'. [ 108.479545][ T7561] netlink: 'syz.3.443': attribute type 12 has an invalid length. [ 108.487406][ T7561] netlink: 132 bytes leftover after parsing attributes in process `syz.3.443'. [ 108.687679][ T7577] netlink: 'syz.4.448': attribute type 2 has an invalid length. [ 108.699074][ T7576] xt_TCPMSS: Only works on TCP SYN packets [ 108.700179][ T7566] netlink: 28 bytes leftover after parsing attributes in process `syz.3.446'. [ 108.707053][ T7577] netlink: 40 bytes leftover after parsing attributes in process `syz.4.448'. [ 108.791177][ T7579] netlink: 'syz.4.448': attribute type 2 has an invalid length. [ 108.807037][ T7577] netlink: 40 bytes leftover after parsing attributes in process `syz.4.448'. [ 108.900925][ T7587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.451'. [ 108.968769][ T7590] netlink: 48 bytes leftover after parsing attributes in process `syz.1.449'. [ 109.027242][ T7596] netlink: 24 bytes leftover after parsing attributes in process `syz.4.452'. [ 109.288408][ T7607] netlink: 20 bytes leftover after parsing attributes in process `syz.3.455'. [ 109.341391][ T7610] netlink: 'syz.1.457': attribute type 2 has an invalid length. [ 109.352441][ T7610] netlink: 'syz.1.457': attribute type 1 has an invalid length. [ 109.361107][ T7610] netlink: 'syz.1.457': attribute type 2 has an invalid length. [ 109.382246][ T7611] netlink: 112 bytes leftover after parsing attributes in process `syz.2.458'. [ 109.771784][ T7641] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 109.830073][ T7644] bond0: option ad_select: unable to set because the bond device is up [ 109.842047][ T7644] netlink: 'syz.1.471': attribute type 33 has an invalid length. [ 109.891935][ T7644] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 109.920554][ T7644] bond4 (unregistering): Released all slaves [ 109.933137][ T7657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.767115][ T7732] netlink: 'syz.0.493': attribute type 1 has an invalid length. [ 110.786272][ T7734] netlink: 'syz.1.494': attribute type 4 has an invalid length. [ 110.856292][ T7662] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 110.935733][ T7742] tipc: Enabled bearer , priority 0 [ 110.946911][ T7742] syzkaller0: entered promiscuous mode [ 110.952849][ T7742] syzkaller0: entered allmulticast mode [ 110.976011][ T7742] tipc: Resetting bearer [ 110.985914][ T7741] tipc: Resetting bearer [ 111.001978][ T7741] tipc: Disabling bearer [ 111.040747][ T7754] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 111.408111][ T7778] xt_NFQUEUE: number of total queues is 0 [ 111.613949][ T7785] syzkaller0: entered promiscuous mode [ 111.625084][ T7785] syzkaller0: entered allmulticast mode [ 112.018147][ T7819] gtp1: entered promiscuous mode [ 112.025131][ T7819] gtp1: entered allmulticast mode [ 112.127001][ T7820] bond2: entered promiscuous mode [ 112.134125][ T7820] bond2: entered allmulticast mode [ 112.139777][ T7820] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.148905][ T7826] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 112.183676][ T7834] IPv6: addrconf: prefix option has invalid lifetime [ 112.445793][ T7854] netlink: 'syz.2.529': attribute type 14 has an invalid length. [ 113.305863][ T7888] vlan2: entered promiscuous mode [ 113.328932][ T7888] bridge0: entered promiscuous mode [ 113.482658][ T7899] veth0: entered promiscuous mode [ 113.492900][ T7898] veth0: left promiscuous mode [ 113.502370][ T7904] __nla_validate_parse: 22 callbacks suppressed [ 113.502386][ T7904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.542'. [ 113.723455][ T7920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.547'. [ 113.979342][ T7934] netlink: 'syz.4.552': attribute type 1 has an invalid length. [ 114.030101][ T7938] netlink: 'syz.1.554': attribute type 1 has an invalid length. [ 114.040529][ T7940] netlink: 36 bytes leftover after parsing attributes in process `syz.0.555'. [ 114.150335][ T7945] tipc: Enabling of bearer rejected, failed to enable media [ 114.229503][ T7951] netlink: 56 bytes leftover after parsing attributes in process `syz.3.558'. [ 114.263692][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.560'. [ 114.274508][ T7954] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 114.292946][ T7954] netlink: 184 bytes leftover after parsing attributes in process `syz.1.560'. [ 114.316700][ T7956] dvmrp1: entered allmulticast mode [ 114.428399][ T7966] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 114.682108][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.569'. [ 114.691852][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.569'. [ 114.742206][ T7991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.572'. [ 114.872060][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'. [ 115.099219][ T8010] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 115.126328][ T8010] bond3: (slave lo): Enslaving as a backup interface with an up link [ 115.137513][ T8010] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 115.169612][ T8021] netlink: 'syz.0.582': attribute type 24 has an invalid length. [ 115.222495][ T8022] wg1 speed is unknown, defaulting to 1000 [ 115.265007][ T8025] xt_bpf: check failed: parse error [ 115.393747][ T8030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.431564][ T8030] bond0: (slave rose0): Enslaving as an active interface with an up link [ 115.574293][ T30] audit: type=1804 audit(1763351255.239:2): pid=8043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.588" name="/newroot/113/cgroup.controllers" dev="tmpfs" ino=594 res=1 errno=0 [ 115.588675][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 115.619167][ T30] audit: type=1800 audit(1763351255.239:3): pid=8043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.588" name="cgroup.controllers" dev="tmpfs" ino=594 res=0 errno=0 [ 116.247963][ T8076] netlink: 'syz.1.594': attribute type 1 has an invalid length. [ 116.367676][ T8076] 8021q: adding VLAN 0 to HW filter on device bond4 [ 116.444959][ T8078] veth3: entered promiscuous mode [ 116.455350][ T8078] bond4: (slave veth3): Enslaving as an active interface with an up link [ 116.465658][ T8091] netlink: 'syz.2.597': attribute type 23 has an invalid length. [ 116.550452][ T8083] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 116.567738][ T8083] bond3 (unregistering): Released all slaves [ 116.728955][ T8107] netlink: 'syz.4.601': attribute type 1 has an invalid length. [ 116.782023][ T8107] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 116.796996][ T8107] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 116.830657][ T8113] macvlan3: entered promiscuous mode [ 116.836239][ T8113] macvlan3: entered allmulticast mode [ 116.842314][ T8113] bond2: entered promiscuous mode [ 116.847943][ T8113] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 116.858120][ T8113] bond2: left promiscuous mode [ 117.850209][ T8146] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.857871][ T8146] IPv6: NLM_F_CREATE should be set when creating new route [ 117.865174][ T8146] IPv6: NLM_F_CREATE should be set when creating new route [ 117.903892][ T8146] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 118.017443][ T8165] syz.2.619: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 118.040125][ T8165] CPU: 0 UID: 0 PID: 8165 Comm: syz.2.619 Not tainted syzkaller #0 PREEMPT(full) [ 118.040152][ T8165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 118.040168][ T8165] Call Trace: [ 118.040178][ T8165] [ 118.040187][ T8165] dump_stack_lvl+0x189/0x250 [ 118.040216][ T8165] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 118.040244][ T8165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.040265][ T8165] ? __pfx__printk+0x10/0x10 [ 118.040291][ T8165] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 118.040315][ T8165] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 118.040344][ T8165] warn_alloc+0x214/0x310 [ 118.040368][ T8165] ? stack_depot_save_flags+0x40/0x860 [ 118.040397][ T8165] ? __pfx_warn_alloc+0x10/0x10 [ 118.040422][ T8165] ? kasan_save_track+0x3e/0x80 [ 118.040445][ T8165] ? __kasan_kmalloc+0x93/0xb0 [ 118.040469][ T8165] ? xsk_setsockopt+0x4dc/0x8d0 [ 118.040488][ T8165] ? do_sock_setsockopt+0x17c/0x1b0 [ 118.040503][ T8165] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 118.040517][ T8165] ? do_syscall_64+0xfa/0xfa0 [ 118.040539][ T8165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.040565][ T8165] __vmalloc_node_range_noprof+0x125/0x12d0 [ 118.040614][ T8165] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 118.040639][ T8165] ? __kasan_kmalloc+0x93/0xb0 [ 118.040666][ T8165] vmalloc_user_noprof+0xad/0xf0 [ 118.040690][ T8165] ? xskq_create+0xbf/0x170 [ 118.040712][ T8165] xskq_create+0xbf/0x170 [ 118.040737][ T8165] xsk_init_queue+0xb0/0x110 [ 118.040758][ T8165] xsk_setsockopt+0x4dc/0x8d0 [ 118.040782][ T8165] ? __pfx_xsk_setsockopt+0x10/0x10 [ 118.040806][ T8165] ? __pfx_aa_sk_perm+0x10/0x10 [ 118.040832][ T8165] ? aa_sock_opt_perm+0xff/0x1b0 [ 118.040858][ T8165] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 118.040873][ T8165] ? __pfx_xsk_setsockopt+0x10/0x10 [ 118.040899][ T8165] do_sock_setsockopt+0x17c/0x1b0 [ 118.040922][ T8165] __x64_sys_setsockopt+0x13f/0x1b0 [ 118.040946][ T8165] do_syscall_64+0xfa/0xfa0 [ 118.040969][ T8165] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.040992][ T8165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.041009][ T8165] ? clear_bhb_loop+0x60/0xb0 [ 118.041026][ T8165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.041043][ T8165] RIP: 0033:0x7f083698f6c9 [ 118.041059][ T8165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.041073][ T8165] RSP: 002b:00007f08378af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 118.041093][ T8165] RAX: ffffffffffffffda RBX: 00007f0836be6090 RCX: 00007f083698f6c9 [ 118.041106][ T8165] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 118.041117][ T8165] RBP: 00007f0836a11f91 R08: 0000000000000004 R09: 0000000000000000 [ 118.041127][ T8165] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.041137][ T8165] R13: 00007f0836be6128 R14: 00007f0836be6090 R15: 00007ffe31d629d8 [ 118.041164][ T8165] [ 118.041246][ T8165] Mem-Info: [ 118.131312][ T8166] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 118.135749][ T8165] active_anon:4794 inactive_anon:0 isolated_anon:0 [ 118.135749][ T8165] active_file:2374 inactive_file:39889 isolated_file:0 [ 118.135749][ T8165] unevictable:768 dirty:68 writeback:0 [ 118.135749][ T8165] slab_reclaimable:11233 slab_unreclaimable:96066 [ 118.135749][ T8165] mapped:29943 shmem:1354 pagetables:927 [ 118.135749][ T8165] sec_pagetables:0 bounce:0 [ 118.135749][ T8165] kernel_misc_reclaimable:0 [ 118.135749][ T8165] free:1330003 free_pcp:21182 free_cma:0 [ 118.394076][ T8165] Node 0 active_anon:19176kB inactive_anon:0kB active_file:9496kB inactive_file:159348kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119772kB dirty:268kB writeback:0kB shmem:3880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11888kB pagetables:3648kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 118.427793][ T8165] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 118.458006][ T8165] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 118.495802][ T8165] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 118.504340][ T8165] Node 0 DMA32 free:1417588kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19176kB inactive_anon:0kB active_file:9496kB inactive_file:159348kB unevictable:1536kB writepending:268kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:64248kB local_pcp:43512kB free_cma:0kB [ 118.544285][ T8165] lowmem_reserve[]: 0 0 0 0 0 [ 118.549122][ T8165] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 118.578592][ T8165] lowmem_reserve[]: 0 0 0 0 0 [ 118.583331][ T8165] Node 1 Normal free:3886864kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19028kB local_pcp:11860kB free_cma:0kB [ 118.617571][ T8165] lowmem_reserve[]: 0 0 0 0 0 [ 118.622404][ T8165] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 118.635364][ T8165] Node 0 DMA32: 1031*4kB (UME) 540*8kB (UME) 309*16kB (UME) 689*32kB (UME) 182*64kB (UME) 42*128kB (UME) 28*256kB (UM) 14*512kB (UM) 15*1024kB (UME) 10*2048kB (UME) 321*4096kB (UM) = 1417452kB [ 118.655698][ T8165] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 118.667323][ T8165] Node 1 Normal: 2*4kB (UM) 47*8kB (UME) 45*16kB (UME) 52*32kB (UME) 17*64kB (UME) 8*128kB (UME) 4*256kB (ME) 4*512kB (UME) 4*1024kB (UME) 0*2048kB 946*4096kB (M) = 3886864kB [ 118.685230][ T8165] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 118.695540][ T8165] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 118.705048][ T8165] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 118.715030][ T8165] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 118.725669][ T8165] 43614 total pagecache pages [ 118.730487][ T8165] 0 pages in swap cache [ 118.734645][ T8165] Free swap = 124996kB [ 118.739247][ T8165] Total swap = 124996kB [ 118.790736][ T8165] 2097051 pages RAM [ 118.794661][ T8165] 0 pages HighMem/MovableOnly [ 118.804906][ T8165] 424119 pages reserved [ 118.812972][ T8165] 0 pages cma reserved [ 118.865315][ T8177] __nla_validate_parse: 4 callbacks suppressed [ 118.865333][ T8177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.623'. [ 118.889316][ T8176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.622'. [ 119.101499][ T5900] IPVS: starting estimator thread 0... [ 119.258408][ T8204] IPVS: using max 35 ests per chain, 84000 per kthread [ 119.283491][ T8211] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 119.337361][ T8212] netlink: 220 bytes leftover after parsing attributes in process `syz.4.632'. [ 119.571297][ T8233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.637'. [ 119.662072][ T8233] bridge1: port 1(veth5) entered blocking state [ 119.679153][ T8233] bridge1: port 1(veth5) entered disabled state [ 119.695314][ T8233] veth5: entered allmulticast mode [ 119.719833][ T8233] veth5: entered promiscuous mode [ 119.746312][ T8240] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 119.780939][ T8242] bridge1: port 2(veth7) entered blocking state [ 119.803213][ T8242] bridge1: port 2(veth7) entered disabled state [ 119.818799][ T8242] veth7: entered allmulticast mode [ 119.831263][ T8242] veth7: entered promiscuous mode [ 120.003634][ T8259] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 120.085038][ T8259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.641'. [ 120.238786][ T8274] netlink: 'syz.0.646': attribute type 1 has an invalid length. [ 120.367135][ T8274] 8021q: adding VLAN 0 to HW filter on device bond3 [ 120.424122][ T8277] bond3: (slave ip6gretap1): making interface the new active one [ 120.434851][ T8277] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 120.911409][ T8322] team0: Device ip6gre1 is of different type [ 120.956280][ T8323] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 121.069672][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.663'. [ 121.078964][ T8325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.663'. [ 121.101853][ T8325] netlink: 'syz.2.663': attribute type 12 has an invalid length. [ 121.450014][ T8359] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 121.783050][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.672'. [ 121.795085][ T8370] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.802444][ T8370] IPv6: NLM_F_CREATE should be set when creating new route [ 121.813919][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.672'. [ 121.824078][ T8372] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.959825][ T8364] syz.1.669 (8364) used greatest stack depth: 17832 bytes left [ 122.071383][ T8393] gre0: left promiscuous mode [ 122.080230][ T8393] gre0: left allmulticast mode [ 122.135323][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.679'. [ 122.245311][ T8393] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.253562][ T8393] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.335609][ T8412] netlink: 'syz.2.682': attribute type 1 has an invalid length. [ 122.425806][ T8393] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 122.575658][ T8422] delete_channel: no stack [ 122.714362][ T8433] openvswitch: netlink: IP tunnel dst address not specified [ 122.876399][ T8446] netlink: 'syz.3.692': attribute type 6 has an invalid length. [ 122.923997][ T8446] tipc: Enabled bearer , priority 0 [ 122.952387][ T8446] syzkaller0: entered promiscuous mode [ 122.960780][ T8446] syzkaller0: entered allmulticast mode [ 122.976252][ T8445] tipc: Resetting bearer [ 122.994417][ T8454] netlink: 'syz.1.695': attribute type 10 has an invalid length. [ 123.004093][ T8445] tipc: Disabling bearer [ 123.036906][ T8454] team0: Port device geneve0 added [ 123.143043][ T8461] sctp: [Deprecated]: syz.0.697 (pid 8461) Use of int in maxseg socket option. [ 123.143043][ T8461] Use struct sctp_assoc_value instead [ 123.283158][ T8468] syzkaller0: entered promiscuous mode [ 123.291272][ T8468] syzkaller0: entered allmulticast mode [ 123.351202][ T7425] IPVS: fo: UDP 127.0.0.1:20003 - no destination available [ 123.983378][ T8506] __nla_validate_parse: 10 callbacks suppressed [ 123.983394][ T8506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.710'. [ 124.001981][ T56] block nbd4: Possible stuck request ffff888024e47000: control (read@0,1024B). Runtime 30 seconds [ 124.014210][ T56] block nbd4: Possible stuck request ffff888024e471c0: control (read@1024,1024B). Runtime 30 seconds [ 124.028755][ T56] block nbd4: Possible stuck request ffff888024e47380: control (read@2048,1024B). Runtime 30 seconds [ 124.040073][ T56] block nbd4: Possible stuck request ffff888024e47540: control (read@3072,1024B). Runtime 30 seconds [ 124.051834][ T8506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.710'. [ 124.080316][ T8506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.710'. [ 124.137279][ T8506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.710'. [ 124.207118][ T8524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.712'. [ 124.329163][ T8514] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.336639][ T8514] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.443905][ T8514] bridge_slave_0: left allmulticast mode [ 124.449817][ T8514] bridge_slave_0: left promiscuous mode [ 124.455928][ T8514] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.485906][ T8514] bridge_slave_1: left allmulticast mode [ 124.493264][ T8514] bridge_slave_1: left promiscuous mode [ 124.499583][ T8514] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.523366][ T8514] bond0: (slave bond_slave_0): Releasing backup interface [ 124.546847][ T8514] bond0: (slave bond_slave_1): Releasing backup interface [ 124.577511][ T8514] team0: Port device team_slave_0 removed [ 124.600863][ T8514] team0: Port device team_slave_1 removed [ 124.612340][ T8514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.626537][ T8514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.647671][ T8514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.662604][ T8514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.685037][ T8514] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 124.763110][ T8504] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 124.909334][ T8543] dvmrp0: entered allmulticast mode [ 125.293501][ T8583] netlink: 'syz.2.725': attribute type 1 has an invalid length. [ 125.402658][ T8591] netlink: 5 bytes leftover after parsing attributes in process `syz.2.725'. [ 125.497835][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.721'. [ 125.503388][ T8586] bond4: (slave geneve2): making interface the new active one [ 125.527318][ T8586] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 125.537134][ T8591] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 125.582811][ T8591] 0ªî{X¹¦: entered allmulticast mode [ 125.590023][ T8591] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 125.616819][ T8602] ------------[ cut here ]------------ [ 125.622658][ T8602] WARNING: CPU: 1 PID: 8602 at net/ipv4/route.c:1275 ip_rt_bug+0x2c/0x110 [ 125.631857][ T8602] Modules linked in: [ 125.636070][ T8602] CPU: 1 UID: 0 PID: 8602 Comm: syz.4.729 Not tainted syzkaller #0 PREEMPT(full) [ 125.642080][ T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 125.645305][ T8602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 125.656734][ T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 125.664200][ T8602] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 125.664233][ T8602] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 bb 42 0f f8 66 90 e8 b4 42 0f f8 31 ff 48 89 de ba 02 00 00 00 e8 35 02 6f ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc f3 0f [ 125.664248][ T8602] RSP: 0018:ffffc9001afe7180 EFLAGS: 00010286 [ 125.664267][ T8602] RAX: 916b8cfaba279600 RBX: ffff88807c3883c0 RCX: 916b8cfaba279600 [ 125.664281][ T8602] RDX: 0000000000000002 RSI: ffffffff8d70dfda RDI: ffffffff8bbf0760 [ 125.664296][ T8602] RBP: 0000000000000001 R08: ffffffff8f7ce877 R09: 1ffffffff1ef9d0e [ 125.664309][ T8602] R10: dffffc0000000000 R11: fffffbfff1ef9d0f R12: dffffc0000000000 [ 125.664323][ T8602] R13: dffffc0000000000 R14: ffff88807c3883c0 R15: ffff88801b35a580 [ 125.664337][ T8602] FS: 00007fa5846f26c0(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 125.664354][ T8602] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.664367][ T8602] CR2: 000000110c274591 CR3: 0000000054c5a000 CR4: 00000000003526f0 [ 125.664384][ T8602] Call Trace: [ 125.664393][ T8602] [ 125.664406][ T8602] ip_push_pending_frames+0xbe/0x150 [ 125.664436][ T8602] __icmp_send+0xfc3/0x1320 [ 125.664468][ T8602] ? __icmp_send+0x1b9/0x1320 [ 125.664494][ T8602] ? __pfx___icmp_send+0x10/0x10 [ 125.664535][ T8602] ? ip_route_input_noref+0x98/0x250 [ 125.706531][ T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 125.712065][ T8602] ? __pfx_ip_route_input_noref+0x10/0x10 [ 125.712104][ T8602] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 125.712126][ T8602] ip_options_compile+0x80/0xb0 [ 125.712149][ T8602] ip_rcv_finish_core+0xaa2/0x1c00 [ 125.712181][ T8602] ip_rcv_finish+0x14c/0x2f0 [ 125.741958][ T8606] sctp: [Deprecated]: syz.1.730 (pid 8606) Use of int in max_burst socket option. [ 125.741958][ T8606] Use struct sctp_assoc_value instead [ 125.744136][ T8602] NF_HOOK+0x30c/0x3a0 [ 125.851357][ T8602] ? __pfx_ip_rcv_finish+0x10/0x10 [ 125.856494][ T8602] ? NF_HOOK+0x9a/0x3a0 [ 125.860711][ T8602] ? __pfx_NF_HOOK+0x10/0x10 [ 125.865317][ T8602] ? ip_rcv_core+0x7f7/0xd00 [ 125.869973][ T8602] ? __pfx_ip_rcv_finish+0x10/0x10 [ 125.875127][ T8602] ? __pfx_ip_rcv+0x10/0x10 [ 125.879679][ T8602] __netif_receive_skb+0x143/0x380 [ 125.884826][ T8602] ? netif_receive_skb+0x115/0x790 [ 125.889992][ T8602] netif_receive_skb+0x1cb/0x790 [ 125.894951][ T8602] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 125.900816][ T8602] ? __pfx_netif_receive_skb+0x10/0x10 [ 125.906304][ T8602] ? tun_rx_batched+0x160/0x730 [ 125.911217][ T8602] tun_rx_batched+0x1b9/0x730 [ 125.915918][ T8602] ? __lock_acquire+0xab9/0xd20 [ 125.920849][ T8602] ? __pfx_tun_rx_batched+0x10/0x10 [ 125.926078][ T8602] ? tun_get_user+0x272f/0x3e90 [ 125.931002][ T8602] tun_get_user+0x2b65/0x3e90 [ 125.935709][ T8602] ? tun_get_user+0x6f6/0x3e90 [ 125.940529][ T8602] ? tun_get_user+0x272f/0x3e90 [ 125.945407][ T8602] ? aa_file_perm+0x44d/0x1550 [ 125.950255][ T8602] ? __pfx_tun_get_user+0x10/0x10 [ 125.955306][ T8602] ? __futex_wait+0x34a/0x3d0 [ 125.960050][ T8602] ? __pfx___futex_wait+0x10/0x10 [ 125.965097][ T8602] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 125.971061][ T8602] ? ref_tracker_alloc+0x318/0x460 [ 125.976203][ T8602] ? __lock_acquire+0xab9/0xd20 [ 125.981192][ T8602] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 125.986679][ T8602] ? tun_get+0x1c/0x2f0 [ 125.991293][ T8602] ? tun_get+0x1c/0x2f0 [ 125.995478][ T8602] ? tun_get+0x1c/0x2f0 [ 125.999702][ T8602] tun_chr_write_iter+0x113/0x200 [ 126.004753][ T8602] vfs_write+0x5c9/0xb30 [ 126.009063][ T8602] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 126.014641][ T8602] ? __pfx_vfs_write+0x10/0x10 [ 126.019461][ T8602] ? __fget_files+0x2a/0x420 [ 126.024081][ T8602] ksys_write+0x145/0x250 [ 126.028469][ T8602] ? __pfx_ksys_write+0x10/0x10 [ 126.033343][ T8602] ? do_syscall_64+0xbe/0xfa0 [ 126.038041][ T8602] do_syscall_64+0xfa/0xfa0 [ 126.042598][ T8602] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.047826][ T8602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.053942][ T8602] ? clear_bhb_loop+0x60/0xb0 [ 126.058668][ T8602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.064575][ T8602] RIP: 0033:0x7fa58378e17f [ 126.069044][ T8602] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 126.070646][ T8620] netlink: 'syz.2.732': attribute type 42 has an invalid length. [ 126.088722][ T8602] RSP: 002b:00007fa5846f2000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 126.088754][ T8602] RAX: ffffffffffffffda RBX: 00007fa5839e5fa0 RCX: 00007fa58378e17f [ 126.088766][ T8602] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 126.088778][ T8602] RBP: 00007fa583811f91 R08: 0000000000000000 R09: 0000000000000000 [ 126.088796][ T8602] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 126.088806][ T8602] R13: 00007fa5839e6038 R14: 00007fa5839e5fa0 R15: 00007ffef85a5478 [ 126.088837][ T8602] [ 126.088847][ T8602] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 126.088860][ T8602] CPU: 1 UID: 0 PID: 8602 Comm: syz.4.729 Not tainted syzkaller #0 PREEMPT(full) [ 126.088879][ T8602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.088888][ T8602] Call Trace: [ 126.088896][ T8602] [ 126.088903][ T8602] dump_stack_lvl+0x99/0x250 [ 126.088929][ T8602] ? __asan_memcpy+0x40/0x70 [ 126.088953][ T8602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.088977][ T8602] ? __pfx__printk+0x10/0x10 [ 126.089010][ T8602] vpanic+0x237/0x6d0 [ 126.089034][ T8602] ? __pfx_vpanic+0x10/0x10 [ 126.089069][ T8602] panic+0xb9/0xc0 [ 126.089092][ T8602] ? __pfx_panic+0x10/0x10 [ 126.089132][ T8602] __warn+0x31b/0x4b0 [ 126.089154][ T8602] ? ip_rt_bug+0x2c/0x110 [ 126.089181][ T8602] ? ip_rt_bug+0x2c/0x110 [ 126.089204][ T8602] report_bug+0x2be/0x4f0 [ 126.089227][ T8602] ? ip_rt_bug+0x2c/0x110 [ 126.089251][ T8602] ? ip_rt_bug+0x2c/0x110 [ 126.089272][ T8602] ? ip_rt_bug+0x2e/0x110 [ 126.089294][ T8602] handle_bug+0x84/0x160 [ 126.089313][ T8602] exc_invalid_op+0x1a/0x50 [ 126.089331][ T8602] asm_exc_invalid_op+0x1a/0x20 [ 126.089348][ T8602] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 126.089371][ T8602] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 bb 42 0f f8 66 90 e8 b4 42 0f f8 31 ff 48 89 de ba 02 00 00 00 e8 35 02 6f ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc f3 0f [ 126.089386][ T8602] RSP: 0018:ffffc9001afe7180 EFLAGS: 00010286 [ 126.089402][ T8602] RAX: 916b8cfaba279600 RBX: ffff88807c3883c0 RCX: 916b8cfaba279600 [ 126.089416][ T8602] RDX: 0000000000000002 RSI: ffffffff8d70dfda RDI: ffffffff8bbf0760 [ 126.089428][ T8602] RBP: 0000000000000001 R08: ffffffff8f7ce877 R09: 1ffffffff1ef9d0e [ 126.089441][ T8602] R10: dffffc0000000000 R11: fffffbfff1ef9d0f R12: dffffc0000000000 [ 126.089454][ T8602] R13: dffffc0000000000 R14: ffff88807c3883c0 R15: ffff88801b35a580 [ 126.089491][ T8602] ip_push_pending_frames+0xbe/0x150 [ 126.089519][ T8602] __icmp_send+0xfc3/0x1320 [ 126.089548][ T8602] ? __icmp_send+0x1b9/0x1320 [ 126.089573][ T8602] ? __pfx___icmp_send+0x10/0x10 [ 126.089616][ T8602] ? ip_route_input_noref+0x98/0x250 [ 126.089647][ T8602] ? __pfx_ip_route_input_noref+0x10/0x10 [ 126.089676][ T8602] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 126.089700][ T8602] ip_options_compile+0x80/0xb0 [ 126.089724][ T8602] ip_rcv_finish_core+0xaa2/0x1c00 [ 126.089756][ T8602] ip_rcv_finish+0x14c/0x2f0 [ 126.089777][ T8602] NF_HOOK+0x30c/0x3a0 [ 126.089805][ T8602] ? __pfx_ip_rcv_finish+0x10/0x10 [ 126.089822][ T8602] ? NF_HOOK+0x9a/0x3a0 [ 126.089839][ T8602] ? __pfx_NF_HOOK+0x10/0x10 [ 126.089855][ T8602] ? ip_rcv_core+0x7f7/0xd00 [ 126.089875][ T8602] ? __pfx_ip_rcv_finish+0x10/0x10 [ 126.089903][ T8602] ? __pfx_ip_rcv+0x10/0x10 [ 126.089920][ T8602] __netif_receive_skb+0x143/0x380 [ 126.089952][ T8602] ? netif_receive_skb+0x115/0x790 [ 126.089975][ T8602] netif_receive_skb+0x1cb/0x790 [ 126.089997][ T8602] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 126.090019][ T8602] ? __pfx_netif_receive_skb+0x10/0x10 [ 126.090048][ T8602] ? tun_rx_batched+0x160/0x730 [ 126.090072][ T8602] tun_rx_batched+0x1b9/0x730 [ 126.090092][ T8602] ? __lock_acquire+0xab9/0xd20 [ 126.090116][ T8602] ? __pfx_tun_rx_batched+0x10/0x10 [ 126.090141][ T8602] ? tun_get_user+0x272f/0x3e90 [ 126.090176][ T8602] tun_get_user+0x2b65/0x3e90 [ 126.090205][ T8602] ? tun_get_user+0x6f6/0x3e90 [ 126.090228][ T8602] ? tun_get_user+0x272f/0x3e90 [ 126.090253][ T8602] ? aa_file_perm+0x44d/0x1550 [ 126.090270][ T8602] ? __pfx_tun_get_user+0x10/0x10 [ 126.090288][ T8602] ? __futex_wait+0x34a/0x3d0 [ 126.090317][ T8602] ? __pfx___futex_wait+0x10/0x10 [ 126.090334][ T8602] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 126.090381][ T8602] ? ref_tracker_alloc+0x318/0x460 [ 126.090398][ T8602] ? __lock_acquire+0xab9/0xd20 [ 126.090418][ T8602] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 126.090442][ T8602] ? tun_get+0x1c/0x2f0 [ 126.090469][ T8602] ? tun_get+0x1c/0x2f0 [ 126.090489][ T8602] ? tun_get+0x1c/0x2f0 [ 126.090515][ T8602] tun_chr_write_iter+0x113/0x200 [ 126.090538][ T8602] vfs_write+0x5c9/0xb30 [ 126.090568][ T8602] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 126.090591][ T8602] ? __pfx_vfs_write+0x10/0x10 [ 126.090626][ T8602] ? __fget_files+0x2a/0x420 [ 126.090653][ T8602] ksys_write+0x145/0x250 [ 126.090680][ T8602] ? __pfx_ksys_write+0x10/0x10 [ 126.090709][ T8602] ? do_syscall_64+0xbe/0xfa0 [ 126.090737][ T8602] do_syscall_64+0xfa/0xfa0 [ 126.090759][ T8602] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.090782][ T8602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.090809][ T8602] ? clear_bhb_loop+0x60/0xb0 [ 126.090831][ T8602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.090848][ T8602] RIP: 0033:0x7fa58378e17f [ 126.090865][ T8602] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 126.090879][ T8602] RSP: 002b:00007fa5846f2000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 126.090897][ T8602] RAX: ffffffffffffffda RBX: 00007fa5839e5fa0 RCX: 00007fa58378e17f [ 126.090910][ T8602] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 126.090921][ T8602] RBP: 00007fa583811f91 R08: 0000000000000000 R09: 0000000000000000 [ 126.090933][ T8602] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 126.090943][ T8602] R13: 00007fa5839e6038 R14: 00007fa5839e5fa0 R15: 00007ffef85a5478 [ 126.090976][ T8602] [ 126.096877][ T8602] Kernel Offset: disabled