last executing test programs: 1.739911196s ago: executing program 3 (id=2842): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r3, 0x21eae}}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000400)={{{@in6, @in6=@private2}}, {{@in6=@private2}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_netfilter(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)={0x14, 0x10, 0x1, 0x201, 0x70bd26, 0x25dfdbfc, {0x9, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044890) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x7, &(0x7f00000000c0)="fcffffff", 0x4) close(r5) socket$key(0xf, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x220048e8}, 0x800) 1.504071261s ago: executing program 0 (id=2847): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000740)=0xffffffbf, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@multicast2, 0x1, 0x0, 0x60, 0x0, [{@multicast1}, {@broadcast}, {@remote}, {@broadcast}, {@loopback}, {@local}]}}) 1.435012295s ago: executing program 1 (id=2849): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x310, 0xf0, 0xffffffff, 0xf0, 0xf0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@mcast2, @empty, [], [], 'batadv0\x00', 'veth0_to_batadv\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x3, @ipv6=@mcast2, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @icmp_id=0x6b, @icmp_id=0x65}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0x0, 0xffffff00]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x36}, @ipv4=@multicast2, @gre_key=0x400, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000010c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x8, 0xfffffffb, 0x7}}}}]}, 0x48}}, 0xc0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000005c0)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r6) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, r7, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x8c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_HEADER={0xfffffffffffffdc7, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x8c}}, 0x40) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250701f2800c0002000aac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x5d630104b5c9d4b6}, 0x0) r11 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r11, 0x400442c8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYBLOB="760900000100c851bd7b33fe3c3dd94dbd5bbdeade2a955eb55fc2066c11edfadaefe7bb23c270a56c9ddca9f22eb672743c2e2b1467bc0b0226fd2bedfa70a3bb0834274a5fb5cf"]) 1.211613749s ago: executing program 0 (id=2850): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x28e6, 0x50, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001940)={{r2}, &(0x7f0000000300), &(0x7f0000000440), 0x2}, 0x20) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@int={0xc, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x29, 0x4}, @var={0x10, 0x0, 0x0, 0xe, 0x2, 0x2}]}, {0x0, [0x30, 0x0]}}, &(0x7f00000002c0)=""/105, 0x3c, 0x69, 0x1, 0xff}, 0x28) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f00000004c0)={&(0x7f0000001100)=""/4096, 0x1000, 0x0, &(0x7f00000003c0)=""/118, 0x76}}, 0x10) (async) pipe(&(0x7f0000000540)={0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%pK \x00'}, 0x20) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)='%pS \x00'}, 0x20) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x200}, 0x50) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000040000000000000000ffffffffffffff7f000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa000000000400"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r11, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) getsockopt$inet_int(r11, 0x0, 0xe, 0x0, &(0x7f0000000040)) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r9}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x10, &(0x7f0000000200)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x28000000, 0x4, 0x0, 0x1048, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1, 0x2}, 0x50) (async) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={0x0, 0x6, 0x18}, 0xc) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x6, 0x763, 0x2, 0x18841, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0xd}, 0x50) (async) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r15, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r15, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x13, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4f}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x7, 0x6f, &(0x7f0000000180)=""/111, 0x41100, 0x50, '\x00', 0x0, @fallback=0x17, r3, 0x8, &(0x7f0000000380)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[r5, r6, r7, r8, r9, r12, r13, r14, r15], 0x0, 0x10, 0x9}, 0x94) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x3c}}, 0x0) 1.21067693s ago: executing program 2 (id=2851): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, '\x00', {0x1}, 0xbd99}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'pim6reg\x00', &(0x7f0000000040)=@ethtool_rx_ntuple={0x35, {0xd, @esp_ip4_spec={@empty, @private=0xa010102, 0x400, 0x8}, @ether_spec={@broadcast, @remote, 0x1000}, 0x9, 0x40, 0x8, 0x1ff, 0xffffffffffffffff}}}) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r0, r0, 0xbd, 0xf8, &(0x7f0000000140)="fa82abfc2cfecaadebd27252d5ed3fd24b5c9430704a18ac926b3a0a2efc53a451e977375c2af123338711f38a044f9a62c0b8f134e23714ce511f6ef3876cda9879620d9bfe554fb60e373d3e26635e665deccb8ae41fbed941833882de324d994b03b95e52df25573dc37171eaf21c7f04da1645dfd808ce3cfc42406e2ebd3435d56e5092e674d6f2dafc5410d201a9f5f69feae8953b58504f0e263c3463520209e9884258b5507f079a63913634bd6e57746d727d34997e518bd21bbed99af3fa402e64c94feb16e8e42ae40489b7f70a0b60da5461fe2a478300b1310cc6c6328376d3642a1cbed4ef548799091ccb574888afe8db", 0x1, 0x0, 0x0, 0xffff, 0x4, 0x2, 0x3, 'syz0\x00'}) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0x4) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000380)=0x800, 0x4) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="9ca5611c5ec4d573455aecb62d1564121e415987537fece388c0cecdce4728cf8ddd64a1d9cb7b0726c853d1fde8eea1676940ae417a653580c1a522b00f6455b6fafa8e83d730f1c38c0df13470fb33ad2420d4359baabd9a5a192252e7799515073c508704f2d15b885dfbe35dc2fbd93ee7756b6ef9a0655c9f0e26b2386877", 0x81}], 0x1, &(0x7f00000004c0)=[@hopopts={{0x30, 0x29, 0x36, {0x42, 0x2, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x400}, @ra={0x5, 0x2, 0x4}]}}}, @dstopts={{0x30, 0x29, 0x37, {0x2f, 0x2, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x6}]}}}], 0x60}}, {{&(0x7f0000000540)={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}, 0x8}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000580)="c8458b80dcd4b689597315c2d9381736967d9a7870fdfd012f5d9822c9a60e286ef1543e67e0972793d7da6af632676658b07b5b44b06ec312a1d1cd6dc805e8e32cdf12fdf1b4ac5c41bfbe2ee454ff3e1960d561f8186fcfd61e1f580f408a2e27da12d4ee7a333945caff984079965792467823081a69820b440b893dee1a8c33c54beabb5c5d135cff0824f747e4ad3606376f568b75d366373f6ba78c175a353de752160159e65661151f6a36b553058a4137b37d3d484c6b1112232fdd3c70f1eb8d535882ca9907475eb48af31ecdf1be9c95bcaf9776bea26ef24a5629", 0xe1}], 0x1, &(0x7f00000006c0)=[@dstopts_2292={{0x78, 0x29, 0x4, {0x11, 0xb, '\x00', [@jumbo={0xc2, 0x4, 0xf}, @ra={0x5, 0x2, 0x3}, @enc_lim={0x4, 0x1, 0x4}, @generic={0x6, 0x48, "85d38d82a6d5a49995010042a299ed7e061c3a8a0ba52188a06b9bad6ae2c5952fd2ed56b6f7a13f95fe56b11dda2f4192d28661ee12f1d41eb3bbfe93ea6d660e7b914bc0f6763e"}, @pad1]}}}], 0x78}}], 0x2, 0x40040000) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000007c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, 0x2d, 0x10, 0x70bd25, 0x25dfdbff, {0x7}, [@typed={0x9, 0x121, 0x0, 0x0, @str='*/!]\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x885}, 0x20008000) setsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f0000000900)=0x800, 0x4) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000980)=@generic={&(0x7f0000000940)='./file0\x00'}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ac0)={@map=0xffffffffffffffff, 0x24, 0x0, 0x7fff, &(0x7f00000009c0)=[0x0], 0x1, 0x0, &(0x7f0000000a00)=[0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000bc0)={'ip6gre0\x00', &(0x7f0000000b40)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x75, 0x6d, 0x15, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x10}, 0x1, 0x20, 0x4, 0x6}}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b00)={@ifindex=r8, r5, 0x35, 0x2010, 0x0, @value=r1, @void, @void, @void, r7}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c40)=@security={'security\x00', 0xe, 0x4, 0x820, 0xffffffff, 0x680, 0x320, 0x320, 0xffffffff, 0xffffffff, 0x750, 0x750, 0x750, 0xffffffff, 0x4, &(0x7f0000000c00), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xff000000, 0x0, 0xff], [0x0, 0x0, 0xff, 0xffffffff], 'sit0\x00', 'ip6gretap0\x00', {0xff}, {}, 0x2b, 0x8, 0x5, 0x29}, 0x0, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x2f, [{0xfff, 0x7, 0x90, 0x7}, {0x4c53, 0x1, 0x7, 0xbc}, {0x1, 0xa, 0xfa, 0x8e30}, {0x2, 0x1, 0x7, 0x2}, {0xb, 0x2, 0x9, 0x80000000}, {0x6, 0x4, 0x4, 0x4}, {0x9, 0x4, 0xd3, 0x3}, {0x2, 0x87, 0x98, 0x6}, {0xff83, 0x0, 0x3, 0x10000}, {0xd8, 0x1f, 0x9c, 0x4}, {0x1, 0x8, 0xb3, 0x9e}, {0xf2e6, 0xca, 0x7, 0x2}, {0x3ff, 0x98, 0x2, 0x2}, {0x1, 0xcc, 0x7, 0x7}, {0x8, 0x47, 0xf7, 0x7}, {0x4, 0x80, 0x7, 0x8737}, {0xece5, 0x75, 0x7, 0x2}, {0x1, 0x22, 0x8, 0x5}, {0x7, 0x80, 0xfd, 0xd}, {0x5, 0x1, 0x3, 0x8}, {0x2, 0x7f, 0xa, 0x2}, {0x8, 0x5, 0x97, 0x5}, {0x1, 0x5, 0xf8, 0x7}, {0xa2, 0x4, 0xd5, 0x16}, {0x0, 0x8, 0x4, 0x1}, {0x8, 0x7, 0x1, 0x8f}, {0xf, 0x5, 0xfc, 0x2}, {0x8, 0x0, 0x3, 0xfffffc00}, {0xfff, 0xe, 0x4, 0x9}, {0x7, 0x9b, 0x0, 0x4}, {0xa, 0xff, 0xbb, 0x7}, {0x4, 0x6, 0xd, 0x7}, {0x4, 0x0, 0xd6, 0x2}, {0x10, 0x90, 0x7, 0x4}, {0xd8, 0x4, 0x6, 0x80000000}, {0xd, 0x4, 0x0, 0xd5c}, {0x8, 0x7, 0x3}, {0x8001, 0x3, 0x80, 0xf}, {0x1, 0xe, 0x6, 0x1}, {0x9, 0x6, 0x9, 0x7}, {0x1, 0x8, 0x6, 0x9}, {0x100, 0x40, 0x1, 0xf3c9}, {0x7, 0x4, 0xfb, 0x2552}, {0x0, 0x1, 0x5, 0x4}, {0x5e4, 0x8, 0xf2, 0x10}, {0x800, 0xe, 0x4, 0x7fffffff}, {0x4, 0x9, 0x1, 0x4}, {0x0, 0x3, 0x0, 0x19f2}, {0x8, 0x87, 0x8, 0x10000}, {0xd8, 0x8, 0x6d, 0x10000}, {0x3e, 0x47, 0x3, 0x8}, {0x2a5, 0x2, 0x9, 0x8}, {0x5, 0x1, 0x1, 0x3}, {0x7fff, 0xa3, 0x37, 0x6}, {0x9, 0x0, 0x43, 0x7}, {0xff, 0x4, 0x9, 0x2}, {0x31c, 0xae, 0x8, 0xb}, {0x699f, 0x8, 0x3, 0x4}, {0x81, 0x8, 0x4, 0x1}, {0x9, 0x40, 0x7, 0x14}, {0x8, 0x1, 0x10, 0x5}, {0x0, 0x8, 0x0, 0x4}, {0x8, 0x6, 0x9, 0x5}, {0x1, 0xf4, 0x3, 0x3}], {0x8}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz1\x00', {0x6}}}}, {{@ipv6={@private0, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xff], 'tunl0\x00', 'dummy0\x00', {}, {}, 0x0, 0x0, 0x2, 0x1}, 0x0, 0x318, 0x360, 0x0, {}, [@common=@rt={{0x138}, {0xb4, [0x10001, 0x1], 0xfff, 0x2, 0x3, [@remote, @remote, @private0, @dev={0xfe, 0x80, '\x00', 0x3}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @dev={0xfe, 0x80, '\x00', 0x3b}, @mcast2, @private0, @remote, @mcast2, @remote, @dev={0xfe, 0x80, '\x00', 0x29}, @local, @local], 0x9}}, @common=@rt={{0x138}, {0x19d, [0x81, 0x9], 0xf, 0x8, 0x2, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @empty, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @remote, @ipv4={'\x00', '\xff\xff', @local}, @local, @rand_addr=' \x01\x00', @private0, @dev={0xfe, 0x80, '\x00', 0x15}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}], 0x4}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9ac4, 'syz0\x00', {0x1ff}}}}, {{@ipv6={@local, @remote, [0xff, 0xffffffff, 0xffffffff], [0xffffff00, 0xff000000, 0xffffffff, 0xff000000], 'virt_wifi0\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x1d, 0x1, 0x7, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x1, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x880) r9 = accept(r4, &(0x7f00000014c0)=@caif=@dgm, &(0x7f0000001540)=0x80) getsockopt$CAN_RAW_JOIN_FILTERS(r9, 0x65, 0x6, &(0x7f0000001580), &(0x7f00000015c0)=0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000001600)=0x10d0c, 0x4) r10 = openat$cgroup_devices(r5, &(0x7f0000001940)='devices.deny\x00', 0x2, 0x0) r11 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001980)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000001ac0)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001b00)={0x0, 0x0, 0x0}, &(0x7f0000001b40)=0xc) r15 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001b80)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000001bc0)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000001cc0)=0xe8) sendmsg$unix(r9, &(0x7f0000001ec0)={&(0x7f0000001640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001900)=[{&(0x7f00000016c0)="4bbd35427a53fbad7f57f8a15c90db3b68d0463d243842446d2c1cc0aca43ee1be87d9479d5f23e6783392c898ab9fab783c27994b27ce8f3930afa5eb963a095e2cf574f50dc902c6d48cccaacd70a8e8ebc83ee1966f1d8c6c9c8a6e55f0e236e3576c48583eeaf5c826ba544d310b951d948e197513189e67ff128c6db3ec3b5513cca1aecbaaf200b51e172bf897af26dd237a1f5dd4d6ab11957505850f0939062d4dd665316ff1c010e68dfe4242a9570f550f2f00c17e", 0xba}, {&(0x7f0000001780)="18ae83a5545bd9d1b36a1192407768f8e209051c9bd880cc910f51c44f64fafcd8f8b2a60a3daebdbf85123aec", 0x2d}, {&(0x7f00000017c0)="1f484cd6e66991db6bb94c6acb5ba4f205d386b60cc49f86b64399519c730828667f5e3b0ba6a1280a3d633f53b8be2532d2a59f2967d178", 0x38}, {&(0x7f0000001800)="d94e77724e587cc349daffadca4fd0252a2c2cabf183b2924ebd3313de6c7b0ed87ebbeb92ff56affbf60b6dcbe5ca5eae4e7b352ad3ac68b15ab89b354761ea1773db22b37c7513419d40336dc9fec7ed9d8b333ab3d0358e5b37976536df462fdb06c525a638f79921253373640efba49d5afd1db3683dd5593b71e2c8cda5fe80856fa5226808f4c6f934631a60c9fde6007837c74f7ba5719bcf46d02ec9bd86a93796ba8b2fcd7081833cc83149e8aa524137a87eaeeb958026edd76ae8f1d813c140e59dc01c1881a49bf4ac41e368d81604fa6a0ecd4c17769bba851f6eae95", 0xe3}], 0x4, &(0x7f0000001d80)=[@rights={{0x1c, 0x1, 0x1, [r2, r10, r0]}}, @rights={{0x28, 0x1, 0x1, [r2, r11, r9, r9, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @rights={{0x30, 0x1, 0x1, [r6, r5, r5, r3, r1, r2, r15, r6]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r16}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x110, 0x5}, 0x1) 1.194764129s ago: executing program 4 (id=2852): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x6, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x34, r5, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x20040080) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005400e5012abd70000000000007000000", @ANYRES32=r7, @ANYBLOB="200001001a3fcf6fb684291dce", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) recvfrom$inet6(r3, &(0x7f0000000840)=""/193, 0xc1, 0x100, &(0x7f0000000200)={0xa, 0x4e23, 0xfffffffb, @mcast2, 0x80000001}, 0x1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0xe8, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x7, 0x0, 0x1, @loopback, @empty, 0x1, 0x10, 0x3, 0x1}}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newchain={0x24, 0x64, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5, 0xb}, {0x8, 0xfff2}, {0xffff, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000280012800a000100767863616e0000001800028014000100000000", @ANYRES32=0x0, @ANYBLOB="0004000040410000"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001900000426bd7000fddbdf2502200003fd010007001a000008000500ac1414bb060015000000000b06001d004e200000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20001) 1.133576374s ago: executing program 1 (id=2853): r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x0, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0xfffffffffffffe1b}, 0x1, 0x0, 0x0, 0x8001}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001440), &(0x7f0000001480)=0xc) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0b000080976b640868603000"], 0x24}], 0x1}, 0x0) r3 = getgid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000014c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xe8) r6 = getgid() r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001640)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x2000004, 0x12, r8, 0xc08ba000) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001940)=@bpf_lsm={0x1d, 0x11, &(0x7f0000001680)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffc}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x51a45a3e}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}], &(0x7f0000001740)='syzkaller\x00', 0x22a, 0x6a, &(0x7f0000001780)=""/106, 0x41000, 0x50, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001800)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001840)={0x4, 0x1, 0xffff, 0x4}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001880)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f00000018c0)=[{0x1, 0x3, 0x6, 0x4}, {0x2, 0x1, 0x8, 0xc}, {0x4, 0x2, 0xe, 0x6}, {0x4, 0x1, 0x6}, {0x2, 0x4, 0x1, 0xc}, {0x1, 0x3, 0x1, 0x7}, {0x1, 0x1, 0xd, 0xb}], 0x10, 0xcf9}, 0x94) r10 = accept4$unix(r0, &(0x7f0000001a00)=@abs, &(0x7f0000001a80)=0x6e, 0x80000) r11 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001ac0), 0x1, 0x0) r12 = getpid() r13 = getuid() r14 = getgid() r15 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001500)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f0000000900)=0x98) r17 = getgid() sendmmsg$unix(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000080)="1941c494da83085f17728033f9200e9eb1b6", 0x12}, {&(0x7f00000000c0)="8e768a0ba01ac4aa5c5b4798053a8681cb51d490732be99803559e45d8a20238e83805984b63e1d6dc9b9f47b0bfb90375235943f5e028b0e7d8fcbbcb85ca687964950405a5ce998ab408d8169ba8046eeb3329535d089b7cb9cc895ea5175f0a5e5fdbaa28510c692ceef7931ba197d1c053bee826bb04f09ee9a5cf8f7ffd603bfd665c70f1facddeaf668484aa8b33b72e", 0x93}], 0x2, &(0x7f0000000200)=[@rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xc0, 0x800}}, {{&(0x7f00000002c0)=@file={0xe359b76df8a50dd1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000400)="1a470f48511f812cd62af6a58b5e5b6a2e71a23658656cf4050d19661a93762ded86b8ff4caa82bf9dc05d4bb15c348cde3bb937e5fec94e5f822109f8959bddd6b2e80d0a6fa36b12bf902c515b8ef8e202045da271f4be47cac463bc101edca242e3537da5f30762a3e5b7c7b6605b66ffdc26cf61aa599a00c51d3ea47157d83f1f263283adea16ee6034be5166953937733ea225e6938ce58d76489ab510cb790b29c4a4d7dcfbcbb61f27ab2ccb78b6469f08245b39fde8e3a6a26ce4192581e8300c3ca04d274c1dcd66ea96e9", 0xd0}], 0x1, &(0x7f0000000640)=[@rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}}, @cred={{0x1c}}], 0x50, 0x24004811}}, {{&(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000740)="57e31bc8cd43e23f3aabd7b59a244102fb5e22e9c71f88446bc70322becca57f993ad17c9f5123c566e8e6bb372be602fac201c43b2d246adcf0b24634cf54ce74c0aa27a9446f79cf5c0e1d339b1516eb70e4e90d864580199b699885912438f8b6ddec0262cb8c7adfc2481d121d21b68c0ec30939c25969cf1ef3406936184bfb092f8bb5f605d12b6330120ec053b28c0c01b01a7797a62e0187ad49b86a592ee7396e937ecdbb041a780b92ef955cd0038ddcb89caa633d24f09c5830054b1a3f6e856693e583ef624606e73bc226bc79da0b7f6c5747c73b0d60f58796cfab4dcc36", 0xe5}, {&(0x7f0000000840)="9e9f619dbbb096", 0x7}, {&(0x7f0000000880)="3f3e85135d393d5a3d67725494f3dfd179164c20066be573fd7a43e6fecbb7a520adfc3bab139ccdff105decf45c4a0ba77308484c5e6f626c8e811936d4f13c71", 0x41}, {&(0x7f0000000500)="c2436ecc70", 0x5}, {&(0x7f0000000540)="a5391a91058d2fbbb05684a02b2b93170cf6c263eb0c2e33783c097b323ed170ee0d1c57c4491e5b", 0x28}, {&(0x7f0000000580)="f7e7606be145dd05b34fb7130b80d28ad7d355", 0x13}], 0x6, &(0x7f0000000e40)=[@rights={{0x14, 0x1, 0x1, [r8]}}, @rights={{0x38, 0x1, 0x1, [r0, r7, 0xffffffffffffffff, r0, r9, r0, r0, r0, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r12}}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r9, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r0, r0, r0, r0, 0xffffffffffffffff, r0, r0]}}], 0x168, 0x24084}}, {{&(0x7f0000000fc0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, &(0x7f00000013c0)=[{&(0x7f0000001040)="0750f99da20d8d63c13117a0026d6481683d564f31e0594f4e407b617eea94e00056b5", 0x23}, {&(0x7f0000001080)="c52d7ae19a6a68500d270b6895afa310086309d71fece2a48bd63eb309b4c917caa3db02c8b850b15a494b692371197c6f6320037ea92e70758d8c64d4f48e71b16cd07977edceb60b50474acaf4a5ea5a7878a17cc6b2910eeb45c672606d5b588c266f33b877dc2b67449a40b8a55283dbed323fd1cb67b7faab6deaf057aceffd4da6880c012bbed98b4a0b4176b085561308d0da2c1efbff7f50d55b84302a5fcc3c98c7ca9472b094b8aae3f1a98bde98460b605d32d77ae7fe9b4bbba9507e9f", 0xc3}, {&(0x7f0000001180)="11", 0x1}, {&(0x7f00000011c0)="aa5eeb3ae8343f8aaf0dec63ccaeef385ef7666099fba7573fca33510c0c6c699d2cc8b3715419afc914e00845ad900e305ee28b6014d837940d9ca93f809c71e65a5ca90cd15a1153effe759a2ce3d4243ad70d000dba8e9b231e088d98361419ed1c68c0034c8ce62456183b196e088c890325ab0204db4cad66dc2c072608fdf833100be85c36968611d73a280e6f991b9801729140593f0b2663d54b1f4d4f731ada2489ea47c28474550b059037b5e12a98cad8a22d9b3bc42bb2f4aceac56a966f2883517f4b45c4a21efb1d507b4181bba82915eed98e2713b81dd3842ed6de1be06f6d413411bf9bec471647129441c2144bc60e", 0xf8}, {&(0x7f00000012c0)="61c82d560cc3f61de0af46f340c00e591d5430caa33e1e1b341c79071bc5eb84f7885d35242e756c388cf05cd7ed3bf689d7aabe23821cab285a58e0c9797e99f2610831512fd365431b03d62f7f4569dc41dbaa80ff050dccd99a7152235375813f699197877a663b782c47cf37b8c8f20a63bc3e65138bbf764e660dbdfec45885a09ad745e3d934050552521cc80fe5c7c0e8275fb31f8bd3d015d71730f07a27485019d82fcb3c127af449315ff8090761225e015828e4f1ee2dc5498b3dc407664fdca0d85244143a3cc2", 0xcd}], 0x5, &(0x7f0000001c40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2, r3}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @rights={{0x38, 0x1, 0x1, [r0, r0, r7, r0, r0, r0, r0, r8, r0, r0]}}, @rights={{0x38, 0x1, 0x1, [r0, r0, r0, r9, r10, r0, r11, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}], 0x120, 0x4040080}}], 0x4, 0x801) r18 = socket$unix(0x1, 0x1, 0x0) bind$unix(r18, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r18, 0x2) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r19 = accept(r18, 0x0, 0x0) sendto$inet6(r19, &(0x7f0000002240)='\x00', 0x1, 0x400440e9, 0x0, 0x0) 1.051822019s ago: executing program 0 (id=2854): r0 = socket$netlink(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) getpid() (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000008000000000f900", @ANYRES32=r1, @ANYRES32=r2], 0x18}}], 0x1, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x80010, r0, 0xe59f1000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xa, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b703000000000000850000008900000095"], &(0x7f0000000080)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x45}, 0x94) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r4) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) (async) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x4008, r3}, 0x18) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%pI4 \x00'}, 0x20) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x50) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000140)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x44) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x50) (async) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x10, &(0x7f0000000280)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0x0, 0x6, 0xc, 0x2, 0xa8}, @ldst={0x0, 0x0, 0x2, 0x0, 0x5, 0x8, 0x1f}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}], &(0x7f00000000c0)='syzkaller\x00', 0xf, 0x1000, &(0x7f0000000980)=""/4096, 0x41000, 0xa, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000380)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x10, 0x464, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000780)=[r6, r7, r8, r10, r11, r12, r2], &(0x7f00000007c0)=[{0x4, 0x4, 0xd, 0x1}, {0x0, 0x3, 0xf, 0x2}, {0x2, 0x3, 0xd, 0x3}], 0x10, 0x10001}, 0x94) (async) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x400, 0xffffffff, 0x0, 0x1e0, 0x0, 0xfeffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x41, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) (async) r14 = accept$alg(r3, 0x0, 0x0) recvmmsg(r14, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/13, 0xd}, {&(0x7f0000000340)=""/15, 0xf}], 0x2}, 0xd}], 0x1, 0x40010120, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000019c0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000000900)={0x24, 0x0, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x48}, [@CTA_LABELS_MASK={0x10, 0x17, [0x80000000, 0x200, 0xa]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x8010) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000040)={0x80000003ff, 0x0, '\x00', 0x1}) 1.05122013s ago: executing program 3 (id=2855): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x8}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x17e}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x2}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x76d}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044881}, 0x4000000) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x193, 0x193, 0x7, [@enum64={0x6, 0x3, 0x0, 0x13, 0x0, 0xa, [{0x2, 0x3, 0x1}, {0x2, 0x5, 0x9}, {0xe, 0x2, 0x6}]}, @float={0x5, 0x0, 0x0, 0x10, 0x2}, @typedef={0x1, 0x0, 0x0, 0x8, 0x5}, @ptr={0x10, 0x0, 0x0, 0x2, 0x4}, @restrict={0x10, 0x0, 0x0, 0xb, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x3}}, @datasec={0x10, 0xa, 0x0, 0xf, 0x3, [{0x4, 0x3}, {0x5, 0xfff, 0x4}, {0x1, 0x4, 0x47}, {0x4, 0x9, 0x43}, {0x4, 0xb}, {0x3, 0x2c7, 0x731a}, {0x5, 0xfc53, 0x3}, {0x1, 0x1, 0x5}, {0x2, 0x200, 0x7}, {0x1, 0x2, 0xe}], "6a986e"}, @fwd={0x1}, @enum64={0x8, 0x9, 0x0, 0x13, 0x0, 0x0, [{0x8, 0x1, 0xa70}, {0xd, 0xb, 0x9}, {0x4, 0x10001, 0x7}, {0xc, 0x7f, 0x200}, {0x2, 0x4, 0x6}, {0x7, 0x1, 0x4}, {0x1, 0x0, 0x6}, {0xa, 0x408, 0xffffff81}, {0xc, 0x10, 0x3}]}, @var={0xb, 0x0, 0x0, 0xe, 0x4, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x30]}}, &(0x7f00000003c0)=""/15, 0x1b3, 0xf, 0x0, 0x9, 0x10000}, 0x28) close(r4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r6) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$netlink(r6, &(0x7f0000000a00)={&(0x7f00000004c0)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)=[{&(0x7f0000000500)={0x34, 0x34, 0x200, 0x70bd2c, 0x25dfdbff, "", [@typed={0x8, 0x64, 0x0, 0x0, @u32=0x4}, @nested={0x10, 0x2a, 0x0, 0x1, [@typed={0x8, 0xdf, 0x0, 0x0, @fd=r7}, @nested={0x4, 0x100}]}, @nested={0xc, 0x7b, 0x0, 0x1, [@typed={0x4, 0x6e}, @nested={0x4, 0x6f}]}]}, 0x34}, {&(0x7f0000000540)={0x298, 0x33, 0x8, 0x70bd27, 0x25dfdbfe, "", [@typed={0x8, 0x49, 0x0, 0x0, @u32}, @nested={0x111, 0x11d, 0x0, 0x1, [@nested={0x4, 0x15}, @generic="f9e561557465e8fbc6a66b307a87a7f6c4139b13c4d859ab2cc0bb5864b4dce1e548ccbd0466b2da", @typed={0x8, 0x9d, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x4, 0x131}, @generic="f8aaecbe98b9950151f1baa8b1d3d9f272b13ff0081e7f4dea71f94292e8703ff8557c7ce715053b177e39e82ea4e77515e20d3ec53f05b75813e5772daef961bc092525783a5fb95e5b97992fbbf8ec7ef33fcd33618084aef6f209e9cc24bcc7e909afc90b53c32aaa65", @generic="b9fc4ecf23362739dcc86b302db25dda4f095716f2a4f7469c3dbcb76e00f3f5de23de179cc3acbb2a60125fb255db57869a87fef2d47ba5350ed06180c2e354e5d602a8588b51df5daca1d2dbdf01e23c96eeff31fcda8518bfa660e06bb587ca8b6e41a4aa4d8de762"]}, @nested={0xf4, 0xd5, 0x0, 0x1, [@nested={0x4, 0x31}, @generic="d92910600a1bb2232779452e16b18468819c34ee6f66cd773568ff94c857a23fbd2eec32e06d50adeb5e82346a8b02608d0278762ec8428f4e040dd77e5e889b96318e254652e3cdb0e634dd698aba9a1f233f6dbe37a8a4b59400b55e6daf2e6d0c3d6fc5f08810a466c2fa3060c77a55de157e23ec20060f28f3c51230a76056282b1226132b1f12aa4f9f9cf453", @typed={0x5, 0x7f, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x36}, @typed={0x17, 0xb2, 0x0, 0x0, @binary="fd4327206fee58242d20ec38ab6c8660eb9de7"}, @generic="8b42c6eb406642bcb5978dd0be299a4056a09723e2ccc616f46aadbbbe0d10275bc6895b136d094fba8e4cfc483b30c9c89383af4e8ed7545a"]}, @nested={0x75, 0xa4, 0x0, 0x1, [@nested={0x4, 0xf9}, @generic="c9d61199d76a2c73e365e2863cbf1cb6dbd1f3c58b8b9a116943c336114c704b2d4b06df290880ca262eadad8a3d1f9fc71b5f16073168b1393235c83e38445a48381ee184574f55323ae339f8f0d8a7d859cbd5295bf2d9015f0e73cd0a533a2c94ce1e9da33a0a77", @nested={0x4, 0x122}]}]}, 0x298}, {&(0x7f0000000800)={0x13c, 0x34, 0x20, 0x70bd28, 0x25dfdbfb, "", [@typed={0x4, 0x106}, @typed={0x8, 0xda, 0x0, 0x0, @u32=0x78}, @generic="2e875b65fd137a420b27e6c53f2d9979a3976d923c1a286804d3acd9adaeb3eb330672624c08ce9769621a40a2d89fc2ca51c786582bf3c4e525bb3893bbed9cd45996acb3808c626c50ec96c958351ed59969fbd2ec1eef2ad3d4c4d0970e074a8bf77f7b405373ed290bbb6f2481cdf4e2657ec2088964e74dc700df274da7ccf9c9d87b6932ba558f2a7e614b79c2a1c6f77c278d4851ce85be32cfac919b3096d6c58c", @generic="08de38849479ffd06ae13ca40bfce6df33880f85dfe9e5361f06d145f8eb660cf9ff2ad228fd08fe1e898d5cebb4da63960ebaf9a1eab9d969980fefad9f4d151d952bb7f581aea6c061d1d1f636878a20a6d52edf3c8963de381d35080e88a4f836c198ebcc52e2de9e3e38e1e9b34828123b054081f7df22"]}, 0x13c}], 0x3, &(0x7f0000000980)=[@rights={{0x1c, 0x1, 0x1, [r5, r6, r4]}}, @rights={{0x24, 0x1, 0x1, [r4, r5, r6, r5, r5]}}], 0x48}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x40044) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000b80)={0x0, @l2tp={0x2, 0x0, @loopback, 0x4}, @l2tp={0x2, 0x0, @local, 0x4}, @can, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000b40)='sit0\x00', 0x2, 0x7}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) close(r6) (async, rerun: 64) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}}, 0x48c0) (async) r9 = socket$inet6_sctp(0xa, 0x0, 0x84) (async) sendto$isdn(0xffffffffffffffff, &(0x7f0000000d40)={0x4c6f, 0x7, "837c1d96675cce70fec91ee9ef6c950ee2086ca70607b708906e2e3e36c9dc3cd673615b617fb40548bc18e0a26d209b5d0fbe40c015c4037ad7b25a8632fafd2dced47911e39532c0a742d907615ebd966670f535ee23489976bb38c714b638498ae30add8b2507962d91213b72ba528016ee4a0d98edb4715a97e48012f3fe9ebf9c9a8dbb725ee7b093aa1429d61350e4e93986c0daaf77fb184ac5340a2957077f86094f031e27a389b32a"}, 0xb5, 0x20040800, &(0x7f0000000e00)={0x22, 0x0, 0x80, 0x8, 0xe}, 0x6) r10 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r10, 0x11, 0x64, &(0x7f0000000e40)=0x3, 0x4) (async) sendmsg$sock(r8, &(0x7f0000001080)={&(0x7f0000000e80)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000f00)="03baebbb5e0649af85e1ac040aa0e0ce8e515a34ed56fa940a1e925a6c2a0d5f7d4788b1df48762e5b4588d2eb14dd6f50d725cf029dcc9f78920aa6333148ad5a121dafbbed3c5afb99107dfd35cc7dd7d4ed23430fa86ad2b8c929f89ae0fd77c74d9c1dcb5480b9a17d9f303c77860943b895e33f29eb578cd310f32d0a25a8141f97451dc36f8f83d76981d734385641b05afae731fb858c9a17b425b573861590219296bde6da7441245d2e789aae8e0f5e1636a23e1c6602604ff9509e99c621043504ca7dfa650a7105", 0xcd}], 0x1, &(0x7f0000001040)=[@timestamping={{0x14, 0x1, 0x25, 0xc5b5}}, @timestamping={{0x14, 0x1, 0x25, 0x735}}], 0x30}, 0x40080) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000010c0)={0x0, 0x9}, &(0x7f0000001100)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r9, 0x84, 0x79, &(0x7f0000001140)={r11, 0x8, 0xfffe}, 0x8) setsockopt$inet_mtu(r10, 0x0, 0xa, &(0x7f0000001180)=0x3, 0x4) setsockopt$inet_msfilter(r10, 0x0, 0x29, &(0x7f00000011c0)={@dev={0xac, 0x14, 0x14, 0x10}, @dev={0xac, 0x14, 0x14, 0x15}, 0x1, 0x3, [@empty, @multicast2, @loopback]}, 0x1c) (async) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000001240)={'veth1\x00', &(0x7f0000001200)=@ethtool_sfeatures={0x3b, 0x6, [{0xb, 0xedee}, {0x1, 0x1000}, {0xabf, 0x3e77}, {0x0, 0x4}, {0x101, 0x9}, {0x6}]}}) (async) getsockopt$IP_VS_SO_GET_SERVICES(r12, 0x0, 0x482, &(0x7f0000001280)=""/157, &(0x7f0000001340)=0x9d) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f00000013c0)=0xff) 992.318603ms ago: executing program 4 (id=2856): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x41) (async) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110780000000000630123000000000095000000000000008f6a138c9e4eb32e71d7754e127d8d87525e8d57dc3c002fa721249c4cdfd87788947190b59b5af99eaaecbf2ba57aa6ffd750ffd3bef751c89264a6a9ec3b188b69dc1b6a12211cbf01e697342cf987ca2161e2a58904"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2219}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) 963.409827ms ago: executing program 2 (id=2857): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffca5d, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x19, 0x6436, 0x5a, 0xb1, 0x2840, 0xffffffffffffffff, 0x45, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.current\x00', 0x0, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd9, 0x0, 0x0, 0x0, 0x6}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}]}, &(0x7f0000000280)='syzkaller\x00', 0x9, 0xcb, &(0x7f00000002c0)=""/203, 0x41100, 0x8, '\x00', 0x0, 0x19, r1, 0x8, &(0x7f00000003c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xb, 0x1, 0xfbf2}, 0x10, 0x2a73a, r0, 0x8, &(0x7f0000000640)=[r2, r3, r4, r5, 0x1, r6], &(0x7f0000000680)=[{0x1, 0x3, 0xb, 0xf}, {0x4, 0xfffffffd, 0x5, 0x7}, {0x1, 0x4, 0xc, 0x9}, {0x4, 0x3, 0xd}, {0x0, 0x4, 0x0, 0x4}, {0x0, 0x1, 0xd, 0xb}, {0x5, 0x2, 0xc, 0x6}, {0x1, 0x2, 0xa, 0x3}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x40, &(0x7f0000000200)=""/64, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x24b40, r0}, 0x90) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0xc) 899.651233ms ago: executing program 1 (id=2858): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) ioctl(r0, 0x1876, &(0x7f0000000040)="1841a8a5be5ae99ed5892e912910ff397b980fdc0492b3f06555a74916af1cb7fff93ac0cb4face96469da8b99cdf9b7e4e4553b34750e5a49c69d84d25c29c73d7e8058e3d3d1d2a98ef727a206") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f00000000c0)='veth1_to_batadv\x00') r2 = socket$inet(0x2, 0x5, 0x24) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x17, 0x19, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x0, 0x3, 0x2, 0xd, 0x4, 0xfffffffffffffffc}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @jmp={0x5, 0x1, 0x7, 0x5, 0x7, 0xffffffffffffffc0, 0x8}, @generic={0x7, 0x2, 0x5, 0x81}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000002c0)='GPL\x00', 0x7ff, 0xe4, &(0x7f0000000300)=""/228, 0x0, 0x78, '\x00', 0x0, @cgroup_sysctl=0x12, r0, 0x8, &(0x7f0000000400)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xe, 0x9, 0xdb7c}, 0x10, 0x0, 0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000480)=[{0x3, 0x5, 0x7, 0x4}, {0x4, 0x4, 0xd, 0x3}, {0x1, 0x3, 0x9, 0x9}, {0x4, 0x5, 0x4, 0xb}, {0x5, 0x5, 0x2, 0xb}, {0x5, 0x3, 0xb, 0x5}, {0x2, 0x4, 0xd, 0x2}, {0x2, 0x2, 0x4, 0xb}, {0x2, 0x4, 0x5, 0x4}], 0x10, 0x9}, 0x94) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000680), 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{r3, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0x4, &(0x7f0000000600)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x2}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}], &(0x7f0000000640)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x12, r5, 0x8, &(0x7f00000006c0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x1, &(0x7f00000007c0)=[r6, r3, r3], &(0x7f0000000800)=[{0x1, 0x1, 0x2}], 0x10, 0x5}, 0x94) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000a00)={'broute\x00', 0x0, 0x3, 0xae, [0x2, 0x20000, 0x4, 0x9, 0xc, 0x8], 0x2, &(0x7f0000000900)=[{}, {}], &(0x7f0000000940)=""/174}, &(0x7f0000000a80)=0x78) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000b80)={@broadcast, @empty, 0x0}, &(0x7f0000000bc0)=0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000c80)={0x81, 0x0}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x19, 0x6, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f0000000b00)='GPL\x00', 0x4, 0x13, &(0x7f0000000b40)=""/19, 0x41000, 0xd9, '\x00', r7, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000c40)={0x0, 0x8, 0x4, 0x5}, 0x10, r8, r4, 0x1, &(0x7f0000000cc0)=[r6, r6, r5, r6, r3], &(0x7f0000000d00)=[{0x3, 0x2, 0xa}], 0x10, 0x6d31}, 0x94) setsockopt$inet_mreqsrc(r5, 0x0, 0x26, &(0x7f0000000e00)={@multicast2, @multicast1, @loopback}, 0xc) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000e80)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e22, @remote}, {0x2, 0x4e22, @multicast1}, 0x8, 0x0, 0x0, 0x0, 0xb76, &(0x7f0000000e40)='macvlan1\x00', 0xffffffffffffff1c, 0x8, 0x8}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000f00)='ns/cgroup\x00') r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r5) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000fc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000012c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001280)={&(0x7f0000001000)={0x27c, r10, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8, 0x80}}}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac0a, 0xfac05]}, @NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0xfac07, 0xfac06]}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac05}, @NL80211_ATTR_AKM_SUITES={0x1c, 0x4c, [0xfac13, 0xfac03, 0xfac0b, 0xfac05, 0xfac0c, 0xfac04]}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac02, 0xfac06, 0xfac06, 0xfac06]}, @NL80211_ATTR_SAE_PASSWORD={0x7a, 0x115, "48db61bf3ffc0a26791f22acc3720775481003e03dac8844a8bd231508ab38be3dc83e1ea90b9d25292638225325854e95e41d64ea135620a096cc318003f6f714901cf4798021cdde564a2804e4c97b52079fb121cc150a5c98ab93977886d4240bd5c44bf77bdf40e5972fc3ac766d3211806319f6"}], @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc, {0x6, 0x3ff, 0x4, 0x2}}}, @NL80211_ATTR_PRIVACY={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_MAC={0xa, 0x6, @random="2fdbe33358ad"}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x39, 0xfa, "c00cabc40d7d1f32b670eeb10725d00face9fe5a9ab319a7fddface7d9517c2e14984e938423f204ea3ab2344f22cc19173d4212c1"}, @NL80211_ATTR_FILS_ERP_RRK={0x1a, 0xfc, "f59d9a55c97c7183b63cf14852b9e42b8283389d8ff1"}, @NL80211_ATTR_FILS_ERP_RRK={0x94, 0xfc, "690fc9164ea7f22c026b1c88c7b2cba94787a224f7a8f48c823ba6abe3d60ed6ce1cc4c091d5b6a22681a62d5281bd77201e89ec8f913dc8f3fba9c846c8d1194182c701009d62d997ddf22310a571f09eef4b4766fae5631d010facde869e2aeaf217e8ac278ab8d04deba2fd6d664c8780a9972ecfde7c382fc3e502ebdc516f85d8224efd7e86300152bf98a1e6ad"}], @NL80211_ATTR_BSS_SELECT={0x50, 0xe3, 0x0, 0x1, {0x4c, 0x0, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x3}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x3}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xa, 0x80}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x3, 0x8}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x9}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x6}]}}, @NL80211_ATTR_PREV_BSSID={0xa}]}, 0x27c}, 0x1, 0x0, 0x0, 0x4}, 0x44) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x6c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000014c0)={{r5, 0xffffffffffffffff}, &(0x7f0000001440), &(0x7f0000001480)=r9}, 0x20) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000001500)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000001600)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001640)={{{@in=@broadcast, @in6=@private0, 0x4e20, 0x3, 0x4e20, 0xfff, 0xa, 0xe0, 0x20, 0x89, r7, r13}, {0x6, 0xd, 0x5, 0x1, 0x4, 0xff, 0x7, 0x2}, {0xfff, 0x4, 0x0, 0x9}, 0x7, 0x6e6bb8, 0x2, 0x0, 0x2, 0x1}, {{@in=@empty, 0x4d4, 0xb8}, 0xa, @in=@multicast2, 0x3507, 0x1, 0x3, 0x13, 0xaa, 0x6, 0x10001}}, 0xe8) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001780), r1) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f00000018c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001880)={&(0x7f00000017c0)={0xa4, r14, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4841}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x38, 0x30}}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x13}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x16, 0x10}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001a80)={r12, &(0x7f0000001900)="05f6c0c6ac63c7c602e37ede899fd0cb8e4bce20456a0524ee6be484a1e08f35ed32f81b29aaa8755d28344610dcbfb85ed87d4a17ddb052234ccacc9fdd2d606d4ddbf19805", &(0x7f0000001980)=@buf="25e703a7014140827d5ade592f70fa0208b8385ddf89561a36c38862de96c0e2e087374d5fe96bbd841e59dc4dfc181859226f4fdc0a5a764a3e5055682d4a76f50972ed2a48ac1210cf450580f6e0147ccda1ec6ffd983571f8f1b5754a09756a73eea10d09519e5ee549c1e2320f7b5e1ed712e1163d348e9c3348ce440c37707f40e3424d312dddafe8fba2723f390621615ba69ba1f14e6d56ec374f76ce454b5a063e6639225c7f80ea51c19730eff3eaac342b3729cec29506d748bea074aebcfd6746c62bc13c85e945347e"}, 0x20) syz_genetlink_get_family_id$ipvs(&(0x7f0000001ac0), r5) ioctl$BTRFS_IOC_QUOTA_RESCAN(r9, 0x4040942c, &(0x7f0000001b00)={0x0, 0x12e, [0x5, 0x4, 0xd6a8, 0x4, 0x3a6f76ee, 0x100000000]}) 899.234906ms ago: executing program 0 (id=2859): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x3f8, 0x100, 0x70bd2d, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x20004040}, 0x4880) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0, 0x8}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x1}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 832.41481ms ago: executing program 3 (id=2860): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x101, 0x0, 0x5}, "0fdf77"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3000000010000108fdff763f0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008001a8004002d"], 0x30}}, 0x0) r5 = socket(0xa, 0x2, 0x0) getsockopt$inet_mreqn(r5, 0x29, 0x20, 0x0, &(0x7f0000000040)=0x2000) socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x101, 0x0, 0x5}, "0fdf77"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3000000010000108fdff763f0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008001a8004002d"], 0x30}}, 0x0) (async) socket(0xa, 0x2, 0x0) (async) getsockopt$inet_mreqn(r5, 0x29, 0x20, 0x0, &(0x7f0000000040)=0x2000) (async) 820.454419ms ago: executing program 2 (id=2861): r0 = socket(0x40000000015, 0x5, 0x0) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) sendmsg$xdp(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad237f1863d2d2d1a397e2a489c4ee1564e9eefdb4b79061470cc823e53d854435579529b39d744f960b8ed0bba79f9df628ff262afb11e4c03b500df2985e8f7a86f3ab28aa6e65dc1668e18aa4168755523a88d020c8955b46806d3f69f8112e948be32c675bd54ac2a8fae35dd71d00f06ab2cea8236060d1dcf3d1edf529357f70b8e066aaf93e5b32683568c00392ab3f0f8b1ac8a2ec51caacb1cc69306d814957a18b04bec4fae32726ae9013fe17948367ec6494080c4859841ebdb4d9237640caef0b7010d479", 0xcb}, {&(0x7f0000000d80)="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", 0x1fa}], 0x2, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x89f2, &(0x7f0000000000)) syz_emit_ethernet(0x1bd, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000021001873afffe8000000000000000000000000000bbff020000000000000000000000000001020090780000ffb7e563ff150483320000000000000000000000000000000001ff0100000000000000000000000000015e0c040636686606ff010000000000000000000000000001ff020000000000000000000000000001fe80000000000000000000000000001900000000000000000000ffffe0000002fe80000000000000000000000000001efc000000000000000000000000000001000000000000000004010f0000000000672a9edc139b1ad5728343187c3323f51559025e553e6b81431b0724b609ae90f7e330c4ec9a88d32f9f97f48df418d1174639c021b7b12ea145a5204bbcbbd34cee19d09c95bf36d6661714fe3eb66b145df87eea8db276d37d211cf9917c5e3b37d87a72df7266bfa9659468e9b6e21013619b1a7d54b13cc5fc88aae7c8b5db6f9bd921d123de62d409b26b94caed9d77211de7bdb73c5f1fc5516ef9f045b93b51030917d6320df27d861cc4a529b3ad10361f6919d56846f7adef7c551c3ebe7f39cf6a815f83dec7f745a1872493a2330d4a5be5c28e0b7551d0f762"], 0x0) r4 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) recvmsg(r4, &(0x7f0000000440)={&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/252, 0xfc}, {&(0x7f0000000100)=""/50, 0x32}, {&(0x7f0000000300)=""/113, 0x71}], 0x3, &(0x7f0000000380)=""/187, 0xbb}, 0x2000) 691.640248ms ago: executing program 4 (id=2862): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x474, 0x24, 0x1, 0x70bd26, 0x2, "", [@nested={0x464, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @nested={0x43d, 0xeb, 0x0, 0x1, [@generic="dab8ca993f84687a64cd87a2f961cc55af32afa7c6ff99b17597f02a3c4fa8cb61bd9b214a9054b1345a6a6e9440406560313a993916d7b4564890cdcf68a04dd049604827675ce904b3f559c25cca97f5d55ca6f74e681f71faaf73e7dbf0251e5f1a8b61b41bc7b56534826d9a2effb9074fc3a3a1e26468c17181f1313e164b8010bc8941cd1a3fd431c87709f6c9c3258ad3130d5f25d9e54ec4c0cad3a79a688f090d48a46df520f35fb2ff6be10c", @generic="5ddef55553470034ff840aaad3364de4d6fbd3", @generic="a171b8c1f2873a1b7b610c968bb1ff24255071e0ba0cd7d00542070af8e8eead716167967fde659fbd7e4e8a4e5d73c4064fc46df4c2529d584c", @nested={0x1b1, 0x72, 0x0, 0x1, [@nested={0x4, 0xf}, @generic="434f1bb8106cb29841c806c46c527381fdaf6a5491", @generic="914573c47083055f19b78aa97f60e656ea0709a7fcd493f93606bbb62ff975990c749a2846318495aeb7d41855bcfb3083bc470bd4ccb5d82c589c5effeb", @generic="d1f446ff667012a7fe600890547d3ab4d30dc5f1951eb2a663f3f5f7e9210519d417107fd9144b3ef446f15a02be3181e5e6f409e98e4b6c9fabbbc652cd7515c86ae35a3717ef18ab4a724b3eb198b5c8fa5ecb8f37a97f01d7a295", @generic="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"]}, @generic="962c49afb5868d5de5446c2c80a0a50421d2600aaf0eb5e54a99bdca60790d898c7c8d3d909456f608a2cb869a327da6576dbb699e8134cbeea9748933b415639b91768ea8081915790d3becef2070a39c67c236c76ca95112007d20ee93b8f6a91b9917f4", @generic="0d768294f529804d515d270ca24e6d146c55dc1e4f2e90fcaa5d0315947956fb3d6598b27b333a190b896fc1b0e4076faa0f4748ef52ce701eac673a50882dc86b79dd85ada336aabba29f9f073cda9746a6f1dad3d1ee9816f4164552f04d7349f25a532e3e745ece81a0c27d415a4afe5b4e34449d19e2574e1d0e50d70e31fa21c307f9ce587b8ccbf1e63dc9f18e1a88738be82914b9cac5fd2b281a5035daa4635ff65abfdc735b1edece672df050da3c564d85b9791b3152391efa4ca92b3cf3c08891faf37080", @nested={0x55, 0x94, 0x0, 0x1, [@generic="113ac7f3808e9adf1660f5b33acc6ade5dfa5d05c551871aec1ca314fceb95be2a3315d1414824db041083e881811762c088b8041361ad8390eea9d07fbad5834e59a61edf", @nested={0x4, 0x12b}, @nested={0x4, 0x134}, @nested={0x4, 0x6e}]}]}]}]}, 0x474}], 0x1}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000019c0)={&(0x7f0000000900)="edb0bacb450ef8b5172b06afcc6ae499b8a7572d63ca7aad662e6b106243f6e9f1dbefd26af63c489e0e7e54f08dc8e16eba669bcbc1491e1d700c6c36ca4d10cbc3b6d120b3b55aafcbce5d9a6cfbd9533a023e3f5a991f314ec6237a5f084fb9aee7a1a4645f4b8119fbced7a97d5619dee5914a879a3c143b2f00bcf8d5e5593d6ef98f7439dd7b2521461b763994fad39342c71be32970a90243a638696e36806332b5950be9f8ed5c31045bb81cd4d08074fee16019667d66c0f5898ef640aa86877429a9bbe8b331140c608fb608c3469d1bd2ea1388c58f426c86e656f722c01e638a09364c5cb3a7260ae4fc384f36aac47d7174341a69bd9735bc7ceb9f85962a7bb0e67203d6798712383a261031b2d0b976472e03117fde69b0915f7799d3bff05aead6af93ef04a571b44d7db7819d283fc8287dd35efa3ba0eae87d425c48105d56f0d28e7a5805afd9c35d6bd2601e07abd8d9216ebb8f5eb51ed32a34e7c016b3ab6cfb1178b269680c6ea61f8d35c38c1dc709a958e8a40c2e61cf5fe86db56eb839bbb8cc19f9345b39622005d80725c60948a49fb36d5b4bff7922550c97b77654542e5ad7006f43bd2bdc6d5b456726c07cb9121825b2efefbd2e0a60ad4ebe67b84ddcc6f9a41485a542b01c3ed7bf401252108d4e5a384cb25eafd429abca957c8a0b1a84408eca9e706b744e462b4ed3795b2ca2f5fb3c612374fe58c53e6e9aa7784c87aea9b01941596af630e4854699a4ed3a0802f29baad18306ac93d879352b62ba43d43884dc4ce2a46e7444df9ba8d3ffd1116a0f19b00b5372a3c280f40b160cd366f9c585476e12d760df5ac921b3819d8a7d29b1e159d31fd7df89eed9a029175c76008efe626e7ce2167d5e556f9b5b43fb401016c97d629a9b1bfa3720c912c794fd9a21328bd2dfc4a5f183192ac4f7110b82d4bb33b7f19566e3119b8dc1954d3eb87dee2bc9063c78cf8e6226b91d2a5fcf40cda6c680228e5462906e3e91d48008b5a59dc289ed687546b1ab52e2827e34b7eafab9fce0872ec94a21482ecb8e7a7993fd9a55cdd922c27589bac1f1fd5305765d47338780d7d4144977c67cb06005d418bf42a42e8f310642c8582f378d6b0326dee3159953fa34a443cc4990b77dbb968e72231ae5bc11b8b1659457e8665519f0cb28eb06a58dd037214715d497227f888c0d7f1729c893f772ec8fef00f85585db3658e1dc59eda8adbb30fa6a57a10122e95e67578931888ff64ac07f594d442b76068104c623e9d8fa7dde395592a6df6efa1635d80ab19009f145aa7f887ca56d3efef632f3ee2263e46ca0dc660b91120321726f51ac94c081267993a2d635024ef081f8ca3328c44aec050359c48e8acce73c069d9ca0603469756b1355fb44a5348f3fe6068c44a2840cbf10c0c2448526e236a56c48a7eee486114a74eeaafb33fac3e5cc77eccd6baf4bdd8407b04192f0fac6386683abbbc0b322d627fbf10b562aab564efd72e8a9a9dae51ef668aae0488edc8f7ea7408ba6676124eead26004052467c0405c25cb59b443f9ea147324882cc73826b8ad2efe8bdf626b5f764b1763ca88b2de95af7283a0a22d0fcce1662f09b4966017d710435da9b1f89c912cd06c114d396a323c7c1890b11af5503973554e8142ee98dc736686062062d42ab71aa558f38b4bd56e85b00365fb178cf7d6b4b14c5c673fb3deb1a01dcc19b87ad22954f8088e80f85edb260a3601d540e2f68d560b68365f460aa840307051964319dfb569b013ef219a135284eb903de1897c7773f3f760156282796c26ff83ab986606bd3b1da50b066798a96217d02f7d7bc0e3856125ea79605a3235e39580de78b61605e75acc48f7138bd017c8ed9cc3229d2a462d6c6a52431f40191bda71ef821d38940bd2ffd11709c89fb133879570a38bafccfccbf76765b7bbf484823e2705eebaf2a6225b6e6fea67ace6bdf1899ed80d50c50a475ca3072592e392b00e4bd14007658f581db9b82c3329a18fc3aebbc1393ea7512b73c253ab87c6abcab5068155444e8788ccec1391e5d3a4590300a42311fb4e113b99f207d399c457e1c67751e2749815866f32416a46c55ced9d52d3bfbf333646a83062c09ac460eb6492945625ac1badc12b7a96e22e3a5d5247de36057a02c5b41a72641fc046753a64b0714594a9a06131b8dfb3bacdaff75881052ff57fb826154a5c642c3c112911aa0e8737d41aac0fbd9b8415001cc73b371f06ac40077a30808d27c513fe8e264251b4bcc0668996ed96595027f321efe2f672b300b338156720005e40755163f047f0d52667122b425ccf4dea32481c2d72654300c10aafdc8ccddc7c242c766f403b84e5513bf4fe9ade16c8c8b25762464051c821bedc83f37a0db58ef870053318cbc44ffbff2ad3be8f48f9b38260b7bf9e0dc3e45fde2aa8b239f8759444d53efb0b0291c8fbbc69f9ec3f0219d4fba46d34b6a33fae62a7703f8f1a197b6470ca2886801b85b151eda309b7e8092a5c561eefc888362fefe5a97632b0cd9e397b751a42bbe137156c1cadb4ee4362215360c358ec13d224abc35c30ffa75c2b3a2b718d76f830d9ba37a4477857b4a6d778447c3252c76b397ec020a66cc12269212ba7b8220a09af3917f5fe4ba4d43e28f7560d42860c601d5300d6eae96e1b5c62cb0844e4abc141d5d6874e69a85b075c5aa7ac10d57553f01992d8666978ced0e8d38d795ff079a66a59e2c9927ea4357a57df607a5024016cce3a5227576b80c160101b98eaa1313ec56cc12a70318c0be083ad11e59527b4b63883132e0de83b81369c1c32410205d6695f1c9bae123834ac9e7c7845cd8f097f5453b216ecd2e6695ff26b1eeb40534822b59c4dfaea2ba35c5d2c92b99b0d3c57a1d512fb036a6e19c438e8ba1a55d2c8dc5aa70f1c5a8f7b0b7d5de32516c0b80a46e9c005aa465aa7719950af04af569f6180c3b1f04793054aa59c46ebce8d50c275396ff6d944f5a596c107feec724b252ee5461a1c41da4014637cb66f81498dde9a291edd0630ca1004bb81dc1aeeddc382780564b900d7e26af77085d5917c65b36c18333025d5822b2b40b1ef02b98039117950a53e63eef7dcbcaba78662e52dcc57fe28c0924355e14fb4bd05381aa3a638901079e95002952f0d6da650e743b75e4d42fb0c27dd43d228add613ef0888180df47898666d88651694e401fcea1726cf7aa53530f824e15fcfb61be3d5b966e9d35da7fa075b559660ee79ec39fa050f61eb9616564bfbc4ebe5bfa8f74ad18506cc0e316e4e6f2b11c3e76d38d80816f974e7ac5ffcfa1275153efd9cffa40cfddae700b37a1a692020c7e800ef47a19970b8446d7440062ad37fb24db1a616c92aaf1bc981d59d25edc04f7191275131ade6edd951c02890e4aa4137763cf101a1f41640f452edf7551a5f50f970463e73488c29e35f253cad19c0e1f5beefae79a4a5b2d19811e44833d527f133736a54777be4e618618fe5af5a4b3b1eddfa98ddf5542cdc3912c8619ad5bbeb1d4be1bbbf3689e398a5b8adad41eb636f12c84efc31701c48922694f4d7dc05815df4e23ec0c77b2eb90388376741e69739dad9469db65f437727119ca545d97272ce0ee938dcc826b0e11005f82a7db2115770cdcb0c848ed809f397d488816d91490d003734b7be47ad71f9a57d84968361bab53b697c4e66372c2bd07368f3ff68e9c25106b24d1ebc6eb2d22c92a3feb61371df7aa097b80ff66ab5a82fbfeb021359362f549e698084df5bcc20a25caf0bda12e0227832d7ce6a56d1cc9798834b54c545a3b97d58d5de015131135b8918d4d315b1dc85ff224330d8cef3d5440075ada1be0a6d0967291b420d855daa68daf8ab55a9bb1db439835a18151ec4a8e2a0e5f8e717f09bf412eb10942e13c416a6a71fb93a222e61095a2ea394f85a6a278221fb4b4ba6de16413cbabfc1d3ea1b8d7322b51bf8b603cf300f67dc2e2f27dd7b1c58af31b542dde5e9ec5c2e118e67da25cd11c863cd4667b0ad2d7f5e019d352254fbf8fc2fec8685d639af7a989c4b4c92499a5c00dc3cff4bc892b2da2cb94bf4721b01d5375d3c519762f12db6ad132b98a8a8ace72bf48f94dc79cddb3f9c8d67b8fdb5872d367be93371a7954a766240fdbda763e31a27444b5bd70cf2979d61d56b69faeeba628f83feceefaed3ea4540d6cd5902da9413cd7659131bdcaff5a16004d6ef981e746fc9f7833ee3f82d58e8ba42a33f234498423cb8c3f69e556eebafb04b29c712eae9d6f3c3f03c224ffced93314f0766affdf9f5dc4c5643f30056c849dd1d399e0d3bcfa406438f20decf59c4a70f274dc8d033fef308547633f112ad2aa835c1725bf4069dd4ba4a17612dfb21cb981b549b61f08fee7abf1a4f20b57a78fc19b0ce2dd5d758e9e0c0d8357de47ac878704203cb04401a71019df76376da150f307939602063161eb047bea9dffa50709bcdf5dd6df44bae90c32a994d5bf0529786425a17a6710f8d7636f4ce7f88f97aa65f439223d44a932b2c0a767be20986b5434b58cec98da5dec2fede234c51e505812ccd9058f813036ffd0190a7859cf0f9bad3eca66057183496ca9a31dd95e95c21a8647d0cb4b4eaf50fee3f1eab225f30f6ce6ccfb5cd6c57e3ad0267b03f8abd41591200514e2eb69cd8204b7303abd2624b889723d925bc2f211dbf4bbef9da111faaa84c20dcdf12417802366435ddaa10bc9df98e1937cbff4128626854eb1e8e70be6d0271c229459fbeb20bbb1b3ab20cdbc8747dc44a62c3564142e02921230fb7f71214f02db65eb283fdb536701048d074d0ddf6db430844370de445c8cfa4db519e2d98962c2861ff03a82baa7fccaf6be72adb466acb5e5434bb74bf03af7d3f7a0cccdb082f038206f19be5dbce205b6f682b463f1e94e3a36e8f4fdad9cb62dd3bff4075864d7f9ba294586638f1a50a3f647c966d2153682096484b959425ee456b02b3cda3853b33d283f9523aa41897f51c44399ae5a824f6ce6893c829b0ac26ba6330f1369fee5e978699e8cdaa41094aa095a694961f888257ece8ac0ac8bddaa380e7b6ceedddc24e7883629ed41c0256e9ba3eef382c7bff7fa84db9d932fedeea3b0f662c452740de6dabf033c0c98fe58da8b7d807717ea51d3290be4ae183f0d09200f6f66cb043de8740d6bc0f54f41782b7fcb83ed4967cc1978e089f11147a903b14722a8309bc3c7f894f643e477d0d6104280a153ee6fe8c9ca55432847c1c821a82dd98f4705564f7f13793709f4595d1f5ebf05ccfce42d2df056b4e4f0e1d039ef265e99a0311871bf9a0f6221b756900989404d9b4cf937cb07ce904a7a5c2483cb94b231a6cd303ea9bad4859d48ec5f65843f555d0130e710e5db04038f37db587f639a6fcbf7a4a06b51606b7bcabeee08ebcec2da74299f23632979e40f36528c843f0d09193580c7126d102e096423f4b2d485d83d3fa317594ec9e103efad8cf2565ba01bcd001469a6a8a137d9e39412fbbcaa6d098f9cb6881549a4a42fa05c8e6684cdd6c0f334c8f8bdb08160768900f542fe90d77672a8bc89596c8fb62800adacf49f7e03976e2e51622f09b3166bebe41a284f3ed0988b87c3eea16f0f75b6c50d7081798c5bf0cab4ba5dd50fb826a5515a79646049cfacc521624d0c1a09c49ae220daf855cf262dc5e97313b2830ba1d382202f525b3910370654360c0efaae9e77", &(0x7f0000000780)=""/211, &(0x7f0000000500)="14bec367aad1729ae1c099f3f4f5b7064a1b4889f54cdfb694d9f933153bec843489f535916d2fbffffd05434a1a95c050227e233b71b8213e8f71389aac824893efaccee22364b944725bff66214e5648fa469ff45d052a02823cc6b4d0184ee978e90f8d611d0cc1001027d2a48e8bb0438220eda0cd3f1713e906ffea0dd1c923fe2a1d3bf262770fce6ea0b7d699d568e9adb2ed370224ff731a619b3e501963893a039d41", &(0x7f0000001900)="21b38ed1f3a4d63df08dd66f28f0b327a8195c150bffdad8f24339819b7325b08e83ac6a5f307fbf9bbe84c5926547a9badd8cc89b30b26aca192692e94e8bf36784fb061649d5f68437dbab1801e4b8f9f005629ebab28af4c31fd5d84ff2c6bf7d7cf53e5f81a405c8bef950861419ca8e4d521516c64fe8446e237acf0c49beea15e675dbaa93239667a9de", 0x7ff}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) close(r2) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="f4ffcd"], 0x9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0xb8, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_DATA_TYPE, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0xf, 0x5, 0x1, 0x0, 0x400b}, @NFTA_SET_EXPRESSIONS={0x74, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x5c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x347e8b24}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x200}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4044050}, 0x40040) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x848}, 0x4040000) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x44, 0xd, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x44}}, 0x8004010) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111ab00000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91f7bf447837"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "36dad83aea8d"}]}}}}}}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r4, 0x8002f515, &(0x7f0000000380)) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000001ac0)={0x1, 0x0, 0x1000, 0x63, &(0x7f0000001a00)="ff46e09dae0eadbccc399cfcf68dec3ae75d41c94308f4a668dc837e5859c2ad2d5270924e6e4c79b82e50e3c715f6de3b76127fe4fa442456a73d38265427e33f213c7fcfc03bbdc91abe328b2a76a53b58c1e3439e2dfda556e095a4b80edcf6f6c7", 0x8, 0x0, &(0x7f0000001a80)="cc876b50eb4a81dc"}) 690.393447ms ago: executing program 0 (id=2863): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000010480)={0x0, 0x0, &(0x7f0000010440)={&(0x7f00000102c0)={0x2c, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1406}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x88c0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x19, 0xfffffffffffffffd, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x0, 0x0, 0x10, 0x8, 0x22, 0x0}}, 0x10) pwritev(r3, 0x0, 0x0, 0x0, 0x5) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x40000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x81}}}}]}, 0x38}}, 0x0) 662.523949ms ago: executing program 1 (id=2864): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000040)={0x0, 0xe}, &(0x7f0000000080)=0x8) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0xfffe, @broadcast, 'ip6gretap0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r5, 0x40047452, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 549.577706ms ago: executing program 0 (id=2865): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000090) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f00000000c0)='+7', 0x2, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r4, 0xfff) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)={0x30, r6, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req={0x9, 0x5405591, 0x8, 0xf}, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800c001a"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 435.774447ms ago: executing program 4 (id=2866): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x20003, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, r2, 0x1, 0x0, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="2e000000010002", 0x7) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0xc8000}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r4) sendto$inet(r0, 0x0, 0x0, 0x20000010, &(0x7f0000000540)={0x2, 0x400, @empty}, 0x10) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000001c0)={{0x2, 0x4e23, @local}, {0x1, @multicast}, 0x64, {0x2, 0x1, @rand_addr=0x64010102}, 'team_slave_1\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x164, r5, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0xb4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x40, 0x2, [{0x6}, {0x7, 0x4}, {0x3, 0x4}, {0x6, 0x8}, {0x6, 0x5}, {0x0, 0xa}, {0x3, 0x1}, {0x4, 0xa}, {0x6, 0x4}, {0x2, 0x4}, {0x0, 0x6}, {0x1}, {0x5, 0x2}, {0x2, 0x5}, {0x2, 0x7}, {0x6, 0x5}, {0x3, 0x4}, {0x4, 0x4}, {0x5, 0x6}, {0x0, 0x5}, {0x4, 0x7}, {0x1}, {0x7, 0x9}, {0x1, 0xa}, {0x1, 0x7}, {0x1}, {0x7, 0x2}, {0x0, 0x4}, {0x5, 0x6}, {0x5, 0x2}, {0x1, 0x4}, {0x0, 0x9}, {0x0, 0x5}, {0x5, 0x2}, {0x3, 0x3}, {0x0, 0x8}, {0x2, 0xa}, {0x4, 0x3}, {0x7, 0x9}, {0x7, 0x3}, {0x5, 0x6}, {0x0, 0x1}, {0x3, 0x5}, {0x1, 0x6}, {0x3, 0x2}, {0x0, 0x9}, {0x4}, {0x7}, {0x1, 0x4}, {0x1, 0x3}, {0x0, 0x3}, {0x2, 0xa}, {0x6, 0x8}, {0x2, 0x5}, {0x7, 0x8}, {0x4, 0x1}, {0x1, 0x2}, {0x0, 0x9}, {0x7, 0xa}, {0x4, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3, 0x18, 0x16, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x7fff, 0x5, 0x2, 0x0, 0xf, 0x5, 0xdfed]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x81, 0x8001, 0x0, 0x7ff, 0x75, 0x2, 0x2]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x7, 0x9}, {0x6, 0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x7, 0x9}, {0x4, 0x7}, {0x0, 0x7}, {0x6, 0x4}, {0x2, 0x9}, {0x5, 0x3}, {0x4, 0x2}, {0x1, 0x5}, {0x1, 0x4}, {0x3, 0x4}, {0x4}, {0x5, 0x5}, {0x2, 0x9}, {}, {0x0, 0x8}, {0x7, 0x1}, {0x1, 0x9}, {0x4, 0x4}, {0x1, 0x9}, {0x5, 0x2}, {0x1, 0x9}, {0x7, 0x7}, {0x7, 0x9}, {0x5, 0x9}, {0x4}, {0x7}, {0x4, 0xa}, {0x4, 0x8}, {0x3, 0x6}, {0x7, 0x3}, {0x0, 0x2}, {0x2, 0x4}, {0x1}, {0x1, 0x4}, {0x2, 0xa}]}]}]}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8b7}, @NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x64, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "176651e5fa2c2477"}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x10}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "8e0a5cd1e85250c1"}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "3abf1d28fd0cbe1e"}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "2dd6005c512e948c"}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x3}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "5fcae3b6d083d35c"}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x10}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x48080}, 0x4011) 417.10032ms ago: executing program 2 (id=2867): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000010003b15000000000000000000000000ff2877b4637745c27db4694c076477362cca7b7cf922aca3a2d750f4c851a8b8cba3bbf7f4db044dbcfc40575b60d8d820e93a66d002d08808af74e8eff611ab3fb41785c8a9c821bd9d8bf1a05e06a3dfaf09f4e01354e94036b4da6f231ff68fe415d9645fa63dbfa5ebb85f20db01090aa790d6f2a3041714a8", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010065727370616e000004000280"], 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="0a000600080211000001000018005080110001204abee33908f8ee71f4000000"], 0x40}}, 0x0) r4 = socket(0x2b, 0x1, 0x0) listen(r4, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f0000000640)=0x6, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@struct={0x1, 0x2, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x4, 0x9}, {0xc, 0x5, 0x7}]}]}, {0x0, [0x61, 0x2e, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x41, 0xff9, 0x1}, 0x20) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001800dd8d29bd70000000000002000000fe000006000000000600150005000000100016800c006adb0800017b6925f6000c8c9b33898e87912dbf03c23d1cb1e354557b623d8c66057048ae28acae30ee01cfd02031300c5b07433e31b3037c039ccddef3c5004dd89846ec35670211bebb4bce7382f863422c28db53615a4eaa14df395bab966e20328d9e91d1c21199f455087fc70400211c9ea42d61fb91a98a614a5111ae0484259270c0e287ae1b1c97c46cfb9009825c5649e9c991496f78ef8460fc3b030e"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) syz_emit_ethernet(0x6f, &(0x7f0000000200)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x39, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x2, 0x2, 0x2, 0x0, [@mcast2]}], "6451e07ac2ef6bac4c7fe2a6fd3815d4941cde00eb2cc355df5eb126688a6e8acd"}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500382c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b0002"], 0x0) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0), 0x0, 0x0, 0x0, 0x44010}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000010003b15000000000000000000000000ff2877b4637745c27db4694c076477362cca7b7cf922aca3a2d750f4c851a8b8cba3bbf7f4db044dbcfc40575b60d8d820e93a66d002d08808af74e8eff611ab3fb41785c8a9c821bd9d8bf1a05e06a3dfaf09f4e01354e94036b4da6f231ff68fe415d9645fa63dbfa5ebb85f20db01090aa790d6f2a3041714a8", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010065727370616e000004000280"], 0x34}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="0a000600080211000001000018005080110001204abee33908f8ee71f4000000"], 0x40}}, 0x0) (async) socket(0x2b, 0x1, 0x0) (async) listen(r4, 0x0) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f0000000640)=0x6, 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@struct={0x1, 0x2, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x4, 0x9}, {0xc, 0x5, 0x7}]}]}, {0x0, [0x61, 0x2e, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x41, 0xff9, 0x1}, 0x20) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001800dd8d29bd70000000000002000000fe000006000000000600150005000000100016800c006adb0800017b6925f6000c8c9b33898e87912dbf03c23d1cb1e354557b623d8c66057048ae28acae30ee01cfd02031300c5b07433e31b3037c039ccddef3c5004dd89846ec35670211bebb4bce7382f863422c28db53615a4eaa14df395bab966e20328d9e91d1c21199f455087fc70400211c9ea42d61fb91a98a614a5111ae0484259270c0e287ae1b1c97c46cfb9009825c5649e9c991496f78ef8460fc3b030e"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) (async) syz_emit_ethernet(0x6f, &(0x7f0000000200)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x39, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x2, 0x2, 0x2, 0x0, [@mcast2]}], "6451e07ac2ef6bac4c7fe2a6fd3815d4941cde00eb2cc355df5eb126688a6e8acd"}}}}}, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500382c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b0002"], 0x0) (async) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0), 0x0, 0x0, 0x0, 0x44010}, 0x0) (async) 413.035932ms ago: executing program 1 (id=2868): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='GG\x00\x00', @ANYRES16=r0, @ANYBLOB="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"/439], 0x21c}, 0x1, 0x0, 0x0, 0x20048010}, 0x4008804) (async) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000000), 0x0) (async) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) getsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 358.166199ms ago: executing program 3 (id=2869): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0xfff}, {0x8, 0x13, 0x10001}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd50b}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x9}, {0x5}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x800) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) 272.040359ms ago: executing program 4 (id=2870): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0xffffffff, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x240c4040}, 0x4040) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) poll(&(0x7f00000044c0)=[{r1, 0x209}], 0x1, 0x8000) (async) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) 269.84963ms ago: executing program 2 (id=2871): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0x4, 0x4, 0x13d8, 0xffffffff, 0x1218, 0x1218, 0x1218, 0xfeffffff, 0xffffffff, 0x1308, 0x1308, 0x1308, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1100, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x1, './cgroup.cpu/syz0\x00', 0x1fc, {0x8}}}, @common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'pim6reg0\x00', {0xf18}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', [0xff, 0x0, 0xffffffff], [0x0, 0x0, 0xff000000, 0xff], 'team0\x00', '\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 'veth1_to_bond\x00', {0xffffffffffff3ebb}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x145b) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_BEARER_DISABLE(r1, 0x0, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) (async, rerun: 64) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20024000}, 0x0) (async, rerun: 64) recvmmsg(r1, 0x0, 0x0, 0x2143, &(0x7f0000007000)={0x0, 0x3938700}) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000007100)={&(0x7f0000007040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000070c0)={&(0x7f0000007080)={0x40, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c048}, 0x5) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000007140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x75}) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000071c0), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000072c0)={'syztnl2\x00', &(0x7f0000007240)={'syztnl2\x00', 0x0, 0x4, 0x81, 0x4, 0x2, 0x41, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x0, 0x2, 0x1000}}) (async) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) (async) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f000000d0c0), r1) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f000000d280)={0x0, 0x0, &(0x7f000000d240)={&(0x7f000000d140)={0x24, r3, 0x129, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r5 = socket(0xa, 0xa, 0x4000002) setsockopt$RDS_GET_MR(r5, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000040)=""/86, 0x56}, &(0x7f00000000c0), 0x24}, 0x20) bind$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10) 263.646192ms ago: executing program 1 (id=2872): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000070000"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1e000000, &(0x7f0000000780)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c00178004000500040004"], 0x138}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x3}, 0x50) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x1000fff, r5, 0x0, 0xa0028000}, 0x86) bind$unix(0xffffffffffffffff, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs={0x1}, 0x4f) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) getsockopt$inet6_mreq(r7, 0x29, 0x1, 0x0, &(0x7f00000003c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newtaction={0x12c, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x118, 0x1, [@m_police={0x6c, 0x4, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0xa8, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3ff}}}]]}, {0x3d, 0x6, "4969317fed0d2751ed03d75d586c24f79c8cd7783c965913f041f1f901004a992f3d94db8a216c33763f127ac35b30fc1afe2e5bba8d35e5e9"}, {0xc}, {0xc}}}]}]}, 0x12c}}, 0x0) 235.396127ms ago: executing program 3 (id=2873): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYBLOB="060018"], 0x84}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f324c0855200000000200000e4bf1f740a000000"], 0x14}}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000106ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010007080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) recvfrom$l2tp(r2, &(0x7f0000000040)=""/48, 0x30, 0x101, &(0x7f0000000100)={0x2, 0x0, @private}, 0x10) 107.969593ms ago: executing program 4 (id=2874): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 60.114064ms ago: executing program 3 (id=2875): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x40000000015, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="b613861984fc5af9c8fac7adf0ac7cb87987bfd91b3992c7ac1fabdff140b976c3498459263e72ca1ebeb7c044cb1fa15e91e5ce63310c8a5b7fffd80e49fb39738801e5f477629ff05787f7f047a7655921d1a99bbaa8b313f8977441afe6e19c129fe82d6cf249933209686256f6c32b6a8d3bb9478c990260054e6d7bd7e583b65b8ae3c1017790e5b6193cdd3797aa27f6d643fcc73a779abe1dc5b3fbe621d1c5eb343e5cea86f26484f63448668d5cefda4e44caf6c1ac3edfaf30d7ed518dd50c25a5ad30341d29f83842eb014d0ae2a51a549fc2993613501dced6c7b03eb551bfaa2b7e211516c9e1f0f6c10afc7a59a5a843948d", @ANYRES32, @ANYBLOB="0100008300000000000000350000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300200000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54000000100003bd7000"/20, @ANYRES32=0x0, @ANYBLOB="0000000030620000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00140200000000000a0003003a712f0756b80000"], 0x54}}, 0x0) 0s ago: executing program 2 (id=2876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_RULE_COMPAT={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x80087601, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x8850) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="d4000000410007012dbd7000fcdbdf25047c000004000000bc000180b6000600880a771a3ea05812f09787fefca70b5fbf4736849672fee2334ef911fdce1a9fff701d525c1e92c7b4085ea51d306da482d8d2c88cd384850c0579f011767f41cf23fa495110ae1e01d755a225525c739e0ecae2b0b6eba6366079d5dc7151f645b5f969a89fe4928be45872f1bacb9c29566f78fb7e85596b9dc66339bfda29292a1b18de73f9a916f5d05b35cd0578e8c681982b4641198de354c29402fd0bf79bebd370413663096ed88c97579c90e18f0000"], 0xd4}}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="150600000000000000018014000400fc01000000000000000000000000004008000600e0008000"/54], 0x3c}, 0x5}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f00000005c0)=@bpq0, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r7, 0x400, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24008011}, 0xc044) kernel console output (not intermixed with test programs): 51] lowmem_reserve[]: 0 0 1 1 1 [ 259.600068][ T9551] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 259.600125][ T9551] lowmem_reserve[]: 0 0 0 0 [ 259.614949][ T9555] netlink: zone id is out of range [ 259.616663][ T9555] netlink: zone id is out of range [ 259.674957][ T9551] 0 [ 259.684831][ T9555] netlink: zone id is out of range [ 259.691463][ T9556] tipc: Enabled bearer , priority 0 [ 259.697650][ T9555] netlink: zone id is out of range [ 259.703559][ T9556] syzkaller0: entered promiscuous mode [ 259.710287][ T9555] netlink: zone id is out of range [ 259.982094][ T9551] [ 259.984539][ T9551] Node 1 Normal free:3891084kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21280kB local_pcp:10240kB free_cma:0kB [ 260.022425][ T9551] lowmem_reserve[]: 0 0 0 0 0 [ 260.027842][ T9551] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 260.048164][ T9551] Node 0 DMA32: 1818*4kB (UME) 943*8kB (UME) 255*16kB (UME) 2363*32kB (UM) 1142*64kB (UME) 481*128kB (UM) 172*256kB (UME) 57*512kB (UME) 22*1024kB (UM) 13*2048kB (UME) 255*4096kB (UM) = 1396016kB [ 260.076908][ T9551] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 260.077579][ T9556] syzkaller0: entered allmulticast mode [ 260.089599][ T9555] netlink: zone id is out of range [ 260.100376][ T9555] netlink: zone id is out of range [ 260.105728][ T9551] Node 1 Normal: 185*4kB (UE) 59*8kB (UME) 51*16kB (UME) 59*32kB (UME) 25*64kB (UME) 8*128kB (UME) 2*256kB (M) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (UM) = 3891084kB [ 260.124124][ T9555] netlink: zone id is out of range [ 260.141778][ T9560] tipc: Resetting bearer [ 260.143002][ T9551] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 260.157263][ T9551] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 260.166651][ T9551] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 260.176362][ T9551] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 260.185768][ T9551] 43700 total pagecache pages [ 260.190462][ T9551] 0 pages in swap cache [ 260.238478][ T9551] Free swap = 124996kB [ 260.250047][ T9551] Total swap = 124996kB [ 260.254780][ T9551] 2097051 pages RAM [ 260.259911][ T9551] 0 pages HighMem/MovableOnly [ 260.317022][ T9551] 424543 pages reserved [ 260.331080][ T9551] 0 pages cma reserved [ 260.349042][ T9560] tipc: Resetting bearer [ 260.360879][ T9574] netlink: 'syz.0.1065': attribute type 10 has an invalid length. [ 260.419012][ T9560] tipc: Disabling bearer [ 260.426423][ T9576] netlink: 'syz.4.1064': attribute type 1 has an invalid length. [ 260.443082][ T9576] netlink: 'syz.4.1064': attribute type 1 has an invalid length. [ 260.546983][ T9576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1064'. [ 260.691092][ T9590] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1070'. [ 260.712189][ T9588] geneve2: entered promiscuous mode [ 260.720170][ T9588] geneve2: entered allmulticast mode [ 260.735572][ T1153] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 260.739458][ T9594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1071'. [ 260.744825][ T1153] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 260.785510][ T1153] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 260.817334][ T1153] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 260.849280][ T9601] dvmrp0: entered allmulticast mode [ 260.916480][ T9594] dvmrp0: left allmulticast mode [ 261.410264][ T9631] bond4: entered promiscuous mode [ 261.425608][ T9631] bond4: entered allmulticast mode [ 261.431745][ T9631] 8021q: adding VLAN 0 to HW filter on device bond4 [ 261.677375][ T9651] __nla_validate_parse: 1 callbacks suppressed [ 261.677394][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1085'. [ 261.702495][ T9650] netlink: 512 bytes leftover after parsing attributes in process `syz.3.1087'. [ 261.840298][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1089'. [ 261.851050][ T9657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1089'. [ 261.888706][ T9662] tipc: Started in network mode [ 261.894238][ T9662] tipc: Node identity 1245ac3e013, cluster identity 4711 [ 261.901628][ T9662] tipc: Enabled bearer , priority 0 [ 261.931851][ T5892] IPVS: starting estimator thread 0... [ 261.956637][ T9662] syzkaller0: entered promiscuous mode [ 261.962536][ T9662] syzkaller0: entered allmulticast mode [ 261.987532][ T9662] tipc: Resetting bearer [ 262.040077][ T9665] IPVS: using max 32 ests per chain, 76800 per kthread [ 262.129921][ T9661] tipc: Resetting bearer [ 262.258132][ T9677] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1093'. [ 262.497916][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1095'. [ 262.972902][ T5826] tipc: Node number set to 326478910 [ 263.465270][ T9661] tipc: Disabling bearer [ 263.712261][ T9701] tipc: Enabling of bearer rejected, failed to enable media [ 264.506134][ T9725] syzkaller0: entered promiscuous mode [ 264.511797][ T9725] syzkaller0: entered allmulticast mode [ 264.775119][ T9743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1108'. [ 265.019426][ T9761] netlink: 'syz.0.1112': attribute type 1 has an invalid length. [ 265.120395][ T9768] net_ratelimit: 16 callbacks suppressed [ 265.120414][ T9768] openvswitch: netlink: Flow actions attr not present in new flow. [ 265.248349][ T9775] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1112'. [ 265.292323][ T9765] 8021q: adding VLAN 0 to HW filter on device bond6 [ 265.301504][ T9765] bond5: (slave bond6): making interface the new active one [ 265.309548][ T9765] bond5: (slave bond6): Enslaving as an active interface with an up link [ 265.409784][ T9761] bond5: (slave gretap2): Enslaving as a backup interface with an up link [ 265.481326][ T9777] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1114'. [ 265.511900][ T9775] 8021q: adding VLAN 0 to HW filter on device bond5 [ 265.601723][ T9793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.745565][ T9810] netlink: 1260 bytes leftover after parsing attributes in process `syz.0.1126'. [ 265.820335][ T9814] openvswitch: netlink: Flow actions attr not present in new flow. [ 265.978332][ T9820] smc: removing ib device syz1 [ 266.691660][ T9852] __nla_validate_parse: 3 callbacks suppressed [ 266.691678][ T9852] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1136'. [ 266.835369][ T9852] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1136'. [ 266.856188][ T9850] netlink: 'syz.3.1136': attribute type 3 has an invalid length. [ 266.976748][ T9857] openvswitch: netlink: Flow key attr not present in new flow. [ 267.214096][ T9865] netlink: 'syz.4.1140': attribute type 9 has an invalid length. [ 267.224540][ T9865] netlink: 'syz.4.1140': attribute type 7 has an invalid length. [ 267.232304][ T9865] netlink: 'syz.4.1140': attribute type 8 has an invalid length. [ 267.245404][ T9869] netlink: 'syz.1.1142': attribute type 1 has an invalid length. [ 267.405146][ T9869] 8021q: adding VLAN 0 to HW filter on device bond7 [ 267.410076][ T9874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1144'. [ 267.575732][ T9871] veth5: entered promiscuous mode [ 267.653056][ T9887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1146'. [ 267.914298][ T9900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1150'. [ 267.948959][ T9903] veth1_to_bridge: entered allmulticast mode [ 268.010685][ T8914] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.034378][ T9905] macvlan0: entered promiscuous mode [ 268.041472][ T9905] batadv0: entered promiscuous mode [ 268.049111][ T9905] hsr1: entered allmulticast mode [ 268.056199][ T9905] macvlan0: entered allmulticast mode [ 268.062221][ T9905] veth1_vlan: entered allmulticast mode [ 268.067126][ T9903] netlink: 'syz.2.1151': attribute type 1 has an invalid length. [ 268.068943][ T9905] batadv0: entered allmulticast mode [ 268.085782][ T9905] macvlan0: left promiscuous mode [ 268.094257][ T9905] batadv0: left promiscuous mode [ 268.187484][ T9915] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1154'. [ 268.428842][ T9925] wlan1 speed is unknown, defaulting to 1000 [ 268.810305][ T9947] syzkaller1: entered promiscuous mode [ 268.823569][ T9947] syzkaller1: entered allmulticast mode [ 269.025886][ T9961] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1169'. [ 269.310909][ T9975] netlink: 'syz.1.1174': attribute type 3 has an invalid length. [ 269.347694][ T9977] sctp: [Deprecated]: syz.0.1175 (pid 9977) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.347694][ T9977] Use struct sctp_sack_info instead [ 269.367029][ T9975] netlink: 'syz.1.1174': attribute type 1 has an invalid length. [ 269.779346][T10008] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1182'. [ 269.988484][T10020] netlink: 'syz.1.1185': attribute type 1 has an invalid length. [ 269.998112][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1185'. [ 270.114580][T10023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1186'. [ 270.635963][T10054] veth1_vlan: left allmulticast mode [ 270.686910][T10054] netlink: 'syz.2.1197': attribute type 2 has an invalid length. [ 271.249159][T10102] bridge_slave_1: left allmulticast mode [ 271.255740][T10102] bridge_slave_1: left promiscuous mode [ 271.261569][T10102] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.291182][T10102] bridge_slave_0: left allmulticast mode [ 271.297727][T10102] bridge_slave_0: left promiscuous mode [ 271.310550][T10102] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.331297][T10111] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20000 [ 271.522513][T10119] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 271.628997][T10119] 8021q: VLANs not supported on ip_vti0 [ 271.894950][T10154] __nla_validate_parse: 11 callbacks suppressed [ 271.894969][T10154] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1224'. [ 271.912820][T10154] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1224'. [ 271.968480][T10156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1226'. [ 272.016283][T10156] bond8: invalid ARP target 0.0.0.0 specified for addition [ 272.025251][T10156] bond8: option arp_ip_target: invalid value (0) [ 272.045014][T10156] bond8 (unregistering): Released all slaves [ 272.219827][T10170] syz.2.1229 (10170) used obsolete PPPIOCDETACH ioctl [ 272.269207][T10171] tipc: Enabled bearer , priority 0 [ 272.301551][T10174] dvmrp1: entered allmulticast mode [ 272.325246][T10171] tipc: Resetting bearer [ 272.333576][T10168] tipc: Disabling bearer [ 272.609981][T10186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1235'. [ 272.983393][T10206] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1241'. [ 273.206616][T10232] tipc: Started in network mode [ 273.211668][T10232] tipc: Node identity fa5dd4ee6908, cluster identity 4711 [ 273.219247][T10232] tipc: Enabled bearer , priority 0 [ 273.228554][T10231] netlink: 'syz.2.1244': attribute type 1 has an invalid length. [ 273.229517][T10232] syzkaller0: entered promiscuous mode [ 273.238306][T10231] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1244'. [ 273.249415][T10232] syzkaller0: entered allmulticast mode [ 273.259662][T10236] netlink: 'syz.2.1244': attribute type 1 has an invalid length. [ 273.274437][T10231] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1244'. [ 273.286315][T10236] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1244'. [ 273.288329][T10218] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_rx_wq": -EINTR [ 273.303334][T10226] tipc: Enabling of bearer rejected, already enabled [ 273.357786][T10226] tipc: Resetting bearer [ 273.446586][T10226] tipc: Disabling bearer [ 273.621889][T10255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.640657][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1250'. [ 273.664324][T10255] netlink: 'syz.4.1249': attribute type 1 has an invalid length. [ 273.700137][T10255] bond5: entered promiscuous mode [ 273.707243][T10255] 8021q: adding VLAN 0 to HW filter on device bond5 [ 273.743795][T10266] xt_CT: You must specify a L4 protocol and not use inversions on it [ 273.802466][T10268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1253'. [ 273.829315][T10255] 8021q: adding VLAN 0 to HW filter on device bond6 [ 273.838616][T10255] bond5: (slave bond6): making interface the new active one [ 273.844011][T10268] netlink: 'syz.0.1253': attribute type 11 has an invalid length. [ 273.846090][T10255] bond6: entered promiscuous mode [ 273.860724][T10255] bond5: (slave bond6): Enslaving as an active interface with an up link [ 274.080397][T10286] netlink: 'syz.3.1260': attribute type 4 has an invalid length. [ 274.527787][T10321] netlink: 'syz.2.1268': attribute type 83 has an invalid length. [ 274.627610][T10321] syzkaller0: entered promiscuous mode [ 274.634333][T10321] syzkaller0: entered allmulticast mode [ 276.110629][T10347] sctp: [Deprecated]: syz.1.1277 (pid 10347) Use of int in maxseg socket option. [ 276.110629][T10347] Use struct sctp_assoc_value instead [ 276.175183][T10359] netlink: 'syz.2.1281': attribute type 1 has an invalid length. [ 276.485297][T10379] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 276.608279][T10396] syzkaller1: entered allmulticast mode [ 276.676617][T10398] netlink: 'syz.0.1286': attribute type 1 has an invalid length. [ 276.723691][T10398] gretap3: entered promiscuous mode [ 277.081190][T10421] netlink: 'syz.4.1293': attribute type 10 has an invalid length. [ 277.136948][T10427] __nla_validate_parse: 6 callbacks suppressed [ 277.136967][T10427] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1293'. [ 277.137711][T10421] bond0: (slave wg0): refused to change device type [ 277.167268][T10425] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1292'. [ 277.217500][T10425] erspan0: entered promiscuous mode [ 277.260478][T10433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1294'. [ 277.272561][T10433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1294'. [ 277.450327][T10452] IPv6: sit2: Disabled Multicast RS [ 277.462226][T10452] sit2: entered allmulticast mode [ 277.576913][T10462] netlink: 'syz.1.1306': attribute type 1 has an invalid length. [ 277.611755][T10462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1306'. [ 277.656886][T10462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1306'. [ 277.680761][T10462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1306'. [ 277.701660][T10467] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 277.711011][T10467] netlink: 'syz.0.1309': attribute type 8 has an invalid length. [ 277.730347][T10462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1306'. [ 277.749533][T10462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1306'. [ 277.768189][T10474] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 277.853109][T10474] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 277.873520][T10474] gretap2: entered promiscuous mode [ 277.890420][T10474] gretap2: entered allmulticast mode [ 278.029994][T10484] wlan1 speed is unknown, defaulting to 1000 [ 278.265810][T10506] bond8: option min_links: invalid value (18446744073709551614) [ 278.279398][T10506] bond8: option min_links: allowed values 0 - 2147483647 [ 278.301169][T10506] bond8 (unregistering): Released all slaves [ 278.584714][T10522] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1319'. [ 278.670048][T10530] tipc: Enabled bearer , priority 0 [ 278.694761][T10530] syzkaller0: entered promiscuous mode [ 278.700263][T10530] syzkaller0: entered allmulticast mode [ 278.727934][T10530] tipc: Resetting bearer [ 278.766802][T10528] tipc: Resetting bearer [ 278.858204][T10528] tipc: Disabling bearer [ 278.991414][T10546] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:21 [ 279.024660][T10550] netlink: 'syz.1.1330': attribute type 12 has an invalid length. [ 279.215428][T10558] pim6reg1: entered promiscuous mode [ 279.220955][T10558] pim6reg1: entered allmulticast mode [ 279.572380][T10585] sctp: [Deprecated]: syz.3.1341 (pid 10585) Use of struct sctp_assoc_value in delayed_ack socket option. [ 279.572380][T10585] Use struct sctp_sack_info instead [ 282.044967][T10667] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 282.203721][T10693] openvswitch: netlink: Missing key (keys=40, expected=100) [ 282.220167][T10689] __nla_validate_parse: 11 callbacks suppressed [ 282.220187][T10689] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1366'. [ 282.249715][T10694] openvswitch: netlink: Missing key (keys=40, expected=100) [ 282.319407][T10703] netlink: 'syz.4.1369': attribute type 13 has an invalid length. [ 282.334454][T10698] netlink: 'syz.4.1369': attribute type 13 has an invalid length. [ 282.459083][T10714] netlink: 'syz.0.1372': attribute type 10 has an invalid length. [ 282.584213][T10698] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.606508][T10703] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.631203][T10714] veth0_vlan: entered allmulticast mode [ 282.669354][T10714] veth0_vlan: left promiscuous mode [ 282.678932][T10714] veth0_vlan: entered promiscuous mode [ 282.691060][T10714] team0: Device veth0_vlan failed to register rx_handler [ 282.722111][T10720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1375'. [ 282.732818][T10720] netlink: 'syz.1.1375': attribute type 30 has an invalid length. [ 282.792121][ T2914] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.812339][ T2914] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.828712][ T2914] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.866785][ T2914] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.946460][T10733] syzkaller0: entered promiscuous mode [ 282.951982][T10733] syzkaller0: entered allmulticast mode [ 282.963665][T10728] tipc: Enabled bearer , priority 0 [ 283.133999][T10735] tipc: Resetting bearer [ 283.174657][T10735] tipc: Disabling bearer [ 283.218202][T10749] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1386'. [ 283.320790][T10760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1390'. [ 283.327255][T10753] batman_adv: batadv0: Adding interface: netdevsim0 [ 283.346706][T10753] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.392696][T10753] batman_adv: batadv0: Interface activated: netdevsim0 [ 283.452038][T10769] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1391'. [ 283.579415][T10767] syzkaller0: entered promiscuous mode [ 283.585179][T10767] syzkaller0: entered allmulticast mode [ 283.596903][T10778] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1393'. [ 283.675474][T10783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.687619][T10782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.896424][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1398'. [ 284.909601][T10790] netlink: 'syz.4.1398': attribute type 1 has an invalid length. [ 285.112830][T10802] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 285.152128][T10805] tipc: Enabled bearer , priority 0 [ 285.175842][T10805] syzkaller0: entered promiscuous mode [ 285.181357][T10805] syzkaller0: entered allmulticast mode [ 285.277973][T10805] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1403'. [ 285.370692][T10805] tipc: Resetting bearer [ 285.399065][T10803] tipc: Resetting bearer [ 285.414393][T10822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1408'. [ 285.456660][T10803] tipc: Disabling bearer [ 285.554291][T10834] bridge: RTM_NEWNEIGH with invalid ether address [ 285.662497][T10846] netlink: 'syz.2.1415': attribute type 1 has an invalid length. [ 285.686447][T10841] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1414'. [ 285.984957][T10855] syz.2.1418 (10855) used greatest stack depth: 17976 bytes left [ 286.031801][T10860] syz.2.1418 (10860) used greatest stack depth: 17832 bytes left [ 286.092151][T10868] netlink: 'syz.1.1423': attribute type 1 has an invalid length. [ 286.114352][ T30] audit: type=1107 audit(1760230147.798:2): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='È1Ô™¿Øy±Í0UÝ [ 286.114352][ T30] 0¯ÚGãóGx÷cˆâXÏFÁJÓ›…¡ßωv‰â#:ò"Ãy8^6Áh¨9ȃ-à<9ˆÏ€CEÚ_%Àå¾ÎÌœl«Õ¦;±WíJtC—>Ð,õU+ù"‹%G×»@’F†ñR›óÍhÀø' [ 286.264601][T10880] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 286.574510][T10896] netlink: 'syz.0.1430': attribute type 6 has an invalid length. [ 286.598209][T10897] netlink: 'syz.0.1430': attribute type 6 has an invalid length. [ 286.616595][T10896] netlink: 'syz.0.1430': attribute type 6 has an invalid length. [ 286.850308][T10910] bond0: Error: Cannot enslave bond to itself. [ 287.185219][T10930] ieee802154 phy0 wpan0: encryption failed: -22 [ 287.345415][T10943] __nla_validate_parse: 40 callbacks suppressed [ 287.345433][T10943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1441'. [ 287.634237][T10958] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1448'. [ 287.645405][T10958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1448'. [ 287.742087][T10960] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1449'. [ 287.754905][T10960] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1449'. [ 287.907828][T10977] netlink: 14448 bytes leftover after parsing attributes in process `syz.4.1450'. [ 288.449775][T11009] tipc: Enabled bearer , priority 0 [ 288.458415][T11009] syzkaller0: entered promiscuous mode [ 288.464436][T11009] syzkaller0: entered allmulticast mode [ 288.475729][T11009] netlink: 'syz.3.1458': attribute type 4 has an invalid length. [ 288.483903][T11009] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1458'. [ 288.497252][T11009] `: renamed from bond0 [ 288.567636][T11003] tipc: Resetting bearer [ 288.605702][T11003] tipc: Disabling bearer [ 288.817635][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880569fbc00: rx timeout, send abort [ 288.826580][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880569fbc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 289.015547][T11041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1470'. [ 289.141316][T11051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1472'. [ 289.216402][T11056] netlink: 'syz.0.1473': attribute type 2 has an invalid length. [ 289.286064][T11056] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1473'. [ 289.458539][T11077] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 289.501776][T11077] netlink: 'syz.1.1478': attribute type 10 has an invalid length. [ 289.518808][T11083] IPv6: NLM_F_CREATE should be specified when creating new route [ 289.523420][T11077] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 289.555243][T11085] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 289.567881][T11083] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 289.575212][T11083] IPv6: NLM_F_CREATE should be set when creating new route [ 289.582542][T11083] IPv6: NLM_F_CREATE should be set when creating new route [ 289.784309][ T36] syzkaller0: tun_net_xmit 76 [ 289.789569][ T36] syzkaller0: tun_net_xmit 48 [ 289.813014][ T9984] syzkaller0: tun_net_xmit 76 [ 289.893495][ T5892] syzkaller0: tun_net_xmit 76 [ 289.893849][T11107] gtp0: entered promiscuous mode [ 289.910890][T11107] gtp0: entered allmulticast mode [ 291.446786][T11113] netlink: 'syz.4.1488': attribute type 4 has an invalid length. [ 291.658647][T11135] netlink: 'syz.0.1496': attribute type 4 has an invalid length. [ 291.828254][T11149] syzkaller0: entered promiscuous mode [ 291.841341][T11149] syzkaller0: entered allmulticast mode [ 291.851537][T11149] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 291.982446][T11152] syzkaller0: entered promiscuous mode [ 291.999561][T11152] syzkaller0: entered allmulticast mode [ 292.047316][T11161] wg1: entered promiscuous mode [ 292.059039][T11161] wg1: entered allmulticast mode [ 292.162517][T11172] block nbd0: not configured, cannot reconfigure [ 292.320182][T11182] netlink: 'syz.0.1510': attribute type 1 has an invalid length. [ 292.376146][T11186] __nla_validate_parse: 9 callbacks suppressed [ 292.376163][T11186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1511'. [ 292.522773][T11195] tipc: Enabled bearer , priority 0 [ 292.549043][T11195] syzkaller0: entered promiscuous mode [ 292.570235][T11195] syzkaller0: entered allmulticast mode [ 292.627714][T11205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1516'. [ 292.653980][T11188] tipc: Resetting bearer [ 292.659804][T11205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1516'. [ 292.704813][T11187] tipc: Resetting bearer [ 292.721472][T11205] xt_ecn: cannot match TCP bits for non-tcp packets [ 292.814698][T11187] tipc: Disabling bearer [ 292.900987][T11216] sctp: [Deprecated]: syz.0.1514 (pid 11216) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.900987][T11216] Use struct sctp_sack_info instead [ 292.973155][T11221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1520'. [ 293.138821][T11228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1522'. [ 293.259172][T11240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1528'. [ 293.365260][T11246] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1528'. [ 293.418440][T11245] tipc: Started in network mode [ 293.437411][T11245] tipc: Node identity 568914000796, cluster identity 4711 [ 293.458781][T11245] tipc: Enabled bearer , priority 0 [ 293.470711][T11245] syzkaller0: entered promiscuous mode [ 293.480123][T11245] syzkaller0: entered allmulticast mode [ 293.499232][T11244] tipc: Resetting bearer [ 293.544212][T11244] tipc: Disabling bearer [ 293.767340][T11269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1534'. [ 293.824003][T11271] netlink: 'syz.2.1535': attribute type 8 has an invalid length. [ 294.028568][T11288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1538'. [ 294.636047][T11318] tipc: Enabled bearer , priority 0 [ 294.662057][T11318] syzkaller0: entered promiscuous mode [ 294.672449][T11318] syzkaller0: entered allmulticast mode [ 294.773476][T11318] tipc: Resetting bearer [ 294.786259][ T5838] block nbd0: Receive control failed (result -32) [ 294.845142][T11318] tipc: Disabling bearer [ 294.950660][T11338] bridge0: port 1(ipvlan2) entered blocking state [ 294.962506][T11338] bridge0: port 1(ipvlan2) entered disabled state [ 294.974073][T11338] ipvlan2: entered allmulticast mode [ 294.979580][T11338] bridge0: entered allmulticast mode [ 294.987740][T11338] ipvlan2: left allmulticast mode [ 294.993034][T11338] bridge0: left allmulticast mode [ 295.020799][T11341] pim6reg: entered allmulticast mode [ 295.096284][T11344] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1555'. [ 295.225766][T11350] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 295.428616][T11366] nbd: nbd0 already in use [ 295.732176][T11392] openvswitch: netlink: Flow actions attr not present in new flow. [ 295.942450][T11403] xt_TPROXY: Can be used only with -p tcp or -p udp [ 295.949504][T11405] team0: left allmulticast mode [ 295.949527][T11405] team_slave_0: left allmulticast mode [ 295.949542][T11405] team_slave_1: left allmulticast mode [ 295.968041][T11405] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.984986][T11405] team0: Cannot enslave team device to itself [ 296.160949][T11416] tipc: Enabling of bearer rejected, failed to enable media [ 296.230728][T11419] bridge0: port 2(batadv1) entered blocking state [ 296.240888][T11419] bridge0: port 2(batadv1) entered disabled state [ 296.249415][T11419] batadv1: entered allmulticast mode [ 296.263815][T11419] batadv1: entered promiscuous mode [ 296.384437][T11430] netlink: 'syz.2.1580': attribute type 6 has an invalid length. [ 296.724319][ T1153] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 296.734010][ T1153] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 296.996052][T11469] syzkaller1: entered promiscuous mode [ 297.022783][T11469] syzkaller1: entered allmulticast mode [ 297.036824][T11476] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 297.153664][ T30] audit: type=1800 audit(1760230158.838:3): pid=11487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1598" name="memory.events" dev="tmpfs" ino=1579 res=0 errno=0 [ 297.250934][ T30] audit: type=1804 audit(1760230158.878:4): pid=11487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1598" name="/newroot/307/memory.events" dev="tmpfs" ino=1579 res=1 errno=0 [ 297.333804][T11491] netlink: 'syz.0.1599': attribute type 1 has an invalid length. [ 297.342935][T11493] netlink: 'syz.1.1600': attribute type 1 has an invalid length. [ 297.364537][T11498] netlink: 'syz.4.1602': attribute type 1 has an invalid length. [ 297.419714][T11502] __nla_validate_parse: 18 callbacks suppressed [ 297.419733][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1600'. [ 297.436562][T11493] 8021q: adding VLAN 0 to HW filter on device bond8 [ 297.486690][T11505] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 297.653596][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1606'. [ 297.665329][T11518] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1606'. [ 297.738443][T11507] team0 (unregistering): Port device team_slave_0 removed [ 297.750914][T11507] team0 (unregistering): Port device team_slave_1 removed [ 297.822088][T11518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1606'. [ 297.896598][T11518] bond2: Invalid ad_actor_system MAC address. [ 297.915296][T11518] bond2: option ad_actor_system: invalid value (1) [ 297.948484][T11518] bond2 (unregistering): Released all slaves [ 298.017848][T11535] syzkaller0: entered promiscuous mode [ 298.028219][T11535] syzkaller0: entered allmulticast mode [ 298.042480][T11541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1612'. [ 298.214497][T11552] netlink: 'syz.2.1614': attribute type 4 has an invalid length. [ 298.411873][T11567] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 298.428386][T11568] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 298.484259][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1620'. [ 298.509888][T11555] wg2: left allmulticast mode [ 298.694983][T11555] bond1: left allmulticast mode [ 298.701273][T11555] ip6erspan0: left allmulticast mode [ 298.708959][T11555] veth3: left allmulticast mode [ 298.716499][T11555] gretap1: left allmulticast mode [ 298.727553][T11555] veth5: left allmulticast mode [ 298.734436][T11555] veth7: left promiscuous mode [ 298.741877][T11555] bond5: left promiscuous mode [ 298.746725][T11555] bond6: left promiscuous mode [ 298.839166][ T2914] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.863126][ T2914] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.881976][ T2914] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.923448][ T2914] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.952271][ T2914] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.971291][ T2914] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.017447][ T2914] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.027044][ T2914] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.066874][T11590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1626'. [ 299.323407][T11608] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1631'. [ 299.499483][T11620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1633'. [ 299.513213][T11620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1633'. [ 299.578202][T11622] tipc: Enabled bearer , priority 0 [ 299.620366][T11622] syzkaller0: entered promiscuous mode [ 299.632497][T11622] syzkaller0: entered allmulticast mode [ 299.670422][T11618] tipc: Resetting bearer [ 299.683394][T11617] tipc: Resetting bearer [ 299.732373][T11617] tipc: Disabling bearer [ 299.831021][T11640] x_tables: duplicate underflow at hook 2 [ 299.893651][T11638] x_tables: duplicate underflow at hook 2 [ 300.186744][T11660] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 300.203831][T11658] netlink: 'syz.2.1643': attribute type 13 has an invalid length. [ 300.213195][T11658] veth0_macvtap: left promiscuous mode [ 300.222305][T11658] macvtap0: entered allmulticast mode [ 300.258767][T11658] macvtap0: refused to change device tx_queue_len [ 300.443986][ T5838] Bluetooth: hci0: command tx timeout [ 300.452757][T11679] gretap0: entered promiscuous mode [ 300.479643][T11679] 0ªî{X¹¦: renamed from gretap0 [ 300.504253][T11679] 0ªî{X¹¦: left promiscuous mode [ 300.510421][T11679] 0ªî{X¹¦: entered allmulticast mode [ 300.520401][T11679] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 300.737721][T11695] Cannot find del_set index 3 as target [ 300.816982][T11705] tipc: Enabling of bearer rejected, failed to enable media [ 301.303828][T11741] netlink: 'syz.1.1672': attribute type 8 has an invalid length. [ 301.627375][T11745] bond0 (unregistering): Released all slaves [ 301.713890][T11761] netlink: 'syz.0.1676': attribute type 1 has an invalid length. [ 302.505299][T11779] __nla_validate_parse: 9 callbacks suppressed [ 302.505319][T11779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1681'. [ 303.019423][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1689'. [ 303.085857][T11810] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1690'. [ 303.320204][T11824] netlink: 'syz.2.1694': attribute type 1 has an invalid length. [ 303.480871][T11835] netlink: 'syz.1.1699': attribute type 30 has an invalid length. [ 303.515694][T11835] bond9: option arp_missed_max: invalid value (0) [ 303.522330][T11835] bond9: option arp_missed_max: allowed values 1 - 255 [ 303.538836][T11843] netlink: 'syz.1.1699': attribute type 30 has an invalid length. [ 303.540944][T11835] bond9 (unregistering): Released all slaves [ 303.588157][T11843] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 303.721343][T11855] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1703'. [ 303.769345][T11860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1704'. [ 304.343069][T11891] netlink: 'syz.3.1708': attribute type 3 has an invalid length. [ 304.459337][T11897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1710'. [ 304.536138][T11903] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 304.768990][T11920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1716'. [ 304.792758][T11920] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1716'. [ 305.004320][T11959] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1718'. [ 305.053982][T11959] netlink: 'syz.0.1718': attribute type 3 has an invalid length. [ 305.441649][T11991] bond0: entered promiscuous mode [ 305.447023][T11991] bond0: entered allmulticast mode [ 305.458207][T11991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.031069][T12032] netlink: 'syz.1.1737': attribute type 1 has an invalid length. [ 306.074015][T12032] bond9: (slave gretap2): making interface the new active one [ 306.082594][T12032] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 306.156829][T12036] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1738'. [ 306.247840][T12047] netlink: 'syz.2.1741': attribute type 1 has an invalid length. [ 306.340097][T12049] sctp: [Deprecated]: syz.0.1742 (pid 12049) Use of struct sctp_assoc_value in delayed_ack socket option. [ 306.340097][T12049] Use struct sctp_sack_info instead [ 306.364290][T12047] 8021q: adding VLAN 0 to HW filter on device bond2 [ 306.606544][T11927] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.621922][T11927] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.672383][T11927] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.702808][T11927] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.018021][T12100] netlink: 'syz.2.1756': attribute type 10 has an invalid length. [ 307.065113][T12100] wlan1: mtu less than device minimum [ 307.069857][T12111] netlink: 'syz.2.1756': attribute type 5 has an invalid length. [ 307.082292][T12100] `: (slave wlan1): Error -22 calling dev_set_mtu [ 307.170457][T12115] gtp0: entered promiscuous mode [ 307.193674][T12115] gtp0: entered allmulticast mode [ 307.248695][T12123] netlink: 'syz.2.1763': attribute type 1 has an invalid length. [ 307.366097][T12129] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 307.377585][T12129] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 307.447246][T12123] gretap3: entered promiscuous mode [ 307.474085][T12133] macvlan2: entered promiscuous mode [ 307.479548][T12133] macvlan2: entered allmulticast mode [ 307.486347][T12133] bond3: entered promiscuous mode [ 307.493025][T12133] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 307.505530][T12133] bond3: left promiscuous mode [ 307.610995][T12132] sit0: entered promiscuous mode [ 307.617869][T12132] netlink: 'syz.1.1766': attribute type 1 has an invalid length. [ 307.627714][T12132] __nla_validate_parse: 11 callbacks suppressed [ 307.627735][T12132] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1766'. [ 307.857452][T12161] netlink: 'syz.0.1770': attribute type 11 has an invalid length. [ 307.873082][T12161] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1770'. [ 307.937931][T12166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1774'. [ 307.955802][T12166] netlink: 'syz.2.1774': attribute type 9 has an invalid length. [ 307.969531][T12162] syzkaller0: entered promiscuous mode [ 307.982844][T12162] syzkaller0: entered allmulticast mode [ 308.024162][T12158] tipc: Enabled bearer , priority 0 [ 308.032319][T12158] netlink: 'syz.1.1772': attribute type 1 has an invalid length. [ 308.080358][T12158] bond10 (unregistering): Released all slaves [ 308.175428][T12157] tipc: Resetting bearer [ 308.179014][T12180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1779'. [ 308.183411][T12183] netlink: 'syz.4.1778': attribute type 1 has an invalid length. [ 308.256371][T12191] netlink: 'syz.3.1777': attribute type 2 has an invalid length. [ 308.549014][T12205] netlink: zone id is out of range [ 308.555273][T12205] netlink: zone id is out of range [ 309.033703][ T5892] tipc: Node number set to 4224830157 [ 309.583808][T12157] tipc: Disabling bearer [ 309.593611][T12180] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 309.790001][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1785'. [ 309.796399][T12214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1783'. [ 309.825807][T12215] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1784'. [ 309.851695][T12213] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 309.893489][T12213] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1785'. [ 310.039659][T12235] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1790'. [ 310.123423][T12245] sock: sock_set_timeout: `syz.4.1793' (pid 12245) tries to set negative timeout [ 310.338449][T12257] tipc: Enabled bearer , priority 0 [ 310.347059][T12265] syzkaller0: entered promiscuous mode [ 310.352582][T12265] syzkaller0: entered allmulticast mode [ 310.372174][T12256] tipc: Resetting bearer [ 310.407924][T12256] tipc: Disabling bearer [ 310.685060][T12286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1806'. [ 311.167351][T12313] validate_nla: 1 callbacks suppressed [ 311.167373][T12313] netlink: 'syz.0.1811': attribute type 1 has an invalid length. [ 311.537898][T12334] netlink: 'syz.3.1816': attribute type 10 has an invalid length. [ 311.656037][T12345] lo: entered allmulticast mode [ 311.670991][T12345] tunl0: entered allmulticast mode [ 311.690603][T12345] gre0: entered allmulticast mode [ 311.714570][T12345] gretap0: entered allmulticast mode [ 311.736526][T12345] erspan0: entered allmulticast mode [ 311.748778][T12345] ip_vti0: entered allmulticast mode [ 311.768780][T12345] ip6_vti0: entered allmulticast mode [ 311.788263][T12345] sit0: entered allmulticast mode [ 311.822479][T12345] ip6tnl0: entered allmulticast mode [ 311.865720][T12345] ip6gre0: entered allmulticast mode [ 311.901745][T12345] syz_tun: entered allmulticast mode [ 311.925644][T12345] ip6gretap0: entered allmulticast mode [ 311.944150][T12345] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.955542][T12345] bridge0: entered allmulticast mode [ 311.982796][T12345] vcan0: entered allmulticast mode [ 312.015931][T12345] `: entered allmulticast mode [ 312.023662][T12345] !€ÿ: entered allmulticast mode [ 312.031588][T12345] bond_slave_1: entered allmulticast mode [ 312.043857][T12345] team0: entered allmulticast mode [ 312.049027][T12345] team_slave_0: entered allmulticast mode [ 312.055226][T12345] team_slave_1: entered allmulticast mode [ 312.069417][T12345] dummy0: entered allmulticast mode [ 312.088115][T12345] nlmon0: entered allmulticast mode [ 312.099679][T12345] caif0: entered allmulticast mode [ 312.111276][T12345] vxcan0: entered allmulticast mode [ 312.120084][T12345] vxcan1: entered allmulticast mode [ 312.128672][T12345] veth0: entered allmulticast mode [ 312.142337][T12345] veth1: entered allmulticast mode [ 312.160346][T12345] wg0: entered allmulticast mode [ 312.169058][T12345] wg1: left promiscuous mode [ 312.190311][T12345] veth0_to_bridge: entered allmulticast mode [ 312.222069][T12345] veth0_to_bond: entered allmulticast mode [ 312.236153][T12345] veth1_to_bond: entered allmulticast mode [ 312.321846][T12345] veth0_to_team: entered allmulticast mode [ 312.351842][T12345] veth1_to_team: entered allmulticast mode [ 312.366035][T12345] veth0_to_batadv: entered allmulticast mode [ 312.378246][T12345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.387316][T12345] batadv_slave_0: entered allmulticast mode [ 312.400333][T12345] veth1_to_batadv: entered allmulticast mode [ 312.414964][T12345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.425054][T12345] batadv_slave_1: entered allmulticast mode [ 312.455958][T12345] xfrm0: entered allmulticast mode [ 312.463690][T12345] veth0_to_hsr: entered allmulticast mode [ 312.475218][T12345] hsr_slave_0: entered allmulticast mode [ 312.486341][T12345] hsr0: entered allmulticast mode [ 312.496054][T12345] veth1_virt_wifi: entered allmulticast mode [ 312.507067][T12345] veth0_virt_wifi: entered allmulticast mode [ 312.518757][T12345] veth1_vlan: entered allmulticast mode [ 312.533132][T12345] veth0_vlan: entered allmulticast mode [ 312.611851][T12352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.635005][T12345] vlan0: entered allmulticast mode [ 312.642422][T12345] macvlan1: entered allmulticast mode [ 312.651495][T12345] ipvlan0: entered allmulticast mode [ 312.660871][T12345] ipvlan1: entered allmulticast mode [ 312.667707][T12345] veth1_macvtap: entered allmulticast mode [ 312.677981][T12345] veth0_macvtap: entered allmulticast mode [ 312.697396][T12345] macsec0: entered allmulticast mode [ 312.715457][T12345] geneve0: entered allmulticast mode [ 312.727187][T12345] geneve1: entered allmulticast mode [ 312.746001][T12345] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 312.755737][T12345] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 312.770939][T12345] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 312.791032][T12345] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 312.810370][T12345] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 312.824280][T12345] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 312.831738][T12345] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 312.839551][T12345] xfrm1: left promiscuous mode [ 312.849765][T12345] vxlan0: entered allmulticast mode [ 312.858839][T12345] mac80211_hwsim hwsim13 wlan2: entered allmulticast mode [ 312.868897][T12345] gre1: entered allmulticast mode [ 312.878644][T12345] bridge1: entered allmulticast mode [ 312.884240][T12345] mac80211_hwsim hwsim14 wlan3: entered allmulticast mode [ 312.892277][T12345] gretap1: left promiscuous mode [ 312.903444][T12345] bridge2: entered allmulticast mode [ 312.909099][T12345] ip6tnl1: entered allmulticast mode [ 312.923759][T12345] bond0: entered allmulticast mode [ 312.959645][T12345] geneve2: left promiscuous mode [ 312.975138][T12345] ip6gre2: entered allmulticast mode [ 312.980624][T12345] bond1: entered allmulticast mode [ 312.986094][T12345] geneve3: entered allmulticast mode [ 312.992256][T12345] macsec1: entered allmulticast mode [ 313.004073][T12345] gretap2: left promiscuous mode [ 313.010400][T12345] veth2: entered allmulticast mode [ 313.016450][T12345] veth3: entered allmulticast mode [ 313.022539][T12345] gre2: entered allmulticast mode [ 313.030979][T12345] bridge3: entered allmulticast mode [ 313.039950][T12345] veth4: entered allmulticast mode [ 313.045734][T12345] veth5: entered allmulticast mode [ 313.051151][T12345] bridge4: entered allmulticast mode [ 313.057018][T12345] macsec2: entered allmulticast mode [ 313.063334][T12345] bond2: entered allmulticast mode [ 313.069146][T12345] bond3: entered allmulticast mode [ 313.075919][T12345] macvlan2: entered allmulticast mode [ 313.105665][T12357] tipc: Enabled bearer , priority 10 [ 313.133154][T11973] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.142067][T11973] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.172570][T11973] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 313.181687][T11973] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.202742][T11973] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.212768][T12377] __nla_validate_parse: 4 callbacks suppressed [ 313.212785][T12377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1826'. [ 313.241092][T11973] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 313.272798][T11927] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.318096][T11927] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.352272][T11927] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 313.372256][ T8921] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.393704][ T8921] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.405323][ T8921] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 313.440366][T12387] IPv6: syztnl0: Disabled Multicast RS [ 313.455171][T12395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1832'. [ 313.472241][T12395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1832'. [ 313.498397][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1828'. [ 313.638463][T12396] tipc: Enabled bearer , priority 0 [ 313.648214][T12396] syzkaller0: entered promiscuous mode [ 313.684236][T12396] syzkaller0: entered allmulticast mode [ 313.701874][T12396] tipc: Resetting bearer [ 313.715312][T12390] tipc: Resetting bearer [ 313.737157][T12390] tipc: Disabling bearer [ 313.994015][T12426] netlink: 'syz.3.1843': attribute type 27 has an invalid length. [ 314.203567][T12434] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1846'. [ 314.218410][T12443] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1846'. [ 314.237257][ T6058] tipc: Node number set to 2471875822 [ 315.922322][T12453] wlan1 speed is unknown, defaulting to 1000 [ 315.958784][T12477] tipc: Enabled bearer , priority 0 [ 315.983545][T12477] syzkaller0: entered promiscuous mode [ 315.989263][T12477] syzkaller0: entered allmulticast mode [ 316.100409][T12492] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1855'. [ 316.111540][T12477] tipc: Resetting bearer [ 316.128293][T12476] tipc: Resetting bearer [ 316.148203][T12476] tipc: Disabling bearer [ 316.389604][T12506] netlink: 'syz.4.1864': attribute type 1 has an invalid length. [ 316.538864][T12517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1868'. [ 316.566883][T12515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1866'. [ 317.031445][T12554] wg1: entered promiscuous mode [ 317.042561][T12556] syzkaller1: entered promiscuous mode [ 317.051365][T12556] syzkaller1: entered allmulticast mode [ 317.335160][T12572] netlink: 'syz.3.1885': attribute type 3 has an invalid length. [ 317.363644][T12573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1888'. [ 317.377378][T12572] netlink: 'syz.3.1885': attribute type 3 has an invalid length. [ 317.385516][T12572] netlink: 'syz.3.1885': attribute type 3 has an invalid length. [ 317.405862][T12572] netlink: 'syz.3.1885': attribute type 3 has an invalid length. [ 317.406963][T12584] netlink: 'syz.3.1885': attribute type 1 has an invalid length. [ 317.429269][T12572] netlink: 'syz.3.1885': attribute type 3 has an invalid length. [ 317.439358][T12572] netlink: 'syz.3.1885': attribute type 3 has an invalid length. [ 317.447862][T12572] netlink: 'syz.3.1885': attribute type 3 has an invalid length. [ 317.457945][T12572] netlink: 'syz.3.1885': attribute type 3 has an invalid length. [ 317.481911][T12581] tipc: Enabling of bearer rejected, failed to enable media [ 317.684904][T12596] tipc: Enabled bearer , priority 0 [ 317.732150][T12597] syzkaller0: entered promiscuous mode [ 317.756650][T12597] syzkaller0: entered allmulticast mode [ 317.763162][T12605] sctp: [Deprecated]: syz.4.1896 (pid 12605) Use of int in max_burst socket option. [ 317.763162][T12605] Use struct sctp_assoc_value instead [ 317.853280][T12597] tipc: Resetting bearer [ 317.930497][T12597] tipc: Disabling bearer [ 317.947253][T12619] syz.3.1901: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 317.968965][T12619] CPU: 0 UID: 0 PID: 12619 Comm: syz.3.1901 Not tainted syzkaller #0 PREEMPT(full) [ 317.968994][T12619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 317.969006][T12619] Call Trace: [ 317.969015][T12619] [ 317.969024][T12619] dump_stack_lvl+0x189/0x250 [ 317.969053][T12619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.969074][T12619] ? __pfx__printk+0x10/0x10 [ 317.969095][T12619] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 317.969123][T12619] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 317.969152][T12619] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 317.969180][T12619] warn_alloc+0x214/0x310 [ 317.969206][T12619] ? stack_depot_save_flags+0x40/0x860 [ 317.969232][T12619] ? __pfx_warn_alloc+0x10/0x10 [ 317.969261][T12619] ? kasan_save_track+0x3e/0x80 [ 317.969287][T12619] ? __kasan_kmalloc+0x93/0xb0 [ 317.969312][T12619] ? xsk_setsockopt+0x4dc/0x8d0 [ 317.969330][T12619] ? do_sock_setsockopt+0x179/0x1b0 [ 317.969349][T12619] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 317.969368][T12619] ? do_syscall_64+0xfa/0xfa0 [ 317.969390][T12619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.969418][T12619] __vmalloc_node_range_noprof+0x125/0x12d0 [ 317.969472][T12619] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 317.969501][T12619] ? __kasan_kmalloc+0x93/0xb0 [ 317.969533][T12619] vmalloc_user_noprof+0xad/0xf0 [ 317.969561][T12619] ? xskq_create+0xbf/0x170 [ 317.969584][T12619] xskq_create+0xbf/0x170 [ 317.969609][T12619] xsk_init_queue+0xb0/0x110 [ 317.969631][T12619] xsk_setsockopt+0x4dc/0x8d0 [ 317.969655][T12619] ? __pfx_xsk_setsockopt+0x10/0x10 [ 317.969678][T12619] ? __pfx_aa_sk_perm+0x10/0x10 [ 317.969705][T12619] ? aa_sock_opt_perm+0xff/0x1b0 [ 317.969735][T12619] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 317.969754][T12619] ? __pfx_xsk_setsockopt+0x10/0x10 [ 317.969776][T12619] do_sock_setsockopt+0x179/0x1b0 [ 317.969802][T12619] __x64_sys_setsockopt+0x13f/0x1b0 [ 317.969830][T12619] do_syscall_64+0xfa/0xfa0 [ 317.969852][T12619] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.969874][T12619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.969894][T12619] ? clear_bhb_loop+0x60/0xb0 [ 317.969928][T12619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.969948][T12619] RIP: 0033:0x7f1f0db8eec9 [ 317.969966][T12619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.969983][T12619] RSP: 002b:00007f1f0ea65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 317.970004][T12619] RAX: ffffffffffffffda RBX: 00007f1f0dde5fa0 RCX: 00007f1f0db8eec9 [ 317.970018][T12619] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 317.970030][T12619] RBP: 00007f1f0dc11f91 R08: 0000000000000004 R09: 0000000000000000 [ 317.970041][T12619] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.970053][T12619] R13: 00007f1f0dde6038 R14: 00007f1f0dde5fa0 R15: 00007ffe4e08e3e8 [ 317.970086][T12619] [ 317.970133][T12619] Mem-Info: [ 318.258863][T12637] xt_policy: output policy not valid in PREROUTING and INPUT [ 318.281302][T12619] active_anon:3798 inactive_anon:0 isolated_anon:0 [ 318.281302][T12619] active_file:2500 inactive_file:39939 isolated_file:0 [ 318.281302][T12619] unevictable:768 dirty:46 writeback:0 [ 318.281302][T12619] slab_reclaimable:11221 slab_unreclaimable:114863 [ 318.281302][T12619] mapped:29829 shmem:1357 pagetables:984 [ 318.281302][T12619] sec_pagetables:0 bounce:0 [ 318.281302][T12619] kernel_misc_reclaimable:0 [ 318.281302][T12619] free:1310103 free_pcp:15215 free_cma:0 [ 318.331702][T12639] __nla_validate_parse: 4 callbacks suppressed [ 318.331721][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1905'. [ 318.350295][T12619] Node 0 active_anon:15292kB inactive_anon:0kB active_file:10000kB inactive_file:159556kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119316kB dirty:184kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14416kB pagetables:3888kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 318.402478][T12619] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 318.454292][T12619] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 318.492782][T12619] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 318.510074][T12619] Node 0 DMA32 free:1332688kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15392kB inactive_anon:0kB active_file:10000kB inactive_file:159556kB unevictable:1536kB writepending:184kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:40748kB local_pcp:19564kB free_cma:0kB [ 318.568760][T12619] lowmem_reserve[]: 0 0 1 1 1 [ 318.574502][T12619] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 318.604553][T12619] lowmem_reserve[]: 0 0 0 0 0 [ 318.609627][T12619] Node 1 Normal free:3892108kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20824kB local_pcp:10560kB free_cma:0kB [ 318.642296][T12619] lowmem_reserve[]: 0 0 0 0 0 [ 318.647220][T12619] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 318.660190][T12619] Node 0 DMA32: 1844*4kB (UM) 976*8kB (UME) 122*16kB (UME) 1880*32kB (UME) 1288*64kB (UME) 582*128kB (UM) 245*256kB (UM) 79*512kB (UM) 38*1024kB (UM) 5*2048kB (UME) 231*4096kB (UM) = 1332720kB [ 318.686212][T12619] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 318.698277][T12619] Node 1 Normal: 185*4kB (UE) 59*8kB (UME) 51*16kB (UME) 71*32kB (UME) 27*64kB (UME) 8*128kB (UME) 2*256kB (M) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (UM) = 3892108kB [ 318.716663][T12619] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 318.726435][T12619] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 318.785205][T12619] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 318.808469][T12619] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 318.820199][T12619] 43793 total pagecache pages [ 318.832112][T12619] 0 pages in swap cache [ 318.841974][T12657] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1911'. [ 318.858396][T12619] Free swap = 124996kB [ 318.867933][T12619] Total swap = 124996kB [ 318.872125][T12619] 2097051 pages RAM [ 318.886224][T12619] 0 pages HighMem/MovableOnly [ 318.890939][T12619] 424543 pages reserved [ 318.910290][T12619] 0 pages cma reserved [ 318.993019][T12666] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1914'. [ 319.009658][T12668] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1915'. [ 319.147056][T12680] sctp: [Deprecated]: syz.2.1917 (pid 12680) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.147056][T12680] Use struct sctp_sack_info instead [ 319.169095][T12679] sctp: [Deprecated]: syz.2.1917 (pid 12679) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.169095][T12679] Use struct sctp_sack_info instead [ 319.391231][T12693] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1921'. [ 319.420346][T12693] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1921'. [ 319.436496][T12693] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1921'. [ 319.449038][T12693] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1921'. [ 319.679242][T12717] macvlan0: entered promiscuous mode [ 319.689991][T12717] batadv0: entered promiscuous mode [ 319.698038][T12717] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 319.709283][T12717] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 319.721338][T12717] hsr1: entered allmulticast mode [ 319.727832][T12717] macvlan0: left promiscuous mode [ 319.735051][T12717] batadv0: left promiscuous mode [ 319.812307][T12721] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 319.888163][T12724] bond0: entered promiscuous mode [ 319.896852][T12724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.924154][T12727] bond0: (slave bridge0): making interface the new active one [ 319.931866][T12727] bridge0: entered promiscuous mode [ 319.938322][T12727] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 320.240628][T12757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1940'. [ 320.302660][T12763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1942'. [ 322.668816][T12833] validate_nla: 48 callbacks suppressed [ 322.668835][T12833] netlink: 'syz.4.1966': attribute type 1 has an invalid length. [ 323.137018][ T5838] block nbd1: Receive control failed (result -32) [ 323.580114][T12893] __nla_validate_parse: 15 callbacks suppressed [ 323.580135][T12893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1988'. [ 324.064863][T12914] netlink: 'syz.3.1990': attribute type 9 has an invalid length. [ 324.109368][T12927] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 324.340065][T12944] netlink: 'syz.4.2001': attribute type 10 has an invalid length. [ 324.467365][T12951] netlink: 'syz.4.2001': attribute type 1 has an invalid length. [ 324.483865][T12951] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2001'. [ 324.498257][T12951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2001'. [ 324.515009][T12950] netlink: 'syz.0.2003': attribute type 11 has an invalid length. [ 324.524062][T12950] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2003'. [ 324.686813][T12954] netlink: 'syz.1.2004': attribute type 1 has an invalid length. [ 324.809587][T12960] 8021q: adding VLAN 0 to HW filter on device bond11 [ 324.818409][T12960] bond10: (slave bond11): making interface the new active one [ 324.828068][T12960] bond10: (slave bond11): Enslaving as an active interface with an up link [ 324.844661][T12954] bond10: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 324.877544][T12954] bond10: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 324.906411][T12971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2008'. [ 324.931599][T12971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2008'. [ 325.079660][T12982] sock: sock_set_timeout: `syz.3.2012' (pid 12982) tries to set negative timeout [ 325.103567][T12982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2012'. [ 325.127411][T12982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2012'. [ 325.990572][T12998] tipc: Enabled bearer , priority 0 [ 326.014076][T12998] syzkaller0: entered promiscuous mode [ 326.025315][T12998] syzkaller0: entered allmulticast mode [ 326.032185][T12994] netlink: 'syz.2.2013': attribute type 1 has an invalid length. [ 326.077086][T12998] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20002 [ 326.121100][T12998] tipc: Resetting bearer [ 326.216346][T12996] tipc: Resetting bearer [ 326.274857][T12996] tipc: Disabling bearer [ 326.379788][T13013] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2018'. [ 326.405497][T13013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2018'. [ 326.530387][T11927] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.575328][T13032] 8021q: adding VLAN 0 to HW filter on device bond12 [ 326.597372][T11927] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.621294][T11927] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.629948][T11927] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.860177][T13049] netlink: 'syz.2.2032': attribute type 2 has an invalid length. [ 327.224721][T13074] netlink: 'syz.2.2038': attribute type 10 has an invalid length. [ 327.689289][T13113] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 328.094623][T13132] bridge0: port 3(vlan2) entered blocking state [ 328.101180][T13132] bridge0: port 3(vlan2) entered disabled state [ 328.133824][T13132] vlan2: entered allmulticast mode [ 328.138998][T13132] bridge0: entered allmulticast mode [ 328.166118][T13132] vlan2: left allmulticast mode [ 328.171016][T13132] bridge0: left allmulticast mode [ 328.653892][T13166] __nla_validate_parse: 11 callbacks suppressed [ 328.653911][T13166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2061'. [ 328.682124][T13167] netlink: 'syz.2.2060': attribute type 1 has an invalid length. [ 328.705570][T13169] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2062'. [ 328.711111][T13167] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2060'. [ 328.715636][T13169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2062'. [ 328.736991][T13169] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2062'. [ 328.746729][T13169] netlink: 'syz.1.2062': attribute type 2 has an invalid length. [ 328.757250][T13169] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2062'. [ 328.956105][T13183] syz.1.2065: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 329.044088][T13183] CPU: 0 UID: 0 PID: 13183 Comm: syz.1.2065 Not tainted syzkaller #0 PREEMPT(full) [ 329.044116][T13183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 329.044128][T13183] Call Trace: [ 329.044136][T13183] [ 329.044145][T13183] dump_stack_lvl+0x189/0x250 [ 329.044173][T13183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.044199][T13183] ? __pfx__printk+0x10/0x10 [ 329.044219][T13183] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 329.044244][T13183] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 329.044270][T13183] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 329.044296][T13183] warn_alloc+0x214/0x310 [ 329.044333][T13183] ? __pfx_warn_alloc+0x10/0x10 [ 329.044368][T13183] ? __get_vm_area_node+0x28f/0x300 [ 329.044391][T13183] ? htable_create+0x101/0x7a0 [ 329.044421][T13183] __vmalloc_node_range_noprof+0x690/0x12d0 [ 329.044469][T13183] ? alloc_pages_mpol+0x3cd/0x4a0 [ 329.044499][T13183] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 329.044529][T13183] ? rcu_is_watching+0x15/0xb0 [ 329.044552][T13183] ? htable_create+0x101/0x7a0 [ 329.044578][T13183] __kvmalloc_node_noprof+0x674/0x910 [ 329.044605][T13183] ? htable_create+0x101/0x7a0 [ 329.044628][T13183] ? hashlimit_pernet+0x23/0x240 [ 329.044652][T13183] ? hashlimit_pernet+0x23/0x240 [ 329.044672][T13183] ? hashlimit_pernet+0x23/0x240 [ 329.044702][T13183] htable_create+0x101/0x7a0 [ 329.044737][T13183] hashlimit_mt_check_common+0x719/0xa10 [ 329.044772][T13183] hashlimit_mt_check_v1+0x221/0x360 [ 329.044799][T13183] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 329.044828][T13183] ? xt_find_match+0x1f7/0x250 [ 329.044857][T13183] xt_check_match+0x3ce/0xab0 [ 329.044886][T13183] ? __pfx_xt_check_match+0x10/0x10 [ 329.044911][T13183] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 329.044947][T13183] ? xt_find_match+0x1f7/0x250 [ 329.044977][T13183] translate_table+0x150b/0x2000 [ 329.045022][T13183] ? __pfx_translate_table+0x10/0x10 [ 329.045047][T13183] ? __might_fault+0xb0/0x130 [ 329.045094][T13183] ? _copy_from_user+0x94/0xb0 [ 329.045120][T13183] do_ipt_set_ctl+0x967/0xcd0 [ 329.045146][T13183] ? rcu_is_watching+0x15/0xb0 [ 329.045165][T13183] ? trace_contention_end+0x39/0x120 [ 329.045188][T13183] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 329.045243][T13183] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 329.045281][T13183] ? __pfx_aa_sk_perm+0x10/0x10 [ 329.045309][T13183] nf_setsockopt+0x26f/0x290 [ 329.045335][T13183] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 329.045367][T13183] do_sock_setsockopt+0x179/0x1b0 [ 329.045392][T13183] __x64_sys_setsockopt+0x13f/0x1b0 [ 329.045417][T13183] do_syscall_64+0xfa/0xfa0 [ 329.045439][T13183] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.045461][T13183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.045479][T13183] ? clear_bhb_loop+0x60/0xb0 [ 329.045500][T13183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.045518][T13183] RIP: 0033:0x7f84d0f8eec9 [ 329.045536][T13183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.045552][T13183] RSP: 002b:00007f84d1ec6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 329.045573][T13183] RAX: ffffffffffffffda RBX: 00007f84d11e5fa0 RCX: 00007f84d0f8eec9 [ 329.045587][T13183] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 329.045599][T13183] RBP: 00007f84d1011f91 R08: 0000000000000448 R09: 0000000000000000 [ 329.045612][T13183] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 329.045624][T13183] R13: 00007f84d11e6038 R14: 00007f84d11e5fa0 R15: 00007ffda7a7ee08 [ 329.045658][T13183] [ 329.045767][T13183] Mem-Info: [ 329.414672][T13183] active_anon:7976 inactive_anon:0 isolated_anon:0 [ 329.414672][T13183] active_file:2500 inactive_file:39943 isolated_file:0 [ 329.414672][T13183] unevictable:768 dirty:88 writeback:0 [ 329.414672][T13183] slab_reclaimable:11676 slab_unreclaimable:115913 [ 329.414672][T13183] mapped:33711 shmem:4206 pagetables:976 [ 329.414672][T13183] sec_pagetables:0 bounce:0 [ 329.414672][T13183] kernel_misc_reclaimable:0 [ 329.414672][T13183] free:1308217 free_pcp:10771 free_cma:0 [ 329.464109][T13183] Node 0 active_anon:31904kB inactive_anon:0kB active_file:10000kB inactive_file:159572kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134844kB dirty:352kB writeback:0kB shmem:15288kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14680kB pagetables:3756kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 329.552117][T13183] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 329.593058][T13183] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 329.670948][T13183] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 329.683866][T13183] Node 0 DMA32 free:1324520kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21304kB inactive_anon:0kB active_file:10000kB inactive_file:159572kB unevictable:1536kB writepending:352kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:35488kB local_pcp:20388kB free_cma:0kB [ 329.718580][T13183] lowmem_reserve[]: 0 0 1 1 1 [ 329.723386][T13183] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 329.754392][T13183] lowmem_reserve[]: 0 0 0 0 0 [ 329.762693][T13183] Node 1 Normal free:3892108kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20824kB local_pcp:10264kB free_cma:0kB [ 329.821084][T13183] lowmem_reserve[]: 0 0 0 0 0 [ 329.826464][T13183] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 329.851101][T13183] Node 0 DMA32: 866*4kB (UM) 1367*8kB (UM) 268*16kB (UME) 1853*32kB (UM) 1237*64kB (UME) 542*128kB (UM) 246*256kB (UME) 79*512kB (UM) 39*1024kB (UME) 4*2048kB (UM) 231*4096kB (UM) = 1324256kB [ 329.870746][T13183] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 329.884982][T13183] Node 1 Normal: 185*4kB (UE) 59*8kB (UME) 51*16kB (UME) 71*32kB (UME) 27*64kB (UME) 8*128kB (UME) 2*256kB (M) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (UM) = 3892108kB [ 329.912212][T13183] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 329.943039][T13183] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 329.958136][T13183] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 329.967928][T13183] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 329.986851][T13183] 43797 total pagecache pages [ 329.991739][T13183] 0 pages in swap cache [ 330.016983][T13183] Free swap = 124996kB [ 330.028958][T13183] Total swap = 124996kB [ 330.043580][T13183] 2097051 pages RAM [ 330.056277][T13183] 0 pages HighMem/MovableOnly [ 330.066440][T13183] 424543 pages reserved [ 330.074749][T13225] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2077'. [ 330.078073][T13222] netlink: 864 bytes leftover after parsing attributes in process `syz.3.2076'. [ 330.099450][T13183] 0 pages cma reserved [ 330.107138][T13226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2074'. [ 330.251817][T13232] tipc: Enabled bearer , priority 0 [ 330.263493][T13232] syzkaller0: entered promiscuous mode [ 330.275873][T13235] netlink: 'syz.2.2080': attribute type 16 has an invalid length. [ 330.278729][T13232] syzkaller0: entered allmulticast mode [ 330.284247][T13235] netlink: 'syz.2.2080': attribute type 3 has an invalid length. [ 330.284268][T13235] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2080'. [ 330.341670][T13232] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 330.382153][T13232] tipc: Resetting bearer [ 330.397353][T13238] netlink: 'syz.2.2081': attribute type 9 has an invalid length. [ 330.409272][T13231] tipc: Resetting bearer [ 330.457246][T13231] tipc: Disabling bearer [ 330.774656][T13268] netlink: 'syz.3.2088': attribute type 10 has an invalid length. [ 330.864236][T13268] team0: Device veth1_macvtap failed to register rx_handler [ 331.228030][T13289] netlink: 'syz.4.2097': attribute type 2 has an invalid length. [ 331.240961][T13289] nbd: must specify a device to reconfigure [ 331.275368][T13289] netlink: 'syz.4.2097': attribute type 1 has an invalid length. [ 331.362452][T13289] bond9: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 331.458411][ T8921] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 331.480907][T13289] 8021q: adding VLAN 0 to HW filter on device bond9 [ 331.586070][T13289] veth9: entered promiscuous mode [ 331.596429][T11974] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 331.607201][T13289] bond9: (slave veth9): Enslaving as a backup interface with a down link [ 331.829625][T13332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.854172][T13332] batadv_slave_0: entered promiscuous mode [ 331.924936][T13328] netlink: 'syz.2.2105': attribute type 11 has an invalid length. [ 331.943718][T13328] netlink: 'syz.2.2105': attribute type 4 has an invalid length. [ 332.441356][T13380] x_tables: duplicate underflow at hook 4 [ 332.863385][T13393] team0: Device geneve2 is up. Set it down before adding it as a team port [ 333.060148][T13402] veth7: entered promiscuous mode [ 333.180063][T13411] netlink: 'syz.0.2125': attribute type 12 has an invalid length. [ 333.505659][T13437] syzkaller0: entered promiscuous mode [ 333.511195][T13437] syzkaller0: entered allmulticast mode [ 333.686876][T13444] syzkaller1: entered promiscuous mode [ 333.732801][T13444] syzkaller1: entered allmulticast mode [ 333.806516][T13456] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 333.841547][T13456] __nla_validate_parse: 16 callbacks suppressed [ 333.841566][T13456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2137'. [ 334.021541][T13463] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 334.058049][T13465] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2141'. [ 334.085445][T13465] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2141'. [ 334.110488][T13469] pim6reg1: entered promiscuous mode [ 334.120055][T13469] pim6reg1: entered allmulticast mode [ 334.307648][T13476] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2145'. [ 334.324153][T13479] validate_nla: 3 callbacks suppressed [ 334.324171][T13479] netlink: 'syz.3.2148': attribute type 1 has an invalid length. [ 334.398910][T13479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2148'. [ 334.416858][T13479] macvlan2: entered promiscuous mode [ 334.422399][T13479] macvlan2: entered allmulticast mode [ 334.429185][T13479] bond9: entered promiscuous mode [ 334.435093][T13479] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 334.465412][T13487] netlink: 'syz.3.2148': attribute type 10 has an invalid length. [ 334.474254][T13479] bond9: left promiscuous mode [ 334.527888][T13487] team_slave_0: left promiscuous mode [ 334.534259][T13487] team_slave_1: left promiscuous mode [ 334.580435][T13487] batman_adv: batadv0: Adding interface: team0 [ 334.621174][T13487] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.670299][T13487] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 334.695200][T13495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2151'. [ 334.716428][T13495] team0 (uninitialized): Failed to send options change via netlink (err -105) [ 334.791911][T13495] team0: entered promiscuous mode [ 334.808580][T13495] team0: entered allmulticast mode [ 334.924469][T13512] netlink: 'syz.0.2156': attribute type 29 has an invalid length. [ 334.940509][T13512] netlink: 'syz.0.2156': attribute type 29 has an invalid length. [ 334.956586][T13512] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2156'. [ 335.092161][T13502] batman_adv: batadv0: Removing interface: netdevsim0 [ 335.280963][T13534] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2160'. [ 335.336338][T13533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2162'. [ 335.491615][T13545] tipc: Enabled bearer , priority 0 [ 335.507517][T13542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2165'. [ 335.528887][T13545] tipc: Disabling bearer [ 335.658256][T13553] 8021q: adding VLAN 0 to HW filter on device bond13 [ 336.280535][T13596] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 336.566378][T13621] netlink: 'syz.3.2188': attribute type 1 has an invalid length. [ 336.581616][T13621] netlink: 'syz.3.2188': attribute type 4 has an invalid length. [ 336.590496][T13621] netlink: 'syz.3.2188': attribute type 1 has an invalid length. [ 336.606721][T13621] netlink: 'syz.3.2188': attribute type 4 has an invalid length. [ 336.873255][T13639] netlink: 'syz.3.2195': attribute type 1 has an invalid length. [ 336.884011][T13641] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20003 [ 337.189097][T13663] netlink: 'syz.3.2199': attribute type 1 has an invalid length. [ 337.647171][T13689] Cannot find del_set index 49151 as target [ 337.771112][T13695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.867169][T13695] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.883394][T13699] team0: entered allmulticast mode [ 337.896832][T13699] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.149968][T13732] can: request_module (can-proto-4) failed. [ 339.267354][T13759] __nla_validate_parse: 87 callbacks suppressed [ 339.267379][T13759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2234'. [ 339.324174][T13762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2235'. [ 339.335535][T13764] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2236'. [ 339.381255][T13762] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2235'. [ 339.672920][T13785] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 339.686462][T13788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2243'. [ 339.696832][T13787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2243'. [ 339.706903][T13788] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2243'. [ 339.718242][T13787] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2243'. [ 339.738539][T13787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2243'. [ 339.758649][T13788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2243'. [ 339.909099][T13802] siw: device registration error -23 [ 340.059182][T13805] bond10: entered allmulticast mode [ 340.064834][T13805] 8021q: adding VLAN 0 to HW filter on device bond10 [ 340.236619][T13836] validate_nla: 6 callbacks suppressed [ 340.236637][T13836] netlink: 'syz.1.2254': attribute type 2 has an invalid length. [ 340.527566][T13855] netlink: 'syz.1.2260': attribute type 2 has an invalid length. [ 340.531466][T13856] netlink: 'syz.0.2259': attribute type 1 has an invalid length. [ 340.577778][T13855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 340.760735][T13873] netlink: 'syz.1.2268': attribute type 32 has an invalid length. [ 340.795760][T13880] netlink: 'syz.0.2270': attribute type 1 has an invalid length. [ 340.890669][T13885] netlink: 'syz.3.2271': attribute type 23 has an invalid length. [ 340.913445][T13883] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 340.976610][T13880] veth5: entered promiscuous mode [ 340.987673][T13880] bond8: (slave veth5): Enslaving as a backup interface with a down link [ 341.168941][T13899] ip6t_srh: unknown srh invflags 4000 [ 341.179406][T13897] nbd: must specify at least one socket [ 341.264416][T13905] syzkaller1: entered promiscuous mode [ 341.276716][T13905] syzkaller1: entered allmulticast mode [ 341.462361][T13916] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 341.795082][T13939] syzkaller0: entered promiscuous mode [ 341.808677][T13939] syzkaller0: entered allmulticast mode [ 342.246262][T13967] netlink: 'syz.3.2300': attribute type 10 has an invalid length. [ 342.265327][T13969] netlink: 'syz.3.2300': attribute type 10 has an invalid length. [ 342.354249][T13974] Bluetooth: MGMT ver 1.23 [ 342.606302][T13988] syzkaller0: entered promiscuous mode [ 342.631537][T13988] syzkaller0: entered allmulticast mode [ 343.074002][T14026] tipc: Enabled bearer , priority 0 [ 343.123226][T14026] syzkaller0: entered promiscuous mode [ 343.128803][T14026] syzkaller0: entered allmulticast mode [ 343.135731][T14026] tipc: Resetting bearer [ 343.151506][T14025] tipc: Resetting bearer [ 344.653259][T14025] tipc: Disabling bearer [ 344.849997][T14071] netlink: 'syz.0.2328': attribute type 4 has an invalid length. [ 345.082269][T14087] __nla_validate_parse: 10 callbacks suppressed [ 345.082290][T14087] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2335'. [ 345.143778][T14090] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2336'. [ 345.148898][T14096] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2335'. [ 345.297282][T14103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2341'. [ 345.359237][T14103] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2341'. [ 345.505736][T14111] tipc: Enabled bearer , priority 0 [ 345.644479][T14111] syzkaller0: entered promiscuous mode [ 345.653446][T14111] syzkaller0: entered allmulticast mode [ 345.664404][T14111] tipc: Resetting bearer [ 345.931432][T14146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2346'. [ 346.061932][ T8921] tipc: Resetting bearer [ 346.076998][T14110] tipc: Resetting bearer [ 346.183393][T14152] netlink: 45 bytes leftover after parsing attributes in process `syz.0.2350'. [ 347.298749][T14110] tipc: Disabling bearer [ 347.407621][T14161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2352'. [ 347.511195][T14163] team0: Cannot enslave team device to itself [ 347.594779][T14172] tipc: Enabled bearer , priority 0 [ 347.602371][T14172] syzkaller0: entered promiscuous mode [ 347.615107][T14172] syzkaller0: entered allmulticast mode [ 347.621483][T14180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2359'. [ 347.701280][T14172] tipc: Resetting bearer [ 347.718315][T14183] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2360'. [ 347.738346][T14171] tipc: Resetting bearer [ 347.761772][T14171] tipc: Disabling bearer [ 347.984364][T14199] IPv6: sit1: Disabled Multicast RS [ 348.385490][T14226] tipc: Enabled bearer , priority 0 [ 348.420427][T14225] tipc: Enabling of bearer rejected, already enabled [ 348.430391][T14226] tipc: Resetting bearer [ 348.473834][T14221] tipc: Disabling bearer [ 348.581775][T14236] syzkaller1: entered promiscuous mode [ 348.597714][T14236] syzkaller1: entered allmulticast mode [ 348.632095][T14242] netlink: 'syz.0.2379': attribute type 1 has an invalid length. [ 348.704165][T14249] netlink: 'syz.4.2382': attribute type 1 has an invalid length. [ 348.707602][T14242] 8021q: adding VLAN 0 to HW filter on device bond9 [ 348.732251][T14254] netlink: 'syz.1.2380': attribute type 1 has an invalid length. [ 348.778555][T14249] 8021q: adding VLAN 0 to HW filter on device bond12 [ 348.790556][T14249] bond11: (slave bond12): making interface the new active one [ 348.799708][T14249] bond11: (slave bond12): Enslaving as an active interface with an up link [ 348.818090][T14249] 8021q: adding VLAN 0 to HW filter on device bond11 [ 348.884110][T14250] bond9: (slave ip6erspan0): making interface the new active one [ 348.922120][T14250] bond9: (slave ip6erspan0): Enslaving as an active interface with an up link [ 349.247812][T14278] netlink: 'syz.3.2389': attribute type 10 has an invalid length. [ 349.288869][T14278] bridge_slave_1: entered promiscuous mode [ 349.300422][T14286] netlink: 'syz.4.2391': attribute type 8 has an invalid length. [ 349.310220][T14278] `: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 349.336898][T14294] netlink: 'syz.4.2391': attribute type 8 has an invalid length. [ 350.092439][T14345] __nla_validate_parse: 8 callbacks suppressed [ 350.092461][T14345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2404'. [ 350.128861][T14343] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 350.144552][T14343] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2403'. [ 350.169488][T14347] block nbd1: NBD_DISCONNECT [ 350.174989][T14347] block nbd1: Send disconnect failed -32 [ 350.183338][T14347] block nbd1: shutting down sockets [ 350.220987][T14350] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2405'. [ 350.244383][T14350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2405'. [ 350.369126][T14357] tipc: New replicast peer: 255.255.255.255 [ 350.383610][T14357] tipc: Enabled bearer , priority 10 [ 350.420412][T14367] netlink: 'syz.0.2407': attribute type 23 has an invalid length. [ 350.469072][T14361] tipc: Enabled bearer , priority 0 [ 350.486863][T14361] syzkaller0: entered promiscuous mode [ 350.492372][T14361] syzkaller0: entered allmulticast mode [ 350.613509][T14361] tipc: Resetting bearer [ 350.635726][T14380] Cannot find add_set index 2 as target [ 350.666951][T14360] tipc: Resetting bearer [ 350.704757][T14360] tipc: Disabling bearer [ 350.894989][T14394] xt_hashlimit: max too large, truncated to 1048576 [ 351.029491][T14407] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2425'. [ 351.068033][T14406] erspan0: left promiscuous mode [ 351.129487][T14406] 8021q: adding VLAN 0 to HW filter on device ` [ 351.137083][T14420] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2424'. [ 351.148563][T14406] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.191643][T14406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 351.503639][T12363] tipc: Node number set to 1360991232 [ 351.650283][T14443] netlink: 'syz.0.2435': attribute type 1 has an invalid length. [ 351.660704][T14443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2435'. [ 352.004193][T14466] team0: Device wireguard0 is of different type [ 352.140353][T14476] netlink: 'syz.1.2444': attribute type 1 has an invalid length. [ 352.397431][T14488] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2447'. [ 352.397697][T14494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2449'. [ 352.413021][T14488] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2447'. [ 352.421161][T14494] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 352.748700][T14522] netlink: 'syz.3.2457': attribute type 3 has an invalid length. [ 353.031384][T14536] tipc: Enabled bearer , priority 0 [ 353.072184][T14536] syzkaller0: entered promiscuous mode [ 353.081293][T14536] syzkaller0: entered allmulticast mode [ 353.118660][T14536] tipc: Resetting bearer [ 353.132935][T14528] tipc: Resetting bearer [ 353.157749][T14528] tipc: Disabling bearer [ 354.813828][T14648] syzkaller1: entered promiscuous mode [ 354.833810][T14648] syzkaller1: entered allmulticast mode [ 355.353504][T14671] validate_nla: 4 callbacks suppressed [ 355.353524][T14671] netlink: 'syz.0.2498': attribute type 1 has an invalid length. [ 355.380226][T14672] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 355.381864][T14671] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 355.979145][T14700] netlink: 'syz.1.2503': attribute type 6 has an invalid length. [ 356.062190][T14711] __nla_validate_parse: 11 callbacks suppressed [ 356.062210][T14711] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2506'. [ 356.096724][T14715] netlink: 'syz.0.2507': attribute type 1 has an invalid length. [ 356.166178][T14715] 8021q: adding VLAN 0 to HW filter on device bond10 [ 356.328948][T14729] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2509'. [ 356.405895][T14735] netlink: 'syz.4.2511': attribute type 1 has an invalid length. [ 356.607160][T14745] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2512'. [ 356.976125][T14762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2519'. [ 356.991385][T14764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2519'. [ 357.028125][T14758] netlink: 'syz.2.2516': attribute type 1 has an invalid length. [ 357.082310][T14758] 8021q: adding VLAN 0 to HW filter on device bond4 [ 357.144828][T14777] hsr0 speed is unknown, defaulting to 1000 [ 357.150940][T14777] hsr0 speed is unknown, defaulting to 1000 [ 357.161776][T14777] hsr0 speed is unknown, defaulting to 1000 [ 357.187691][T14777] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 357.225596][T14777] hsr0 speed is unknown, defaulting to 1000 [ 357.235534][T14777] hsr0 speed is unknown, defaulting to 1000 [ 357.253657][T14777] hsr0 speed is unknown, defaulting to 1000 [ 357.264020][T14777] hsr0 speed is unknown, defaulting to 1000 [ 357.272376][T14777] hsr0 speed is unknown, defaulting to 1000 [ 357.468181][T14796] batadv_slave_0: entered promiscuous mode [ 357.479884][T14796] batadv_slave_0: entered allmulticast mode [ 357.546071][T11974] bond9: (slave ip6gretap1): link status up again after 0 ms [ 357.558343][T11974] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 357.578031][T14805] netlink: 'syz.3.2529': attribute type 1 has an invalid length. [ 357.615071][T14805] 8021q: adding VLAN 0 to HW filter on device bond10 [ 357.686514][T11927] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 357.827032][T14811] veth7: entered promiscuous mode [ 357.857459][T14811] bond10: (slave veth7): Enslaving as an active interface with a down link [ 357.984119][T11974] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 357.995972][T14824] macvtap0: entered promiscuous mode [ 358.007070][T14824] macvtap0: entered allmulticast mode [ 358.012603][T14824] veth0_macvtap: entered allmulticast mode [ 358.183115][ T8921] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 358.315659][T11927] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 358.434332][ T8917] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 358.565652][ T8917] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 358.601580][T14879] netlink: 'syz.4.2551': attribute type 23 has an invalid length. [ 358.667931][T14883] netlink: 'syz.4.2553': attribute type 1 has an invalid length. [ 358.676849][T14883] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2553'. [ 358.689451][T11974] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 358.763631][T14883] wlan1 speed is unknown, defaulting to 1000 [ 358.771656][T14883] hsr0 speed is unknown, defaulting to 1000 [ 358.855222][T11974] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 358.986866][T14894] netlink: 'syz.3.2557': attribute type 5 has an invalid length. [ 359.077730][T14896] syzkaller0: entered promiscuous mode [ 359.083684][T14896] syzkaller0: entered allmulticast mode [ 359.122258][ T30] audit: type=1800 audit(1760230220.798:5): pid=14900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2560" name="memory.events" dev="tmpfs" ino=2586 res=0 errno=0 [ 359.168583][T14904] netlink: 'syz.1.2560': attribute type 1 has an invalid length. [ 359.186873][T14904] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2560'. [ 359.212978][ T30] audit: type=1804 audit(1760230220.798:6): pid=14900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2560" name="/newroot/506/memory.events" dev="tmpfs" ino=2586 res=1 errno=0 [ 359.261357][ T30] audit: type=1804 audit(1760230220.938:7): pid=14900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2560" name="/newroot/506/memory.events" dev="tmpfs" ino=2586 res=1 errno=0 [ 359.288736][T14903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.306414][ T30] audit: type=1800 audit(1760230220.938:8): pid=14900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2560" name="memory.events" dev="tmpfs" ino=2586 res=0 errno=0 [ 359.345142][T14910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2561'. [ 359.490924][T14918] netlink: 3648 bytes leftover after parsing attributes in process `syz.0.2566'. [ 359.508817][T14918] netlink: 3648 bytes leftover after parsing attributes in process `syz.0.2566'. [ 359.611560][T14924] SET target dimension over the limit! [ 359.697712][T14932] IPv6: NLM_F_REPLACE set, but no existing node found! [ 359.810062][T14936] team0: Mode changed to "activebackup" [ 359.911803][T14940] 8021q: adding VLAN 0 to HW filter on device bond5 [ 359.938607][T14938] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 360.237708][T14965] 0ªî{X¹¦: left allmulticast mode [ 360.298897][T14965] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.391018][T14965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.412212][T14965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.459273][T14965] veth0_vlan: left allmulticast mode [ 360.514868][T14965] gre1: left promiscuous mode [ 360.519603][T14965] gre1: left allmulticast mode [ 360.532405][T14965] bond4: left promiscuous mode [ 360.537487][T14965] bond4: left allmulticast mode [ 360.559403][T14965] team0: left promiscuous mode [ 360.564428][T14965] team0: left allmulticast mode [ 360.571300][T14965] veth5: left promiscuous mode [ 360.610445][T14970] syzkaller1: entered promiscuous mode [ 360.620103][T14970] syzkaller1: entered allmulticast mode [ 360.629739][ T8921] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.653715][ T8921] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.666819][ T8921] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.687605][ T8921] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.805373][ T8921] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.815544][ T8921] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.825446][ T8921] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.834555][ T8921] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.881953][T14978] syzkaller1: entered promiscuous mode [ 360.903367][T14978] syzkaller1: entered allmulticast mode [ 361.099703][T15007] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 361.245431][T15012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.387290][T15021] tipc: Enabled bearer , priority 0 [ 361.414381][T15021] syzkaller0: entered promiscuous mode [ 361.419893][T15021] syzkaller0: entered allmulticast mode [ 361.573747][T15011] tipc: Resetting bearer [ 361.608112][T15016] __nla_validate_parse: 4 callbacks suppressed [ 361.608131][T15016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2593'. [ 361.625489][T15040] ip6t_REJECT: ECHOREPLY is not supported [ 361.636420][T15011] tipc: Disabling bearer [ 361.758730][T15044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2600'. [ 361.858375][T15051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2601'. [ 361.864203][T15048] validate_nla: 1 callbacks suppressed [ 361.864220][T15048] netlink: 'syz.2.2602': attribute type 12 has an invalid length. [ 361.885147][T15048] netlink: 'syz.2.2602': attribute type 29 has an invalid length. [ 361.895420][T15048] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2602'. [ 361.905757][T15048] netlink: 'syz.2.2602': attribute type 1 has an invalid length. [ 361.913884][T15048] netlink: 15 bytes leftover after parsing attributes in process `syz.2.2602'. [ 361.958081][T15051] bond15: option mode: invalid value (133) [ 361.966356][T15051] bond15 (unregistering): Released all slaves [ 362.555308][T15084] netlink: 'syz.0.2613': attribute type 10 has an invalid length. [ 362.655339][ T8917] net_ratelimit: 24 callbacks suppressed [ 362.655361][ T8917] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 362.747066][T15099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2618'. [ 362.784601][ T8921] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 362.842437][T15104] syzkaller0: entered promiscuous mode [ 362.864153][T15104] syzkaller0: entered allmulticast mode [ 362.902833][ T13] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 362.914884][T15108] tipc: Enabled bearer , priority 0 [ 362.922264][T15108] syzkaller0: entered promiscuous mode [ 362.927913][T15108] syzkaller0: entered allmulticast mode [ 362.942468][T15108] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 362.968282][T15109] tipc: Resetting bearer [ 362.987342][T15107] tipc: Resetting bearer [ 363.017057][T15107] tipc: Disabling bearer [ 363.044500][T15116] bond15: (slave bond_slave_1): Device is not our slave [ 363.051479][T15116] bond15: option active_slave: invalid value (bond_slave_1) [ 363.062017][T15116] bond15 (unregistering): Released all slaves [ 363.102776][ T13] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 363.166953][T15123] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2624'. [ 363.213447][T11940] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 363.372789][ T8921] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 363.495875][T11940] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 363.553273][T15153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2630'. [ 363.607981][T15155] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2634'. [ 363.625280][T11940] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 363.660598][T15157] C: renamed from lo [ 363.661724][T15161] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 363.695254][T15162] bridge0: port 3(ipvlan2) entered blocking state [ 363.719839][T15162] bridge0: port 3(ipvlan2) entered disabled state [ 363.728973][T15162] ipvlan2: entered allmulticast mode [ 363.736923][T15162] ipvlan2: left allmulticast mode [ 363.772795][ T8921] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 363.840760][T15174] netlink: 'syz.4.2641': attribute type 10 has an invalid length. [ 363.892951][T11934] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 363.982097][T15188] vlan3: entered promiscuous mode [ 364.077285][T15194] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2645'. [ 364.180513][T15204] netlink: 'syz.3.2648': attribute type 1 has an invalid length. [ 364.341107][T15210] tipc: Enabled bearer , priority 0 [ 364.355247][T15212] syzkaller0: entered promiscuous mode [ 364.360756][T15212] syzkaller0: entered allmulticast mode [ 364.386882][T15212] tipc: Resetting bearer [ 364.424698][T15217] netlink: 'syz.3.2651': attribute type 1 has an invalid length. [ 364.434308][T15212] tipc: Disabling bearer [ 364.511606][T15217] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 364.727560][T15238] netlink: 'syz.1.2658': attribute type 16 has an invalid length. [ 364.736363][T15238] netlink: 'syz.1.2658': attribute type 6 has an invalid length. [ 364.745058][T15238] netlink: 'syz.1.2658': attribute type 6 has an invalid length. [ 365.415827][T15286] bridge6: entered promiscuous mode [ 365.421207][T15286] bridge6: entered allmulticast mode [ 365.458145][T15279] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 365.748777][T15301] 8021q: adding VLAN 0 to HW filter on device ` [ 365.774037][T15301] team_slave_0: entered promiscuous mode [ 365.780075][T15301] team_slave_1: entered promiscuous mode [ 365.795524][T15301] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.807549][T15301] batman_adv: batadv0: Interface activated: team0 [ 365.940189][T15301] 8021q: adding VLAN 0 to HW filter on device bond1 [ 365.959073][T15301] 8021q: adding VLAN 0 to HW filter on device bond2 [ 365.997727][T15301] 8021q: adding VLAN 0 to HW filter on device bond3 [ 366.048069][T12370] hsr0 speed is unknown, defaulting to 1000 [ 366.049118][T11974] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 366.094406][T11974] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 366.123658][T11974] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 366.141054][T11974] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 366.264028][T15332] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 366.546830][T15359] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 366.554728][T15358] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 366.599293][T15357] veth0_vlan: entered allmulticast mode [ 366.735503][T15368] __nla_validate_parse: 7 callbacks suppressed [ 366.735523][T15368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2699'. [ 366.805388][T15368] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 366.906555][T15368] team2: entered promiscuous mode [ 366.917306][T15368] team2: entered allmulticast mode [ 367.096699][T11974] tipc: Subscription rejected, illegal request [ 367.243792][T15398] block nbd1: server does not support multiple connections per device. [ 367.274071][T15398] block nbd1: shutting down sockets [ 367.503588][T15431] x_tables: duplicate underflow at hook 1 [ 367.527390][T15434] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2717'. [ 367.674180][T15445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2718'. [ 367.714270][T11940] net_ratelimit: 25 callbacks suppressed [ 367.714291][T11940] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 367.800153][T15450] validate_nla: 4 callbacks suppressed [ 367.800173][T15450] netlink: 'syz.3.2720': attribute type 4 has an invalid length. [ 367.905312][T11927] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 368.024705][T11940] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 368.060709][T15471] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2725'. [ 368.159211][T15467] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2725'. [ 368.269194][ T13] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 368.393034][T11927] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 368.407816][T15495] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2731'. [ 368.417632][T15489] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 368.427179][T15494] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2731'. [ 368.472861][T15495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2731'. [ 368.493394][T15494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2731'. [ 368.520317][T15495] ip6gretap0: entered promiscuous mode [ 368.549607][T15495] ip6gretap0: left promiscuous mode [ 368.578786][T15494] ip6gretap0: entered promiscuous mode [ 368.591425][T15494] ip6gretap0: left promiscuous mode [ 368.600864][T15505] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2732'. [ 368.727097][T15505] bond13 (unregistering): Released all slaves [ 368.788333][T11940] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 368.917370][T15526] syzkaller0: entered promiscuous mode [ 368.923058][T15526] syzkaller0: entered allmulticast mode [ 368.953125][T11927] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 369.073910][T11974] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 369.183458][T11940] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 369.293062][ T8921] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 369.610460][T15545] netlink: 'syz.4.2743': attribute type 10 has an invalid length. [ 369.619527][T15544] netlink: 'syz.4.2743': attribute type 10 has an invalid length. [ 369.631493][T15545] geneve0: entered allmulticast mode [ 369.640410][T15545] team0: Port device geneve0 added [ 369.883764][T15561] netlink: 'syz.4.2748': attribute type 1 has an invalid length. [ 369.968856][T15561] bond13: entered promiscuous mode [ 369.977311][T15561] 8021q: adding VLAN 0 to HW filter on device bond13 [ 370.164809][T15570] team0: Device geneve2 is up. Set it down before adding it as a team port [ 370.445019][T15607] netlink: 'syz.0.2760': attribute type 4 has an invalid length. [ 371.152244][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 371.163937][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 371.173674][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 371.181946][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 371.190968][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 371.244082][T15635] wlan1 speed is unknown, defaulting to 1000 [ 371.253427][T15635] hsr0 speed is unknown, defaulting to 1000 [ 371.570390][T15645] tipc: Enabled bearer , priority 0 [ 371.640742][T15645] syzkaller0: entered promiscuous mode [ 371.651218][T15645] syzkaller0: entered allmulticast mode [ 371.677921][T15635] chnl_net:caif_netlink_parms(): no params data found [ 371.708896][T11974] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 371.735391][T11974] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 371.823018][T11974] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 371.846118][T11974] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 371.858941][T15645] __nla_validate_parse: 15 callbacks suppressed [ 371.858961][T15645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2770'. [ 371.904118][T15672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2778'. [ 371.931489][T15665] tipc: Resetting bearer [ 371.937821][T15673] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2779'. [ 371.980749][T15644] tipc: Resetting bearer [ 371.999019][T15644] tipc: Disabling bearer [ 372.111036][T15635] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.128110][T15635] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.136504][T15635] bridge_slave_0: entered allmulticast mode [ 372.145040][T15635] bridge_slave_0: entered promiscuous mode [ 372.154164][T15635] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.163566][T15635] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.170829][T15635] bridge_slave_1: entered allmulticast mode [ 372.180242][T15635] bridge_slave_1: entered promiscuous mode [ 372.246498][T15635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.261464][T15635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.327511][T15635] team0: Port device team_slave_0 added [ 372.347740][T15635] team0: Port device team_slave_1 added [ 372.401822][T15635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.411838][T15635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.439409][T15635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.461698][T15635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.469223][T15635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.498097][T15635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.578354][T15635] hsr_slave_0: entered promiscuous mode [ 372.586374][T15635] hsr_slave_1: entered promiscuous mode [ 372.592838][T15635] debugfs: 'hsr0' already exists in 'hsr' [ 372.598979][T15635] Cannot create hsr debugfs directory [ 372.759968][T15716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2791'. [ 373.014435][T15635] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.025753][T15721] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2792'. [ 373.037137][T15635] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 373.053719][T15635] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.089727][T15721] team0: Device vti0 is of different type [ 373.204002][T15635] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.226400][T15635] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 373.237009][ T5844] Bluetooth: hci2: command tx timeout [ 373.253819][T15635] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.262018][T15740] netlink: 'syz.4.2792': attribute type 1 has an invalid length. [ 373.272234][T15740] netlink: 'syz.4.2792': attribute type 4 has an invalid length. [ 373.284849][T15740] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2792'. [ 373.305582][T15724] TCP: TCP_TX_DELAY enabled [ 373.313992][ T13] net_ratelimit: 18 callbacks suppressed [ 373.314014][ T13] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 373.397229][T15635] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.417601][T15635] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 373.424220][T15743] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2796'. [ 373.428478][T15635] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.459346][T15743] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2796'. [ 373.464236][T11927] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 373.541547][T15635] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.562337][T15635] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 373.573318][T15635] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.592853][ T13] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 373.712966][ T13] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 373.881305][T15765] bond14: Unable to set up delay as MII monitoring is disabled [ 373.890614][T15765] bond14 (unregistering): Released all slaves [ 373.923498][T11927] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 373.944927][T15635] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 373.983126][T15635] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 373.998141][T15635] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 374.031401][T15635] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 374.083082][T11974] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 374.202445][T15635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.233845][T15635] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.268871][T11927] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.276072][T11927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.289125][T11927] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.296378][T11927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.423342][ T13] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 374.556594][T11927] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 374.659518][T15635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.753128][T11927] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 374.779157][T15635] veth0_vlan: entered promiscuous mode [ 375.316056][ T5844] Bluetooth: hci2: command tx timeout [ 376.217395][T15635] veth1_vlan: entered promiscuous mode [ 376.322904][ T13] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 376.353724][T15635] veth0_macvtap: entered promiscuous mode [ 376.373878][T15635] veth1_macvtap: entered promiscuous mode [ 376.411075][T15635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.437289][T15635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.450119][T15848] netlink: 'syz.0.2818': attribute type 1 has an invalid length. [ 376.457817][T11974] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.467304][T11974] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.481792][T15849] netlink: 'syz.1.2819': attribute type 10 has an invalid length. [ 376.509405][T15849] batman_adv: batadv0: Adding interface: team0 [ 376.516683][T15849] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.543867][T15849] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 376.565208][T11974] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.611627][T15848] bond11: (slave bridge7): making interface the new active one [ 376.634739][T15848] bond11: (slave bridge7): Enslaving as an active interface with an up link [ 376.660399][T11974] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.826741][T11940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.842269][T11940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.936731][T11974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.950740][T11974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.159878][T15888] dvmrp1: entered allmulticast mode [ 377.205249][T15892] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2829'. [ 377.306107][T15897] netlink: 'syz.2.2830': attribute type 1 has an invalid length. [ 377.327001][T15897] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2830'. [ 377.338558][T15899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2828'. [ 377.356812][T15899] netlink: 'syz.3.2828': attribute type 1 has an invalid length. [ 377.388584][T15899] netlink: 'syz.3.2828': attribute type 1 has an invalid length. [ 377.403212][ T5844] Bluetooth: hci2: command tx timeout [ 377.453297][T15899] netlink: 'syz.3.2828': attribute type 2 has an invalid length. [ 377.463846][T15899] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2828'. [ 377.639950][T11940] nci: nci_rsp_packet: unsupported rsp opcode 0xf09 [ 378.380364][T15938] netlink: 'syz.1.2837': attribute type 1 has an invalid length. [ 378.401803][T15938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2837'. [ 378.435569][ T13] net_ratelimit: 15 callbacks suppressed [ 378.435589][ T13] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 378.469054][T15948] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 378.528711][T15952] netlink: 'syz.2.2841': attribute type 1 has an invalid length. [ 378.555619][T15952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2841'. [ 378.574193][ T8921] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 378.580536][T15952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2841'. [ 378.608729][T15952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2841'. [ 378.618251][T15952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2841'. [ 378.631224][T15952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2841'. [ 378.646459][T15957] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode [ 378.676261][T15957] bridge_slave_0: left allmulticast mode [ 378.684814][T15957] bridge_slave_0: left promiscuous mode [ 378.690923][T15957] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.722571][T15965] netlink: 'syz.3.2842': attribute type 10 has an invalid length. [ 378.758713][T15957] bridge_slave_1: left allmulticast mode [ 378.773241][T15957] bridge_slave_1: left promiscuous mode [ 378.779674][T15957] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.810583][T15957] bond0: (slave bond_slave_0): Releasing backup interface [ 378.847581][T15957] bond0: (slave bond_slave_1): Releasing backup interface [ 378.881343][T15957] team0: Port device team_slave_0 removed [ 378.893146][T15957] team0: Port device team_slave_1 removed [ 378.900010][T15957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.907812][T15957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.917600][T15957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.925401][T15957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.934509][T15957] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 378.951112][T15965] mac80211_hwsim hwsim29 wlan1: left allmulticast mode [ 378.968610][T15965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.979115][T15965] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 379.073488][ T13] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 379.082192][T15977] netlink: 'syz.1.2849': attribute type 1 has an invalid length. [ 379.147900][T15990] x_tables: duplicate underflow at hook 2 [ 379.213064][T11927] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 379.372951][T11927] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 379.472886][ T5844] Bluetooth: hci2: command tx timeout [ 379.516287][ T13] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 379.590453][T16021] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 379.639045][T16027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 379.639207][T16024] netlink: 'syz.4.2862': attribute type 1 has an invalid length. [ 379.668194][T16024] netlink: 'syz.4.2862': attribute type 3 has an invalid length. [ 379.676316][T16024] netlink: 'syz.4.2862': attribute type 235 has an invalid length. [ 379.708877][T16032] netlink: 'syz.1.2864': attribute type 1 has an invalid length. [ 379.759114][T16032] 8021q: adding VLAN 0 to HW filter on device bond15 [ 379.788578][T16036] bond15: (slave gretap3): making interface the new active one [ 379.803788][T16036] bond15: (slave gretap3): Enslaving as an active interface with an up link [ 379.890641][T16035] block nbd1: Unsupported socket: should be TCP or UNIX. [ 380.089899][T16058] xt_cgroup: xt_cgroup: no path or classid specified [ 380.235374][T16069] [ 380.237746][T16069] ====================================================== [ 380.244855][T16069] WARNING: possible circular locking dependency detected [ 380.251890][T16069] syzkaller #0 Not tainted [ 380.255837][T16071] netlink: 'syz.2.2876': attribute type 1 has an invalid length. [ 380.256307][T16069] ------------------------------------------------------ [ 380.256317][T16069] syz.4.2874/16069 is trying to acquire lock: [ 380.256328][T16069] ffffffff8f639558 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 380.286225][T16069] [ 380.286225][T16069] but task is already holding lock: [ 380.293757][T16069] ffff8880321d5170 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 380.302979][T16069] [ 380.302979][T16069] which lock already depends on the new lock. [ 380.302979][T16069] [ 380.313372][T16069] [ 380.313372][T16069] the existing dependency chain (in reverse order) is: [ 380.322365][T16069] [ 380.322365][T16069] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 380.330348][T16069] lock_acquire+0x120/0x360 [ 380.335360][T16069] _raw_spin_lock_bh+0x36/0x50 [ 380.340636][T16069] nr_rt_device_down+0x12a/0x720 [ 380.346084][T16069] nr_device_event+0x137/0x150 [ 380.351370][T16069] notifier_call_chain+0x1b6/0x3e0 [ 380.356989][T16069] __dev_notify_flags+0x18d/0x2e0 [ 380.362524][T16069] netif_change_flags+0xe8/0x1a0 [ 380.367991][T16069] dev_change_flags+0x130/0x260 [ 380.373380][T16069] dev_ioctl+0x7b4/0x1150 [ 380.378249][T16069] sock_do_ioctl+0x22c/0x300 [ 380.383383][T16069] sock_ioctl+0x576/0x790 [ 380.388248][T16069] __se_sys_ioctl+0xfc/0x170 [ 380.393363][T16069] do_syscall_64+0xfa/0xfa0 [ 380.398378][T16069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.404795][T16069] [ 380.404795][T16069] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 380.412617][T16069] lock_acquire+0x120/0x360 [ 380.417636][T16069] _raw_spin_lock_bh+0x36/0x50 [ 380.422921][T16069] nr_rt_device_down+0xa9/0x720 [ 380.428298][T16069] nr_device_event+0x137/0x150 [ 380.433575][T16069] notifier_call_chain+0x1b6/0x3e0 [ 380.439287][T16069] __dev_notify_flags+0x18d/0x2e0 [ 380.444836][T16069] netif_change_flags+0xe8/0x1a0 [ 380.450303][T16069] dev_change_flags+0x130/0x260 [ 380.455686][T16069] dev_ioctl+0x7b4/0x1150 [ 380.460523][T16069] sock_do_ioctl+0x22c/0x300 [ 380.465638][T16069] sock_ioctl+0x576/0x790 [ 380.470493][T16069] __se_sys_ioctl+0xfc/0x170 [ 380.475679][T16069] do_syscall_64+0xfa/0xfa0 [ 380.480705][T16069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.487107][T16069] [ 380.487107][T16069] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 380.495004][T16069] validate_chain+0xb9b/0x2140 [ 380.500542][T16069] __lock_acquire+0xab9/0xd20 [ 380.505738][T16069] lock_acquire+0x120/0x360 [ 380.510744][T16069] _raw_spin_lock_bh+0x36/0x50 [ 380.516016][T16069] nr_rt_ioctl+0x390/0xd50 [ 380.520939][T16069] sock_do_ioctl+0xd9/0x300 [ 380.526045][T16069] sock_ioctl+0x576/0x790 [ 380.530887][T16069] __se_sys_ioctl+0xfc/0x170 [ 380.535987][T16069] do_syscall_64+0xfa/0xfa0 [ 380.541012][T16069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.547415][T16069] [ 380.547415][T16069] other info that might help us debug this: [ 380.547415][T16069] [ 380.557644][T16069] Chain exists of: [ 380.557644][T16069] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 380.557644][T16069] [ 380.571472][T16069] Possible unsafe locking scenario: [ 380.571472][T16069] [ 380.578913][T16069] CPU0 CPU1 [ 380.584267][T16069] ---- ---- [ 380.589620][T16069] lock(&nr_node->node_lock); [ 380.594375][T16069] lock(nr_node_list_lock); [ 380.601484][T16069] lock(&nr_node->node_lock); [ 380.608776][T16069] lock(nr_neigh_list_lock); [ 380.613476][T16069] [ 380.613476][T16069] *** DEADLOCK *** [ 380.613476][T16069] [ 380.621622][T16069] 2 locks held by syz.4.2874/16069: [ 380.626819][T16069] #0: ffffffff8f6395b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 380.636312][T16069] #1: ffff8880321d5170 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 380.645968][T16069] [ 380.645968][T16069] stack backtrace: [ 380.651868][T16069] CPU: 0 UID: 0 PID: 16069 Comm: syz.4.2874 Not tainted syzkaller #0 PREEMPT(full) [ 380.651889][T16069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 380.651902][T16069] Call Trace: [ 380.651912][T16069] [ 380.651920][T16069] dump_stack_lvl+0x189/0x250 [ 380.651943][T16069] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.651959][T16069] ? __pfx__printk+0x10/0x10 [ 380.651974][T16069] ? stack_trace_save+0x9c/0xe0 [ 380.651999][T16069] print_circular_bug+0x2ee/0x310 [ 380.652021][T16069] check_noncircular+0x134/0x160 [ 380.652043][T16069] validate_chain+0xb9b/0x2140 [ 380.652069][T16069] __lock_acquire+0xab9/0xd20 [ 380.652086][T16069] ? nr_rt_ioctl+0x390/0xd50 [ 380.652102][T16069] lock_acquire+0x120/0x360 [ 380.652116][T16069] ? nr_rt_ioctl+0x390/0xd50 [ 380.652134][T16069] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 380.652160][T16069] ? nr_rt_ioctl+0x390/0xd50 [ 380.652175][T16069] _raw_spin_lock_bh+0x36/0x50 [ 380.652193][T16069] ? nr_rt_ioctl+0x390/0xd50 [ 380.652208][T16069] nr_rt_ioctl+0x390/0xd50 [ 380.652228][T16069] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 380.652243][T16069] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.652267][T16069] ? apparmor_capable+0x137/0x1b0 [ 380.652290][T16069] ? capable+0x89/0xe0 [ 380.652306][T16069] ? nr_ioctl+0x1b1/0x3b0 [ 380.652330][T16069] sock_do_ioctl+0xd9/0x300 [ 380.652353][T16069] ? __pfx_sock_do_ioctl+0x10/0x10 [ 380.652380][T16069] sock_ioctl+0x576/0x790 [ 380.652401][T16069] ? __pfx_sock_ioctl+0x10/0x10 [ 380.652422][T16069] ? __fget_files+0x3a0/0x420 [ 380.652436][T16069] ? __fget_files+0x2a/0x420 [ 380.652451][T16069] ? bpf_lsm_file_ioctl+0x9/0x20 [ 380.652468][T16069] ? __pfx_sock_ioctl+0x10/0x10 [ 380.652488][T16069] __se_sys_ioctl+0xfc/0x170 [ 380.652508][T16069] do_syscall_64+0xfa/0xfa0 [ 380.652527][T16069] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.652545][T16069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.652561][T16069] ? clear_bhb_loop+0x60/0xb0 [ 380.652578][T16069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.652598][T16069] RIP: 0033:0x7f4ef418eec9 [ 380.652614][T16069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.652628][T16069] RSP: 002b:00007f4ef23ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 380.652646][T16069] RAX: ffffffffffffffda RBX: 00007f4ef43e5fa0 RCX: 00007f4ef418eec9 [ 380.652658][T16069] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 380.652668][T16069] RBP: 00007f4ef4211f91 R08: 0000000000000000 R09: 0000000000000000 [ 380.652679][T16069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.652689][T16069] R13: 00007f4ef43e6038 R14: 00007f4ef43e5fa0 R15: 00007fffb2a58588 [ 380.652707][T16069] [ 383.483614][T11934] net_ratelimit: 28 callbacks suppressed [ 383.483634][T11934] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 383.603098][T11974] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 383.712971][T11927] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 383.822859][ T13] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 383.933196][ T13] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 384.043044][ T13] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 384.152899][T11927] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 384.263015][ T13] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 384.372848][ T13] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 384.482857][ T13] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 388.593275][T11934] net_ratelimit: 36 callbacks suppressed [ 388.593295][T11934] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 388.712808][T11934] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 388.833120][T11934] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 388.943030][T11940] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 389.052960][T11934] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 389.163011][T11934] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 389.272843][T11974] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 389.383116][T11927] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 389.492958][T11927] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 389.602945][T11974] bond9: (slave ip6gretap1): failed to get link speed/duplex