last executing test programs: 6.528076078s ago: executing program 3 (id=514): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@tracing={0xffffffffffffffff, 0x3d6}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r4], 0x68}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 6.299978039s ago: executing program 3 (id=519): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x403, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000300)) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, r3, 0xb20, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4c800}, 0xd0) 6.101545275s ago: executing program 3 (id=524): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000200025a729bd7000fddbdf250a0014cdfe0000020200010014000100943b85fc000000000000000000000001050016006c000000fdc0cc5ac774cce78b842048b8d2de5ff7611f18af3aa8eaa6e9d9718cc1102b6d759d66225a3a5ed00c1f46ad5843a39a7d20ffc1773f9191e958000000002748912dfa94fec0e2cd5e11cd22c17dc42d3391fa153afeebe4c80d3b716adfe582c79dd4d1db023b19d5103b42f0424938af6fa0535fab0000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20008805}, 0x44) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x645c, 0x4, 0x40, 0x0, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x6ce435731f7106c4}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.943944246s ago: executing program 3 (id=526): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1, 0xffffffff, 0xfffffffd}, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='team_slave_0\x00', 0x10) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x18) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x40) write$nci(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="fbff000000cf749f20ac470ef51c18f7e61ae68276b9ebbd87b8f6df02b147f9b6ec4609a03700d8bd57e2fa935d3757c154cace5f2e611cb6de3fb75f4327d073a33c8fe0614ecfb48bd952a4b12da1cbeefea0e3f98d16dc9d3fa67f5520574fbcde64c0016cf900d74a457c4fc7c3fb69e97d03a7c814aa089f69c308fc1c710f51d334a480a502425cf596d1b67659e524bce6e5459ef6e78814fe2d61b0ae95fa3d35d24045cadd994620733a869f58fa"], 0x5) unshare(0x28000600) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1, 0x100005, 0x5, 0x80000005, 0x15022, 0xffffffffffffffff, 0xfffffffe, '\x00', r7, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x0, @void, @value, @value=r6}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r8, &(0x7f0000000100), &(0x7f0000000180)=""/177}, 0x20) 5.695958192s ago: executing program 3 (id=530): setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x8d0}, 0x4000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x2204c000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) read(r8, &(0x7f0000000000)=""/31, 0x1f) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r9, @ANYBLOB="ffff46c6", @ANYRES32=r9, @ANYBLOB], 0x4c}}, 0x884) 3.058845735s ago: executing program 4 (id=558): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0xb4}}, 0x40000) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x70bd29, 0x700, {0x0, 0x0, 0x0, r2, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48084}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000380)={@xdp={0x2c, 0x9, r2, 0x13}, {&(0x7f0000000240)=""/200, 0xc8}, &(0x7f0000000340), 0x11}, 0xa0) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0xb4}}, 0x40000) (async) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x70bd29, 0x700, {0x0, 0x0, 0x0, r2, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48084}, 0x0) (async) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000380)={@xdp={0x2c, 0x9, r2, 0x13}, {&(0x7f0000000240)=""/200, 0xc8}, &(0x7f0000000340), 0x11}, 0xa0) (async) 2.40550015s ago: executing program 4 (id=563): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000002c0007012bbd7000ffdbdf25057c000008000180d8ba7c430c000380050001"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc810) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0xffffffff}}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x6, 0x4}, {0x6, 0x3}, {0x8, 0x4}, {0xe, 0x4}]}, @fwd={0x5}, @volatile={0xe, 0x0, 0x0, 0x9, 0x4}, @restrict={0xc, 0x0, 0x0, 0xb, 0x3}, @ptr={0x9, 0x0, 0x0, 0x2, 0x3}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x34, 0x0, 0x61, 0x2}]}, {0x0, [0x2e, 0x0, 0x2e]}}, &(0x7f0000000640)=""/214, 0xa1, 0xd6, 0x0, 0x4}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300"/92, @ANYRES32, @ANYRES32], 0x0, 0xfffbfffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e000000002800028006000100000000000c0002000000000000000000100004800c00010000000000", @ANYRES32, @ANYBLOB='\b\x00.'], 0x74}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000ddaa000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f00000001c0)=0x3, 0x4) r5 = socket$kcm(0x2b, 0x1, 0x0) close(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000380)={0xa, 0xfffd, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0xffffffffffffff16) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) close(r5) getsockname$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000280)=0x1c) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000980)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x184, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1d1af28f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x12000}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5cad}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8f}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x36349cb9}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb36}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x137}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa9, 0x3, "d89e7cfc06e9b18c162b471ce59b9428ffc1432e708af63859a6195ba23f317cd3ef14afa8e0f99d73fc2f784980acd5b8cb18acc137ba8f3c2ec1b09bf08c40aaac5a57a4f2dadedcb4003ec1f95e4d2b0958761ddba6aca7eeb509830b835094d3d1b97ee6769091802c3f66f0bcfb01b3f672579dc92ee3682df2fd1b160bff019f2a14712ed60c5e16a2be028ac7a13e73a4067f2bf1f1fdecd61703748a06fc135df0"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x184}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x105, &(0x7f0000000400)=""/256, 0xb6df4c32c1d5c814, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffc7, 0x10, 0x0, 0xe}, 0x24) 2.403912871s ago: executing program 0 (id=564): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac14141500000000000000000000000000000005000000030a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0200000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000000a0000000000000000000000804000000000000000000800000000000000000100000300000000440000000000000004d23c00000000000000ffffffff00000000000000000000000000000000000300004900"/166], 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$kcm(0xa, 0x1, 0x106) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x7, 0x9, [0x0, 0x0, 0x3, 0x81, 0x5, 0x1, 0x80, 0x3ee3, 0x3]}, &(0x7f0000000100)=0x1a) (async) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x7, 0x9, [0x0, 0x0, 0x3, 0x81, 0x5, 0x1, 0x80, 0x3ee3, 0x3]}, &(0x7f0000000100)=0x1a) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010001000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r6 = socket$kcm(0xa, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r7) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r7) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) (async) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 2.343575791s ago: executing program 1 (id=565): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x148, 0xffffffff, 0xffffffff, 0x148, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0xff000000], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x128, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x810001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x350) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmsg$sock(r0, &(0x7f00000004c0)={&(0x7f00000005c0)=@l2tp6={0xa, 0x0, 0x101, @private2, 0xc, 0x2}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000640)='>', 0x1}], 0x1}, 0x20040010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0], 0x0, 0x1a}, 0x28) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x1, 0xfffffffd, 0x7, 0x40, 0x3cf, 0x40, 0x6, {0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x9, 0x1000, 0x9, 0x7244, 0x200}}, &(0x7f00000001c0)=0xb0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @void}, 0x40) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x800, 0x4) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0400f9f4070009040180000000200000000000000008001e8040000000", 0x24) socket$kcm(0xa, 0x2, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x7, 0x400000, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) close(0x4) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'rr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x18}, 0x40841) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.258655777s ago: executing program 4 (id=567): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40011}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c00000010004b0429bd7000faffffff7a000000", @ANYRES32=0x0, @ANYBLOB="08b0010006820000400012800b0001006272696467650000300002800c002200000000040000000005002400010000000600060000000000000005000100000005002b00050000000a000100aa"], 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00000000c0), 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000044c25006040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map=r3, r6, 0x37, 0x28}, 0x20) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r8, @ANYBLOB="0d010000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2000, 0x25dfdbfe, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x5}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0xc}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0xc}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001900000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r10, 0x0) ioctl$SIOCX25SFACILITIES(r10, 0x89e3, &(0x7f0000002200)={0x36, 0x8001, 0xc, 0x10, 0x0, 0x81}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_MASTER={0x8, 0xa, r13}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}}}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000300)) getsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000400)=0x3, &(0x7f0000000440)=0x4) 1.852488819s ago: executing program 4 (id=570): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="6d9311000000f8dbdf250100"], 0x28}, 0x1, 0x0, 0x0, 0x48891}, 0x880) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r5) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000019c0)={r1, 0xe0, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x41, &(0x7f00000019c0), 0x0, 0x10, &(0x7f0000001a00), &(0x7f0000001a40), 0x8, 0x70, 0x8, 0x8, &(0x7f0000001a80)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001ec0)={'ip_vti0\x00', &(0x7f0000001cc0)={'sit0\x00', r6, 0x10, 0x20, 0x200, 0x3ff, {{0x6, 0x4, 0x0, 0x3b, 0x18, 0x65, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop]}}}}}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{0x0, 0x20, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x56, &(0x7f00000018c0)=""/176}}, {{&(0x7f0000001700)=@ieee802154={0x24, @short}, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001d00)=""/213}, {&(0x7f0000001e00)=""/53}, {&(0x7f0000001e40)=""/2}], 0x0, &(0x7f0000001ec0)}, 0x3}], 0x15cbc1ab4c0933f, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x600000d, 0x8031, 0xffffffffffffffff, 0x2a9000) 1.791979973s ago: executing program 0 (id=571): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0xd, 0x1, 0x40], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x8, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xffffffffffffff41, 0x8, 0x40}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0xb8}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r4, 0xff, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r3) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x60, r6, 0x1, 0x70bd2d, 0x25dfdc01, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x40810) socket$inet(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0xd, 0x1, 0x40], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x8, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xffffffffffffff41, 0x8, 0x40}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0xb8}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt(r4, 0xff, 0x1, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) (async) syz_genetlink_get_family_id$team(&(0x7f0000000140), r3) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x60, r6, 0x1, 0x70bd2d, 0x25dfdc01, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x40810) (async) 1.600578885s ago: executing program 0 (id=574): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async, rerun: 32) unshare(0x6a040000) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req={0x4, 0x5, 0x1000, 0x2}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async) recvfrom(r3, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) (async) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (rerun: 32) socket$kcm(0x10, 0x2, 0x4) 1.438607821s ago: executing program 1 (id=576): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000c000000bca300000000000024030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8}, 0x94) (rerun: 32) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x40080) (async) r2 = socket(0x10, 0x1, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.356179186s ago: executing program 2 (id=577): r0 = socket(0x18, 0x800, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100}, 0x1c) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r5 = socket(0x11, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1500000072009fb326bd7000ffdbdf2507"], 0x18}, 0x1, 0x0, 0x0, 0x8044010}, 0x20041040) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r5, &(0x7f00000001c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="02011400a8dc18000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x44040) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21, 0x20}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 1.191256486s ago: executing program 0 (id=578): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'hsr0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x4, &(0x7f0000000080)={0x2, 0x4c1e, @multicast1}, 0x10) recvmmsg(r5, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x4bd}, {{0x0, 0x0, 0x0}}], 0x2, 0x10142, 0x0) ioctl(r4, 0x8b32, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000001200003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) 1.190559081s ago: executing program 2 (id=579): pipe(&(0x7f00000045c0)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x66, 0xf) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1a, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000015fd0000000000009500"/32], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 1.104636227s ago: executing program 2 (id=580): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000580)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0x44, 0x0, "ede10c90e0d6d4b2b1651d4ddc62e17b5f4fa4a45bc87ce8b6cab0b0bf7f4a73a775b18b108887c58ce5057146437a52ff5d0f912a8eff0b48b4c25e7d5ae1e974f8cdaa3dccaccd26482b83f2a4afd0"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x4e23, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5ec800000000000000fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) r3 = epoll_create1(0x0) syz_emit_ethernet(0x5e, &(0x7f00000010c0)=ANY=[@ANYBLOB="a8aaaa00001000000086dd6000000000280600fc000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a00200009078000000fe06e2d4c3d9080a00000003ffffffff000000"], 0x0) r4 = socket$unix(0x1, 0x1, 0x0) close(r4) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x8002a000}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e23, @private=0xa010106}}, 0x0, 0x0, 0x1b, 0x0, "dc6efbc3b54972ba0604b8e20a587d8607043cff9ba01fb10d4df7171eb926b1343726c9a11cc6437caa2dc891b724181fb42d00e3cefe6630aadee9a73a7095657dfccc791536fe9c5268be2bdd7a74"}, 0xd8) close(0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000002c0)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$pppoe(0x18, 0x1, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r9, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) 1.057305013s ago: executing program 1 (id=581): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) accept4$tipc(r1, &(0x7f0000000040)=@id, &(0x7f00000000c0)=0x10, 0x0) recvmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f0000000380)=""/193, 0xc1}, {&(0x7f0000000540)=""/192, 0xc0}], 0x3}, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000012c0)="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", 0x130}, {&(0x7f0000000180)="1a39e33c9bb56fd43a362ffea90553761d7ed507c9de39febbf44d3f865312c8f87355b539002cdd0c62a1b4af1b231aedcaa350cbed61f038c59eb5ab370f7078bb09bba3f39fd8421406392f4ce058", 0x50}, {&(0x7f0000000480)="607dd884f33ff413bd131c8b890067b9df813bdca47007b3029f63a8ce8d396f0741075350111184a065fdecf602a80cba8b0ceaac55d2a5ac82ea58fd20f788ba0f910bce416fd530579aec17ed688e6f569c95d7049bea84d87e6477c0d22a895de1f4d49936c287c188a7a1a833", 0x6f}], 0x3) 867.078065ms ago: executing program 2 (id=582): socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x1c, 0x800) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000001bc0)={{r2}, "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"}) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000001180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000840)=""/234, 0xea}, {&(0x7f0000003380)=""/4094, 0xffe}], 0x2}, 0xfffffffc}, {{0x0, 0x0, 0x0}}], 0x3, 0x42, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x76) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x38}, 0x0, 0x1, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0xffffffffffffffff, 0x800000, 0x0, 0x0, 0x80000, 0x0, 0x60a, 0xfffffffffffffff7}, {0x0, 0xfef2, 0xd, 0x8}, 0x101, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x32}, 0x0, @in6=@empty, 0xfffffffe, 0x0, 0x0, 0x0, 0x101, 0x8, 0x35ced141}}, 0xe8) r6 = epoll_create(0x9) ioctl$XFS_IOC_INUMBERS(r6, 0x80405880, &(0x7f0000000280)={{0xbad, 0x5, 0x8, 0x5, 0x10}, [{0x100000000, 0x6, 0x7, 0x10}]}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x2f}, {0xfffffefffffffffd, 0xeca, 0x2d, 0x3, 0x0, 0x0, 0x400778e, 0xffff}, {0xfffffffffffffff7, 0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x4}}, 0xe8) close(r5) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r7, &(0x7f0000008340)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2100, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="50000000020900000000b483157bbcf72100aad18b18d756065100050005000300000005000173fa7b564f9774c100000000000900020073790731000000db0e138e108dde1d003e6e65742c706f72fbb680a54fe70f4bcd398f08db924e742c6e6574000080"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) 866.651019ms ago: executing program 4 (id=583): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x20004055) (async) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) (async) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7f2b409ffc65c6f859b5f19ef7124b33fd228aeeda8cebd4cdadb5344aa6148b72765e8445d86087920b6ff82b1e3f2bdc8d6d4a0b3e494197337bfc9fd05ae916334e3331a9e174", @ANYRES16=r0, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c0007000000000000000000080009000000000008000800000000000800060073697000"], 0x4c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001020010000000000000000000500000a50000000090a010400000000000000000a000004091d010073797a310000000008000540000000020900020073797a"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf2502101004090000060620010008000200ac14142a08000b000600000008"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008009) 839.305988ms ago: executing program 1 (id=584): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x20, 0x25, 0x319, 0x70bd26, 0x8000, {0x5}, [@typed={0x9, 0x132, 0x0, 0x0, @str='l2tp\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="8a08000400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000200010100000800030000000000"], 0x44}}, 0x0) 819.284462ms ago: executing program 0 (id=585): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'macsec0\x00', 0x400}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="050000000100", 0x6) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r5 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r4, r7, 0x25, 0x0, @val=@netkit={@void, @value=r4}}, 0x1c) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100003052bbd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000001000001c00128009000100626f6e64000000000c000280050001000500000008000a00", @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000a80)={'vlan0\x00', @remote}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r10, {0xb, 0xd}, {}, {0x8, 0xc}}}, 0x24}}, 0x40004) recvmmsg(r11, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/62, 0x3e}, {&(0x7f0000000700)=""/197, 0xc5}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/53, 0x35}, {&(0x7f0000000840)=""/255, 0xff}], 0x5}, 0x5d}], 0x1, 0x10022, 0x0) 627.881195ms ago: executing program 1 (id=586): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@newtaction={0x68, 0x30, 0xffff, 0x70bd2d, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x5, 0x0, 0x2}, 0x3}}, @TCA_IFE_METALST={0xffffff9d, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xd94ac76b42879f9f}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x26008884}, 0x4054) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@newtaction={0x68, 0x30, 0xffff, 0x70bd2d, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x5, 0x0, 0x2}, 0x3}}, @TCA_IFE_METALST={0xffffff9d, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xd94ac76b42879f9f}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x26008884}, 0x4054) (async) 612.643736ms ago: executing program 2 (id=587): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xb, 0x5, [@remote, @rand_addr]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4809}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/125, 0x7d}], 0x1}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000800000000010000000100000506000000000000010200000000000000005f"], 0x0, 0x58, 0x0, 0xa}, 0x28) 545.837625ms ago: executing program 4 (id=588): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000001ff0)={0x1d, r5}, 0x10) sendmsg$can_raw(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000280)=@canfd={{0x1}, 0x1f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c69bf5ff986ca08990039576a7d5cb29dac3fa80acf584ecb5fee496e6866916b76b5ee000000004e2f9b070000fa1efd9b0b00"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x9, {{0x0, 0x2, 0x5, "48fe400223"}, {0xb5, 0x400, 0x3, 0x400, 0xab, 0x3ff}}}, 0x19) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1], 0x14) bind$alg(0xffffffffffffffff, 0x0, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000380)=@security={'security\x00', 0xe, 0x4, 0x560, 0xffffffff, 0x0, 0x128, 0x288, 0xffffffff, 0xffffffff, 0x490, 0x490, 0x490, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ipv6header={{0x28}, {0x40, 0x20}}, @common=@srh={{0x30}, {0xff, 0x7, 0x7, 0x7, 0x0, 0x1945, 0x12}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x32, 0x8, 0x0, 0x1, 0x6c, @local, @mcast2, @local, [0x0, 0xff000000, 0xff000000, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xffffff00], [0xff000000, 0xff000000, 0xffffff00, 0xff], 0x8be8a302c7c6f28d, 0x10}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x5}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, [0xff000000, 0xff, 0xffffff00, 0xffffffff], [0x0, 0xffffffff, 0xffffffff, 0xff000000], 'dummy0\x00', 'pim6reg\x00', {}, {0xff}, 0x3a, 0xb, 0x5, 0x11}, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x3cdd, [0xfffffffd, 0x3], 0xf4c3, 0x30, 0x4, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @private0, @ipv4={'\x00', '\xff\xff', @empty}, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xb}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @local, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2], 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x6}, {0x3, 0x6, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) 347.910614ms ago: executing program 1 (id=589): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) close(0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r2, 0x7ff, 0xe, 0x5}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000001c0)) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) close(0xffffffffffffffff) r4 = socket(0x14, 0x2, 0x4) close(0x3) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0x2c) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0xa, 0x5, 0x4, 0x7b}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000140)=@framed={{0x18, 0x8, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfff8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x69}, @initr0={0x18, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0xffffffd0}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000000c0)=0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$qrtr(0x2a, 0x2, 0x0) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) close(0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r2, 0x7ff, 0xe, 0x5}) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000001c0)) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) close(0xffffffffffffffff) (async) socket(0x14, 0x2, 0x4) (async) close(0x3) (async) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0x2c) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0xa, 0x5, 0x4, 0x7b}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000140)=@framed={{0x18, 0x8, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfff8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x69}, @initr0={0x18, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0xffffffd0}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000000c0)=0x4) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) 184.943262ms ago: executing program 3 (id=590): r0 = socket(0x10, 0x3, 0x800000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x44, r3, 0x4, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x44}}, 0x20048840) setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000480), 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000004900000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5800000010001fff2dbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b000100697036746e6c00002000028014000300fe8000000000000000000000000000aa050009002900000008000400000001"], 0x58}, 0x1, 0x0, 0x0, 0x48844}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r7 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x0, 0x0, 0xffffffff, 0x0, 0x210, 0x570, 0x570, 0xffffffff, 0x570, 0x570, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x5, @ipv4=@multicast1, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @icmp_id=0x64, @port=0x4e22}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x34}, @dev={0xfe, 0x80, '\x00', 0x39}, [0xff000000, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffff00], 'bond_slave_0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0xc65ec123d57cf83, 0x7, 0x8, 0x12}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x11, @ipv4=@multicast1, @ipv4=@private=0xa010101, @port=0x4e20, @gre_key=0xabfc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff000000, 0xffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'nicvf0\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x3c, 0x6, 0x1, 0x4}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@broadcast, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @icmp_id=0x64, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x8, @ipv4=@rand_addr=0x64010101, @ipv6=@mcast1, @port=0x4e21, @port=0x4e21}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x75, 0x0, 0x0, 0x0, 0x40002}, [@call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="280000001200010100000000e0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="000000000040ead008001d00c3"], 0x28}}, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x16, 0xa01, 0x200, 0x0, {0x11}, [@typed={0x8, 0xa, 0x0, 0x0, @ipv4}]}, 0x1c}}, 0x8000) 142.728818ms ago: executing program 2 (id=591): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r5, @ANYBLOB="08000600", @ANYRES64=r3], 0x24}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x12, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x2, 0x0, 0x0, {0x0, 0x0, 0x4, r1, 0xa300, 0x4}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0x8}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x40}, @IFLA_MACSEC_PORT={0x0, 0x2, 0x1, 0x0, 0x4e22}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmmsg(r6, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)="dcd4d94b", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="71ee1feb", 0x4}], 0x1, &(0x7f0000000980)=[{0x10, 0x10c, 0x5}, {0x10, 0x1, 0x80000000}], 0x20}}], 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100000000000000000002000000", @ANYRES32=r8, @ANYRES32=r7], 0x1c}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="611087000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) 0s ago: executing program 0 (id=592): r0 = socket$inet_sctp(0x2, 0x5, 0x84) unshare(0x24060400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000045000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.25' (ED25519) to the list of known hosts. [ 71.794143][ T5610] cgroup: Unknown subsys name 'net' [ 71.925407][ T5610] cgroup: Unknown subsys name 'cpuset' [ 71.934177][ T5610] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.312755][ T5610] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.426279][ T5635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.435386][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.443367][ T5635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.454591][ T5638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.462217][ T5636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.464008][ T5635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.470206][ T5638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.476958][ T5635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.491690][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.492259][ T5641] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.508434][ T5638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.509356][ T5641] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.516245][ T5638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.530097][ T5641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.532487][ T5638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.537894][ T5641] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.545589][ T5636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.556033][ T5641] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.559153][ T5636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.575165][ T5638] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.586274][ T5638] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.593386][ T5636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.603135][ T5636] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.616569][ T5636] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.627355][ T5636] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.021651][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.030256][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.038140][ T5624] bridge_slave_0: entered allmulticast mode [ 77.046039][ T5624] bridge_slave_0: entered promiscuous mode [ 77.087347][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.095001][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.102382][ T5624] bridge_slave_1: entered allmulticast mode [ 77.109394][ T5624] bridge_slave_1: entered promiscuous mode [ 77.184286][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.191448][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.198709][ T5633] bridge_slave_0: entered allmulticast mode [ 77.205773][ T5633] bridge_slave_0: entered promiscuous mode [ 77.222757][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.245853][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.253364][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.260495][ T5633] bridge_slave_1: entered allmulticast mode [ 77.267568][ T5633] bridge_slave_1: entered promiscuous mode [ 77.283799][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.371663][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.378941][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.386223][ T5625] bridge_slave_0: entered allmulticast mode [ 77.393137][ T5625] bridge_slave_0: entered promiscuous mode [ 77.407708][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.423242][ T5624] team0: Port device team_slave_0 added [ 77.428978][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.436232][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.443480][ T5625] bridge_slave_1: entered allmulticast mode [ 77.450272][ T5625] bridge_slave_1: entered promiscuous mode [ 77.466518][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.484866][ T5624] team0: Port device team_slave_1 added [ 77.541181][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.548982][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.556186][ T5622] bridge_slave_0: entered allmulticast mode [ 77.563057][ T5622] bridge_slave_0: entered promiscuous mode [ 77.577687][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.584886][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.592557][ T5623] bridge_slave_0: entered allmulticast mode [ 77.599368][ T5623] bridge_slave_0: entered promiscuous mode [ 77.616888][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.622595][ T5636] Bluetooth: hci0: command tx timeout [ 77.626629][ T5640] Bluetooth: hci3: command tx timeout [ 77.631704][ T5627] Bluetooth: hci1: command tx timeout [ 77.640225][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.652736][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.659846][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.667006][ T5622] bridge_slave_1: entered allmulticast mode [ 77.673853][ T5622] bridge_slave_1: entered promiscuous mode [ 77.683121][ T5633] team0: Port device team_slave_0 added [ 77.688828][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.695922][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.703168][ T5636] Bluetooth: hci2: command tx timeout [ 77.703521][ T5623] bridge_slave_1: entered allmulticast mode [ 77.712082][ T5636] Bluetooth: hci4: command tx timeout [ 77.722666][ T5623] bridge_slave_1: entered promiscuous mode [ 77.742262][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.749305][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.775306][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.808743][ T5633] team0: Port device team_slave_1 added [ 77.823810][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.830773][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.856862][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.896459][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.915562][ T5625] team0: Port device team_slave_0 added [ 77.923436][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.934868][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.955160][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.966456][ T5625] team0: Port device team_slave_1 added [ 77.991518][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.998736][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.024661][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.075556][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.083303][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.109366][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.130720][ T5623] team0: Port device team_slave_0 added [ 78.138139][ T5623] team0: Port device team_slave_1 added [ 78.144286][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.151341][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.177252][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.189804][ T5622] team0: Port device team_slave_0 added [ 78.218014][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.225148][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.251369][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.264201][ T5622] team0: Port device team_slave_1 added [ 78.284002][ T5624] hsr_slave_0: entered promiscuous mode [ 78.290246][ T5624] hsr_slave_1: entered promiscuous mode [ 78.329355][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.336705][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.362633][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.374726][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.381673][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.407598][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.427580][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.435146][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.461581][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.501055][ T5633] hsr_slave_0: entered promiscuous mode [ 78.507254][ T5633] hsr_slave_1: entered promiscuous mode [ 78.513475][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 78.519245][ T5633] Cannot create hsr debugfs directory [ 78.526443][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.533439][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.559488][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.583734][ T5625] hsr_slave_0: entered promiscuous mode [ 78.589824][ T5625] hsr_slave_1: entered promiscuous mode [ 78.595928][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 78.601645][ T5625] Cannot create hsr debugfs directory [ 78.699880][ T5623] hsr_slave_0: entered promiscuous mode [ 78.706357][ T5623] hsr_slave_1: entered promiscuous mode [ 78.712519][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 78.718241][ T5623] Cannot create hsr debugfs directory [ 78.797750][ T5622] hsr_slave_0: entered promiscuous mode [ 78.804210][ T5622] hsr_slave_1: entered promiscuous mode [ 78.810140][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 78.815891][ T5622] Cannot create hsr debugfs directory [ 79.197925][ T5624] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.209328][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.218342][ T5624] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.228783][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.237649][ T5624] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.246897][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.254582][ T5624] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.267061][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.338664][ T5625] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.352900][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.361578][ T5625] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.371163][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.390527][ T5625] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.405571][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.421032][ T5625] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.432261][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.488237][ T5623] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.497701][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.507218][ T5623] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.516376][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.524415][ T5623] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.533750][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.550182][ T5623] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.559729][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.638679][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.658857][ T5633] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.668679][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.678556][ T5633] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.689336][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.702265][ T5636] Bluetooth: hci0: command tx timeout [ 79.702428][ T5627] Bluetooth: hci1: command tx timeout [ 79.712767][ T5636] Bluetooth: hci3: command tx timeout [ 79.731561][ T5633] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.742119][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.778241][ T5633] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.786228][ T5636] Bluetooth: hci4: command tx timeout [ 79.786256][ T5627] Bluetooth: hci2: command tx timeout [ 79.800522][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.811500][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.857118][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.864490][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.875254][ T5622] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.886252][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.894868][ T5622] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.905162][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.913008][ T5622] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.922944][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.930849][ T5622] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.940661][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.976090][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.983206][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.030652][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.090751][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.126238][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.133385][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.157387][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.176318][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.183426][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.270201][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.305825][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.312982][ T3299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.338523][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.345691][ T3299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.369385][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.395752][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.451601][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.477794][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.484959][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.497749][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.519562][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.526750][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.557460][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.564629][ T3299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.574362][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.581518][ T3299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.957963][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.139831][ T5624] veth0_vlan: entered promiscuous mode [ 81.177803][ T5624] veth1_vlan: entered promiscuous mode [ 81.303389][ T5624] veth0_macvtap: entered promiscuous mode [ 81.332571][ T5624] veth1_macvtap: entered promiscuous mode [ 81.389837][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.419186][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.438548][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.473823][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.490192][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.502926][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.511882][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.657172][ T5625] veth0_vlan: entered promiscuous mode [ 81.731326][ T5625] veth1_vlan: entered promiscuous mode [ 81.758905][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.783901][ T5627] Bluetooth: hci1: command tx timeout [ 81.784304][ T5640] Bluetooth: hci0: command tx timeout [ 81.794925][ T5636] Bluetooth: hci3: command tx timeout [ 81.862011][ T5636] Bluetooth: hci2: command tx timeout [ 81.870994][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.874951][ T5636] Bluetooth: hci4: command tx timeout [ 81.899117][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.915620][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.928065][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.064835][ T5625] veth0_macvtap: entered promiscuous mode [ 82.065034][ T1072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.076294][ T5625] veth1_macvtap: entered promiscuous mode [ 82.086481][ T1072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.216678][ T5633] veth0_vlan: entered promiscuous mode [ 82.231409][ T5624] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.255053][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.287541][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.299314][ T5622] veth0_vlan: entered promiscuous mode [ 82.319242][ T5633] veth1_vlan: entered promiscuous mode [ 82.367729][ T3299] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.386621][ T3299] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.400934][ T3299] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.410893][ T3299] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.450854][ T5622] veth1_vlan: entered promiscuous mode [ 82.550523][ T5633] veth0_macvtap: entered promiscuous mode [ 82.597686][ T5622] veth0_macvtap: entered promiscuous mode [ 82.613758][ T5633] veth1_macvtap: entered promiscuous mode [ 82.657235][ T5622] veth1_macvtap: entered promiscuous mode [ 82.693775][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.705010][ T5623] veth0_vlan: entered promiscuous mode [ 82.710911][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.723815][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.757527][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.769383][ T5623] veth1_vlan: entered promiscuous mode [ 82.798819][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.828720][ T1072] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.840809][ T1072] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.852775][ T5836] Illegal XDP return value 2639180844 on prog (id 2) dev N/A, expect packet loss! [ 82.866104][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.879384][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.893551][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.894112][ T1072] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.925431][ T1072] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.955672][ T1072] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.989071][ T1072] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.001710][ T5841] Zero length message leads to an empty skb [ 83.019825][ T1072] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.030681][ T1072] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.055726][ T5623] veth0_macvtap: entered promiscuous mode [ 83.129773][ T5623] veth1_macvtap: entered promiscuous mode [ 83.258685][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.281256][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.291353][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.330752][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.337919][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.344592][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.386615][ T5852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.427264][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.428902][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.445207][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.473314][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.531426][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.551873][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.624656][ T3299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.657589][ T3299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.858634][ T1072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.866642][ T5636] Bluetooth: hci1: command tx timeout [ 83.872169][ T5636] Bluetooth: hci3: command tx timeout [ 83.878333][ T5640] Bluetooth: hci0: command tx timeout [ 83.910858][ T1072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.953042][ T5640] Bluetooth: hci2: command tx timeout [ 83.958473][ T5636] Bluetooth: hci4: command tx timeout [ 84.054985][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.076856][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.097803][ T5873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'. [ 84.120783][ T5877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'. [ 84.192370][ T5878] syzkaller1: entered promiscuous mode [ 84.205805][ T5878] syzkaller1: entered allmulticast mode [ 84.478750][ T5895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 84.490361][ T5895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.498710][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.508318][ T5895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.515951][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.658525][ T5900] netlink: 14 bytes leftover after parsing attributes in process `syz.0.20'. [ 84.678306][ T5900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.699057][ T5900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.711080][ T5900] bond0 (unregistering): Released all slaves [ 84.770203][ T5902] warning: `syz.1.21' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.144047][ T5918] syz.0.26 uses obsolete (PF_INET,SOCK_PACKET) [ 86.680328][ T1178] cfg80211: failed to load regulatory.db [ 86.994410][ T5872] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 87.194373][ T5934] netlink: 'syz.3.28': attribute type 11 has an invalid length. [ 87.228409][ T5934] netlink: 'syz.3.28': attribute type 21 has an invalid length. [ 87.379718][ T5940] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 87.398987][ T5754] IPVS: starting estimator thread 0... [ 87.431117][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.439463][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.502167][ T5947] IPVS: using max 32 ests per chain, 76800 per kthread [ 87.545537][ T5937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.558132][ T5937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.691748][ T5949] ip6tnl1: entered allmulticast mode [ 87.705222][ T37] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 87.719422][ T37] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 87.728836][ T807] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 87.768454][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.794124][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.823933][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.850061][ T5960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.38'. [ 87.863760][ T29] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 87.866234][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.933339][ T5967] netlink: 16 bytes leftover after parsing attributes in process `syz.3.36'. [ 87.985705][ T807] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 88.071306][ T5974] veth1_to_bond: entered promiscuous mode [ 88.214190][ T5968] veth1_to_bond: left promiscuous mode [ 88.288091][ T29] IPVS: starting estimator thread 0... [ 88.336911][ T5973] netlink: 'syz.3.40': attribute type 2 has an invalid length. [ 88.355672][ T5973] netlink: 'syz.3.40': attribute type 2 has an invalid length. [ 88.394579][ T5990] netlink: 48 bytes leftover after parsing attributes in process `syz.0.43'. [ 88.400187][ T5989] macsec1: entered promiscuous mode [ 88.409184][ T5991] IPVS: using max 58 ests per chain, 139200 per kthread [ 88.587017][ T6004] netlink: 16 bytes leftover after parsing attributes in process `syz.0.45'. [ 88.679690][ T6013] netlink: 168 bytes leftover after parsing attributes in process `syz.0.48'. [ 88.723865][ T6014] netlink: 168 bytes leftover after parsing attributes in process `syz.0.48'. [ 88.741303][ T6008] netlink: 'syz.2.47': attribute type 2 has an invalid length. [ 88.964851][ T6026] netlink: 'syz.1.51': attribute type 32 has an invalid length. [ 89.079912][ T6024] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 89.110421][ T6024] syzkaller0: entered promiscuous mode [ 89.115987][ T6024] syzkaller0: entered allmulticast mode [ 89.430768][ T6035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.53'. [ 89.454370][ T6035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.53'. [ 90.291313][ T6072] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.298994][ T6072] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.067688][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.107435][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.136822][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.190582][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.668567][ T6117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.727082][ T6119] netlink: 'syz.2.75': attribute type 1 has an invalid length. [ 91.739175][ T6119] netlink: 96 bytes leftover after parsing attributes in process `syz.2.75'. [ 91.750127][ T6119] netlink: 1 bytes leftover after parsing attributes in process `syz.2.75'. [ 91.759123][ T6119] netlink: 'syz.2.75': attribute type 1 has an invalid length. [ 91.767816][ T6119] netlink: 'syz.2.75': attribute type 8 has an invalid length. [ 91.775766][ T6119] netlink: 606 bytes leftover after parsing attributes in process `syz.2.75'. [ 91.796935][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.801426][ T6119] netlink: 16 bytes leftover after parsing attributes in process `syz.2.75'. [ 91.806377][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.862250][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 91.989207][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.76'. [ 92.077496][ T6129] smc: net device hsr0 applied user defined pnetid SYZ2 [ 92.106075][ T6132] sctp: [Deprecated]: syz.2.76 (pid 6132) Use of int in maxseg socket option. [ 92.106075][ T6132] Use struct sctp_assoc_value instead [ 92.335840][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'. [ 92.355188][ T6138] veth1_macvtap: left promiscuous mode [ 92.490466][ T6109] syz.0.73 (6109) used greatest stack depth: 17856 bytes left [ 92.599967][ T6148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.86'. [ 92.614224][ T6148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.86'. [ 93.989751][ T6205] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 94.039917][ T6205] bond1 (unregistering): Released all slaves [ 94.138759][ T6223] netlink: 'syz.1.103': attribute type 21 has an invalid length. [ 94.726884][ T6256] netlink: 'syz.3.112': attribute type 6 has an invalid length. [ 95.014511][ T6268] __nla_validate_parse: 11 callbacks suppressed [ 95.015649][ T6268] netlink: 28 bytes leftover after parsing attributes in process `syz.4.115'. [ 95.078652][ T6270] netlink: 28 bytes leftover after parsing attributes in process `syz.4.115'. [ 95.503292][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'. [ 95.529030][ T6290] Bluetooth: MGMT ver 1.23 [ 100.102167][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 116.742205][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 118.625428][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.122'. [ 118.639844][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.122'. [ 118.648971][ T6371] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 118.684896][ T6374] netlink: 44 bytes leftover after parsing attributes in process `syz.2.121'. [ 118.855059][ T6382] atomic_op ffff888025481198 conn xmit_atomic 0000000000000000 [ 118.863703][ T6370] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.873537][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.323759][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.346952][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.647383][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.708747][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.746515][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.796513][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.424704][ T6475] Cannot find set identified by id 0 to match [ 121.519391][ T6480] xt_limit: Overflow, try lower: 324382443/0 [ 121.662292][ T6481] netlink: 'syz.0.146': attribute type 11 has an invalid length. [ 121.682289][ T6481] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.146'. [ 121.779425][ T6494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.149'. [ 121.868859][ T6506] netlink: 24 bytes leftover after parsing attributes in process `syz.3.150'. [ 121.890275][ T6501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.149'. [ 121.931352][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.150'. [ 121.956937][ T6507] netlink: 224 bytes leftover after parsing attributes in process `syz.3.150'. [ 122.070635][ T1178] bridge0: entered promiscuous mode [ 122.112272][ T6513] netlink: 'syz.4.153': attribute type 15 has an invalid length. [ 122.255824][ T6516] bond1: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 122.284326][ T6516] bond1 (unregistering): Released all slaves [ 122.763842][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.161'. [ 122.847764][ T6570] xt_hashlimit: max too large, truncated to 1048576 [ 122.865681][ T6570] Cannot find set identified by id 1 to match [ 122.897920][ T6572] netlink: 'syz.3.165': attribute type 3 has an invalid length. [ 123.454350][ T6601] hsr_slave_0: left promiscuous mode [ 123.460323][ T6601] hsr_slave_1: left promiscuous mode [ 123.638956][ T6615] openvswitch: netlink: IP tunnel dst address not specified [ 123.667107][ T6615] openvswitch: netlink: IP tunnel dst address not specified [ 123.682365][ T6615] openvswitch: netlink: IP tunnel dst address not specified [ 123.717053][ T6615] openvswitch: netlink: IP tunnel dst address not specified [ 123.766617][ T6615] openvswitch: netlink: IP tunnel dst address not specified [ 123.814363][ T6615] openvswitch: netlink: IP tunnel dst address not specified [ 123.833863][ T6615] openvswitch: netlink: IP tunnel dst address not specified [ 123.857250][ T6615] openvswitch: netlink: IP tunnel dst address not specified [ 123.895903][ T6615] openvswitch: netlink: IP tunnel dst address not specified [ 123.916126][ T6615] openvswitch: netlink: IP tunnel dst address not specified [ 123.930338][ T6615] openvswitch: netlink: IP tunnel dst address not specified [ 124.322027][ T6647] IPVS: set_ctl: invalid protocol: 44 100.1.1.2:20000 [ 124.394251][ T6628] syzkaller0: entered promiscuous mode [ 124.414105][ T6628] syzkaller0: entered allmulticast mode [ 124.447264][ T6647] __nla_validate_parse: 6 callbacks suppressed [ 124.447277][ T6647] netlink: 220 bytes leftover after parsing attributes in process `syz.1.189'. [ 124.582302][ T807] IPVS: starting estimator thread 0... [ 124.687849][ T6655] IPVS: using max 32 ests per chain, 76800 per kthread [ 124.919609][ T6671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.195'. [ 125.018427][ T6676] IPVS: set_ctl: invalid protocol: 47 100.1.1.2:20004 [ 125.030501][ T6676] x_tables: duplicate underflow at hook 1 [ 125.963346][ T6685] netlink: 16 bytes leftover after parsing attributes in process `syz.1.199'. [ 126.146136][ T6696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.204'. [ 126.191078][ T6703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.205'. [ 126.534812][ T6719] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 126.644487][ T6725] netlink: 'syz.2.212': attribute type 8 has an invalid length. [ 126.678682][ T6725] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.212'. [ 126.729033][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.213'. [ 126.828014][ T6728] bridge0: port 3(vlan2) entered blocking state [ 126.840149][ T6740] netlink: 'syz.2.216': attribute type 1 has an invalid length. [ 126.844709][ T6728] bridge0: port 3(vlan2) entered disabled state [ 126.849569][ T6740] netlink: 32 bytes leftover after parsing attributes in process `syz.2.216'. [ 126.865423][ T6728] vlan2: entered allmulticast mode [ 126.870639][ T6728] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 126.887906][ T6728] vlan2: entered promiscuous mode [ 126.908572][ T6728] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 126.956703][ T6748] netlink: 'syz.2.218': attribute type 27 has an invalid length. [ 126.991270][ T6751] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 127.345947][ T6764] veth3: entered promiscuous mode [ 127.884584][ T6813] netlink: 28 bytes leftover after parsing attributes in process `syz.4.240'. [ 127.911592][ T6819] netlink: 'syz.0.238': attribute type 13 has an invalid length. [ 127.923723][ T6810] batman_adv: batadv0: Adding interface: vlan3 [ 127.929968][ T6810] batman_adv: batadv0: The MTU of interface vlan3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.957996][ T6810] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 128.072442][ T6823] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 128.110071][ T6829] netlink: 16 bytes leftover after parsing attributes in process `syz.4.243'. [ 128.305095][ T6838] netlink: 'syz.3.246': attribute type 1 has an invalid length. [ 128.528724][ T6850] syzkaller0: entered promiscuous mode [ 128.536870][ T6850] syzkaller0: entered allmulticast mode [ 128.773793][ T6863] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.804929][ T6863] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 129.204497][ T6892] IPv6: sit1: Disabled Multicast RS [ 129.390252][ T6892] bond1 (unregistering): Released all slaves [ 129.517898][ T6909] bond1: (slave bond_slave_1): Device is not our slave [ 129.525773][ T6909] bond1: option active_slave: invalid value (bond_slave_1) [ 129.536309][ T6909] bond1 (unregistering): Released all slaves [ 129.761873][ T6928] __nla_validate_parse: 10 callbacks suppressed [ 129.761888][ T6928] netlink: 192 bytes leftover after parsing attributes in process `syz.0.268'. [ 129.782302][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 129.815412][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.270'. [ 129.886604][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 129.904920][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.270'. [ 129.920697][ T3299] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.952257][ T57] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.997413][ T6941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.273'. [ 130.020896][ T57] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.060958][ T57] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.168568][ T6940] netlink: 16 bytes leftover after parsing attributes in process `syz.4.274'. [ 130.194165][ T6940] veth1_to_team: entered promiscuous mode [ 130.207008][ T6940] veth1_to_team: left promiscuous mode [ 130.406027][ T6964] hsr0: entered promiscuous mode [ 130.428996][ T6964] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 130.654848][ T6975] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 130.665046][ T6975] gretap1: entered allmulticast mode [ 130.750248][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.282'. [ 130.759468][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.282'. [ 131.360078][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.282'. [ 131.461365][ T6983] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 131.478094][ T6963] hsr0: left promiscuous mode [ 131.563603][ T6987] syzkaller0: entered promiscuous mode [ 131.569228][ T6987] syzkaller0: entered allmulticast mode [ 131.950427][ T7009] net_ratelimit: 24 callbacks suppressed [ 131.950439][ T7009] netlink: zone id is out of range [ 132.743206][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.104512][ T6946] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.350677][ T7021] Bluetooth: MGMT ver 1.23 [ 133.368416][ T7024] syzkaller1: entered promiscuous mode [ 133.396177][ T7024] syzkaller1: entered allmulticast mode [ 133.844998][ T7070] lo: Caught tx_queue_len zero misconfig [ 133.863059][ T7061] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 133.990350][ T7076] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 134.004964][ T7076] pim6reg0: linktype set to 780 [ 134.234973][ T7097] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 134.533619][ T7109] syzkaller1: entered promiscuous mode [ 134.540934][ T7109] syzkaller1: entered allmulticast mode [ 134.851297][ T7123] syzkaller0: entered promiscuous mode [ 134.861847][ T7123] syzkaller0: entered allmulticast mode [ 134.906145][ T7091] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 135.385693][ T7163] bond1 (unregistering): Released all slaves [ 135.439730][ T7170] __nla_validate_parse: 5 callbacks suppressed [ 135.439741][ T7170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.329'. [ 135.584236][ T7176] openvswitch: netlink: IP tunnel TTL not specified. [ 135.597499][ T7177] xt_socket: unknown flags 0x8 [ 135.715907][ T7182] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.332'. [ 135.978705][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'. [ 136.016309][ T7201] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.339'. [ 136.039400][ T7205] ip6gretap0: entered promiscuous mode [ 136.043860][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.339'. [ 136.088141][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'. [ 136.210446][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.344'. [ 136.228141][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.344'. [ 136.258369][ T7213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.344'. [ 136.276287][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.344'. [ 136.946455][ T7254] netlink: 'syz.3.360': attribute type 1 has an invalid length. [ 137.414548][ T7288] tipc: Started in network mode [ 137.430449][ T7288] tipc: Node identity 4, cluster identity 4711 [ 137.443804][ T7288] tipc: Node number set to 4 [ 137.575222][ T5754] IPVS: starting estimator thread 0... [ 137.581277][ T7296] IPVS: nq: FWM 3 0x00000003 - no destination available [ 137.672904][ T7297] IPVS: using max 31 ests per chain, 74400 per kthread [ 137.818512][ T7299] syzkaller0: entered promiscuous mode [ 137.835782][ T7299] syzkaller0: entered allmulticast mode [ 137.927794][ T7319] x_tables: duplicate underflow at hook 1 [ 138.937283][ T5636] block nbd0: Wrong magic (0x5000000) [ 139.066675][ T7318] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.077831][ T7318] bridge_slave_0 (unregistering): left allmulticast mode [ 139.086087][ T7318] bridge_slave_0 (unregistering): left promiscuous mode [ 139.093301][ T7318] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.228814][ T7340] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000 [ 139.446126][ T7333] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.454271][ T7333] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.596708][ T7333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.611548][ T7333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.741187][ T78] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.791626][ T78] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.829420][ T78] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.860844][ T78] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.877555][ T7353] openvswitch: netlink: Message has 3 unknown bytes. [ 139.890921][ T7348] syzkaller0: entered promiscuous mode [ 139.910458][ T7348] syzkaller0: entered allmulticast mode [ 140.352777][ T7386] team0: Port device team_slave_0 removed [ 140.663583][ T7397] __nla_validate_parse: 11 callbacks suppressed [ 140.663599][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'. [ 141.034159][ T7409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.405'. [ 141.060553][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'. [ 141.109159][ T7415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.405'. [ 141.114289][ T7412] xt_hashlimit: size too large, truncated to 1048576 [ 141.189845][ T7388] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 141.338127][ T7422] syzkaller0: entered promiscuous mode [ 141.352128][ T7422] syzkaller0: entered allmulticast mode [ 141.538786][ T7427] netlink: 72 bytes leftover after parsing attributes in process `syz.0.411'. [ 141.989262][ T7443] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.414'. [ 142.009534][ T7446] netlink: 758 bytes leftover after parsing attributes in process `syz.2.415'. [ 142.423046][ T5636] Bluetooth: hci0: command 0x0401 tx timeout [ 143.209673][ T7497] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 143.289996][ T7497] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 143.379404][ T7497] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 143.380724][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.421'. [ 143.480829][ T7497] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 143.589186][ T7497] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 143.801439][ T7523] netlink: 'syz.1.426': attribute type 3 has an invalid length. [ 143.817084][ T7504] smbdirect: ib_dev[syz1] removed [ 143.845795][ T7523] netlink: 112 bytes leftover after parsing attributes in process `syz.1.426'. [ 143.954295][ T7528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.428'. [ 144.465997][ T7548] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 144.517088][ T7548] bond1 (unregistering): Released all slaves [ 145.125127][ T7586] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 145.149832][ T7586] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 145.306785][ T7591] netlink: 'syz.1.446': attribute type 1 has an invalid length. [ 145.388921][ T7591] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 145.498752][ T7604] tipc: Enabling of bearer rejected, failed to enable media [ 145.951834][ T7619] netlink: 'syz.4.454': attribute type 11 has an invalid length. [ 146.245494][ T7633] __nla_validate_parse: 8 callbacks suppressed [ 146.245508][ T7633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.459'. [ 146.277940][ T7633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.289310][ T7637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.461'. [ 147.137567][ T7656] netlink: 388 bytes leftover after parsing attributes in process `syz.3.466'. [ 147.223235][ T7662] lo speed is unknown, defaulting to 1000 [ 147.246827][ T7662] lo speed is unknown, defaulting to 1000 [ 147.269108][ T7662] lo speed is unknown, defaulting to 1000 [ 147.303364][ T7662] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 147.331046][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.468'. [ 147.341512][ T7662] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 147.382880][ T7662] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 147.422135][ T7677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.456025][ T7662] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 147.477309][ T7679] netlink: 240 bytes leftover after parsing attributes in process `syz.0.470'. [ 147.604665][ T7662] lo speed is unknown, defaulting to 1000 [ 147.615233][ T7662] lo speed is unknown, defaulting to 1000 [ 147.628507][ T7662] lo speed is unknown, defaulting to 1000 [ 147.653888][ T7687] netlink: 'syz.0.473': attribute type 11 has an invalid length. [ 147.665068][ T7662] lo speed is unknown, defaulting to 1000 [ 147.667963][ T7682] netlink: 76 bytes leftover after parsing attributes in process `syz.1.472'. [ 147.710995][ T7662] lo speed is unknown, defaulting to 1000 [ 148.384474][ T7696] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.395885][ T7696] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.438970][ T7689] lo speed is unknown, defaulting to 1000 [ 148.503823][ T7696] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.514578][ T7696] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.677672][ T7696] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.713764][ T7696] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.003409][ T7723] netlink: 'syz.4.482': attribute type 1 has an invalid length. [ 149.040668][ T7718] netlink: 40 bytes leftover after parsing attributes in process `syz.4.482'. [ 149.114494][ T7696] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.152634][ T7696] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.339908][ T7735] netlink: 24 bytes leftover after parsing attributes in process `syz.0.486'. [ 149.448901][ T7486] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.475668][ T7486] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.553898][ T7486] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.572451][ T7486] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.582312][ T7748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.488'. [ 149.625517][ T7731] lo speed is unknown, defaulting to 1000 [ 149.692874][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.705603][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.724496][ T7746] syzkaller1: entered promiscuous mode [ 149.739995][ T7746] syzkaller1: entered allmulticast mode [ 149.768050][ T7739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.487'. [ 149.884283][ T37] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.904197][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.466818][ T7742] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 152.477791][ T7759] netlink: 'syz.2.491': attribute type 19 has an invalid length. [ 152.658462][ T7788] sctp: [Deprecated]: syz.2.494 (pid 7788) Use of int in maxseg socket option. [ 152.658462][ T7788] Use struct sctp_assoc_value instead [ 152.665395][ T7790] netlink: 'syz.0.495': attribute type 13 has an invalid length. [ 152.724206][ T7789] geneve1: entered promiscuous mode [ 152.762540][ T7790] geneve2: entered promiscuous mode [ 152.794220][ T7486] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.857098][ T7486] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.928714][ T7486] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.962243][ T7486] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.171391][ T7827] tls_set_device_offload_rx: netdev not found [ 154.998734][ T7855] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 155.171765][ T7859] __nla_validate_parse: 4 callbacks suppressed [ 155.171782][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.514'. [ 155.208509][ T7840] netlink: 16158 bytes leftover after parsing attributes in process `syz.2.511'. [ 155.267298][ T7859] team0: Port device team_slave_0 removed [ 155.850430][ T7895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.026357][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'. [ 156.060010][ T7906] netlink: 'syz.3.530': attribute type 1 has an invalid length. [ 156.227594][ T7881] xt_hashlimit: size too large, truncated to 1048576 [ 156.347566][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.530'. [ 156.806023][ T7935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.536'. [ 156.850135][ T7941] netlink: 16 bytes leftover after parsing attributes in process `syz.4.537'. [ 156.903567][ T7944] netlink: 10 bytes leftover after parsing attributes in process `syz.4.537'. [ 156.911357][ T7941] bond0: entered promiscuous mode [ 156.930195][ T7941] bond_slave_0: entered promiscuous mode [ 156.946619][ T7941] bond_slave_1: entered promiscuous mode [ 156.970134][ T7941] bond0: left promiscuous mode [ 156.977676][ T7941] bond_slave_0: left promiscuous mode [ 156.983565][ T7941] bond_slave_1: left promiscuous mode [ 157.715654][ T7962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.543'. [ 157.882920][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.543'. [ 158.084961][ T7982] netlink: 48 bytes leftover after parsing attributes in process `syz.4.547'. [ 158.294609][ T7992] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 159.117640][ T8040] bond2 (unregistering): Released all slaves [ 159.411737][ T8073] xt_hashlimit: size too large, truncated to 1048576 [ 159.411737][ T8076] xt_hashlimit: size too large, truncated to 1048576 [ 159.560885][ T8075] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 159.590359][ T8084] netlink: 'syz.4.567': attribute type 1 has an invalid length. [ 159.597266][ T8075] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 159.697096][ T8084] veth5: entered promiscuous mode [ 159.718061][ T8084] veth5: entered allmulticast mode [ 160.261683][ T8113] __nla_validate_parse: 11 callbacks suppressed [ 160.261699][ T8113] netlink: 16 bytes leftover after parsing attributes in process `syz.2.575'. [ 160.683566][ T8128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.578'. [ 161.040833][ T8146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.585'. [ 161.204240][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.586'. [ 161.341482][ T8155] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.361685][ T8169] x_tables: duplicate underflow at hook 2 [ 161.437461][ T8155] bond1 (unregistering): Released all slaves [ 161.713372][ T8184] ------------[ cut here ]------------ [ 161.718923][ T8184] diff > ((u16)~0U) [ 161.718942][ T8184] WARNING: ./include/net/netlink.h:2265 at br_fill_linkxstats+0x9e7/0xae0, CPU#0: syz.2.591/8184 [ 161.733425][ T8184] Modules linked in: [ 161.738087][ T8184] CPU: 0 UID: 0 PID: 8184 Comm: syz.2.591 Not tainted syzkaller #0 PREEMPT(full) [ 161.747388][ T8184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 161.757494][ T8184] RIP: 0010:br_fill_linkxstats+0x9e7/0xae0 [ 161.763351][ T8184] Code: b6 bd 08 48 3b 84 24 60 01 00 00 75 33 44 89 f0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 50 8f 30 01 cc e8 0a 1b 49 f7 90 <0f> 0b 90 e9 bc fe ff ff e8 fc 1a 49 f7 90 0f 0b 90 e9 53 ff ff ff [ 161.783058][ T8184] RSP: 0018:ffffc9000397f160 EFLAGS: 00010293 [ 161.789143][ T8184] RAX: ffffffff8a7ca956 RBX: 0000000000013550 RCX: ffff8880554fbd80 [ 161.797247][ T8184] RDX: 0000000000000000 RSI: 0000000000013550 RDI: 000000000000ffff [ 161.805362][ T8184] RBP: ffffc9000397f310 R08: 0000000000000000 R09: 0000000000000000 [ 161.813380][ T8184] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 161.821355][ T8184] R13: 1ffff9200072fe40 R14: 0000000000000000 R15: dffffc0000000000 [ 161.829405][ T8184] FS: 00007f1d01ff66c0(0000) GS:ffff88812527a000(0000) knlGS:0000000000000000 [ 161.838420][ T8184] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 161.845060][ T8184] CR2: 00007f1d01fb3ff8 CR3: 000000007ab34000 CR4: 00000000003526f0 [ 161.853100][ T8184] Call Trace: [ 161.856396][ T8184] [ 161.859345][ T8184] ? __pfx_br_fill_linkxstats+0x10/0x10 [ 161.865004][ T8184] ? nla_put+0xd0/0x150 [ 161.869171][ T8184] ? __asan_memcpy+0x40/0x70 [ 161.873812][ T8184] ? nla_put+0xd0/0x150 [ 161.877975][ T8184] rtnl_fill_statsinfo+0x541/0x26f0 [ 161.883238][ T8184] ? __pfx_rtnl_fill_statsinfo+0x10/0x10 [ 161.888907][ T8184] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 161.895580][ T8184] ? __alloc_skb+0x4e5/0x7d0 [ 161.900194][ T8184] rtnl_stats_get+0x4b6/0x6d0 [ 161.904934][ T8184] ? __pfx_rtnl_stats_get+0x10/0x10 [ 161.910162][ T8184] ? __pfx_rtnl_stats_get+0x10/0x10 [ 161.915436][ T8184] rtnetlink_rcv_msg+0x77e/0xbe0 [ 161.920394][ T8184] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 161.925559][ T8184] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 161.931028][ T8184] ? ref_tracker_free+0x693/0x840 [ 161.936126][ T8184] ? __pfx_ref_tracker_free+0x10/0x10 [ 161.941522][ T8184] netlink_rcv_skb+0x232/0x4b0 [ 161.946350][ T8184] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 161.951819][ T8184] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 161.957200][ T8184] ? netlink_deliver_tap+0x2e/0x1b0 [ 161.962480][ T8184] ? netlink_deliver_tap+0x2e/0x1b0 [ 161.967691][ T8184] netlink_unicast+0x75c/0x8e0 [ 161.972611][ T8184] netlink_sendmsg+0x813/0xb40 [ 161.977396][ T8184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.982732][ T8184] ? aa_sock_msg_perm+0xf1/0x1b0 [ 161.987685][ T8184] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 161.993033][ T8184] ____sys_sendmsg+0x972/0x9f0 [ 161.997802][ T8184] ? __might_fault+0xaf/0x130 [ 162.002558][ T8184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.007856][ T8184] ? import_iovec+0x73/0xa0 [ 162.012446][ T8184] ___sys_sendmsg+0x2a5/0x360 [ 162.017130][ T8184] ? __lock_acquire+0x6b5/0x2cf0 [ 162.022260][ T8184] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.027474][ T8184] ? futex_wake+0x4ac/0x580 [ 162.032058][ T8184] ? __fget_files+0x2a/0x420 [ 162.036658][ T8184] ? __fget_files+0x3a0/0x420 [ 162.041357][ T8184] __x64_sys_sendmsg+0x1bd/0x2a0 [ 162.046371][ T8184] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 162.051846][ T8184] ? rcu_is_watching+0x15/0xb0 [ 162.056697][ T8184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.062816][ T8184] do_syscall_64+0x15f/0xf80 [ 162.067420][ T8184] ? trace_irq_disable+0x3b/0x140 [ 162.072527][ T8184] ? clear_bhb_loop+0x40/0x90 [ 162.077215][ T8184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.083199][ T8184] RIP: 0033:0x7f1d03d9ce59 [ 162.087656][ T8184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.107320][ T8184] RSP: 002b:00007f1d01ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.115829][ T8184] RAX: ffffffffffffffda RBX: 00007f1d04015fa0 RCX: 00007f1d03d9ce59 [ 162.123858][ T8184] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000004b [ 162.131833][ T8184] RBP: 00007f1d03e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 162.139901][ T8184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.147918][ T8184] R13: 00007f1d04016038 R14: 00007f1d04015fa0 R15: 00007fff5eaec0b8 [ 162.155957][ T8184] [ 162.158998][ T8184] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 162.166282][ T8184] CPU: 0 UID: 0 PID: 8184 Comm: syz.2.591 Not tainted syzkaller #0 PREEMPT(full) [ 162.175457][ T8184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 162.185536][ T8184] Call Trace: [ 162.188800][ T8184] [ 162.191714][ T8184] vpanic+0x56c/0xa60 [ 162.195685][ T8184] ? __pfx__printk+0x10/0x10 [ 162.200285][ T8184] ? __pfx_vpanic+0x10/0x10 [ 162.204770][ T8184] ? is_bpf_text_address+0x292/0x2b0 [ 162.210050][ T8184] ? is_bpf_text_address+0x26/0x2b0 [ 162.215237][ T8184] panic+0xc5/0xd0 [ 162.218948][ T8184] ? __pfx_panic+0x10/0x10 [ 162.223372][ T8184] __warn+0x315/0x4c0 [ 162.227345][ T8184] ? br_fill_linkxstats+0x9e7/0xae0 [ 162.232529][ T8184] ? br_fill_linkxstats+0x9e7/0xae0 [ 162.237724][ T8184] __report_bug+0x29a/0x540 [ 162.242220][ T8184] ? br_fill_linkxstats+0x9e7/0xae0 [ 162.247402][ T8184] ? __pfx___report_bug+0x10/0x10 [ 162.252449][ T8184] ? irqentry_exit+0x218/0x760 [ 162.257198][ T8184] ? trace_irq_disable+0x3b/0x140 [ 162.262218][ T8184] ? br_fill_linkxstats+0x9e7/0xae0 [ 162.267408][ T8184] report_bug+0x16a/0x220 [ 162.271727][ T8184] ? br_fill_linkxstats+0x9e7/0xae0 [ 162.276910][ T8184] ? br_fill_linkxstats+0x9e9/0xae0 [ 162.282088][ T8184] handle_bug+0x9c/0x200 [ 162.286315][ T8184] exc_invalid_op+0x1a/0x50 [ 162.290807][ T8184] asm_exc_invalid_op+0x1a/0x20 [ 162.295642][ T8184] RIP: 0010:br_fill_linkxstats+0x9e7/0xae0 [ 162.301431][ T8184] Code: b6 bd 08 48 3b 84 24 60 01 00 00 75 33 44 89 f0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 50 8f 30 01 cc e8 0a 1b 49 f7 90 <0f> 0b 90 e9 bc fe ff ff e8 fc 1a 49 f7 90 0f 0b 90 e9 53 ff ff ff [ 162.321019][ T8184] RSP: 0018:ffffc9000397f160 EFLAGS: 00010293 [ 162.327070][ T8184] RAX: ffffffff8a7ca956 RBX: 0000000000013550 RCX: ffff8880554fbd80 [ 162.335024][ T8184] RDX: 0000000000000000 RSI: 0000000000013550 RDI: 000000000000ffff [ 162.342978][ T8184] RBP: ffffc9000397f310 R08: 0000000000000000 R09: 0000000000000000 [ 162.350928][ T8184] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 162.358879][ T8184] R13: 1ffff9200072fe40 R14: 0000000000000000 R15: dffffc0000000000 [ 162.366838][ T8184] ? br_fill_linkxstats+0x9e6/0xae0 [ 162.372041][ T8184] ? __pfx_br_fill_linkxstats+0x10/0x10 [ 162.377574][ T8184] ? nla_put+0xd0/0x150 [ 162.381711][ T8184] ? __asan_memcpy+0x40/0x70 [ 162.386286][ T8184] ? nla_put+0xd0/0x150 [ 162.390433][ T8184] rtnl_fill_statsinfo+0x541/0x26f0 [ 162.395628][ T8184] ? __pfx_rtnl_fill_statsinfo+0x10/0x10 [ 162.401244][ T8184] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 162.407823][ T8184] ? __alloc_skb+0x4e5/0x7d0 [ 162.412404][ T8184] rtnl_stats_get+0x4b6/0x6d0 [ 162.417075][ T8184] ? __pfx_rtnl_stats_get+0x10/0x10 [ 162.422267][ T8184] ? __pfx_rtnl_stats_get+0x10/0x10 [ 162.427471][ T8184] rtnetlink_rcv_msg+0x77e/0xbe0 [ 162.432396][ T8184] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 162.437492][ T8184] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 162.442934][ T8184] ? ref_tracker_free+0x693/0x840 [ 162.447951][ T8184] ? __pfx_ref_tracker_free+0x10/0x10 [ 162.453322][ T8184] netlink_rcv_skb+0x232/0x4b0 [ 162.458069][ T8184] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 162.463515][ T8184] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 162.468791][ T8184] ? netlink_deliver_tap+0x2e/0x1b0 [ 162.473970][ T8184] ? netlink_deliver_tap+0x2e/0x1b0 [ 162.479156][ T8184] netlink_unicast+0x75c/0x8e0 [ 162.483923][ T8184] netlink_sendmsg+0x813/0xb40 [ 162.488772][ T8184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.494041][ T8184] ? aa_sock_msg_perm+0xf1/0x1b0 [ 162.498963][ T8184] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 162.504235][ T8184] ____sys_sendmsg+0x972/0x9f0 [ 162.508981][ T8184] ? __might_fault+0xaf/0x130 [ 162.513647][ T8184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.518921][ T8184] ? import_iovec+0x73/0xa0 [ 162.523416][ T8184] ___sys_sendmsg+0x2a5/0x360 [ 162.528074][ T8184] ? __lock_acquire+0x6b5/0x2cf0 [ 162.532999][ T8184] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.538183][ T8184] ? futex_wake+0x4ac/0x580 [ 162.542707][ T8184] ? __fget_files+0x2a/0x420 [ 162.547283][ T8184] ? __fget_files+0x3a0/0x420 [ 162.551949][ T8184] __x64_sys_sendmsg+0x1bd/0x2a0 [ 162.556869][ T8184] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 162.562313][ T8184] ? rcu_is_watching+0x15/0xb0 [ 162.567070][ T8184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.573126][ T8184] do_syscall_64+0x15f/0xf80 [ 162.577702][ T8184] ? trace_irq_disable+0x3b/0x140 [ 162.582713][ T8184] ? clear_bhb_loop+0x40/0x90 [ 162.587375][ T8184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.593251][ T8184] RIP: 0033:0x7f1d03d9ce59 [ 162.597651][ T8184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.617267][ T8184] RSP: 002b:00007f1d01ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.625664][ T8184] RAX: ffffffffffffffda RBX: 00007f1d04015fa0 RCX: 00007f1d03d9ce59 [ 162.633617][ T8184] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000004b [ 162.641581][ T8184] RBP: 00007f1d03e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 162.649533][ T8184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.657485][ T8184] R13: 00007f1d04016038 R14: 00007f1d04015fa0 R15: 00007fff5eaec0b8 [ 162.665452][ T8184] [ 162.668968][ T8184] Kernel Offset: disabled [ 162.673284][ T8184] Rebooting in 86400 seconds..