last executing test programs: 5.335946568s ago: executing program 4 (id=5491): syz_emit_ethernet(0x6a, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff17043a73dbde08004500005c0000000000019078ac1e00f7999d01ac1414aa05009078e00000e040f404010000000000730000ac1414bbac141400862900000000000566d281000d6f03057a91f875ccf5bd5d000f6253659c41d7cea461f45f9d37000200000015563b51525158dcd321a46f9b76be9343ed371b54e17e7b6e749404c9498c91aa52e763241782a7b115e152041c68ed23a410c884236109a1400cebb11247768eda34ada3b17f7dd03f10b530b46fad05e6f12b609b5171d34f57f7bd6aa62dab0174f58d9346e6528a05812aa07dd7c1ae580589f97fb4668575c6aa5fefa26c02289a51a1d53686a8dd73cd1a072e3a2910c5684fa70c000000fb35b4f18d0a3518f45b12946e14383ce370e807111ec143a9d4af26fb47b2085f672a6e2f930de994c0550a75d93a2bc4e7874fae98c08a44ebd194f845a0ec6f002dd20476107048dbee039c53b509f603fe05c3a97ee970154ca4e5f73be5cbf8490f678a88887240430a097b4388ed021fe60d62f177382f60edac50c02d11f2cc7fd11d7d53fe9d1f75f1392702795e75652cf9b68031669015ce3bf331b453d989429b6b14b2e704d1a6af426220634b500d479b3facd3b1b5cbec8fa42bc920fc3feaa5a5be8e159c3b86fce6942dc97f3c81168277ffde0f6d92ab09f50772105677fa"], 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe0100, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async) r2 = socket$inet6(0xa, 0x2, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) (async) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9", 0x10}, {&(0x7f0000000780)="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", 0xff}], 0x2, 0x0, 0x0, 0x20043}], 0x1, 0x485c) recvmmsg(r4, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001040)=""/187, 0xbb}, {&(0x7f0000000600)=""/83, 0x53}], 0x2}, 0x400}], 0x1, 0x22, 0x0) (async) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) (async) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r7, 0x10c, 0x2, &(0x7f0000000140), 0x4) (async) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = socket$pppoe(0x18, 0x1, 0x0) tee(r8, r9, 0x1ff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r1, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000940)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xa3, &(0x7f0000000a00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0x38, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xb, 0x1c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='syzkaller\x00', 0x8, 0xbc, &(0x7f0000000800)=""/188, 0x40f00, 0x2, '\x00', r6, @fallback=0x17, r8, 0x8, &(0x7f0000000900)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, r10, r1, 0x7, 0x0, &(0x7f0000000c80)=[{0x5, 0x4, 0x8, 0x4}, {0x1, 0x3, 0xd, 0xb}, {0x3, 0x2, 0x1, 0x4}, {0x5, 0x4, 0xe, 0x2}, {0x2, 0x3, 0xb, 0x4}, {0x5, 0x4, 0x4, 0x3}, {0x3, 0x5, 0x3, 0x2}], 0x10, 0x8}, 0x94) (async, rerun: 32) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 64) recvmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0, 0x29}, {&(0x7f00000000c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) (async, rerun: 64) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x17}, @void, @ipv6=@gre_packet={0x0, 0x6, "e146a7", 0x302, 0x2f, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, {[@srh={0x62, 0xe, 0x4, 0x7, 0xc, 0x10, 0xa1b, [@remote, @dev={0xfe, 0x80, '\x00', 0x23}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @private1, @private1={0xfc, 0x1, '\x00', 0x1}]}, @dstopts={0x2b, 0x3, '\x00', [@ra={0x5, 0x2, 0xfff}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim, @jumbo, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x49, 0x3, [], "5e98c642e320111550cf4e14101e126718ffb9c9f79aeb5e6123157876a20a9ce305c8591fbe82a038a0533e9818008c92b45f68e8cc74233401d79d7181f09c9c7fb1b13c0c2744b9"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0xf98f, 0x6, 0x0], "fc665a8cb631042396539bd4271a3643fd993d648d55c436d13123e65282ae7513e4ae16be681fcb6afd4ff77c701d583c75f3f8fc888858ee53af1bf15447541692d5f557dc8e6eb1c5433607d5c353051dca247245b7ddb91d8f866fa17c4a7c453f99f239d05ce2969da1e035ecde4492f5cd46f809bb7f9884801af9ead8077ca6145c8e0de900b491bde3b250e72e06d89615f3784d00c56f534e6a72cce286e4b0025a28aa90dd76f2a4f77e84"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "5138ab8a348e860174467a49779f408d5e51ea910b5aee30223f162465e20a41dc5703f77ce6c8686770ae62e2a1363674dee15fe529fe94b3247a97fd4873f0ed20a894155402143411031508b8bc112814f911cf1f61a44b7405b2e107a9aa4723a4fbbe96adee20d51ef6899627c93111995a8c40727fbb46cd1b34cd297782a7e102afbc7dbc37a1254e29c16258666236e8e5b7f8e9bde1afb30bffe40a10b44160df85092d6bfed62e5d0ebfc085b8557377833acc5d640e5d16381e10d14c0409516494b408252d605cfe4f7c0fc58b5eb5f34a844d1c8b464d3bee208ca001bec6f761ed49cf6e38e637296e6bf4b85a04b9bad4"}, {0x8, 0x88be, 0xfffffffd, {{0xb, 0x1, 0x9, 0x2, 0x1, 0x1, 0x1, 0x8}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x6, 0x0, 0x0, 0x1, 0x3, 0x5}, 0x2, {0xffffffff, 0x9, 0x2, 0x8, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "4232759e86ab1fca69609daf815455e4474f048893abf13d56b1c8a4126ed9bec9b3f21868ed09"}}}}}, 0x32e) 4.325229229s ago: executing program 4 (id=5511): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, 0xe}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x28}}], 0x1, 0x0) 4.087290936s ago: executing program 4 (id=5517): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) (async) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1ff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d57136639d68b7577553393a9", 0xf1}, {&(0x7f0000000000)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d6d56a03be6caa272b3505e304463179c4d7768d9c3e5c21f3a9963ffde6682e5ecfe30b771e51c8d", 0x47}], 0x2, 0x0, 0x0, 0x2}], 0x1, 0x0) (async) recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/247, 0x199}], 0x1}, 0x7fff}], 0x1, 0x2101, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002100)=ANY=[@ANYBLOB="2800000011000d0927bd700002dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000010c020008001b00ff030000"], 0x28}}, 0x0) 3.882910544s ago: executing program 4 (id=5521): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080202000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) accept4(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000080)=0x80, 0x80000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000100001000000000000000020000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100000008000b400000000028000480240001800b000100657874686472000014000280080001400000000405000200070000000900010073797a3000000000140000001100010000000000000000000700000a0000000000"], 0xc4}}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56565, 0x80000, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0x8}}, [@TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa8, 0x5, 0x1, 0x7, 0x0, 0x7, 0x894a, 0x1}}, {0x6, 0x2, [0xff]}}, {{0x1c, 0x1, {0x7, 0x4, 0x103, 0x7, 0x2, 0x0, 0xb2a7, 0x8}}, {0x14, 0x2, [0x70, 0x8, 0x96, 0x2, 0x8, 0x2, 0x3, 0x7]}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r13, 0x10f, 0x85, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@multicast1, 0x1, 0x0, 0x20, 0x0, [{@multicast1}, {@multicast1}]}}) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r15, 0xfca804a0, 0xe, 0x0, &(0x7f0000000580)="b80022ab98d1db1b883e04000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.67716104s ago: executing program 4 (id=5523): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01030300ffff"], 0x38}, 0x1, 0x0, 0x0, 0x60042800}, 0x40084c0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000003340)=[{0xfffffffffffffffd}, {0x0}], 0x2}, 0x1}], 0x2, 0x2, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) socket(0x10, 0x80002, 0x0) (async) socket(0x200000000000011, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01030300ffff"], 0x38}, 0x1, 0x0, 0x0, 0x60042800}, 0x40084c0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000003340)=[{0xfffffffffffffffd}, {0x0}], 0x2}, 0x1}], 0x2, 0x2, 0x0) (async) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) 3.44296044s ago: executing program 4 (id=5526): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100), 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) recvmsg(r6, &(0x7f0000000400)={&(0x7f0000000200)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f0000000380)=""/76, 0x4c}, {&(0x7f00000004c0)=""/73, 0x49}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000040)=""/29, 0x1d}, {&(0x7f0000000640)=""/237, 0xed}], 0x6, &(0x7f00000008c0)=""/198, 0xc6}, 0x40000000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r7, 0xc10, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1e, 0x3, "375def2be045b847fdff3c4ae55aeb84b8bc1899bdb167203a12"}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004055}, 0x80) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) listen(r8, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x83}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x69}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.903084213s ago: executing program 1 (id=5544): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x46, &(0x7f0000000100)=0x8, 0x4) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req3={0xd, 0x5, 0xdd, 0x5, 0x6, 0xe, 0x4}, 0x1c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000480)=""/217, 0xd9}], 0x1}, 0x10101) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000) 1.850975898s ago: executing program 0 (id=5547): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=@ipv4_newaddr={0x34, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xfe, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xf0000400}}, @IFA_LOCAL={0x8, 0x2, @local}]}, 0x34}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_int(r4, 0x29, 0x21, 0x0, 0x4) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0xa, 0x100c, 0x1}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3a}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES64=r6, @ANYRES8=r3, @ANYRES64=r4, @ANYRESOCT=r4, @ANYRESOCT=r5, @ANYRES32=0x0, @ANYRESOCT=r4, @ANYRES8=r6, @ANYRESOCT=r6], 0x18}, 0x1, 0x0, 0x0, 0xc081}, 0xc810) recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000005740)=""/4100, 0x1004}, {&(0x7f0000000300)=""/130, 0x82}], 0x2}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000780)}, 0x8}], 0x3, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)) 1.562375653s ago: executing program 3 (id=5550): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0xfffffe03, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_IP_DADDR={0x0, 0x19, @broadcast}, @L2TP_ATTR_IP_SADDR={0x0, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40010) 1.392586067s ago: executing program 3 (id=5553): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000480)="336b8dc38b8bd8e24a8a509d14db585de2c8c2ebeaebb81c12ff66955959a58729", 0x21}], 0x1}}], 0x1, 0x801) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) tee(r0, r1, 0x8, 0x9) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14dfff001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800b00010065787468647200001400027d273af63aec29bc882ecc6080080001400000000008000640000000030900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a71196320dbc106d3ff41469861fe6f36e8689fabfdc962789b"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x72}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, 0x0, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x45, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r5, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x14218}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000480)="336b8dc38b8bd8e24a8a509d14db585de2c8c2ebeaebb81c12ff66955959a58729", 0x21}], 0x1}}], 0x1, 0x801) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) tee(r0, r1, 0x8, 0x9) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14dfff001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800b00010065787468647200001400027d273af63aec29bc882ecc6080080001400000000008000640000000030900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a71196320dbc106d3ff41469861fe6f36e8689fabfdc962789b"], 0x7c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x72}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, 0x0, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x45, 0x1}}, 0x20) (async) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r5, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x14218}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) 1.224858228s ago: executing program 3 (id=5555): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'veth1_virt_wifi\x00', {0x1}, 0x4}) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000005, 0x8012, r1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}, {&(0x7f0000001680)="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", 0x19d}, {&(0x7f00000002c0)="71cb0a69cb47342616f44940e98b509847e1a3df20b75f776ce4c2e551a00fc9f9bf32787279ff974748ed19b61152b7499637b05e75226a0f8d0aa623fc84eda21d819cb30653dc35f961f74374b4111f5e9e8e1e0f0ef3e488a5748a497d1289dcd13c396105e333f26811a0e8931e6856e93cfd8147fc8fcd991a7c675a766bec280d121540b1411afb847a6863cfdaef6fd48ba496d45144bdab65a80d89559d08e2e09e34915eb4c7a7818574e09fe94b113c3a3ffda4f7da1696be3ebd5521c2f407f243876c23bd3015da221a599f8f7aaab4dda4f276275c4bed247e4f285b00d5cbb356d2", 0xe9}, {&(0x7f0000001840)="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", 0x1002}, {&(0x7f0000000100)}, {&(0x7f00000004c0)="8095b75703a8b9afe7864649def4d20a6276fc3ceb6bbada396cdcbda5638a32c994ccf5522f748b1e826ca88276b97cfd322dd4223049965c9df3c0e78ce34d9c4e4a6ef72ff513ceb414302f29523bd4ef49b9019a2df0dc06d951da5035fc364d0c09a16a2e9a1758a7820072c6e00a598589dc0b9dfb1ea1ba2d6d27505e821fa3cfb835df236603beed443bd8110bd9a93bdb4480745eacc585333cea2a7d947b6a4157614cf0ad5e3c82e024fe14f1b9cac2fe1d252ca2ef1a514c5855c50c00000000000000586aa5b52ad332692b9a23a24224c5f92dcf878c0e754fd7ad", 0xe2}], 0x6, 0x1) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0xa}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.149203456s ago: executing program 1 (id=5557): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpu.stat\x00', 0x26e1, 0x0) close(r3) (async) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b0b, &(0x7f0000000200)={'virt_wifi0\x00', @random="955375c9b013"}) bind$x25(r3, &(0x7f00000000c0), 0x12) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bind$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 1.075791675s ago: executing program 2 (id=5558): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01052cbd7000fedbdf251d00000008001d000400000008001e00300b000008000100d3"], 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3f}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 957.530533ms ago: executing program 1 (id=5559): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000840)='notify_on_release\x00', 0x2, 0x0) pread64(r1, &(0x7f0000000880)=""/4096, 0x1000, 0xf826) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, &(0x7f0000000280)=0x80, 0x80800) socket$kcm(0x29, 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r7 = socket(0x1d, 0x2, 0x6) getsockopt$nfc_llcp(r7, 0x6a, 0x4, 0x0, 0x200000af) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) connect$nfc_raw(r2, &(0x7f0000000000)={0x27, r6, 0x1, 0x2}, 0x10) (async) connect$nfc_raw(r2, &(0x7f0000000000)={0x27, r6, 0x1, 0x2}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r8, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x401}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}]}, 0x64}, 0x1, 0x0, 0x0, 0x8044}, 0x20008001) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r8, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x401}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}]}, 0x64}, 0x1, 0x0, 0x0, 0x8044}, 0x20008001) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff0000000000000000000000000007010000f8ffffffb702000008000000b70300000000000085000000040000819900850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000500)={'veth1\x00', 0x200}) (async) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000500)={'veth1\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r10}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="c50a00000000000061139c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) (async) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 889.216476ms ago: executing program 2 (id=5560): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x28004014}, 0x4004000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x12ebb12b13bc0159}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x11}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001d00)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xc}, {0x6}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) r7 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r7, 0x110, 0x5, &(0x7f0000000380)=[0x4, 0x4], 0x2) r8 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r8, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40) 888.328456ms ago: executing program 0 (id=5561): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x5, 0x2, 0xa3, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r2, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x3}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xd}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x4}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x80000001}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) (async, rerun: 32) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040810}, 0x20044090) (async, rerun: 32) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) (async, rerun: 32) r5 = socket$tipc(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r4, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000080}, 0x40040) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0) (async) ioctl$FIONCLEX(r0, 0x5450) (async, rerun: 32) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) (rerun: 32) ioctl$BTRFS_IOC_QUOTA_CTL(r7, 0xc0109428, &(0x7f0000000600)={0x1, 0x9}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=@ipv6_delrule={0x74, 0x21, 0x4, 0x70bd26, 0x25dfdbfd, {0xa, 0x10, 0x0, 0xfe, 0x6, 0x0, 0x0, 0x5, 0x30cc56c5b063aa8f}, [@FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x29}}, @FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}}, @FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}, @FRA_DST={0x14, 0x1, @empty}]}, 0x74}, 0x1, 0x0, 0x0, 0x40801}, 0x20000080) (async) getsockopt(r3, 0x3, 0x6, &(0x7f0000000780)=""/169, &(0x7f0000000840)=0xa9) r9 = accept$inet(0xffffffffffffffff, &(0x7f0000000880)={0x2, 0x0, @private}, &(0x7f00000008c0)=0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r9, 0x8982, &(0x7f0000000900)={0x1, 'bridge_slave_1\x00', {}, 0x5}) r10 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000940)) ioctl$sock_netrom_SIOCDELRT(r10, 0x890c, &(0x7f0000000980)={0x0, @default, @bpq0, 0x6a12, 'syz1\x00', @bcast, 0xfff, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) (async) getsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) getsockopt$sock_timeval(r9, 0x1, 0x42, &(0x7f0000000a80), &(0x7f0000000ac0)=0x10) getpeername$netrom(r10, &(0x7f0000000b00)={{0x3, @rose}, [@rose, @null, @default, @rose, @rose, @bcast, @netrom]}, &(0x7f0000000b80)=0x48) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x20040040) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r8, 0x660c) (async) r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000cc0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r11, &(0x7f0000000d00)='memory.events\x00', 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000ec0)={&(0x7f0000000d40)=@l2tp6={0xa, 0x0, 0xff, @empty, 0xffffff80, 0x2}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000dc0)="42579cf24921070b515e90243b0d98bc2c9e3e738d9b2e802a80bdf7942311ddab995dd0665c1f9f6de9fe41fbe255e66d2e826113a9086a225cdac40076da61925fefcc75b20e4d2c2c74d94c54180c1533dde48915e8d2d5191c089077c4ed9f4be8fbca76335d16987d117d52c905c50c662ec800c748b4ab15f9f5cf284b8774", 0x82}], 0x1}, 0x0) 782.000829ms ago: executing program 2 (id=5562): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x1, 0x803, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000002140)={0x0, @in6={{0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x7562fa7}}}, &(0x7f00000000c0)=0x84) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x4a, &(0x7f0000000000), 0x20000000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002d000900fffffffffd3edf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) syz_emit_ethernet(0x165, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x12f, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x19, 0x8, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37ada"}, {0x0, 0x1, "0000000500000000260004"}, {}, {0x0, 0x4, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2d"}, {0x2, 0x9, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a"}, {0x22, 0x6, "b8a3e100906e61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015c8837473"}, {}, {0x0, 0x4, "d5170000dce9674a36da018dff16e7ff6f50ca0ee2ebcac4da3574ab0b8f14c4b7a94fe18e"}]}}}}}}, 0x0) syz_emit_ethernet(0x32ec, &(0x7f00000001c0)={@remote, @random="1578716b9bb8", @void, {@ipv6={0x86dd, @tipc_packet={0x2, 0x6, "9cc704", 0x32b6, 0x6, 0x0, @mcast2, @empty, {[@dstopts={0x32, 0x201, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @generic={0xc, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x10000}]}, @dstopts={0x6c, 0x0, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @dstopts={0x4, 0xa, '\x00', [@ra, @enc_lim={0x4, 0x1, 0x3}, @calipso={0x7, 0x28, {0x0, 0x8, 0x7, 0x0, [0x3, 0xc, 0x7fff, 0xb3ca6f]}}, @calipso={0x7, 0x20, {0x3, 0x6, 0xa, 0xffff, [0x7e66, 0x3, 0x1]}}, @pad1]}, @routing={0x0, 0xc, 0x0, 0x1, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x32}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x89, 0x405, '\x00', [@generic={0xc, 0x1000, "abdd6914f366342dee5ea426d832aa0c6d5725c9333979854de46e347e81d08a535b443d8d7da9642f9e22a63202d366c87829df0da98b9c63a7f6c7682bfe6e7e8bf155c506ab4d9e54c5430f55314f34d3bad96caab010b1c82ff159d4901b8feabd8f563439123600c1232ee365408370abc70d89db57fb50539fab3a82ef140e789bd113503580b77371bb595b3f8ce9dc70e396ad5ec0f04fab1efd24d2d70e45542a8af8da7b1ee2c49b58fc04037943fcb0b5eaa3d48ba69bc78eb9b2841564bfeb06096aaa49234db1baca2f4b6932de023015fdcbf2429960bb6f5ab9406627b34c2922844f9cf803fc401e34d53784647b7963139f53db0629a4752dfdd3bc5139fb586d5bec52b7304e24f22bdc86af018e9809e041790fa49962d000287018b0e6bf76b24febeadd6d3603df40853541d16b8780a93f397af6185c3f206bbeeb981b159f46809e9fe5afcd40a8f49bc7d355e7f7a0d4ea1fd612d0eab31b7c9199bf3979125a9974e6217833b3b40f44a750a5c52da0e00dd1bba67f2a80ac2949c7b4c85e35929aba12d924b58d05e62ddc8653a529eff30a6809f33d51f6ae180e8e2f5e20cf6f338b8cb32c0cb8b79b43af233574e0a5b1851023683f0b6d3b3f5c673cf108c1d8315defda4634471877319c387d16459a0da8821e3e69e38c7d8ca692fdb8258879e75e5882f383169e40243a0e5c9018b0c3534ab85a897ca3f383932d1dc6a790de6b32c582db19f2012f73c5bac9cf1830b3e7467f3b587a5bac45ff54906fae50b768e8ff181e533a051c293bf3aee7b619981165ce0a8f984f03e4066fa886da054612bc4d8c950d32abc7ca119b908d37549b5acff5c1b38c1e7806942b4469f5b4e654f616e6a4a7ae91dc6aff3a7dbd704132b9a8d6efc76c5fa2b4749a33d05e372a38c6ac6eaa90c6609009389dcb797a94b134cb304b96b47f20423f3bc4ccaafca7bfcad6be21b7f5608bc3764a428341f1c9d2437047645745e635f6bbeb75c9e7c4368fb007e72c8ab1ed3fd68aac59847d982ea50ef3d7728526f784f301d517424d6ddc51b0faddf860882cb3820dec5d91bd22e8d56659951c2a064ffb6e442c502e991e5bbcd7792ba5432a1ecc8b46c33c257c248084f81b816391ea779539246d9d45a6bac4ea29eeb7df1b34293aa2a2d6fe1f267b11e3bdee9efd8cde311d2fec2b090daae4d584aec1984cb7a5f9f0f98562f719368dbc69be049de968fea2f4062d1c9ff7fc459266cc973ab58c99f393986e4aa10319bd42a582042430579807a5d999ccd0da533b1d22c353db4bb52b2f664640d77946bf144267061cc3d01f80d35632122aefdf493b9567f843e919ba2cdc8204f72aff51c7e8426f987110287129008cb5203c989f12ae79ffede59982e69d8a11f4638f93876003ecd3cffde7e2da8f1935d6eab0ee25d17dccfc21202e688414b5396b3aa82f0db5f397c87b18dfa54092465b68a98388b86b8a271c9408d61a80895e65e402775f75a3936a1a91a09e9fa1fbcd0413c6cbff9afecc433dd187473ad29e4ac77bc7dde55bb03e2cd43607a7f886088124a0c21a49d0b43ac340b673447365aaa72964bf3f2cc7316640a3b03d40f564c3abe8f35abd8b4e47b3ad7a65e5b68def92b51dcf8b1d31571db2cea7748c94bc805a7d0d148120a6d62065f86aaf58600ef77cf54001d7ce0ecee21ae43729baa8e1482615ff9b9c08dfd5333f517c0ba0f17af5252b16ffc1676b310a70bf313704d0b3dce5c4335c135866d065bf1c2490b4462a8b1f3b558b6ff741c752914f82884e1d29221653e6dfd2916fb8fc8f9e83f181abf1decf56387a5d037b737efc57ef0e614ed6612b080f422de01339bf52b7b2cd8248ada42de3e2e37d311c6d697b05f041882491a177120f5281a21cb095dbc4a4c5fe3bc947befcdc859eb0b34cb4455b57db8603153cb259b0bebf1dd62049dfe0066bd43fcfb928e6cca58840c324e2b2c9d28d27d37919d160f18eae1fa8b53cff92c9ae8e205930c691d5444b9d00ee45bbaf5b85a5aac3a9ab648ab8f957a45498b9b2af10a8495a945a730e778f9338cdd27f034c36cbaeae0f65c50dfbe02e6eac6d6ef5de16ff348ae93fc62e30bd030dee362fa017ca3eaaaa4da8b69e8698317b2a24410ad24fbf1a8d6b63988115a0b15f47e316626f035ca5503c4d0532301a67f968fce5a859b0ce04afe808cea800639f7313e48e25c9180eed03f79dc3a722f0a6df001e59d59d4f57933d1034c06b43e76905ec6a505ee07f5abdfa7b526638e0cf4d9f3ed0c34349b87a37a704f0ee09917935792e6493eb9be921e26cbec03b111b48e63a6a2920fa6190c93a24d231885c7039f25a55c480526bcd5a2ce640e4d1fbef5af25c7a3d84396468f9569b200dacec8582777236f6edb3366306ca4a85c3f4343ff3bc985ac8dc2c175ab7d2ad1ad3863b40ddd036e80a1275670fe2b3a209cdf11455af8da8d49123fbe471cb1d031506711e4be38cab817bcaeb2071474bbf2c6d4f8dbfec909c2a82844f024e45001c64397266632f84e988028cf7ab95195b40ed452cdb666f6ce40408ed609e7edbe40471507400b37022d0aa17b54201afdc424a174f04940ce10dca70b5658361bd8aad1fac087587bdd536ec8d3a887a80f6d2419dcc0dc21e34706ed090c07cb422180fb3b204086b61878ed025878fb3694cc7f13124999fd374d06eff9807ed72cd9f8e74ac1da1034ef5c5eb3fe29bdde912f4e2e06a7e67e2018190ca1e962279784e802364d5dc39d0c1f8a0cadecf4dbdf902f0e8bdb7880aa399157d1fd3c3032f08ace640418477365a97aa1ef2a7a2c410de8c8f3970d341502875a6515441565763b17d2cab02a1614eb30660640793e73027258d95ccd5d104b88411a425789e40acd3ccdfe35cc25477abf7713f39e333d02053b03b06115b2657201cb4d848d4644bfa033d7749dd450a15c2745d6336e211399ae8c2608fa9667bc8e248ca2eb84decdf1a2fcff2eec4560bc2bf5e67bd6ad437a5f0e9e0d9b7cefc0571b834062a1a1a19c7815fc42c9d2be6b8b315a47b7e4516b39a3e957db661ea8b9953153f7ed49329439de85f81afddd34edfef050b083a6016491f61f69be48d4649184b4eb5814052530e674e9cb01f5270116d67556f49ef5d34b679b96f9f65c1b024ced2d1f0dd043f9e193553cd692c7e18c89df4b128b5ec6f9f4512701f3cc5cc730a6cc29b4285f0e3d58da6be50b94c9e3a57ee26e4c6253d5651bac94b37f1701358c10a11f7751c6c6c02a4b69a63a57afab7e2fd94557c2e5a4a4b589ae002065345d3026f7b06adc589696cd049bdc621408d504f6356f94e1fdfde00ce32abe234818cfdf9f33ab573e4f4b13d9dee2d5f2fec562836bd6ff24448efbff7cbe33a094520c7fcfad76be124190b33087bb7465c44c99ded9fe66b2438752596fb59b4491bd7c8cdb0ef1fa634220aef89f8ada55b720ca05be649d69dc53bf89675e990ca16343838b19b08684dbbbc861200ce08307f5d5063245adc72f5f52694d17f109e0241aba0c4ff6084989f40d189e5f1b16bb8c3c77987ce8267be63e0f00b51c959b139f55089bb2daf758cfc8dbad9a7695c230dc9232696866ffb508ff1c29572fb5053abb209ee7a7ab6f2d68830cb38209b74ae8bf7dbe81db0544e8d1b87fc1ef26b28d8e7d351d548a36d49a9c0d047041cec1beafcf5bf68828e4056afc75e8c365006048d63ff81b3383a100f9d19b254b391c77e1c814bf0b4a7984e9a75f652251468427032d2f4952f9c40e3b1d320404670140f7080c5958c67598b124b031c4e36720f0e585be85eb096a0ab167a1ed7f42002241e59ea9c69b17ecf60ba4d074071fde0e88055c347981239a9f0e6a1338268d5840771c5faa65c66160478c8d55bb80ba9c0d267fdc6ffedcc44f3d93edf592cc9846f72447260498c12a6698cd98aa21f79290f6d48643d3f803f69d409e231b5df509b2127441a7b757edb908debf5b8ebadc3a73c4ee19ab6155cd6d8c04b6b94f616264a008bed05a12da4bf78dcced80a3bfdbbcc0f8e12a8eda45bdebd98e4e6f33a8c955dedc36da66888374dae8e66556594061819568287f874a0bcc08bc530af2d7b091b570a4df56df816382dee48fc147cf5bf42abc0f56b49c377a6f605aba2eea93a3d8c10902ddb30b10d15e4efbe52d9322be21d1d691ef242dae7e658a3d0551efb6fd014910f30844e4641c4a06eeec2a4023cc6373de01bf2c5768a4493eaa58b14ffad678be38ccb64b58e9894fb4c8129b13dfaf1b3645e0aed3fc594afddebea28fc49cee3247629cae45113bc2fd6e8432ec8d221170809f425a1809cefda89a7b690c56843b6ad59cca185947da0cf5b4d858212898a6bbd61aa7df9825fb575e06f77011df579e8c79202c453678d6faf0b7edbbdbee45b05566c0505df9b631a54d16bba259ebf9aa3e8b86bb7e6943ceef7339d3e8028ead88f576cc4088b7673ee57ae9713f5fce74e177ecae30129dd8aa86b87bb0acff9326f60e81a939346419167e5f09fc57beaf3c62758760d85ed43b2404e6c93b61cdf108232e6aa81689fa67b14f8f5f5bc82a9d28c374e31125a2038f5de8f5f166441e7b96b7f376a0fd4b12261b76df6660ae5d18513bcd70ba82157cb0f19aae0ff69d05f244d084a0f4dbcba84df71aa2afbc3de48fe6eec3c0f12937b632073767ddd28b42ba8bba16dcb518c38db2a8cd57cbc291e654a6fb57ba8ff28079b98f668a5b606912bd35cf168836197493e7538f454399b40858c67bd5b27dc8fd6f9d119493aad9d54e6ce51a36994ab854448706dfc85864a0ac0c0e7dfbe642eea92762128e3b01e4a01276439b92a0d8120de6337bf5aeba4ad393ffd733c1d20f787c1a1ba588175c2b8c59b08c18108d5bfee7204d9754ed82a2c5bd9d8b633cdc1ff44d39cd11895b4009acf3535920a2b5b4b3d292a6babc32671ffd8dab42082a446484b880e81f1f30b54d6a6eca7aed6c8fae2b6cbb6cd04a51631a397f662b3efec8819be06468a62f3dd0be186eec9423f4b25f633145e543590a699cbd770582ef23b8350d734ea51e31778b9a460f10cc4ad66e456961f2281b5a1d42923b502f215d36b0a409424541dc2a7a6a0a8baf689de4a302e18107535289e353d231cbfb7af564c0f6ee30c65be3dffe11b5bc5a65edbf4f2230683860eebfe003365c93df8638c616c733b04fe45e0fca43a6c3a890763d2e2333c89c3f6004ddb38dc4f658d75cc42c1c6a3aa8fa7923f7d771765d1c80f31a10ea01d6bf013bfdebefe140d73ce1514448f9cc70aaff67771da5241808c8ff13bfa3d1e819e4aa2ebc03e60a7ab74897da2bdb6495f2fefb4d3431850eb267bb4bec17f3bf5175a62c7a66a7c49ef98dc58fc0e03e8a1329ec9672a99fda74204603dc7316f31e1e5c639ef290a1bd7df6233d0190982b24f2b3061df374a4f92cad0e438dbcb01e076cfc89bc48d862c668727e8e6fbc0aa136c9f7b23eb7423bdee21cbf3a9f3c9434699ce109fc33b70f807e733ab0f59ceca43d2af2fe25a8942e7f12b8ad6fc3372b0672cce4d935903cb151d667dd47eb8a063b469080c326da3fce78ed00ec92bf28bc46a2b71b2c1b84b3ae91cbe68b623e89ca8d197bf74c4d9e23fddd15ee5b67432a4dd2653e88dd9ed994628c8bfd4f5528c79422e2213e93292a696bbdc79a5b946b9ff"}, @calipso={0x7, 0x20, {0x0, 0x6, 0x97, 0xb, [0x7738, 0x5df, 0x100000000]}}, @generic={0x8, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x8}, @enc_lim={0x4, 0x1, 0xe}]}, @srh={0x2c, 0x8, 0x4, 0x4, 0xfc, 0x70, 0x3, [@mcast1, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast1}]}, @dstopts={0x73, 0x8, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3}, @jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x28, {0x0, 0x8, 0x10, 0x3, [0x100, 0xfffffffffffffff2, 0x1000, 0x81]}}]}, @dstopts={0x2c, 0x8, '\x00', [@jumbo, @pad1, @ra={0x5, 0x2, 0x7}, @pad1, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x3}]}, @srh={0x25, 0xe, 0x4, 0x7, 0x9, 0x50, 0xffff, [@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @private2, @empty, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], @payload_mcast={{{{{{0x2e, 0x0, 0x0, 0x1, 0x0, 0xb, 0x1, 0x2, 0xb, 0x0, 0x0, 0x3, 0x4, 0x1, 0x8, 0x9, 0x2, 0x4e21, 0x8}, 0x3, 0x4}, 0x2, 0x2}}}, [0x0, 0x0]}}}}}}, &(0x7f0000000000)={0x1, 0x3, [0xc4f, 0xe6c, 0x85a, 0xef0]}) 685.655955ms ago: executing program 2 (id=5563): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000000)=ANY=[], 0x6) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001540)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB='.\x00'/12, @ANYRES32, @ANYBLOB="a1487a625cab65a6574994e802cb206a129c8bdbc019ffad7dee52392a657aecf9079d17fcc622f50fb39783143a560764450790d479f9629831c2f0764a133111aef41b48c9b5dca176ca7ee3e8b602addcbad942e65a4abdfe64b71423fff24b6928eed48df65a17f075ae1e66d48756a448e742e1ec3ae425459574b43569fe57290c32c297", @ANYRES64=0x0], 0x20) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000000340)=0x7e, 0x4) close(0x3) 635.259575ms ago: executing program 0 (id=5564): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073597a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c00014000000000000000002c0001800a0001006c696d69740000001c0002800c00024000000000100000000c0001"], 0x110}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x1dc, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x777}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1681}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6ad}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x84}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3b54}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}]}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5c97}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x40}, 0x4008814) 603.901208ms ago: executing program 1 (id=5565): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_TXQLEN={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x4c}}, 0x0) 461.617056ms ago: executing program 0 (id=5566): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0xffffffff}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x9, 0x20}, 0xc) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x562}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r6, 0x8c, &(0x7f0000000480)}, 0x8) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1c, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x1, 0xb, 0x6, 0x8, 0xffffffffffffffe0, 0x1}]}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x8a, &(0x7f00000002c0)=""/138, 0x41100, 0x77, '\x00', 0x0, @fallback=0xa, r1, 0x8, &(0x7f00000001c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xb, 0x7bee, 0x1}, 0x10, 0xffffffffffffffff, r2, 0x4, &(0x7f0000000680)=[r3, r4, r5, r6, 0xffffffffffffffff, r7], &(0x7f00000006c0)=[{0x0, 0x4, 0x2, 0x8}, {0x4, 0x5, 0xf, 0x1}, {0x0, 0x3, 0xd, 0x1}, {0x3, 0x5, 0xe, 0x6}], 0x10, 0xa}, 0x94) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r8, 0x0, 0x0, 0x20000080, &(0x7f00000000c0)={0xa, 0x4e28, 0x80000204, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x12}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="180004000500ff000008e802ee758920e8"], 0x10) 343.308264ms ago: executing program 2 (id=5567): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/127, 0x7f}], 0x2}}], 0x2, 0x10, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0xfffffffe}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="05b38ddf6337f9c05a727a34000000000101040000000000000000020000001c0018800800014000000000080002400000000008"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0501fffffffffcdbdf252e00000008000300", @ANYRES32=r7, @ANYBLOB="0a0034000202020202020000180049000bac0f0005ac0f0005ac0f00bf"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x2, 0x80805, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb0100183000008030000000000300000000020000000200000000000000000000000000000903000000070000000000000c00000000000000000000002e00bc926471dca4439b98e584d2203d1aae0033a976ac237e67f6077925c2d4fbc0f67bfc9dec378c79b174b18def90e32836f3982815cea76d0be56d2b3359141dc1336902f467fa"], 0x0, 0x51}, 0x20) sendmmsg$inet(r9, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) close(0x3) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017800400ad0014"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 337.212532ms ago: executing program 0 (id=5568): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1}, [@FRA_DST={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x156, &(0x7f0000000180)={@remote, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x120, 0x6, 0x0, @remote, @local, {[@hopopts={0x0, 0xc, '\x00', [@hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x20, {0x1, 0x6, 0x7, 0x4c, [0x3, 0x2, 0x7]}}, @hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0x1}, @generic={0x7, 0xf, "f99a077c99ff753376a448fd418299"}]}, @fragment={0x3c, 0x0, 0xe, 0x0, 0x0, 0x6, 0x64}, @routing={0x0, 0xc, 0x2, 0x10, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x34}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}]}], {{0x0, 0x4e22, r2, 0x41424344, 0x0, 0x2, 0x10, 0xc2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}, @fastopen={0x22, 0x10, "767f478e482ce487d02646ff770a"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x40, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}}}}}}}}, 0x0) 332.965128ms ago: executing program 1 (id=5569): r0 = socket(0x21, 0x6, 0xd) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x74}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c001}, 0x200000d0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0xf808e7711b7fe459) (async) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0xf808e7711b7fe459) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x68}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8904}, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x214, r3, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x3017}]}, @NL80211_ATTR_IE={0x1b1, 0x2a, [@preq={0x82, 0x36, {{0x0, 0x0, 0x0, 0x0, 0x1}, 0x9, 0x6, 0x6, @device_b, 0x8, @value=@broadcast, 0x57, 0x1, 0x2, [{{0x1, 0x0, 0x1}, @device_b, 0x3}, {{}, @broadcast, 0x2}]}}, @peer_mgmt={0x75, 0x18, {0x1, 0x6, @val=0xf, @val=0x32, @val="8ba0fa9ca7ec795e9faebf1589a4e175"}}, @mesh_id={0x72, 0x6}, @tim={0x5, 0xad, {0xb, 0x32, 0x6, "1e9160dc42012121b7b50b5f0bc1ed9f899c8f8849199ff0f18cb7d54fe743a43f94bc8085f09b5a3d7e42571d4769be6f0bd4ec4871b3aa234700a6efa453bf1a36e134cf4de1cb73520265626c9b16a519c71a218291be831bb44df86b519ca9ed5222b216b7294f02dd6f2e26cb4f9e2373bc53c7edd622eb403d0756a2f6c769d5bc0dcf4bc664ce50c021ef4bd692bca6dba312dc71854c8245cab7447116e0aee91ac8319820fc"}}, @random_vendor={0xdd, 0x71, "cd4884b88d95c59fd0102f1603d16ed01a72b7c82e160ef4e3598a80e0320078b3ef2a623a71ead36a95397c7ca70d96c631332e22c86afda2e19ec3627a184ba4dcb28adf39c42f6a634faf1d34de5496975c77dbededfe7cf2fe48972fb64a00ff0a8871e36bf245a7f38f7e3d22b31d"}, @link_id={0x65, 0x12, {@initial, @broadcast}}, @channel_switch={0x25, 0x3, {0x1, 0x4, 0x40}}, @mic={0x8c, 0x10, {0xb7, "d6dcf8ecadb9", @short="5052c7e79173ae8c"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x0, 0xaf, 0x5}}]}, @NL80211_ATTR_IE={0x3b, 0x2a, [@random={0x2, 0x35, "558190c63f8e03ac9f57b96467a63d48ec3626263667f2fd55dc9d1d51f5e9615016aea8c7633abc084e5f628ea9734a64fa588948"}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x4}]}, 0x214}, 0x1, 0x0, 0x0, 0x800}, 0x4000040) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000006c0)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000700)={0x7, 'hsr0\x00', {0x1}, 0x7ff}) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000740)={0x0, 0x26}, 0x2) sendto$inet6(0xffffffffffffffff, &(0x7f0000000780)="062b59e3bda86d8c7129652e0fbd0bc2bd", 0x11, 0x4000, &(0x7f00000007c0)={0xa, 0x4e20, 0xe, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000800)="0fabfbbf81d63ce437412ca2b4242e1224e24d2f2a5e3e95e678f250f08d8d1246fc3a7a236eecd09f0dff9c7faf026a38e4d4e6f375eb76cd5410d615d5f1dcce4581e521f4081629703b9286b9a0e14a6e360ee1a1a99cb854322ab9ae31e222fbcac89c29a465047c56c395ccf6b9dba5fc2d", 0x74}, {&(0x7f0000000880)="90e9a53b8899591b0bb63d5ea7a9b1eb3d84da4194892738a5ee96f4b7e5e947349332e4584aa5077fc08176bd8a62c25bb544108c19f7d19120858abec2937d5ed01059c921498cf32a18221c7f982d81bb25f574e8ab99d3f593cb3bd5e1209d11abecbf7c815582f0afeff00b3b703d", 0x71}, {&(0x7f0000000900)="52b02b4f12b864bb3a0d0f2b486037702d39a43df1e57dacf469013f8fdc32bc1b27ce0c64c4bfc92f9ed66dd440af1c1990b2a121116c7a7ce5745e3ea06eead5bbe3d23505d57b789cd68bca66741f0e0ccbcda4f80f3bcfeb5e073eb44e7d033fd5e171cda180a91751c1e56af946188b726659dfc286c35e3469902e2b02bf96a93d78113c1377c6ce4015d518b2ec270f134ed6ed498ad48af631e33e3420de1beae14a45400b46016b4fa52a188980c04d5fdb5589f10dc2876585881b45a86153b04724bc33c6d9c224e95eb85af1144f5bdaff4487df", 0xda}, {&(0x7f0000000a00)="4637f79c2d03b0c6736293ac3c6d7ee44e925b55c0b67745876f715fe013ade9acace8c17b36dd08a9ec1863678f5ef8a7ee19bf47", 0x35}], 0x4}}, {{&(0x7f0000000a80)=@in={0x2, 0x4e20, @broadcast}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000b00)="ffacbc54a238acf8bb55c8e4ea95892c2e25da35c92f5092e91ca88bba18d030cf773c3a33879ede813542ba3962bb7498d5f3ddb3049418cc42c5a91c1288ef7261f26a9f88af1b96b21ca54049f11cc961017f5335f826979cfa3cba858b3b2df2b1219dca5009217cf34c23bc83744bb737e5b29fdf23d4b5319c29794b32aad43dffbf01c386f4154af6d0f7b827cc2a62ff4f1794bfe1bd9e4221a197cd11636a93b65e3fbab8b2d5f3d94475ac11ec595d6a3fc6a140224d27e8ce2a00d62cfcf051", 0xc5}], 0x1, &(0x7f0000000c40)=[{0xc0, 0x10a, 0x2fb0, "02bf8f26e47cf85b66dc7b2656492848411b9004336783b59d8920aaa3c529ea133cb77b33b61862e60da4f11f2bef589a6b4c09603a1586d971e71c2b558123f3d1ee303d737ebe8b1df76afbbc566741fb7ea99929e03d087f1fbf8377aa70c541b9d4e66d094c1b1f30d2e30208fc64cb88fa7c6ae60ef8059c66cbf3a92e65e1d7b2daebb2a40eb0e6f8ffd8ec2876a743b02caddedb97f7b5aad72680db6abff3f737d61f59c159ef"}], 0xc0}}, {{&(0x7f0000000d00)=@caif, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000d80)="c1fd6ace725b6d79c09b07fdb51204f7541fd841c559a77541b3c035828e05f94911a87a815a54d4c29ffc468d6bbd77497f305255b2bf88b3279d8014df532d495c3a36a4174a610186e7822afc10a39eace02a59ac44dc503ec976502dd819a7a4c95736bb656d3418d08ececa37d6ad95ba34fdc14554707c884ed472f4126d4805733ce6522cd0d5ff259fd263e83663eadcfa3c05945898d36672862c43f0f4ebc345fa8e564b0e6a3f13ede44025cf06e8e6f598822613d5a218b35b781cb73392664d7cc845ddcc64efa40979820f1840d3f8b159ba6d2c552620379f97c580", 0xe3}, {&(0x7f0000000e80)="d5c02dc8083dba60c4eb3ce7c6ae0c666ff2e40aae1eb9ecf436b17039dacd5a2ee3a108120596d396088cde10f2bde4bd5fe35f23b6184cc5209d9469", 0x3d}, {&(0x7f0000000ec0)="bba9f595e8b95c192b0036049733b6ae4d05f65f694c50aee7b0c46d3bb3c6a169f76e66c77da3e89584ca72d686684eec8760c088ab081e115a996fa4985126d7a7dba0555e3531eb775bc8456125481fcf00ea771048867d0cc986d930e00fae9fb2dbbb4fef159441395516307413124f1c211cbc002192f4de7e7252e0cb4542f37f43d62602ac10bfe84f51", 0x8e}, {&(0x7f0000000f80)="e5a07457ab5ba4f217a7a985a472069f3b4850fde9dfd02f8f2f341919a00b3f9b", 0x21}, {&(0x7f0000000fc0)="66cf3bad6ab39896f2b1bb15dcae3c9120271550741315830b59c8a7d07c842f493839095e151c24ce2e2c26f36a8f7b736072c0db", 0x35}, {&(0x7f0000001000)="54fafe2c11e5a90476d01fcd127273ec08f8594a88538d8d8898f0fe9f0c4f3877794486ba81e1be5f609fca57ad14e02f2b6c59242b763ad30b44a51f86e3c6fd0cb665bd05dfe4ced1e6cb5782344148e2d6c8ac2268bd3dbe0c16657971b16af1f89b185a9cd6d8ed3b2a34890443c7bc791de16efd31047c05fec68bf9d92fe2a09862c6505ccf2f4343dd9d748bba48be7413d604a446b911c431a1bea8ccfe25a79681bcf69404fe1b54b48940860c052e55fd71022576927a9f", 0xbd}], 0x6, &(0x7f0000001140)=[{0x70, 0x102, 0x6, "d3e29cd735a856fff2370f71f25ad4383324e3ce9e74902eb7506d7581a203a653584169fed9c906e81ff3dfe7c443361c7a2f2e1c040ac3c6ae4d0640319326bbeadd92d74d23a277c671eeb10ef41ada9850228bb3c001a9b205"}, {0x10, 0x11, 0x6}], 0x80}}], 0x3, 0x880) (async) sendmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000800)="0fabfbbf81d63ce437412ca2b4242e1224e24d2f2a5e3e95e678f250f08d8d1246fc3a7a236eecd09f0dff9c7faf026a38e4d4e6f375eb76cd5410d615d5f1dcce4581e521f4081629703b9286b9a0e14a6e360ee1a1a99cb854322ab9ae31e222fbcac89c29a465047c56c395ccf6b9dba5fc2d", 0x74}, {&(0x7f0000000880)="90e9a53b8899591b0bb63d5ea7a9b1eb3d84da4194892738a5ee96f4b7e5e947349332e4584aa5077fc08176bd8a62c25bb544108c19f7d19120858abec2937d5ed01059c921498cf32a18221c7f982d81bb25f574e8ab99d3f593cb3bd5e1209d11abecbf7c815582f0afeff00b3b703d", 0x71}, {&(0x7f0000000900)="52b02b4f12b864bb3a0d0f2b486037702d39a43df1e57dacf469013f8fdc32bc1b27ce0c64c4bfc92f9ed66dd440af1c1990b2a121116c7a7ce5745e3ea06eead5bbe3d23505d57b789cd68bca66741f0e0ccbcda4f80f3bcfeb5e073eb44e7d033fd5e171cda180a91751c1e56af946188b726659dfc286c35e3469902e2b02bf96a93d78113c1377c6ce4015d518b2ec270f134ed6ed498ad48af631e33e3420de1beae14a45400b46016b4fa52a188980c04d5fdb5589f10dc2876585881b45a86153b04724bc33c6d9c224e95eb85af1144f5bdaff4487df", 0xda}, {&(0x7f0000000a00)="4637f79c2d03b0c6736293ac3c6d7ee44e925b55c0b67745876f715fe013ade9acace8c17b36dd08a9ec1863678f5ef8a7ee19bf47", 0x35}], 0x4}}, {{&(0x7f0000000a80)=@in={0x2, 0x4e20, @broadcast}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000b00)="ffacbc54a238acf8bb55c8e4ea95892c2e25da35c92f5092e91ca88bba18d030cf773c3a33879ede813542ba3962bb7498d5f3ddb3049418cc42c5a91c1288ef7261f26a9f88af1b96b21ca54049f11cc961017f5335f826979cfa3cba858b3b2df2b1219dca5009217cf34c23bc83744bb737e5b29fdf23d4b5319c29794b32aad43dffbf01c386f4154af6d0f7b827cc2a62ff4f1794bfe1bd9e4221a197cd11636a93b65e3fbab8b2d5f3d94475ac11ec595d6a3fc6a140224d27e8ce2a00d62cfcf051", 0xc5}], 0x1, &(0x7f0000000c40)=[{0xc0, 0x10a, 0x2fb0, "02bf8f26e47cf85b66dc7b2656492848411b9004336783b59d8920aaa3c529ea133cb77b33b61862e60da4f11f2bef589a6b4c09603a1586d971e71c2b558123f3d1ee303d737ebe8b1df76afbbc566741fb7ea99929e03d087f1fbf8377aa70c541b9d4e66d094c1b1f30d2e30208fc64cb88fa7c6ae60ef8059c66cbf3a92e65e1d7b2daebb2a40eb0e6f8ffd8ec2876a743b02caddedb97f7b5aad72680db6abff3f737d61f59c159ef"}], 0xc0}}, {{&(0x7f0000000d00)=@caif, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000d80)="c1fd6ace725b6d79c09b07fdb51204f7541fd841c559a77541b3c035828e05f94911a87a815a54d4c29ffc468d6bbd77497f305255b2bf88b3279d8014df532d495c3a36a4174a610186e7822afc10a39eace02a59ac44dc503ec976502dd819a7a4c95736bb656d3418d08ececa37d6ad95ba34fdc14554707c884ed472f4126d4805733ce6522cd0d5ff259fd263e83663eadcfa3c05945898d36672862c43f0f4ebc345fa8e564b0e6a3f13ede44025cf06e8e6f598822613d5a218b35b781cb73392664d7cc845ddcc64efa40979820f1840d3f8b159ba6d2c552620379f97c580", 0xe3}, {&(0x7f0000000e80)="d5c02dc8083dba60c4eb3ce7c6ae0c666ff2e40aae1eb9ecf436b17039dacd5a2ee3a108120596d396088cde10f2bde4bd5fe35f23b6184cc5209d9469", 0x3d}, {&(0x7f0000000ec0)="bba9f595e8b95c192b0036049733b6ae4d05f65f694c50aee7b0c46d3bb3c6a169f76e66c77da3e89584ca72d686684eec8760c088ab081e115a996fa4985126d7a7dba0555e3531eb775bc8456125481fcf00ea771048867d0cc986d930e00fae9fb2dbbb4fef159441395516307413124f1c211cbc002192f4de7e7252e0cb4542f37f43d62602ac10bfe84f51", 0x8e}, {&(0x7f0000000f80)="e5a07457ab5ba4f217a7a985a472069f3b4850fde9dfd02f8f2f341919a00b3f9b", 0x21}, {&(0x7f0000000fc0)="66cf3bad6ab39896f2b1bb15dcae3c9120271550741315830b59c8a7d07c842f493839095e151c24ce2e2c26f36a8f7b736072c0db", 0x35}, {&(0x7f0000001000)="54fafe2c11e5a90476d01fcd127273ec08f8594a88538d8d8898f0fe9f0c4f3877794486ba81e1be5f609fca57ad14e02f2b6c59242b763ad30b44a51f86e3c6fd0cb665bd05dfe4ced1e6cb5782344148e2d6c8ac2268bd3dbe0c16657971b16af1f89b185a9cd6d8ed3b2a34890443c7bc791de16efd31047c05fec68bf9d92fe2a09862c6505ccf2f4343dd9d748bba48be7413d604a446b911c431a1bea8ccfe25a79681bcf69404fe1b54b48940860c052e55fd71022576927a9f", 0xbd}], 0x6, &(0x7f0000001140)=[{0x70, 0x102, 0x6, "d3e29cd735a856fff2370f71f25ad4383324e3ce9e74902eb7506d7581a203a653584169fed9c906e81ff3dfe7c443361c7a2f2e1c040ac3c6ae4d0640319326bbeadd92d74d23a277c671eeb10ef41ada9850228bb3c001a9b205"}, {0x10, 0x11, 0x6}], 0x80}}], 0x3, 0x880) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) getsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000001280), &(0x7f00000012c0)=0x4) recvfrom$phonet(r0, &(0x7f0000001300)=""/161, 0xa1, 0x22040, &(0x7f00000013c0)={0x23, 0x4, 0x5, 0x5}, 0x10) (async) recvfrom$phonet(r0, &(0x7f0000001300)=""/161, 0xa1, 0x22040, &(0x7f00000013c0)={0x23, 0x4, 0x5, 0x5}, 0x10) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000001400), &(0x7f0000001440)) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000015c0)={&(0x7f00000014c0)={0xc4, r3, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x21, 0x7e, @random="bf9215570dec73208de8f0151cf2ee651c69124254308dae5bf6cb2702"}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x500}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}], @NL80211_ATTR_BSS_BASIC_RATES={0x1f, 0x24, [{0x60, 0x1}, {0x24}, {0x30, 0x1}, {0x3, 0x1}, {0x6}, {0xc, 0x1}, {0x60}, {0x60, 0x1}, {0x5, 0x1}, {0x4}, {0x6c, 0x1}, {0x1, 0x1}, {0x30, 0x1}, {0x6}, {0x12, 0x1}, {0x4}, {0x60}, {0x6}, {0x6, 0x1}, {0x16, 0x1}, {0x2, 0x1}, {0x43}, {0x60, 0x1}, {0x1b, 0x1}, {0x34}, {0x2}, {0x6}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x1, 0x4, 0x0, {0x1, 0x3, 0x0, 0x8}, 0x800, 0x7, 0x2}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x8100) (async) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000015c0)={&(0x7f00000014c0)={0xc4, r3, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x21, 0x7e, @random="bf9215570dec73208de8f0151cf2ee651c69124254308dae5bf6cb2702"}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x500}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}], @NL80211_ATTR_BSS_BASIC_RATES={0x1f, 0x24, [{0x60, 0x1}, {0x24}, {0x30, 0x1}, {0x3, 0x1}, {0x6}, {0xc, 0x1}, {0x60}, {0x60, 0x1}, {0x5, 0x1}, {0x4}, {0x6c, 0x1}, {0x1, 0x1}, {0x30, 0x1}, {0x6}, {0x12, 0x1}, {0x4}, {0x60}, {0x6}, {0x6, 0x1}, {0x16, 0x1}, {0x2, 0x1}, {0x43}, {0x60, 0x1}, {0x1b, 0x1}, {0x34}, {0x2}, {0x6}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x1, 0x4, 0x0, {0x1, 0x3, 0x0, 0x8}, 0x800, 0x7, 0x2}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x8100) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000017c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0xb08af6fd2f598a40}, 0xc, &(0x7f0000001780)={&(0x7f0000001680)={0xc8, r1, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x59cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20004005) (async) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000017c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0xb08af6fd2f598a40}, 0xc, &(0x7f0000001780)={&(0x7f0000001680)={0xc8, r1, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x59cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20004005) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x20, r3, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x3d}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8010) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x28, r3, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x30}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40015}, 0x1) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000001a00), &(0x7f0000001a40)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001ac0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001b00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001c00)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x5c, r3, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x755}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x531}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6b3}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x66}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_CAPABILITY={0x6}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x44010) (async) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001c00)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x5c, r3, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x755}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x531}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6b3}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x66}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_CAPABILITY={0x6}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x44010) bind$rxrpc(r0, &(0x7f0000001c40)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @private2, 0x7f}}, 0x24) r7 = accept$alg(r0, 0x0, 0x0) read$alg(r7, &(0x7f0000001c80)=""/1, 0x1) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000001cc0)={0x87, 0x2, '\x00', [@hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x9}]}, 0x20) (async) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000001cc0)={0x87, 0x2, '\x00', [@hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x9}]}, 0x20) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000001d00)=0x1) 286.470441ms ago: executing program 3 (id=5570): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0100001000130700000040fcdbdf2520010000000000000000000000000000ac1414aa0000000000000000000000000000c2904e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1e0001000000000000000000000000000000fe32000000ff020000000000000000000000000001000000000000000000000000000000020000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd7000043500000a000000500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a0c001c"], 0x15c}, 0x1, 0x0, 0x0, 0xc84}, 0x2000) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x5c, r3, 0x5, 0x0, 0x0, {0x6, 0x74, 0x600}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x2, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2={0xff, 0x7, '\x00', 0xa}}]}, 0x5c}, 0x1, 0xffffffff00000003}, 0x0) listen(r1, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r4) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r5, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x27}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x4) r6 = accept4(r1, 0x0, 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x2c, r9, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) sendto$inet(r6, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) r11 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'aegis128-generic\x00'}}}, 0xe0}}, 0x0) sendmsg$nl_crypto(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r6, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) sendmmsg$inet6(r6, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x4000000000001de, 0x4) close(r6) 191.321348ms ago: executing program 2 (id=5571): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="611076000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x5c, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0xfffffffffffffffd, 0x2, @TCA_ETF_PARMS={0x10}}}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10}}}]}, 0x5c}}, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) sendmsg$NL80211_CMD_SET_BEACON(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)={0x20, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xa, 0xe, [@ext_channel_switch={0x1c, 0x4, {0x1, 0x0, 0x9d, 0x7}}]}]}, 0x20}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000210a011d29ca1e668192a400020000000c00034000000000000000000900020073797a3200000000090001"], 0x38}}, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x24008004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000580)=@ringbuf, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x401}, 0x10}, 0x90) 82.957284ms ago: executing program 1 (id=5572): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010004200000000000000b0000000c000580040001"], 0x20}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000000180)={0x28f, 0x0, '\x00', 0x0, &(0x7f0000000440)}) sendmmsg$alg(r3, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x895}], 0x1, 0x24002894) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r3) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100201}, 0xc, &(0x7f00000003c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES16=r9, @ANYBLOB="00042bbd7000fde9df250400000014000100fc010000000000000000000000000000100004000500000000080000050000000800030000008000"], 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004) getsockopt$sock_timeval(r8, 0x1, 0x1, &(0x7f0000000140), &(0x7f0000000200)=0x10) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r10, &(0x7f0000000100)={0x1f, 0x7, @none, 0x73, 0x1}, 0xe) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xa8, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff886411004048633321fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc04308", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600) 80.403739ms ago: executing program 3 (id=5573): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffff}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x19, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf4ae, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}, @ringbuf_query, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}, @alu={0x4, 0x1, 0x2, 0x5, 0x6, 0x0, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8001}]}, &(0x7f0000000440)='syzkaller\x00', 0x7fffffff, 0x14, &(0x7f0000000480)=""/20, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000500)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000540)=[{0x1, 0x4, 0x10, 0x9}, {0x1, 0x3, 0xb, 0x7}, {0x4, 0x1, 0x0, 0x3}, {0x4, 0x1, 0x9}], 0x10, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000300)='page_pool_state_release\x00', r3, 0x0, 0x2}, 0x18) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x68, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4) getpid() ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wpan0\x00', 0x0}) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x6c, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40044}, 0x40) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, r10, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c080}, 0x1) write$cgroup_subtree(r7, &(0x7f0000000b00)={[{0x2b, 'blkio'}, {0x2b, 'freezer'}, {0x2b, 'hugetlb'}, {0x2b, 'blkio'}, {0x2d, 'net_cls'}, {0x2d, 'rdma'}, {0x2b, 'cpuset'}, {0x2d, 'cpu'}]}, 0x3c) socket$tipc(0x1e, 0x2, 0x0) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r9) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r9, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, r11, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}, @NL802154_ATTR_CCA_ED_LEVEL={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x10}]}, 0x48}, 0x1, 0x0, 0x0, 0x48001}, 0x20000000) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d00)={0x120, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80, 0x40}}}}, [@NL80211_ATTR_IE={0xff, 0x2a, [@ibss={0x6, 0x2, 0x8000}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x6, 0xf4, @device_b, 0xb809, @value, 0x6, 0x0, @device_b, 0x8}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x8, 0x10, @device_b, 0x80000000, @value=@broadcast, 0x1, 0xd10, @device_b, 0x7ff}}, @fast_bss_trans={0x37, 0x66, {0x40, 0x1, "983dad5e01d0cee925d224b4d3225fcf", "743e50e04df52d656f82275f6558553a626ef2601c270feb8e670bffc1b04f53", "d220a91cd40197043188dd880ced7c7f5449a4b0b4165ee487c48241c33dbfbb", [{0x2, 0x12, "8f6e222e282023601605185286fe681d8a1c"}]}}, @mesh_id={0x72, 0x6}, @rann={0x7e, 0x15, {{0x0, 0x41}, 0x8, 0x7, @device_b, 0xa5f3, 0x3, 0x10000}}, @mic={0x8c, 0x10, {0x393, "3ccb5313c9f2", @short="39ecf201b9277757"}}, @cf={0x4, 0x6, {0x8, 0x7, 0x7e83, 0x9}}, @gcr_ga={0xbd, 0x6}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f00), r9) sendmsg$NFC_CMD_SE_IO(r12, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r13, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004014}, 0x20000000) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r14, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14, 0x3, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000001300)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001140)={0x17c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_NAT_SRC={0xcc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010101}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}]}, @CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffff}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_LABELS_MASK={0x1c, 0x17, [0x6, 0x2fb9, 0x4, 0x7, 0x0, 0x3ff]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x81}, 0x4) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x1c, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 79.983173ms ago: executing program 0 (id=5574): syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[], 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x805}, 0x40400d0) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x4}, @cswp={0x58, 0x114, 0x7, {{0x0, 0x4}, &(0x7f0000000800)=0x85, &(0x7f0000000840)=0xe34, 0xe0, 0x99a9, 0x7, 0x1ff, 0x60, 0x4}}], 0x70, 0x810}, 0x4000000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x1}, 0x50) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x24004044) (async) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f00000006c0)={{&(0x7f0000000480)=""/42, 0x2a}, &(0x7f00000004c0), 0x4}, 0x20) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000fedbdf2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYRES8=r5, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) (async) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000400)={@empty, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb, 0x40, 0x5, 0x0, 0x7, 0x800080, r7}) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r9, 0x808000}, 0x8) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000005c0)={r9, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x5, 0x1, 0x9, 0x5, 0x1ff}, &(0x7f0000000680)=0x98) (async) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) 0s ago: executing program 3 (id=5575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x10, @private2, 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9b5d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000001700)="92", 0x1}], 0x1}}], 0x2, 0x4000090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) shutdown(r1, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x48, 0x0, 0x1, 0x5, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x48}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048000}, 0x20004000) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYRES64=r3], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) kernel console output (not intermixed with test programs): sm_socket_sendmsg+0x9/0x20 [ 485.807620][T17671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.807641][T17671] __sock_sendmsg+0x21c/0x270 [ 485.807674][T17671] ____sys_sendmsg+0x505/0x830 [ 485.807703][T17671] ? __pfx_____sys_sendmsg+0x10/0x10 [ 485.807738][T17671] ? import_iovec+0x74/0xa0 [ 485.807766][T17671] ___sys_sendmsg+0x21f/0x2a0 [ 485.807792][T17671] ? __pfx____sys_sendmsg+0x10/0x10 [ 485.807858][T17671] ? __fget_files+0x2a/0x420 [ 485.807875][T17671] ? __fget_files+0x3a0/0x420 [ 485.807905][T17671] __x64_sys_sendmsg+0x19b/0x260 [ 485.807932][T17671] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 485.807976][T17671] ? do_syscall_64+0xbe/0x3b0 [ 485.808001][T17671] do_syscall_64+0xfa/0x3b0 [ 485.808018][T17671] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.808048][T17671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.808068][T17671] ? clear_bhb_loop+0x60/0xb0 [ 485.808093][T17671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.808113][T17671] RIP: 0033:0x7f296d38ebe9 [ 485.808132][T17671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.808150][T17671] RSP: 002b:00007f296e123038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.808171][T17671] RAX: ffffffffffffffda RBX: 00007f296d5c6090 RCX: 00007f296d38ebe9 [ 485.808186][T17671] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000008 [ 485.808198][T17671] RBP: 00007f296d411e19 R08: 0000000000000000 R09: 0000000000000000 [ 485.808211][T17671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.808223][T17671] R13: 00007f296d5c6128 R14: 00007f296d5c6090 R15: 00007ffc1b218708 [ 485.808257][T17671] [ 485.808265][T17671] Mem-Info: [ 486.199676][T17671] active_anon:4614 inactive_anon:0 isolated_anon:0 [ 486.199676][T17671] active_file:2694 inactive_file:39956 isolated_file:0 [ 486.199676][T17671] unevictable:768 dirty:54 writeback:0 [ 486.199676][T17671] slab_reclaimable:12187 slab_unreclaimable:108625 [ 486.199676][T17671] mapped:30034 shmem:1364 pagetables:1363 [ 486.199676][T17671] sec_pagetables:0 bounce:0 [ 486.199676][T17671] kernel_misc_reclaimable:0 [ 486.199676][T17671] free:1308534 free_pcp:16701 free_cma:0 [ 486.246537][T17671] Node 0 active_anon:18476kB inactive_anon:0kB active_file:10776kB inactive_file:159620kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120232kB dirty:216kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12656kB pagetables:5276kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 486.280470][T17671] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 486.311196][T17671] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 486.348561][T17671] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 486.354574][T17671] Node 0 DMA32 free:1328248kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18428kB inactive_anon:0kB active_file:10776kB inactive_file:158052kB unevictable:1536kB writepending:212kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:44488kB local_pcp:26488kB free_cma:0kB [ 486.388756][T17671] lowmem_reserve[]: 0 0 1 1 1 [ 486.393562][T17671] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 486.423711][T17671] lowmem_reserve[]: 0 0 0 0 0 [ 486.428587][T17671] Node 1 Normal free:3890532kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22280kB local_pcp:10920kB free_cma:0kB [ 486.428734][ T5865] Bluetooth: hci3: command tx timeout [ 486.465342][T17671] lowmem_reserve[]: 0 0 0 0 0 [ 486.471104][T17671] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 486.484759][T17671] Node 0 DMA32: 697*4kB (UME) 207*8kB (ME) 192*16kB (UME) 110*32kB (UME) 404*64kB (UME) 501*128kB (UME) 408*256kB (UM) 307*512kB (UM) 177*1024kB (UME) 9*2048kB (UME) 187*4096kB (M) = 1328284kB [ 486.504208][T17671] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 486.516949][T17671] Node 1 Normal: 211*4kB (UE) 59*8kB (UME) 38*16kB (UME) 91*32kB (UME) 26*64kB (UME) 6*128kB (UME) 5*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3890532kB [ 486.535455][T17671] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 486.545121][T17671] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 486.554633][T17671] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 486.564611][T17671] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 486.573965][T17671] 44010 total pagecache pages [ 486.579888][T17671] 0 pages in swap cache [ 486.584082][T17671] Free swap = 124996kB [ 486.588321][T17671] Total swap = 124996kB [ 486.592603][T17671] 2097051 pages RAM [ 486.596558][T17671] 0 pages HighMem/MovableOnly [ 486.601281][T17671] 425667 pages reserved [ 486.605537][T17671] 0 pages cma reserved [ 486.807384][T17589] wlan1 speed is unknown, defaulting to 1000 [ 487.101207][T17518] hsr_slave_0: entered promiscuous mode [ 487.106558][T17694] netlink: 'syz.0.3239': attribute type 6 has an invalid length. [ 487.117481][T17518] hsr_slave_1: entered promiscuous mode [ 487.132137][T17518] debugfs: 'hsr0' already exists in 'hsr' [ 487.152618][T17518] Cannot create hsr debugfs directory [ 487.425951][T17709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3242'. [ 487.521389][T17589] wlan1 speed is unknown, defaulting to 1000 [ 487.650697][T17711] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3244'. [ 488.074583][T17589] wlan1 speed is unknown, defaulting to 1000 [ 488.339448][T17518] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 488.495195][ T5865] Bluetooth: hci3: command tx timeout [ 488.621079][T17589] wlan1 speed is unknown, defaulting to 1000 [ 488.621179][T17518] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 488.668404][T17518] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 488.707926][T17518] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 488.929389][T17766] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3259'. [ 488.943020][T17518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.957918][T17765] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3259'. [ 489.016808][T17518] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.050672][T12102] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.057901][T12102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.115249][T12102] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.122465][T12102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.204382][T17771] syzkaller0: entered promiscuous mode [ 489.212836][T17771] syzkaller0: entered allmulticast mode [ 489.244391][T17589] wlan1 speed is unknown, defaulting to 1000 [ 489.400613][T17781] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3264'. [ 489.470871][T17781] veth1_macvtap: left promiscuous mode [ 489.797367][T17796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3268'. [ 489.866561][T17799] netlink: 'syz.0.3269': attribute type 6 has an invalid length. [ 490.042177][T17518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.079598][T17803] Bluetooth: MGMT ver 1.23 [ 490.515300][T12089] hsr_slave_0: left promiscuous mode [ 490.524842][T12089] hsr_slave_1: left promiscuous mode [ 490.580528][T12089] vlan0: left allmulticast mode [ 490.588411][T17826] netlink: 'syz.0.3277': attribute type 1 has an invalid length. [ 490.605337][T12089] vlan0: left promiscuous mode [ 490.610363][T17826] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3277'. [ 490.625707][T12089] veth1_macvtap: left promiscuous mode [ 490.656716][T12089] veth0_macvtap: left promiscuous mode [ 490.675448][T12089] veth1_vlan: left promiscuous mode [ 490.814012][T17830] netlink: 'syz.4.3278': attribute type 6 has an invalid length. [ 491.550098][T12089] team0 (unregistering): Port device team_slave_1 removed [ 491.600263][T12089] team0 (unregistering): Port device team_slave_0 removed [ 492.072602][T17840] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 492.119903][T17843] tipc: Enabling of bearer rejected, failed to enable media [ 492.130229][T17848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3280'. [ 492.145193][T17848] syz_tun: entered promiscuous mode [ 492.170251][T17856] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3283'. [ 492.228104][T17518] veth0_vlan: entered promiscuous mode [ 492.282301][T17518] veth1_vlan: entered promiscuous mode [ 492.292453][T17860] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 492.378193][T17858] tipc: Started in network mode [ 492.395580][T17858] tipc: Node identity , cluster identity 4711 [ 492.401760][T17858] tipc: Failed to obtain node identity [ 492.432885][T17858] tipc: Enabling of bearer rejected, failed to enable media [ 492.470728][T17862] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3286'. [ 492.507061][T17862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3286'. [ 492.528711][T17862] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3286'. [ 492.540091][T17862] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3286'. [ 492.549559][T17862] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3286'. [ 492.552195][T17518] veth0_macvtap: entered promiscuous mode [ 492.564522][T17862] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3286'. [ 492.573701][T17862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3286'. [ 492.598990][T17518] veth1_macvtap: entered promiscuous mode [ 492.624201][T17518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.652783][T17518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.709409][ T3497] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.742318][ T3497] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.756328][ T3497] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.768826][ T3497] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.876980][T17875] 8021q: adding VLAN 0 to HW filter on device bond4 [ 492.921028][T17882] 8021q: adding VLAN 0 to HW filter on device bond4 [ 492.938667][T17882] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 492.953086][T17882] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 493.340491][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.380769][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.087259][T17910] wlan1 speed is unknown, defaulting to 1000 [ 494.134961][ T959] IPVS: starting estimator thread 0... [ 494.199870][T12094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.222888][T12094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.237513][T17938] IPVS: using max 33 ests per chain, 79200 per kthread [ 494.418017][T17950] netlink: 'syz.1.3183': attribute type 1 has an invalid length. [ 494.537380][T17950] bond1 (unregistering): Released all slaves [ 494.727676][T12089] IPVS: stop unused estimator thread 0... [ 494.819953][T17965] netlink: 'syz.0.3310': attribute type 10 has an invalid length. [ 494.867264][T17965] team0: Port device dummy0 added [ 495.203476][T17981] tipc: Started in network mode [ 495.230969][T17981] tipc: Node identity 1afa9137489e, cluster identity 4711 [ 495.248615][T17981] tipc: Enabled bearer , priority 0 [ 495.279175][T17987] syzkaller0: entered promiscuous mode [ 495.287038][T17987] syzkaller0: entered allmulticast mode [ 495.298254][T17981] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 495.447123][T17981] netlink: 'syz.3.3317': attribute type 2 has an invalid length. [ 495.469690][T17981] nbd: must specify at least one socket [ 495.498351][T17981] tipc: Resetting bearer [ 495.536940][T17980] tipc: Resetting bearer [ 495.559384][T17980] tipc: Disabling bearer [ 495.651075][T18002] openvswitch: netlink: Missing key (keys=40, expected=80) [ 495.720034][T17998] __nla_validate_parse: 8 callbacks suppressed [ 495.720053][T17998] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3321'. [ 496.197607][T18032] netlink: 376 bytes leftover after parsing attributes in process `syz.2.3333'. [ 496.208113][T18028] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 496.208273][T18028] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 496.380505][T18044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3339'. [ 496.494424][T18048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3338'. [ 497.187819][T18096] netlink: 'syz.4.3351': attribute type 1 has an invalid length. [ 497.214195][T18096] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3351'. [ 497.268900][T18096] netlink: 'syz.4.3351': attribute type 1 has an invalid length. [ 497.303061][T18097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3353'. [ 497.473691][T18108] netlink: 'syz.3.3357': attribute type 1 has an invalid length. [ 497.511292][T18112] netlink: 'syz.1.3358': attribute type 1 has an invalid length. [ 497.520737][T18112] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3358'. [ 497.613493][T18117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3359'. [ 497.857701][T18130] netlink: 'syz.2.3364': attribute type 6 has an invalid length. [ 497.995604][T18139] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 498.119397][T18139] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 498.150930][T18149] macvlan0: entered promiscuous mode [ 498.169967][T18149] macvlan0: entered allmulticast mode [ 498.212658][T18153] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 498.726971][T18177] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3378'. [ 498.909859][T18189] netlink: 'syz.0.3382': attribute type 14 has an invalid length. [ 498.918462][T18189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3382'. [ 498.950067][T12094] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.961112][T18189] netlink: 'syz.0.3382': attribute type 14 has an invalid length. [ 498.983753][ T3497] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.009596][ T3497] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.035815][ T3497] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.062308][T18197] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 499.103559][T18197] tipc: Enabled bearer , priority 0 [ 499.111275][T18197] syzkaller0: entered promiscuous mode [ 499.130081][T18197] syzkaller0: entered allmulticast mode [ 499.314995][T18209] tipc: Resetting bearer [ 499.374115][T18218] hsr0 speed is unknown, defaulting to 1000 [ 499.384388][T18218] hsr0 speed is unknown, defaulting to 1000 [ 499.391750][T18218] hsr0 speed is unknown, defaulting to 1000 [ 499.419544][T18218] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 499.469798][T18218] hsr0 speed is unknown, defaulting to 1000 [ 499.490834][T18218] hsr0 speed is unknown, defaulting to 1000 [ 499.499385][T18191] tipc: Resetting bearer [ 499.540685][T18191] tipc: Disabling bearer [ 499.564133][T18218] hsr0 speed is unknown, defaulting to 1000 [ 499.577984][T18218] hsr0 speed is unknown, defaulting to 1000 [ 499.594872][T18218] hsr0 speed is unknown, defaulting to 1000 [ 499.621085][T18218] hsr0 speed is unknown, defaulting to 1000 [ 500.606607][T18284] netlink: 'syz.0.3411': attribute type 1 has an invalid length. [ 500.697907][T18284] 8021q: adding VLAN 0 to HW filter on device bond2 [ 500.791099][T18301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.811910][T18301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.821500][T18301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.832423][T18301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.842155][T18301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.852513][T18301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.878935][T18304] __nla_validate_parse: 5 callbacks suppressed [ 500.878959][T18304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3415'. [ 501.250542][T18311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.542273][T18327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3424'. [ 501.620931][T18328] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3423'. [ 501.661439][T18333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.756149][T18325] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3423'. [ 501.844870][T18344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3428'. [ 502.075233][T18362] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 502.156166][T18369] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3437'. [ 502.268652][T18383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3436'. [ 502.286669][T18362] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 502.334877][T18366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3436'. [ 503.184113][T18435] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3452'. [ 503.368985][T18442] bridge_slave_0: left allmulticast mode [ 503.406871][T18442] bridge_slave_0: left promiscuous mode [ 503.437353][T18442] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.473929][T18453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3455'. [ 503.514255][T18442] bridge_slave_1: left allmulticast mode [ 503.539209][T18459] netlink: 'syz.4.3457': attribute type 2 has an invalid length. [ 503.553270][T18442] bridge_slave_1: left promiscuous mode [ 503.565001][T18442] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.582873][T18442] bond0: (slave bond_slave_0): Releasing backup interface [ 503.609189][T18442] bond0: (slave bond_slave_1): Releasing backup interface [ 503.646661][T18442] team0: Port device team_slave_0 removed [ 503.663335][T18442] team0: Port device team_slave_1 removed [ 503.670563][T18442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.681599][T18442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.692923][T18442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.700822][T18442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.720493][T18440] netlink: 'syz.2.3453': attribute type 12 has an invalid length. [ 503.933685][T18472] netlink: 'syz.4.3463': attribute type 2 has an invalid length. [ 504.452678][T18512] netlink: 'syz.0.3476': attribute type 13 has an invalid length. [ 504.464647][T18512] netlink: 'syz.0.3476': attribute type 58 has an invalid length. [ 504.609243][T18522] netlink: 'syz.0.3478': attribute type 1 has an invalid length. [ 504.655769][ T5184] Bluetooth: hci3: command 0x0405 tx timeout [ 504.731740][T18527] netlink: 'syz.4.3481': attribute type 2 has an invalid length. [ 504.817494][T18532] bridge0: port 1(syz_tun) entered blocking state [ 504.824127][T18532] bridge0: port 1(syz_tun) entered disabled state [ 504.852752][T18532] syz_tun: entered allmulticast mode [ 504.866949][T18532] syz_tun: entered promiscuous mode [ 504.876157][T18532] bridge0: port 1(syz_tun) entered blocking state [ 504.883316][T18532] bridge0: port 1(syz_tun) entered forwarding state [ 504.916663][T18532] netlink: 'syz.1.3482': attribute type 10 has an invalid length. [ 504.942354][T18532] bridge0: port 1(syz_tun) entered disabled state [ 504.988777][T18532] bridge0: port 1(syz_tun) entered blocking state [ 504.995503][T18532] bridge0: port 1(syz_tun) entered forwarding state [ 505.065809][T18532] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 505.431917][T18571] netlink: 'syz.1.3496': attribute type 6 has an invalid length. [ 506.075910][T18600] pim6reg1: entered promiscuous mode [ 506.105697][T18600] pim6reg1: entered allmulticast mode [ 506.120290][T18608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.622753][T18635] sctp: [Deprecated]: syz.2.3514 (pid 18635) Use of int in maxseg socket option. [ 506.622753][T18635] Use struct sctp_assoc_value instead [ 506.787016][T18644] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 507.420494][T18675] __nla_validate_parse: 8 callbacks suppressed [ 507.420515][T18675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3529'. [ 507.577450][T18684] netlink: 'syz.0.3530': attribute type 4 has an invalid length. [ 508.043972][T18707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3533'. [ 508.148378][T18712] netlink: 'syz.2.3535': attribute type 1 has an invalid length. [ 508.210693][T18720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3536'. [ 508.708473][T18750] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 508.756456][T18750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3541'. [ 508.967079][T18759] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3546'. [ 508.999836][T18760] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3546'. [ 509.425605][T18786] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 509.455272][T18786] tipc: Enabled bearer , priority 10 [ 509.476867][T18786] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3554'. [ 509.580029][T18795] netlink: 45 bytes leftover after parsing attributes in process `syz.3.3554'. [ 509.727675][T18801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3558'. [ 509.732467][T18806] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3559'. [ 509.999689][T18819] tipc: Started in network mode [ 510.004638][T18819] tipc: Node identity 22c15b3e7d45, cluster identity 4711 [ 510.030158][T18819] tipc: Enabled bearer , priority 0 [ 510.038681][T18819] syzkaller0: entered promiscuous mode [ 510.044377][T18819] syzkaller0: entered allmulticast mode [ 510.091744][T18819] tipc: Resetting bearer [ 510.139775][T18821] xfrm1: entered promiscuous mode [ 510.144915][T18821] xfrm1: entered allmulticast mode [ 510.160066][T18818] tipc: Resetting bearer [ 510.210047][T18818] tipc: Disabling bearer [ 510.473409][T18840] netlink: 'syz.4.3570': attribute type 21 has an invalid length. [ 510.555677][ T5923] tipc: Node number set to 1382322487 [ 511.073783][T18879] netlink: 'syz.4.3581': attribute type 1 has an invalid length. [ 511.175415][T18879] 8021q: adding VLAN 0 to HW filter on device bond5 [ 511.429576][T18904] tipc: Enabled bearer , priority 0 [ 511.466529][T18911] netlink: 'syz.4.3589': attribute type 1 has an invalid length. [ 511.472203][T18904] syzkaller0: entered promiscuous mode [ 511.491195][T18904] syzkaller0: entered allmulticast mode [ 511.513524][T18904] tipc: Resetting bearer [ 511.522187][T18901] tipc: Resetting bearer [ 511.571687][T18901] tipc: Disabling bearer [ 511.712021][T18920] bond3: entered promiscuous mode [ 511.718413][T18920] bond3: entered allmulticast mode [ 511.724724][T18920] 8021q: adding VLAN 0 to HW filter on device bond3 [ 511.968459][T18920] bond3 (unregistering): Released all slaves [ 512.009400][T18930] netlink: 'syz.3.3593': attribute type 29 has an invalid length. [ 512.022065][T18932] netlink: 'syz.3.3593': attribute type 29 has an invalid length. [ 512.630624][T18960] netlink: 'syz.4.3602': attribute type 13 has an invalid length. [ 512.816050][T18974] __nla_validate_parse: 18 callbacks suppressed [ 512.816074][T18974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3607'. [ 512.861055][T18960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.870440][T18960] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.887906][T18979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3607'. [ 512.899103][T18960] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 513.181493][T18997] bridge_slave_0: left allmulticast mode [ 513.192912][T18997] bridge_slave_0: left promiscuous mode [ 513.219941][T18997] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.243110][T18997] bridge_slave_1: left allmulticast mode [ 513.254126][T18997] bridge_slave_1: left promiscuous mode [ 513.261286][T18997] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.294867][T18997] bond0: (slave bond_slave_0): Releasing backup interface [ 513.331956][T18997] bond0: (slave bond_slave_1): Releasing backup interface [ 513.354759][T18997] team0: Port device team_slave_0 removed [ 513.371420][T18997] team0: Port device team_slave_1 removed [ 513.379322][T18997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.387186][T18997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.396971][T18997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.404465][T18997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.541389][ T44] wlan1 speed is unknown, defaulting to 1000 [ 513.766841][T19035] wlan1 speed is unknown, defaulting to 1000 [ 514.579041][T19035] hsr0 speed is unknown, defaulting to 1000 [ 514.652686][T19037] netlink: 'syz.3.3620': attribute type 13 has an invalid length. [ 514.675235][T19037] netlink: 'syz.3.3620': attribute type 17 has an invalid length. [ 514.682577][T19079] netlink: 'syz.4.3630': attribute type 1 has an invalid length. [ 514.713139][T19070] IPVS: Scheduler module ip_vs_sip not found [ 514.762352][T19037] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 514.834411][T19079] 8021q: adding VLAN 0 to HW filter on device bond6 [ 514.866264][T19070] bond6: (slave gretap1): making interface the new active one [ 514.875691][T19070] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 515.041356][T19089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3634'. [ 515.118723][T19091] netlink: 'syz.4.3635': attribute type 1 has an invalid length. [ 515.126641][T19091] netlink: 'syz.4.3635': attribute type 4 has an invalid length. [ 515.134562][T19091] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3635'. [ 515.150854][T19091] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3635'. [ 515.498517][T19104] block nbd0: Unsupported socket: shutdown callout must be supported. [ 515.882799][T19123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3646'. [ 515.928893][T19128] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3648'. [ 515.942976][T19128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3648'. [ 515.952039][T19128] netlink: 15 bytes leftover after parsing attributes in process `syz.2.3648'. [ 515.966868][T19128] netlink: 'syz.2.3648': attribute type 2 has an invalid length. [ 515.974834][T19128] netlink: 15 bytes leftover after parsing attributes in process `syz.2.3648'. [ 516.022047][T19133] netlink: 'syz.3.3649': attribute type 39 has an invalid length. [ 516.235508][T19141] tipc: Enabled bearer , priority 0 [ 516.305834][T19135] syzkaller0: entered promiscuous mode [ 516.313596][T19135] syzkaller0: entered allmulticast mode [ 516.400775][T19135] tipc: Resetting bearer [ 516.437175][T19134] tipc: Resetting bearer [ 516.497005][T19134] tipc: Disabling bearer [ 516.517732][T19159] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 516.554789][T19160] geneve2: entered promiscuous mode [ 516.562265][T19160] geneve2: entered allmulticast mode [ 516.581456][T12105] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 516.618996][T12105] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 516.633606][T19166] netlink: 'syz.4.3657': attribute type 1 has an invalid length. [ 516.719646][T19166] bond7 (unregistering): Released all slaves [ 516.802384][T12105] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 516.861846][T12105] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 517.293023][T19204] netlink: 'syz.4.3667': attribute type 10 has an invalid length. [ 517.308265][T19204] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.319215][T19204] bond0: (slave team0): Enslaving as an active interface with an up link [ 517.379837][T19204] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 517.904556][T19230] __nla_validate_parse: 7 callbacks suppressed [ 517.904578][T19230] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3676'. [ 517.970082][T19230] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3676'. [ 517.988704][T19237] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3678'. [ 517.993763][T19231] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3676'. [ 518.081568][T19239] validate_nla: 3 callbacks suppressed [ 518.081591][T19239] netlink: 'syz.2.3679': attribute type 21 has an invalid length. [ 518.135679][T19242] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3679'. [ 518.151389][T19241] ip6gre1: entered allmulticast mode [ 518.172960][T19245] netlink: 'syz.2.3679': attribute type 21 has an invalid length. [ 518.193761][T19239] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3679'. [ 518.208298][T19244] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 518.230674][T19245] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3679'. [ 518.563424][T19262] ipvlan0: mtu less than device minimum [ 518.637314][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054e3d400: rx timeout, send abort [ 519.108881][T19290] syzkaller0: entered promiscuous mode [ 519.114676][T19290] syzkaller0: entered allmulticast mode [ 519.122641][T19291] netlink: 'syz.1.3693': attribute type 29 has an invalid length. [ 519.136493][T19291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3693'. [ 519.137437][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054e3dc00: rx timeout, send abort [ 519.155363][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054e3d400: abort rx timeout. Force session deactivation [ 519.491136][T19307] netlink: 'syz.1.3701': attribute type 1 has an invalid length. [ 519.510601][T19307] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3701'. [ 519.654810][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054e3dc00: abort rx timeout. Force session deactivation [ 519.705257][T19320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3705'. [ 520.096262][T19336] netlink: 'syz.3.3709': attribute type 1 has an invalid length. [ 520.212691][T19338] netlink: 'syz.3.3710': attribute type 1 has an invalid length. [ 521.574157][T19324] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 521.606306][T19339] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 521.622773][T19340] ip6tnl1: entered promiscuous mode [ 521.658653][T19340] ip6tnl1: entered allmulticast mode [ 522.023075][T19363] tipc: Enabled bearer , priority 0 [ 522.047494][T19363] syzkaller0: entered promiscuous mode [ 522.056735][T19363] syzkaller0: entered allmulticast mode [ 522.079439][T19363] tipc: Resetting bearer [ 522.100498][T19361] tipc: Resetting bearer [ 522.136304][T19361] tipc: Disabling bearer [ 522.153449][T19370] syz_tun: entered allmulticast mode [ 522.171339][T19370] netlink: 'syz.4.3720': attribute type 12 has an invalid length. [ 522.228715][T19369] syz_tun: left allmulticast mode [ 522.807514][T19417] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001 [ 522.933203][T19426] __nla_validate_parse: 8 callbacks suppressed [ 522.933224][T19426] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3736'. [ 522.972136][T19426] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3736'. [ 523.122478][T19437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3738'. [ 523.137557][T19443] netlink: 'syz.4.3740': attribute type 32 has an invalid length. [ 523.144695][T19448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3738'. [ 523.150003][T19443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3740'. [ 523.212574][T19451] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3740'. [ 523.243009][T19443] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 523.366028][T19443] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 523.480787][T19469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3744'. [ 523.560466][T19467] bond8 (unregistering): Released all slaves [ 523.979716][T19504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3754'. [ 523.996817][T19505] netlink: 'syz.1.3753': attribute type 10 has an invalid length. [ 524.017075][T19505] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 524.030869][T19507] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3755'. [ 524.045795][T19512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3754'. [ 524.214850][T19520] batman_adv: batadv0: Adding interface: dummy0 [ 524.240845][T19520] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.269050][T19520] batman_adv: batadv0: Interface activated: dummy0 [ 524.559869][T19542] gretap0: entered promiscuous mode [ 524.568937][T19542] gretap0: left promiscuous mode [ 524.601175][T19548] netlink: 'syz.2.3768': attribute type 13 has an invalid length. [ 524.902221][T19560] netlink: 'syz.2.3773': attribute type 11 has an invalid length. [ 524.923755][T19560] netlink: 'syz.2.3773': attribute type 11 has an invalid length. [ 525.164429][T19584] erspan0: entered promiscuous mode [ 525.390146][T19601] netlink: 'syz.2.3783': attribute type 1 has an invalid length. [ 525.666615][T19614] netlink: 'syz.4.3787': attribute type 1 has an invalid length. [ 525.715455][T19614] netlink: 'syz.4.3787': attribute type 2 has an invalid length. [ 525.742049][T19614] netlink: 'syz.4.3787': attribute type 1 has an invalid length. [ 525.955546][T19626] tipc: Enabled bearer , priority 0 [ 525.970099][ T44] IPVS: starting estimator thread 0... [ 525.980119][T19634] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 525.985532][T19626] syzkaller0: entered promiscuous mode [ 525.993419][T19626] syzkaller0: entered allmulticast mode [ 526.058765][T19626] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 526.065788][T19638] IPVS: using max 26 ests per chain, 62400 per kthread [ 526.129589][T19626] tipc: Resetting bearer [ 526.159136][T19625] tipc: Resetting bearer [ 526.177529][T19625] tipc: Disabling bearer [ 526.222907][T19648] team0: Device gtp0 is of different type [ 526.355444][T19655] netlink: 'syz.3.3801': attribute type 3 has an invalid length. [ 527.765307][T19715] netlink: 'syz.1.3818': attribute type 5 has an invalid length. [ 527.867985][T19723] netlink: 'syz.2.3821': attribute type 21 has an invalid length. [ 527.903261][T19714] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.911136][T19714] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.012290][T19733] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 528.066735][T19733] __nla_validate_parse: 18 callbacks suppressed [ 528.066761][T19733] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3821'. [ 528.112567][T19714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.134582][T19714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.425620][T19723] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3821'. [ 528.436973][T12098] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.461725][T12098] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.477577][T12098] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.489763][T12098] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.501769][T12098] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.522598][T12098] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.554573][T12098] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.584390][T12098] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.748043][T19752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3825'. [ 529.077566][T19777] openvswitch: netlink: IPv6 tunnel dst address is zero [ 529.234267][T19784] netlink: 'syz.1.3834': attribute type 32 has an invalid length. [ 529.261127][T19789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3835'. [ 529.533150][T19800] tipc: Started in network mode [ 529.561007][T19800] tipc: Node identity ca2f61d184e4, cluster identity 4711 [ 529.589333][T19800] tipc: Enabled bearer , priority 0 [ 529.702954][T19799] tipc: Disabling bearer [ 530.319130][T19841] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3855'. [ 530.388436][T19841] netlink: 'syz.2.3855': attribute type 21 has an invalid length. [ 530.415348][T19841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3855'. [ 530.597315][T19855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3860'. [ 530.638251][T19855] 8021q: VLANs not supported on ip6tnl0 [ 530.783602][T19871] netlink: 'syz.4.3864': attribute type 11 has an invalid length. [ 530.804303][T19871] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3864'. [ 531.088404][T19885] netlink: 'syz.1.3868': attribute type 1 has an invalid length. [ 531.118273][T19885] netlink: 'syz.1.3868': attribute type 1 has an invalid length. [ 531.138490][T19885] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3868'. [ 531.176443][T19887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3868'. [ 531.477929][T19906] pim6reg: entered allmulticast mode [ 531.742263][T19920] syz.3.3879 (19920) used obsolete PPPIOCDETACH ioctl [ 531.762574][T19924] netlink: 'syz.4.3880': attribute type 1 has an invalid length. [ 531.928779][T19929] tipc: Enabling of bearer rejected, failed to enable media [ 532.809085][T19995] netlink: 'syz.0.3900': attribute type 1 has an invalid length. [ 533.100178][T20010] syzkaller1: entered promiscuous mode [ 533.118346][T20010] syzkaller1: entered allmulticast mode [ 533.124609][T20012] nbd: must specify a size in bytes for the device [ 533.271787][T20021] __nla_validate_parse: 5 callbacks suppressed [ 533.271809][T20021] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3908'. [ 533.287633][T20021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3908'. [ 533.297276][T20021] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3908'. [ 533.346430][T20024] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3909'. [ 533.697340][T20053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3918'. [ 534.119263][T20081] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3928'. [ 534.137661][T20073] nbd0: detected capacity change from 0 to 63 [ 534.160015][T20079] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3926'. [ 534.232388][T20083] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 534.290925][ T5865] block nbd0: Receive control failed (result -32) [ 534.337100][T20091] netlink: 'syz.3.3931': attribute type 178 has an invalid length. [ 534.353013][T20091] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 534.398072][T20094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3932'. [ 534.457277][T20094] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3932'. [ 534.492385][T20094] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3932'. [ 534.650783][T20108] tipc: Enabled bearer , priority 0 [ 534.669939][T20108] syzkaller0: entered promiscuous mode [ 534.678926][T20108] syzkaller0: entered allmulticast mode [ 534.692488][T20108] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 534.734077][T20114] macvlan0: entered promiscuous mode [ 534.748225][T20114] macvlan0: entered allmulticast mode [ 534.783321][T20108] tipc: Resetting bearer [ 534.898215][T20107] tipc: Resetting bearer [ 534.922751][T20107] tipc: Disabling bearer [ 535.100569][T20131] tipc: Enabling of bearer rejected, failed to enable media [ 536.186458][T20182] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 536.193684][T20182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 536.219387][T20188] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 536.256442][T20188] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 536.316128][T20188] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 536.356746][T20194] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 536.837198][T20229] netlink: 'syz.4.3974': attribute type 3 has an invalid length. [ 537.050635][T20239] netlink: 'syz.3.3975': attribute type 28 has an invalid length. [ 537.080475][T20239] netlink: 'syz.3.3975': attribute type 3 has an invalid length. [ 537.280319][T12098] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 537.637928][T20268] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 538.470527][T20309] syzkaller1: entered promiscuous mode [ 538.494304][T20309] syzkaller1: entered allmulticast mode [ 538.816387][T20337] __nla_validate_parse: 11 callbacks suppressed [ 538.816410][T20337] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3999'. [ 538.853910][T20337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3999'. [ 538.874547][T20337] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3999'. [ 539.018996][T20351] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4004'. [ 539.071625][T20356] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4004'. [ 539.354372][T20371] netlink: 'syz.3.4010': attribute type 1 has an invalid length. [ 539.567938][T20377] bond2: (slave bridge3): making interface the new active one [ 539.589928][T20377] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 539.782651][T20405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4019'. [ 539.803434][T20405] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4019'. [ 539.858195][T20409] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4021'. [ 539.900914][T20409] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4021'. [ 539.977895][T20416] ip6gre2: entered allmulticast mode [ 539.991664][T20414] tipc: Started in network mode [ 540.000812][T20414] tipc: Node identity fffeffff, cluster identity 4711 [ 540.011491][T20414] tipc: Node number set to 4294901759 [ 540.120201][T20418] bond0: option mode: unable to set because the bond device has slaves [ 540.132005][T20423] openvswitch: netlink: IPv4 tun info is not correct [ 540.151878][T20424] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4025'. [ 540.371241][T20437] IPv6: NLM_F_REPLACE set, but no existing node found! [ 540.383756][T20439] openvswitch: netlink: IP tunnel dst address not specified [ 540.839637][T20471] tap0: tun_chr_ioctl cmd 1074025673 [ 540.849902][T20467] tap0: tun_chr_ioctl cmd 1074025677 [ 540.856825][T20467] tap0: linktype set to 65534 [ 541.128343][T20485] delete_channel: no stack [ 541.132992][T20485] delete_channel: no stack [ 541.346874][T20510] netlink: 'syz.2.4052': attribute type 1 has an invalid length. [ 541.410198][T20510] dvmrp0: entered allmulticast mode [ 541.855484][T20543] netlink: 'syz.2.4062': attribute type 23 has an invalid length. [ 542.494866][T20577] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 542.556352][T12094] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 542.591992][T12094] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 542.631202][T12094] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 542.667714][T12094] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 542.932983][T20611] netlink: 'syz.0.4077': attribute type 1 has an invalid length. [ 543.180683][T20618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 543.399081][T20637] syz.4.4087 uses old SIOCAX25GETINFO [ 543.538007][T20637] syzkaller0: entered promiscuous mode [ 543.545577][T20637] syzkaller0: entered allmulticast mode [ 544.073113][T20678] __nla_validate_parse: 11 callbacks suppressed [ 544.073134][T20678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4093'. [ 544.748135][ T5184] Bluetooth: hci5: command 0x0405 tx timeout [ 545.727654][T20689] veth1_to_bond: entered allmulticast mode [ 545.796908][T20689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4096'. [ 545.909311][T20689] bond0: (slave bond_slave_1): Releasing backup interface [ 546.018239][T20689] veth1_to_bond (unregistering): left allmulticast mode [ 546.300801][T20720] bond2: entered allmulticast mode [ 546.324765][T20720] 8021q: adding VLAN 0 to HW filter on device bond2 [ 546.366565][T20720] bridge0: port 2(bond2) entered blocking state [ 546.389911][T20720] bridge0: port 2(bond2) entered disabled state [ 546.402407][T20720] bond2: entered promiscuous mode [ 546.410462][T20720] bridge0: port 2(bond2) entered blocking state [ 546.417233][T20720] bridge0: port 2(bond2) entered forwarding state [ 546.434207][T20732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4106'. [ 546.444752][T20727] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4106'. [ 546.466551][T20732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4106'. [ 546.536036][T20732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4106'. [ 546.571785][T20732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4106'. [ 546.780474][T12102] bridge0: port 2(bond2) entered disabled state [ 546.783787][T20761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4110'. [ 547.052229][T20758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4113'. [ 547.090311][T20758] bridge_slave_1: left allmulticast mode [ 547.113273][T20758] bridge_slave_1: left promiscuous mode [ 547.122074][T20758] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.198317][T20758] bridge_slave_0: left allmulticast mode [ 547.226731][T20758] bridge_slave_0: left promiscuous mode [ 547.235816][T20758] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.776561][T20805] netlink: 'syz.0.4128': attribute type 15 has an invalid length. [ 547.798332][T20805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4128'. [ 547.825655][T20805] netlink: 'syz.0.4128': attribute type 15 has an invalid length. [ 548.671628][T20863] tipc: Started in network mode [ 548.677200][T20863] tipc: Node identity , cluster identity 4711 [ 548.693007][T20863] tipc: Failed to obtain node identity [ 548.709546][T20863] tipc: Enabling of bearer rejected, failed to enable media [ 548.739033][T20867] tipc: Started in network mode [ 548.753748][T20867] tipc: Node identity , cluster identity 4711 [ 548.766581][T20867] tipc: Failed to obtain node identity [ 548.774542][T20867] tipc: Enabling of bearer rejected, failed to enable media [ 548.790835][T20880] netlink: 'syz.0.4147': attribute type 1 has an invalid length. [ 548.799973][T20879] netlink: 'syz.2.4146': attribute type 1 has an invalid length. [ 548.808591][T20879] netlink: 'syz.2.4146': attribute type 1 has an invalid length. [ 548.819816][T20880] netlink: 'syz.0.4147': attribute type 1 has an invalid length. [ 548.828352][T20880] netlink: 'syz.0.4147': attribute type 1 has an invalid length. [ 548.837545][T20880] netlink: 'syz.0.4147': attribute type 2 has an invalid length. [ 549.072712][T20894] netlink: 'syz.4.4149': attribute type 10 has an invalid length. [ 549.113187][T20894] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.137384][ T5184] Bluetooth: hci3: command 0x0405 tx timeout [ 549.160390][T20894] bridge_slave_1: left allmulticast mode [ 549.189407][T20894] bridge_slave_1: left promiscuous mode [ 549.205483][T20894] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.298790][T20894] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 549.355262][T20906] : left allmulticast mode [ 549.360080][T20906] : left promiscuous mode [ 549.364918][T20906] bridge0: port 1() entered disabled state [ 549.392347][T20906] bridge_slave_1: left allmulticast mode [ 549.398843][T20906] bridge_slave_1: left promiscuous mode [ 549.407603][T20902] __nla_validate_parse: 7 callbacks suppressed [ 549.407623][T20902] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4152'. [ 549.424446][T20906] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.448086][T20906] bond0: (slave bond_slave_0): Releasing backup interface [ 549.481255][T20906] bond0: (slave bond_slave_1): Releasing backup interface [ 549.523720][T20906] team0: Port device team_slave_0 removed [ 549.571136][T20906] team0: Port device team_slave_1 removed [ 549.578926][T20906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.595196][T20906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.617314][T20906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.625244][T20906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.666047][T20906] bond1: (slave geneve2): Releasing backup interface [ 549.753773][T12102] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 549.793933][T12102] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 549.810119][T12102] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 549.862524][T12102] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 549.989453][T20934] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4160'. [ 550.142668][T20938] batadv_slave_1: entered promiscuous mode [ 550.178463][T20937] batadv_slave_1: left promiscuous mode [ 550.676273][T20961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4168'. [ 551.831443][T21013] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4179'. [ 551.973807][T21033] team0: Device gtp0 is up. Set it down before adding it as a team port [ 552.560145][T21057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4191'. [ 552.762286][T21065] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:0 [ 552.848067][T21072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4196'. [ 552.961273][T21082] sctp: [Deprecated]: syz.1.4198 (pid 21082) Use of int in maxseg socket option. [ 552.961273][T21082] Use struct sctp_assoc_value instead [ 553.241488][T21098] netlink: 22 bytes leftover after parsing attributes in process `syz.3.4202'. [ 553.374237][T21097] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 553.465511][ T5184] Bluetooth: hci3: command 0x0405 tx timeout [ 553.587131][T21111] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4206'. [ 553.842992][T21129] netlink: 'syz.1.4210': attribute type 24 has an invalid length. [ 554.297046][T21156] tipc: Enabled bearer , priority 0 [ 554.312388][T21156] syzkaller0: entered promiscuous mode [ 554.321339][T21156] syzkaller0: entered allmulticast mode [ 554.378695][T21156] tipc: Resetting bearer [ 554.402902][T21155] tipc: Resetting bearer [ 554.445739][T21155] tipc: Disabling bearer [ 554.469831][T21163] tipc: Enabled bearer , priority 0 [ 554.571499][T21163] tipc: Disabling bearer [ 554.913301][T21190] netlink: zone id is out of range [ 554.926055][T21190] netlink: zone id is out of range [ 554.939833][T21193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4233'. [ 554.975416][ T5184] Bluetooth: hci0: command 0x0406 tx timeout [ 555.440235][T21180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4229'. [ 555.451003][T21180] netlink: 'syz.1.4229': attribute type 1 has an invalid length. [ 555.468294][T21180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4229'. [ 555.579651][T21228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4243'. [ 555.844222][T21235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4246'. [ 555.927602][T21235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.931511][T21250] netlink: 'syz.3.4251': attribute type 1 has an invalid length. [ 556.178817][T21263] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4255'. [ 556.222701][T21269] netlink: 'syz.0.4257': attribute type 1 has an invalid length. [ 556.245979][T21270] netlink: 'syz.0.4257': attribute type 1 has an invalid length. [ 556.282358][T21270] 8021q: adding VLAN 0 to HW filter on device bond4 [ 556.301679][T21269] vlan2: entered promiscuous mode [ 556.307361][T21269] bond4: entered promiscuous mode [ 556.313555][T21269] vlan2: entered allmulticast mode [ 556.319872][T21269] bond4: entered allmulticast mode [ 556.332949][T21270] gretap1: entered promiscuous mode [ 556.343195][T21270] bond4: (slave gretap1): making interface the new active one [ 556.351089][T21270] gretap1: entered allmulticast mode [ 556.358057][T21270] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 556.532235][T21285] Bluetooth: MGMT ver 1.23 [ 556.788896][T21298] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4267'. [ 556.862895][T21309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4270'. [ 557.351775][T21343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4274'. [ 557.381081][T21343] netlink: 'syz.3.4274': attribute type 30 has an invalid length. [ 557.535976][T21354] wlan1 speed is unknown, defaulting to 1000 [ 557.791121][T21365] netlink: 'syz.4.4283': attribute type 11 has an invalid length. [ 557.816036][T21365] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4283'. [ 557.966470][T21370] tipc: Started in network mode [ 557.978168][T21370] tipc: Node identity ced2438f70d5, cluster identity 4711 [ 557.997760][T21370] tipc: Enabled bearer , priority 0 [ 558.014783][T21370] syzkaller0: entered promiscuous mode [ 558.032611][T21370] syzkaller0: entered allmulticast mode [ 558.040028][T21354] hsr0 speed is unknown, defaulting to 1000 [ 558.103844][T21370] tipc: Resetting bearer [ 558.150059][T21369] tipc: Resetting bearer [ 558.179022][T21369] tipc: Disabling bearer [ 558.200400][T21377] batman_adv: batadv0: Interface deactivated: dummy0 [ 558.211221][T21377] batman_adv: batadv0: Removing interface: dummy0 [ 559.198669][T21417] netlink: 'syz.1.4297': attribute type 18 has an invalid length. [ 559.349020][T21424] pimreg3: entered allmulticast mode [ 559.521057][T21435] netlink: 'syz.0.4302': attribute type 30 has an invalid length. [ 559.956795][T21445] "syz.2.4304" (21445) uses obsolete ecb(arc4) skcipher [ 559.968112][T21463] __nla_validate_parse: 8 callbacks suppressed [ 559.968134][T21463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4309'. [ 560.095478][ T5184] Bluetooth: hci1: command 0x0406 tx timeout [ 560.184320][T21478] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4315'. [ 560.256260][T21479] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4313'. [ 560.266636][T21482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4316'. [ 560.286670][T21479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4313'. [ 560.312237][T21484] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4315'. [ 560.477092][T21494] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 560.588980][T21499] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 560.624786][T21509] netlink: 'syz.1.4322': attribute type 11 has an invalid length. [ 560.633357][T21509] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4322'. [ 560.747691][T21518] netlink: 'syz.4.4324': attribute type 21 has an invalid length. [ 560.810160][T21518] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4324'. [ 560.820899][T21518] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4324'. [ 561.115482][T21538] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4329'. [ 561.139985][T21542] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 561.140817][T21538] netlink: 'syz.2.4329': attribute type 6 has an invalid length. [ 561.175971][T21538] netlink: 'syz.2.4329': attribute type 1 has an invalid length. [ 561.289120][T21555] netlink: 'syz.4.4336': attribute type 1 has an invalid length. [ 561.297364][T21555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.405926][T21557] bond3: entered promiscuous mode [ 561.411072][T21557] bond3: entered allmulticast mode [ 561.416985][T21557] 8021q: adding VLAN 0 to HW filter on device bond3 [ 561.707684][T21557] bond3 (unregistering): Released all slaves [ 561.751539][T21564] ip6gre2: entered allmulticast mode [ 562.716087][T21639] tipc: Enabled bearer , priority 0 [ 562.838494][T21639] syzkaller0: entered promiscuous mode [ 562.874963][T21639] syzkaller0: entered allmulticast mode [ 562.993236][T21635] tipc: Resetting bearer [ 563.176882][ T5184] Bluetooth: hci3: link tx timeout [ 563.183846][ T5184] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 563.205296][ T51] Bluetooth: hci3: link tx timeout [ 563.210645][ T51] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 563.748162][ T5865] block nbd1: Receive control failed (result -32) [ 565.300530][ T5184] Bluetooth: hci3: command 0x0405 tx timeout [ 565.351274][T21635] tipc: Disabling bearer [ 565.361662][T21657] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 565.652876][T21724] __nla_validate_parse: 9 callbacks suppressed [ 565.652900][T21724] netlink: 165 bytes leftover after parsing attributes in process `syz.2.4379'. [ 565.864617][T21735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4383'. [ 565.942951][T21511] IPVS: starting estimator thread 0... [ 566.036576][T21746] IPVS: using max 25 ests per chain, 60000 per kthread [ 566.113141][T21754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4389'. [ 566.324016][T21769] netlink: 'syz.0.4393': attribute type 11 has an invalid length. [ 566.337140][T21767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4390'. [ 566.363960][T21767] bond2: left promiscuous mode [ 566.373412][T21767] bridge0: port 2(bond2) entered disabled state [ 566.384236][T21767] syz_tun: left allmulticast mode [ 566.389632][T21767] bridge0: port 1(syz_tun) entered disabled state [ 566.412292][T21767] bond0: (slave bridge0): Releasing backup interface [ 566.545530][T21776] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 566.549092][T21775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 566.663370][T21782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4398'. [ 566.672820][T21782] netlink: 'syz.0.4398': attribute type 5 has an invalid length. [ 566.680831][T21782] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4398'. [ 566.702477][T21780] wlan1 speed is unknown, defaulting to 1000 [ 566.845955][T21787] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4399'. [ 566.998832][T21796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4403'. [ 567.076116][T21796] netlink: 'syz.3.4403': attribute type 8 has an invalid length. [ 567.226001][T21797] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 567.325354][T21794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4402'. [ 567.378150][T21794] netlink: 308 bytes leftover after parsing attributes in process `syz.0.4402'. [ 568.054752][T21783] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 568.156297][T21780] hsr0 speed is unknown, defaulting to 1000 [ 568.278510][ T5865] Bluetooth: hci3: command 0x0405 tx timeout [ 568.409182][T21840] tipc: Enabling of bearer rejected, failed to enable media [ 568.493893][T21845] xfrm1: entered promiscuous mode [ 568.509610][T21845] xfrm1: entered allmulticast mode [ 569.032087][T21858] netlink: 'syz.1.4418': attribute type 10 has an invalid length. [ 569.129665][T21858] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 569.174101][T21861] netlink: 'syz.1.4418': attribute type 3 has an invalid length. [ 569.191942][T21865] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 569.443423][T21870] wlan1 speed is unknown, defaulting to 1000 [ 569.549118][T21882] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 569.676598][T21888] pim6reg1: entered promiscuous mode [ 569.681954][T21888] pim6reg1: entered allmulticast mode [ 570.084100][T21870] hsr0 speed is unknown, defaulting to 1000 [ 570.337748][ T5865] Bluetooth: hci2: command 0x0406 tx timeout [ 570.437855][T21925] netlink: 'syz.2.4438': attribute type 8 has an invalid length. [ 570.663104][T21932] netlink: 'syz.3.4443': attribute type 7 has an invalid length. [ 571.062667][T21942] pim6reg: entered allmulticast mode [ 571.075865][T21942] pim6reg: left allmulticast mode [ 571.178262][T21959] netlink: 'syz.2.4450': attribute type 24 has an invalid length. [ 571.261303][T21961] : entered promiscuous mode [ 571.401427][T21970] netlink: 'syz.3.4454': attribute type 1 has an invalid length. [ 571.416689][T21970] __nla_validate_parse: 7 callbacks suppressed [ 571.416711][T21970] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4454'. [ 571.476908][T21978] netlink: 212400 bytes leftover after parsing attributes in process `syz.3.4454'. [ 571.814656][T21999] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4461'. [ 571.836706][T22000] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4461'. [ 571.956364][T22007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4463'. [ 571.957106][T22009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4463'. [ 572.011317][T22012] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4465'. [ 572.040983][T22012] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4465'. [ 572.106959][T22019] macvtap1: entered allmulticast mode [ 572.128958][T22019] veth0_macvtap: entered allmulticast mode [ 572.521826][T22047] veth0: entered promiscuous mode [ 572.543451][T22047] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4476'. [ 572.566467][T22046] veth0: left promiscuous mode [ 573.154944][T22088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4485'. [ 573.486905][T22109] netlink: 'syz.4.4491': attribute type 8 has an invalid length. [ 574.192145][T22153] syzkaller1: entered promiscuous mode [ 574.223927][T22153] syzkaller1: entered allmulticast mode [ 574.308427][T22106] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 574.442580][T22166] netlink: 'syz.3.4504': attribute type 23 has an invalid length. [ 574.510537][T22169] sctp: [Deprecated]: syz.3.4504 (pid 22169) Use of struct sctp_assoc_value in delayed_ack socket option. [ 574.510537][T22169] Use struct sctp_sack_info instead [ 574.768701][T22176] sctp: [Deprecated]: syz.4.4509 (pid 22176) Use of int in max_burst socket option. [ 574.768701][T22176] Use struct sctp_assoc_value instead [ 575.047066][T22192] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 575.074168][T22150] lec:lec_atm_close: lec0: Shut down! [ 575.159528][T22194] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 575.461643][T22205] mac80211_hwsim hwsim36 ÿ: renamed from wlan1 (while UP) [ 575.615264][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 575.626327][T22211] netlink: 'syz.0.4520': attribute type 13 has an invalid length. [ 575.644483][T22211] netlink: 'syz.0.4520': attribute type 13 has an invalid length. [ 576.046858][T22231] dvmrp0: entered allmulticast mode [ 576.083765][T22238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 576.496430][T22256] __nla_validate_parse: 14 callbacks suppressed [ 576.496450][T22256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4537'. [ 576.660428][T22267] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 576.776711][T22274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4543'. [ 576.833524][T22280] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4546'. [ 576.876293][T22279] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 576.918046][T22279] sctp: [Deprecated]: syz.1.4545 (pid 22279) Use of struct sctp_assoc_value in delayed_ack socket option. [ 576.918046][T22279] Use struct sctp_sack_info instead [ 576.950944][T22289] netlink: 'syz.0.4549': attribute type 14 has an invalid length. [ 576.981762][T12093] nci: nci_ntf_packet: unknown ntf opcode 0x110 [ 576.996673][T22294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4545'. [ 577.034496][T22295] syzkaller0: entered promiscuous mode [ 577.041149][T22295] syzkaller0: entered allmulticast mode [ 577.062278][T22295] gre1: entered promiscuous mode [ 577.068304][T22295] gre1: entered allmulticast mode [ 577.112556][T22299] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 577.830502][T22304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 577.833603][T22308] netlink: 596 bytes leftover after parsing attributes in process `syz.1.4554'. [ 577.867023][T22310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4554'. [ 577.878163][T22311] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4553'. [ 577.912022][T22311] netlink: 'syz.0.4553': attribute type 6 has an invalid length. [ 578.131115][T22322] netlink: 'syz.0.4557': attribute type 83 has an invalid length. [ 578.319504][T22332] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4560'. [ 578.349853][T22332] netlink: 'syz.3.4560': attribute type 2 has an invalid length. [ 578.384238][T22332] netlink: 'syz.3.4560': attribute type 1 has an invalid length. [ 578.394024][T22337] netlink: 'syz.2.4562': attribute type 1 has an invalid length. [ 578.406024][T22332] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4560'. [ 578.480614][T22337] bond2: (slave gretap1): making interface the new active one [ 578.511067][T22337] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 578.560418][T22345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4565'. [ 578.762318][T22354] netlink: 'syz.3.4566': attribute type 21 has an invalid length. [ 578.805673][T22354] netlink: 'syz.3.4566': attribute type 6 has an invalid length. [ 579.069461][T22373] netlink: 'syz.3.4573': attribute type 4 has an invalid length. [ 579.500796][T22387] netlink: 'syz.2.4579': attribute type 10 has an invalid length. [ 579.541249][T22387] dummy0: entered promiscuous mode [ 579.558617][T22387] bridge0: port 1(dummy0) entered blocking state [ 579.583070][T22387] bridge0: port 1(dummy0) entered disabled state [ 579.598086][T22396] netlink: 'syz.1.4581': attribute type 11 has an invalid length. [ 579.598195][T22387] dummy0: entered allmulticast mode [ 579.654336][T22393] IPVS: length: 38 != 24 [ 579.896926][T22419] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 580.219341][T22431] syzkaller0: entered promiscuous mode [ 580.224943][T22431] syzkaller0: entered allmulticast mode [ 581.832323][T22435] macvlan0: left promiscuous mode [ 581.838247][T22435] macvlan0: left allmulticast mode [ 582.088415][T22460] netlink: 'syz.4.4601': attribute type 1 has an invalid length. [ 582.107067][T22460] netlink: 'syz.4.4601': attribute type 1 has an invalid length. [ 582.231859][T22471] __nla_validate_parse: 6 callbacks suppressed [ 582.231881][T22471] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4604'. [ 582.566769][T22488] wlan1 speed is unknown, defaulting to 1000 [ 583.073506][T22488] hsr0 speed is unknown, defaulting to 1000 [ 583.175804][T22524] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4616'. [ 583.251621][T22524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4616'. [ 583.320484][T22532] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4619'. [ 583.841508][T22558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4625'. [ 583.871249][T22561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4626'. [ 584.106373][T22564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.124192][T22564] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.148658][T22564] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 584.169909][T22579] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4631'. [ 584.331885][T22578] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4632'. [ 584.356095][T22578] netlink: 'syz.3.4632': attribute type 1 has an invalid length. [ 584.388319][T22573] tipc: Enabled bearer , priority 0 [ 584.410064][T22573] tipc: Resetting bearer [ 584.459761][T22595] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4633'. [ 584.669737][T22597] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 584.730313][T22614] openvswitch: netlink: Message has 8 unknown bytes. [ 584.739455][T22614] openvswitch: netlink: Message has 8 unknown bytes. [ 584.887421][T22569] tipc: Disabling bearer [ 584.911445][T22618] tipc: Enabled bearer , priority 0 [ 584.952423][T22622] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 584.970398][T22624] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4643'. [ 584.989112][T22618] syzkaller0: entered promiscuous mode [ 585.006714][T22618] syzkaller0: entered allmulticast mode [ 585.041845][T22622] tipc: Enabling of bearer rejected, failed to enable media [ 585.093775][T22618] tipc: Resetting bearer [ 585.103407][T22616] tipc: Resetting bearer [ 585.140268][T22632] netlink: 'syz.4.4645': attribute type 10 has an invalid length. [ 585.156318][T22616] tipc: Disabling bearer [ 585.178029][T22632] team0: Device ipvlan1 failed to register rx_handler [ 586.040865][T22654] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 586.063299][T22654] netlink: 'syz.2.4651': attribute type 2 has an invalid length. [ 586.401136][T22667] 8021q: adding VLAN 0 to HW filter on device bond3 [ 586.478338][T22679] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 586.490857][T22683] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 587.473197][T22742] __nla_validate_parse: 3 callbacks suppressed [ 587.473220][T22742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4671'. [ 587.578695][T22744] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4672'. [ 587.678178][T22747] netlink: 'syz.1.4673': attribute type 29 has an invalid length. [ 587.693407][T22747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4673'. [ 587.751979][T22762] netlink: 'syz.0.4675': attribute type 39 has an invalid length. [ 587.941851][T22770] macvtap1: entered allmulticast mode [ 587.951398][T22770] veth0_macvtap: entered allmulticast mode [ 587.977440][T22770] macvtap2: entered allmulticast mode [ 588.108748][T22782] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4684'. [ 588.125602][T22782] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4684'. [ 588.141295][T22782] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4684'. [ 588.155769][T22782] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4684'. [ 588.173328][T22782] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4684'. [ 588.210816][T22793] tipc: Enabling of bearer rejected, media not registered [ 588.260879][T22795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4686'. [ 588.290134][T22795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4686'. [ 588.608088][T22811] netlink: 'syz.0.4691': attribute type 3 has an invalid length. [ 588.617426][T22811] netlink: 'syz.0.4691': attribute type 2 has an invalid length. [ 588.735470][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.927858][T22827] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 588.963261][T22834] IPv6: sit1: Disabled Multicast RS [ 588.973908][T22834] sit1: entered allmulticast mode [ 589.168981][T22836] 8021q: adding VLAN 0 to HW filter on device bond5 [ 590.074801][T22894] netlink: 'syz.4.4713': attribute type 39 has an invalid length. [ 590.359214][T22915] tipc: Enabling of bearer rejected, failed to enable media [ 590.648329][T22934] netlink: 'syz.1.4725': attribute type 1 has an invalid length. [ 590.658300][T22935] netlink: 'syz.1.4725': attribute type 1 has an invalid length. [ 590.780543][T22940] netlink: 'syz.3.4726': attribute type 11 has an invalid length. [ 590.792015][T22930] netlink: 'syz.0.4723': attribute type 16 has an invalid length. [ 590.800949][T22930] netlink: 'syz.0.4723': attribute type 17 has an invalid length. [ 590.809636][T22940] netlink: 'syz.3.4726': attribute type 11 has an invalid length. [ 590.864338][T22930] vlan2: left promiscuous mode [ 590.870911][T22930] bond4: left promiscuous mode [ 590.878184][T22930] vlan2: left allmulticast mode [ 590.885964][T22930] bond4: left allmulticast mode [ 590.895643][T22930] gretap1: left allmulticast mode [ 590.905174][T22930] gretap1: left promiscuous mode [ 590.914545][T22930] xfrm1: left promiscuous mode [ 590.920146][T22930] xfrm1: left allmulticast mode [ 591.397995][T22971] xt_l2tp: unknown flags: 10 [ 591.417168][T22976] netlink: 'syz.4.4737': attribute type 1 has an invalid length. [ 591.431383][T22976] netlink: 'syz.4.4737': attribute type 2 has an invalid length. [ 591.780600][T22992] tipc: Enabled bearer , priority 0 [ 591.796326][T22992] syzkaller0: entered promiscuous mode [ 591.802186][T22992] syzkaller0: entered allmulticast mode [ 591.838143][T22992] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 591.894627][T22997] IPVS: set_ctl: invalid protocol: 44 172.30.0.2:20003 [ 591.953552][T22995] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 591.969878][T23005] netlink: 'syz.0.4746': attribute type 13 has an invalid length. [ 592.100583][T23005] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 592.122057][T22992] tipc: Resetting bearer [ 592.138410][T22991] tipc: Resetting bearer [ 592.190766][T22991] tipc: Disabling bearer [ 592.497744][T23035] netlink: 'syz.4.4753': attribute type 1 has an invalid length. [ 592.527961][T23032] wlan1 speed is unknown, defaulting to 1000 [ 592.548891][T23035] netlink: 'syz.4.4753': attribute type 3 has an invalid length. [ 592.597764][T23035] __nla_validate_parse: 20 callbacks suppressed [ 592.597786][T23035] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4753'. [ 592.909974][T23054] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 592.917336][T23054] IPv6: NLM_F_CREATE should be set when creating new route [ 592.924595][T23054] IPv6: NLM_F_CREATE should be set when creating new route [ 592.960241][T23054] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 593.038468][T23053] 8021q: adding VLAN 0 to HW filter on device bond6 [ 593.243443][T23032] hsr0 speed is unknown, defaulting to 1000 [ 593.474850][T23073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4765'. [ 593.545516][T23073] bond0: entered promiscuous mode [ 593.621919][T23073] bond_slave_1: entered promiscuous mode [ 593.676621][T23073] hsr1: entered promiscuous mode [ 595.025926][T23132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4784'. [ 595.042538][T23133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4783'. [ 595.060526][T23132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4784'. [ 595.214273][T23144] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4786'. [ 595.220356][T23149] netlink: 'syz.3.4788': attribute type 21 has an invalid length. [ 595.233712][T23149] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 595.351388][T23154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4789'. [ 595.650704][T23178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 595.855970][T23190] 8021q: VLANs not supported on gre0 [ 595.970123][T23193] netlink: 'syz.0.4798': attribute type 19 has an invalid length. [ 596.110968][T23208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4802'. [ 596.143076][T23213] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4804'. [ 596.174468][T23208] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 596.188942][T23208] bond5: (slave vcan1): Error -95 calling set_mac_address [ 596.221754][T23213] netlink: 'syz.0.4804': attribute type 23 has an invalid length. [ 596.368929][T23230] netlink: 'syz.4.4808': attribute type 1 has an invalid length. [ 596.460387][T23236] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20001 [ 596.579074][T23242] netlink: 81 bytes leftover after parsing attributes in process `syz.0.4813'. [ 596.789505][T23252] syzkaller0: entered allmulticast mode [ 596.886920][T23257] netlink: 'syz.2.4819': attribute type 39 has an invalid length. [ 596.999185][T23263] tipc: Enabled bearer , priority 0 [ 597.011840][T23263] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 597.021538][T23263] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 597.121481][T23263] tipc: Resetting bearer [ 597.184680][T23269] 8021q: VLANs not supported on team0 [ 597.559871][T23291] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 597.611987][T23294] macsec0: entered promiscuous mode [ 597.618695][T23294] macsec0: entered allmulticast mode [ 597.625428][T23294] veth1_macvtap: entered allmulticast mode [ 597.631430][T23294] macsec0: left promiscuous mode [ 597.638786][T23294] macsec0: left allmulticast mode [ 597.643851][T23294] veth1_macvtap: left allmulticast mode [ 597.776430][T23302] openvswitch: netlink: IPv4 tun info is not correct [ 598.115110][ T9] tipc: Node number set to 3188147087 [ 598.273961][T23328] __nla_validate_parse: 5 callbacks suppressed [ 598.273982][T23328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4846'. [ 598.388753][T23330] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4847'. [ 598.440839][T23334] tipc: Enabled bearer , priority 0 [ 598.460402][T23334] syzkaller0: entered promiscuous mode [ 598.466359][T23334] syzkaller0: entered allmulticast mode [ 598.475924][T23334] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 598.511176][T23334] tipc: Resetting bearer [ 598.536004][T23331] tipc: Resetting bearer [ 598.595954][T23331] tipc: Disabling bearer [ 598.707413][T23346] dvmrp0: entered allmulticast mode [ 598.730436][T23348] netlink: 'syz.2.4855': attribute type 27 has an invalid length. [ 598.733179][T23344] veth0: entered promiscuous mode [ 598.750662][T23341] veth0: left promiscuous mode [ 598.886199][T23358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4856'. [ 599.046349][T23368] sctp: [Deprecated]: syz.2.4858 (pid 23368) Use of int in maxseg socket option. [ 599.046349][T23368] Use struct sctp_assoc_value instead [ 599.107774][T23370] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4859'. [ 599.135761][T23370] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4859'. [ 599.147511][T23372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4860'. [ 599.346820][T23383] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4863'. [ 599.362380][T23385] netlink: 'syz.1.4864': attribute type 15 has an invalid length. [ 599.371477][T23385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4864'. [ 599.392190][T23385] netlink: 'syz.1.4864': attribute type 15 has an invalid length. [ 599.403234][ T3497] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 599.418878][T23385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4864'. [ 599.430872][ T3497] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 599.444368][ T3497] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 599.462411][ T3497] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 599.742668][T23398] tipc: Enabling of bearer rejected, already enabled [ 599.762225][T23399] sctp: [Deprecated]: syz.1.4867 (pid 23399) Use of struct sctp_assoc_value in delayed_ack socket option. [ 599.762225][T23399] Use struct sctp_sack_info instead [ 600.162727][T23426] netlink: 'syz.2.4876': attribute type 1 has an invalid length. [ 600.384726][T23429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4877'. [ 601.021849][T23452] wlan1 speed is unknown, defaulting to 1000 [ 601.182493][T23463] gre0: entered allmulticast mode [ 601.470919][T23478] bridge5: entered promiscuous mode [ 601.476977][T23478] bridge5: entered allmulticast mode [ 601.737644][T23496] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 601.877172][T23452] hsr0 speed is unknown, defaulting to 1000 [ 601.990766][T23505] macvtap1: entered promiscuous mode [ 602.010524][T23505] vlan0: entered promiscuous mode [ 602.020614][T23505] team0: Device macvtap1 failed to register rx_handler [ 602.044927][T23505] vlan0: left promiscuous mode [ 602.648488][T23532] tc_dump_action: action bad kind [ 603.010829][T23553] netlink: 'syz.1.4908': attribute type 1 has an invalid length. [ 603.602747][T23582] __nla_validate_parse: 8 callbacks suppressed [ 603.602770][T23582] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4918'. [ 603.858789][T21511] wlan1 speed is unknown, defaulting to 1000 [ 603.880927][T21511] syz0: Port: 1 Link DOWN [ 603.906591][ T5936] wlan1 speed is unknown, defaulting to 1000 [ 604.157241][T23600] syzkaller1: entered promiscuous mode [ 604.180733][T23600] syzkaller1: entered allmulticast mode [ 604.201346][T23607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4927'. [ 604.227487][T23609] syzkaller0: entered promiscuous mode [ 604.245099][T23609] syzkaller0: entered allmulticast mode [ 604.252866][T12094] veth0_to_bridge: left allmulticast mode [ 604.275342][T12094] veth0_to_bridge: left promiscuous mode [ 604.281389][T12094] bridge0: port 1(veth0_to_bridge) entered disabled state [ 604.573604][T12094] dvmrp1 (unregistering): left allmulticast mode [ 605.294941][T12094] bond0 (unregistering): Released all slaves [ 605.411567][T12094] bond1 (unregistering): Released all slaves [ 605.427907][T12094] bond2 (unregistering): Released all slaves [ 605.542245][T12094] bond3 (unregistering): Released all slaves [ 605.657400][T12094] bond4 (unregistering): Released all slaves [ 605.774240][T12094] bond5 (unregistering): Released all slaves [ 605.790516][T12094] bond6 (unregistering): Released all slaves [ 605.823597][T23613] tipc: Enabled bearer , priority 0 [ 605.864874][T23627] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 605.972938][T23631] tipc: Resetting bearer [ 606.009224][T12094] tipc: Disabling bearer [ 606.053288][T12094] tipc: Disabling bearer [ 606.079337][T12094] tipc: Left network mode [ 606.090602][T23608] tipc: Resetting bearer [ 606.127359][T12094] IPVS: stopping backup sync thread 12900 ... [ 606.168234][T23608] tipc: Disabling bearer [ 606.184485][T23645] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4935'. [ 606.328489][T23655] netlink: 'syz.4.4938': attribute type 23 has an invalid length. [ 606.475515][T23659] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4939'. [ 606.622713][T23664] netlink: 'syz.4.4941': attribute type 1 has an invalid length. [ 606.770980][T23671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4945'. [ 606.851451][T23672] tipc: Enabled bearer , priority 0 [ 606.869207][T23673] tipc: Enabling of bearer rejected, already enabled [ 607.122719][T23673] tipc: Disabling bearer [ 607.242318][T12094] hsr_slave_0: left promiscuous mode [ 607.317166][T12094] pim6reg527 (unregistering): left allmulticast mode [ 608.289486][T23698] syzkaller0: entered promiscuous mode [ 608.299764][T23698] syzkaller0: entered allmulticast mode [ 610.386095][T23732] tipc: Enabled bearer , priority 0 [ 610.440710][T23733] syzkaller0: entered promiscuous mode [ 610.455131][T23733] syzkaller0: entered allmulticast mode [ 610.476623][T23745] netlink: 'syz.4.4961': attribute type 1 has an invalid length. [ 610.479089][T23737] tipc: Resetting bearer [ 610.484404][T23745] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4961'. [ 610.523243][T23749] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4960'. [ 610.638901][T23737] tipc: Resetting bearer [ 610.667398][T23758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4963'. [ 610.744165][T23737] tipc: Disabling bearer [ 610.821619][T23772] tipc: Enabling of bearer rejected, failed to enable media [ 611.022812][T23782] nbd: device at index 3 is going down [ 611.061883][T12094] IPVS: stop unused estimator thread 0... [ 611.224098][T12089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.266506][T12089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.380733][T23792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4971'. [ 611.690839][T23817] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4978'. [ 612.144830][T23837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4986'. [ 612.169237][T23838] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 612.310559][T23849] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4989'. [ 613.322911][T23854] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 613.373675][T23856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4989'. [ 613.622666][T23875] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 3, id = 0 [ 613.676514][T23874] syzkaller1: entered promiscuous mode [ 613.682324][T23874] syzkaller1: entered allmulticast mode [ 613.838081][T23894] gre0: entered promiscuous mode [ 613.858917][T23894] gre0: left allmulticast mode [ 613.875647][T23894] netlink: 'syz.4.5000': attribute type 1 has an invalid length. [ 613.950152][T23897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5000'. [ 614.107166][T23908] Unsupported ieee802154 address type: 0 [ 614.124352][T23906] netlink: 'syz.3.5008': attribute type 10 has an invalid length. [ 614.130242][T23908] IPVS: set_ctl: invalid protocol: 1 172.30.1.3:20000 [ 614.191962][T23906] team0: Device hsr_slave_0 failed to register rx_handler [ 614.291186][T23916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5012'. [ 614.302090][T23922] syzkaller1: entered promiscuous mode [ 614.307741][T23922] syzkaller1: entered allmulticast mode [ 614.642243][T23938] : renamed from hsr0 [ 614.730661][T23946] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 615.340164][T23980] tipc: Enabled bearer , priority 0 [ 615.348020][T23980] syzkaller0: entered promiscuous mode [ 615.353518][T23980] syzkaller0: entered allmulticast mode [ 615.363073][T23980] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 615.396181][T23980] tipc: Resetting bearer [ 615.408295][T23979] tipc: Resetting bearer [ 615.429184][T23979] tipc: Disabling bearer [ 615.510319][T23985] __nla_validate_parse: 1 callbacks suppressed [ 615.510341][T23985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5031'. [ 615.526343][T23986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5031'. [ 615.674879][T23990] batadv_slave_0: entered promiscuous mode [ 615.693102][T23990] debugfs: 'hsr1' already exists in 'hsr' [ 615.699446][T23990] Cannot create hsr debugfs directory [ 615.718504][T23990] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.5033'. [ 615.868858][T24002] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5038'. [ 615.950374][T24009] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5040'. [ 616.414639][T24034] netlink: 'syz.0.5049': attribute type 9 has an invalid length. [ 616.435500][T24034] netlink: 'syz.0.5049': attribute type 9 has an invalid length. [ 616.552917][T24041] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5053'. [ 616.564386][T24041] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5053'. [ 616.591890][T24042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5052'. [ 616.712143][T24049] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5055'. [ 616.958245][T24061] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5060'. [ 617.021374][T24059] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 617.187595][T24073] netlink: 'syz.4.5066': attribute type 1 has an invalid length. [ 617.207467][T24073] netlink: 'syz.4.5066': attribute type 1 has an invalid length. [ 617.236736][T24073] netlink: 'syz.4.5066': attribute type 1 has an invalid length. [ 617.439875][T24093] netlink: 'syz.0.5070': attribute type 12 has an invalid length. [ 617.579798][T24099] syzkaller0: entered promiscuous mode [ 617.605179][T24099] syzkaller0: entered allmulticast mode [ 617.648390][T24099] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 617.921756][T24116] syzkaller1: entered promiscuous mode [ 617.940188][T24116] syzkaller1: entered allmulticast mode [ 618.152827][T24133] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 618.357634][T24143] tipc: Enabling of bearer rejected, already enabled [ 618.480073][T24146] IPVS: Scheduler module ip_vs_sip not found [ 618.792894][T24172] gre1: entered promiscuous mode [ 618.812915][T24172] gre1: entered allmulticast mode [ 619.076830][T24189] netlink: 'syz.1.5097': attribute type 1 has an invalid length. [ 619.143578][T24189] bond3: entered promiscuous mode [ 619.149454][T24189] 8021q: adding VLAN 0 to HW filter on device bond3 [ 619.162789][T24188] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 619.269994][T24201] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 619.304600][T24201] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 619.391599][T24204] tipc: Enabling of bearer rejected, already enabled [ 619.760546][T24222] batman_adv: batadv0: Adding interface: wlan1 [ 619.787584][T24222] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.820843][T24222] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 619.851719][T24230] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 620.071854][T24240] macsec0: entered promiscuous mode [ 620.078747][T24240] macsec0: entered allmulticast mode [ 620.084262][T24240] veth1_macvtap: entered allmulticast mode [ 620.228015][T12089] tipc: Resetting bearer [ 620.467684][T24257] vcan0: entered allmulticast mode [ 620.521422][T24260] __nla_validate_parse: 10 callbacks suppressed [ 620.521446][T24260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5117'. [ 620.551357][T24260] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 620.594164][T24264] veth0: entered promiscuous mode [ 620.603580][T24263] veth0: left promiscuous mode [ 620.657271][T24266] netlink: 'syz.0.5119': attribute type 1 has an invalid length. [ 620.666598][T24266] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5119'. [ 620.789938][T24272] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5122'. [ 620.799772][T24272] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5122'. [ 620.811317][T24274] tipc: New replicast peer: 0.0.0.0 [ 620.817617][T24274] tipc: Enabled bearer , priority 10 [ 620.831255][T24274] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5121'. [ 620.914639][T24274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.927230][T24280] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5123'. [ 620.937845][T24274] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 620.952017][T24274] bond0 (unregistering): Released all slaves [ 620.973541][T24277] netlink: 'syz.2.5124': attribute type 1 has an invalid length. [ 620.994522][T24278] netlink: 'syz.2.5124': attribute type 1 has an invalid length. [ 621.180592][T24290] veth0: entered promiscuous mode [ 621.191984][T24289] veth0: left promiscuous mode [ 621.224324][T24292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5128'. [ 621.397971][T24303] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 621.462833][T24308] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5133'. [ 621.947438][T16964] tipc: Node number set to 1602509630 [ 622.299062][T24350] netlink: 'syz.1.5143': attribute type 1 has an invalid length. [ 622.308424][T24350] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5143'. [ 622.309113][T24356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5144'. [ 622.330130][T24357] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 622.454807][T24366] netlink: 'syz.0.5146': attribute type 1 has an invalid length. [ 622.682009][T24382] netlink: 'syz.3.5149': attribute type 4 has an invalid length. [ 622.705576][T24382] netlink: 'syz.3.5149': attribute type 3 has an invalid length. [ 622.877264][T24386] netlink: 'syz.1.5152': attribute type 10 has an invalid length. [ 622.911302][T24386] team0: Device ipvlan1 failed to register rx_handler [ 622.967274][T24388] tipc: Enabling of bearer rejected, already enabled [ 623.272807][T24399] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 623.432333][T24399] netlink: 'syz.3.5157': attribute type 2 has an invalid length. [ 623.756432][T24418] syzkaller1: entered promiscuous mode [ 623.761970][T24418] syzkaller1: entered allmulticast mode [ 623.814613][T24425] IPv6: sit1: Disabled Multicast RS [ 623.836894][T24418] macsec4: entered promiscuous mode [ 623.842349][T24418] macsec4: entered allmulticast mode [ 624.289570][T24452] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 624.942491][T24491] tipc: New replicast peer: 0.0.0.0 [ 624.950420][T24491] tipc: Enabled bearer , priority 10 [ 624.977085][T24491] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 625.214471][T24504] 8021q: VLANs not supported on sit0 [ 625.303942][T24510] IPv6: Can't replace route, no match found [ 625.405675][T24510] nbd2: detected capacity change from 0 to 63 [ 625.413511][ T51] block nbd2: Receive control failed (result -32) [ 625.522799][T24520] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 625.543481][T24523] warn_alloc: 1 callbacks suppressed [ 625.543503][T24523] syz.4.5194: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 625.664269][T24523] CPU: 0 UID: 0 PID: 24523 Comm: syz.4.5194 Not tainted syzkaller #0 PREEMPT(full) [ 625.664299][T24523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 625.664313][T24523] Call Trace: [ 625.664321][T24523] [ 625.664331][T24523] dump_stack_lvl+0x189/0x250 [ 625.664366][T24523] ? __pfx_dump_stack_lvl+0x10/0x10 [ 625.664391][T24523] ? __pfx__printk+0x10/0x10 [ 625.664421][T24523] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 625.664448][T24523] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 625.664475][T24523] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 625.664503][T24523] warn_alloc+0x214/0x310 [ 625.664536][T24523] ? stack_depot_save_flags+0x40/0x860 [ 625.664569][T24523] ? __pfx_warn_alloc+0x10/0x10 [ 625.664603][T24523] ? kasan_save_track+0x4f/0x80 [ 625.664629][T24523] ? xskq_create+0x56/0x170 [ 625.664658][T24523] ? xsk_init_queue+0xb0/0x110 [ 625.664683][T24523] ? xsk_setsockopt+0x4dc/0x8d0 [ 625.664707][T24523] ? do_sock_setsockopt+0x17c/0x1b0 [ 625.664726][T24523] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 625.664746][T24523] ? do_syscall_64+0xfa/0x3b0 [ 625.664762][T24523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.664791][T24523] __vmalloc_node_range_noprof+0x125/0x12f0 [ 625.664854][T24523] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 625.664885][T24523] ? xskq_create+0x56/0x170 [ 625.664917][T24523] ? __kasan_kmalloc+0x93/0xb0 [ 625.664948][T24523] vmalloc_user_noprof+0xad/0xf0 [ 625.664984][T24523] ? xskq_create+0xbf/0x170 [ 625.665014][T24523] xskq_create+0xbf/0x170 [ 625.665046][T24523] xsk_init_queue+0xb0/0x110 [ 625.665079][T24523] xsk_setsockopt+0x4dc/0x8d0 [ 625.665110][T24523] ? __pfx_xsk_setsockopt+0x10/0x10 [ 625.665137][T24523] ? __pfx_aa_sk_perm+0x10/0x10 [ 625.665175][T24523] ? aa_sock_opt_perm+0xff/0x1b0 [ 625.665199][T24523] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 625.665222][T24523] ? __pfx_xsk_setsockopt+0x10/0x10 [ 625.665260][T24523] do_sock_setsockopt+0x17c/0x1b0 [ 625.665289][T24523] __x64_sys_setsockopt+0x13f/0x1b0 [ 625.665318][T24523] do_syscall_64+0xfa/0x3b0 [ 625.665337][T24523] ? lockdep_hardirqs_on+0x9c/0x150 [ 625.665368][T24523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.665387][T24523] ? clear_bhb_loop+0x60/0xb0 [ 625.665410][T24523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.665431][T24523] RIP: 0033:0x7f279458ebe9 [ 625.665450][T24523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.665468][T24523] RSP: 002b:00007f27927f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 625.665491][T24523] RAX: ffffffffffffffda RBX: 00007f27947c5fa0 RCX: 00007f279458ebe9 [ 625.665506][T24523] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 625.665518][T24523] RBP: 00007f2794611e19 R08: 0000000000000004 R09: 0000000000000000 [ 625.665530][T24523] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.665543][T24523] R13: 00007f27947c6038 R14: 00007f27947c5fa0 R15: 00007fffd78a8f28 [ 625.665577][T24523] [ 625.975565][T24535] netlink: 'syz.0.5199': attribute type 1 has an invalid length. [ 625.984562][T24533] __nla_validate_parse: 9 callbacks suppressed [ 625.984582][T24533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5197'. [ 626.000476][T24523] Mem-Info: [ 626.003625][T24523] active_anon:4634 inactive_anon:0 isolated_anon:0 [ 626.003625][T24523] active_file:2694 inactive_file:40011 isolated_file:0 [ 626.003625][T24523] unevictable:768 dirty:42 writeback:0 [ 626.003625][T24523] slab_reclaimable:12823 slab_unreclaimable:141201 [ 626.003625][T24523] mapped:29012 shmem:1364 pagetables:1367 [ 626.003625][T24523] sec_pagetables:0 bounce:0 [ 626.003625][T24523] kernel_misc_reclaimable:0 [ 626.003625][T24523] free:1276641 free_pcp:15967 free_cma:0 [ 626.055464][T24536] netlink: 'syz.0.5199': attribute type 1 has an invalid length. [ 626.069561][T24523] Node 0 active_anon:18536kB inactive_anon:0kB active_file:10776kB inactive_file:159840kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116048kB dirty:168kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12340kB pagetables:5312kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 626.120031][T24523] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 626.150610][T24523] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 626.189153][T24523] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 626.195531][T24523] Node 0 DMA32 free:1200672kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18528kB inactive_anon:0kB active_file:10776kB inactive_file:158272kB unevictable:1536kB writepending:168kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:41316kB local_pcp:21288kB free_cma:0kB [ 626.243036][T24523] lowmem_reserve[]: 0 0 1 1 1 [ 626.255400][T24523] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 626.311420][T24523] lowmem_reserve[]: 0 0 0 0 0 [ 626.321129][T24523] Node 1 Normal free:3890788kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22096kB local_pcp:11168kB free_cma:0kB [ 626.359118][T24523] lowmem_reserve[]: 0 0 0 0 0 [ 626.367906][T24523] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 626.383847][T24523] Node 0 DMA32: 3285*4kB (UME) 786*8kB (UM) 259*16kB (UM) 201*32kB (UM) 418*64kB (UME) 433*128kB (UME) 418*256kB (UM) 299*512kB (UM) 177*1024kB (UME) 2*2048kB (UE) 157*4096kB (UM) = 1200692kB [ 626.403617][T24523] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 626.419050][T24523] Node 1 Normal: 211*4kB (UE) 59*8kB (UME) 38*16kB (UME) 95*32kB (UME) 28*64kB (UME) 6*128kB (UME) 5*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3890788kB [ 626.441593][T24523] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 626.451483][T24523] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 626.466307][T24523] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 626.491802][T24523] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 626.509476][T24523] 45390 total pagecache pages [ 626.514287][T24523] 0 pages in swap cache [ 626.519409][T24523] Free swap = 124996kB [ 626.523766][T24523] Total swap = 124996kB [ 626.528376][T24523] 2097051 pages RAM [ 626.532383][T24523] 0 pages HighMem/MovableOnly [ 626.537474][T24523] 425667 pages reserved [ 626.541731][T24523] 0 pages cma reserved [ 626.876017][T24560] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5201'. [ 627.174767][T24576] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 627.335731][T24584] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5212'. [ 627.465828][T24589] tipc: Enabled bearer , priority 0 [ 627.556637][T24594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5216'. [ 627.603317][T24589] syzkaller0: entered promiscuous mode [ 627.609188][T24589] syzkaller0: entered allmulticast mode [ 627.621390][T24589] tipc: Resetting bearer [ 627.650004][T24588] tipc: Resetting bearer [ 629.330016][T24588] tipc: Disabling bearer [ 629.495808][T24629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5223'. [ 629.538366][T24631] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5225'. [ 629.681155][T24636] netlink: 'syz.4.5227': attribute type 21 has an invalid length. [ 629.729686][T24642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5230'. [ 651.286255][T24663] team0: Cannot enslave team device to itself [ 651.309554][T24663] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5233'. [ 651.338979][T24667] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 651.385653][T24666] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 651.431716][T24666] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 651.491294][T24673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5237'. [ 651.495569][T24675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5238'. [ 651.520968][T24675] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 651.608947][T24681] netlink: 'syz.0.5239': attribute type 1 has an invalid length. [ 651.628425][T24681] netlink: 'syz.0.5239': attribute type 1 has an invalid length. [ 651.642250][T24681] netlink: 'syz.0.5239': attribute type 1 has an invalid length. [ 651.651342][T24681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5239'. [ 651.907088][T24703] gtp0: entered promiscuous mode [ 651.912197][T24703] gtp0: entered allmulticast mode [ 652.054589][T24710] netlink: 'syz.2.5251': attribute type 10 has an invalid length. [ 652.083434][T24710] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 652.153722][T24716] netlink: 'syz.3.5252': attribute type 6 has an invalid length. [ 652.199155][T24716] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5252'. [ 652.203109][T24719] netlink: 204 bytes leftover after parsing attributes in process `syz.2.5254'. [ 652.224777][T24716] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5252'. [ 652.259247][T24725] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5255'. [ 652.387728][T24733] netlink: 'syz.2.5258': attribute type 11 has an invalid length. [ 652.456794][T24731] syzkaller0: entered promiscuous mode [ 652.463038][T24731] syzkaller0: entered allmulticast mode [ 652.479961][T24728] tipc: Enabled bearer , priority 0 [ 652.571430][T24728] tipc: Resetting bearer [ 652.594602][T24747] netlink: 'syz.3.5261': attribute type 1 has an invalid length. [ 652.736994][T24757] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5261'. [ 654.338440][T24728] tipc: Disabling bearer [ 654.540412][T24779] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5271'. [ 655.435502][T12104] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 655.532839][T24825] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20000 [ 655.544933][T24825] netlink: 'syz.4.5287': attribute type 8 has an invalid length. [ 655.849501][T24841] netlink: 'syz.4.5293': attribute type 5 has an invalid length. [ 656.142702][T24860] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 656.272356][T24864] netlink: 'syz.1.5301': attribute type 7 has an invalid length. [ 656.393204][T24878] __nla_validate_parse: 5 callbacks suppressed [ 656.393225][T24878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5306'. [ 656.526181][T24886] tipc: Enabled bearer , priority 0 [ 656.533586][T24882] tipc: Enabling of bearer rejected, already enabled [ 656.644728][T24883] tipc: Disabling bearer [ 656.890121][T24911] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5316'. [ 656.923116][T24917] sctp: [Deprecated]: syz.0.5317 (pid 24917) Use of int in max_burst socket option deprecated. [ 656.923116][T24917] Use struct sctp_assoc_value instead [ 656.945909][T24915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5318'. [ 656.965294][T24917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5317'. [ 657.130906][T24930] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode [ 657.224409][T24937] dummy0: left allmulticast mode [ 657.229998][T24937] bridge0: port 1(dummy0) entered disabled state [ 657.249333][T24937] bond0: (slave bridge_slave_1): Releasing backup interface [ 657.263145][T24937] bond3: (slave veth0_to_bond): Releasing backup interface [ 657.300600][T24937] batman_adv: batadv0: Removing interface: wlan1 [ 657.315800][T24937] bond2: (slave gretap1): Releasing active interface [ 657.317006][T16964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.717285][T24956] syzkaller1: entered promiscuous mode [ 657.734933][T24956] syzkaller1: entered allmulticast mode [ 657.780502][T24956] macsec2: entered promiscuous mode [ 657.807261][T24956] bridge0: entered promiscuous mode [ 657.817312][T24956] macsec2: entered allmulticast mode [ 657.839485][T24956] bridge0: entered allmulticast mode [ 657.851808][T24956] bridge0: port 1(macsec2) entered blocking state [ 657.872202][T24956] bridge0: port 1(macsec2) entered disabled state [ 657.898944][T24956] bridge0: left allmulticast mode [ 657.904053][T24956] bridge0: left promiscuous mode [ 658.034191][T24973] netlink: 'syz.2.5336': attribute type 1 has an invalid length. [ 658.048315][T24973] netlink: 'syz.2.5336': attribute type 1 has an invalid length. [ 658.259459][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.282312][T24995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5342'. [ 658.632998][T25001] IPVS: Unknown mcast interface: vcan0 [ 658.802293][T25018] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5349'. [ 658.819894][T25018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5349'. [ 658.835278][T25018] netlink: 'syz.0.5349': attribute type 5 has an invalid length. [ 658.843206][T25018] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5349'. [ 658.877186][T25018] geneve3: entered promiscuous mode [ 658.904839][T25018] geneve3: entered allmulticast mode [ 658.943352][T12105] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 658.955840][T12105] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 658.964559][T12105] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 658.974143][T25029] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5354'. [ 659.002991][T12105] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 659.070672][T25032] netlink: 'syz.2.5353': attribute type 4 has an invalid length. [ 659.072425][T25036] netlink: 'syz.4.5355': attribute type 1 has an invalid length. [ 659.139613][T25036] 8021q: adding VLAN 0 to HW filter on device bond9 [ 659.154174][T25040] tipc: Enabling of bearer rejected, already enabled [ 659.229272][T25046] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5358'. [ 659.271137][T25036] gretap2: entered promiscuous mode [ 659.566920][T25068] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 659.775215][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 659.944505][T25095] bridge0: port 2(vlan4) entered blocking state [ 659.953211][T25095] bridge0: port 2(vlan4) entered disabled state [ 659.963639][T25095] vlan4: entered allmulticast mode [ 659.969669][T25095] bridge0: entered allmulticast mode [ 659.981481][T25095] vlan4: left allmulticast mode [ 659.998175][T25095] bridge0: left allmulticast mode [ 660.344116][T25112] xt_policy: too many policy elements [ 668.735217][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 681.493780][T25125] netlink: 'syz.1.5381': attribute type 1 has an invalid length. [ 681.502728][T25124] netlink: 'syz.3.5383': attribute type 3 has an invalid length. [ 681.536837][T25124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 681.570212][T25125] 8021q: adding VLAN 0 to HW filter on device bond4 [ 681.599133][T25125] syzkaller0: entered promiscuous mode [ 681.604662][T25125] syzkaller0: entered allmulticast mode [ 681.612737][T25125] __nla_validate_parse: 5 callbacks suppressed [ 681.612756][T25125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5381'. [ 681.694366][T25125] bond4: (slave gretap1): making interface the new active one [ 681.725303][T25125] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 681.975588][T25151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5393'. [ 682.041086][T25157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5395'. [ 682.197506][T25166] netlink: 'syz.3.5397': attribute type 2 has an invalid length. [ 682.215137][T25166] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5397'. [ 682.520648][T25198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5404'. [ 682.653541][T25208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5402'. [ 682.897777][T25198] geneve2: entered promiscuous mode [ 683.389749][T25242] syzkaller0: entered promiscuous mode [ 683.405865][T25242] syzkaller0: entered allmulticast mode [ 683.819541][T25251] wlan1 speed is unknown, defaulting to 1000 [ 683.925628][T25270] sctp: [Deprecated]: syz.2.5426 (pid 25270) Use of int in max_burst socket option deprecated. [ 683.925628][T25270] Use struct sctp_assoc_value instead [ 683.959403][T25273] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.5427'. [ 684.004270][T25274] tipc: Enabled bearer , priority 0 [ 684.044802][T25274] tipc: Disabling bearer [ 684.149986][T25281] IPVS: Error joining to the multicast group [ 684.175296][T25281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5428'. [ 684.231970][T25281] vlan4: entered allmulticast mode [ 684.251061][T25281] mac80211_hwsim hwsim29 wlan0: entered allmulticast mode [ 684.327949][T25251] hsr0 speed is unknown, defaulting to 1000 [ 684.338079][T25249] wlan1 speed is unknown, defaulting to 1000 [ 684.449503][T25294] netlink: 'syz.3.5432': attribute type 10 has an invalid length. [ 684.475327][T25294] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5432'. [ 684.537670][T25294] team0: Port device geneve0 added [ 684.861725][T25307] netlink: 'syz.2.5438': attribute type 1 has an invalid length. [ 684.874781][T25307] netlink: 'syz.2.5438': attribute type 1 has an invalid length. [ 684.891243][T25307] netlink: 'syz.2.5438': attribute type 1 has an invalid length. [ 684.900607][T25307] netlink: 'syz.2.5438': attribute type 2 has an invalid length. [ 684.907968][T25249] hsr0 speed is unknown, defaulting to 1000 [ 684.912366][T25307] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5438'. [ 685.763702][T25340] wlan1 speed is unknown, defaulting to 1000 [ 686.286901][T25340] hsr0 speed is unknown, defaulting to 1000 [ 686.294195][T25367] netlink: 'syz.1.5456': attribute type 2 has an invalid length. [ 686.369574][T25372] netlink: 'syz.1.5456': attribute type 4 has an invalid length. [ 686.655155][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 686.791624][T25386] nft_compat: unsupported protocol 0 [ 687.219376][T25409] veth0: entered promiscuous mode [ 687.240821][T25413] __nla_validate_parse: 1 callbacks suppressed [ 687.240837][T25413] netlink: 172 bytes leftover after parsing attributes in process `syz.1.5472'. [ 687.247114][T25409] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5470'. [ 687.250141][T25409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5470'. [ 687.300689][T12105] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.308429][T25409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5470'. [ 687.322308][T12105] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.331649][T12105] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.367640][T12105] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.393311][T25407] veth0: left promiscuous mode [ 687.731204][T25437] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5476'. [ 687.744678][T25436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5476'. [ 687.765708][T25437] netlink: 'syz.2.5476': attribute type 7 has an invalid length. [ 687.773605][T25436] netlink: 'syz.2.5476': attribute type 7 has an invalid length. [ 687.784904][T25437] netlink: 'syz.2.5476': attribute type 8 has an invalid length. [ 687.793992][T25436] netlink: 'syz.2.5476': attribute type 8 has an invalid length. [ 687.808504][T25437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5476'. [ 687.821265][T25436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5476'. [ 688.071846][T25456] netlink: 'syz.2.5481': attribute type 1 has an invalid length. [ 688.080511][T25456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5481'. [ 688.119778][T25458] netlink: 'syz.4.5482': attribute type 1 has an invalid length. [ 688.222101][T25460] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 688.239757][T25460] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 688.260620][T25465] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5483'. [ 688.310441][T25458] gretap2: entered promiscuous mode [ 688.343981][T25458] bond10: (slave gretap2): making interface the new active one [ 688.361204][T25458] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 688.692877][T25494] bridge: RTM_NEWNEIGH with invalid ether address [ 688.786719][T25492] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 688.889932][T25504] netlink: 'syz.2.5496': attribute type 1 has an invalid length. [ 689.313995][T25536] netlink: 'syz.2.5507': attribute type 1 has an invalid length. [ 689.740650][T25566] netlink: 'syz.0.5514': attribute type 32 has an invalid length. [ 689.751350][T25566] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 689.898944][T25571] sctp: [Deprecated]: syz.2.5518 (pid 25571) Use of struct sctp_assoc_value in delayed_ack socket option. [ 689.898944][T25571] Use struct sctp_sack_info instead [ 690.028414][T25589] netlink: 'syz.4.5521': attribute type 1 has an invalid length. [ 690.042821][T25589] tipc: Enabling of bearer rejected, already enabled [ 690.177782][T25595] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 690.401419][T25612] nbd: must specify an index to disconnect [ 690.616639][T25617] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:f425:1fff:fe64:1718 error=-28 [ 691.446419][T25617] infiniband syz!: set down [ 691.451338][T25617] infiniband syz!: added team_slave_0 [ 691.470162][T25617] syz!: rxe_create_cq: returned err = -12 [ 691.476345][T25617] infiniband syz!: Couldn't create ib_mad CQ [ 691.482886][T25617] infiniband syz!: Couldn't open port 1 [ 691.514296][T25617] RDS/IB: syz!: added [ 691.519550][T25617] smc: adding ib device syz! with port count 1 [ 691.527706][T25617] smc: ib device syz! port 1 has pnetid [ 691.655711][T25656] ksmbd: Unknown IPC event: 1, ignore. [ 691.661957][T25656] openvswitch: netlink: Flow key attr not present in new flow. [ 692.141544][T25678] 8021q: adding VLAN 0 to HW filter on device bond6 [ 692.316966][T25693] __nla_validate_parse: 18 callbacks suppressed [ 692.316987][T25693] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5549'. [ 692.412302][T25697] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5550'. [ 692.559724][T25705] bond0: entered allmulticast mode [ 692.652698][T25713] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5554'. [ 693.052006][T25742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5560'. [ 693.153253][T25730] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 693.333636][T25754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5564'. [ 693.355704][T25754] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 693.373972][T25754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.396583][T25757] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 693.416893][T25757] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 693.438860][T25757] gretap2: entered promiscuous mode [ 693.459194][T25757] gretap2: entered allmulticast mode [ 693.634216][T25763] openvswitch: netlink: Missing valid actions attribute. [ 693.648811][T25763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.736475][T25770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5570'. [ 693.842935][T25775] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5571'. [ 693.919313][T25778] [ 693.921697][T25778] ====================================================== [ 693.928819][T25778] WARNING: possible circular locking dependency detected [ 693.935870][T25778] syzkaller #0 Not tainted [ 693.940306][T25778] ------------------------------------------------------ [ 693.947347][T25778] syz.1.5572/25778 is trying to acquire lock: [ 693.953433][T25778] ffffffff8f68e918 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 693.962792][T25778] [ 693.962792][T25778] but task is already holding lock: [ 693.970176][T25778] ffff888024f6a270 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 693.979539][T25778] [ 693.979539][T25778] which lock already depends on the new lock. [ 693.979539][T25778] [ 693.989962][T25778] [ 693.989962][T25778] the existing dependency chain (in reverse order) is: [ 693.998996][T25778] [ 693.998996][T25778] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 694.007148][T25778] lock_acquire+0x120/0x360 [ 694.012196][T25778] _raw_spin_lock_bh+0x36/0x50 [ 694.017493][T25778] nr_rt_device_down+0x12a/0x720 [ 694.022987][T25778] nr_device_event+0x137/0x150 [ 694.028283][T25778] notifier_call_chain+0x1b3/0x3e0 [ 694.033925][T25778] __dev_notify_flags+0x18d/0x2e0 [ 694.039479][T25778] netif_change_flags+0xe8/0x1a0 [ 694.044959][T25778] dev_change_flags+0x130/0x260 [ 694.050361][T25778] dev_ioctl+0x7b4/0x1150 [ 694.055272][T25778] sock_do_ioctl+0x22c/0x300 [ 694.060416][T25778] sock_ioctl+0x576/0x790 [ 694.065384][T25778] __se_sys_ioctl+0xfc/0x170 [ 694.070598][T25778] do_syscall_64+0xfa/0x3b0 [ 694.075632][T25778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.082054][T25778] [ 694.082054][T25778] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 694.089889][T25778] lock_acquire+0x120/0x360 [ 694.095019][T25778] _raw_spin_lock_bh+0x36/0x50 [ 694.100324][T25778] nr_rt_device_down+0xa9/0x720 [ 694.105705][T25778] nr_device_event+0x137/0x150 [ 694.111028][T25778] notifier_call_chain+0x1b3/0x3e0 [ 694.116665][T25778] __dev_notify_flags+0x18d/0x2e0 [ 694.122225][T25778] netif_change_flags+0xe8/0x1a0 [ 694.127692][T25778] dev_change_flags+0x130/0x260 [ 694.133072][T25778] dev_ioctl+0x7b4/0x1150 [ 694.137938][T25778] sock_do_ioctl+0x22c/0x300 [ 694.143073][T25778] sock_ioctl+0x576/0x790 [ 694.147935][T25778] __se_sys_ioctl+0xfc/0x170 [ 694.153062][T25778] do_syscall_64+0xfa/0x3b0 [ 694.158094][T25778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.164538][T25778] [ 694.164538][T25778] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 694.172464][T25778] validate_chain+0xb9b/0x2140 [ 694.177757][T25778] __lock_acquire+0xab9/0xd20 [ 694.182975][T25778] lock_acquire+0x120/0x360 [ 694.188008][T25778] _raw_spin_lock_bh+0x36/0x50 [ 694.193313][T25778] nr_remove_neigh+0x25/0xe0 [ 694.198445][T25778] nr_add_node+0x1d9f/0x2570 [ 694.203569][T25778] nr_rt_ioctl+0xc12/0xd50 [ 694.208514][T25778] sock_do_ioctl+0xd9/0x300 [ 694.213550][T25778] sock_ioctl+0x576/0x790 [ 694.218414][T25778] __se_sys_ioctl+0xfc/0x170 [ 694.223536][T25778] do_syscall_64+0xfa/0x3b0 [ 694.228659][T25778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.235094][T25778] [ 694.235094][T25778] other info that might help us debug this: [ 694.235094][T25778] [ 694.245336][T25778] Chain exists of: [ 694.245336][T25778] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 694.245336][T25778] [ 694.259270][T25778] Possible unsafe locking scenario: [ 694.259270][T25778] [ 694.266826][T25778] CPU0 CPU1 [ 694.272217][T25778] ---- ---- [ 694.277591][T25778] lock(&nr_node->node_lock); [ 694.282370][T25778] lock(nr_node_list_lock); [ 694.289490][T25778] lock(&nr_node->node_lock); [ 694.296785][T25778] lock(nr_neigh_list_lock); [ 694.301474][T25778] [ 694.301474][T25778] *** DEADLOCK *** [ 694.301474][T25778] [ 694.309624][T25778] 1 lock held by syz.1.5572/25778: [ 694.314746][T25778] #0: ffff888024f6a270 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 694.324526][T25778] [ 694.324526][T25778] stack backtrace: [ 694.330430][T25778] CPU: 0 UID: 0 PID: 25778 Comm: syz.1.5572 Not tainted syzkaller #0 PREEMPT(full) [ 694.330455][T25778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 694.330466][T25778] Call Trace: [ 694.330476][T25778] [ 694.330485][T25778] dump_stack_lvl+0x189/0x250 [ 694.330512][T25778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 694.330532][T25778] ? __pfx__printk+0x10/0x10 [ 694.330553][T25778] ? stack_trace_save+0x9c/0xe0 [ 694.330579][T25778] print_circular_bug+0x2ee/0x310 [ 694.330599][T25778] check_noncircular+0x134/0x160 [ 694.330619][T25778] validate_chain+0xb9b/0x2140 [ 694.330635][T25778] ? do_syscall_64+0xfa/0x3b0 [ 694.330660][T25778] __lock_acquire+0xab9/0xd20 [ 694.330686][T25778] ? nr_remove_neigh+0x25/0xe0 [ 694.330708][T25778] lock_acquire+0x120/0x360 [ 694.330731][T25778] ? nr_remove_neigh+0x25/0xe0 [ 694.330757][T25778] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 694.330778][T25778] ? nr_remove_neigh+0x25/0xe0 [ 694.330800][T25778] _raw_spin_lock_bh+0x36/0x50 [ 694.330823][T25778] ? nr_remove_neigh+0x25/0xe0 [ 694.330844][T25778] nr_remove_neigh+0x25/0xe0 [ 694.330869][T25778] nr_add_node+0x1d9f/0x2570 [ 694.330892][T25778] ? dev_get_by_name+0x21/0x200 [ 694.330913][T25778] ? dev_get_by_name+0x21/0x200 [ 694.330931][T25778] ? dev_get_by_name+0x21/0x200 [ 694.330950][T25778] ? nr_call_to_digi+0x136/0x1b0 [ 694.330971][T25778] nr_rt_ioctl+0xc12/0xd50 [ 694.330996][T25778] ? kasan_quarantine_put+0xdd/0x220 [ 694.331016][T25778] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 694.331042][T25778] ? apparmor_capable+0x137/0x1b0 [ 694.331064][T25778] ? capable+0x89/0xe0 [ 694.331080][T25778] ? nr_ioctl+0x1b1/0x3b0 [ 694.331098][T25778] sock_do_ioctl+0xd9/0x300 [ 694.331127][T25778] ? __pfx_sock_do_ioctl+0x10/0x10 [ 694.331147][T25778] ? __lock_acquire+0xab9/0xd20 [ 694.331176][T25778] sock_ioctl+0x576/0x790 [ 694.331197][T25778] ? __pfx_sock_ioctl+0x10/0x10 [ 694.331217][T25778] ? __fget_files+0x2a/0x420 [ 694.331230][T25778] ? __fget_files+0x3a0/0x420 [ 694.331243][T25778] ? __fget_files+0x2a/0x420 [ 694.331258][T25778] ? bpf_lsm_file_ioctl+0x9/0x20 [ 694.331278][T25778] ? __pfx_sock_ioctl+0x10/0x10 [ 694.331298][T25778] __se_sys_ioctl+0xfc/0x170 [ 694.331318][T25778] do_syscall_64+0xfa/0x3b0 [ 694.331333][T25778] ? lockdep_hardirqs_on+0x9c/0x150 [ 694.331356][T25778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.331372][T25778] ? clear_bhb_loop+0x60/0xb0 [ 694.331390][T25778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.331406][T25778] RIP: 0033:0x7f5d8258ebe9 [ 694.331422][T25778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.331436][T25778] RSP: 002b:00007f5d807f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 694.331454][T25778] RAX: ffffffffffffffda RBX: 00007f5d827c5fa0 RCX: 00007f5d8258ebe9 [ 694.331467][T25778] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000007 [ 694.331478][T25778] RBP: 00007f5d82611e19 R08: 0000000000000000 R09: 0000000000000000 [ 694.331488][T25778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 694.331499][T25778] R13: 00007f5d827c6038 R14: 00007f5d827c5fa0 R15: 00007fff6c4a49c8 [ 694.331518][T25778] [ 694.659315][T25780] nbd: must specify at least one socket