last executing test programs: 56.443436168s ago: executing program 2 (id=1673): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x2, 0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x44090}, 0x40000044) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x3c, 0x64, 0xf31, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {0xfff3, 0xffff}, {0x0, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x44044) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vcan0\x00', 0x0}) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x5be85457ffb162cc, &(0x7f0000000740)={@loopback, 0x0}, &(0x7f0000000780)=0x14) (async) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x7}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000940)={'syztnl1\x00', &(0x7f00000007c0)={'ip_vti0\x00', 0x0, 0x40, 0x8, 0x3, 0x3, {{0x4e, 0x4, 0x3, 0x0, 0x138, 0x68, 0x0, 0x8, 0x29, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x34, 0x8, 0x3, 0xb, [{@loopback, 0x6}, {@broadcast, 0xd1d1}, {@private=0xa010102, 0x8001}, {@remote, 0x10}, {@private=0xa010100, 0x40}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x939}]}, @lsrr={0x83, 0x17, 0xb9, [@empty, @multicast2, @rand_addr=0x64010100, @empty, @multicast2]}, @rr={0x7, 0x17, 0x95, [@empty, @rand_addr=0x64010100, @multicast2, @loopback, @multicast1]}, @cipso={0x86, 0x16, 0x2, [{0x6, 0x3, 'L'}, {0x7, 0xd, "4381a3f12143f12f2d223d"}]}, @ssrr={0x89, 0xb, 0xe2, [@loopback, @loopback]}, @cipso={0x86, 0x4c, 0x3, [{0x7, 0x11, "c66d077e578b5aa3066fc49300d447"}, {0x7, 0x7, "70a0969b3f"}, {0x7, 0xe, "b1b03da662fd899e2091cdd0"}, {0x5, 0x9, "ea5f2542e0d1a5"}, {0x0, 0xa, "28e18fb82a983548"}, {0x6, 0x3, "96"}, {0x2, 0xa, "13a954c78055f3fe"}]}, @end, @timestamp_prespec={0x44, 0x54, 0xe0, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x527}, {@private=0xa010101, 0x6}, {@broadcast, 0x1}, {@broadcast, 0xfffffffc}, {@broadcast, 0x9}, {@broadcast}, {@broadcast, 0x40000000}, {@multicast1, 0x7}, {@broadcast, 0x3}, {@private=0xa010101, 0x2}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000a00)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000a40)={'gre0\x00', 0x0, 0x8, 0x7, 0x9, 0x3, {{0x7, 0x4, 0x0, 0x3f, 0x1c, 0x65, 0x0, 0xff, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @local, {[@generic={0x89, 0x8, "f9ba38eb98a2"}]}}}}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000b00)=[0x0], &(0x7f0000000b40)=[0x0], 0x0, 0xf3, &(0x7f0000000b80)=[{}], 0x8, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0xf1, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000dc0)={'wg0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100e0120}, 0xc, &(0x7f0000001540)={&(0x7f0000001800)={0x718, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xae8}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x35}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r5}, {0xc0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}]}}, {{0x8, 0x1, r6}, {0x1b8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r11}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r12}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x37, 0x4, 0x10001}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7, 0xc, 0xc, 0x2}, {0x3, 0x4, 0x8, 0x4}]}}}]}}, {{0x8}, {0x258, 0x2, 0x0, 0x1, [{0x3c, 0x1, @queue_id={{{}, {}, {0x0, 0x4, 0x1}}, {0x0, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0xfffc, 0x8, 0xf1, 0x7}, {0xe, 0x5, 0xf, 0x7}, {0x8, 0x8, 0x2, 0x8}, {0x4, 0x7, 0x5, 0x4}, {0x400, 0x7, 0x8, 0x6}, {0xe, 0x5a, 0xa0, 0x65}, {0x7, 0x2, 0x5, 0x4}, {0x3, 0x0, 0x1, 0xe25}, {0x400, 0x81, 0x9, 0x9}]}}}]}}]}, 0x718}, 0x1, 0x0, 0x0, 0x4001}, 0x4c000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @local, 0xf}], 0x1c) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000005c0)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f00000017c0)=[{&(0x7f0000000380)="87", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e22, 0x6, @mcast1, 0xffffffff}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f24031f8e5977c09d28a70c524d4b9bc5d54e8f02418f226dbb580f1da2804ee453a7b320073cd9062063e82adbd87b58a", 0x31}, {&(0x7f0000000100)="5b855933f6277d50e999a1bec332548b1fbcd2b29b09d80ae29b6c854d70d05e913f9b54e936ac628a8dd13aff03d114e67d389e7cc8a31800", 0x39}, {&(0x7f0000000140)="b41ed3059ca540c094cff357a03b09c1ba1b63a6a6c16bbb43c48a89d2c24e4e45f452a0cb133b584a0b3d8cc2d0fca5aa8da6d55b650662d1c0de2e0d2e6006cc44d8e3dd48ff75ad35799bb16d9ef461", 0x51}], 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="2400000000000074dce3002900010032000000fe800000000000001400000000", @ANYRES32=r16, @ANYBLOB="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"], 0x128}}, {{&(0x7f0000000240)={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80000001}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000300)="3d1320ad1ea17570b3e0f40cee8aae2325be21facca9fe37c4cb7b4f0130a62cb3c3e9d7bc66709c192aebb98ea1755674cd677c8538e0b79a8aec0a3d958ad6d48374395fac12dec23e6784f069cb8b2061b035a6ecc5661520bd104b0f8c5992ad435cccfad7fa73", 0x69}, {&(0x7f0000000500)="368dc7ac45ab37d0707ef6e9c3679004c97e60855b7b", 0x16}], 0x2, &(0x7f0000000580)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x18}}], 0x3, 0x840) 56.006813493s ago: executing program 2 (id=1677): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003002908000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r6], 0x5c}}, 0x40) sendmmsg$inet(r0, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) 55.671925067s ago: executing program 2 (id=1680): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002240), r0) r2 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000280)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x11}, 0x2}, 0x1c) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f00000022c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf256000000008000300", @ANYRES32=0x0, @ANYBLOB="2c002a002d1a000304caffffffffffffff0a007f0011007903000000000000bb71070001ff010103082a0104"], 0x48}, 0x1, 0x0, 0x0, 0x640d0}, 0x24000000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f00000004c0), 0x0, 0x4, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0, 0x12}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f00000002c0)=""/206, 0xce}, {&(0x7f00000003c0)=""/161, 0xa1}], 0x4}, 0x100}], 0x1, 0x10022, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 55.507931124s ago: executing program 2 (id=1683): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r3) (async) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) (async) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) (async) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r4], 0x54}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4088}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140008000000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001140000001100010000000000000000000000000a"], 0x64}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000480)={'tunl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x7800, 0x8000, 0x5, 0x4, {{0x1b, 0x4, 0x1, 0x14, 0x6c, 0x66, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @rand_addr=0x64010102, {[@timestamp={0x44, 0x8, 0xb8, 0x0, 0xd, [0x7fff]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x52, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @timestamp={0x44, 0x14, 0x56, 0x0, 0xc, [0x4, 0x1, 0x1400, 0x7fffffff]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xc9, [@dev={0xac, 0x14, 0x14, 0x21}]}, @rr={0x7, 0x1f, 0x4e, [@remote, @dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x22}, @private=0xa010101, @empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0xfffffff6, 0x8, 0x6, 0x0, 0x1, 0x8, '\x00', r6, 0xffffffffffffffff, 0x6, 0x0, 0x1, 0x5}, 0x50) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) readv(r9, &(0x7f0000001b00)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1) (async) accept4$vsock_stream(r8, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x800) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000094000100010000009500000000000000"], 0x0, 0xf}, 0x94) (async) splice(r9, 0x0, r8, 0x0, 0x10000008ebc, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 54.85561648s ago: executing program 2 (id=1690): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, 0x0, 0x0) socket(0x26, 0xb260235af40a2003, 0x5) r1 = socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'bridge_slave_1\x00'}}, 0x59) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="14010000"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=0x0, @ANYRES16=r0, @ANYRES8, @ANYBLOB="1165a43adb95", @ANYRES8=r3], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) recvmsg$kcm(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)}, 0x2003) (async) recvmsg$kcm(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)}, 0x2003) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6, &(0x7f0000000040)}, 0x20) close(0x4) (async) close(0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000076000d0b0040000000000000030000000000000008000500", @ANYRES32=0x0, @ANYBLOB="9a8ea8240436c77e49d8b56740b9c87d22caa7bcb6ddca1afe84345e438c1c5791683bf6eda87343d33653af3ef12bb467ac7661681d030200000000000000"], 0x20}}, 0x0) write(r3, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) 54.119425452s ago: executing program 2 (id=1700): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x1, &(0x7f0000000300)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xfffffffa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f000000aac0)={'ip6_vti0\x00', &(0x7f000000aa40)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0x1a, 0x4, 0x1, @local, @mcast2, 0x7, 0x7, 0x100, 0xd}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f000000aac0)={'ip6_vti0\x00', &(0x7f000000aa40)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0x1a, 0x4, 0x1, @local, @mcast2, 0x7, 0x7, 0x100, 0xd}}) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) unshare(0x20000400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1, &(0x7f0000000300)=@raw=[@jmp={0x5, 0x1, 0x9, 0x7, 0x8, 0x4, 0x1}], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3f}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) (async) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r2, &(0x7f0000000000)={0x1d, r3, 0x3, {0x2, 0xff}, 0xfe}, 0x18) (async) connect$can_j1939(r2, &(0x7f0000000000)={0x1d, r3, 0x3, {0x2, 0xff}, 0xfe}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e0014ef02800800010008000000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 38.949199448s ago: executing program 32 (id=1700): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x1, &(0x7f0000000300)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xfffffffa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f000000aac0)={'ip6_vti0\x00', &(0x7f000000aa40)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0x1a, 0x4, 0x1, @local, @mcast2, 0x7, 0x7, 0x100, 0xd}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f000000aac0)={'ip6_vti0\x00', &(0x7f000000aa40)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0x1a, 0x4, 0x1, @local, @mcast2, 0x7, 0x7, 0x100, 0xd}}) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) unshare(0x20000400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1, &(0x7f0000000300)=@raw=[@jmp={0x5, 0x1, 0x9, 0x7, 0x8, 0x4, 0x1}], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3f}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) (async) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r2, &(0x7f0000000000)={0x1d, r3, 0x3, {0x2, 0xff}, 0xfe}, 0x18) (async) connect$can_j1939(r2, &(0x7f0000000000)={0x1d, r3, 0x3, {0x2, 0xff}, 0xfe}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e0014ef02800800010008000000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 5.483645095s ago: executing program 0 (id=2125): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)={@ifindex, 0xffffffffffffffff, 0x12, 0x2004}, 0x20) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x7c, r1, 0x5, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac14, 0x1d, 0xfac03, 0xfac14, 0xfac05]}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac04}, @NL80211_ATTR_PMK={0x34, 0xfe, "69a2abc9a5b40b31298a20d305b3e2c5458ef270a9875fade01916a3f92cd436024383547186ff4bea10d85b830fcac3"}]]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000000)="10", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x7, 0xe, 0x9, 0x0, 0x1, 0x8, 0xa7, 0x4, 0x5, 0xf1, 0xb, 0x7, 0x0, 0x7}, 0xe) poll(&(0x7f0000000080)=[{r3, 0x46a8}], 0x1, 0x400) shutdown(r3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8004"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) socket(0x2b, 0x1, 0xfffffffc) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getroute={0x1c, 0x1a, 0x10, 0x70bd26, 0x25dfdbff, {0x2, 0x80, 0x0, 0xd, 0xfc, 0x3, 0x0, 0xb, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @empty}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @rand_addr=0x5}}}], 0x20}}], 0x300, 0x4040880) 4.531281815s ago: executing program 0 (id=2138): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000300)="18", 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0xb, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001d2c0000000b0a05000000000000000000070000000900010073797a30000000000c0010"], 0xb0}}, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket(0x2, 0x80805, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_newvlan={0x18, 0x70, 0x201}, 0x18}}, 0x0) getsockopt$bt_hci(r6, 0x84, 0x70, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, 'vcan0\x00'}}, 0x1e) sendmmsg(r7, &(0x7f0000006b80)=[{{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000100)="aa51842f1d833219a874fca993bea21e3155de0e6f539f72d34a91d1043b0c3995f86c994e7c3ed1609d2df59f118cf827bfe75c532c06ee3609a40905b7b86c38f6b28d2ac7db447e", 0x49}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0c1) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)={0x38, r5, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r5, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x400, 0x5, 0x100, 0x1, 0xa92, 0x8, 0x12]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x30}, 0x1, 0x0, 0x0, 0x8060}, 0x44800) r8 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r9 = socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x18}, 0x90) bind$inet(r9, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r9, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r9, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) 4.314566233s ago: executing program 0 (id=2141): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c00000004000010040000000400000000000000", @ANYRES32, @ANYBLOB='\v\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000e12467f9c3923fb15e7e3accb3cdcc07a3935398b344ea733b199804609628162f322a86553425d8e5f112b1ebb5376a8451af"], 0x50) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c9, &(0x7f0000000100)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r4) socket$inet6(0xa, 0x2, 0x3a) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {0x5}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r7, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004280)=""/4093, 0xffd}, {&(0x7f0000001700)=""/4082, 0xff2}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0x40000005}, {{0x0, 0x0, 0x0}, 0x2002}], 0x4, 0x40010020, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4c, &(0x7f0000000000)=0x7, 0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x66}, @alu={0x3, 0x1, 0x3, 0x3, 0xa}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x81, &(0x7f0000000300)=""/129, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xb, 0xe63e, 0x7fffffff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000440)=[r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000480)=[{0x5, 0x5, 0x1, 0x1}, {0x4, 0x4, 0xd, 0x8}, {0x5, 0x5, 0x8, 0x5}, {0x4, 0x2, 0x1, 0xa}], 0x10, 0xc}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000140), &(0x7f0000000640)=r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa200000000000007020000d6ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000080)='syzkaller\x00', 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @initdev, @empty}, &(0x7f0000000100)=0xc) 3.950107179s ago: executing program 1 (id=2144): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x90da, 0x4) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040)=0x80, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect(r0, &(0x7f00000000c0)=@can={0x1d, r1}, 0x80) (async) connect(r0, &(0x7f00000000c0)=@can={0x1d, r1}, 0x80) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000140)={0x3b, @empty, 0x4e21, 0x3, 'sed\x00', 0x29, 0xf32, 0x33}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000140)={0x3b, @empty, 0x4e21, 0x3, 'sed\x00', 0x29, 0xf32, 0x33}, 0x2c) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r2, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xf}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x4}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xb2dc}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x5}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x164, r3, 0x20, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x164}}, 0x404001b) (async) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x164, r3, 0x20, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x164}}, 0x404001b) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000800), &(0x7f0000000840)=0x4) r6 = accept4(r4, 0x0, &(0x7f0000000880), 0x81000) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r7, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r8, 0x104, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x9}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x890d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20040815) syz_genetlink_get_family_id$devlink(&(0x7f0000000a40), r6) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a40), r6) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a80)='cgroup.kill\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000ac0)=0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0}, &(0x7f0000000b40)=0xc) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000b80)) (async) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000b80)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000cc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xb0, r9, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r10}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r11}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r12}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r14}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c0c0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000d00)=[@in6={0xa, 0x4e23, 0x1, @local, 0xfffffffa}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e20, 0x1, @mcast1, 0xb5af}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3c}}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @broadcast}], 0x78) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r7, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0xa563706350b6ea2c}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x28, r8, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40001) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200200}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x10, 0x3f6, 0x200, 0x4, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}}, 0x44800) sendmsg$nl_generic(r6, &(0x7f0000001180)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x334ac87c980d8e9b}, 0xc, &(0x7f0000001140)={&(0x7f0000001000)={0x138, 0x22, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@nested={0x18, 0x74, 0x0, 0x1, [@nested={0x4, 0x143}, @typed={0x8, 0xa8, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x12, 0x0, 0x0, @uid=r13}]}, @typed={0x8, 0x7e, 0x0, 0x0, @fd=r7}, @typed={0x69, 0x5a, 0x0, 0x0, @binary="faafcbea07524abe7f747a989275f0620a86825ee1bf78e518d50f5c0c2a00e7687841c17166b558184694de8d9ea2e8f507b1ce701459bd82e23a4d1253385b9681114c0f494ef167b83cfbc371c7e5f043c7432bdfe981aaa074ead571004e2ab7a4db78"}, @generic="cf5d6aad7ba81a5d0e8b0ce09bb89f7aff7ad435ac434a6a621fa9c24e6d52042da72fb24479c2866134e2c8a0f8a86a810ed17a4ef976ec2944b42b739a9260257e7cea716377ff4ee76e11d3b2f9af579d9aeaf0f8423fe0b76799b618ae511bd41c270eecfb0d3046729de4d9b52fb971cec4dabf05b1afdb4122a8853b1807a850819d1de6d58d0a11b6ceeacf863c5a77e585852d"]}, 0x138}, 0x1, 0x0, 0x0, 0x8004}, 0x40) (async) sendmsg$nl_generic(r6, &(0x7f0000001180)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x334ac87c980d8e9b}, 0xc, &(0x7f0000001140)={&(0x7f0000001000)={0x138, 0x22, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@nested={0x18, 0x74, 0x0, 0x1, [@nested={0x4, 0x143}, @typed={0x8, 0xa8, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x12, 0x0, 0x0, @uid=r13}]}, @typed={0x8, 0x7e, 0x0, 0x0, @fd=r7}, @typed={0x69, 0x5a, 0x0, 0x0, @binary="faafcbea07524abe7f747a989275f0620a86825ee1bf78e518d50f5c0c2a00e7687841c17166b558184694de8d9ea2e8f507b1ce701459bd82e23a4d1253385b9681114c0f494ef167b83cfbc371c7e5f043c7432bdfe981aaa074ead571004e2ab7a4db78"}, @generic="cf5d6aad7ba81a5d0e8b0ce09bb89f7aff7ad435ac434a6a621fa9c24e6d52042da72fb24479c2866134e2c8a0f8a86a810ed17a4ef976ec2944b42b739a9260257e7cea716377ff4ee76e11d3b2f9af579d9aeaf0f8423fe0b76799b618ae511bd41c270eecfb0d3046729de4d9b52fb971cec4dabf05b1afdb4122a8853b1807a850819d1de6d58d0a11b6ceeacf863c5a77e585852d"]}, 0x138}, 0x1, 0x0, 0x0, 0x8004}, 0x40) 3.706054885s ago: executing program 5 (id=2146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) listen(r1, 0x80000000) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x80}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x850) close(0x3) 3.671414252s ago: executing program 1 (id=2147): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x2}, @TCA_HHF_ADMIT_BYTES={0x8}]}}]}, 0x40}}, 0x0) (async) r3 = getpid() (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000380)=0xfffffffffffffefa) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000006c0)=0x0) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0}, &(0x7f0000000740)=0xc) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000001080)=ANY=[], &(0x7f0000000a80)=""/183, 0x108, 0xb7, 0x0, 0x3, 0x10000, @value=r10}, 0x28) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000024729380ad42db00000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r13, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r14, 0x4) r15 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000cc0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1f, 0x20, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000700000000000000080000", @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830d0000bf09000000000000550901000000000095000000000000000365030009000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000000000070400", @ANYRES8=r9, @ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, r11, 0x8, &(0x7f0000000c80)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, r14, r15, 0x2, &(0x7f0000000dc0)=[0xffffffffffffffff, r8, r8, r8, r8], &(0x7f0000000e00)=[{0x4, 0x4, 0xb, 0xf}, {0x2, 0x2, 0x6, 0x7}], 0x10, 0x2}, 0x94) (async) r16 = getpid() ioctl$sock_SIOCSPGRP(r9, 0x8902, &(0x7f0000000180)=r16) r17 = getgid() (async) r18 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001b80)={0x0, 0x0}, &(0x7f0000001bc0)=0xc) (async) r20 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003f80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="01000000000000f04a8b78bf4f92000500"/28], 0x50) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004000), &(0x7f0000004040)=0xc) (async) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000004080)={{{@in=@private, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4}}, &(0x7f0000004180)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000041c0)={0x0, 0x0, 0x0}, &(0x7f0000004200)=0xc) sendmmsg$unix(r0, &(0x7f0000004300)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="3f78d1e1dc6f429b307db16a1bb7961b412aa59a", 0x14}, {&(0x7f0000000100)="3afdb02dad68b7ff2cab746dae9bd4e8731e74a197df9d8ffb2dfac0f8f248c0a899504155762b43534409e1861890c69a98341cbb530b0513949d92966f7a167dd0bc2230182ca315392579db368391285ec577fd4edd85f7336e88658c4d810a1d139e47f3a4a01dde80c7133a8a2aeba9b550d9cdb3de591ee6886ad8073bfc5341b5f63e814205df7e269c73d38d266f88646600378e52b6f79ef17dbdbde68ad51e055e8457e2b723633830eedac08dc34b6e163ad8be4211eeb67613553c3955cc4b41eb624a67b28a3b2542b43af6c2cc16c3b3fa26d06e388e2448459b5361c160a6bf7ab5", 0xe9}], 0x2, &(0x7f0000000b40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000140000000000000032650000010000003736e5afefc1a5504b11828c17eef442fdffe0939f3561891e704088e2d80fadeacff42b07f968ca684a", @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x8041}}, {{&(0x7f00000018c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000001940)="2af27e542c33c2600c49dc455da6737ddfb2678734b1f60ecbbffe41374f064bc6fd0885954fdda581c80da88000d71e3ef5ad8b1a64cd338172e1df8cd2336e66337c867110fb2eb9c800b9b4abce7a93cb4b85", 0x54}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=0xee00, @ANYRES32=r17, @ANYBLOB="00000000000001e1ff3936000000008000000000", @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r18, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x4000000}}, {{&(0x7f0000001a40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000001ac0)="d13a8f4b432cc572c855fe1280af70e506b11a3a06945709f7f01bc5a446506e9f8370acc92a64f70471b7b816e301ad33b0857e2a52fab02eeea1b6869a5c51b534053e67467aac1c9990bdb3618bd2cdb4e01658c85a4496dc8a3972fe3d51709937c2586fa23ec0761b57", 0x6c}], 0x1, &(0x7f0000001c00)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r19, 0xee01}}}], 0x20, 0x800}}, {{0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000001c40)="c9c57305c2871a1e229f71ce08fa29d97bee5d57da7d5ab3ba74a9dd78739623d28f33c7b5bbc34f9e1ff9308ef8da08a2ead50606bc810adefc4839f1b54f096aa51c110191e442c8b14dc3842879f98f75042bfa3260e7ef165ea03ccad5471cfbc9bccb657cf880158a6cb8397b4981522afdbfaa40e9", 0x78}, {&(0x7f0000001cc0)="39f9d1e88f11c26d3df436a079df7529344a026aa949cff481dce86d86a9ce450d29a9527ad13c6fe45a55c39493440b51cdc82177015a860cd151934da7bf537081f0f8cb5cbdba322df3cfff943e94596f980a9ce848561e1f94949abb74346a420cec599e1d0931", 0x69}, {&(0x7f0000001d40)="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", 0x1000}, {&(0x7f0000002d40)="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", 0x1000}, {&(0x7f0000003d40)="5c276ddbca7f7c5c722ec23e34e59e7282bc4bb538173ecb6a608e5f598357059635d31766ffedabfe0923f234b04625ef28f837286238835960c780d0a4f6f1354fcba0c4477451f0bc44efebcbb474af3ff1460335880c62e2", 0x5a}, {&(0x7f0000003dc0)="a196abf3627fb2cb3a6d1c643220329f32b0e5ee2eed9c", 0x17}, {&(0x7f0000003e00)="27b70ed31693e9c828977aeb9922affcd8ad633864a9eee0620a3594937d4e53a6fcc1919f108121b15a56e669672fb894e136fb89d624162c03dfff51c547158274837fff8a5a6e5991d7fe8e096da32c490d6ebd9defcab455bd2536b6dac3272ad0d47fb5af1586442b397aff14f6ed4d73636d57afc787f42897dc06a3de6a16bd08f58c944481697aeb0dfefc67c8e934f4c66f9755b13ad23fc105e5ffe45a95a6b6d961ad0854eeb22fb80a7061a151ecff95bc329ff0f89638bed71c6c4b89c86d18221d28a33c78a124aff8af033bfe09bc17bb69c54b56790713617629edd3a9b63759c905c9be22e7679bac471cd2", 0xf4}], 0x7, &(0x7f0000000800)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r20, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000001000000f9ea6327d3af833c5f", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x1}}], 0x4, 0x20040050) 3.628896011s ago: executing program 4 (id=2148): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)={@ifindex, 0xffffffffffffffff, 0x12, 0x2004}, 0x20) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x7c, r1, 0x5, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac14, 0x1d, 0xfac03, 0xfac14, 0xfac05]}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac04}, @NL80211_ATTR_PMK={0x34, 0xfe, "69a2abc9a5b40b31298a20d305b3e2c5458ef270a9875fade01916a3f92cd436024383547186ff4bea10d85b830fcac3"}]]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000000)="10", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x7, 0xe, 0x9, 0x0, 0x1, 0x8, 0xa7, 0x4, 0x5, 0xf1, 0xb, 0x7, 0x0, 0x7}, 0xe) poll(&(0x7f0000000080)=[{r3, 0x46a8}], 0x1, 0x400) shutdown(r3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8004"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) socket(0x2b, 0x1, 0xfffffffc) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getroute={0x1c, 0x1a, 0x10, 0x70bd26, 0x25dfdbff, {0x2, 0x80, 0x0, 0xd, 0xfc, 0x3, 0x0, 0xb, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @empty}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @rand_addr=0x5}}}], 0x20}}], 0x300, 0x4040880) 3.563937515s ago: executing program 5 (id=2149): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) unshare(0x26020480) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) (async) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) (async) r6 = socket(0x2b, 0x80801, 0x1) connect$inet6(r6, 0x0, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) (async) r8 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x2, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000ef02000000400004001400010002000000ac05140f00000000000000001400020002000000ffffffff00000000000000000d00010075648f27b0dcf44f7000000000ed2d3aef1554dd98b79e5ab3fdfad4e3f858871945722b1f6c3215e049a33c935fb2b225775eea8af52a66cad28d0a6279102aab7c40d1cd93e9d508f76a603cf3ce474a097daa854ff6"], 0x54}}, 0x4080) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x19, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r10, 0x0, 0xd}, 0x18) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r13 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r13, 0x8916, 0x0) (async) sendmsg$nl_xfrm(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="980200001b00000026bd7000fbdbdf25e00000010000000000000000000000000000006413d763e2cf6a00000000000000ffffac1e01014e2300004e240002020080003c000000", @ANYRES32=r9, @ANYRES32=0x0, @ANYBLOB="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"], 0x298}}, 0x0) (async) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="b40000003c0007010000000000000000027c00000700a58517c7b6fe46151efaf005c191b8c4cee7d6da15e3acf52b2e7c5491d7e34b0d352a8fe0a09a992f95731d79eb13ff167d2128cd3e872822722e55d67e8cdff381a2b4e274b73d6be299b49f16fd8ab1d1ee679d62ca3eafa07d63655da9d26de5e67f1db72f89578a443c3eb75678ec743aab0f45076e3d9222430c6fc25ae7d5b3df9f228b1aa240ba2996365df8623396dfbbdbf8bde0ff81d7d7106cf37bec"], 0xb4}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 1.602628647s ago: executing program 1 (id=2150): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x0, 0x500, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x16}}}}, [@NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x24}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xb4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfa94}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9e3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3c}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xd}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x333adae5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2b5}]}]}, 0x94}}, 0x8800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000}, 0x44050) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x10}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x20000840) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r5, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xf}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x3ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x44010}, 0x40001) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) nanosleep(&(0x7f00000005c0)={r6, r7+60000000}, &(0x7f0000000600)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x22100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x7f}, @val={0x8, 0x3, r1}, @void}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x88c0) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000780), r8) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r9, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xe1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20005001) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_P2P_DEVICE(r11, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r5, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x31}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040880}, 0x800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r10, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, 0x3, 0x8, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x4008800) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a80)='io.stat\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000c00)=0x14) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c40)=0xffffffffffffffff, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r10, 0xc020f509, &(0x7f0000000d00)={r11, 0x7, 0x5, 0xaa3}) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x9, 0x2}, 0x50) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000dc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r11, 0xc020f509, &(0x7f0000000e80)={r10, 0x7fff, 0x7, 0x90000}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000ac0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r12}}], &(0x7f0000000b00)='syzkaller\x00', 0x547, 0x41, &(0x7f0000000b40)=""/65, 0x41000, 0x14, '\x00', r13, 0x1c, r14, 0x8, &(0x7f0000000c80)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000cc0)={0x3, 0x5, 0x401, 0x7}, 0x10, 0x299a0, 0xffffffffffffffff, 0x1, &(0x7f0000000ec0)=[r15, r16, r17, r18, 0x1, 0x1, r19], &(0x7f0000000f00)=[{0x5, 0x2, 0xe, 0xa}], 0x10, 0x4}, 0x94) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000001000)=[{0x1, 0x2, {0x0, 0xff, 0x3}, {0x0, 0xff, 0x3}, 0xff}, {0x0, 0x2, {0x2, 0x1, 0x2}, {0x0, 0x0, 0x1}, 0xff, 0x1}, {0x0, 0x3, {0x0, 0xf0, 0x2}, {0x1, 0xf0, 0x2}, 0xfd, 0x1}], 0x60) 1.538380566s ago: executing program 0 (id=2151): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000006200)=ANY=[@ANYBLOB="021b0002100000000007000000000000010009000000000003000600000000000200000000000000000000000000000002000100000000000000020d0000004003000502000000ac141400000000000300000002000895d5057bf608000000e00000005bee3e1d382a7ebe7d8d02ed4c1aede9f1be89bcc086139774423144e3cc4469381b127f38d5cebba001b58d"], 0x68}, 0x1, 0x7}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b0400000000000000000200000034000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c617374000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x88}}, 0x0) close(r6) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000003c40)={0x0, 0x7}, &(0x7f0000006180)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000006680)={0xf, 0x0, 0x7, 0x9e, r7}, 0x10) recvmmsg(r4, &(0x7f0000006440)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/21, 0x15}, {&(0x7f00000001c0)=""/25, 0x19}, {&(0x7f0000000580)=""/162, 0xa2}, {&(0x7f0000000640)=""/159, 0x9f}, {&(0x7f0000000380)=""/122, 0x7a}, {&(0x7f0000000200)}, {&(0x7f0000000700)=""/176, 0xb0}], 0x7, &(0x7f0000000900)=""/219, 0xdb}, 0x7f}, {{&(0x7f0000000840)=@isdn, 0x80, &(0x7f0000002140)=[{&(0x7f0000000b00)=""/251, 0xfb}, {&(0x7f0000000c00)=""/129, 0x81}, {&(0x7f0000000a00)=""/33, 0x21}, {&(0x7f0000000cc0)=""/235, 0xeb}, {&(0x7f0000006a40)=""/232, 0xe8}, {&(0x7f0000000ec0)=""/135, 0x87}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000000e00)=""/5, 0x5}, {&(0x7f0000000fc0)=""/168, 0xa8}, {&(0x7f0000001080)=""/28, 0x1c}], 0xa, &(0x7f0000002200)=""/54, 0x46}, 0x10}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000002280)=""/132, 0x84}], 0x1, &(0x7f0000002340)=""/191, 0xe4}, 0x6}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000002400)=""/15, 0xf}, {&(0x7f0000002440)=""/42, 0x2a}, {&(0x7f0000002480)=""/215, 0xd7}, {&(0x7f0000002580)=""/212, 0xd4}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000026c0)=""/103, 0x67}], 0x1}, 0x66}, {{&(0x7f0000002780)=@alg, 0x80, &(0x7f0000002900)=[{&(0x7f0000002800)=""/243, 0xf3}], 0x1, &(0x7f0000002940)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000003940)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000003dc0)=[{&(0x7f00000039c0)=""/156, 0x9c}, {&(0x7f0000003a80)=""/246, 0xf6}, {&(0x7f0000003b80)=""/174, 0xae}, {&(0x7f0000003c40)}, {&(0x7f0000003c80)=""/111, 0x6f}, {&(0x7f0000003d00)=""/176, 0xb0}], 0x6, &(0x7f0000003e40)=""/4096, 0x1000}, 0xff}, {{&(0x7f0000004e40)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000006300)=[{&(0x7f0000004ec0)=""/4096, 0x1000}, {&(0x7f0000005ec0)=""/129, 0x81}, {&(0x7f0000005f80)=""/254, 0xfe}, {&(0x7f0000006080)=""/203, 0xcb}, {&(0x7f0000006180)}, {&(0x7f0000000dc0)=""/28, 0x1c}, {&(0x7f0000006740)=""/259, 0x103}], 0x7, &(0x7f0000006940)=""/194, 0xc2}, 0xffffffff}], 0x8, 0x2, &(0x7f0000006640)={0x77359400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f00000066c0), &(0x7f0000006700)=0x4) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) r10 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r10, 0x29, 0x21, &(0x7f0000000240)=0x5, 0x4) recvfrom$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e21, 0x81, @empty, 0xa8}, 0x1c) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020782500000000f01f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='workqueue_queue_work\x00', r11}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000006880)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r10, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f0000000140)) 1.505020338s ago: executing program 4 (id=2153): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x41) syz_emit_ethernet(0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb7f0a000340110800450c001e0097000000019078ac1414bbac1414aa080090780fff0000c135"], 0x0) 1.423995195s ago: executing program 5 (id=2154): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xfffd, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}}, 0x1c) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) pread64(r2, &(0x7f0000000100)=""/154, 0x9a, 0x8000000000000000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x9a}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x2}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c80)={0x268, 0x0, 0x5, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [{{0x254, 0x1, {{0x3, 0x1000}, 0x9, 0x3a, 0x6, 0xd5d, 0x18, 'syz1\x00', "f03e6a07238a81a08f959d36b691edd88717fd7d724111bb5d6b5bd9f5a1a2b3", "4ac4921f66218931361f3196d2675e94da696038e6ac37a77f320e9ef6b39dca", [{0x2, 0x3, {0x1, 0x5}}, {0x0, 0x0, {0x3, 0xfffffffd}}, {0x7, 0x1}, {0x7, 0x8, {0x1, 0x5}}, {0x4, 0x3, {0x3, 0x899}}, {0xfffc, 0x7, {0x1, 0x1}}, {0x40, 0x7, {0x1, 0x80000004}}, {0x8, 0x8001, {0x3, 0xa3}}, {0xe, 0x9, {0x1, 0xb9}}, {0x0, 0x9, {0xffb919631a0dafe2, 0x9}}, {0x8, 0x6, {0x1, 0x8}}, {0xe1e0, 0xffff, {0x1, 0x1}}, {0x800, 0x1ff, {0x1, 0x3}}, {0x7ff, 0x3, {0x0, 0x8}}, {0x9, 0x6, {0x2, 0xffffffff}}, {0x9, 0x8, {0x0, 0x8}}, {0xdd43, 0xd880, {0x0, 0x401}}, {0x5c83, 0x1ff, {0x1, 0x100}}, {0x4, 0x5, {0x1, 0x3}}, {0x7, 0x3486, {0x2, 0x3}}, {0x1, 0x7, {0x3, 0x9}}, {0x0, 0x5, {0x3, 0x19b}}, {0x0, 0x40, {0x2, 0x1}}, {0x255, 0x5, {0x1, 0xf}}, {0x7, 0x7, {0x0, 0x81}}, {0x7, 0x2, {0x2, 0x80000001}}, {0x901, 0xfd05, {0x0, 0x5}}, {0x1, 0x7, {0x1, 0x3}}, {0x4, 0x6, {0x3, 0x73c65cdd}}, {0x9, 0x8000, {0x3, 0x81}}, {0x9, 0x7, {0x1, 0x9}}, {0xfffb, 0x0, {0x2, 0x6}}, {0x8000, 0x8, {0x3, 0x3}}, {0x7, 0x5, {0x3, 0x10}}, {0x4, 0x2, {0x2, 0x7097}}, {0x800, 0x4, {0x2, 0x3}}, {0x4, 0x34, {0x2, 0x10001}}, {0x81, 0x0, {0x3, 0x6}}, {0x2, 0xd, {0x0, 0x9}}, {0x4004, 0x3, {0x1, 0xb}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000090) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) pread64(r3, &(0x7f0000001840)=""/4096, 0x1000, 0x1) 1.397002992s ago: executing program 4 (id=2155): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.317458793s ago: executing program 5 (id=2156): r0 = socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000c40)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337df", 0x69}, {&(0x7f0000000800)="104b0b7073fbd7f77a847bdbfdf6da474f700bf113b18d16d8380f42e296b49f1326c7d0d97be798e205654b8a885df6ee57ec7b690491c55ca484b54170549c7a72b8a579005ffcb0b309dae34571b17126534a763ca881f12d750072abc05a7cb8f0e32fc3ec", 0x67}, {&(0x7f0000000cc0)="91ebffffff7f7d8625547e6fdcfb96c1d9b461ad7581ce705ad7203fb9e00e70512c27e5d5980dbbdb9d8dd381060e0f5bd279f6b8d9109f8e5b1ad6402331e7e4ba5a0300ee40f4ed347c7997c0c822b355f310b659f42003566ffc26878858a5f20373da0b75bed8465da60f840979b6b18d0cbe", 0x75}], 0x3}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001800)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215b", 0xca}, {&(0x7f0000000180)="d7dbdba577061e4e52e720022b7a3b0f40cfb0205e5fc23d7555ac21b674feb3b7bf705d3b4fd1d84d60baa95963d6a74c1ec58f17070cc392c83893878d1bfdb771963f938e002c13ddb6ef11d265b4543c", 0x52}, {&(0x7f0000000900)="3794c1c2f791f4e67f50ea7bc95a2842f2990f3d7d9754304cde9192d23d13759fedda217763c26d7414268fc5a85a809bbaaf0c8cbed9c8b4f957ddecc49039374768b86dcb17cce76e74b0d44f99f084ab096b7a67672c7d7980fd65aa90191a5b74253d8c21b1ac8e06f1477d10d5d8d4e364c7352ba05f4fc0b12da748c8c379a6239d9829fedde9f66e3950873f43", 0x91}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) 1.294978957s ago: executing program 3 (id=2157): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x49108}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x13, 0x19}}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x58}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="b57dad880000ee9f0000140012800b00010067656e65766500004aff02800a000000aaaaaaaaaa3d0000080025000100000008000400e1ff"], 0x50}}, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r2, 0xd35) (async) close(0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x3}, 0xe) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xe, 0x0, &(0x7f0000000400)="ecbe44cae6eca0f0979b1553cdf0", 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (rerun: 32) 1.147687201s ago: executing program 3 (id=2158): r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xa, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x59}, @func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000140)='syzkaller\x00', 0x12, 0x90, &(0x7f0000000180)=""/144, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x6, 0x8, 0x400}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x3, 0x3, 0xd}, {0x3, 0x2, 0xa, 0x8}, {0x3, 0x3, 0xf, 0x2}], 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='ext4_ext_handle_unwritten_extents\x00', r2, 0x0, 0xffffffffffff060e}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80}, [@alu={0x3, 0x1, 0xb, 0x6, 0x6, 0xffffffffffffffc0, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000500)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x41, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[0x1], &(0x7f0000000600)=[{0x2, 0x1, 0xa, 0x2}, {0x4, 0x5, 0xf, 0x2}, {0x2, 0x1, 0x4}, {0x1, 0x5, 0xa, 0xb}, {0x1, 0x4, 0xa, 0x3}], 0x10, 0x4ec5841f}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000440)='contention_end\x00', r3, 0x0, 0x5}, 0x18) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000780)=@req={0xff29b1, 0xcff, 0x40, 0x81}, 0x10) write(r4, &(0x7f00000007c0)="eee7ccfaa1eb4f0a0d8f7bd8390d86661d9f6e9be55fb1c2bf600842edefe6548f5ebaa5d78c70f4f97772a2c0c444db0d5813bd3a530743da81b0b1c297c58f27cc36e609de315327b77e73065f4607ee13deec316bf9fddc9761a3960e110b324b9d145b1a3c886c8ea8a653", 0x6d) writev(0xffffffffffffffff, &(0x7f00000028c0)=[{&(0x7f0000000840)="a189cdd8feaf3a5b7903228fcdb1ea20ff79c64886", 0x15}, {&(0x7f0000000880)="3348633f0cf7c88f58a10eca61baa2e517b5308648a169f742266f67acd536cd797cd6bc81", 0x25}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="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", 0x1000}], 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000029c0)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x34, 0x2, 0x3, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x8}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x18}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x800}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = accept$packet(r0, &(0x7f0000002a00)={0x11, 0x0, 0x0}, &(0x7f0000002a40)=0x14) setsockopt$packet_int(r6, 0x107, 0xb, &(0x7f0000002a80)=0xfffffffc, 0x4) write(r2, &(0x7f0000002ac0)="22694dcf9480531c6ac261cd633659d3d842492d270edf3a3fa143940528f5235cbc246130398aa4b49a65a86a77175f3b0e459066042e28d0b6441212c1996d189f17a8d26e773f06a64e6e7b5302278876c8abab2318587b143e6d39050780fc1b7e75fdea5244516d42e2275cd9ed2e3fab1edc4269b48d2be83141a7e37c27bf6aca9d", 0x85) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000002c40)={0x0, 0x84, &(0x7f0000002b80)=[@in6={0xa, 0x4e22, 0x200, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e23, 0x2c32, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x90}, @in6={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x1}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000002c80)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f0000002cc0)={r9, 0x9, 0x0, 0x80000000, 0x806c}, &(0x7f0000002d00)=0x18) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000002e00)={&(0x7f0000002d40)=""/182, 0xb6, 0x5, 0x1}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e80), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000002f40)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x40, r10, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x26}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4000, 0x1, 0x4, 0x0, {0x6, 0x76e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x6, 0x101, 0xc}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x40040d0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r11, 0x84, 0x21, &(0x7f0000002f80), &(0x7f0000002fc0)=0x4) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r12, &(0x7f00000030c0)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003080)={&(0x7f0000003040)={0x24, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000003140), r12) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000003200)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x1000400}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)={0x40, r13, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x57}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x2050}, 0x4080) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003280), r6) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r12, &(0x7f00000033c0)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003380)={&(0x7f00000032c0)={0x90, r14, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2a, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003500)={{r15}, &(0x7f0000003480), &(0x7f00000034c0)=r3}, 0x20) 1.103827963s ago: executing program 4 (id=2159): socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x3c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r3}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x15, 0x1, 0x0, 0x1, [@generic="3fb3ebf5f9cbd1185eeba9c895d0e5001a"]}]}, 0x3c}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_delrule={0x48, 0x21, 0x400, 0x70bd25, 0x25dfdbff, {0x2, 0x20, 0x20, 0x4, 0x9b, 0x0, 0x0, 0x2, 0x10}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x16}, @FRA_DST={0x8, 0x1, @broadcast}, @FRA_DST={0x8, 0x1, @loopback}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) socket$l2tp6(0xa, 0x2, 0x73) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008000a000000000044000780080001"], 0x90}}, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="4040040000000400000012000043533d2df115402c74f9bfbca4adf7b300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) close(r8) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000e80b00000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000030900010073797a30000000000900030073797a310000000054000000060a010400000000000000000100000008000b40000000002c0004802800018007000100637400001c0002800800014000000001080002400000000805000300190000000900010073797a30"], 0xc8}, 0x1, 0x0, 0x0, 0x5090}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.058955987s ago: executing program 3 (id=2160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r1) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000000)={0x14, r2, 0x401, 0x70bd28, 0x10000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "12"}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 823.96119ms ago: executing program 4 (id=2161): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff3, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0xdf15003157931110, 0x8084}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'ip6gretap0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x27d, 0x90f}}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000084}, 0x4800) recvmmsg(r0, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/25, 0x19}, {&(0x7f0000000380)=""/93, 0x5d}, {&(0x7f0000000940)=""/132, 0x84}, {&(0x7f0000001b00)=""/4101, 0x1005}, {&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000001a80)=""/102, 0x66}], 0x6}, 0xc}, {{0x0, 0x0, 0x0}, 0x24c9ddf}, {{0x0, 0x0, 0x0}, 0xf04}, {{0x0, 0x0, 0x0}, 0x5}], 0x4, 0x40000000, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'dvmrp1\x00', {0x9}, 0x8697}) 823.40976ms ago: executing program 3 (id=2162): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000005c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x34, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0xfd}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xc}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4854}, 0x20008040) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r8, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x1ffe1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r10, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 663.982673ms ago: executing program 1 (id=2163): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000008000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\b\x00'/28], 0x50) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) sendmsg$can_bcm(r1, &(0x7f0000000a40)={&(0x7f00000008c0), 0x10, &(0x7f0000000a00)={&(0x7f0000000900)=ANY=[@ANYRESHEX=r4, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRESOCT=0x0, @ANYRES64=0xea60, @ANYBLOB="020000a001000000040000c026010000c6f747adf20c861d88ba50202c1e4d5e6da344534ce4e39ce6af8ee99c50fc04d1d305b273439e7dfc0e8b4a000004c805a8c193a1ceed7cdb4eda49652d87bb"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x40194) socket$netlink(0x10, 0x3, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) pipe(&(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x3, 0x5, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000ae3", @ANYRES16=r7, @ANYRES8=r5], 0x18}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r9, &(0x7f0000000340)=@file={0x1, './cgroup.cpu/cgroup.procs/file0\x00'}, 0x6e) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='GPL\x00', 0xffffffff, 0xd3, &(0x7f0000000780)=""/211, 0x41100, 0x10, '\x00', 0x0, @sk_reuseport}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0)=r10, 0x4) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001"], 0x98}}, 0x0) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 663.013596ms ago: executing program 4 (id=2164): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)={@ifindex, 0xffffffffffffffff, 0x12, 0x2004}, 0x20) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x7c, r1, 0x5, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac14, 0x1d, 0xfac03, 0xfac14, 0xfac05]}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac04}, @NL80211_ATTR_PMK={0x34, 0xfe, "69a2abc9a5b40b31298a20d305b3e2c5458ef270a9875fade01916a3f92cd436024383547186ff4bea10d85b830fcac3"}]]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000000)="10", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x7, 0xe, 0x9, 0x0, 0x1, 0x8, 0xa7, 0x4, 0x5, 0xf1, 0xb, 0x7, 0x0, 0x7}, 0xe) poll(&(0x7f0000000080)=[{r3, 0x46a8}], 0x1, 0x400) shutdown(r3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8004"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) socket(0x2b, 0x1, 0xfffffffc) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getroute={0x1c, 0x1a, 0x10, 0x70bd26, 0x25dfdbff, {0x2, 0x80, 0x0, 0xd, 0xfc, 0x3, 0x0, 0xb, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @empty}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @rand_addr=0x5}}}], 0x20}}], 0x300, 0x4040880) 582.593747ms ago: executing program 0 (id=2165): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001140), 0x0, 0xc004) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000001200)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x4, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5a}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x7}}, [], {{0x6, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x2, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x6}], 0x3e8, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 483.773415ms ago: executing program 3 (id=2166): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073597a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c00014000000000000000002c0001800a0001006c696d69740000001c0002800c00024000000000100000000c0001"], 0x110}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) (async) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'rose0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'rose0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x2, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x7, 0x8, 0x101, 0x14, 0xd}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket(0x2, 0xa, 0x300) (async) socket(0x2, 0xa, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb001480080018"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb001480080018"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) close(0x3) r7 = socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) close(0x3) (async) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @multicast2}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x1103, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000100)={r9, 0xffff8000}, 0xfffffd91) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10210}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c000000237740969abfe13fab629dcf120abb9ec0d1292857b64efe16afddd9ff14bd5e5fc7768b24dfe8abdb742d76dbabd5390a0838aa4a363307df8e8554d5bdd3128c4763d7d457f2fbaf75a05d0bf2fb67dc30ef14256d992e51dfae312f32bda9", @ANYRES16=r10, @ANYBLOB="00082cbd7000fcdbdf250500000008000600ff7f000008000400090000000800050005000000080006000900000008000500d8a30000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000180}, 0x8001) (async) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10210}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c000000237740969abfe13fab629dcf120abb9ec0d1292857b64efe16afddd9ff14bd5e5fc7768b24dfe8abdb742d76dbabd5390a0838aa4a363307df8e8554d5bdd3128c4763d7d457f2fbaf75a05d0bf2fb67dc30ef14256d992e51dfae312f32bda9", @ANYRES16=r10, @ANYBLOB="00082cbd7000fcdbdf250500000008000600ff7f000008000400090000000800050005000000080006000900000008000500d8a30000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000180}, 0x8001) recvmmsg(r2, &(0x7f00000002c0), 0x0, 0x40002162, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 397.827234ms ago: executing program 1 (id=2167): socket$inet_udplite(0x2, 0x2, 0x88) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x82, &(0x7f00000001c0), 0x8) (async) splice(r0, 0x0, r1, 0x0, 0x1, 0xe) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x8001, @mcast1, 0x7}, 0x1c) 373.764568ms ago: executing program 5 (id=2168): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x3}, 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000004900030073797a320000000014000000110001", @ANYRES32=r1], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}}, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x20) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000b200"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000373010b000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 248.010721ms ago: executing program 0 (id=2169): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 226.529386ms ago: executing program 3 (id=2170): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffc1b) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000400)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440)=[@window={0x3, 0x4, 0x8}, @sack_perm, @window={0x3, 0x3, 0x4}, @sack_perm, @window={0x3, 0x678, 0x7ff}, @mss, @mss={0x2, 0x4}], 0x7) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = getpid() syz_emit_ethernet(0x83, &(0x7f0000000500)=ANY=[@ANYRESDEC=r3], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002a347c792a3184f14120f200bd310000080000009500b900000a"], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x1018, &(0x7f0000001200)=""/4120, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000003c0)=r3) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x100004, 0x620104, 0xb, 0x1}, 0x50) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r7, &(0x7f0000000080)={{0x3, @default, 0x1}, [@null, @default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bind$ax25(r7, &(0x7f0000000480)={{0x3, @null, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r11, 0x0, 0xf3a, 0x0) splice(r8, 0x0, r11, 0x0, 0x80, 0x6) write(r11, &(0x7f0000003300)="ac", 0x1) write(r9, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r6, 0x4}, 0x38) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 133.065293ms ago: executing program 1 (id=2171): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000040), &(0x7f0000000180)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x4, 0x21, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6, 0x1}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) write$cgroup_subtree(r2, &(0x7f0000000700)=ANY=[], 0xfe33) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) 0s ago: executing program 5 (id=2172): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000008007111b6002a00000095000000000000009500a50500"/48], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) kernel console output (not intermixed with test programs): 4.496'. [ 151.868907][ T7943] netlink: 'syz.1.499': attribute type 1 has an invalid length. [ 151.910172][ T7943] netlink: 36 bytes leftover after parsing attributes in process `syz.1.499'. [ 151.975158][ T7949] !: renamed from dummy0 (while UP) [ 152.605118][ T7958] lo speed is unknown, defaulting to 1000 [ 152.707919][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.504'. [ 153.958539][ T8021] netlink: 'syz.0.511': attribute type 1 has an invalid length. [ 154.350055][ T8021] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.413969][ T8028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.512'. [ 154.484479][ T8030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.513'. [ 155.249837][ T8021] bond3: (slave gretap1): making interface the new active one [ 155.272762][ T8021] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 155.537298][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.517'. [ 155.554431][ T8053] netlink: 40 bytes leftover after parsing attributes in process `syz.0.517'. [ 155.581402][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.520'. [ 156.583033][ T8098] batman_adv: batadv0: Adding interface: macvlan2 [ 156.589998][ T8098] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1340 would solve the problem. [ 156.779059][ T8098] batman_adv: batadv0: Interface activated: macvlan2 [ 156.867840][ T8100] tipc: Enabling of bearer rejected, failed to enable media [ 157.097955][ T8115] netlink: 224 bytes leftover after parsing attributes in process `syz.3.533'. [ 157.148427][ T8118] netlink: 'syz.1.534': attribute type 10 has an invalid length. [ 157.212137][ T8118] team0: Port device dummy0 added [ 157.760243][ T8164] netlink: 212172 bytes leftover after parsing attributes in process `syz.0.543'. [ 157.996207][ T8165] lo speed is unknown, defaulting to 1000 [ 158.160407][ T8176] nbd: must specify at least one socket [ 158.513017][ T8198] bridge0: port 3(macsec0) entered blocking state [ 158.520126][ T8198] bridge0: port 3(macsec0) entered disabled state [ 158.532004][ T8198] macsec0: entered allmulticast mode [ 158.542437][ T8198] macsec0: entered promiscuous mode [ 158.622795][ T8203] netlink: 104 bytes leftover after parsing attributes in process `syz.2.551'. [ 158.756787][ T8214] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.555'. [ 158.908507][ T5936] IPVS: starting estimator thread 0... [ 158.916895][ T8217] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 158.952753][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.556'. [ 158.962507][ T8220] netlink: 20 bytes leftover after parsing attributes in process `syz.1.557'. [ 159.001747][ T8218] IPVS: using max 26 ests per chain, 62400 per kthread [ 159.512870][ T8249] lo speed is unknown, defaulting to 1000 [ 159.653327][ T8259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.569'. [ 159.793314][ T8261] delete_channel: no stack [ 159.901088][ T8272] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.909060][ T8272] IPv6: NLM_F_CREATE should be set when creating new route [ 159.926756][ T8276] netlink: 'syz.4.574': attribute type 12 has an invalid length. [ 159.936672][ T8275] netlink: 'syz.3.572': attribute type 1 has an invalid length. [ 159.986397][ T8275] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.018798][ T8283] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.028145][ T8283] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 160.044752][ T8283] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 160.092184][ T8281] lo: entered allmulticast mode [ 160.126065][ T8281] tunl0: entered allmulticast mode [ 160.144865][ T8281] gre0: entered allmulticast mode [ 160.169832][ T8281] gretap0: entered allmulticast mode [ 160.192671][ T8281] erspan0: entered allmulticast mode [ 160.205987][ T8281] ip_vti0: entered allmulticast mode [ 160.225950][ T8281] ip6_vti0: entered allmulticast mode [ 160.237822][ T8281] sit0: entered allmulticast mode [ 160.297469][ T8281] ip6tnl0: entered allmulticast mode [ 160.309526][ T8281] ip6gre0: left promiscuous mode [ 160.328399][ T8281] syz_tun: entered allmulticast mode [ 160.346284][ T8281] ip6gretap0: entered allmulticast mode [ 160.362926][ T8281] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.372663][ T8281] bridge0: entered allmulticast mode [ 160.384720][ T8281] vcan0: entered allmulticast mode [ 160.398302][ T8281] team0: entered allmulticast mode [ 160.405183][ T8281] team_slave_0: entered allmulticast mode [ 160.421352][ T8281] team_slave_1: entered allmulticast mode [ 160.442680][ T8281] dummy0: entered allmulticast mode [ 160.474014][ T8281] nlmon0: entered allmulticast mode [ 160.488681][ T8281] caif0: entered allmulticast mode [ 160.496217][ T8281] batadv0: entered allmulticast mode [ 160.509270][ T8281] vxcan0: entered allmulticast mode [ 160.528066][ T8281] vxcan1: entered allmulticast mode [ 160.543402][ T8281] veth0: entered allmulticast mode [ 160.565349][ T8281] veth1: entered allmulticast mode [ 160.577996][ T8281] wg0: entered allmulticast mode [ 160.587904][ T8281] wg1: entered allmulticast mode [ 160.598332][ T8281] wg2: entered allmulticast mode [ 160.608542][ T8281] veth0_to_bridge: entered allmulticast mode [ 160.623821][ T8281] veth1_to_bridge: entered allmulticast mode [ 160.639034][ T8281] veth0_to_bond: entered allmulticast mode [ 160.657113][ T8281] bond_slave_0: entered allmulticast mode [ 160.674836][ T8281] veth1_to_bond: entered allmulticast mode [ 160.685891][ T8281] bond_slave_1: entered allmulticast mode [ 160.698325][ T8281] veth0_to_team: entered allmulticast mode [ 160.719418][ T8281] veth1_to_team: entered allmulticast mode [ 160.740050][ T8281] veth0_to_batadv: entered allmulticast mode [ 160.754327][ T8281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.766602][ T8281] batadv_slave_0: entered allmulticast mode [ 160.778195][ T8281] veth1_to_batadv: entered allmulticast mode [ 160.792802][ T8281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.804508][ T8281] batadv_slave_1: entered allmulticast mode [ 160.815171][ T8281] xfrm0: entered allmulticast mode [ 160.826452][ T8281] veth0_to_hsr: entered allmulticast mode [ 160.835680][ T8281] hsr_slave_0: entered allmulticast mode [ 160.845728][ T8281] veth1_to_hsr: entered allmulticast mode [ 160.856535][ T8281] hsr_slave_1: entered allmulticast mode [ 160.867778][ T8281] hsr0: entered allmulticast mode [ 160.877049][ T8281] veth1_virt_wifi: entered allmulticast mode [ 160.890059][ T8281] veth0_virt_wifi: entered allmulticast mode [ 160.900032][ T8281] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 160.909800][ T8281] veth1_vlan: entered allmulticast mode [ 160.922494][ T8281] veth0_vlan: entered allmulticast mode [ 160.940316][ T8281] vlan0: left promiscuous mode [ 160.946613][ T8281] vlan0: entered allmulticast mode [ 160.953761][ T8281] vlan1: entered allmulticast mode [ 160.962008][ T8281] macvlan0: entered allmulticast mode [ 160.973216][ T8281] macvlan1: entered allmulticast mode [ 160.987238][ T8281] ipvlan0: entered allmulticast mode [ 160.995666][ T8281] ipvlan1: entered allmulticast mode [ 161.003842][ T8281] veth1_macvtap: entered allmulticast mode [ 161.015659][ T8281] veth0_macvtap: entered allmulticast mode [ 161.026911][ T8281] macvtap0: entered allmulticast mode [ 161.036510][ T8281] macsec0: entered allmulticast mode [ 161.047530][ T8281] geneve0: entered allmulticast mode [ 161.058705][ T8281] geneve1: entered allmulticast mode [ 161.072022][ T8281] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 161.089157][ T8281] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 161.103043][ T8281] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 161.117957][ T8281] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 161.133949][ T8281] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 161.145510][ T8281] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 161.153383][ T8281] bond_slave_0.0: entered allmulticast mode [ 161.160083][ T8281] veth2: entered allmulticast mode [ 161.166086][ T8281] veth3: entered allmulticast mode [ 161.172744][ T8281] bridge1: entered allmulticast mode [ 161.178723][ T8281] gtp0: entered allmulticast mode [ 161.187585][ T8281] bridge2: entered allmulticast mode [ 161.193652][ T8281] erspan1: left promiscuous mode [ 161.199004][ T8281] erspan1: entered allmulticast mode [ 161.241851][ T5865] Bluetooth: hci4: command 0x0405 tx timeout [ 161.261445][ T8272] netlink: 'syz.2.573': attribute type 1 has an invalid length. [ 161.281352][ T8272] __nla_validate_parse: 1 callbacks suppressed [ 161.281375][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.573'. [ 161.284270][ T8286] gretap1: entered promiscuous mode [ 161.317881][ T8286] bond2: (slave gretap1): making interface the new active one [ 161.336992][ T8286] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 161.356557][ T8283] macvlan2: entered promiscuous mode [ 161.366169][ T8283] macvlan2: entered allmulticast mode [ 161.374272][ T8283] bond2: entered promiscuous mode [ 161.383292][ T8283] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 161.408756][ T8283] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 161.429039][ T8283] bond2: left promiscuous mode [ 161.465574][ T49] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.521291][ T49] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.694650][ T8313] TCP: TCP_TX_DELAY enabled [ 161.710690][ T49] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.745779][ T8321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.582'. [ 162.126523][ T8338] netlink: 'syz.3.588': attribute type 10 has an invalid length. [ 162.498121][ T8354] netlink: 20 bytes leftover after parsing attributes in process `syz.0.592'. [ 163.125181][ T8382] lo speed is unknown, defaulting to 1000 [ 163.526755][ T8412] netlink: 'syz.4.606': attribute type 1 has an invalid length. [ 163.575316][ T8412] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 163.833960][ T8430] netlink: 56 bytes leftover after parsing attributes in process `syz.4.609'. [ 163.987566][ T8435] macsec0: entered allmulticast mode [ 164.025544][ T8434] lo speed is unknown, defaulting to 1000 [ 164.163591][ T8446] netlink: 68 bytes leftover after parsing attributes in process `syz.1.616'. [ 164.285212][ T5848] IPVS: starting estimator thread 0... [ 164.391112][ T8461] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 164.403490][ T8453] IPVS: using max 24 ests per chain, 57600 per kthread [ 164.440465][ T8461] netlink: 40 bytes leftover after parsing attributes in process `syz.0.620'. [ 164.574992][ T8461] team0: Port device geneve0 added [ 164.586703][ T8471] netlink: 'syz.3.621': attribute type 10 has an invalid length. [ 164.606214][ T6148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.676208][ T6148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.717827][ T6148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.855097][ T8478] netlink: 44 bytes leftover after parsing attributes in process `syz.1.624'. [ 164.872182][ T6148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.961835][ T8483] netlink: 'syz.0.625': attribute type 1 has an invalid length. [ 165.089148][ T8487] tun0: tun_chr_ioctl cmd 1074025675 [ 165.122436][ T8487] tun0: persist enabled [ 165.205771][ T8487] tun0: tun_chr_ioctl cmd 1074025675 [ 165.221559][ T8487] tun0: persist enabled [ 165.252926][ T8487] net_ratelimit: 5 callbacks suppressed [ 165.252946][ T8487] ip6gretap0: mtu less than device minimum [ 165.527707][ T8508] netlink: 108 bytes leftover after parsing attributes in process `syz.3.631'. [ 165.538833][ T8509] netlink: 'syz.2.632': attribute type 4 has an invalid length. [ 166.107701][ T8531] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 166.184411][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.641'. [ 166.246888][ T8542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.641'. [ 166.314388][ T8548] netlink: 28 bytes leftover after parsing attributes in process `syz.1.644'. [ 166.385938][ T8548] netlink: 'syz.1.644': attribute type 1 has an invalid length. [ 166.399091][ T8548] netlink: 'syz.1.644': attribute type 1 has an invalid length. [ 166.416792][ T8548] netlink: 52 bytes leftover after parsing attributes in process `syz.1.644'. [ 166.422665][ T8555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.646'. [ 166.663640][ T8568] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 166.686250][ T8567] syzkaller0: entered promiscuous mode [ 166.698095][ T8567] syzkaller0: entered allmulticast mode [ 166.884099][ T8576] lo speed is unknown, defaulting to 1000 [ 167.139011][ T8587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.653'. [ 167.273862][ T8590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.654'. [ 167.576662][ T8603] netlink: 'syz.1.657': attribute type 11 has an invalid length. [ 167.746666][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.661'. [ 168.158247][ T8633] netlink: 'syz.0.668': attribute type 10 has an invalid length. [ 168.190244][ T8633] batman_adv: batadv0: Adding interface: team0 [ 168.230740][ T8636] netlink: 'syz.0.668': attribute type 10 has an invalid length. [ 168.231314][ T8633] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.239450][ T8636] netlink: 2 bytes leftover after parsing attributes in process `syz.0.668'. [ 168.275574][ T8633] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 168.296073][ T8627] bridge: RTM_NEWNEIGH with invalid ether address [ 168.306881][ T8632] netlink: 288 bytes leftover after parsing attributes in process `syz.1.669'. [ 168.341377][ T8636] team0: entered promiscuous mode [ 168.378901][ T8636] team_slave_0: entered promiscuous mode [ 168.437938][ T8636] team_slave_1: entered promiscuous mode [ 168.465328][ T8636] geneve0: entered promiscuous mode [ 168.493783][ T8636] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.508237][ T8636] batman_adv: batadv0: Interface activated: team0 [ 168.516029][ T8636] batman_adv: batadv0: Interface deactivated: team0 [ 168.540195][ T8636] batman_adv: batadv0: Removing interface: team0 [ 168.557728][ T8636] bridge0: port 4(team0) entered blocking state [ 168.566091][ T8636] bridge0: port 4(team0) entered disabled state [ 168.573800][ T8636] team0: entered allmulticast mode [ 168.579778][ T8636] team_slave_0: entered allmulticast mode [ 168.587964][ T8636] team_slave_1: entered allmulticast mode [ 168.595188][ T8636] geneve0: entered allmulticast mode [ 168.623647][ T8644] ip6erspan0: entered allmulticast mode [ 168.699765][ T8650] netlink: 'syz.4.674': attribute type 2 has an invalid length. [ 168.719241][ T8650] : entered promiscuous mode [ 168.921036][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.678'. [ 168.985301][ T8674] C: renamed from lo [ 169.002498][ T8674] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 169.087200][ T8674] netlink: 'syz.0.679': attribute type 1 has an invalid length. [ 169.227625][ T8677] lo speed is unknown, defaulting to 1000 [ 169.464859][ T8690] netlink: zone id is out of range [ 169.493754][ T8690] netlink: zone id is out of range [ 169.531411][ T8690] netlink: zone id is out of range [ 169.661849][ T8690] netlink: zone id is out of range [ 169.721383][ T8690] netlink: zone id is out of range [ 169.747442][ T8690] netlink: zone id is out of range [ 169.996224][ T8703] lo speed is unknown, defaulting to 1000 [ 170.010338][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.687'. [ 170.897112][ T8764] lo speed is unknown, defaulting to 1000 [ 171.332484][ T8771] __nla_validate_parse: 3 callbacks suppressed [ 171.332508][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.703'. [ 171.910750][ T8791] netlink: 24 bytes leftover after parsing attributes in process `syz.4.707'. [ 172.274404][ T8797] lo speed is unknown, defaulting to 1000 [ 172.424102][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.711'. [ 172.495548][ T5848] IPVS: starting estimator thread 0... [ 172.621572][ T8813] IPVS: using max 27 ests per chain, 64800 per kthread [ 172.679079][ T8817] syz.1.713: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 172.708417][ T8817] CPU: 1 UID: 0 PID: 8817 Comm: syz.1.713 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 172.708452][ T8817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 172.708465][ T8817] Call Trace: [ 172.708473][ T8817] [ 172.708483][ T8817] dump_stack_lvl+0x189/0x250 [ 172.708519][ T8817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.708543][ T8817] ? __pfx__printk+0x10/0x10 [ 172.708572][ T8817] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 172.708600][ T8817] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 172.708628][ T8817] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 172.708659][ T8817] warn_alloc+0x214/0x310 [ 172.708690][ T8817] ? stack_depot_save_flags+0x40/0x900 [ 172.708718][ T8817] ? __pfx_warn_alloc+0x10/0x10 [ 172.708753][ T8817] ? kasan_save_track+0x4f/0x80 [ 172.708780][ T8817] ? xskq_create+0x56/0x170 [ 172.708812][ T8817] ? xsk_init_queue+0xb0/0x110 [ 172.708858][ T8817] ? xsk_setsockopt+0x4dc/0x8d0 [ 172.708886][ T8817] ? do_sock_setsockopt+0x17c/0x1b0 [ 172.708907][ T8817] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 172.708937][ T8817] ? do_syscall_64+0xfa/0x3b0 [ 172.708959][ T8817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.708991][ T8817] __vmalloc_node_range_noprof+0x125/0x12f0 [ 172.709058][ T8817] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 172.709098][ T8817] ? __kasan_kmalloc+0x93/0xb0 [ 172.709131][ T8817] vmalloc_user_noprof+0xad/0xf0 [ 172.709162][ T8817] ? xskq_create+0xbf/0x170 [ 172.709215][ T8817] xskq_create+0xbf/0x170 [ 172.709253][ T8817] xsk_init_queue+0xb0/0x110 [ 172.709289][ T8817] xsk_setsockopt+0x4dc/0x8d0 [ 172.709324][ T8817] ? __pfx_xsk_setsockopt+0x10/0x10 [ 172.709357][ T8817] ? __pfx_aa_sk_perm+0x10/0x10 [ 172.709397][ T8817] ? aa_sock_opt_perm+0x74/0x110 [ 172.709420][ T8817] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 172.709441][ T8817] ? __pfx_xsk_setsockopt+0x10/0x10 [ 172.709475][ T8817] do_sock_setsockopt+0x17c/0x1b0 [ 172.709506][ T8817] __x64_sys_setsockopt+0x13f/0x1b0 [ 172.709539][ T8817] do_syscall_64+0xfa/0x3b0 [ 172.709559][ T8817] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.709580][ T8817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.709601][ T8817] ? clear_bhb_loop+0x60/0xb0 [ 172.709628][ T8817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.709649][ T8817] RIP: 0033:0x7fa290d8e9a9 [ 172.709669][ T8817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.709686][ T8817] RSP: 002b:00007fa291c19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 172.709709][ T8817] RAX: ffffffffffffffda RBX: 00007fa290fb5fa0 RCX: 00007fa290d8e9a9 [ 172.709725][ T8817] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 172.709738][ T8817] RBP: 00007fa290e10d69 R08: 0000000000000004 R09: 0000000000000000 [ 172.709751][ T8817] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.709764][ T8817] R13: 0000000000000000 R14: 00007fa290fb5fa0 R15: 00007fff73b074a8 [ 172.709799][ T8817] [ 172.709820][ T8817] Mem-Info: [ 172.926328][ T8824] netlink: 'syz.1.713': attribute type 10 has an invalid length. [ 172.926356][ T8824] netlink: 40 bytes leftover after parsing attributes in process `syz.1.713'. [ 173.090057][ T8824] batman_adv: batadv0: Adding interface: virt_wifi0 [ 173.099457][ T8817] active_anon:6693 inactive_anon:0 isolated_anon:0 [ 173.099457][ T8817] active_file:1421 inactive_file:39854 isolated_file:0 [ 173.099457][ T8817] unevictable:768 dirty:220 writeback:0 [ 173.099457][ T8817] slab_reclaimable:11551 slab_unreclaimable:127611 [ 173.099457][ T8817] mapped:32078 shmem:1497 pagetables:945 [ 173.099457][ T8817] sec_pagetables:0 bounce:0 [ 173.099457][ T8817] kernel_misc_reclaimable:0 [ 173.099457][ T8817] free:1294159 free_pcp:15289 free_cma:0 [ 173.181067][ T8824] batman_adv: batadv0: Interface activated: virt_wifi0 [ 173.214653][ T8817] Node 0 active_anon:27272kB inactive_anon:0kB active_file:5684kB inactive_file:159212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128312kB dirty:880kB writeback:0kB shmem:4452kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12648kB pagetables:3616kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 173.271723][ T8817] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 173.337950][ T8817] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 173.391682][ T8817] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 173.416904][ T8817] Node 0 DMA32 free:1260612kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27624kB inactive_anon:0kB active_file:5684kB inactive_file:157636kB unevictable:1536kB writepending:880kB present:3129332kB managed:2558508kB mlocked:0kB bounce:0kB free_pcp:39592kB local_pcp:24864kB free_cma:0kB [ 173.474500][ T8835] netlink: 16 bytes leftover after parsing attributes in process `syz.4.717'. [ 173.487511][ T8817] lowmem_reserve[]: 0 0 1 1 1 [ 173.505677][ T8817] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 173.555857][ T8838] netlink: 16 bytes leftover after parsing attributes in process `syz.4.717'. [ 173.586029][ T8817] lowmem_reserve[]: 0 0 0 0 0 [ 173.610374][ T8817] Node 1 Normal free:3900216kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21024kB local_pcp:7040kB free_cma:0kB [ 173.667774][ T8817] lowmem_reserve[]: 0 0 0 0 0 [ 173.673649][ T8817] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 173.706857][ T8817] Node 0 DMA32: 200*4kB (U) 188*8kB (UM) 100*16kB (UME) 243*32kB (UM) 28*64kB (UM) 53*128kB (UM) 51*256kB (UM) 15*512kB (ME) 3*1024kB (M) 4*2048kB (UM) 294*4096kB (UM) = 1256480kB [ 173.749676][ T8817] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 173.784223][ T8817] Node 1 Normal: 190*4kB (UE) 48*8kB (UME) 48*16kB (UME) 70*32kB (UME) 22*64kB (UME) 9*128kB (UME) 3*256kB (ME) 3*512kB (ME) 2*1024kB (UM) 1*2048kB (U) 949*4096kB (ME) = 3900216kB [ 173.848278][ T8817] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 173.858673][ T8817] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 173.889991][ T8817] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 173.904363][ T8817] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 173.926875][ T8817] 42769 total pagecache pages [ 173.949139][ T8817] 0 pages in swap cache [ 173.959498][ T8817] Free swap = 124996kB [ 173.965515][ T8817] Total swap = 124996kB [ 173.976814][ T8817] 2097051 pages RAM [ 174.000800][ T8817] 0 pages HighMem/MovableOnly [ 174.006969][ T8817] 425382 pages reserved [ 174.015409][ T8817] 0 pages cma reserved [ 174.513059][ T8832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.716'. [ 174.540332][ T8832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.716'. [ 174.637060][ T8840] netlink: 'syz.3.718': attribute type 12 has an invalid length. [ 174.648430][ T8840] netlink: 132 bytes leftover after parsing attributes in process `syz.3.718'. [ 174.850724][ T8852] netlink: 'syz.0.721': attribute type 1 has an invalid length. [ 174.907928][ T8854] netlink: 32 bytes leftover after parsing attributes in process `syz.1.722'. [ 175.004738][ T8860] net_ratelimit: 8 callbacks suppressed [ 175.004762][ T8860] openvswitch: netlink: Multiple metadata blocks provided [ 175.101480][ T8857] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 175.168451][ T8874] syzkaller0: entered promiscuous mode [ 175.191415][ T8874] syzkaller0: entered allmulticast mode [ 175.381242][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.415878][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.508383][ T8901] netlink: 'syz.1.733': attribute type 10 has an invalid length. [ 175.635889][ T8901] dummy0: entered promiscuous mode [ 175.648541][ T8901] dummy0: entered allmulticast mode [ 175.708251][ T8901] team0: Port device dummy0 removed [ 175.723654][ T8901] bridge0: port 3(dummy0) entered blocking state [ 175.731968][ T8901] bridge0: port 3(dummy0) entered disabled state [ 175.765041][ T8892] syz.3.730 (8892) used greatest stack depth: 16776 bytes left [ 175.855945][ T8908] lo speed is unknown, defaulting to 1000 [ 176.263638][ T8915] lo speed is unknown, defaulting to 1000 [ 176.486537][ T8925] __nla_validate_parse: 2 callbacks suppressed [ 176.486561][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.738'. [ 176.556036][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.738'. [ 177.388987][ T8964] netlink: 20 bytes leftover after parsing attributes in process `syz.4.744'. [ 177.551226][ T8964] netlink: 32 bytes leftover after parsing attributes in process `syz.4.744'. [ 177.700069][ T8975] netlink: 'syz.2.746': attribute type 10 has an invalid length. [ 177.902261][ T8975] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 177.942620][ T8975] batman_adv: batadv0: Adding interface: netdevsim0 [ 178.011346][ T8975] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.087837][ T8975] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 178.196973][ T8994] netlink: 76 bytes leftover after parsing attributes in process `syz.3.748'. [ 178.327562][ T8985] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 178.473260][ T8975] lo speed is unknown, defaulting to 1000 [ 178.584883][ T8977] lo speed is unknown, defaulting to 1000 [ 179.355413][ T9042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.759'. [ 179.365989][ T9043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.759'. [ 179.915563][ T9068] netlink: 40 bytes leftover after parsing attributes in process `syz.2.763'. [ 180.136407][ T9070] lo speed is unknown, defaulting to 1000 [ 180.487683][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.771'. [ 180.513657][ T9089] bond_slave_0: entered promiscuous mode [ 180.519950][ T9089] bond_slave_1: entered promiscuous mode [ 180.533688][ T9089] vlan1: entered promiscuous mode [ 180.539060][ T9089] bond0: entered promiscuous mode [ 180.547241][ T9087] netlink: 2 bytes leftover after parsing attributes in process `syz.1.771'. [ 181.444149][ T9107] team0: left allmulticast mode [ 181.449092][ T9107] team_slave_0: left allmulticast mode [ 181.504310][ T9107] team_slave_1: left allmulticast mode [ 181.522253][ T9107] geneve0: left allmulticast mode [ 181.527755][ T9107] bridge0: port 4(team0) entered disabled state [ 181.565896][ T9107] bridge_slave_0: left allmulticast mode [ 181.581266][ T9107] bridge_slave_0: left promiscuous mode [ 181.587140][ T9107] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.623761][ T9107] bridge_slave_1: left allmulticast mode [ 181.641165][ T9107] bridge_slave_1: left promiscuous mode [ 181.647739][ T9107] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.676471][ T9107] bond0: (slave bond_slave_0): Releasing backup interface [ 181.690909][ T9107] bond0: (slave bond_slave_1): Releasing backup interface [ 181.706155][ T9107] team_slave_0: left promiscuous mode [ 181.719608][ T9107] team0: Port device team_slave_0 removed [ 181.735793][ T9107] team_slave_1: left promiscuous mode [ 181.747804][ T9107] team0: Port device team_slave_1 removed [ 181.757681][ T9107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.769070][ T9107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.779387][ T9107] macsec0: left allmulticast mode [ 181.788100][ T9107] macsec0: left promiscuous mode [ 181.796745][ T9107] bridge0: port 3(macsec0) entered disabled state [ 181.807708][ T9107] geneve0: left promiscuous mode [ 181.819629][ T9107] team0: Port device geneve0 removed [ 181.829654][ T9107] bond1: (slave bridge1): Releasing active interface [ 181.840410][ T9107] batman_adv: batadv0: Removing interface: macsec1 [ 181.853034][ T9107] bond2: (slave geneve2): Releasing active interface [ 181.865259][ T9107] bond3: (slave gretap1): Releasing active interface [ 181.929444][ T6149] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.974961][ T6149] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.989106][ T6149] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.018484][ T6149] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.217469][ T9133] lo speed is unknown, defaulting to 1000 [ 182.560135][ T9151] __nla_validate_parse: 3 callbacks suppressed [ 182.560156][ T9151] netlink: 256 bytes leftover after parsing attributes in process `syz.2.785'. [ 182.714506][ T9149] netlink: 28 bytes leftover after parsing attributes in process `syz.0.782'. [ 182.753313][ T9149] netlink: 28 bytes leftover after parsing attributes in process `syz.0.782'. [ 182.822293][ T9157] lo speed is unknown, defaulting to 1000 [ 183.101175][ T9165] IPVS: Scheduler module ip_vs_ not found [ 183.162602][ T9168] can: request_module (can-proto-4) failed. [ 183.173531][ T9170] lo speed is unknown, defaulting to 1000 [ 183.419746][ T9182] sctp: [Deprecated]: syz.1.791 (pid 9182) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.419746][ T9182] Use struct sctp_sack_info instead [ 183.545130][ T9192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.794'. [ 185.340323][ T9190] tipc: Enabled bearer , priority 0 [ 185.405424][ T9192] hsr_slave_1 (unregistering): left promiscuous mode [ 185.422795][ T9195] syzkaller0: entered promiscuous mode [ 185.428413][ T9195] syzkaller0: entered allmulticast mode [ 185.502219][ T9213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.796'. [ 185.905018][ T9200] tipc: Resetting bearer [ 185.932630][ T9200] tipc: Disabling bearer [ 185.987144][ T9231] ip6gre2: entered promiscuous mode [ 186.123286][ T9238] netlink: 204 bytes leftover after parsing attributes in process `syz.2.801'. [ 186.448601][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.808'. [ 186.536559][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.808'. [ 186.954791][ T9284] netlink: 48 bytes leftover after parsing attributes in process `syz.4.814'. [ 187.354702][ T9292] tipc: Enabled bearer , priority 0 [ 187.364042][ T9292] syzkaller0: entered promiscuous mode [ 187.378221][ T9292] syzkaller0: entered allmulticast mode [ 187.412758][ T9292] tipc: Resetting bearer [ 187.420745][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.817'. [ 187.435960][ T9292] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 187.444236][ T9292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.472957][ T9291] tipc: Resetting bearer [ 187.495557][ T9291] tipc: Disabling bearer [ 187.760340][ T9309] sctp: [Deprecated]: syz.2.822 (pid 9309) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.760340][ T9309] Use struct sctp_sack_info instead [ 187.958955][ T9321] netlink: 68 bytes leftover after parsing attributes in process `syz.4.825'. [ 187.981973][ T9323] netlink: 'syz.3.826': attribute type 33 has an invalid length. [ 188.008029][ T9323] netlink: 152 bytes leftover after parsing attributes in process `syz.3.826'. [ 188.181077][ T9333] sctp: [Deprecated]: syz.3.828 (pid 9333) Use of int in maxseg socket option. [ 188.181077][ T9333] Use struct sctp_assoc_value instead [ 188.279264][ T9338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.832'. [ 188.294929][ T9338] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 188.380011][ T9340] tipc: Enabling of bearer rejected, failed to enable media [ 188.697065][ T9367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.837'. [ 189.127186][ T9381] netlink: 28 bytes leftover after parsing attributes in process `syz.4.843'. [ 189.153384][ T9381] netlink: 28 bytes leftover after parsing attributes in process `syz.4.843'. [ 189.996019][ T9420] netlink: 'syz.3.853': attribute type 7 has an invalid length. [ 190.012342][ T9420] netlink: 'syz.3.853': attribute type 8 has an invalid length. [ 190.053125][ T9425] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20002 [ 190.124537][ T9427] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 190.188444][ T9424] netlink: 'syz.1.855': attribute type 16 has an invalid length. [ 190.208945][ T9424] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.855'. [ 190.554502][ T9454] netlink: 28 bytes leftover after parsing attributes in process `syz.1.859'. [ 190.566313][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.859'. [ 190.657857][ T9454] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 190.836706][ T9469] netlink: 'syz.3.861': attribute type 10 has an invalid length. [ 190.955904][ T9467] bond2: (slave gretap1): Releasing active interface [ 191.066068][ T9479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.866'. [ 191.209303][ T9484] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.218535][ T9484] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.276219][ T9484] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 191.975498][ T9519] syzkaller0: entered promiscuous mode [ 191.982552][ T9519] syzkaller0: entered allmulticast mode [ 192.259081][ T9532] netlink: 'syz.1.882': attribute type 1 has an invalid length. [ 192.529199][ T9543] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 192.572316][ T9543] team0: Device ipvlan3 is already an upper device of the team interface [ 192.912059][ T9559] lo speed is unknown, defaulting to 1000 [ 193.395572][ T9585] netlink: 'syz.0.893': attribute type 13 has an invalid length. [ 193.421361][ T9584] lo speed is unknown, defaulting to 1000 [ 193.468395][ T9585] netlink: 'syz.0.893': attribute type 17 has an invalid length. [ 193.565471][ T9588] __nla_validate_parse: 10 callbacks suppressed [ 193.565494][ T9588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.895'. [ 193.864900][ T9585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.917148][ T9585] team0: left promiscuous mode [ 193.937317][ T9585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.987753][ T9593] netlink: 24 bytes leftover after parsing attributes in process `syz.1.896'. [ 194.242132][ T9619] netlink: 52 bytes leftover after parsing attributes in process `syz.4.900'. [ 194.301664][ T9619] netlink: 52 bytes leftover after parsing attributes in process `syz.4.900'. [ 194.340455][ T9619] netlink: 52 bytes leftover after parsing attributes in process `syz.4.900'. [ 194.409394][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.903'. [ 195.338165][ T9658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.913'. [ 195.364510][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.913'. [ 195.588513][ T9668] netlink: 'syz.0.916': attribute type 10 has an invalid length. [ 195.614172][ T9668] netlink: 40 bytes leftover after parsing attributes in process `syz.0.916'. [ 195.630953][ T9668] dummy0: entered promiscuous mode [ 195.649996][ T9668] bridge0: port 1(dummy0) entered blocking state [ 195.675681][ T9668] bridge0: port 1(dummy0) entered disabled state [ 195.715656][ T9668] dummy0: entered allmulticast mode [ 195.733955][ T9668] bridge0: port 1(dummy0) entered blocking state [ 195.741332][ T9668] bridge0: port 1(dummy0) entered forwarding state [ 195.883974][ T9669] delete_channel: no stack [ 195.956948][ T9683] netlink: 'syz.3.920': attribute type 1 has an invalid length. [ 196.632925][ T9718] nbd: device at index 3 is going down [ 197.005297][ T9740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.937'. [ 197.076355][ T9744] sch_tbf: burst 2 is lower than device lo mtu (1294) ! [ 197.114290][ T9744] sch_tbf: burst 2 is lower than device lo mtu (1294) ! [ 197.138324][ T9744] sch_tbf: burst 2 is lower than device lo mtu (1294) ! [ 197.971032][ T9791] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 198.187836][ T9797] netlink: 'syz.2.952': attribute type 11 has an invalid length. [ 198.340228][ T9810] netlink: 'syz.3.956': attribute type 10 has an invalid length. [ 198.365362][ T9810] !: entered promiscuous mode [ 198.370212][ T9810] !: entered allmulticast mode [ 198.422061][ T9810] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 198.868315][ T9837] lo speed is unknown, defaulting to 1000 [ 198.916711][ T9841] __nla_validate_parse: 5 callbacks suppressed [ 198.916731][ T9841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'. [ 199.057217][ T9841] macsec0: left allmulticast mode [ 199.091238][ T9850] syzkaller0: entered promiscuous mode [ 199.096787][ T9850] syzkaller0: entered allmulticast mode [ 199.535473][ T9845] lo speed is unknown, defaulting to 1000 [ 200.267492][ T9891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.971'. [ 200.383952][ T9905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.975'. [ 200.413742][ T9903] tun0: tun_chr_ioctl cmd 2147767520 [ 200.433606][ T9905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.975'. [ 200.467369][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.474186][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.492982][ T9905] netlink: 240 bytes leftover after parsing attributes in process `syz.1.975'. [ 200.723613][ T9911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.978'. [ 200.738789][ T9911] netlink: 'syz.0.978': attribute type 2 has an invalid length. [ 200.899484][ T2908] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.939239][ T2908] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.991524][ T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.019519][ T49] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.062992][ T9924] netlink: 244 bytes leftover after parsing attributes in process `syz.3.982'. [ 201.166446][ T9937] netlink: 36 bytes leftover after parsing attributes in process `syz.4.981'. [ 201.410528][ T9938] syzkaller0: create flow: hash 294366480 index 1 [ 201.516906][ T6150] syzkaller0: tun_net_xmit 76 [ 201.527439][ T6150] syzkaller0: tun_net_xmit 48 [ 201.533987][ T9936] syzkaller0: delete flow: hash 294366480 index 1 [ 201.636399][ T9951] sctp: [Deprecated]: syz.2.988 (pid 9951) Use of int in maxseg socket option. [ 201.636399][ T9951] Use struct sctp_assoc_value instead [ 202.098725][ T9954] netlink: 'syz.3.989': attribute type 13 has an invalid length. [ 202.120239][ T9954] netlink: 'syz.3.989': attribute type 17 has an invalid length. [ 202.377315][ T9971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.428000][ T9971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.585303][ T9960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.991'. [ 202.594904][ T9960] netlink: 'syz.0.991': attribute type 2 has an invalid length. [ 202.612247][ T9960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.991'. [ 203.787503][ T9954] !: left promiscuous mode [ 203.808696][ T9954] !: left allmulticast mode [ 203.822082][ T9954] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.864619][ T9974] bond0: entered promiscuous mode [ 203.887560][ T9974] batadv0: entered promiscuous mode [ 203.909429][ T9974] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 203.928482][ T9988] __nla_validate_parse: 3 callbacks suppressed [ 203.928502][ T9988] netlink: 32 bytes leftover after parsing attributes in process `syz.2.995'. [ 203.943046][ T9974] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 203.961434][ T9988] netlink: 'syz.2.995': attribute type 32 has an invalid length. [ 203.979929][ T9974] hsr1: entered allmulticast mode [ 203.987953][ T9974] bond0: entered allmulticast mode [ 203.999335][ T9974] batadv0: entered allmulticast mode [ 204.009260][ T9974] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 204.046383][ T9974] bond0: left promiscuous mode [ 204.078320][ T9974] batadv0: left promiscuous mode [ 204.086092][ T9998] netlink: 'syz.3.996': attribute type 1 has an invalid length. [ 204.121247][ T9998] netlink: 208 bytes leftover after parsing attributes in process `syz.3.996'. [ 204.151902][ T9998] netlink: 'syz.3.996': attribute type 1 has an invalid length. [ 204.176451][ T9998] netlink: 'syz.3.996': attribute type 2 has an invalid length. [ 204.227142][ T9987] netlink: 16 bytes leftover after parsing attributes in process `syz.3.996'. [ 204.259916][ T9995] netlink: 'syz.3.996': attribute type 3 has an invalid length. [ 204.368869][T10001] ip6erspan0: entered allmulticast mode [ 204.494629][T10005] lo speed is unknown, defaulting to 1000 [ 204.748804][T10026] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1006'. [ 204.870085][T10028] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1007'. [ 205.061568][T10035] sock: sock_set_timeout: `syz.0.1008' (pid 10035) tries to set negative timeout [ 205.446520][T10047] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 205.611630][T10051] syzkaller0: entered promiscuous mode [ 205.620234][T10051] syzkaller0: entered allmulticast mode [ 205.724362][T10060] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.932821][T10068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1017'. [ 205.969962][T10070] netlink: 'syz.0.1019': attribute type 4 has an invalid length. [ 205.981744][T10060] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.008380][T10070] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.1019'. [ 206.025195][T10067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1017'. [ 206.037531][T10067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1017'. [ 206.189341][T10060] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.400154][T10060] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.539115][T10085] bridge4: entered promiscuous mode [ 206.639963][T10096] lo speed is unknown, defaulting to 1000 [ 206.673368][T10102] netlink: 'syz.1.1026': attribute type 1 has an invalid length. [ 206.682428][T10102] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1026'. [ 206.842036][ T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.898690][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.977855][ T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.026000][ T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.094081][T10124] netlink: 'syz.1.1031': attribute type 1 has an invalid length. [ 208.242738][T10146] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:1 [ 208.263405][T10146] ieee802154 phy0 wpan0: encryption failed: -22 [ 208.279600][T10146] ieee802154 phy0 wpan0: encryption failed: -22 [ 208.452820][T10178] tipc: Enabled bearer , priority 0 [ 208.465045][T10178] syzkaller0: entered promiscuous mode [ 208.472961][T10178] syzkaller0: entered allmulticast mode [ 208.556347][T10178] tipc: Resetting bearer [ 208.591411][T10177] tipc: Resetting bearer [ 208.655324][T10177] tipc: Disabling bearer [ 208.919027][T10196] netlink: 'syz.4.1049': attribute type 10 has an invalid length. [ 208.953460][T10196] __nla_validate_parse: 7 callbacks suppressed [ 208.953480][T10196] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1049'. [ 208.981544][T10196] batadv0: entered promiscuous mode [ 208.991664][T10196] batadv0: entered allmulticast mode [ 208.998093][T10196] bridge0: port 3(batadv0) entered blocking state [ 209.005973][T10196] bridge0: port 3(batadv0) entered disabled state [ 209.149040][T10206] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1052'. [ 209.337544][T10217] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1057'. [ 209.453454][ T6150] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 209.463543][ T6150] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 209.701768][T10230] lo speed is unknown, defaulting to 1000 [ 209.775315][T10236] IPVS: Error connecting to the multicast addr [ 209.903427][T10229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.012312][ T9] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 210.161814][T10253] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1066'. [ 210.173912][T10253] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1066'. [ 210.189175][T10254] netlink: 'syz.0.1067': attribute type 2 has an invalid length. [ 210.248791][T10253] lo speed is unknown, defaulting to 1000 [ 210.262257][T10253] lo speed is unknown, defaulting to 1000 [ 210.282948][T10253] lo speed is unknown, defaulting to 1000 [ 210.346851][T10255] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.209574][T10253] infiniband syz0: set active [ 211.230108][T10282] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1073'. [ 211.259795][T10253] infiniband syz0: added lo [ 211.276068][T10253] syz0: rxe_create_cq: returned err = -12 [ 211.300365][T10253] infiniband syz0: Couldn't create ib_mad CQ [ 211.307853][T10253] infiniband syz0: Couldn't open port 1 [ 211.379423][ T5936] lo speed is unknown, defaulting to 1000 [ 211.410264][T10253] RDS/IB: syz0: added [ 211.425613][T10253] smc: adding ib device syz0 with port count 1 [ 211.438418][T10253] smc: ib device syz0 port 1 has pnetid [ 211.587281][ T5936] lo speed is unknown, defaulting to 1000 [ 211.616579][T10253] lo speed is unknown, defaulting to 1000 [ 211.638420][T10292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1077'. [ 211.655884][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1077'. [ 212.038162][T10300] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1079'. [ 212.298832][T10253] lo speed is unknown, defaulting to 1000 [ 212.597684][T10327] netlink: 'syz.4.1085': attribute type 5 has an invalid length. [ 212.619984][T10327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1085'. [ 212.747867][T10326] tipc: Enabled bearer , priority 0 [ 212.756917][T10323] lo speed is unknown, defaulting to 1000 [ 212.840331][T10324] tipc: Disabling bearer [ 212.849709][T10334] netlink: 'syz.4.1089': attribute type 1 has an invalid length. [ 212.977005][T10336] bond2: (slave bridge3): making interface the new active one [ 213.005135][T10336] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 213.017276][T10253] lo speed is unknown, defaulting to 1000 [ 213.063969][T10340] tipc: Enabled bearer , priority 10 [ 213.169488][T10340] tipc: Resetting bearer [ 213.229720][T10339] tipc: Resetting bearer [ 215.773863][T10339] tipc: Disabling bearer [ 215.784977][T10323] lo speed is unknown, defaulting to 1000 [ 215.984456][T10378] __nla_validate_parse: 4 callbacks suppressed [ 215.984481][T10378] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1098'. [ 216.214707][T10388] vlan0: entered promiscuous mode [ 216.220022][T10388] vlan0: left allmulticast mode [ 216.419799][T10397] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1106'. [ 216.478759][T10253] lo speed is unknown, defaulting to 1000 [ 216.499063][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1105'. [ 216.520265][T10397] bond0: entered promiscuous mode [ 216.557478][T10397] bond0: left promiscuous mode [ 216.950543][T10405] ieee802154 phy0 wpan0: encryption failed: -22 [ 216.975661][T10405] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1108'. [ 217.020083][T10405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1108'. [ 217.042068][T10253] lo speed is unknown, defaulting to 1000 [ 217.182153][T10412] netlink: 'syz.4.1110': attribute type 13 has an invalid length. [ 217.190143][T10412] netlink: 'syz.4.1110': attribute type 17 has an invalid length. [ 217.307030][T10412] bridge0: port 3(batadv0) entered blocking state [ 217.313805][T10412] bridge0: port 3(batadv0) entered forwarding state [ 217.321107][T10412] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.328318][T10412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.335890][T10412] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.343274][T10412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.369096][T10412] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 217.393196][T10422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.457082][T10253] lo speed is unknown, defaulting to 1000 [ 217.527344][T10411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.656919][T10409] lo speed is unknown, defaulting to 1000 [ 217.802562][T10428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1123'. [ 217.887532][ T5856] Bluetooth: hci1: command 0x0406 tx timeout [ 217.887565][ T5166] Bluetooth: hci3: command 0x0406 tx timeout [ 217.902653][ T5863] Bluetooth: hci2: command 0x0406 tx timeout [ 218.106924][T10428] hsr_slave_1 (unregistering): left promiscuous mode [ 218.668437][T10440] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1116'. [ 218.720008][T10440] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1116'. [ 218.789884][T10447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1117'. [ 218.881549][T10449] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1118'. [ 219.352576][T10468] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.665004][T10487] netlink: 'syz.1.1129': attribute type 9 has an invalid length. [ 219.739941][T10487] netlink: 'syz.1.1129': attribute type 6 has an invalid length. [ 219.802744][T10493] !: renamed from dummy0 (while UP) [ 220.544094][T10521] bridge0: entered promiscuous mode [ 220.558614][T10521] bridge0: port 4(macvlan0) entered blocking state [ 220.572778][T10521] bridge0: port 4(macvlan0) entered disabled state [ 220.593849][T10521] macvlan0: entered allmulticast mode [ 220.624020][T10528] IPVS: set_ctl: invalid protocol: 47 172.20.20.38:20000 [ 220.625286][T10521] bridge0: entered allmulticast mode [ 220.637455][T10528] sctp: [Deprecated]: syz.3.1138 (pid 10528) Use of int in maxseg socket option. [ 220.637455][T10528] Use struct sctp_assoc_value instead [ 220.663732][T10521] macvlan0: left allmulticast mode [ 220.669298][T10521] bridge0: left allmulticast mode [ 220.677137][T10521] bridge0: left promiscuous mode [ 220.797120][T10525] lo speed is unknown, defaulting to 1000 [ 220.815399][T10525] lo speed is unknown, defaulting to 1000 [ 221.347358][T10546] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 221.362346][T10548] __nla_validate_parse: 5 callbacks suppressed [ 221.362364][T10548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1144'. [ 221.383473][T10550] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1145'. [ 221.388275][T10546] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 221.409511][T10550] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1145'. [ 221.451379][T10546] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 221.504804][T10552] lo: left allmulticast mode [ 221.566001][T10554] netlink: 'syz.4.1146': attribute type 1 has an invalid length. [ 221.674903][T10554] bond3: (slave bridge4): making interface the new active one [ 221.705296][T10554] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 221.829914][T10562] IPVS: length: 143 != 8 [ 222.373228][T10571] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1150'. [ 222.528532][ T49] tipc: Subscription rejected, illegal request [ 223.339620][T10597] netlink: 'syz.3.1156': attribute type 21 has an invalid length. [ 223.359996][T10597] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1156'. [ 223.379725][T10602] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 223.601447][T10614] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1160'. [ 223.940178][T10630] lo speed is unknown, defaulting to 1000 [ 223.975091][T10630] lo speed is unknown, defaulting to 1000 [ 225.335810][T10675] tipc: Enabling of bearer rejected, failed to enable media [ 225.365765][T10677] sctp: [Deprecated]: syz.2.1176 (pid 10677) Use of int in maxseg socket option. [ 225.365765][T10677] Use struct sctp_assoc_value instead [ 225.410312][T10676] delete_channel: no stack [ 225.636931][T10681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1178'. [ 225.651213][ T5854] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 225.721348][ T5854] Bluetooth: hci4: command 0x0405 tx timeout [ 225.737510][T10694] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1183'. [ 225.744918][T10686] netlink: 600 bytes leftover after parsing attributes in process `syz.3.1179'. [ 226.309089][T10717] lo speed is unknown, defaulting to 1000 [ 226.336996][T10717] lo speed is unknown, defaulting to 1000 [ 226.453137][T10722] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1191'. [ 226.585728][T10736] netlink: 'syz.4.1192': attribute type 13 has an invalid length. [ 226.608545][T10736] netlink: 'syz.4.1192': attribute type 17 has an invalid length. [ 226.906606][T10736] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.117829][T10727] lo speed is unknown, defaulting to 1000 [ 227.135543][T10727] lo speed is unknown, defaulting to 1000 [ 227.425287][T10756] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 227.776930][T10769] netlink: 'syz.2.1203': attribute type 1 has an invalid length. [ 227.886329][T10773] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1203'. [ 228.163184][T10781] bridge_slave_0: left promiscuous mode [ 228.169245][T10781] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.245872][T10781] bridge_slave_1: left promiscuous mode [ 228.272280][T10781] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.312222][T10783] netlink: 'syz.2.1206': attribute type 10 has an invalid length. [ 228.331181][T10785] netlink: 'syz.3.1207': attribute type 1 has an invalid length. [ 228.400885][T10781] team0: Port device team_slave_0 removed [ 228.454650][T10781] team0: Port device team_slave_1 removed [ 228.484309][T10781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.507955][T10781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.551747][T10781] batman_adv: batadv0: Removing interface: netdevsim0 [ 228.601741][T10797] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1210'. [ 228.637788][T10783] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 228.654855][T10789] bond3: entered promiscuous mode [ 228.662960][T10789] bond3: entered allmulticast mode [ 228.668907][T10789] 8021q: adding VLAN 0 to HW filter on device bond3 [ 228.691387][T10791] bridge0: entered promiscuous mode [ 228.697201][T10791] bridge0: entered allmulticast mode [ 228.709203][T10791] bond3: (slave bridge0): Enslaving as a backup interface with an up link [ 228.776044][ T6148] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 228.797378][T10804] netlink: 'syz.1.1211': attribute type 1 has an invalid length. [ 228.933088][ T6149] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 228.969137][T10810] IPVS: Scheduler module ip_vs_sip not found [ 228.976318][T10816] IPVS: length: 8 != 446622349272 [ 229.239079][ T9] lo speed is unknown, defaulting to 1000 [ 229.257066][T10804] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 229.257965][ T9] syz0: Port: 1 Link DOWN [ 229.279918][ T5848] lo speed is unknown, defaulting to 1000 [ 229.325832][ T6149] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.358010][ T6149] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.514295][T10823] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1215'. [ 229.533984][ T6149] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.545218][ T6149] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.645191][T10823] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1215'. [ 229.692929][T10820] lo speed is unknown, defaulting to 1000 [ 229.700005][ T6149] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.730871][ T6149] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.755130][T10820] lo speed is unknown, defaulting to 1000 [ 229.763042][ T6149] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.772487][ T6149] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.337797][T10850] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1221'. [ 230.935848][T10862] lo speed is unknown, defaulting to 1000 [ 231.020394][T10862] lo speed is unknown, defaulting to 1000 [ 231.117395][T10875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1228'. [ 231.192616][T10875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1228'. [ 231.226031][T10875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1228'. [ 231.677944][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1230'. [ 231.698836][T10883] lo speed is unknown, defaulting to 1000 [ 231.735490][T10888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.938095][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1233'. [ 232.014594][T10900] !: renamed from dummy0 (while UP) [ 232.041325][T10898] netlink: 'syz.3.1233': attribute type 21 has an invalid length. [ 232.077898][T10898] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1233'. [ 232.212938][T10872] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1225'. [ 232.329002][T10883] lo speed is unknown, defaulting to 1000 [ 232.356325][T10909] lo speed is unknown, defaulting to 1000 [ 233.092351][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1238'. [ 233.119564][T10932] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1238'. [ 233.237945][T10932] geneve3: entered promiscuous mode [ 233.298373][T10932] geneve3: entered allmulticast mode [ 233.329145][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.365954][ T6143] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.402401][ T6143] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.407122][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1238'. [ 233.432283][ T6143] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.654453][T10937] netlink: 'syz.1.1239': attribute type 11 has an invalid length. [ 233.815835][T10939] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1240'. [ 233.839473][T10940] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1240'. [ 234.074139][T10909] lo speed is unknown, defaulting to 1000 [ 234.087304][T10942] C: renamed from lo [ 234.106691][T10942] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 235.310260][T10960] batadv_slave_0: entered promiscuous mode [ 235.363827][T10964] !: renamed from dummy0 [ 235.488969][T10971] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 235.787211][T10976] tipc: Enabled bearer , priority 0 [ 236.055624][T10983] syzkaller0: entered promiscuous mode [ 236.102753][T10983] syzkaller0: entered allmulticast mode [ 236.131951][T10983] tipc: Resetting bearer [ 236.137912][T10971] C speed is unknown, defaulting to 1000 [ 236.838862][ T5936] tipc: Node number set to 708974584 [ 237.899264][T11036] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1258'. [ 238.596723][T10971] lo speed is unknown, defaulting to 1000 [ 238.609728][T10972] tipc: Resetting bearer [ 238.835822][T10972] tipc: Disabling bearer [ 239.061281][T11045] netlink: 'syz.2.1262': attribute type 1 has an invalid length. [ 239.077370][T11040] netlink: 600 bytes leftover after parsing attributes in process `syz.4.1259'. [ 239.095759][T11045] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1262'. [ 239.339507][T11046] C speed is unknown, defaulting to 1000 [ 239.377825][T11046] lo speed is unknown, defaulting to 1000 [ 240.018104][T11064] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 240.065532][T11064] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 240.947032][T11102] tipc: Enabled bearer , priority 0 [ 241.076329][T11104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.152274][T11104] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 241.210187][T11102] block nbd0: server does not support multiple connections per device. [ 241.286568][T11102] block nbd0: shutting down sockets [ 241.355249][T11101] tipc: Disabling bearer [ 241.377786][T11111] pim6reg1: entered promiscuous mode [ 241.385338][T11111] pim6reg1: entered allmulticast mode [ 241.537114][T11111] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1275'. [ 241.638459][T11111] 8021q: adding VLAN 0 to HW filter on device bond2 [ 241.655019][T11111] team0: Port device bond2 added [ 242.307327][T11142] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1286'. [ 242.340033][T11142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.379454][T11139] 8021q: adding VLAN 0 to HW filter on device bond4 [ 242.404038][T11139] bridge0: port 2(bond4) entered blocking state [ 242.429160][T11139] bridge0: port 2(bond4) entered disabled state [ 242.447857][T11139] bond4: entered allmulticast mode [ 242.512201][T11139] bond4: entered promiscuous mode [ 242.528995][T11139] bridge0: port 2(bond4) entered blocking state [ 242.535861][T11139] bridge0: port 2(bond4) entered forwarding state [ 242.610248][ T49] bridge0: port 2(bond4) entered disabled state [ 242.639736][T11114] C speed is unknown, defaulting to 1000 [ 242.650130][T11114] lo speed is unknown, defaulting to 1000 [ 242.733368][T11153] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.1288'. [ 242.897525][T11158] netlink: 'syz.3.1290': attribute type 10 has an invalid length. [ 242.945241][T11158] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1290'. [ 242.971442][T11158] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1290'. [ 243.076213][T11166] dvmrp8: entered allmulticast mode [ 243.132684][T11160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.148881][T11175] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 243.181089][T11161] netlink: 'syz.3.1290': attribute type 10 has an invalid length. [ 243.196581][T11161] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1290'. [ 243.202523][T11160] siw: device registration error -23 [ 243.799358][T11205] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1299'. [ 244.133297][T11221] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1304'. [ 244.270112][T11227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.406474][T11229] macsec1: entered promiscuous mode [ 244.416078][T11229] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 244.425850][T11229] macsec1: entered allmulticast mode [ 244.434659][T11229] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 244.551270][T11238] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1310'. [ 244.555653][T11237] netlink: 'syz.4.1309': attribute type 10 has an invalid length. [ 244.585369][T11237] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.604323][T11237] team0: entered promiscuous mode [ 244.609520][T11237] team_slave_0: entered promiscuous mode [ 244.622591][T11237] team_slave_1: entered promiscuous mode [ 244.632449][T11237] bond0: (slave team0): Enslaving as an active interface with an up link [ 244.791896][T11247] netlink: 'syz.4.1315': attribute type 1 has an invalid length. [ 244.804433][T11247] netlink: 'syz.4.1315': attribute type 2 has an invalid length. [ 244.882664][T11250] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.890366][T11250] IPv6: NLM_F_CREATE should be set when creating new route [ 244.897827][T11255] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 245.009247][T11263] pimreg: entered allmulticast mode [ 245.047960][T11263] pimreg: left allmulticast mode [ 245.995492][T11266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.296067][T11279] netlink: del zone limit has 4 unknown bytes [ 246.381694][T11286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.393221][T11286] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1326'. [ 246.396390][T11295] netlink: 'syz.3.1329': attribute type 3 has an invalid length. [ 246.405383][T11286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1326'. [ 246.429035][T11295] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1329'. [ 246.493121][T11299] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 246.871218][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1336'. [ 246.928105][T11319] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 246.955420][T11319] tipc: Enabled bearer , priority 0 [ 246.969073][T11319] syzkaller0: entered promiscuous mode [ 246.975779][T11319] syzkaller0: entered allmulticast mode [ 247.016258][T11319] tipc: Resetting bearer [ 247.035980][T11318] tipc: Resetting bearer [ 247.105702][T11318] tipc: Disabling bearer [ 247.272269][T11335] tipc: Enabled bearer , priority 0 [ 247.304795][T11335] syzkaller0: entered promiscuous mode [ 247.341289][T11335] syzkaller0: entered allmulticast mode [ 247.419558][T11333] tipc: Resetting bearer [ 247.492940][T11333] tipc: Disabling bearer [ 247.525486][T11349] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 247.821706][ T6143] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.850608][ T6143] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.859598][ T6143] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.935030][ T6143] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.968788][T11367] C speed is unknown, defaulting to 1000 [ 248.013505][T11367] lo speed is unknown, defaulting to 1000 [ 248.024206][T11381] netlink: 'syz.1.1357': attribute type 1 has an invalid length. [ 248.058312][T11383] __nla_validate_parse: 3 callbacks suppressed [ 248.058335][T11383] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1358'. [ 248.468276][T11394] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1360'. [ 248.494927][T11394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1360'. [ 249.126064][T11418] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1367'. [ 249.692353][T11448] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1373'. [ 249.729373][T11448] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1373'. [ 249.961958][T11464] netlink: 'syz.1.1378': attribute type 1 has an invalid length. [ 250.202405][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1381'. [ 250.225248][T11473] netlink: 'syz.2.1380': attribute type 1 has an invalid length. [ 250.282110][T11473] netlink: 'syz.2.1380': attribute type 2 has an invalid length. [ 250.355681][T11467] syzkaller0: entered promiscuous mode [ 250.381205][T11467] syzkaller0: entered allmulticast mode [ 250.487183][T11490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1385'. [ 250.536458][T11495] IPVS: set_ctl: invalid protocol: 53492 224.0.0.1:20001 [ 250.557920][T11497] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1387'. [ 250.970011][T11518] C speed is unknown, defaulting to 1000 [ 250.982002][T11518] lo speed is unknown, defaulting to 1000 [ 251.054919][T11521] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1393'. [ 251.205651][T11522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.221785][ T7809] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 251.640766][ T7810] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 251.698046][T11522] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.715033][ T5936] lo speed is unknown, defaulting to 1000 [ 251.727990][ T5936] syz0: Port: 1 Link ACTIVE [ 251.771574][ T5936] lo speed is unknown, defaulting to 1000 [ 252.023542][T11532] hsr_slave_1 (unregistering): left promiscuous mode [ 252.047924][T11540] gretap0: entered promiscuous mode [ 252.056755][T11540] gretap0: left promiscuous mode [ 252.525485][T11546] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 252.729541][T11580] nbd: must specify at least one socket [ 252.809676][T11586] netlink: 'syz.3.1410': attribute type 14 has an invalid length. [ 252.984288][T11599] tipc: Enabled bearer , priority 0 [ 253.011418][T11597] tipc: Enabling of bearer rejected, already enabled [ 253.038129][T11599] syzkaller0: entered promiscuous mode [ 253.062250][T11599] syzkaller0: entered allmulticast mode [ 253.101894][T11604] __nla_validate_parse: 5 callbacks suppressed [ 253.101915][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1414'. [ 253.133977][T11597] tipc: Resetting bearer [ 253.150400][T11596] tipc: Resetting bearer [ 253.225062][T11614] netlink: 788 bytes leftover after parsing attributes in process `syz.4.1417'. [ 253.235682][T11596] tipc: Disabling bearer [ 253.597820][T11628] vti0: entered promiscuous mode [ 253.621418][T11628] vti0: entered allmulticast mode [ 253.654519][T11545] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 253.690727][T11545] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 253.723897][T11624] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1421'. [ 253.895772][T11655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1427'. [ 253.911871][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'. [ 254.153428][T11663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.214636][T11663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1430'. [ 254.264269][T11676] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1431'. [ 254.264426][T11663] siw: device registration error -23 [ 254.520924][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 254.737977][T11686] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3) [ 254.765112][T11686] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1434'. [ 255.416775][T11708] netlink: 'syz.4.1441': attribute type 2 has an invalid length. [ 255.967507][T11731] netlink: 'syz.2.1445': attribute type 13 has an invalid length. [ 255.975876][T11731] netlink: 'syz.2.1445': attribute type 17 has an invalid length. [ 256.000922][T11733] sock: sock_set_timeout: `syz.4.1447' (pid 11733) tries to set negative timeout [ 256.022368][T11731] tunl0: left allmulticast mode [ 256.048676][T11731] gre0: left allmulticast mode [ 256.090156][T11731] gretap0: left allmulticast mode [ 256.124629][T11731] erspan0: entered promiscuous mode [ 256.150551][T11731] erspan0: left allmulticast mode [ 256.177184][T11731] ip_vti0: left allmulticast mode [ 256.196965][T11731] ip6_vti0: left allmulticast mode [ 256.207490][T11731] sit0: left allmulticast mode [ 256.225018][T11731] ip6tnl0: left allmulticast mode [ 256.257966][T11731] ip6gre0: left allmulticast mode [ 256.266747][T11731] ip6gretap0: left allmulticast mode [ 256.286620][T11731] bridge0: left allmulticast mode [ 256.318650][T11731] vcan0: left allmulticast mode [ 256.333297][T11731] team0: left allmulticast mode [ 256.339784][T11731] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.354793][T11731] dummy0: left allmulticast mode [ 256.365168][T11731] nlmon0: left allmulticast mode [ 256.375148][T11731] caif0: left allmulticast mode [ 256.380177][T11731] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 256.442398][T11740] batadv1: entered promiscuous mode [ 256.462908][T11744] batadv1: entered promiscuous mode [ 256.538492][T11752] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1452'. [ 256.751521][T11761] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1456'. [ 256.888136][T11770] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 257.112310][T11785] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 257.141666][T11546] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 257.213072][T11792] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 257.316956][T11794] : entered promiscuous mode [ 258.079384][ T5849] Bluetooth: hci4: link tx timeout [ 258.087214][ T5849] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 258.237299][T11839] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 258.264251][T11839] macsec0: left allmulticast mode [ 258.284112][T11839] ip6erspan0: left promiscuous mode [ 258.298354][T11845] __nla_validate_parse: 4 callbacks suppressed [ 258.298376][T11845] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1475'. [ 258.306638][T11847] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1477'. [ 258.325114][T11839] geneve2: left promiscuous mode [ 258.348357][T11845] netlink: 'syz.1.1475': attribute type 1 has an invalid length. [ 258.373487][T11839] bridge1: left promiscuous mode [ 258.394586][T11849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.462313][T11839] bridge1: left allmulticast mode [ 258.501303][T11839] batman_adv: batadv0: Interface deactivated: macvlan2 [ 258.575027][T11861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1474'. [ 258.622782][T11839] mac80211_hwsim hwsim9 wlan0: left allmulticast mode [ 258.659887][T11839] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 258.696443][T11839] macsec1: left promiscuous mode [ 258.727794][T11839] macsec1: left allmulticast mode [ 258.815230][T11548] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.830103][T11548] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.864477][T11859] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1474'. [ 258.890749][T11855] syzkaller0: entered promiscuous mode [ 258.896684][T11855] syzkaller0: entered allmulticast mode [ 258.905500][T11548] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.941392][T11548] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.953669][T11548] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.984026][T11548] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.097393][T11548] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.121662][T11548] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.522303][T11890] tc_dump_action: action bad kind [ 259.637117][T11895] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1490'. [ 259.818313][T11899] netlink: 'syz.2.1491': attribute type 12 has an invalid length. [ 259.873034][T11901] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1491'. [ 259.955652][T11908] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1493'. [ 260.064674][T11913] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1494'. [ 260.078498][T11913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1494'. [ 260.079186][ T5849] Bluetooth: hci4: link tx timeout [ 260.095976][ T5849] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 260.126082][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 260.147859][ T30] audit: type=1800 audit(1753857731.736:8): pid=11899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1491" name="cgroup.controllers" dev="tmpfs" ino=1506 res=0 errno=0 [ 260.496750][T11926] netlink: 'syz.3.1498': attribute type 10 has an invalid length. [ 260.518643][T11926] tipc: Enabled bearer , priority 0 [ 260.542291][T11926] syzkaller0: entered promiscuous mode [ 260.572815][T11926] syzkaller0: entered allmulticast mode [ 260.719994][T11926] tipc: Resetting bearer [ 260.754179][T11925] tipc: Resetting bearer [ 260.812735][T11925] tipc: Disabling bearer [ 260.864675][T11944] netlink: 'syz.4.1502': attribute type 13 has an invalid length. [ 260.890596][T11944] netlink: 'syz.4.1502': attribute type 17 has an invalid length. [ 260.923551][T11944] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 261.024236][T11949] vlan2: entered promiscuous mode [ 261.029787][T11949] bridge0: entered promiscuous mode [ 261.060258][T11947] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 261.089816][T11947] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 261.115881][T11944] C speed is unknown, defaulting to 1000 [ 261.135126][T11944] lo speed is unknown, defaulting to 1000 [ 261.210595][ T30] audit: type=1800 audit(1753857732.796:9): pid=11955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1506" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1565 res=0 errno=0 [ 261.683919][T11971] netlink: 'syz.0.1513': attribute type 1 has an invalid length. [ 261.692487][T11971] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1513'. [ 261.703598][T11971] netlink: 'syz.0.1513': attribute type 2 has an invalid length. [ 261.714840][T11971] netlink: 'syz.0.1513': attribute type 1 has an invalid length. [ 261.886133][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.892955][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.919921][T11976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.983745][T11976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.079259][T11976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.050039][T12030] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 263.122625][T12030] netlink: 'syz.3.1528': attribute type 1 has an invalid length. [ 263.178788][T12020] macvlan3: entered promiscuous mode [ 263.191588][T12020] macvlan3: entered allmulticast mode [ 263.198254][T12020] bond4: entered promiscuous mode [ 263.204196][T12020] bridge3: entered promiscuous mode [ 263.212441][T12020] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 263.222399][T12020] bond4: left promiscuous mode [ 263.238367][T12020] bridge3: left promiscuous mode [ 263.550063][T12054] C speed is unknown, defaulting to 1000 [ 263.559597][T12054] lo speed is unknown, defaulting to 1000 [ 263.746152][T12064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.893641][T12079] netlink: 'syz.0.1542': attribute type 4 has an invalid length. [ 263.921054][T12079] __nla_validate_parse: 9 callbacks suppressed [ 263.921078][T12079] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.1542'. [ 264.351432][T12095] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1548'. [ 264.555389][T12103] netlink: 'syz.1.1551': attribute type 1 has an invalid length. [ 264.584022][T12103] netlink: 'syz.1.1551': attribute type 4 has an invalid length. [ 264.616552][T12102] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1551'. [ 264.650241][T12104] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1551'. [ 264.674844][T12103] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1551'. [ 264.762222][T12113] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1554'. [ 265.087363][T12137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1560'. [ 265.266956][T12130] C speed is unknown, defaulting to 1000 [ 265.276698][T12130] lo speed is unknown, defaulting to 1000 [ 265.418893][T12147] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.464511][T12147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.476946][T12149] syzkaller1: entered promiscuous mode [ 265.484114][T12149] syzkaller1: entered allmulticast mode [ 265.528246][T12147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.597197][T12147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.953111][T12188] veth1_to_bond: entered allmulticast mode [ 267.114767][T12183] veth1_to_bond: left allmulticast mode [ 267.257561][T12203] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1578'. [ 267.268672][T12201] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1577'. [ 267.271986][T12203] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1578'. [ 267.475639][T12213] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee [ 267.585453][T12215] bridge4: entered allmulticast mode [ 267.683209][T12222] validate_nla: 7 callbacks suppressed [ 267.683227][T12222] netlink: 'syz.3.1584': attribute type 4 has an invalid length. [ 267.699405][T12223] netlink: 'syz.3.1584': attribute type 4 has an invalid length. [ 267.715578][ T9] lo speed is unknown, defaulting to 1000 [ 267.733830][T12220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.745345][ T9] syz0: Port: 1 Link DOWN [ 267.838941][T12220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.887082][ T5848] lo speed is unknown, defaulting to 1000 [ 268.502220][T12224] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 268.628833][T12260] netlink: 'syz.1.1593': attribute type 1 has an invalid length. [ 269.218357][T12284] __nla_validate_parse: 3 callbacks suppressed [ 269.218380][T12284] netlink: 516 bytes leftover after parsing attributes in process `syz.3.1597'. [ 269.313436][T12288] sctp: [Deprecated]: syz.4.1599 (pid 12288) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.313436][T12288] Use struct sctp_sack_info instead [ 269.335235][T12288] sctp: [Deprecated]: syz.4.1599 (pid 12288) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.335235][T12288] Use struct sctp_sack_info instead [ 269.371074][T12288] sctp: [Deprecated]: syz.4.1599 (pid 12288) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.371074][T12288] Use struct sctp_sack_info instead [ 269.393394][T12288] sctp: [Deprecated]: syz.4.1599 (pid 12288) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.393394][T12288] Use struct sctp_sack_info instead [ 269.419779][T12288] sctp: [Deprecated]: syz.4.1599 (pid 12288) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.419779][T12288] Use struct sctp_sack_info instead [ 269.443739][T12288] sctp: [Deprecated]: syz.4.1599 (pid 12288) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.443739][T12288] Use struct sctp_sack_info instead [ 269.465444][T12288] sctp: [Deprecated]: syz.4.1599 (pid 12288) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.465444][T12288] Use struct sctp_sack_info instead [ 269.487758][T12288] sctp: [Deprecated]: syz.4.1599 (pid 12288) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.487758][T12288] Use struct sctp_sack_info instead [ 269.509397][T12288] sctp: [Deprecated]: syz.4.1599 (pid 12288) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.509397][T12288] Use struct sctp_sack_info instead [ 269.530114][T12288] sctp: [Deprecated]: syz.4.1599 (pid 12288) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.530114][T12288] Use struct sctp_sack_info instead [ 270.109599][T12301] C speed is unknown, defaulting to 1000 [ 270.136082][T12301] lo speed is unknown, defaulting to 1000 [ 270.413960][T12327] netlink: 'syz.1.1608': attribute type 1 has an invalid length. [ 270.461613][T12327] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1608'. [ 270.659637][T12334] netlink: 'syz.2.1611': attribute type 1 has an invalid length. [ 270.743148][T12334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 270.807673][T12334] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1611'. [ 270.854901][T12334] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1611'. [ 272.277236][T12365] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1622'. [ 272.359168][T12369] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1625'. [ 272.378205][T12369] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1625'. [ 272.516661][T12375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1627'. [ 272.834078][T12388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1630'. [ 272.845426][T12388] netlink: 4448 bytes leftover after parsing attributes in process `syz.1.1630'. [ 272.930837][T12393] netlink: 'syz.1.1634': attribute type 1 has an invalid length. [ 272.967703][T12395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.378799][T12407] netlink: 'syz.3.1639': attribute type 15 has an invalid length. [ 273.392975][T12407] netlink: 'syz.3.1639': attribute type 10 has an invalid length. [ 273.404362][T12407] batman_adv: batadv0: Adding interface: netdevsim0 [ 273.413671][T12407] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.441145][T12407] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 273.497389][T12411] gretap0: entered allmulticast mode [ 273.792383][T12432] openvswitch: netlink: nsh attr 2560 is out of range max 3 [ 273.815475][T12432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.959665][T12441] tipc: Enabled bearer , priority 10 [ 274.824072][T12445] __nla_validate_parse: 5 callbacks suppressed [ 274.824094][T12445] netlink: 704 bytes leftover after parsing attributes in process `syz.0.1649'. [ 274.910305][T12452] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1652'. [ 275.146198][T12468] netlink: 'syz.1.1654': attribute type 1 has an invalid length. [ 275.180965][T12468] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1654'. [ 275.343645][T12477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1658'. [ 275.675980][T12491] netlink: del zone limit has 4 unknown bytes [ 276.018871][T12500] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1663'. [ 276.114488][T12500] bridge0: port 3(batadv0) entered disabled state [ 276.121762][T12500] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.129614][T12500] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.362678][T12500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.522973][T12504] batman_adv: batadv0: Adding interface: gretap1 [ 276.529669][T12504] batman_adv: batadv0: The MTU of interface gretap1 is too small (1242) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1340 would solve the problem. [ 276.563470][T12504] batman_adv: batadv0: Interface activated: gretap1 [ 276.572965][ T6151] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.599197][ T6151] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.625328][ T6151] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.676775][T12523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1669'. [ 276.711878][T12523] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1669'. [ 276.735104][ T6151] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.837377][T12527] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1670'. [ 276.938104][T12527] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1670'. [ 276.997650][T12527] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1670'. [ 278.159668][T12583] netlink: 'syz.1.1685': attribute type 1 has an invalid length. [ 278.169462][T12583] netlink: 'syz.1.1685': attribute type 2 has an invalid length. [ 278.554813][T12594] tipc: Enabled bearer , priority 0 [ 278.579342][T12603] syzkaller0: entered promiscuous mode [ 278.593638][T12603] syzkaller0: entered allmulticast mode [ 278.632354][T12599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.717212][T12590] tipc: Resetting bearer [ 278.749982][T12589] tipc: Resetting bearer [ 278.782525][T12589] tipc: Disabling bearer [ 279.193970][T12630] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 280.036893][T12690] __nla_validate_parse: 8 callbacks suppressed [ 280.036914][T12690] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1713'. [ 280.558507][T12707] IPVS: length: 193 != 24 [ 281.103953][T12724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1723'. [ 281.238983][T12730] netlink: 'syz.3.1726': attribute type 9 has an invalid length. [ 281.313072][T12736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1725'. [ 281.409044][T12740] sctp: [Deprecated]: syz.1.1728 (pid 12740) Use of int in max_burst socket option. [ 281.409044][T12740] Use struct sctp_assoc_value instead [ 281.434158][T12740] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1728'. [ 281.449787][T12740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1728'. [ 281.607414][T12747] macsec2: entered promiscuous mode [ 281.629259][T12751] netlink: 'syz.3.1733': attribute type 3 has an invalid length. [ 281.637879][T12751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1733'. [ 281.723278][T12757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1733'. [ 281.933035][T12764] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1736'. [ 282.276843][T12780] veth1: entered promiscuous mode [ 282.284056][T12780] netlink: 'syz.4.1739': attribute type 8 has an invalid length. [ 282.292748][T12780] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 283.063042][T12796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1744'. [ 283.349004][T12810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1749'. [ 283.394852][T12810] dvmrp0: entered allmulticast mode [ 283.814389][T12838] _ÐZ`Ô€@: entered promiscuous mode [ 284.047110][T12849] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 284.096355][T12849] batman_adv: batadv0: Interface deactivated: gretap1 [ 284.299507][T12859] macsec2: entered promiscuous mode [ 284.305657][T12859] team0: entered promiscuous mode [ 284.312086][T12859] team_slave_0: entered promiscuous mode [ 284.318293][T12859] team_slave_1: entered promiscuous mode [ 284.325535][T12859] bridge1: entered promiscuous mode [ 284.332272][T12859] bond2: entered promiscuous mode [ 284.338471][T12859] team0: Device macsec2 is already an upper device of the team interface [ 284.352676][T12859] team0: left promiscuous mode [ 284.357933][T12859] team_slave_0: left promiscuous mode [ 284.364476][T12859] team_slave_1: left promiscuous mode [ 284.370277][T12859] bridge1: left promiscuous mode [ 284.391440][T12859] bond2: left promiscuous mode [ 285.120070][T12895] __nla_validate_parse: 1 callbacks suppressed [ 285.120096][T12895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1772'. [ 286.166265][T12951] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1784'. [ 286.425070][T12959] smc: removing ib device syz0 [ 286.931464][T12977] netlink: 'syz.3.1790': attribute type 1 has an invalid length. [ 290.689322][T13015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1798'. [ 290.727333][T13015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1798'. [ 290.750359][T13015] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1798'. [ 290.823898][T13021] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 290.994268][T13029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1804'. [ 291.057525][T13029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1804'. [ 291.309702][T13045] C speed is unknown, defaulting to 1000 [ 292.497155][T13064] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1812'. [ 292.751806][T13064] netlink: 'syz.4.1812': attribute type 1 has an invalid length. [ 292.814574][T13072] netlink: 87 bytes leftover after parsing attributes in process `syz.0.1814'. [ 292.860413][T13064] bond4 (unregistering): Released all slaves [ 292.975619][T13076] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1813'. [ 292.997288][T13076] netlink: 592 bytes leftover after parsing attributes in process `syz.3.1813'. [ 293.169566][T13083] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1818'. [ 293.186633][T13080] erspan1: entered promiscuous mode [ 293.201834][T13080] erspan1: entered allmulticast mode [ 293.522809][T13096] C speed is unknown, defaulting to 1000 [ 293.675077][T13106] C speed is unknown, defaulting to 1000 [ 294.034837][T13120] netlink: 'syz.4.1828': attribute type 7 has an invalid length. [ 294.047870][T13120] netlink: 'syz.4.1828': attribute type 8 has an invalid length. [ 295.092767][T13163] netlink: 'syz.0.1840': attribute type 6 has an invalid length. [ 295.121091][T13163] netlink: 'syz.0.1840': attribute type 5 has an invalid length. [ 295.337148][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 295.356196][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 295.366703][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 295.377524][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 295.387118][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 295.523014][T13179] batman_adv: batadv0: Removing interface: netdevsim0 [ 295.635885][T13174] C speed is unknown, defaulting to 1000 [ 295.935029][T13191] __nla_validate_parse: 17 callbacks suppressed [ 295.935052][T13191] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1848'. [ 296.296391][T13219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1853'. [ 296.348770][T13224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1853'. [ 296.397992][T13224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1853'. [ 296.426292][T13174] chnl_net:caif_netlink_parms(): no params data found [ 296.500276][T13224] bridge3: entered promiscuous mode [ 296.516907][T13224] macsec2: entered promiscuous mode [ 296.525289][T13224] macsec2: entered allmulticast mode [ 296.572296][T13224] bridge3: entered allmulticast mode [ 296.624312][T13231] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1855'. [ 297.059213][T13174] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.079884][T13174] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.137276][T13174] bridge_slave_0: entered allmulticast mode [ 297.142379][T13253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1860'. [ 297.152918][T13174] bridge_slave_0: entered promiscuous mode [ 297.202411][T13174] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.209637][T13174] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.227425][T13174] bridge_slave_1: entered allmulticast mode [ 297.246045][T13174] bridge_slave_1: entered promiscuous mode [ 297.265499][T13255] netlink: 'syz.3.1861': attribute type 1 has an invalid length. [ 297.278312][T13242] C speed is unknown, defaulting to 1000 [ 297.300836][T13255] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1861'. [ 297.463310][T13260] bpq0: entered allmulticast mode [ 297.481394][ T5854] Bluetooth: hci5: command tx timeout [ 297.518500][T13174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.604472][T13174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.897386][T13174] team0: Port device team_slave_0 added [ 297.920284][T13271] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1867'. [ 297.924785][T13174] team0: Port device team_slave_1 added [ 298.048761][T13174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.070686][T13174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.133235][T13277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1869'. [ 298.149799][T13174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.226450][T13174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.242461][T13174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.274017][T13174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.439136][T13174] hsr_slave_0: entered promiscuous mode [ 298.455532][T13174] hsr_slave_1: entered promiscuous mode [ 298.474132][T13174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.482341][T13174] Cannot create hsr debugfs directory [ 299.563536][T13301] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1875'. [ 299.611484][ T5854] Bluetooth: hci5: command tx timeout [ 300.035852][T13174] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 300.216987][T13174] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 300.278489][T13174] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 300.343644][T13174] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 300.708810][T13344] syzkaller1: entered promiscuous mode [ 300.732223][T13344] syzkaller1: entered allmulticast mode [ 300.868775][T13174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.909444][T13174] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.994424][T11548] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.995340][T13354] __nla_validate_parse: 2 callbacks suppressed [ 300.995360][T13354] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1885'. [ 301.001776][T11548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.073232][ T6151] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.081357][ T6151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.156220][T13356] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1886'. [ 301.438344][T13377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1890'. [ 301.543469][T13383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1891'. [ 301.596260][T13377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1890'. [ 301.641368][ T5854] Bluetooth: hci5: command tx timeout [ 301.805346][T13377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1890'. [ 301.858778][T13174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.015560][T13395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1894'. [ 302.435182][T13412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1898'. [ 302.638511][T13427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1903'. [ 302.766833][T13427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1903'. [ 302.804930][T13174] veth0_vlan: entered promiscuous mode [ 302.853560][T13174] veth1_vlan: entered promiscuous mode [ 302.959433][T13174] veth0_macvtap: entered promiscuous mode [ 302.998599][T13174] veth1_macvtap: entered promiscuous mode [ 303.048081][T13174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.092774][T13174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.123808][T11551] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.151928][T11551] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.213791][T11551] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.216583][T13449] GUP no longer grows the stack in syz.4.1908 (13449): 200000002000-20000000a000 (200000001000) [ 303.229196][T11551] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.258480][T13449] CPU: 0 UID: 0 PID: 13449 Comm: syz.4.1908 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 303.258538][T13449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 303.258577][T13449] Call Trace: [ 303.258586][T13449] [ 303.258598][T13449] dump_stack_lvl+0x189/0x250 [ 303.258633][T13449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.258659][T13449] ? __pfx__printk+0x10/0x10 [ 303.258685][T13449] ? find_vma+0xe7/0x160 [ 303.258729][T13449] __get_user_pages+0x2a60/0x30b0 [ 303.258806][T13449] ? __pfx___get_user_pages+0x10/0x10 [ 303.258830][T13449] ? __gup_longterm_locked+0xbf7/0x15b0 [ 303.258857][T13449] ? down_read_killable+0x1d1/0x350 [ 303.258881][T13449] ? try_get_folio+0x633/0x660 [ 303.258924][T13449] __gup_longterm_locked+0xd66/0x15b0 [ 303.258956][T13449] ? try_grab_folio_fast+0x35b/0x4f0 [ 303.258989][T13449] ? sanity_check_pinned_pages+0x11c8/0x12c0 [ 303.259024][T13449] gup_fast_fallback+0x1cd4/0x2260 [ 303.259048][T13449] ? is_bpf_text_address+0x26/0x2b0 [ 303.259112][T13449] ? __pfx_gup_fast_fallback+0x10/0x10 [ 303.259136][T13449] ? stack_trace_save+0x9c/0xe0 [ 303.259167][T13449] ? stack_depot_save_flags+0x40/0x900 [ 303.259199][T13449] ? pin_user_pages_fast+0x4d/0xb0 [ 303.259228][T13449] iov_iter_extract_pages+0x35a/0x5e0 [ 303.259269][T13449] extract_iter_to_sg+0xe46/0x24e0 [ 303.259311][T13449] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 303.259358][T13449] ? __asan_memset+0x22/0x50 [ 303.259385][T13449] af_alg_get_rsgl+0x436/0x810 [ 303.259443][T13449] aead_recvmsg+0x4cc/0x13f0 [ 303.259495][T13449] ? __pfx_aead_recvmsg+0x10/0x10 [ 303.259517][T13449] ? trace_sched_exit_tp+0x38/0x120 [ 303.259553][T13449] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 303.259576][T13449] ? __pfx_aead_recvmsg+0x10/0x10 [ 303.259602][T13449] sock_recvmsg_nosec+0x186/0x1c0 [ 303.259643][T13449] ____sys_recvmsg+0x3aa/0x460 [ 303.259681][T13449] ? __pfx_____sys_recvmsg+0x10/0x10 [ 303.259729][T13449] ? import_iovec+0x74/0xa0 [ 303.259770][T13449] ___sys_recvmsg+0x1b5/0x510 [ 303.259805][T13449] ? __pfx____sys_recvmsg+0x10/0x10 [ 303.259871][T13449] ? __might_fault+0xb0/0x130 [ 303.259905][T13449] do_recvmmsg+0x307/0x770 [ 303.259944][T13449] ? __pfx_do_recvmmsg+0x10/0x10 [ 303.259987][T13449] ? __pfx_do_futex+0x10/0x10 [ 303.260036][T13449] __x64_sys_recvmmsg+0x190/0x240 [ 303.260069][T13449] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 303.260096][T13449] ? rcu_is_watching+0x15/0xb0 [ 303.260125][T13449] ? do_syscall_64+0xbe/0x3b0 [ 303.260153][T13449] do_syscall_64+0xfa/0x3b0 [ 303.260173][T13449] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.260194][T13449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.260216][T13449] ? clear_bhb_loop+0x60/0xb0 [ 303.260244][T13449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.260265][T13449] RIP: 0033:0x7f48c1f8e9a9 [ 303.260287][T13449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.260307][T13449] RSP: 002b:00007f48c2dbd038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 303.260331][T13449] RAX: ffffffffffffffda RBX: 00007f48c21b5fa0 RCX: 00007f48c1f8e9a9 [ 303.260348][T13449] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000a [ 303.260362][T13449] RBP: 00007f48c2010d69 R08: 0000000000000000 R09: 0000000000000000 [ 303.260375][T13449] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000 [ 303.260388][T13449] R13: 0000000000000000 R14: 00007f48c21b5fa0 R15: 00007ffc830fb558 [ 303.260426][T13449] [ 303.642609][T13452] C speed is unknown, defaulting to 1000 [ 303.737552][ T5854] Bluetooth: hci5: command tx timeout [ 303.763853][ T30] audit: type=1804 audit(1753857775.306:10): pid=13449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1908" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=1927 res=1 errno=0 [ 303.816037][ T30] audit: type=1800 audit(1753857775.306:11): pid=13449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1908" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=1927 res=0 errno=0 [ 303.836704][T13462] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 304.023650][T13467] netlink: 'syz.4.1912': attribute type 1 has an invalid length. [ 304.033304][T13467] netlink: 'syz.4.1912': attribute type 2 has an invalid length. [ 304.288251][T11545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.297141][T11545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.305575][T11545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.317090][T11545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.787175][T13488] netlink: 'syz.1.1915': attribute type 4 has an invalid length. [ 304.823747][T13488] netlink: 'syz.1.1915': attribute type 4 has an invalid length. [ 304.848510][T13483] netlink: 'syz.4.1917': attribute type 83 has an invalid length. [ 304.938853][ T5913] C speed is unknown, defaulting to 1000 [ 304.953843][ T5913] syz2: Port: 1 Link ACTIVE [ 305.258592][T13510] netlink: 'syz.1.1919': attribute type 4 has an invalid length. [ 305.279855][T13507] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input11 [ 305.673068][ T9] C speed is unknown, defaulting to 1000 [ 305.702471][ T9] syz2: Port: 1 Link DOWN [ 306.126636][T13538] C speed is unknown, defaulting to 1000 [ 306.276140][T13551] __nla_validate_parse: 8 callbacks suppressed [ 306.276165][T13551] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1928'. [ 306.647040][T13559] netlink: 'syz.3.1929': attribute type 1 has an invalid length. [ 306.688784][T13559] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1929'. [ 306.743341][T13559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1929'. [ 306.768630][T13559] tipc: Enabling of bearer rejected, failed to enable media [ 307.299260][T13582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1936'. [ 307.304891][T13579] syzkaller0: entered promiscuous mode [ 307.352146][T13579] syzkaller0: entered allmulticast mode [ 307.418161][T13590] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 307.902181][T13607] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1942'. [ 307.942515][T13607] netlink: 'syz.3.1942': attribute type 1 has an invalid length. [ 307.984346][T13609] netlink: zone id is out of range [ 307.999454][T13609] netlink: zone id is out of range [ 308.016515][T13609] netlink: set zone limit has 4 unknown bytes [ 308.082720][T13608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.165330][T13607] 8021q: adding VLAN 0 to HW filter on device bond5 [ 308.476993][T13632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1946'. [ 308.674353][T13635] netlink: 'syz.1.1946': attribute type 303 has an invalid length. [ 308.750397][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1946'. [ 309.186464][T13671] netlink: 'syz.1.1952': attribute type 8 has an invalid length. [ 309.910913][T13682] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1955'. [ 309.947317][T13688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1957'. [ 310.013672][T13694] netlink: 'syz.5.1960': attribute type 1 has an invalid length. [ 310.292143][T13706] ip6tnl1: entered promiscuous mode [ 310.695639][T13724] netlink: 'syz.4.1969': attribute type 1 has an invalid length. [ 310.707532][T13724] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1969'. [ 311.405245][T13768] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 311.436935][T13771] netlink: 'syz.0.1982': attribute type 3 has an invalid length. [ 311.452755][T13768] tipc: Trying to set illegal importance in message [ 311.719682][T13784] rdma_rxe: rxe_newlink: failed to add wg1 [ 311.756659][T13784] netlink: 'syz.5.1988': attribute type 1 has an invalid length. [ 311.783251][T13784] __nla_validate_parse: 2 callbacks suppressed [ 311.783271][T13784] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1988'. [ 311.832404][T13789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1989'. [ 311.858371][T13789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1989'. [ 311.858698][T13791] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1990'. [ 311.897734][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1990'. [ 311.912162][T13791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1990'. [ 312.048052][T13796] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1991'. [ 312.104190][T13800] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 312.169090][T13804] netlink: 'syz.1.1995': attribute type 1 has an invalid length. [ 312.204357][T13804] netlink: 'syz.1.1995': attribute type 3 has an invalid length. [ 312.227343][T13804] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1995'. [ 312.243713][T13809] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1996'. [ 312.268215][T13804] NCSI netlink: No device for ifindex 246 [ 312.287036][T13805] netlink: 'syz.1.1995': attribute type 1 has an invalid length. [ 312.296544][T13805] netlink: 'syz.1.1995': attribute type 3 has an invalid length. [ 312.316404][T13805] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1995'. [ 312.328972][T13805] NCSI netlink: No device for ifindex 246 [ 312.509933][T13826] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 312.538705][T13815] C speed is unknown, defaulting to 1000 [ 312.565544][T13822] C speed is unknown, defaulting to 1000 [ 312.727752][T13842] netlink: 'syz.1.2001': attribute type 4 has an invalid length. [ 312.934024][ T7809] C speed is unknown, defaulting to 1000 [ 312.940305][ T7809] syz2: Port: 1 Link ACTIVE [ 313.113788][ T5913] C speed is unknown, defaulting to 1000 [ 313.135457][ T5913] syz2: Port: 1 Link DOWN [ 315.255888][T13937] tipc: Invalid UDP bearer configuration [ 315.255955][T13937] tipc: Enabling of bearer rejected, failed to enable media [ 315.787663][T13955] C speed is unknown, defaulting to 1000 [ 315.860166][T13958] C speed is unknown, defaulting to 1000 [ 316.593747][T13982] C speed is unknown, defaulting to 1000 [ 317.093473][T14015] openvswitch: netlink: Message has 8 unknown bytes. [ 317.396060][T14025] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode [ 317.466578][T14026] bond0: (slave team0): Releasing backup interface [ 317.517902][T14026] team0: left promiscuous mode [ 317.532150][T14026] team_slave_0: left promiscuous mode [ 317.548352][T14026] team_slave_1: left promiscuous mode [ 317.577297][T14026] bridge0: port 3(batadv0) entered disabled state [ 317.605333][T14026] bridge_slave_0: left allmulticast mode [ 317.638072][T14026] bridge_slave_0: left promiscuous mode [ 317.655358][T14026] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.705690][T14026] bridge_slave_1: left allmulticast mode [ 317.727442][T14026] bridge_slave_1: left promiscuous mode [ 317.750481][T14026] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.782535][T14026] bond0: (slave bond_slave_0): Releasing backup interface [ 317.835369][T14026] bond_slave_0: left promiscuous mode [ 317.892474][T14026] bond0: (slave bond_slave_1): Releasing backup interface [ 317.903029][T14026] bond_slave_1: left promiscuous mode [ 317.924700][T14026] team0: Port device team_slave_0 removed [ 317.935063][T14026] team0: Port device team_slave_1 removed [ 317.944590][T14026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.957206][T14026] bond2: (slave bridge3): Releasing active interface [ 317.975783][T14026] bond3: (slave bridge4): Releasing active interface [ 318.117761][T14046] C speed is unknown, defaulting to 1000 [ 318.118596][T14051] __nla_validate_parse: 15 callbacks suppressed [ 318.118621][T14051] netlink: 508 bytes leftover after parsing attributes in process `syz.1.2057'. [ 318.292163][T14068] syzkaller1: entered promiscuous mode [ 318.300389][T14068] syzkaller1: entered allmulticast mode [ 318.310122][T14072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2059'. [ 318.345186][T14072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2059'. [ 318.355186][T14072] validate_nla: 1 callbacks suppressed [ 318.355205][T14072] netlink: 'syz.4.2059': attribute type 14 has an invalid length. [ 318.388963][T14071] tipc: Enabling of bearer rejected, failed to enable media [ 318.438489][T14076] _ÐZ`Ô€@: entered promiscuous mode [ 318.608853][ T30] audit: type=1804 audit(1753857790.196:12): pid=14080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2063" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=2159 res=1 errno=0 [ 318.673633][ T30] audit: type=1800 audit(1753857790.196:13): pid=14080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2063" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=2159 res=0 errno=0 [ 318.826667][T14089] sctp: [Deprecated]: syz.4.2066 (pid 14089) Use of int in max_burst socket option. [ 318.826667][T14089] Use struct sctp_assoc_value instead [ 318.852597][T14090] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2067'. [ 319.199179][T14090] team0: Port device team_slave_0 removed [ 319.419876][T14113] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2072'. [ 319.436598][T14119] netlink: 'syz.1.2075': attribute type 1 has an invalid length. [ 319.516787][T14119] bond4: entered promiscuous mode [ 319.523240][T14119] 8021q: adding VLAN 0 to HW filter on device bond4 [ 319.548797][T14119] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 319.556621][T14119] IPv6: NLM_F_CREATE should be set when creating new route [ 319.564052][T14119] IPv6: NLM_F_CREATE should be set when creating new route [ 319.572606][T14119] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 319.724774][T14127] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2077'. [ 320.599163][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2079'. [ 320.651042][T14140] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2079'. [ 321.967948][T14121] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 321.982042][T14119] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 322.183004][T14146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2081'. [ 322.375927][T14164] netlink: 'syz.1.2086': attribute type 1 has an invalid length. [ 322.506011][T14161] veth5: entered promiscuous mode [ 322.519311][T14164] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2086'. [ 322.805550][T14193] C speed is unknown, defaulting to 1000 [ 322.857587][T14198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.868372][T14198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.876734][T14198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.887303][T14198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.243396][T14205] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2095'. [ 323.326453][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.659544][T14219] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 323.796065][T14226] netlink: 'syz.1.2099': attribute type 9 has an invalid length. [ 323.821703][T14226] netlink: 'syz.1.2099': attribute type 10 has an invalid length. [ 323.831241][T14226] team0: Cannot enslave team device to itself [ 324.023134][T14231] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2100'. [ 324.384064][T14253] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2105'. [ 324.587194][T14266] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2107'. [ 324.666468][T14264] netlink: 'syz.4.2109': attribute type 12 has an invalid length. [ 324.675061][T14264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2109'. [ 324.906009][T14267] syzkaller0: entered promiscuous mode [ 324.915778][T14267] syzkaller0: entered allmulticast mode [ 324.929029][T14264] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 325.758541][T14315] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2118'. [ 327.671390][T14322] netlink: 'syz.3.2119': attribute type 2 has an invalid length. [ 327.792290][T14330] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2123'. [ 328.049600][T14338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.354437][T14366] netlink: 'syz.4.2131': attribute type 83 has an invalid length. [ 328.416471][T14373] C speed is unknown, defaulting to 1000 [ 329.185269][T14403] syzkaller0: entered promiscuous mode [ 329.232078][T14403] syzkaller0: entered allmulticast mode [ 329.532086][T14418] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20001 [ 329.549704][T14419] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20001 [ 329.899154][T14441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.714486][T14437] netlink: 'syz.5.2149': attribute type 12 has an invalid length. [ 331.910866][T14452] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2152'. [ 331.934933][T14456] netlink: 164548 bytes leftover after parsing attributes in process `syz.5.2154'. [ 332.045071][T14462] vlan0: entered promiscuous mode [ 332.058911][T14464] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2157'. [ 332.304992][T14475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2159'. [ 332.334429][T14475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2159'. [ 332.494538][T14481] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2161'. [ 332.520380][T14483] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2162'. [ 332.781830][T14490] netlink: 'syz.1.2163': attribute type 1 has an invalid length. [ 332.794045][T14490] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2163'. [ 332.808335][T14490] netlink: 'syz.1.2163': attribute type 1 has an invalid length. [ 332.824521][T14488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.864342][T14498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2166'. [ 332.887613][T14498] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 332.899057][T14498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.129671][T14506] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2168'. [ 333.219166][T14509] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.314787][T14513] ------------[ cut here ]------------ [ 333.320852][T14513] WARNING: CPU: 1 PID: 14513 at net/ipv6/route.c:4857 rt6_multipath_rebalance+0x455/0x8b0 [ 333.330981][T14513] Modules linked in: [ 333.335531][T14513] CPU: 1 UID: 0 PID: 14513 Comm: syz.3.2170 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 333.349735][T14513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 333.360327][T14513] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 333.366693][T14513] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 4d d0 fd f7 e9 78 fe ff ff e8 33 c1 9b f7 eb 05 e8 2c c1 9b f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 45 9c 4b 01 [ 333.387375][T14513] RSP: 0018:ffffc9001d80e620 EFLAGS: 00010283 [ 333.393713][T14513] RAX: ffffffff8a2466fd RBX: ffff888056cd8c00 RCX: 0000000000080000 [ 333.401975][T14513] RDX: ffffc9000df50000 RSI: 00000000000110a1 RDI: 00000000000110a2 [ 333.410003][T14513] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 333.418348][T14513] R10: dffffc0000000000 R11: fffff52003b01cbc R12: ffff88803412bcde [ 333.426452][T14513] R13: ffff888056cd8c90 R14: 0000000000000000 R15: 1ffff1100ad9b192 [ 333.435032][T14513] FS: 00007fcaafe0e6c0(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000 [ 333.444203][T14513] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 333.450859][T14513] CR2: 00007f7ca4bb7000 CR3: 000000002959c000 CR4: 00000000003526f0 [ 333.458974][T14513] Call Trace: [ 333.462352][T14513] [ 333.465330][T14513] fib6_ifup+0x14a/0x180 [ 333.469638][T14513] ? __pfx_fib6_ifup+0x10/0x10 [ 333.474549][T14513] fib6_clean_node+0x24d/0x590 [ 333.479380][T14513] ? __pfx_fib6_clean_node+0x10/0x10 [ 333.484884][T14513] ? __lock_acquire+0xab9/0xd20 [ 333.490482][T14513] ? __local_bh_enable_ip+0x12d/0x1c0 [ 333.497059][T14513] fib6_walk_continue+0x678/0x910 [ 333.502870][T14513] fib6_walk+0x149/0x290 [ 333.507801][T14513] __fib6_clean_all+0x234/0x380 [ 333.513045][T14513] ? __fib6_clean_all+0x9b/0x380 [ 333.518514][T14513] ? __pfx_fib6_ifup+0x10/0x10 [ 333.524613][T14513] ? __pfx___fib6_clean_all+0x10/0x10 [ 333.531805][T14513] ? __pfx_fib6_clean_node+0x10/0x10 [ 333.537659][T14513] ? __pfx_fib6_ifup+0x10/0x10 [ 333.543853][T14513] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 333.549667][T14513] rt6_sync_up+0x128/0x160 [ 333.555220][T14513] ? __pfx_rt6_sync_up+0x10/0x10 [ 333.560384][T14513] ? ipv6_mc_up+0x3da/0x580 [ 333.565794][T14513] addrconf_notify+0xd55/0x1010 [ 333.573109][T14513] notifier_call_chain+0x1b3/0x3e0 [ 333.578592][T14513] netif_state_change+0x284/0x3a0 [ 333.584311][T14513] ? __pfx_generic_xdp_install+0x10/0x10 [ 333.591329][T14513] ? __pfx_netif_state_change+0x10/0x10 [ 333.597619][T14513] ? dev_change_xdp_fd+0x1da/0x220 [ 333.604514][T14513] do_setlink+0x35de/0x41c0 [ 333.610878][T14513] ? trace_sched_exit_tp+0x38/0x120 [ 333.616348][T14513] ? __pfx_do_setlink+0x10/0x10 [ 333.622165][T14513] ? __lock_acquire+0xab9/0xd20 [ 333.627284][T14513] ? do_raw_spin_lock+0x121/0x290 [ 333.633628][T14513] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 333.642736][T14513] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.649005][T14513] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 333.656352][T14513] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 333.666053][T14513] ? rcu_is_watching+0x15/0xb0 [ 333.674665][T14513] ? __mutex_lock+0xa6d/0xe80 [ 333.681783][T14513] ? __mutex_lock+0x51b/0xe80 [ 333.687024][T14513] ? rtnl_newlink+0x8db/0x1c70 [ 333.693392][T14513] ? __pfx___mutex_lock+0x10/0x10 [ 333.699454][T14513] ? ns_capable+0x8a/0xf0 [ 333.705130][T14513] ? rtnl_link_get_net_capable+0x16a/0x350 [ 333.711516][T14513] rtnl_newlink+0x149f/0x1c70 [ 333.717038][T14513] ? netlink_sendmsg+0x805/0xb30 [ 333.722961][T14513] ? __pfx_rtnl_newlink+0x10/0x10 [ 333.728377][T14513] ? kasan_quarantine_put+0xdd/0x220 [ 333.734530][T14513] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.740207][T14513] ? nlmon_xmit+0xb0/0x100 [ 333.745239][T14513] ? kmem_cache_free+0x18f/0x400 [ 333.751522][T14513] ? __local_bh_enable_ip+0x12d/0x1c0 [ 333.759368][T14513] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.765520][T14513] ? __local_bh_enable_ip+0x12d/0x1c0 [ 333.771158][T14513] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 333.777731][T14513] ? __dev_queue_xmit+0x27b/0x3b50 [ 333.784045][T14513] ? __lock_acquire+0xab9/0xd20 [ 333.791376][T14513] ? __pfx_rtnl_newlink+0x10/0x10 [ 333.797830][T14513] rtnetlink_rcv_msg+0x7cc/0xb70 [ 333.803130][T14513] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 333.809234][T14513] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 333.815562][T14513] ? ref_tracker_free+0x63a/0x7d0 [ 333.821741][T14513] ? __asan_memcpy+0x40/0x70 [ 333.828227][T14513] ? __pfx_ref_tracker_free+0x10/0x10 [ 333.834800][T14513] netlink_rcv_skb+0x205/0x470 [ 333.840659][T14513] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 333.847099][T14513] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 333.853192][T14513] ? netlink_deliver_tap+0x2e/0x1b0 [ 333.858934][T14513] netlink_unicast+0x82f/0x9e0 [ 333.864122][T14513] ? __pfx_netlink_unicast+0x10/0x10 [ 333.870031][T14513] ? netlink_sendmsg+0x642/0xb30 [ 333.875255][T14513] ? skb_put+0x11b/0x210 [ 333.879820][T14513] netlink_sendmsg+0x805/0xb30 [ 333.886063][T14513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.894484][T14513] ? aa_sock_msg_perm+0x94/0x160 [ 333.900279][T14513] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 333.905836][T14513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.911383][T14513] __sock_sendmsg+0x219/0x270 [ 333.917273][T14513] ____sys_sendmsg+0x505/0x830 [ 333.923000][T14513] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.929853][T14513] ? import_iovec+0x74/0xa0 [ 333.935090][T14513] ___sys_sendmsg+0x21f/0x2a0 [ 333.940126][T14513] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.947209][T14513] ? __fget_files+0x2a/0x420 [ 333.952703][T14513] ? __fget_files+0x3a0/0x420 [ 333.959093][T14513] __x64_sys_sendmsg+0x19b/0x260 [ 333.965817][T14513] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 333.971616][T14513] ? rcu_is_watching+0x15/0xb0 [ 333.977424][T14513] ? do_syscall_64+0xbe/0x3b0 [ 333.982672][T14513] do_syscall_64+0xfa/0x3b0 [ 333.987842][T14513] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.993768][T14513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.000512][T14513] ? clear_bhb_loop+0x60/0xb0 [ 334.005445][T14513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.011722][T14513] RIP: 0033:0x7fcaaef8e9a9 [ 334.016779][T14513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.041367][T14513] RSP: 002b:00007fcaafe0e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.055212][T14513] RAX: ffffffffffffffda RBX: 00007fcaaf1b6080 RCX: 00007fcaaef8e9a9 [ 334.066909][T14513] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 334.077785][T14513] RBP: 00007fcaaf010d69 R08: 0000000000000000 R09: 0000000000000000 [ 334.087346][T14513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.096944][T14513] R13: 0000000000000000 R14: 00007fcaaf1b6080 R15: 00007fff79e508b8 [ 334.105476][T14513] [ 334.109293][T14513] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 334.120403][T14513] CPU: 1 UID: 0 PID: 14513 Comm: syz.3.2170 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 334.134252][T14513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 334.146010][T14513] Call Trace: [ 334.149599][T14513] [ 334.152755][T14513] dump_stack_lvl+0x99/0x250 [ 334.157569][T14513] ? __asan_memcpy+0x40/0x70 [ 334.162686][T14513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.168016][T14513] ? __pfx__printk+0x10/0x10 [ 334.173192][T14513] panic+0x2db/0x790 [ 334.177220][T14513] ? __pfx_panic+0x10/0x10 [ 334.181648][T14513] ? show_trace_log_lvl+0x4fb/0x550 [ 334.186979][T14513] __warn+0x31b/0x4b0 [ 334.190989][T14513] ? rt6_multipath_rebalance+0x455/0x8b0 [ 334.197104][T14513] ? rt6_multipath_rebalance+0x455/0x8b0 [ 334.204630][T14513] report_bug+0x2be/0x4f0 [ 334.208993][T14513] ? rt6_multipath_rebalance+0x455/0x8b0 [ 334.215118][T14513] ? rt6_multipath_rebalance+0x455/0x8b0 [ 334.221648][T14513] ? rt6_multipath_rebalance+0x457/0x8b0 [ 334.227955][T14513] handle_bug+0x84/0x160 [ 334.233798][T14513] exc_invalid_op+0x1a/0x50 [ 334.238993][T14513] asm_exc_invalid_op+0x1a/0x20 [ 334.243882][T14513] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 334.250591][T14513] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 4d d0 fd f7 e9 78 fe ff ff e8 33 c1 9b f7 eb 05 e8 2c c1 9b f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 45 9c 4b 01 [ 334.272554][T14513] RSP: 0018:ffffc9001d80e620 EFLAGS: 00010283 [ 334.279644][T14513] RAX: ffffffff8a2466fd RBX: ffff888056cd8c00 RCX: 0000000000080000 [ 334.290077][T14513] RDX: ffffc9000df50000 RSI: 00000000000110a1 RDI: 00000000000110a2 [ 334.300015][T14513] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 334.309432][T14513] R10: dffffc0000000000 R11: fffff52003b01cbc R12: ffff88803412bcde [ 334.318512][T14513] R13: ffff888056cd8c90 R14: 0000000000000000 R15: 1ffff1100ad9b192 [ 334.326876][T14513] ? rt6_multipath_rebalance+0x44d/0x8b0 [ 334.332650][T14513] fib6_ifup+0x14a/0x180 [ 334.338455][T14513] ? __pfx_fib6_ifup+0x10/0x10 [ 334.343959][T14513] fib6_clean_node+0x24d/0x590 [ 334.349132][T14513] ? __pfx_fib6_clean_node+0x10/0x10 [ 334.357114][T14513] ? __lock_acquire+0xab9/0xd20 [ 334.362185][T14513] ? __local_bh_enable_ip+0x12d/0x1c0 [ 334.367700][T14513] fib6_walk_continue+0x678/0x910 [ 334.373680][T14513] fib6_walk+0x149/0x290 [ 334.378061][T14513] __fib6_clean_all+0x234/0x380 [ 334.382952][T14513] ? __fib6_clean_all+0x9b/0x380 [ 334.387924][T14513] ? __pfx_fib6_ifup+0x10/0x10 [ 334.392732][T14513] ? __pfx___fib6_clean_all+0x10/0x10 [ 334.398148][T14513] ? __pfx_fib6_clean_node+0x10/0x10 [ 334.405984][T14513] ? __pfx_fib6_ifup+0x10/0x10 [ 334.410798][T14513] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 334.416580][T14513] rt6_sync_up+0x128/0x160 [ 334.421145][T14513] ? __pfx_rt6_sync_up+0x10/0x10 [ 334.426131][T14513] ? ipv6_mc_up+0x3da/0x580 [ 334.430675][T14513] addrconf_notify+0xd55/0x1010 [ 334.436234][T14513] notifier_call_chain+0x1b3/0x3e0 [ 334.442394][T14513] netif_state_change+0x284/0x3a0 [ 334.447555][T14513] ? __pfx_generic_xdp_install+0x10/0x10 [ 334.453962][T14513] ? __pfx_netif_state_change+0x10/0x10 [ 334.460298][T14513] ? dev_change_xdp_fd+0x1da/0x220 [ 334.467639][T14513] do_setlink+0x35de/0x41c0 [ 334.472899][T14513] ? trace_sched_exit_tp+0x38/0x120 [ 334.478337][T14513] ? __pfx_do_setlink+0x10/0x10 [ 334.483413][T14513] ? __lock_acquire+0xab9/0xd20 [ 334.488388][T14513] ? do_raw_spin_lock+0x121/0x290 [ 334.493987][T14513] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 334.500216][T14513] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.505477][T14513] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 334.511511][T14513] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 334.518503][T14513] ? rcu_is_watching+0x15/0xb0 [ 334.523343][T14513] ? __mutex_lock+0xa6d/0xe80 [ 334.528166][T14513] ? __mutex_lock+0x51b/0xe80 [ 334.533060][T14513] ? rtnl_newlink+0x8db/0x1c70 [ 334.537885][T14513] ? __pfx___mutex_lock+0x10/0x10 [ 334.542953][T14513] ? ns_capable+0x8a/0xf0 [ 334.547655][T14513] ? rtnl_link_get_net_capable+0x16a/0x350 [ 334.553489][T14513] rtnl_newlink+0x149f/0x1c70 [ 334.558192][T14513] ? netlink_sendmsg+0x805/0xb30 [ 334.563160][T14513] ? __pfx_rtnl_newlink+0x10/0x10 [ 334.568320][T14513] ? kasan_quarantine_put+0xdd/0x220 [ 334.573757][T14513] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.580740][T14513] ? nlmon_xmit+0xb0/0x100 [ 334.585817][T14513] ? kmem_cache_free+0x18f/0x400 [ 334.590803][T14513] ? __local_bh_enable_ip+0x12d/0x1c0 [ 334.596388][T14513] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.601797][T14513] ? __local_bh_enable_ip+0x12d/0x1c0 [ 334.607663][T14513] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 334.613597][T14513] ? __dev_queue_xmit+0x27b/0x3b50 [ 334.619222][T14513] ? __lock_acquire+0xab9/0xd20 [ 334.624215][T14513] ? __pfx_rtnl_newlink+0x10/0x10 [ 334.629351][T14513] rtnetlink_rcv_msg+0x7cc/0xb70 [ 334.634571][T14513] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 334.639986][T14513] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 334.645771][T14513] ? ref_tracker_free+0x63a/0x7d0 [ 334.651173][T14513] ? __asan_memcpy+0x40/0x70 [ 334.655897][T14513] ? __pfx_ref_tracker_free+0x10/0x10 [ 334.661913][T14513] netlink_rcv_skb+0x205/0x470 [ 334.667338][T14513] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 334.672902][T14513] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 334.678212][T14513] ? netlink_deliver_tap+0x2e/0x1b0 [ 334.683894][T14513] netlink_unicast+0x82f/0x9e0 [ 334.688917][T14513] ? __pfx_netlink_unicast+0x10/0x10 [ 334.694355][T14513] ? netlink_sendmsg+0x642/0xb30 [ 334.699318][T14513] ? skb_put+0x11b/0x210 [ 334.703824][T14513] netlink_sendmsg+0x805/0xb30 [ 334.708657][T14513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.713982][T14513] ? aa_sock_msg_perm+0x94/0x160 [ 334.719185][T14513] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 334.724508][T14513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.729835][T14513] __sock_sendmsg+0x219/0x270 [ 334.734582][T14513] ____sys_sendmsg+0x505/0x830 [ 334.739588][T14513] ? __pfx_____sys_sendmsg+0x10/0x10 [ 334.744903][T14513] ? import_iovec+0x74/0xa0 [ 334.749531][T14513] ___sys_sendmsg+0x21f/0x2a0 [ 334.754343][T14513] ? __pfx____sys_sendmsg+0x10/0x10 [ 334.759716][T14513] ? __fget_files+0x2a/0x420 [ 334.764355][T14513] ? __fget_files+0x3a0/0x420 [ 334.769170][T14513] __x64_sys_sendmsg+0x19b/0x260 [ 334.774391][T14513] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 334.779913][T14513] ? rcu_is_watching+0x15/0xb0 [ 334.785162][T14513] ? do_syscall_64+0xbe/0x3b0 [ 334.789891][T14513] do_syscall_64+0xfa/0x3b0 [ 334.794648][T14513] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.799895][T14513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.806089][T14513] ? clear_bhb_loop+0x60/0xb0 [ 334.810948][T14513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.816867][T14513] RIP: 0033:0x7fcaaef8e9a9 [ 334.821337][T14513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.842789][T14513] RSP: 002b:00007fcaafe0e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.851603][T14513] RAX: ffffffffffffffda RBX: 00007fcaaf1b6080 RCX: 00007fcaaef8e9a9 [ 334.860181][T14513] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 334.868282][T14513] RBP: 00007fcaaf010d69 R08: 0000000000000000 R09: 0000000000000000 [ 334.876619][T14513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.884695][T14513] R13: 0000000000000000 R14: 00007fcaaf1b6080 R15: 00007fff79e508b8 [ 334.892702][T14513] [ 334.896110][T14513] Kernel Offset: disabled [ 334.900624][T14513] Rebooting in 86400 seconds..