last executing test programs: 11m13.652085125s ago: executing program 1 (id=2132): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f00000008c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000a00)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa4608d04500002400000000001190780000400017c13c514c04039078a205000100000000000000"], 0x0) write$tun(0xffffffffffffffff, 0x0, 0x3e) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r2, 0x5452, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000800010000000000140004800500030007000000050003000100000008000200010000000800020001000000a00008801c0007800800850002000000080006000000000008000500400003"], 0xe0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0x1}, {0x6, 0xe}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x15, 0x13}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x2000c00c) 11m12.834088355s ago: executing program 1 (id=2137): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc4}}, 0x4008800) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1d, 0x3, @remote, 0x2}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@del={0xe0, 0x11, 0x1, 0x70bd27, 0x25dfdbfb, {{'lrw-camellia-asm\x00'}, '\x00', '\x00', 0x2000, 0x200}}, 0xe0}, 0x1, 0x0, 0x0, 0x20040810}, 0x850) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}], {0x14}}, 0xa8}}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000140)=0x4, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r6) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000100)={0x14, r7, 0xba87317d461c07c9, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Q', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r10) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000010000002c0004800500030001000000050003000500000005000300000000000500e2ff000000000500030007000000080001000100000008000200"], 0x50}, 0x1, 0x0, 0x0, 0x20008086}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x8804}, 0x40000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 11m12.458156637s ago: executing program 1 (id=2141): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) unshare(0x68040200) r1 = socket(0x2a, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0xc, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="bf1ea0e3c19ed614ebadd2db8662", 0x0, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x58, &(0x7f00000004c0)}, 0x10) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x50, 0x1, 0x2, 0x40006}, {0x6, 0x0, 0xff, 0x2}]}) write$ppp(r6, &(0x7f0000000200)="620f", 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv4_newroute={0x2c, 0x18, 0xaba64f4add525e83, 0x1, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xfe, 0x3}, [@RTA_OIF={0x8, 0x4, r7}, @RTA_PREFSRC={0x8, 0x7, @broadcast}]}, 0x2c}, 0x1, 0xffffff7f}, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff3}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x14) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f7}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000140)="24000000010006", 0x7) 11m11.654559002s ago: executing program 1 (id=2150): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x43) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x20040801) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x6c00}, 0x4040000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000540)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) close(r9) ioctl$SIOCSIFHWADDR(r9, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random}) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000940)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x128, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}]}, 0x128}}, 0x20000000) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)={0x38, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x38}}, 0x880) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70a926, 0x8fdff, {0x0, 0x0, 0x0, r12, {0x0, 0xffed}, {0xf, 0xd}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xe70, 0xa, 0x3, 0x7ca, 0x6963, 0xff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x54, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080004}, 0x11) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="10010000", @ANYRES16=r2, @ANYBLOB="000026bd709bc0e908000300da852ce6e20d5b63ce2f840bcfc4d804c91eed95ef7ec77729302d911ac6d3e57fb5738d217f7f3bd81e7357b7eb2c1756cf4aff026dff4a35bc8e86103bb4e921033ae4ed23dbd0f9b0375ed6e75cc7de9110f456e9e2235281fb89cb448fac997aafedcc79639e36c0817155e56deaebfd3ed64431b4e4d12ac4ab0baf1f69c53799b938dfad25246429bb8724000018af6a3742d525771407ac9c9d2137d29c8e7b00fd3eba38d9cffaa2", @ANYRES32=r5, @ANYBLOB="0a00e80008021100000000000a00e80008021100000000001c00e7009eb261cfd21ca16926b30a2ee534b2aaa9f4d77e40625e770a00e800ffffffffffff00000c00178004000600040001001c00e700fddf90d1cd8d35e102691d2d5e9e8b8a6ce0e55d338a9aee0a00e800ffffffffffff000008001780040002000a00e80008021100000000000800178004000400140017800400040004000400040005000400020005005300010000001c0017800400020004000100040003000400050004000200040005001c00e7008687b79cf1ca49e739543d95a7cf577b3496ded68e20af5708000500050000000500530001000000"], 0x110}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = openat$cgroup_ro(r13, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r14, &(0x7f0000000200)=0x10000, 0x12) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 11m11.11610475s ago: executing program 1 (id=2157): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r2 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x95, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000680)="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", 0x3ab}], 0x1}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000004c0)="a9388706e053", 0x6}], 0x1}}], 0x2, 0x1) 11m10.68634168s ago: executing program 1 (id=2161): r0 = socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000400)={0x80000005}) epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0x8000, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8", 0x1}], 0x1}, 0x894) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) mmap$xdp(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x2000007, 0x13, r0, 0x80000000) socket$xdp(0x2c, 0x3, 0x0) (async) pipe(&(0x7f0000000140)) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000400)={0x80000005}) (async) epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0x8000, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8", 0x1}], 0x1}, 0x894) (async) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) (async) mmap$xdp(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x2000007, 0x13, r0, 0x80000000) (async) 11m10.109046945s ago: executing program 32 (id=2161): r0 = socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000400)={0x80000005}) epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0x8000, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8", 0x1}], 0x1}, 0x894) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) mmap$xdp(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x2000007, 0x13, r0, 0x80000000) socket$xdp(0x2c, 0x3, 0x0) (async) pipe(&(0x7f0000000140)) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000400)={0x80000005}) (async) epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0x8000, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8", 0x1}], 0x1}, 0x894) (async) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) (async) mmap$xdp(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x2000007, 0x13, r0, 0x80000000) (async) 2m32.856799678s ago: executing program 5 (id=6389): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000a2000000000000001d0071107c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r1, 0x0, 0x180000}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x8) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x7fff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="14000200ff02000000000000000000000000000108000800028d"], 0x34}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(r7, 0x8918, &(0x7f0000000380)={0xe0ff, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x78, 0x0, 0x0, 0x0, 0x3}) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m32.673095079s ago: executing program 5 (id=6391): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@dev={0xac, 0x14, 0x14, 0x1a}, @loopback}, 0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000600)={@remote, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000000, 0x8, 0x100, 0x600, 0x55, 0xc0000000, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fddbdf25010000000000007fffffff00034c00180000000073797a30000000001c275f06000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000f7ffffff00000000"], 0x68}, 0x1, 0x0, 0x0, 0x20008040}, 0x801) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390004001300034700bb5be1c3e4feff060000000000190004000400ad0002000000000000060488627df400f931", 0x2e}], 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0xfe, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x700, 0x8, 0x800101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) socket$netlink(0x10, 0x3, 0x12) r6 = socket$netlink(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="070000000400000008020000210000"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="00000000c7000000b703000000000001851000001b000000b70000667a7b66c4a084b7000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r8}, 0x18) bind$netlink(r6, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x10000000}, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) r10 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r10, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d00000004000000040000000000010000000000", @ANYRES32=r11, @ANYBLOB="00000000000000ff0f00"/20, @ANYRESOCT=r4, @ANYRES32, @ANYBLOB="000000000300"/28], 0x48) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) 2m32.44395487s ago: executing program 5 (id=6394): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000c3000)=ANY=[@ANYBLOB="20000000000000008400000002000000000041020000000000000100", @ANYRES32=0x0], 0x20}], 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000000), 0x4) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r2, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) sendmmsg$inet_sctp(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000c3000)=ANY=[@ANYBLOB="20000000000000008400000002000000000041020000000000000100", @ANYRES32=0x0], 0x20}], 0x1, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r5, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000000), 0x4) (async) 2m32.183964907s ago: executing program 5 (id=6397): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r0}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) close(r2) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r7, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r1, &(0x7f0000000400)=[{{&(0x7f0000000580)={0x2, 0x4e5c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x8010) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0xc, 0x3, 0x6, 0xcf36, 0xa5, 0x1, 0x7}, 0x1c) 2m32.096247017s ago: executing program 5 (id=6398): unshare(0x22020600) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x6e, &(0x7f00000001c0)={[0x7f]}, 0x8) (async) close(r1) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x891a, 0x0) (async) sendfile(0xffffffffffffffff, r0, 0x0, 0x1) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) (async, rerun: 32) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0xffff, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)="08001efdff00f180", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x400c880) (rerun: 32) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1704b45adbde08004500005c0000000000019078ac1e0001ac1414aa05f58f78e00000e0409800000000000004110000e0001b59ac1414aa442c000000000000000000000000000000ac14140000000000ac1414bb00"/103], 0x0) clock_gettime(0x0, &(0x7f00000000c0)) (async) socket$inet6(0xa, 0xa, 0x0) 2m30.807902497s ago: executing program 5 (id=6402): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) (async) r4 = socket$packet(0x11, 0x2, 0x300) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) 2m30.392911978s ago: executing program 33 (id=6402): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) (async) r4 = socket$packet(0x11, 0x2, 0x300) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) 3.844106366s ago: executing program 2 (id=7589): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async) unshare(0x62040200) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$alg(0x26, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000040) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl(0xffffffffffffffff, 0x8b2a, &(0x7f0000000040)) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000003d00070100000000fbffffff037c0000040012800c0001"], 0x24}}, 0x4) (async) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r4, &(0x7f0000000d00)=[{{&(0x7f00000001c0)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000600)="65ca0a5fe0", 0x5}], 0x1, 0x0, 0x34}}], 0x1, 0x4000) (async) shutdown(r2, 0x1) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x6}, &(0x7f0000000140)=0x8) 2.907980514s ago: executing program 4 (id=7596): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.self_freezing\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r7, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) 2.420284491s ago: executing program 0 (id=7601): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x15, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_netdev_private(r2, 0x8992, &(0x7f00000000c0)="3c133a") bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x34, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x1, 0x8}]}}}}}}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=""/97, 0xd2, 0x61, 0x0, 0x7}, 0x28) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000003c0)={{r3}, 0x7ff, 0x9, 0x5}) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x5, 0xa76b, 0x7a007, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4, 0xb, @value=r4, @void, @value=r5}, 0x50) socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0xeb, &(0x7f0000000640)={@local, @local, @void, {@llc_tr={0x11, {@llc={0xe, 0xd4, '@', "96bab9248c19e3a04dc966a40876969972026a6062beba07fc059682095365981f38795c447ba4e9bf649b89fbbd4b150fb93b34adc07b53fa5cfd6d485484c951836b1e4151403c79c7f2059639d7929cba55b7b6a1480eb6f57a2b6c5a031b633cb76ddc7b6fda9c0b307b9672c6cda1d68bae23190c50da7956897c618f5b2b7b0ed55bf2677bfa908c078d6608b6dd1d11f7807e6dfefb21e48954e32b30b8aeee863a0aa09271744e405f3500f53425b0b0466240b10bf1b8b9e8b4abe2120a9278056e8d75618b18f2906c7da2dcb269bdd49066ee4785"}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0x1c, 0x0, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x18) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x15, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) ioctl$sock_netdev_private(r2, 0x8992, &(0x7f00000000c0)="3c133a") (async) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r1, 0x3) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x34, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x1, 0x8}]}}}}}}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=""/97, 0xd2, 0x61, 0x0, 0x7}, 0x28) (async) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000003c0)={{r3}, 0x7ff, 0x9, 0x5}) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x5, 0xa76b, 0x7a007, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4, 0xb, @value=r4, @void, @value=r5}, 0x50) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) syz_emit_ethernet(0xeb, &(0x7f0000000640)={@local, @local, @void, {@llc_tr={0x11, {@llc={0xe, 0xd4, '@', "96bab9248c19e3a04dc966a40876969972026a6062beba07fc059682095365981f38795c447ba4e9bf649b89fbbd4b150fb93b34adc07b53fa5cfd6d485484c951836b1e4151403c79c7f2059639d7929cba55b7b6a1480eb6f57a2b6c5a031b633cb76ddc7b6fda9c0b307b9672c6cda1d68bae23190c50da7956897c618f5b2b7b0ed55bf2677bfa908c078d6608b6dd1d11f7807e6dfefb21e48954e32b30b8aeee863a0aa09271744e405f3500f53425b0b0466240b10bf1b8b9e8b4abe2120a9278056e8d75618b18f2906c7da2dcb269bdd49066ee4785"}}}}}, 0x0) (async) 1.94395373s ago: executing program 0 (id=7605): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) r1 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4(r1, &(0x7f00000000c0)=@isdn, &(0x7f0000000280)=0x80, 0x80000) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="91103b000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x44}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) close(0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r6 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x200068c0}], 0x1, 0xc0001) recvmmsg(r6, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x102, 0x0) 1.690990856s ago: executing program 6 (id=7607): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'xfrm0\x00'}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket(0x1e, 0x4, 0x0) (rerun: 32) getsockopt$sock_int(r2, 0x1, 0x24, 0xfffffffffffffffe, 0x0) (async, rerun: 64) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (rerun: 64) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000002ac0)=[@in6={0xa, 0x4e24, 0xa, @local, 0x9}]}, &(0x7f0000000080)=0x10) getpeername$packet(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000a46f80000085000000610020009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x4010) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000400)={r5, @in6={{0xa, 0x4e24, 0x9, @loopback}}, 0x1, 0x5}, 0x90) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100)=0x64d, 0x4) shutdown(r7, 0x1) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000240)={0x5, 0x2, 0x5, 0x1b}, 0x10) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) (rerun: 64) 1.620069961s ago: executing program 3 (id=7608): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0xd1383000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32, @ANYBLOB="000000001fea3e0de1d0e1ce9708d67d73430865000200b782000014000000b7030000000000ee8400000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0xd}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x1000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0xffffc000) 1.619851173s ago: executing program 0 (id=7609): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5c00000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b4fad1f60a64c9f408000300060100000400000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008004500005800000000002f907800000000e0000001248081000000000010000800000086dd080088be81000004100000000100000000000000080022eb00000000200000000200000004000000000800655800000000"], 0x0) 1.409587305s ago: executing program 0 (id=7610): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001500192340834b80040d8c562d067fbc45ff810540010000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800003f000000003af8575196d131e7395433ba7516790000000000f195205cf8f8e4cbbd03ab69c569f9", @ANYRESOCT], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x2d, 'net'}]}, 0x5) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000880)=0x0) connect$nfc_raw(r1, &(0x7f00000008c0)={0x27, r3, 0xffffffffffffffff, 0x2}, 0x10) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) pselect6(0x40, &(0x7f00000003c0)={0x6, 0x277, 0xfffffffffffff79d, 0x42c, 0xf, 0x0, 0x3660, 0xa19}, &(0x7f00000004c0)={0x9, 0x80000001, 0x2, 0xa0, 0xe, 0x3a73, 0x4, 0x6b}, &(0x7f0000000500)={0x9, 0x0, 0x1, 0x6, 0xab6, 0x0, 0x315, 0x5}, &(0x7f00000005c0)={r4, r5+10000000}, &(0x7f0000000840)={&(0x7f0000000800)={[0x4]}, 0x8}) syz_emit_ethernet(0xbf, &(0x7f0000000980)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @val={@void, {0x8100, 0x3, 0x0, 0x3}}, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x85, 0x2c, 0x0, @remote, @local, {[@routing={0x8, 0x2, 0x2, 0x21, 0x0, [@empty]}], "b8f8e535794d26d1027b7f80d8603e690071ca87809d00690934c4fb6ac0d50ccf89ded30f6e932f119b008938ca1207113b2b17518579d506d028836117aff56ce564bb72e8d79ce39b7f73a8beac07436a6bf18648b327018db5cda456733c479d95280b705f1b88c40adc71"}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500382c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b00020100000000b9365394fc379af00659ab39e65121dd3e8c7219b1f783b2180bb163c2b0c948be6273458325cc81dbf04b4760e3cfa51b045c3e779d1fe36e2886af6b45c6ccd970357229915f358ae3875c23e3567488bca1dc2d3e4e62ebd5403d88de75121b755091e8cffe05ef23"], 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newrule={0x24, 0x20, 0x301, 0x4, 0x0, {0x2, 0x14, 0x0, 0x20, 0x0, 0x0, 0x0, 0x8, 0x8}, [@FRA_FLOW={0x0, 0xb, 0x9b}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@setlink={0x110, 0x13, 0x400, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x4900, 0x348}, [@IFLA_VF_PORTS={0xe8, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "820196a6f1d657284d7c749b165bbeb4"}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "8e597913052c2b0af194d92051ddb7ee"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3fc2fbecfd9a91b997fde32e55ecb005"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8eaec2ebd6392b81acf25cae23e9b03d"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "353cb4fe2663bbbdf6ec61cf3ee3bfc3"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_PROFILE={0x6, 0x2, '&\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x43}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "f14711e33d35ab2137b9cafcddeaedb2"}, @IFLA_PORT_PROFILE={0x8, 0x2, 'nfc\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xa, 0x2, 'wlan0\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6b044c15348dc2e29acd2862cb2dfcba"}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x110}, 0x1, 0x0, 0x0, 0x4008185}, 0x40) r9 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@int=0x5, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r12) sendmsg$NFC_CMD_SE_IO(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYBLOB="040019000800150001000000", @ANYBLOB="010028bd70", @ANYRES16=r13], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4040090) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 1.298166467s ago: executing program 3 (id=7611): epoll_create1(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x9}, @alu={0x4, 0x1, 0x5, 0x0, 0xbef147e1b693877c, 0xfffffffffffffffc, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0x84, &(0x7f0000000340)=""/132, 0x41000, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x4, 0x7, 0x7}, 0x10, 0x1000d, r0, 0x3, &(0x7f0000000580)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000005c0)=[{0x1, 0x1, 0x5, 0x5}, {0x3, 0x3, 0x7, 0x4}, {0x2, 0x4, 0xa, 0x4}], 0x10, 0x6}, 0x94) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000006c0)={0x0, 0x3, 0x400}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000eb500634166334225dd1ea948974b00c6f2b404e5e4f4ba8cfa43134e579", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x52, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x7, 0x300) (async) pipe(&(0x7f0000000000)) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x14, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x40800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'xfrm0\x00'}]}, 0x30}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000120a0136000000830e0000000000020000000900020073797a310000000008000440000000000900010073797a3000000000000a14004f84000011000100"/87], 0x64}}, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.244144023s ago: executing program 4 (id=7612): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x3, 0x7, 0x40000000000009}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="91104e0000000000952088fe0000000036bf19675c04c3588d01e181c278359618b6"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008040) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8800) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl(r2, 0x1, &(0x7f00000001c0)="0feb79dba4d547dbfc1dd208eaa30956048fec8af59ac89db5fa9990264676e2986faafd3ea5dae7bc92a1bc24e351e85f1d5bd5ddeaca8f55b490bd77a9bdc487a1216409507ef4a44e") socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x80000001, 0x7ff, 0x24e, 0x80000000, 0x5}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x58, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="6c000000103200020000700000000000009d1377444397524157e2632529", @ANYRES32=0x0, @ANYBLOB="802100000000000014000300776c616e300000000000000000000000080004000e040000300016802c00018000000900000000000180000000002900c28f0300"], 0x6c}}, 0x8010) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={&(0x7f0000000680)="91575735f89f8a8a56acebdbdb1dc5bfc949d314c5761e311d7aed98e588112b7d444b3e711b3fc9da7a5705a74ee1ddf81f32ddbdc439c20d2378daf09979410e64d95e21d0eb619407272b4ffd25e13605d066bbb2b9c43122824093dbcb05f84b293d6f74e8f7d6626e9cbbc7bb0cea56b184c6d17803814132c0f48987371a4fbfadff4ed61262e77d5501b6ea14b05a152ee4c83fe47d14d2bbc530cfde24c0ec96500ee6b92820386c1af5f4a1852215910be45c48d54d4f08394c704053f5", &(0x7f0000000340)=""/176, &(0x7f0000000900)="a5713388350afb0d0177fb9a7ea20ecee9d786c80fac0a13635dc8d39f9a44d1643f642e275ea6d505e9047e6a0acc75755eeba21a5f26f660bdb9b8ebf04053d8ed5452ca60caf83e8ec6a2bb3c89cfec2cb250e467773c37485891dd6e072ce4b8f17f1e409c42f0ffe59a5b19c278a6bd76aa7ed1bed1ac", &(0x7f0000000980)="14b9ad004f7edf33fe41951c5413163ff73e5ed525a7882dd9648346bc7b0ebecf00dd2ab19cbfebc9829c8c661b765b0bda3952138d47af0ee94a61be8259ddfd2aba3de50d2ce591ae791b627e7ed8e36f58cc33696863533e2893873582234ecf783d990ffc9ec90f323ef51e6f8d28187fb773f816d28580a07dd3c3cf57c318f163ad20ff89fcab5c54080eabf9658a680797ae394274797c6c3cfe8a4ebb81aad00ca63550be6f0a2cedbb362fc7f40cffade01d3eafd0235f48b14d4384aed584", 0xfffffff7, 0xffffffffffffffff, 0x4}, 0x38) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f00000000c0)=0xff, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r5, &(0x7f0000000a80)=ANY=[@ANYBLOB="0000080001020080000500000108000604000aaaaaaaaaaabbac1414bbaaaaaaaaaaaa64010100"], 0x2a) 1.204165287s ago: executing program 2 (id=7613): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8010) (async) r2 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) sendto$rose(r2, &(0x7f0000000180)="0d63a8b9ec9ff65bcff79dc1539e58c8844200dffc3c5530f1beed3edf01f1c74e17ab9366e0f2d82d2e23b9028e7751fa039e3e4c0652fa0246786e170343daf781de39787e2bfe4787e7181f265ac8b3dbc5a82d4fbed1311a20b0cdffa4ccbf6d41ccd798c150d02115425aec17b789590663e085d8053d6019b248acfadf1e63db1bf83df6f766ac87a2061bcaff", 0x90, 0x40000, 0x0, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000240)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000280)={{r2}, r3, 0x6, @unused=[0x2, 0x9, 0x7, 0x8000000000000000], @subvolid=0x7}) (async) sendmsg$sock(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001280)="45de022b57df015d0158d07a39266b17b56d3976770e14fc438ccf6db36a510098d3e54f8e73f1866b55d912605c27411890ce00deb172650dc7374da961aa32c262fdeefefc1e3b5a38fe793195d572d707a17ed2c1a510c8d21aefd7cf6f2e23cbd742253c21f4cfac3e3fc3a9798fef899f51fcb1ad8e518ebcb1727facaa7ba58978c55d11621c654cb2aa33", 0x8e}], 0x1, &(0x7f0000001380)=[@timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xfe6}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x9c0}}], 0x60}, 0x4000000) (async) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r4, &(0x7f0000001440)={0x1f, @none, 0x80}, 0xa) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000014c0), r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000001600)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000015c0)={&(0x7f0000001500)={0x90, r5, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x71c}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff7fff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) (async) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001640)={0x0, r2}, 0x8) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000001680)={0xa9da, 0x8, 0x9, 0x0, 0x0, [{{r4}, 0x1}, {{r6}, 0x437}, {{}, 0x4}, {{r2}, 0x80000000}, {{r4}, 0x6}, {{r0}, 0xdb}, {{r7}, 0x3}, {{}, 0xfffffffffffffffc}, {{r0}, 0x1}]}) (async) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000017c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) (async) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001880)=@o_path={&(0x7f0000001840)='./file0\x00', 0x0, 0x4018, r6}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001900)={{r8, 0xffffffffffffffff}, &(0x7f0000001800), &(0x7f00000018c0)=r9}, 0x20) mmap(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x8, 0x810, r6, 0x821bf000) (async) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001d80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001d40)={&(0x7f0000001980)={0x3ac, r5, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x58}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd1}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xa5c}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}}}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5dd67f12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "f9c186cc8d5b8c6210166c3fef7035a2afc101fe792e71b0"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6e7c}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e5d51f1e5f40925c4631677ac0742be2359efb92"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe60a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2cb25560}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "ce218c4ced616f59db8e78e042a0eb79f1d645caa6a31a"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "14fca59cd901cc1dabe4162ed8e40bd62a1fe7206444b9f27841a2bf6ac1dba04d15"}}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd2a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x97f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000000000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8c}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x40080}, 0x20000004) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001e40)={r10, 0x58, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000001f00)={'ip6_vti0\x00', &(0x7f0000001e80)={'ip6_vti0\x00', r11, 0x29, 0x33, 0x2, 0x5, 0x50, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x1, 0x700, 0x4, 0xfffffffb}}) vmsplice(r8, &(0x7f0000002080)=[{&(0x7f0000001f40)="46c5a65193cb8f599433a7757f411cd50070d2e1213bbad97682b82e3444b17bb9e9c48965944e48a9cf97575bffe721c588051d0a5e66973322d114b0fc83548908e4764d88223f2bf1978966fc6db1dd9868179dc713cbb9ba60487ed3338c25f522fadfd6d4a72eaf484b485f7a3e7782e1b358b5f372619557e046b6e93a18b59f09ab3048f2c38ade427f22007e2ce7279e7567508b3a26c5811ab6671b65704ede05", 0xa5}, {&(0x7f0000002000)="dd6b738d0e64e489fb9307e5a44f36f889cecef3f5d8eceecdcc10c4b79267d3499cc24c719b63b1d18ae7514ebeb3392513809baf3965c42179dc4f363e11831398c0fea4e0d69afbf077d926ff9d780e1d5f4f7d", 0x55}], 0x2, 0xd) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x2c, r1, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x22}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) (async) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000021c0)) (async) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x1c, r1, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c045}, 0x20) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r13, &(0x7f0000002440)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x48, r14, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r12}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8d0) (async) bind$bt_sco(r8, &(0x7f0000002480)={0x1f, @none}, 0x8) 1.157057371s ago: executing program 6 (id=7614): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) unshare(0x20020600) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) getsockopt$inet6_tcp_buf(r5, 0x6, 0x21, 0x0, &(0x7f0000000000)) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r4, 0x10, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendto$inet6(r2, 0x0, 0x0, 0x8000, &(0x7f0000001140)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, 0x2}, 0x1c) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0xc, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'veth0\x00', &(0x7f0000000000)=@ethtool_test={0x1a, 0x1ff, 0x200}}) sendmmsg$inet6(r2, &(0x7f000000adc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000010) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf250100000008000100ffffffff34000480050003000100000005000300020000000500030018000000050003000500000005000300010000008a55049d4983a6200800020002"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.004064025s ago: executing program 0 (id=7615): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) socket(0x10, 0x80003, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000095080000000000002f7e71b5618f1ee16af22a7508b5d9eaa029e273bfc7f2b2bab0ad8f84c88946ee24c18a521dcf22eeed227f18732444499c827bb71f9a8029951edeb471e9008e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x0, 0x28, 0x0, 0x5, 0x8}, 0x28) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) unshare(0x2a020400) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340400000287d79b8a0d642f9fb2c5635f816cee7ae11ed8e701f7", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, &(0x7f0000000100)=0x10) socket(0x1d, 0x2, 0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000840)={r8, @in={{0x2, 0x4e22, @empty}}, 0x2, 0x2, 0x614, 0x1, 0x2d, 0x7, 0x4}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 1.003784648s ago: executing program 2 (id=7616): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xfecae6179ac1be9d, 0x1000}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$packet(0x11, 0xa, 0x300) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r4) sendmsg$NFC_CMD_LLC_SET_PARAMS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$ \x00\x00', @ANYRESOCT=0x0, @ANYRESHEX, @ANYRESOCT=r6, @ANYRESOCT=r1, @ANYRES64=0x0, @ANYRESDEC=r2], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8080) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, 0x0, 0x20000010) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540), 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0x80000000, 0x4) read(r8, &(0x7f0000001bc0)=""/55, 0x37) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd000411001400006000006eec00be00442f0100000000000000000000ffff7f00"], 0x7a) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r11, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)='[', 0x1}, {0x0}], 0x2}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x6, 0x7a6ca697541ff5c9}, {0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.001400245s ago: executing program 3 (id=7617): sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754", 0x20, 0x840, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x11, 0x5c, 0x65, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010100, {[@end, @rr={0x7, 0x3, 0xb9}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x9, 0x1, 0x28, 0x1, 0x1, 0x1, 0x0, 0xaa}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x0, {{0x1, 0x2, 0xfe, 0x3, 0x1}, 0x2, {0x2, 0xd04, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32, @ANYBLOB="400027000600"], 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x50) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000440)=[{0x2, 0x2, {0x0, 0xf0}, {0x2, 0xff, 0x1}, 0x2}, {0x1, 0x3, {0x2, 0xf0, 0x2}, {0x0, 0x1, 0x1}, 0x1, 0xfd}, {0x3, 0x2, {0x1, 0xff, 0x2}, {0x0, 0xf0}, 0x1, 0x2}, {0x2, 0x3, {0x0, 0x1, 0x1}, {0x1, 0x1, 0x1}, 0x1, 0xff}, {0x0, 0x2, {0x1, 0x1, 0x4}, {0x1, 0x1}, 0x2, 0x1}], 0xa0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg1\x00'}) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r2, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000013c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000300)="1205020029ff14000600002fb96dbcf706060000170008005f45", 0x1a}], 0x1}, 0x24000894) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14}}, 0x44}, 0x1, 0x0, 0x0, 0x2004d8d5}, 0x4000000) 997.091342ms ago: executing program 4 (id=7618): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 851.966424ms ago: executing program 4 (id=7619): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000006000008000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @private=0xa010101}}) (async) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c02", @ANYRES16, @ANYRES16=r3], 0x21c}}, 0x0) r5 = getpid() (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000000240)={0x7, 0x38, '\x00', 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891090000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x90) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async) write$cgroup_pid(r3, &(0x7f00000006c0)=r5, 0x12) (async) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x6, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x74}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 845.00695ms ago: executing program 6 (id=7620): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x200068c0}], 0x1, 0xc0001) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40840}, 0x40004) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x102, 0x0) 684.092837ms ago: executing program 6 (id=7621): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r1, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r0], 0x68}}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000008c0)=ANY=[], 0x8c0}, 0x1, 0x0, 0x0, 0x48810}, 0x4000) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000a80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x7, @remote, 0x4b}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000080)="21d9a4bc7efc5a6fcce60dcf4cec158aac448a8d794394b0c3fb21653df9579654ecaf5f44f9c18c967dbb0cca19c229c87724c8c55f469061065abee66329addea42dd31888eeee5c07497b2ac765662d408509cc5115f7ab76779176622bcaf3dbeeceeaf866423270d9e5c69cac5999e4e174841aadf7a16cbae1e06096561e72273ff191b2054069c850e255fb6c3664cd491890c62f0861da1ca866f18fe73b512fca45ff5108fe312c36adc05626cf6a00f63b1da05d32f0729e6ac6c68793f27680aa9368ebf6614c22044fadbb24a4ee2b7472391b1097a04734d849936b6bbc3f5a6c02ae850e91", 0xec}, {&(0x7f0000000180)="d65c0f9e9d89465b67dfacfacf953cae58f8c7521dd09161f99f78336a10dc776dc3b07954899e2ccaf03e9cf1fa40bc4bf17c0ab3611ad945508d78488902f37c850b0e5c68686acb5bcc61415c75fb67e95a38df47605ee9ff3632c469f0c415495fe2b267", 0x66}, {&(0x7f0000000200)="7669fd73cffc49d4b466c56c88728bcd3a8bb70e1834f57399906c6e6cf7f37eca69a3", 0x23}, {&(0x7f0000000240)="be72e49c80086b4154eae6e228cc6b8de9982550095315344bd3d4cda3dab3739223b5f39396418d318057a808cbeb4267a220d68ad1abf43e6dd58751b9885f33fa9db26ecc1c9e7c6fa419ece462e1387280ad2605e409b513ea56dfc21893e145892d3f022b909f8c13031c5da9f16649288e64465621dc59906a8d6e3b952b4d294f06cae7f0bec4a33dd2cd08a523c358ed7dbf40ba2a47bbd68c09fb79f81c03dc9394a7f6b427bb232e379f441846763d101c621fff04058a704bcf76b3c59bdd2b754ed3a9a53e92f78cbf85", 0xd0}], 0x4, &(0x7f0000000c00)=[@flowinfo={{0x14, 0x29, 0xb, 0x8}}, @flowinfo={{0x14, 0x29, 0xb, 0x10003}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x89, 0x3, '\x00', [@generic={0x2, 0xf, "4283692c4dbe15c66c879b06ded85c"}, @jumbo={0xc2, 0x4, 0x3b2}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0x68}}, {{&(0x7f0000000400)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fff}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000000440)="14e30a5d", 0x4}, {&(0x7f0000000480)="946c1e4a2e835bf4", 0x8}, {&(0x7f00000004c0)="c93943a1953f5c99e79e7b4e8b1df31d959537ff7ded81caabc663c4b14d7ea46f4daa7bcb4282486454841530c6b65eb9ed16a81e3327c2492c19e0", 0x3c}, {&(0x7f0000001f80)="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", 0x1000}, {&(0x7f0000000500)="f6e7a309e77cc58028fdfb400e0f37c31faf88daba4ea7", 0x17}], 0x6, &(0x7f00000005c0)=[@rthdr_2292={{0xa8, 0x29, 0x39, {0x0, 0x12, 0x2, 0xff, 0x0, [@remote, @mcast1, @empty, @local, @mcast2, @dev={0xfe, 0x80, '\x00', 0x38}, @remote, @dev={0xfe, 0x80, '\x00', 0x15}, @remote]}}}, @dstopts_2292={{0x140, 0x29, 0x4, {0x62, 0x24, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0xfffffffd}, @generic={0x4, 0xad, "3db9ce9a4e1106d978544e44b397c5e0733b757d7b7638437307ae076ecd915bdcf86aadc2bfdd44509d5f392dccd6bf6df017c2d927060b14f8b188da762f3eeec5239d73a0aa5554791fe8a954d3177adb4d83e084a5fe2ddb0cb2ceeada94369f666a2a77fa0c076955a327abd835e1be3a2191d53a6a6401092f0322966fd826b8641c1bf7e74f8d8402b006701301e4ee4d0242118ae8b223df8683439b264fc28ecdae59540f14b7936e"}, @generic={0xb, 0x36, "0b08e6aa05521f81f2cdeda7b43669ab10a2777f3491d008c1a8edd5fec2452f8f8e29fac7d9a252d1032e19e2fe51fd437a41b02e78"}, @calipso={0x7, 0x30, {0x2, 0xa, 0x8, 0x9, [0xfffffffffffff542, 0x0, 0x1, 0x4, 0xd8]}}]}}}, @rthdr={{0x78, 0x29, 0x39, {0x0, 0xc, 0x0, 0xa, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x14}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @local]}}}], 0x260}}, {{&(0x7f0000000840)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x42}, 0x7fffffff}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000880)="fea8d655c5c2dfd7cd48a3be35bc5567047c5cc093c72a8fc42ac3c0e29ded5a17249f969808f81201c22112b7b4ee1e17778666a570e27eb4384dba54ad5b23aaebb244118cb18e260ce97fd943001a2dba79ed7463ea68dcdafc669b37d46c61ccf9c3f32c60fd5527bdfbf76170bf24dcc5ed04f5a2", 0x77}], 0x1, &(0x7f0000000940)=[@rthdr_2292={{0xb8, 0x29, 0x39, {0x3c, 0x14, 0x2, 0x1e, 0x0, [@remote, @dev={0xfe, 0x80, '\x00', 0x3e}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @empty, @private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0]}}}, @dstopts={{0x38, 0x29, 0x37, {0x6, 0x3, '\x00', [@ra={0x5, 0x2, 0x81}, @jumbo={0xc2, 0x4, 0x80000000}, @hao={0xc9, 0x10, @mcast2}]}}}, @tclass={{0x14, 0x29, 0x43, 0x5}}], 0x108}}], 0x3, 0x2400ff94) 683.329574ms ago: executing program 4 (id=7622): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r6 = socket(0x22, 0x2, 0x3) getsockname$packet(r6, 0x0, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000526d542b9bb4682186204296c16a18339de690e660778d555b3a3ed8c805b1b0718b7f0107e11ae6ade65ffbbfa855b39e763a34edf703a0321673cf4c4db593c61e5d81fab2da73dcc23e783896b0092b8d300934bcd5171664d1255603e22438497b03000000000000006160fd812aecfbf7aadcd942fe355194fe4eec"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff843e}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000010000004000000020"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x1003, r10}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x6, r10}, 0x38) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x28, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x7]}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r11, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x4a1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x4811) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r12, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000240)="060043076003008cb89e08f086ddd3e16754b216456c7ccdd96f9a63b8712fe6b8f7d815b9e05be1fb5fe99417e86688288f48081d2f", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) r13 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r13) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) 631.26463ms ago: executing program 3 (id=7623): syz_emit_ethernet(0x3e, &(0x7f0000000440)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "104000", 0x8, 0x0, 0x0, @ipv4, @local, {[], "1ce302d74f6ae54b"}}}}}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @loopback}, {0x0, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @broadcast}, {0x0, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x78, r2, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdc01, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x5c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "dfeedc2634e7d49420f73e16e79faba0"}, @NL802154_KEY_ATTR_ID={0x3c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x48804) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) mmap(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x2000000, 0x12, r7, 0xe7ef6000) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000380)={0xa, 0x4e20, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000002000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r12) (async) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r12, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002dbd7000fcdbdf251800000008000300", @ANYRES32=r14, @ANYBLOB="400030803c000180080001000000000030"], 0x5c}}, 0x20000000) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x64, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x180) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r17], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x4884) 545.181866ms ago: executing program 2 (id=7624): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x40000000}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0xe0a2ff6baa7cc2d2}, {0xde, 0x0, 0x0, 0x0, 0x0, 0x100}, 0xffffffff}}]}}]}, 0x60}}, 0x4800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0xd}, 0x94) 392.212358ms ago: executing program 3 (id=7625): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000007b030000000000008500000083000000790900000000000055090100000000009500000000000000bf91000000000000b70200000200000b8500000069000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 366.646188ms ago: executing program 2 (id=7626): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="a00000001a00010000000000000000001c140000000079"], 0xa0}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x4}, {}, {}, {}]}, @fwd, @volatile, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000700)={0xcc, 0x2, 0x9, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x13}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20040014}, 0x20008000) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r2}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1}, &(0x7f0000000240), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0xf, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) 360.955378ms ago: executing program 4 (id=7627): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf) epoll_create1(0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="1409000000000000005a80648c2594f933a3c92b", 0x14}, {&(0x7f0000000300)="89e174d488e10a656206ec1cbfd7d015e23b2e2701304e56f19c6d9f931a4a253b3f62aa3c3e0a2ad0a62761950a8bc7cc7d2ab6264fdd276c896e6aebc304b0cbc22384d5dfa66c396ddf0d18a2167aa357fb3152ca35ae102cb9acdd1243a7789886a5037ecdf9ba", 0x69}], 0x2}, 0x0) socket$unix(0x1, 0x2, 0x0) pipe(&(0x7f00000000c0)) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, 0x0, 0x0) (async) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x32f1, 'syz1\x00', @default, 0xb, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x89f9, &(0x7f00000001c0)="61455c2a18b0d4a9023ff538b9e16a47c6e535d031d76b1f3bff44c3cbbe78ff10fa77fbf8e97043577853bc56ccba507588f9dc691566240a56863761a1a1b7c9c58951cc1f161f23bdc48cd0ba1431ef492b59ad8d49723d81a8add2ab98debffe8ae45eccde85765985f33c72e68a1cf73962254a94f632f8f0bdff8739158b86460e5009c30cfb769be8f01facebbf236a69c6e3afc2bc6c8ae2bb448fff5a1f20befd6a32bbc82608e28fab22252757e7279fb9f1578ff3b5000000000000") setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f00000002c0)=@bpq0, 0x10) vmsplice(r3, &(0x7f0000000580)=[{&(0x7f00000005c0)="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", 0x11c}, {&(0x7f0000000480)="2873d9e7f7c0d3d0ca63969831ff86588d21176acb76259cc8bb2460900874dcb8c54386b4317226db1673128b46367020c35770a373c0b6fd0868f33f53eaf03aff40c0a36c4497257324c805d60f1b84671e14b053a03436016f692cbcd9f82ed5373f49f1b04d7ee3449e4a9c44a99adc6a030f8cbaee13bb78c928a5d5f05385711f2016396252669d6c668372de557aa7a52cc060518bfbe927f24ec06b9fedd632df1db7e803d2407431c7b3e8da31a78b3f4bf86b0f7cab65105091de16a8709c855b8a1bc8f852638add9767dbc798dfb969bd", 0xd7}], 0x2, 0x2) r7 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) (async) bind$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) connect$inet(r7, &(0x7f00000003c0)={0x2, 0x3, @multicast1}, 0x10) splice(r2, 0x0, r7, 0x0, 0x7fffffffffffffff, 0x0) socket(0x10, 0x2, 0x0) 292.037963ms ago: executing program 6 (id=7628): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)="fbe65dc390da7ee179", 0x9}, {&(0x7f0000000700)="fdc913c5fb15c710950f8e561c846edc4223d841cad2a2154e3bad5fc74c8e5172171929da09a2e314c77de173e154838fc39c1684ea331216706f4d645dc0aea3d0e06b72545914394805a2513f1cc11bea6266382e51a10d7021329f79eb6067dfb71729c45f1c6833a0c39fab03fe8b0287fb43941b18", 0x78}], 0x2}, 0x40080) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="80420000000000001400030076657468305f746f5f626f6e6400000008003a"], 0x44}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) (async) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x1, 0x4) (async) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) (async) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)="fbe65dc390da7ee179", 0x9}, {&(0x7f0000000700)="fdc913c5fb15c710950f8e561c846edc4223d841cad2a2154e3bad5fc74c8e5172171929da09a2e314c77de173e154838fc39c1684ea331216706f4d645dc0aea3d0e06b72545914394805a2513f1cc11bea6266382e51a10d7021329f79eb6067dfb71729c45f1c6833a0c39fab03fe8b0287fb43941b18", 0x78}], 0x2}, 0x40080) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="80420000000000001400030076657468305f746f5f626f6e6400000008003a"], 0x44}}, 0x0) (async) 291.499269ms ago: executing program 3 (id=7629): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x20000050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNGETVNETLE(r1, 0x400454de, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x20004049}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r4) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf2507000000140001800800fd007f0000010600010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x441c0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000080000060002000000000014001f0000000000000000000000000000000000140020"], 0x6c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r9, 0x20, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r6, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d5661f6865e030487"}}, 0xfce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000dc0)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x0, 0x0, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@broadcast, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x15}, 0xf, 0x1ffffffff}}}, {{@arp={@private=0xa010101, @remote, 0xff, 0xff000000, 0xf, 0xf, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x9, 0x8, 0x4, 0x5, 0x7f, 0xfffe, 'bond_slave_0\x00', 'rose0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @mac, @local, @empty, 0x8}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) 141.084288ms ago: executing program 6 (id=7630): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000070000000000009200000085000000110000009d00000000000000"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$ax25(0x3, 0x2, 0x7) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0xf6, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r0}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x6, [@datasec={0x2, 0x2, 0x0, 0xf, 0x3, [{0x2, 0x1, 0x7}, {}, {0x1, 0x7, 0x80}], "44942d"}, @ptr, @datasec={0x0, 0x1555555555555437, 0x0, 0xf, 0x1, [], "84"}]}, {0x0, [0x0, 0x2e, 0x5f, 0x2e]}}, &(0x7f00000014c0)=""/2, 0x6a, 0x2, 0x1}, 0x28) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000000000001400000005000c000027fa1700000018000180140002006e657464657673696d300000000000000500180000000000080011000700000005000c0001"], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) ioctl$SIOCAX25GETINFOOLD(r7, 0x89e9, &(0x7f0000000100)) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300ffe5000d0000000000b702000000000000739af0ff00000000c509000000010000c3aaf0fff1000000bf8720000000000037080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r8, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111a90000000000851000000000000000009500a50500"/48], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r10}, 0x94) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d004100100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xc, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x11}}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) 86.434951ms ago: executing program 2 (id=7631): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0}, 0x90) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket(0x29, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4844}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140), 0x4) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0xffff, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000030000000900010073797a310000000014000000020a010400000000000000080000000034000000140a03000000000000000000030000000800e19b2ef000090000000000000031000000000900020073797a3000000000140000001100010000000000000000000000000a338c03f24f0f9cff363289f93c8eb93ab6170ca8f621224e96b662da9f8a9fe4629d7357009fa4a8c91ba61a53d5e834c448931d18ff3d5ddf207f47e91be8deaada6aa92f36a2b18ea4056453580fdb6f253d69deaa7ae7358e9d3af444"], 0x90}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e006f9721acbd0848ab8b27000000f32700000505f600040b00000020400000ceb51321b283eceded2694787ce15243e5210056ca4454e727ca8c2da9e6a773902036442e85dc21b1793d3ad5f11de42e1cd3e6a2603a06ebf1b0255bf9d2469adf", @ANYRES32=r3, @ANYBLOB="1000"/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0100000000000000020000000300"/28], 0x50) setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000005c0)=0x3, 0x4) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001a0069ae26bd700007000400000000"], 0x1c}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000dc0)=@RTM_NEWNSID={0x54, 0x58, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NETNSA_FD={0x8, 0x3, r5}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8, 0x2, r7}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8}, @NETNSA_PID={0x8, 0x2, r8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010005fba00000000000000000000000060dd0be55059f5b5963fca1466bd712c84b3"], 0x20}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100280000000000000002000000200001800d000100"], 0x34}}, 0x0) 0s ago: executing program 0 (id=7632): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000400000000000b703000000000000850000000c000000b7070000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000e500493df63586d43f0871e2b1d767d715e660c1b331bfbb0c277816256961520c83054418ac2e104e931bdc41b5d33067d2ece14f122d94970d3e1559cd6e66369179a7351940d8"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) close(r0) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000002a00)=[{&(0x7f0000000100)=@in={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000140)="dc", 0x1}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="30000000000000008400000001000000000000af7a00020000000000000000000400"/44, @ANYRES32=0x0, @ANYBLOB="1800000000000000840000000500"], 0x48}], 0x1, 0x40) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x28, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x8, 0x20, 0x0, 0x0, @u32=0x3}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1f}]}, @nested={0x4, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000018500000087000000850000000700000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) r5 = accept4(r2, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), r5) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="f600"], 0x14}, 0x1, 0x0, 0x0, 0x2081}, 0x20004080) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) (rerun: 64) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r8, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r6, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x24040004) kernel console output (not intermixed with test programs): netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 826.433266][T30300] lo speed is unknown, defaulting to 1000 [ 826.723090][T30300] lo speed is unknown, defaulting to 1000 [ 826.802245][T30321] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6295'. [ 826.856209][T30323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6295'. [ 827.420523][ T6003] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 827.442687][T30352] netlink: 'syz.4.6304': attribute type 5 has an invalid length. [ 828.094699][T18350] team0: Port device macvlan2 removed [ 828.269602][T30369] lo speed is unknown, defaulting to 1000 [ 828.289715][T20529] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 828.317837][T20529] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 828.340826][T20529] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 828.416014][T20529] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 828.447858][T20529] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 828.654725][T30369] lo speed is unknown, defaulting to 1000 [ 828.655020][T30377] lo speed is unknown, defaulting to 1000 [ 828.814266][ T6064] nci: nci_ntf_packet: unknown ntf opcode 0x127 [ 828.833173][T19289] IPVS: starting estimator thread 0... [ 828.839123][T30394] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 828.931424][T30398] IPVS: using max 36 ests per chain, 86400 per kthread [ 829.192711][T30377] lo speed is unknown, defaulting to 1000 [ 829.324123][T30418] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.6316'. [ 829.529234][T30426] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6317'. [ 829.597750][T30426] geneve2: entered promiscuous mode [ 829.603358][T30426] geneve2: entered allmulticast mode [ 829.610508][ T6072] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.629306][ T6072] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.680799][ T6072] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.690967][ T6072] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.799317][T30377] chnl_net:caif_netlink_parms(): no params data found [ 829.997421][T30377] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.005821][T30377] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.016716][T30377] bridge_slave_0: entered allmulticast mode [ 830.025457][T30377] bridge_slave_0: entered promiscuous mode [ 830.035994][T30377] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.043361][T30377] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.050666][T30377] bridge_slave_1: entered allmulticast mode [ 830.059464][T30377] bridge_slave_1: entered promiscuous mode [ 830.140399][T30377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 830.164999][T30377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 830.219063][T30377] team0: Port device team_slave_0 added [ 830.232210][T30377] team0: Port device team_slave_1 added [ 830.326819][T30377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 830.348048][T30377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 830.382940][T30377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 830.397374][T30377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 830.405904][T30377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 830.439336][T30377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 830.492913][T30439] Bluetooth: hci2: command tx timeout [ 830.545707][T30460] netlink: 248 bytes leftover after parsing attributes in process `syz.4.6324'. [ 830.552640][T30377] hsr_slave_0: entered promiscuous mode [ 830.565946][T30377] hsr_slave_1: entered promiscuous mode [ 830.575361][T30377] debugfs: 'hsr0' already exists in 'hsr' [ 830.581249][T30377] Cannot create hsr debugfs directory [ 831.066537][T30475] macsec1: entered promiscuous mode [ 831.098184][T30475] mac80211_hwsim hwsim89 wlan1: entered promiscuous mode [ 831.113752][T30482] netlink: 'syz.2.6331': attribute type 1 has an invalid length. [ 831.122795][T30475] mac80211_hwsim hwsim89 wlan1: left promiscuous mode [ 831.126326][T30479] can: request_module (can-proto-3) failed. [ 831.143402][T30482] netlink: 'syz.2.6331': attribute type 1 has an invalid length. [ 831.222474][T30488] sctp: [Deprecated]: syz.4.6332 (pid 30488) Use of int in maxseg socket option. [ 831.222474][T30488] Use struct sctp_assoc_value instead [ 831.243684][T30491] __nla_validate_parse: 2 callbacks suppressed [ 831.243702][T30491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6332'. [ 831.377233][T30498] netlink: 'syz.2.6331': attribute type 1 has an invalid length. [ 831.586292][T30506] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 831.647179][T30482] vlan3: entered allmulticast mode [ 831.658613][T30482] veth1: entered allmulticast mode [ 831.686136][T30508] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 831.705761][T30508] CPU: 0 UID: 0 PID: 30508 Comm: syz.5.6336 Not tainted syzkaller #0 PREEMPT(full) [ 831.705787][T30508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 831.705799][T30508] Call Trace: [ 831.705807][T30508] [ 831.705815][T30508] dump_stack_lvl+0x189/0x250 [ 831.705844][T30508] ? __pfx_dump_stack_lvl+0x10/0x10 [ 831.705862][T30508] ? __pfx__printk+0x10/0x10 [ 831.705891][T30508] ? kernfs_path_from_node+0x2f/0x290 [ 831.705907][T30508] ? kernfs_path_from_node+0x250/0x290 [ 831.705921][T30508] ? kernfs_path_from_node+0x2f/0x290 [ 831.705941][T30508] sysfs_warn_dup+0x8e/0xa0 [ 831.705959][T30508] sysfs_do_create_link_sd+0xc0/0x110 [ 831.705980][T30508] device_add_class_symlinks+0x1cf/0x240 [ 831.706003][T30508] device_add+0x475/0xb50 [ 831.706033][T30508] wiphy_register+0x1ba6/0x28d0 [ 831.706068][T30508] ? __pfx_wiphy_register+0x10/0x10 [ 831.706084][T30508] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 831.706112][T30508] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 831.706137][T30508] ieee80211_register_hw+0x3425/0x4080 [ 831.706177][T30508] ? ieee80211_register_hw+0x1461/0x4080 [ 831.706207][T30508] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 831.706233][T30508] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 831.706276][T30508] ? __hrtimer_setup+0x187/0x210 [ 831.706293][T30508] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 831.706325][T30508] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 831.706380][T30508] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 831.706400][T30508] ? trace_kmalloc+0x1f/0xd0 [ 831.706419][T30508] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 831.706441][T30508] ? kstrndup+0xbf/0x160 [ 831.706470][T30508] hwsim_new_radio_nl+0xea4/0x1b10 [ 831.706496][T30508] ? __pfx___nla_validate_parse+0x10/0x10 [ 831.706536][T30508] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 831.706573][T30508] ? __nla_parse+0x40/0x60 [ 831.706600][T30508] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 831.706632][T30508] genl_family_rcv_msg_doit+0x215/0x300 [ 831.706661][T30508] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 831.706697][T30508] ? bpf_lsm_capable+0x9/0x20 [ 831.706714][T30508] ? security_capable+0x7e/0x2e0 [ 831.706745][T30508] genl_rcv_msg+0x60e/0x790 [ 831.706773][T30508] ? __pfx_genl_rcv_msg+0x10/0x10 [ 831.706797][T30508] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 831.706836][T30508] netlink_rcv_skb+0x208/0x470 [ 831.706857][T30508] ? __lock_acquire+0xab9/0xd20 [ 831.706881][T30508] ? __pfx_genl_rcv_msg+0x10/0x10 [ 831.706904][T30508] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 831.706945][T30508] ? down_read+0x1ad/0x2e0 [ 831.706967][T30508] genl_rcv+0x28/0x40 [ 831.706986][T30508] netlink_unicast+0x82c/0x9e0 [ 831.707029][T30508] ? __pfx_netlink_unicast+0x10/0x10 [ 831.707054][T30508] ? netlink_sendmsg+0x642/0xb30 [ 831.707069][T30508] ? skb_put+0x11b/0x210 [ 831.707093][T30508] netlink_sendmsg+0x805/0xb30 [ 831.707122][T30508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 831.707144][T30508] ? aa_sock_msg_perm+0xf1/0x1d0 [ 831.707164][T30508] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 831.707183][T30508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 831.707202][T30508] __sock_sendmsg+0x21c/0x270 [ 831.707229][T30508] ____sys_sendmsg+0x505/0x830 [ 831.707256][T30508] ? __pfx_____sys_sendmsg+0x10/0x10 [ 831.707287][T30508] ? import_iovec+0x74/0xa0 [ 831.707312][T30508] ___sys_sendmsg+0x21f/0x2a0 [ 831.707334][T30508] ? __pfx____sys_sendmsg+0x10/0x10 [ 831.707399][T30508] ? __fget_files+0x2a/0x420 [ 831.707415][T30508] ? __fget_files+0x3a0/0x420 [ 831.707444][T30508] __x64_sys_sendmsg+0x19b/0x260 [ 831.707467][T30508] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 831.707500][T30508] ? rcu_is_watching+0x15/0xb0 [ 831.707525][T30508] ? do_syscall_64+0xbe/0x3b0 [ 831.707549][T30508] do_syscall_64+0xfa/0x3b0 [ 831.707565][T30508] ? lockdep_hardirqs_on+0x9c/0x150 [ 831.707583][T30508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.707600][T30508] ? clear_bhb_loop+0x60/0xb0 [ 831.707623][T30508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.707640][T30508] RIP: 0033:0x7f7ac818ebe9 [ 831.707657][T30508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 831.707672][T30508] RSP: 002b:00007f7ac9099038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 831.707691][T30508] RAX: ffffffffffffffda RBX: 00007f7ac83c5fa0 RCX: 00007f7ac818ebe9 [ 831.707704][T30508] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 831.707716][T30508] RBP: 00007f7ac8211e19 R08: 0000000000000000 R09: 0000000000000000 [ 831.707728][T30508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 831.707739][T30508] R13: 00007f7ac83c6038 R14: 00007f7ac83c5fa0 R15: 00007ffcc5fdc0c8 [ 831.707771][T30508] [ 832.289661][T30514] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6337'. [ 832.417996][T30520] netlink: 440 bytes leftover after parsing attributes in process `syz.5.6340'. [ 832.447379][T30513] lo speed is unknown, defaulting to 1000 [ 832.463540][T30377] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 832.526264][T30377] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 832.539840][T30525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6341'. [ 832.572403][T30439] Bluetooth: hci2: command 0x041b tx timeout [ 832.587924][T30377] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 832.627283][T30523] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 832.798144][T30377] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 832.931791][T30513] lo speed is unknown, defaulting to 1000 [ 832.968552][T30547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6345'. [ 833.087623][T30550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6345'. [ 833.360575][T30377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.558818][T30377] 8021q: adding VLAN 0 to HW filter on device team0 [ 833.559195][T30562] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6348'. [ 833.599548][ T6003] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.606764][ T6003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.678815][ T6003] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.686032][ T6003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.875183][T30568] tipc: Enabled bearer , priority 0 [ 834.010220][T30568] tipc: Disabling bearer [ 834.080645][T30377] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 834.110435][T30377] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 834.155891][T30584] netlink: 88 bytes leftover after parsing attributes in process `syz.5.6354'. [ 834.248112][T30587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6356'. [ 834.420251][T30597] syzkaller0: create flow: hash 1381666473 index 1 [ 834.503701][T30597] netlink: 'syz.3.6357': attribute type 21 has an invalid length. [ 834.574132][T30599] tipc: Enabled bearer , priority 0 [ 834.590655][T30597] syzkaller0: delete flow: hash 1381666473 index 1 [ 834.590853][T30605] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6360'. [ 834.651812][ T5871] Bluetooth: hci2: command 0x041b tx timeout [ 835.693649][T23865] tipc: Node number set to 3661293300 [ 836.400679][T30592] syzkaller0: entered promiscuous mode [ 836.407225][T30592] syzkaller0: entered allmulticast mode [ 836.426894][T30591] tipc: Resetting bearer [ 836.490971][T30591] tipc: Disabling bearer [ 836.580195][T30618] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 836.663557][T30614] netlink: 'syz.3.6364': attribute type 7 has an invalid length. [ 836.673071][T30614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6364'. [ 836.712348][T30622] syz_tun: entered allmulticast mode [ 836.734869][ T5871] Bluetooth: hci2: command 0x041b tx timeout [ 836.777555][T30377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 836.841643][T30627] netlink: 'syz.5.6366': attribute type 23 has an invalid length. [ 836.905202][T30622] lo speed is unknown, defaulting to 1000 [ 836.975357][ T6062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.991700][ T6062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.185215][T30641] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6370'. [ 837.268465][T30629] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 837.270047][T30644] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6370'. [ 837.289206][T30629] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.323193][T30646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6370'. [ 837.336907][T30622] lo speed is unknown, defaulting to 1000 [ 837.492644][T30629] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 837.508845][T30629] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.558797][T30648] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.6373'. [ 837.582118][T30621] syz_tun: left allmulticast mode [ 837.619170][T30629] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 837.632432][T30629] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.680872][T30377] veth0_vlan: entered promiscuous mode [ 837.747986][T30629] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 837.760069][T30629] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.780875][T30377] veth1_vlan: entered promiscuous mode [ 837.846386][T30377] veth0_macvtap: entered promiscuous mode [ 837.850384][T30652] netlink: 'syz.4.6374': attribute type 1 has an invalid length. [ 837.862060][T30652] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6374'. [ 837.897533][T30377] veth1_macvtap: entered promiscuous mode [ 838.006367][T30377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 838.017240][ T6062] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 838.032271][ T6062] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.057003][T30377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 838.099148][ T6064] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 838.117979][ T6064] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.157180][ T6072] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 838.176484][ T6072] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.244714][ T6072] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.301039][T30658] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.6375'. [ 838.374613][ T6068] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.411351][ T6068] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.449152][ T6068] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.484638][ T6068] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 838.521457][ T6068] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.803436][ T6070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.816329][ T5871] Bluetooth: hci2: command 0x041b tx timeout [ 838.861322][ T6070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.035198][ T6070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.058818][ T6070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.159040][T30675] lo speed is unknown, defaulting to 1000 [ 839.300865][T30687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6301'. [ 839.343570][T30687] nbd: couldn't find a device at index 65546 [ 839.629343][T30701] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6387'. [ 839.680950][T30701] netlink: 'syz.0.6387': attribute type 21 has an invalid length. [ 839.699916][T30701] netlink: 'syz.0.6387': attribute type 22 has an invalid length. [ 839.718541][T30701] netlink: 'syz.0.6387': attribute type 23 has an invalid length. [ 839.743778][T30701] netlink: 'syz.0.6387': attribute type 25 has an invalid length. [ 839.768542][T30701] netlink: 'syz.0.6387': attribute type 26 has an invalid length. [ 839.799629][T30701] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6387'. [ 840.092060][T30718] netlink: 'syz.0.6393': attribute type 6 has an invalid length. [ 840.347430][T30678] netlink: 'syz.2.6381': attribute type 16 has an invalid length. [ 840.485384][T30736] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 840.552532][ C0] vcan0: j1939_session_tx_dat: 0xffff888082ec7c00: queue data error: -100 [ 840.562052][ C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 840.569706][ C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 840.577399][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 840.585252][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 840.593191][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 840.601039][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 840.608996][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 840.616846][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 840.624800][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 840.632644][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 840.640556][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 840.648411][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 840.656373][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 840.664224][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 840.672198][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 840.680029][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 840.687971][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 840.695828][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 840.703764][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 840.711616][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 840.719536][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 840.727396][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 840.735367][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 840.743220][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 840.751142][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 840.759009][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 840.766965][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 840.774812][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 840.782750][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 840.790573][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 840.798535][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 840.806394][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 840.814368][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 840.822219][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 840.830123][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 840.837989][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 840.845941][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 840.853781][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 840.861726][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 840.869540][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 840.877492][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 840.885361][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 840.893344][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 840.901158][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 840.909107][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 840.916960][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 840.924926][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 840.932767][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 840.940671][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 840.948520][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 840.956489][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 840.964328][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 840.972274][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 840.980092][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 840.988025][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 840.995880][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.003818][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.011664][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.019572][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.027415][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.035350][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.043385][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.051367][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.059192][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.067153][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.075013][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.082969][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.090782][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.098724][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.106573][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.114510][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.122363][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.130275][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.138122][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.146077][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.153916][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.161874][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.169690][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.177578][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.185405][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.193323][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.201130][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.209006][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.216819][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.224737][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.232574][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.240431][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.248256][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.256185][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.264011][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.271926][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.279746][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.287679][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.295518][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.303433][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.311268][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.319175][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.327043][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.334977][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.342826][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.350709][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.358518][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.366386][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.374190][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.382118][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.389922][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.397806][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.405622][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.413532][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.421370][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.429229][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.437040][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.444974][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.452805][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.460656][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.468489][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.476447][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.484274][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.492190][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.499988][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.507873][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.515686][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.523606][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.531428][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.539366][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.547192][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.555128][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 841.562958][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 841.665572][T30675] lo speed is unknown, defaulting to 1000 [ 841.665647][T30703] lo speed is unknown, defaulting to 1000 [ 841.939732][ T6003] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 841.975902][ T6003] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.071719][T30703] lo speed is unknown, defaulting to 1000 [ 842.148742][T30758] netlink: 'syz.3.6403': attribute type 4 has an invalid length. [ 842.312281][ T6003] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 842.336587][ T6003] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.415184][T19289] lo speed is unknown, defaulting to 1000 [ 842.590633][ T6003] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 842.611900][ T6003] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.777570][ T6003] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 842.801503][ T6003] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.952169][T20529] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 842.963403][T20529] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 842.967942][T30768] netlink: 'syz.3.6407': attribute type 2 has an invalid length. [ 842.979930][T30768] __nla_validate_parse: 4 callbacks suppressed [ 842.979946][T30768] netlink: 4856 bytes leftover after parsing attributes in process `syz.3.6407'. [ 842.983004][T20529] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 843.025360][T20529] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 843.026325][T30771] veth0_to_bridge: entered allmulticast mode [ 843.039526][T20529] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 843.058516][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.150967][T30774] netlink: 'syz.0.6408': attribute type 5 has an invalid length. [ 843.190006][T30765] lo speed is unknown, defaulting to 1000 [ 843.305694][T30776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6409'. [ 843.329985][T30776] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6409'. [ 843.364220][T30776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6409'. [ 843.382192][T30776] netlink: 'syz.0.6409': attribute type 20 has an invalid length. [ 843.405858][T30776] netlink: 'syz.0.6409': attribute type 21 has an invalid length. [ 843.472705][T30780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6410'. [ 843.545631][T30778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6410'. [ 843.555186][T30780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6410'. [ 843.673694][T30765] lo speed is unknown, defaulting to 1000 [ 843.737371][T30788] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6413'. [ 844.155250][T30806] netlink: 'syz.3.6419': attribute type 1 has an invalid length. [ 844.164402][T30811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6420'. [ 844.174329][T30806] netlink: 'syz.3.6419': attribute type 1 has an invalid length. [ 844.198250][T30811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6420'. [ 844.203861][T30806] block nbd3: shutting down sockets [ 844.736526][ T6003] bond3 (unregistering): (slave erspan0): Releasing active interface [ 844.833297][ T6003] dvmrp8 (unregistering): left allmulticast mode [ 845.121177][ T6003] bond0 (unregistering): left promiscuous mode [ 845.129199][ T6003] bond0 (unregistering): Released all slaves [ 845.141729][ T5871] Bluetooth: hci3: command tx timeout [ 845.260390][ T6003] bond1 (unregistering): (slave wlan0): Releasing active interface [ 845.269265][ T6003] bond1 (unregistering): Released all slaves [ 845.405033][ T6003] bond2 (unregistering): (slave batadv1): Releasing active interface [ 845.416322][ T6003] bond2 (unregistering): Released all slaves [ 845.544923][ T6003] bond3 (unregistering): (slave veth3): Releasing active interface [ 845.557061][ T6003] bond3 (unregistering): Released all slaves [ 845.677990][ T6003] bond4 (unregistering): Released all slaves [ 845.694776][ T6003] bond5 (unregistering): Released all slaves [ 845.708011][ T6003] bond6 (unregistering): Released all slaves [ 845.748406][T30811] ip6tnl1: entered promiscuous mode [ 845.757205][T30811] ip6tnl1: entered allmulticast mode [ 845.783567][T30831] netdevsim netdevsim3: Direct firmware load for /. failed with error -2 [ 845.817534][T30831] netdevsim netdevsim3: Falling back to sysfs fallback for: /. [ 845.835095][T30765] chnl_net:caif_netlink_parms(): no params data found [ 845.909127][ T6003] _ÐZ`Ô€@S!: left promiscuous mode [ 846.133349][ T6003] k›*·]‘: left promiscuous mode [ 846.287199][T30862] netlink: 'syz.2.6430': attribute type 1 has an invalid length. [ 846.307198][ T6003] tipc: Left network mode [ 846.426222][T30862] bond2: entered promiscuous mode [ 846.433993][T30862] 8021q: adding VLAN 0 to HW filter on device bond2 [ 846.569558][T30765] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.587401][T30765] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.604778][T30765] bridge_slave_0: entered allmulticast mode [ 846.630891][T30765] bridge_slave_0: entered promiscuous mode [ 846.691170][T30765] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.698882][T30765] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.708047][T30765] bridge_slave_1: entered allmulticast mode [ 846.717589][T30765] bridge_slave_1: entered promiscuous mode [ 847.174787][T30765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.221819][ T5871] Bluetooth: hci3: command tx timeout [ 847.257726][T30765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.276399][T30885] lo speed is unknown, defaulting to 1000 [ 847.434430][T30899] netlink: 'syz.3.6437': attribute type 5 has an invalid length. [ 847.447201][T30765] team0: Port device team_slave_0 added [ 847.472935][T30765] team0: Port device team_slave_1 added [ 847.638585][T30765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 847.655039][T30765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 847.696645][T30765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 847.709861][T30910] netlink: 'syz.4.6440': attribute type 3 has an invalid length. [ 847.790402][T30907] veth0: entered allmulticast mode [ 847.838561][T30885] lo speed is unknown, defaulting to 1000 [ 847.839958][T30765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 847.875017][T30765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 847.907137][T30765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 847.919481][T30911] lo speed is unknown, defaulting to 1000 [ 848.016137][ T6003] !: left promiscuous mode [ 848.028850][ T6003] hsr_slave_0: left promiscuous mode [ 848.039648][ T6003] hsr_slave_1: left promiscuous mode [ 849.308298][ T5871] Bluetooth: hci3: command tx timeout [ 849.370214][T30911] lo speed is unknown, defaulting to 1000 [ 849.594161][T30765] hsr_slave_0: entered promiscuous mode [ 849.613690][T30765] hsr_slave_1: entered promiscuous mode [ 849.652239][T30765] debugfs: 'hsr0' already exists in 'hsr' [ 849.658029][T30765] Cannot create hsr debugfs directory [ 849.899830][T30942] netlink: 'syz.3.6446': attribute type 4 has an invalid length. [ 850.158886][T30955] __nla_validate_parse: 8 callbacks suppressed [ 850.158905][T30955] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6450'. [ 850.309323][ T6003] IPVS: stop unused estimator thread 0... [ 850.757774][T30765] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 850.798907][T30765] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 850.827828][T30765] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 850.855557][T30984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6459'. [ 850.857672][T30765] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 851.064322][T30765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 851.111416][T30765] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.139696][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.146917][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.181182][T31003] smc: net device bond0 applied user defined pnetid SYZ2 [ 851.215749][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.222962][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.482049][T31015] netlink: 700 bytes leftover after parsing attributes in process `syz.0.6465'. [ 851.521765][ T5871] Bluetooth: hci3: command tx timeout [ 851.540426][T31018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6467'. [ 851.648455][T31027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6471'. [ 851.960933][T30765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.192801][T31053] netlink: 'syz.2.6474': attribute type 1 has an invalid length. [ 852.223825][T31053] netlink: 'syz.2.6474': attribute type 1 has an invalid length. [ 852.632584][T31080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6478'. [ 854.741040][T31087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6481'. [ 854.762094][T31087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6481'. [ 854.794090][T31090] sctp: [Deprecated]: syz.4.6482 (pid 31090) Use of int in max_burst socket option. [ 854.794090][T31090] Use struct sctp_assoc_value instead [ 854.811005][T30765] veth0_vlan: entered promiscuous mode [ 854.825277][T31087] gtp0: entered promiscuous mode [ 854.836531][T30765] veth1_vlan: entered promiscuous mode [ 854.997860][T30765] veth0_macvtap: entered promiscuous mode [ 855.031162][T30765] veth1_macvtap: entered promiscuous mode [ 855.114121][T30765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 855.179079][T30765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 855.240815][ T6068] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.310494][ T6068] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.337145][ T6068] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.344294][T31118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 855.358317][T31117] netlink: 'syz.2.6492': attribute type 1 has an invalid length. [ 855.390142][ T6068] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.536322][T31129] veth7: entered promiscuous mode [ 855.594667][T31130] erspan0: entered allmulticast mode [ 855.665216][ T6003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.694769][ T6003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.779234][ T6003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.810323][ T6003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.385022][ T6003] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.426228][ T6068] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.460428][ T6068] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.497673][T31175] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6507'. [ 856.525343][ T6068] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.544813][T31175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6507'. [ 856.788905][T31170] lo speed is unknown, defaulting to 1000 [ 857.049069][T31190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6510'. [ 857.086374][T31190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6510'. [ 857.304400][T31205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6515'. [ 857.522191][T31212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6516'. [ 857.559240][T31212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6516'. [ 857.562332][T31170] lo speed is unknown, defaulting to 1000 [ 857.873892][T31218] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.989068][T31218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 858.009435][T31232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6521'. [ 858.010433][T31218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 858.021366][T31232] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6521'. [ 858.046454][T31232] netlink: 'syz.4.6521': attribute type 3 has an invalid length. [ 858.054619][T31232] netlink: 'syz.4.6521': attribute type 1 has an invalid length. [ 858.062849][T31232] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.6521'. [ 858.236906][T31219] geneve2: entered promiscuous mode [ 858.243006][T31219] geneve2: entered allmulticast mode [ 858.429775][T31240] netlink: 'syz.0.6525': attribute type 1 has an invalid length. [ 858.949048][T31276] IPv6: Can't replace route, no match found [ 859.039190][T31276] tipc: Enabled bearer , priority 0 [ 859.057773][T31276] syzkaller0: entered promiscuous mode [ 859.085803][T31276] syzkaller0: entered allmulticast mode [ 859.194781][T31276] tipc: Resetting bearer [ 859.205963][T31275] tipc: Resetting bearer [ 859.230891][T31275] tipc: Disabling bearer [ 859.269361][T31289] lo speed is unknown, defaulting to 1000 [ 859.689818][T31307] tipc: Started in network mode [ 859.704579][T31307] tipc: Node identity 3a7168892a24, cluster identity 4711 [ 859.712446][T31307] tipc: Enabled bearer , priority 0 [ 859.734155][T31307] syzkaller0: entered promiscuous mode [ 859.739659][T31307] syzkaller0: entered allmulticast mode [ 859.786215][T31289] lo speed is unknown, defaulting to 1000 [ 859.884844][T31307] tipc: Resetting bearer [ 859.910000][T31304] tipc: Resetting bearer [ 860.023557][T31304] tipc: Disabling bearer [ 860.946004][T31333] netlink: 'syz.6.6547': attribute type 2 has an invalid length. [ 861.160329][T31340] lo speed is unknown, defaulting to 1000 [ 861.387911][T31356] tc_dump_action: action bad kind [ 861.485834][T31358] mac80211_hwsim hwsim91 wlan1: entered promiscuous mode [ 861.513104][T31358] macvtap0: entered promiscuous mode [ 861.596212][T31358] __nla_validate_parse: 10 callbacks suppressed [ 861.596254][T31358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6553'. [ 861.697406][T31360] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.705162][T31360] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.776455][T31369] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6556'. [ 861.788307][T31369] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6556'. [ 861.867986][T31360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 861.888382][T31360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 861.940821][T31373] netlink: 'syz.6.6557': attribute type 2 has an invalid length. [ 861.955913][T31373] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6557'. [ 862.010609][T31360] hsr0: left allmulticast mode [ 862.016932][T31360] hsr_slave_0: left allmulticast mode [ 862.023174][T31360] hsr_slave_1: left allmulticast mode [ 862.029320][T31360] macvlan2: left promiscuous mode [ 862.035127][T31360] macvlan2: left allmulticast mode [ 862.044617][T31360] hsr1: left allmulticast mode [ 862.049384][T31360] syz_tun: left allmulticast mode [ 862.054910][T31360] batadv_slave_0: left allmulticast mode [ 862.067226][T31360] gtp0: left promiscuous mode [ 862.075840][ T10] lo speed is unknown, defaulting to 1000 [ 862.081816][ T10] syz1: Port: 1 Link DOWN [ 862.098078][T31340] lo speed is unknown, defaulting to 1000 [ 862.098102][T31356] lo speed is unknown, defaulting to 1000 [ 862.141897][ T6064] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 862.176138][ T6064] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.216216][ T6064] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 862.235224][ T6064] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.268730][ T6064] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 862.277965][ T6064] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.311697][ T6064] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 862.357791][ T6064] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.428945][T31382] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6560'. [ 862.445036][T31385] netlink: 'syz.4.6562': attribute type 83 has an invalid length. [ 862.594369][T31385] mac80211_hwsim hwsim90 wlan0: entered promiscuous mode [ 862.635634][T31385] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 862.927615][T31356] lo speed is unknown, defaulting to 1000 [ 863.843927][T31415] netlink: 'syz.2.6569': attribute type 13 has an invalid length. [ 863.870360][T31415] netlink: 'syz.2.6569': attribute type 17 has an invalid length. [ 863.949672][T31415] erspan0: left allmulticast mode [ 864.038050][T31415] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 864.073140][T31426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6569'. [ 864.225217][T31417] lo speed is unknown, defaulting to 1000 [ 864.441087][T31441] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6576'. [ 864.459013][T31417] lo speed is unknown, defaulting to 1000 [ 864.562685][T31446] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6577'. [ 864.656699][T31452] ±ÿŸÂnÖ8î·8: renamed from batadv_slave_1 [ 864.863175][T31467] netlink: 'syz.6.6581': attribute type 9 has an invalid length. [ 864.901944][T31467] netlink: 211988 bytes leftover after parsing attributes in process `syz.6.6581'. [ 864.923329][T31469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6582'. [ 864.940289][T31467] tc_dump_action: action bad kind [ 865.041966][T31473] 8021q: adding VLAN 0 to HW filter on device bond2 [ 865.050396][T31473] bond1: (slave bond2): Enslaving as an active interface with an up link [ 865.084571][T31475] netlink: 'syz.6.6581': attribute type 21 has an invalid length. [ 865.196579][T31467] ipvlan2: entered promiscuous mode [ 865.216043][T31467] bridge0: port 3(ipvlan2) entered blocking state [ 865.230844][T31467] bridge0: port 3(ipvlan2) entered disabled state [ 865.238682][T31467] ipvlan2: entered allmulticast mode [ 865.245750][T31467] erspan0: entered allmulticast mode [ 865.267663][T31467] ipvlan2: left allmulticast mode [ 865.273830][T31467] erspan0: left allmulticast mode [ 865.320679][T31469] bond1 (unregistering): (slave bond2): Releasing backup interface [ 865.345617][T31469] bond1 (unregistering): Released all slaves [ 865.967383][T31486] syzkaller0: entered promiscuous mode [ 865.973674][T31486] syzkaller0: entered allmulticast mode [ 865.994048][T31498] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 866.001389][T31499] tipc: Started in network mode [ 866.018101][T31499] tipc: Node identity d6edf2150dbe, cluster identity 4711 [ 866.040584][T31499] tipc: Enabled bearer , priority 0 [ 867.156953][ T5986] tipc: Node number set to 3679711765 [ 868.238311][T31501] syzkaller0: entered promiscuous mode [ 868.243895][T31501] syzkaller0: entered allmulticast mode [ 868.266350][T31509] tipc: Resetting bearer [ 868.279447][T31497] tipc: Resetting bearer [ 868.319243][T31497] tipc: Disabling bearer [ 868.557091][T31528] __nla_validate_parse: 2 callbacks suppressed [ 868.557108][T31528] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6597'. [ 868.604451][T31534] netlink: 'syz.0.6599': attribute type 1 has an invalid length. [ 868.704337][T31538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6600'. [ 868.722436][T31541] 8021q: adding VLAN 0 to HW filter on device bond1 [ 868.803790][T31538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6600'. [ 868.857140][T31538] netlink: 'syz.4.6600': attribute type 13 has an invalid length. [ 868.881862][T31534] veth3: entered promiscuous mode [ 868.899878][T31538] netlink: 'syz.4.6600': attribute type 11 has an invalid length. [ 868.902688][T31534] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 868.926784][T31541] bridge_slave_0: left allmulticast mode [ 868.952771][T31541] bridge_slave_0: left promiscuous mode [ 868.972564][T31556] openvswitch: netlink: Missing valid actions attribute. [ 868.979737][T31556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 868.989729][T31541] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.030625][T31541] bridge_slave_1: left allmulticast mode [ 869.060757][T31541] bridge_slave_1: left promiscuous mode [ 869.102097][T31541] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.150606][T31541] bond0: (slave bond_slave_0): Releasing backup interface [ 869.163491][T31541] bond0: (slave bond_slave_1): Releasing backup interface [ 869.178279][T31541] team0: Port device team_slave_0 removed [ 869.213426][T31541] team0: Port device team_slave_1 removed [ 869.225501][T31541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.240915][T31571] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6607'. [ 869.254925][T31541] batman_adv: batadv0: Removing interface: 26±ÿŸÂnÖ8î·8 [ 869.270121][ C1] vcan0: j1939_tp_txtimer: 0xffff8880555d7000: tx aborted with unknown reason: -2 [ 869.279837][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888082ec7400: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 869.298174][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880555d7000: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 869.318321][T31541] bond1: (slave veth3): Releasing backup interface [ 869.851188][T31603] netlink: 'syz.3.6613': attribute type 4 has an invalid length. [ 869.897003][T31605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6617'. [ 869.948350][T31608] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6617'. [ 870.237515][T31615] bridge_slave_0: left allmulticast mode [ 870.246910][T31615] bridge_slave_0: left promiscuous mode [ 870.265975][T31615] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.343089][T31615] bridge_slave_1: left allmulticast mode [ 870.358347][T31615] bridge_slave_1: left promiscuous mode [ 870.365935][T31615] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.430629][T31615] bond0: (slave bond_slave_0): Releasing backup interface [ 870.534850][T31615] bond0: (slave bond_slave_1): Releasing backup interface [ 870.554704][T31615] team0: Port device team_slave_0 removed [ 870.576488][T31615] team0: Port device team_slave_1 removed [ 870.583925][T31615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 870.591679][T31615] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 870.601544][T31615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 870.609159][T31615] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 870.710926][T31625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6622'. [ 870.734529][T31625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6622'. [ 870.761980][T31625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6622'. [ 870.772117][T31625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6622'. [ 871.204176][T31649] : entered promiscuous mode [ 871.520161][T31669] tipc: Enabling of bearer rejected, failed to enable media [ 871.926128][ T5922] IPVS: starting estimator thread 0... [ 872.027032][T31667] IPVS: using max 27 ests per chain, 64800 per kthread [ 872.528221][T31687] bridge2: port 1(bond2) entered blocking state [ 872.535997][T31687] bridge2: port 1(bond2) entered disabled state [ 872.546269][T31687] bond2: entered allmulticast mode [ 872.579638][T31687] bond2: entered promiscuous mode [ 872.792725][T31697] pim6reg: entered allmulticast mode [ 872.802516][T31698] pim6reg: left allmulticast mode [ 872.940853][T31710] "syz.6.6646" (31710) uses obsolete ecb(arc4) skcipher [ 873.064468][T31713] lo speed is unknown, defaulting to 1000 [ 873.926915][T31713] lo speed is unknown, defaulting to 1000 [ 873.957156][T31747] netlink: 'syz.6.6654': attribute type 1 has an invalid length. [ 873.965942][T31747] __nla_validate_parse: 48 callbacks suppressed [ 873.965961][T31747] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6654'. [ 874.057022][T31762] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6658'. [ 874.238245][T31772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6662'. [ 874.270876][T31772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6662'. [ 874.282453][T31772] netlink: 'syz.3.6662': attribute type 18 has an invalid length. [ 874.299246][T31776] netlink: 'syz.3.6662': attribute type 15 has an invalid length. [ 874.850925][T31796] tc_dump_action: action bad kind [ 874.930134][T31799] netlink: 'syz.0.6670': attribute type 10 has an invalid length. [ 874.946805][T31799] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 875.231087][T31812] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 875.484745][T31822] tipc: Enabled bearer , priority 0 [ 875.506102][T31821] tipc: Disabling bearer [ 875.676643][T31834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6682'. [ 875.956237][T31839] lo speed is unknown, defaulting to 1000 [ 876.467773][T31839] lo speed is unknown, defaulting to 1000 [ 876.567619][T31862] lo speed is unknown, defaulting to 1000 [ 876.930855][T31879] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 876.942583][T31891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6695'. [ 877.065731][T31862] lo speed is unknown, defaulting to 1000 [ 877.156898][T31897] netlink: 'syz.0.6698': attribute type 1 has an invalid length. [ 877.178599][T31897] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6698'. [ 877.455881][T31905] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6702'. [ 877.487081][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880539f7800: rx timeout, send abort [ 877.496087][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880539f7800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 877.586430][T31910] tun0: tun_chr_ioctl cmd 1074025675 [ 877.622584][T31910] tun0: persist enabled [ 877.631131][T31911] tun0: tun_chr_ioctl cmd 1074025675 [ 877.636926][T31911] tun0: persist disabled [ 878.123963][T31938] nftables ruleset with unbound chain [ 878.140486][T31942] netlink: 'syz.2.6709': attribute type 12 has an invalid length. [ 878.167319][T31942] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.6709'. [ 878.344020][T19265] IPVS: starting estimator thread 0... [ 878.461941][T31956] IPVS: using max 32 ests per chain, 76800 per kthread [ 878.533692][T31968] tipc: Enabled bearer , priority 0 [ 878.548405][T31968] syzkaller0: entered promiscuous mode [ 878.554671][T31968] syzkaller0: entered allmulticast mode [ 878.591906][T31968] tipc: Resetting bearer [ 878.599589][T31966] tipc: Resetting bearer [ 878.629283][T31966] tipc: Disabling bearer [ 879.161108][T32002] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6729'. [ 879.180633][T32007] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6730'. [ 879.183853][T32000] tipc: Enabled bearer , priority 0 [ 879.190906][T32002] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6729'. [ 879.210301][T32002] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6729'. [ 879.220401][T32000] syzkaller0: entered promiscuous mode [ 879.232753][T32000] syzkaller0: entered allmulticast mode [ 879.263386][T32009] bridge: RTM_NEWNEIGH with invalid ether address [ 879.329937][T32000] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 879.400343][T32000] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6728'. [ 879.413125][T32000] tipc: Resetting bearer [ 879.439942][T31999] tipc: Resetting bearer [ 879.484500][T31999] tipc: Disabling bearer [ 879.803938][T32039] netlink: 'syz.4.6741': attribute type 13 has an invalid length. [ 879.918947][T32051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6743'. [ 879.943569][T32055] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6745'. [ 879.960646][T32055] openvswitch: netlink: Multiple metadata blocks provided [ 879.983827][T32057] netlink: zone id is out of range [ 879.993213][T32057] netlink: zone id is out of range [ 880.006043][T32057] netlink: zone id is out of range [ 880.015298][T32057] netlink: zone id is out of range [ 880.021018][T32057] netlink: zone id is out of range [ 880.089448][T32057] netlink: set zone limit has 4 unknown bytes [ 880.107359][T32048] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.6744'. [ 880.145203][T32060] netlink: del zone limit has 4 unknown bytes [ 880.481397][T32073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6749'. [ 880.531356][T32076] lo speed is unknown, defaulting to 1000 [ 880.580342][T32073] ip6gre1: entered allmulticast mode [ 880.673230][T32092] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 3, id = 0 [ 880.820446][T32104] v: renamed from ip6_vti0 (while UP) [ 881.040104][T32117] sctp: [Deprecated]: syz.2.6761 (pid 32117) Use of int in max_burst socket option. [ 881.040104][T32117] Use struct sctp_assoc_value instead [ 881.092008][T32076] lo speed is unknown, defaulting to 1000 [ 881.092287][T32085] lo speed is unknown, defaulting to 1000 [ 881.592098][T32139] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6763'. [ 882.095560][T32085] lo speed is unknown, defaulting to 1000 [ 882.499986][T32187] tipc: Enabled bearer , priority 0 [ 882.526290][T32194] netlink: 'syz.6.6780': attribute type 4 has an invalid length. [ 882.538792][T32192] 0ªX¹¦À: renamed from caif0 [ 882.553696][T32192] 0ªX¹¦À: entered allmulticast mode [ 882.559011][T32192] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 882.607103][T32195] netlink: 'syz.6.6780': attribute type 4 has an invalid length. [ 882.622770][T32187] syzkaller0: entered promiscuous mode [ 882.628273][T32187] syzkaller0: entered allmulticast mode [ 882.681861][T32198] tipc: Resetting bearer [ 882.693889][T32186] tipc: Resetting bearer [ 882.752516][T32186] tipc: Disabling bearer [ 883.097645][T32213] lo speed is unknown, defaulting to 1000 [ 883.722725][T32232] lo speed is unknown, defaulting to 1000 [ 883.725187][T32213] lo speed is unknown, defaulting to 1000 [ 883.740891][T32241] Bluetooth: MGMT ver 1.23 [ 884.189454][T32250] __nla_validate_parse: 4 callbacks suppressed [ 884.189473][T32250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6795'. [ 884.407197][T32232] lo speed is unknown, defaulting to 1000 [ 884.520606][T32255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6797'. [ 884.590022][T32255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6797'. [ 884.674806][T32263] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 884.700019][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 884.748351][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 884.780537][T32252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6796'. [ 884.790871][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 884.800506][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 884.888790][T32252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6796'. [ 884.920409][T32266] 0ªX¹¦À: left allmulticast mode [ 885.100193][T32271] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 885.137473][T32271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6800'. [ 885.315319][T32281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6802'. [ 885.544477][T32291] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6804'. [ 885.713593][T32304] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 885.842911][T32309] FAULT_INJECTION: forcing a failure. [ 885.842911][T32309] name failslab, interval 1, probability 0, space 0, times 0 [ 885.925561][T32308] can: request_module (can-proto-0) failed. [ 885.939321][T32309] CPU: 0 UID: 0 PID: 32309 Comm: syz.2.6809 Not tainted syzkaller #0 PREEMPT(full) [ 885.939366][T32309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 885.939388][T32309] Call Trace: [ 885.939396][T32309] [ 885.939405][T32309] dump_stack_lvl+0x189/0x250 [ 885.939431][T32309] ? __pfx____ratelimit+0x10/0x10 [ 885.939451][T32309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 885.939470][T32309] ? __pfx__printk+0x10/0x10 [ 885.939498][T32309] ? __pfx___might_resched+0x10/0x10 [ 885.939520][T32309] should_fail_ex+0x414/0x560 [ 885.939557][T32309] should_failslab+0xa8/0x100 [ 885.939584][T32309] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 885.939607][T32309] ? __alloc_skb+0x112/0x2d0 [ 885.939629][T32309] __alloc_skb+0x112/0x2d0 [ 885.939651][T32309] netlink_sendmsg+0x5c6/0xb30 [ 885.939681][T32309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 885.939702][T32309] ? aa_sock_msg_perm+0xf1/0x1d0 [ 885.939721][T32309] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 885.939740][T32309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 885.939759][T32309] __sock_sendmsg+0x21c/0x270 [ 885.939785][T32309] ____sys_sendmsg+0x505/0x830 [ 885.939810][T32309] ? __pfx_____sys_sendmsg+0x10/0x10 [ 885.939840][T32309] ? import_iovec+0x74/0xa0 [ 885.939863][T32309] ___sys_sendmsg+0x21f/0x2a0 [ 885.939884][T32309] ? __pfx____sys_sendmsg+0x10/0x10 [ 885.939938][T32309] ? __fget_files+0x2a/0x420 [ 885.939955][T32309] ? __fget_files+0x3a0/0x420 [ 885.939981][T32309] __x64_sys_sendmsg+0x19b/0x260 [ 885.940004][T32309] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 885.940034][T32309] ? rcu_is_watching+0x15/0xb0 [ 885.940058][T32309] ? do_syscall_64+0xbe/0x3b0 [ 885.940080][T32309] do_syscall_64+0xfa/0x3b0 [ 885.940097][T32309] ? lockdep_hardirqs_on+0x9c/0x150 [ 885.940114][T32309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.940131][T32309] ? clear_bhb_loop+0x60/0xb0 [ 885.940152][T32309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.940169][T32309] RIP: 0033:0x7f5ea7d8ebe9 [ 885.940186][T32309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 885.940200][T32309] RSP: 002b:00007f5ea8ba9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 885.940220][T32309] RAX: ffffffffffffffda RBX: 00007f5ea7fc5fa0 RCX: 00007f5ea7d8ebe9 [ 885.940233][T32309] RDX: 0000000004004090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 885.940245][T32309] RBP: 00007f5ea8ba9090 R08: 0000000000000000 R09: 0000000000000000 [ 885.940255][T32309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 885.940266][T32309] R13: 00007f5ea7fc6038 R14: 00007f5ea7fc5fa0 R15: 00007ffe152fc8c8 [ 885.940296][T32309] [ 886.604362][T32326] netlink: 'syz.0.6814': attribute type 1 has an invalid length. [ 886.705342][T32326] 8021q: adding VLAN 0 to HW filter on device bond3 [ 886.869074][T32336] erspan0: entered allmulticast mode [ 886.905312][T32336] bond3: (slave erspan0): making interface the new active one [ 886.934768][T32336] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 887.020870][T32348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6818'. [ 887.130316][T32332] lo speed is unknown, defaulting to 1000 [ 887.388371][T32358] netlink: 'syz.2.6822': attribute type 1 has an invalid length. [ 887.699761][T32373] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6824'. [ 887.812611][T32332] lo speed is unknown, defaulting to 1000 [ 887.976234][T32384] netlink: 'syz.3.6831': attribute type 1 has an invalid length. [ 887.989179][T32384] netlink: 'syz.3.6831': attribute type 1 has an invalid length. [ 888.110930][T32390] FAULT_INJECTION: forcing a failure. [ 888.110930][T32390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 888.130193][T32390] CPU: 1 UID: 0 PID: 32390 Comm: syz.4.6833 Not tainted syzkaller #0 PREEMPT(full) [ 888.130218][T32390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 888.130230][T32390] Call Trace: [ 888.130238][T32390] [ 888.130246][T32390] dump_stack_lvl+0x189/0x250 [ 888.130271][T32390] ? __pfx____ratelimit+0x10/0x10 [ 888.130290][T32390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 888.130310][T32390] ? __pfx__printk+0x10/0x10 [ 888.130332][T32390] ? __might_fault+0xb0/0x130 [ 888.130372][T32390] should_fail_ex+0x414/0x560 [ 888.130399][T32390] _copy_from_iter+0x1de/0x1790 [ 888.130424][T32390] ? rcu_is_watching+0x15/0xb0 [ 888.130443][T32390] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 888.130466][T32390] ? __pfx__copy_from_iter+0x10/0x10 [ 888.130487][T32390] ? __build_skb_around+0x257/0x3e0 [ 888.130508][T32390] ? netlink_sendmsg+0x642/0xb30 [ 888.130524][T32390] ? skb_put+0x11b/0x210 [ 888.130545][T32390] netlink_sendmsg+0x6b2/0xb30 [ 888.130572][T32390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 888.130594][T32390] ? aa_sock_msg_perm+0xf1/0x1d0 [ 888.130612][T32390] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 888.130631][T32390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 888.130649][T32390] __sock_sendmsg+0x21c/0x270 [ 888.130675][T32390] ____sys_sendmsg+0x505/0x830 [ 888.130701][T32390] ? __pfx_____sys_sendmsg+0x10/0x10 [ 888.130730][T32390] ? import_iovec+0x74/0xa0 [ 888.130753][T32390] ___sys_sendmsg+0x21f/0x2a0 [ 888.130774][T32390] ? __pfx____sys_sendmsg+0x10/0x10 [ 888.130829][T32390] ? __fget_files+0x2a/0x420 [ 888.130844][T32390] ? __fget_files+0x3a0/0x420 [ 888.130871][T32390] __x64_sys_sendmsg+0x19b/0x260 [ 888.130892][T32390] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 888.130921][T32390] ? __pfx_ksys_write+0x10/0x10 [ 888.130941][T32390] ? rcu_is_watching+0x15/0xb0 [ 888.130963][T32390] ? do_syscall_64+0xbe/0x3b0 [ 888.130984][T32390] do_syscall_64+0xfa/0x3b0 [ 888.131001][T32390] ? lockdep_hardirqs_on+0x9c/0x150 [ 888.131018][T32390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.131035][T32390] ? clear_bhb_loop+0x60/0xb0 [ 888.131056][T32390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.131072][T32390] RIP: 0033:0x7f69f978ebe9 [ 888.131090][T32390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 888.131105][T32390] RSP: 002b:00007f69fa52a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 888.131124][T32390] RAX: ffffffffffffffda RBX: 00007f69f99c5fa0 RCX: 00007f69f978ebe9 [ 888.131137][T32390] RDX: 0000000004004090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 888.131149][T32390] RBP: 00007f69fa52a090 R08: 0000000000000000 R09: 0000000000000000 [ 888.131160][T32390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.131171][T32390] R13: 00007f69f99c6038 R14: 00007f69f99c5fa0 R15: 00007ffcb1575628 [ 888.131203][T32390] [ 888.605782][ T12] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82 [ 888.810731][T32406] 8021q: adding VLAN 0 to HW filter on device bond4 [ 888.827651][T32408] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 888.845256][T32408] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 888.887992][T32402] veth4: entered allmulticast mode [ 888.931017][T32412] bond3: (slave erspan0): Releasing active interface [ 888.950105][T32412] bond0: (slave wlan1): Releasing backup interface [ 889.004001][T32414] netlink: 'syz.2.6837': attribute type 1 has an invalid length. [ 889.029494][T32416] lo: Caught tx_queue_len zero misconfig [ 889.440430][T32437] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 889.453604][T32436] syz_tun: entered promiscuous mode [ 889.470210][T32436] team0: Device macvtap1 failed to register rx_handler [ 889.500288][T32436] syz_tun: left promiscuous mode [ 889.617722][T32442] syz_tun: entered allmulticast mode [ 889.772824][T32452] netlink: 'syz.0.6848': attribute type 23 has an invalid length. [ 890.209183][T32443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 890.246207][T32443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 890.487356][T32443] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 890.499487][T32443] vlan2: left promiscuous mode [ 890.505398][T32443] syz_tun: left promiscuous mode [ 890.514562][T32443] wireguard0: left promiscuous mode [ 890.525392][T32443] wireguard0: left allmulticast mode [ 890.556943][T32443] vlan3: left allmulticast mode [ 890.563850][T32443] veth1: left allmulticast mode [ 890.574546][T32443] ip6tnl1: left promiscuous mode [ 890.579697][T32443] ip6tnl1: left allmulticast mode [ 890.591975][T32443] bond2: left promiscuous mode [ 890.627426][T32447] syz_tun: left allmulticast mode [ 890.687815][ T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.697548][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.764366][ T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.795242][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.820791][ T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.851804][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.871306][ T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.893095][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.920306][T32474] netlink: 'syz.6.6855': attribute type 10 has an invalid length. [ 890.970985][T32474] 8021q: adding VLAN 0 to HW filter on device team0 [ 891.005335][T32474] bond0: (slave team0): Enslaving as an active interface with an up link [ 891.190920][T32444] infiniband syz2: set down [ 891.200363][T32444] infiniband syz2: added bond_slave_0 [ 891.216351][T32444] syz2: rxe_create_cq: returned err = -12 [ 891.225376][T32444] infiniband syz2: Couldn't create ib_mad CQ [ 891.236325][T32444] infiniband syz2: Couldn't open port 1 [ 891.287642][T32444] RDS/IB: syz2: added [ 891.294417][T32444] smc: adding ib device syz2 with port count 1 [ 891.308531][T32444] smc: ib device syz2 port 1 has pnetid [ 891.376310][T32482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 891.553603][T32487] ip6gretap0: entered promiscuous mode [ 891.559310][T32487] macsec1: entered allmulticast mode [ 891.565823][T32487] ip6gretap0: entered allmulticast mode [ 891.574548][T32487] ip6gretap0: left allmulticast mode [ 891.580252][T32487] ip6gretap0: left promiscuous mode [ 891.649495][T32466] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 891.657545][T32490] netlink: 'syz.6.6862': attribute type 21 has an invalid length. [ 891.666993][T32490] netlink: 'syz.6.6862': attribute type 1 has an invalid length. [ 891.675066][T32490] __nla_validate_parse: 1 callbacks suppressed [ 891.675084][T32490] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6862'. [ 891.785834][T32495] netlink: 204 bytes leftover after parsing attributes in process `syz.3.6865'. [ 892.019726][T32504] lo speed is unknown, defaulting to 1000 [ 892.060952][T32507] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.6870'. [ 892.071020][T32507] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6870'. [ 892.291960][T32504] lo speed is unknown, defaulting to 1000 [ 892.360534][T32517] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6871'. [ 892.372623][T32517] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6871'. [ 892.429145][T32523] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6873'. [ 892.749525][T32532] netlink: 304 bytes leftover after parsing attributes in process `syz.0.6876'. [ 892.774569][T32536] netlink: 'syz.3.6877': attribute type 4 has an invalid length. [ 892.790315][T32537] netlink: 'syz.3.6877': attribute type 4 has an invalid length. [ 892.853909][T18732] lo speed is unknown, defaulting to 1000 [ 892.873568][T18732] syz1: Port: 1 Link ACTIVE [ 892.891404][ T5871] Bluetooth: hci3: command 0x0401 tx timeout [ 893.103347][T32546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6879'. [ 893.131190][T32548] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6880'. [ 893.261736][T32551] netlink: 'syz.0.6881': attribute type 15 has an invalid length. [ 894.036240][T32570] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 894.042180][T32572] Bluetooth: MGMT ver 1.23 [ 894.528077][T32601] bond0: (slave team0): Releasing backup interface [ 894.540383][T32601] bridge_slave_0: left allmulticast mode [ 894.546498][T32601] bridge_slave_0: left promiscuous mode [ 894.552638][T32601] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.568157][T32601] bridge_slave_1: left allmulticast mode [ 894.574165][T32601] bridge_slave_1: left promiscuous mode [ 894.580337][T32601] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.603194][T32601] bond0: (slave bond_slave_0): Releasing backup interface [ 894.614652][T32601] bond0: (slave bond_slave_1): Releasing backup interface [ 894.625764][T32601] team0: Port device team_slave_0 removed [ 894.638689][T32601] team0: Port device team_slave_1 removed [ 894.645075][T32601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 894.665829][T32601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 895.026822][T32614] netlink: 'syz.3.6898': attribute type 12 has an invalid length. [ 895.313843][T32624] nbd: must specify at least one socket [ 895.937099][T32636] openvswitch: netlink: Message has 4 unknown bytes. [ 896.318180][T32576] lo speed is unknown, defaulting to 1000 [ 896.677136][T32576] lo speed is unknown, defaulting to 1000 [ 896.699135][T32597] lo speed is unknown, defaulting to 1000 [ 896.936531][T32657] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 897.189161][T32674] tipc: Enabled bearer , priority 0 [ 897.199357][T32669] syzkaller0: entered promiscuous mode [ 897.205246][T32669] syzkaller0: entered allmulticast mode [ 897.318550][T32671] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 897.350241][T32669] tipc: Resetting bearer [ 897.372722][T32677] __nla_validate_parse: 9 callbacks suppressed [ 897.372739][T32677] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6914'. [ 897.388686][T32669] tipc: Resetting bearer [ 897.466303][T32669] tipc: Disabling bearer [ 897.494414][T32679] tipc: Enabling of bearer rejected, failed to enable media [ 897.540344][T32656] lo speed is unknown, defaulting to 1000 [ 897.629448][T32681] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6916'. [ 897.682818][T32683] netlink: 'syz.4.6917': attribute type 30 has an invalid length. [ 897.786748][T32690] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6920'. [ 897.804631][T32690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 897.910753][T32656] lo speed is unknown, defaulting to 1000 [ 897.942520][T32597] lo speed is unknown, defaulting to 1000 [ 898.012564][T32698] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6923'. [ 898.396404][T32714] gretap1: entered promiscuous mode [ 898.664114][T32727] lo speed is unknown, defaulting to 1000 [ 898.676944][T32731] netlink: 'syz.2.6933': attribute type 1 has an invalid length. [ 898.701643][T32731] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6933'. [ 898.722193][T32733] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6932'. [ 898.971536][ T5871] Bluetooth: hci4: command tx timeout [ 899.100286][T32743] netlink: 'syz.6.6935': attribute type 2 has an invalid length. [ 899.225993][T32743] þ: entered promiscuous mode [ 899.242527][T32727] lo speed is unknown, defaulting to 1000 [ 899.592905][T32759] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.6939'. [ 899.840756][T32765] RDS: rds_bind could not find a transport for fe88::7, load rds_tcp or rds_rdma? [ 900.009243][T32767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6940'. [ 901.040584][ T317] lo speed is unknown, defaulting to 1000 [ 901.503179][ T332] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6952'. [ 901.529487][ T332] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6952'. [ 901.602751][ T332] lo: entered allmulticast mode [ 901.646023][ T332] dvmrp8: entered allmulticast mode [ 901.668303][ T330] lo: left allmulticast mode [ 901.678683][ T330] dvmrp8: left allmulticast mode [ 901.793050][ T342] ip6tnl2: entered promiscuous mode [ 901.798824][ T342] ip6tnl2: entered allmulticast mode [ 901.806063][ T317] lo speed is unknown, defaulting to 1000 [ 902.523853][ T351] netlink: 'syz.4.6959': attribute type 4 has an invalid length. [ 902.799310][ T367] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 902.986832][ T382] __nla_validate_parse: 8 callbacks suppressed [ 902.986849][ T382] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6967'. [ 903.044076][ T383] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6967'. [ 903.110170][ T6068] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.249959][ T6068] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.300803][ T395] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? [ 903.414856][ T1003] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.455779][ T1003] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.567641][ T407] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6972'. [ 903.619633][ T405] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6972'. [ 903.650849][ T411] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6973'. [ 903.662944][ T411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6973'. [ 904.432122][ T451] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6985'. [ 904.539246][ T458] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6989'. [ 904.584851][ T467] netlink: 'syz.0.6991': attribute type 3 has an invalid length. [ 904.607512][ T467] netlink: 666 bytes leftover after parsing attributes in process `syz.0.6991'. [ 904.631620][ T470] netlink: 'syz.4.6992': attribute type 1 has an invalid length. [ 904.737050][ T472] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 904.753531][ T477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6994'. [ 904.770073][ T472] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 904.965633][ T488] netlink: 'syz.0.6995': attribute type 2 has an invalid length. [ 905.132268][ T500] sctp: [Deprecated]: syz.4.6999 (pid 500) Use of struct sctp_assoc_value in delayed_ack socket option. [ 905.132268][ T500] Use struct sctp_sack_info instead [ 905.529903][ T495] lo speed is unknown, defaulting to 1000 [ 906.112263][ T495] lo speed is unknown, defaulting to 1000 [ 906.423111][ T556] netlink: 'syz.6.7014': attribute type 1 has an invalid length. [ 906.804801][ T563] lo speed is unknown, defaulting to 1000 [ 907.216883][ T584] netlink: 'syz.3.7021': attribute type 2 has an invalid length. [ 907.347072][ T562] lo speed is unknown, defaulting to 1000 [ 907.737589][ T606] netlink: 'syz.3.7028': attribute type 8 has an invalid length. [ 907.780650][ T606] bond0: entered promiscuous mode [ 907.820921][ T606] bond0: left promiscuous mode [ 907.864865][ T580] lo speed is unknown, defaulting to 1000 [ 907.875595][ T563] lo speed is unknown, defaulting to 1000 [ 907.888564][ T562] lo speed is unknown, defaulting to 1000 [ 908.594345][ T580] lo speed is unknown, defaulting to 1000 [ 908.634463][ T626] __nla_validate_parse: 7 callbacks suppressed [ 908.634482][ T626] netlink: 176 bytes leftover after parsing attributes in process `syz.3.7036'. [ 909.935451][ T648] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7044'. [ 909.962983][ T656] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7045'. [ 909.975537][ T656] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7045'. [ 910.829535][ T661] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7047'. [ 910.852142][ T6072] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.863528][ T6072] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.949822][ T6072] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.984635][ T6072] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.006315][ T666] netlink: 788 bytes leftover after parsing attributes in process `syz.4.7049'. [ 911.186970][ T663] lo speed is unknown, defaulting to 1000 [ 911.467320][ T665] lo speed is unknown, defaulting to 1000 [ 911.884278][ T678] syzkaller1: entered promiscuous mode [ 911.907327][ T678] syzkaller1: entered allmulticast mode [ 911.943642][ T665] lo speed is unknown, defaulting to 1000 [ 911.982303][ T663] lo speed is unknown, defaulting to 1000 [ 912.383311][ T696] netlink: 'syz.3.7055': attribute type 101 has an invalid length. [ 912.393333][ T696] netlink: 'syz.3.7055': attribute type 7 has an invalid length. [ 912.419396][ T696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7055'. [ 912.442833][ T696] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7055'. [ 912.517650][ T698] lo speed is unknown, defaulting to 1000 [ 912.608598][ T700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7056'. [ 913.680049][ T698] lo speed is unknown, defaulting to 1000 [ 914.252545][ T736] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7065'. [ 914.289897][ T728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7064'. [ 914.346692][ T728] gtp1: entered promiscuous mode [ 914.397202][ T728] gtp1: entered allmulticast mode [ 914.411911][T20529] Bluetooth: hci3: command 0x0401 tx timeout [ 914.462513][ T743] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7065'. [ 914.519440][ T746] netlink: 67 bytes leftover after parsing attributes in process `syz.0.7065'. [ 914.719673][ T736] can: request_module (can-proto-0) failed. [ 915.036384][ T756] tipc: Enabled bearer , priority 0 [ 915.044453][ T756] syzkaller0: entered promiscuous mode [ 915.049943][ T756] syzkaller0: entered allmulticast mode [ 915.110893][ T756] tipc: Resetting bearer [ 915.207366][ T755] tipc: Resetting bearer [ 915.259446][ T755] tipc: Disabling bearer [ 915.330826][ T761] lo speed is unknown, defaulting to 1000 [ 915.693558][ T773] netlink: 11 bytes leftover after parsing attributes in process `syz.2.7074'. [ 915.904570][ T778] pimreg: entered allmulticast mode [ 916.127317][ T761] lo speed is unknown, defaulting to 1000 [ 916.228961][ T796] netlink: 180 bytes leftover after parsing attributes in process `syz.6.7079'. [ 917.088150][ T818] lo speed is unknown, defaulting to 1000 [ 917.580323][ T828] netlink: 124 bytes leftover after parsing attributes in process `syz.3.7088'. [ 917.654200][ T830] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7089'. [ 917.739063][ T834] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.7091'. [ 917.798595][ T832] : entered promiscuous mode [ 918.022611][ T840] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7093'. [ 918.350758][ T818] lo speed is unknown, defaulting to 1000 [ 918.859157][ T872] netlink: 'syz.3.7104': attribute type 12 has an invalid length. [ 918.982878][ T878] netlink: 'syz.2.7105': attribute type 7 has an invalid length. [ 919.011102][ T878] netlink: 'syz.2.7105': attribute type 3 has an invalid length. [ 919.087465][ T855] netlink: 'syz.0.7098': attribute type 9 has an invalid length. [ 919.630242][ T894] __nla_validate_parse: 3 callbacks suppressed [ 919.630261][ T894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7112'. [ 919.660266][ T894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7112'. [ 919.766953][ T6003] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.798575][ T899] lo speed is unknown, defaulting to 1000 [ 920.090655][ T6003] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 920.140287][ T6003] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 920.196744][ T899] lo speed is unknown, defaulting to 1000 [ 920.201901][ T6003] netdevsim netdevsim1 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 920.234030][ T6003] netdevsim netdevsim5 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 920.264386][ T6003] netdevsim netdevsim5 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 920.382636][ T924] netlink: 'syz.6.7118': attribute type 1 has an invalid length. [ 920.401951][ T924] netlink: 244 bytes leftover after parsing attributes in process `syz.6.7118'. [ 920.419908][ T6003] netdevsim netdevsim5 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 920.429670][ T903] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7114'. [ 920.481791][ T6003] netdevsim netdevsim5 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 920.788858][ T912] lo speed is unknown, defaulting to 1000 [ 921.699697][ T5871] Bluetooth: hci3: link tx timeout [ 921.711541][ T5871] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 921.721187][T20529] Bluetooth: hci3: link tx timeout [ 921.726865][T20529] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 921.760913][T20529] Bluetooth: hci3: link tx timeout [ 921.766123][T20529] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 921.986929][ T961] lo speed is unknown, defaulting to 1000 [ 922.131376][ T912] lo speed is unknown, defaulting to 1000 [ 922.828274][ T961] lo speed is unknown, defaulting to 1000 [ 923.346708][ T974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7127'. [ 923.483782][ T974] tipc: Enabling of bearer rejected, failed to enable media [ 923.773324][T20529] Bluetooth: hci3: command 0x0401 tx timeout [ 923.998131][ T1005] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20002 [ 924.323534][ T1002] lo speed is unknown, defaulting to 1000 [ 924.480477][ T1017] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7137'. [ 924.505018][ T1017] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7137'. [ 924.760152][ T1025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7139'. [ 924.773962][ T1002] lo speed is unknown, defaulting to 1000 [ 924.786802][ T1025] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7139'. [ 924.953085][ T1029] lo speed is unknown, defaulting to 1000 [ 925.296014][ T1044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7142'. [ 925.408065][ T1029] lo speed is unknown, defaulting to 1000 [ 925.610636][ T1064] netlink: 'syz.3.7146': attribute type 83 has an invalid length. [ 925.702019][ T1058] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7145'. [ 926.716779][ T1089] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7154'. [ 927.088123][ T1105] tipc: Enabled bearer , priority 0 [ 927.111858][ T1105] syzkaller0: entered promiscuous mode [ 927.113875][ T1107] netlink: 'syz.0.7159': attribute type 2 has an invalid length. [ 927.124679][ T1105] syzkaller0: entered allmulticast mode [ 927.144779][ T1107] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7159'. [ 927.298979][ T1112] syzkaller0: entered promiscuous mode [ 927.308252][ T1112] syzkaller0: entered allmulticast mode [ 927.322884][ T1105] tipc: Resetting bearer [ 927.347456][ T1102] tipc: Resetting bearer [ 927.398676][ T1102] tipc: Disabling bearer [ 927.462018][ T1123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7163'. [ 927.472185][ T1122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7163'. [ 927.619809][ T1129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7166'. [ 927.702392][ T1133] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.7167'. [ 927.722274][ T1133] Bluetooth: MGMT ver 1.23 [ 927.755997][ T1135] veth0_to_team: Caught tx_queue_len zero misconfig [ 927.771862][ T1135] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 927.799548][ T1135] siw: device registration error -23 [ 927.812522][ T1139] netlink: 'syz.6.7170': attribute type 2 has an invalid length. [ 927.954301][ T1141] lo speed is unknown, defaulting to 1000 [ 928.165043][ T1141] lo speed is unknown, defaulting to 1000 [ 928.316626][ T1159] openvswitch: netlink: IP tunnel dst address not specified [ 928.340784][ T1161] openvswitch: netlink: IP tunnel dst address not specified [ 928.373027][ T1158] can: request_module (can-proto-0) failed. [ 928.816886][ T1178] syzkaller0: entered promiscuous mode [ 928.830097][ T1178] syzkaller0: entered allmulticast mode [ 928.867619][ T1190] dvmrp0: entered allmulticast mode [ 929.800382][ T1216] netlink: 'syz.6.7189': attribute type 9 has an invalid length. [ 931.713252][ T1205] veth0_to_bond: entered allmulticast mode [ 931.891723][ T1225] __nla_validate_parse: 6 callbacks suppressed [ 931.891743][ T1225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7192'. [ 931.909563][ T1225] netlink: 'syz.4.7192': attribute type 29 has an invalid length. [ 931.919202][ T1225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7192'. [ 932.380564][ T1254] lo speed is unknown, defaulting to 1000 [ 932.401530][ T1252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7199'. [ 932.465945][ T1258] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7199'. [ 932.473504][ T1252] 8021q: adding VLAN 0 to HW filter on device bond1 [ 932.674644][ T1254] lo speed is unknown, defaulting to 1000 [ 932.938460][ T1268] netlink: 'syz.2.7202': attribute type 21 has an invalid length. [ 933.319424][ T1282] tipc: Enabled bearer , priority 0 [ 933.353162][ T1282] syzkaller0: entered promiscuous mode [ 933.359127][ T1282] syzkaller0: entered allmulticast mode [ 933.465757][ T1293] tipc: Resetting bearer [ 933.504832][ T1295] netlink: 'syz.0.7210': attribute type 10 has an invalid length. [ 933.554227][ T1281] tipc: Resetting bearer [ 933.669749][ T1281] tipc: Disabling bearer [ 934.084828][ T1303] _ÐZ`Ô€@: entered promiscuous mode [ 934.160570][ T1312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7215'. [ 934.391177][ T1337] pimreg: entered allmulticast mode [ 934.452035][ T1339] dvmrp8: entered allmulticast mode [ 934.510686][ T1339] pimreg: left allmulticast mode [ 934.523377][ T1339] dvmrp8: left allmulticast mode [ 934.638346][ T1352] veth0: entered promiscuous mode [ 934.692678][ T1352] veth0: left promiscuous mode [ 934.716960][ T1361] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7222'. [ 934.770735][ T1363] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7223'. [ 934.963349][ T1373] lo speed is unknown, defaulting to 1000 [ 935.098115][ T1383] tipc: Enabled bearer , priority 0 [ 935.114802][ T1383] syzkaller0: entered promiscuous mode [ 935.135479][ T1383] syzkaller0: entered allmulticast mode [ 935.169846][ T1381] tipc: Enabled bearer , priority 0 [ 935.203745][ T1384] syzkaller0: entered promiscuous mode [ 935.209436][ T1384] syzkaller0: entered allmulticast mode [ 935.304091][ T1383] tipc: Resetting bearer [ 935.320697][ T1382] tipc: Resetting bearer [ 935.328523][ T1390] netlink: 'syz.4.7230': attribute type 10 has an invalid length. [ 935.393890][ T1382] tipc: Disabling bearer [ 935.448564][ T1390] team0: Device hsr_slave_0 failed to register rx_handler [ 935.468652][ T1379] tipc: Resetting bearer [ 935.565817][ T1379] tipc: Disabling bearer [ 935.584434][ T1373] lo speed is unknown, defaulting to 1000 [ 935.586113][ T1404] netlink: 'syz.0.7233': attribute type 3 has an invalid length. [ 935.606581][ T1407] netlink: 'syz.3.7234': attribute type 1 has an invalid length. [ 935.609599][ T1404] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7233'. [ 935.621668][ T1410] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7234'. [ 935.719707][ T1407] 8021q: adding VLAN 0 to HW filter on device bond1 [ 935.728323][ T1407] netlink: 'syz.3.7234': attribute type 1 has an invalid length. [ 935.808217][ T1408] bond1: (slave veth3): Enslaving as an active interface with a down link [ 935.826873][ T1419] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 935.891110][ T1423] netlink: 'syz.0.7238': attribute type 3 has an invalid length. [ 935.905014][ T1408] bond1: (slave veth5): Enslaving as an active interface with a down link [ 935.926839][ T1407] netlink: 'syz.3.7234': attribute type 1 has an invalid length. [ 935.929160][ T1424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7237'. [ 935.998185][ T1419] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 936.085439][ T1408] bond1: (slave veth7): Enslaving as an active interface with a down link [ 936.095301][ T1407] netlink: 'syz.3.7234': attribute type 1 has an invalid length. [ 936.119083][ T1408] bond1: (slave veth9): Enslaving as an active interface with a down link [ 936.167699][ T1408] bond1: (slave veth11): Enslaving as an active interface with a down link [ 936.218570][ T1408] bond1: (slave veth13): Enslaving as an active interface with a down link [ 936.268583][ T1408] bond1: (slave veth15): Enslaving as an active interface with a down link [ 936.303926][ T1408] bond1: (slave veth17): Enslaving as an active interface with a down link [ 936.348127][ T1408] bond1: (slave veth19): Enslaving as an active interface with a down link [ 936.380543][ T1408] bond1: (slave veth21): Enslaving as an active interface with a down link [ 936.415402][ T1408] bond1: (slave veth23): Enslaving as an active interface with a down link [ 936.445691][ T1434] delete_channel: no stack [ 936.456301][ T1408] bond1: (slave veth25): Enslaving as an active interface with a down link [ 936.474913][ T1432] delete_channel: no stack [ 937.269888][ T1474] __nla_validate_parse: 2 callbacks suppressed [ 937.269906][ T1474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7252'. [ 937.310351][ T1467] vlan4: entered promiscuous mode [ 937.316650][ T1467] vlan4: entered allmulticast mode [ 937.322403][ T1467] hsr_slave_1: entered allmulticast mode [ 937.484557][ T1478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7254'. [ 937.492908][ T1476] tipc: Enabled bearer , priority 0 [ 937.500826][ T1478] validate_nla: 7 callbacks suppressed [ 937.500842][ T1478] netlink: 'syz.0.7254': attribute type 1 has an invalid length. [ 937.514810][ T1478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7254'. [ 937.525149][ T1476] syzkaller0: entered promiscuous mode [ 937.530853][ T1476] syzkaller0: entered allmulticast mode [ 937.598754][ T1476] tipc: Resetting bearer [ 937.625882][ T1476] netlink: 'syz.3.7253': attribute type 10 has an invalid length. [ 937.651856][ T1476] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7253'. [ 937.663780][ T1482] lo speed is unknown, defaulting to 1000 [ 937.671976][ T1476] bond0: option arp_all_targets: invalid value (196616) [ 937.690475][ T1484] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.7256'. [ 937.741634][ T1485] netlink: 'syz.2.7255': attribute type 2 has an invalid length. [ 937.741907][ T1475] tipc: Resetting bearer [ 937.749383][ T1485] netlink: 'syz.2.7255': attribute type 1 has an invalid length. [ 937.763864][ T1485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7255'. [ 937.772372][ T1484] netlink: zone id is out of range [ 937.792788][ T1484] netlink: zone id is out of range [ 937.818400][ T1484] netlink: zone id is out of range [ 937.828271][ T1484] netlink: zone id is out of range [ 937.890920][ T1484] netlink: zone id is out of range [ 937.909577][ T1484] netlink: get zone limit has 8 unknown bytes [ 937.938237][ T1475] tipc: Disabling bearer [ 937.988677][ T1482] lo speed is unknown, defaulting to 1000 [ 938.161118][ T1504] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7259'. [ 938.163712][ T1488] lo speed is unknown, defaulting to 1000 [ 938.216459][ T1507] netlink: 596 bytes leftover after parsing attributes in process `syz.0.7261'. [ 938.338864][ T1510] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 938.555955][ T1516] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7263'. [ 938.696741][ T1518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7263'. [ 939.246007][ T1488] lo speed is unknown, defaulting to 1000 [ 939.754831][ T1540] netlink: 'syz.3.7271': attribute type 5 has an invalid length. [ 940.032031][ T1548] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 940.140089][ T1548] netlink: 'syz.3.7273': attribute type 1 has an invalid length. [ 940.563142][ T1565] netlink: 'syz.2.7279': attribute type 10 has an invalid length. [ 940.583354][ T1566] netlink: 'syz.2.7279': attribute type 10 has an invalid length. [ 940.785150][ T1565] lo speed is unknown, defaulting to 1000 [ 940.861171][ T1575] ip6tnl0: Caught tx_queue_len zero misconfig [ 941.380777][ T1565] lo speed is unknown, defaulting to 1000 [ 941.399834][ T1566] lo speed is unknown, defaulting to 1000 [ 942.168777][ T1619] netlink: 'syz.3.7294': attribute type 1 has an invalid length. [ 942.182196][ T1619] netlink: 'syz.3.7294': attribute type 1 has an invalid length. [ 942.417570][ T1599] lo speed is unknown, defaulting to 1000 [ 942.417772][ T1566] lo speed is unknown, defaulting to 1000 [ 942.486354][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.505461][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.628158][ T1628] tipc: Started in network mode [ 942.633554][ T1628] tipc: Node identity 7e8dba4b32ca, cluster identity 4711 [ 942.651503][ T1628] tipc: Enabled bearer , priority 0 [ 942.682204][ T1622] syzkaller0: entered promiscuous mode [ 942.694789][ T1622] syzkaller0: entered allmulticast mode [ 942.716514][ T1620] tipc: Resetting bearer [ 942.745312][ T1620] tipc: Disabling bearer [ 942.873355][ T1637] __nla_validate_parse: 12 callbacks suppressed [ 942.873374][ T1637] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7297'. [ 942.966529][ T1639] validate_nla: 1 callbacks suppressed [ 942.966549][ T1639] netlink: 'syz.6.7298': attribute type 1 has an invalid length. [ 942.989635][ T1639] netlink: 228 bytes leftover after parsing attributes in process `syz.6.7298'. [ 943.035159][ T1599] lo speed is unknown, defaulting to 1000 [ 943.525605][ T1650] v: renamed from ip6_vti0 [ 943.621635][ T1652] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7303'. [ 943.637609][ T1654] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7304'. [ 943.640877][ T1652] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7303'. [ 943.938462][ T1665] netlink: 'syz.3.7307': attribute type 1 has an invalid length. [ 943.949924][ T1665] netlink: 'syz.3.7307': attribute type 3 has an invalid length. [ 943.958126][ T1665] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7307'. [ 944.247349][ T1676] netlink: 'syz.4.7310': attribute type 12 has an invalid length. [ 944.257562][ T1676] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.7310'. [ 944.355989][ T1676] netlink: 'syz.4.7310': attribute type 13 has an invalid length. [ 944.822124][ T1695] netlink: 'syz.3.7314': attribute type 7 has an invalid length. [ 945.057567][ T1705] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7315'. [ 945.083720][ T1708] netlink: 'syz.4.7317': attribute type 7 has an invalid length. [ 945.100855][ T1708] netlink: 'syz.4.7317': attribute type 8 has an invalid length. [ 945.114701][ T1708] netlink: 'syz.4.7317': attribute type 4 has an invalid length. [ 945.178348][ T1708] netlink: 176 bytes leftover after parsing attributes in process `syz.4.7317'. [ 945.193000][ T1705] lo speed is unknown, defaulting to 1000 [ 945.534811][ T1717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7318'. [ 945.586698][ T1705] lo speed is unknown, defaulting to 1000 [ 945.717860][ T1724] netlink: 'syz.3.7320': attribute type 13 has an invalid length. [ 946.551171][ T1767] lo: entered allmulticast mode [ 946.616136][ T1767] dvmrp1: entered allmulticast mode [ 946.704536][ T1766] lo: left allmulticast mode [ 946.709403][ T1766] dvmrp1: left allmulticast mode [ 946.740110][ T1758] lo speed is unknown, defaulting to 1000 [ 947.149494][ T1768] lo speed is unknown, defaulting to 1000 [ 947.603944][ T1768] lo speed is unknown, defaulting to 1000 [ 947.612142][ T1758] lo speed is unknown, defaulting to 1000 [ 947.840490][ T1790] delete_channel: no stack [ 948.107248][ T1795] lo speed is unknown, defaulting to 1000 [ 948.386400][ T1803] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 949.012929][ T1830] __nla_validate_parse: 5 callbacks suppressed [ 949.012950][ T1830] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.7350'. [ 949.173739][ T1830] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7350'. [ 949.640149][ T1795] lo speed is unknown, defaulting to 1000 [ 949.945603][ T1843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7353'. [ 949.976366][ T1843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7353'. [ 950.584879][ T1847] lo speed is unknown, defaulting to 1000 [ 951.141183][ T1878] tipc: New replicast peer: 255.255.255.255 [ 951.149778][ T1878] tipc: Enabled bearer , priority 10 [ 952.142950][T19263] tipc: Node number set to 1279769163 [ 952.196741][ T1847] lo speed is unknown, defaulting to 1000 [ 952.199219][ T1910] tipc: Enabled bearer , priority 0 [ 952.218006][ T1911] syzkaller0: entered promiscuous mode [ 952.233686][ T1911] syzkaller0: entered allmulticast mode [ 952.581805][ T1909] tipc: Resetting bearer [ 952.685682][ T1909] tipc: Disabling bearer [ 953.026449][ T1907] bridge0: port 1(erspan0) entered blocking state [ 953.034032][ T1907] bridge0: port 1(erspan0) entered disabled state [ 953.049338][ T1907] erspan0: entered allmulticast mode [ 953.073780][ T1907] erspan0: entered promiscuous mode [ 953.119058][ T1922] erspan0: left allmulticast mode [ 953.134055][ T1922] erspan0: left promiscuous mode [ 953.143443][ T1922] bridge0: port 1(erspan0) entered disabled state [ 953.218258][ T1927] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7374'. [ 953.230364][ T1926] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7376'. [ 953.263437][ T1926] validate_nla: 2 callbacks suppressed [ 953.263455][ T1926] netlink: 'syz.2.7376': attribute type 1 has an invalid length. [ 953.451159][ T1930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7376'. [ 953.514275][ T1926] 8021q: adding VLAN 0 to HW filter on device bond4 [ 953.610932][ T1929] bond4: (slave gretap2): making interface the new active one [ 953.661066][ T1935] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7378'. [ 953.693510][ T1929] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 953.753852][ T1930] macsec1: entered promiscuous mode [ 953.759123][ T1930] bond0: entered promiscuous mode [ 953.764579][ T1930] bond_slave_0: entered promiscuous mode [ 953.770399][ T1930] bond_slave_1: entered promiscuous mode [ 953.776890][ T1930] team0: entered promiscuous mode [ 953.782248][ T1930] team_slave_0: entered promiscuous mode [ 953.788094][ T1930] team_slave_1: entered promiscuous mode [ 953.794955][ T1930] bond1: entered promiscuous mode [ 953.805352][ T1930] bond0: left promiscuous mode [ 953.810161][ T1930] bond_slave_0: left promiscuous mode [ 953.816156][ T1930] bond_slave_1: left promiscuous mode [ 953.822591][ T1930] team0: left promiscuous mode [ 953.827390][ T1930] team_slave_0: left promiscuous mode [ 953.840490][ T1930] team_slave_1: left promiscuous mode [ 953.846412][ T1930] bond1: left promiscuous mode [ 954.068137][ T1947] netlink: 'syz.4.7380': attribute type 1 has an invalid length. [ 954.274161][ T1947] bridge0: port 1(vlan0) entered blocking state [ 954.305215][ T1947] bridge0: port 1(vlan0) entered disabled state [ 954.328841][ T1947] vlan0: entered allmulticast mode [ 954.334674][T20529] Bluetooth: hci2: command 0x041b tx timeout [ 954.345920][ T1947] bridge0: entered allmulticast mode [ 954.445161][ T1947] vlan0: left allmulticast mode [ 954.457629][ T1947] bridge0: left allmulticast mode [ 954.855361][ T1979] lo speed is unknown, defaulting to 1000 [ 954.877510][ T1984] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 954.917978][ T1986] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7389'. [ 954.924470][ T1984] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7387'. [ 954.944251][ T1986] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7389'. [ 954.974641][ T1984] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7387'. [ 955.026393][ T1990] netlink: 'syz.4.7391': attribute type 4 has an invalid length. [ 955.045240][ T1988] tipc: Enabled bearer , priority 0 [ 955.070120][ T1988] syzkaller0: entered promiscuous mode [ 955.103164][ T1988] syzkaller0: entered allmulticast mode [ 955.131123][ T1997] bond0: (slave team0): Releasing backup interface [ 955.182940][ T1995] delete_channel: no stack [ 955.203801][ T1997] bond0: (slave bond_slave_0): Releasing backup interface [ 955.221529][ T1997] bond0: (slave bond_slave_1): Releasing backup interface [ 955.243408][ T1997] team0: Port device team_slave_0 removed [ 955.260086][ T1997] team0: Port device team_slave_1 removed [ 955.276729][ T1997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 955.288611][ T1997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 955.306970][ T1997] batman_adv: batadv0: Removing interface: ip6gretap1 [ 955.317757][ T1997] team0: Port device bond1 removed [ 955.332625][ T1997] bond4: (slave gretap2): Releasing active interface [ 955.358382][ T1979] lo speed is unknown, defaulting to 1000 [ 955.380916][ T1987] tipc: Resetting bearer [ 955.440729][ T1987] tipc: Disabling bearer [ 955.468767][ T2010] netlink: 176 bytes leftover after parsing attributes in process `syz.4.7395'. [ 955.514274][ T2010] netlink: 176 bytes leftover after parsing attributes in process `syz.4.7395'. [ 955.861116][ T2022] lo speed is unknown, defaulting to 1000 [ 956.148153][ T2037] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7398'. [ 956.529810][ T2022] lo speed is unknown, defaulting to 1000 [ 956.789226][ T2044] lo speed is unknown, defaulting to 1000 [ 956.836356][ T2046] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7401'. [ 957.243381][ T2055] netlink: 'syz.0.7405': attribute type 21 has an invalid length. [ 957.519143][ T1318] nci: nci_rx_work: unknown MT 0x1 [ 957.566273][ T2044] lo speed is unknown, defaulting to 1000 [ 958.350393][ T2070] netlink: 26 bytes leftover after parsing attributes in process `syz.6.7408'. [ 958.574964][ T2079] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7411'. [ 958.977853][ T2094] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 959.004837][ T2094] syzkaller1: linktype set to 778 [ 959.354573][ T2113] lo speed is unknown, defaulting to 1000 [ 960.168097][ T2113] lo speed is unknown, defaulting to 1000 [ 960.642039][ T2141] pim6reg1: entered promiscuous mode [ 960.649714][ T2141] pim6reg1: entered allmulticast mode [ 960.866620][ T2144] geneve0: entered promiscuous mode [ 960.880174][ T1324] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 960.917157][ T1324] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 960.931104][ T2149] __nla_validate_parse: 2 callbacks suppressed [ 960.931124][ T2149] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7430'. [ 960.939558][ T2152] tipc: Enabling of bearer rejected, failed to enable media [ 960.965883][ T1324] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 960.980313][ T1324] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 961.009717][ T1324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.020304][ T2149] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7430'. [ 961.065957][ T1324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.281812][ T2166] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7431'. [ 961.966995][ T2193] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7439'. [ 961.982829][ T2197] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7438'. [ 962.340798][ T2212] netlink: 112 bytes leftover after parsing attributes in process `syz.3.7444'. [ 962.384937][ T2212] netlink: 112 bytes leftover after parsing attributes in process `syz.3.7444'. [ 962.453798][ T2214] lo speed is unknown, defaulting to 1000 [ 962.587968][ T2218] netlink: 'syz.3.7445': attribute type 10 has an invalid length. [ 962.620700][ T2218] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7445'. [ 962.666090][ T2218] dummy0: entered promiscuous mode [ 962.686847][ T2218] bridge0: port 1(dummy0) entered blocking state [ 962.709414][ T2218] bridge0: port 1(dummy0) entered disabled state [ 962.726899][ T2218] dummy0: entered allmulticast mode [ 963.166003][ T2235] netlink: 88 bytes leftover after parsing attributes in process `syz.3.7450'. [ 963.235576][ T2240] veth0: entered promiscuous mode [ 963.245427][ T2240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7452'. [ 963.246879][ T2214] lo speed is unknown, defaulting to 1000 [ 963.315386][ T2240] veth0 (unregistering): left promiscuous mode [ 963.379502][ T2243] netlink: 'syz.3.7453': attribute type 1 has an invalid length. [ 963.756388][ T2261] lo: entered allmulticast mode [ 963.848143][ T2261] dvmrp8: entered allmulticast mode [ 964.096542][ T2260] lo: left allmulticast mode [ 964.102279][ T2260] dvmrp8: left allmulticast mode [ 964.166882][ T2280] tipc: Enabled bearer , priority 0 [ 964.219291][ T2280] syzkaller0: entered promiscuous mode [ 964.227784][ T2280] syzkaller0: entered allmulticast mode [ 964.259061][ T2280] tipc: Resetting bearer [ 964.272533][ T2279] tipc: Resetting bearer [ 964.331931][ T2279] tipc: Disabling bearer [ 965.046615][ T2311] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 965.062855][ T2311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 965.387531][ T2325] netlink: 'syz.2.7474': attribute type 21 has an invalid length. [ 965.619900][ T2327] syz_tun: entered allmulticast mode [ 965.628164][ T2327] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 966.067016][ T2353] __nla_validate_parse: 9 callbacks suppressed [ 966.067035][ T2353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7482'. [ 966.126039][ T2352] lo speed is unknown, defaulting to 1000 [ 966.214083][ T2357] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7483'. [ 966.340812][ T2357] ip6gre0: entered promiscuous mode [ 966.355117][ T2357] ip6gre0: entered allmulticast mode [ 966.387270][ T2350] tipc: Enabling of bearer rejected, already enabled [ 966.523645][ T2362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7484'. [ 966.654778][ T2352] lo speed is unknown, defaulting to 1000 [ 966.792211][ T2366] netlink: 72 bytes leftover after parsing attributes in process `syz.6.7485'. [ 966.862824][ T2372] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7486'. [ 967.089186][ T2378] lo speed is unknown, defaulting to 1000 [ 967.413399][ T2378] lo speed is unknown, defaulting to 1000 [ 967.772356][ T2389] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7491'. [ 967.783988][ T2389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7491'. [ 970.484385][ T2391] syz_tun: left allmulticast mode [ 970.553537][ T2387] lo speed is unknown, defaulting to 1000 [ 970.584629][ T2397] netlink: 'syz.0.7493': attribute type 5 has an invalid length. [ 970.825636][ T2406] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612) [ 970.836860][ T2406] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 970.873633][ T2406] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612) [ 970.901909][ T2406] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 970.929095][ T2413] lo: entered allmulticast mode [ 970.949247][ T2413] dvmrp8: entered allmulticast mode [ 970.959224][ T2413] netlink: 'syz.6.7496': attribute type 23 has an invalid length. [ 971.074186][ T2404] lo: left allmulticast mode [ 971.078979][ T2404] dvmrp8: left allmulticast mode [ 971.118491][ T2387] lo speed is unknown, defaulting to 1000 [ 972.022856][ T2440] rdma_rxe: rxe_newlink: failed to add veth1_to_hsr [ 972.101007][ T2445] nbd: must specify at least one socket [ 973.205970][ T2488] syzkaller1: entered promiscuous mode [ 973.213382][ T2496] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7516'. [ 973.229804][ T2488] syzkaller1: entered allmulticast mode [ 973.450038][ T2488] lo speed is unknown, defaulting to 1000 [ 973.490972][ T2508] tipc: Enabled bearer , priority 0 [ 973.500850][ T2508] syzkaller0: entered promiscuous mode [ 973.522968][ T2508] syzkaller0: entered allmulticast mode [ 973.547245][ T2511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7518'. [ 973.626322][ T2508] tipc: Resetting bearer [ 973.670172][ T2517] netlink: 'syz.3.7519': attribute type 1 has an invalid length. [ 973.825808][ T2517] 8021q: adding VLAN 0 to HW filter on device bond2 [ 973.849896][ T2528] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7521'. [ 973.866136][ T2488] lo speed is unknown, defaulting to 1000 [ 973.905168][ T2508] tipc: Resetting bearer [ 973.979102][ T2508] tipc: Disabling bearer [ 974.058614][ T2531] netlink: 'syz.3.7523': attribute type 1 has an invalid length. [ 974.067631][ T2534] netlink: 'syz.3.7523': attribute type 1 has an invalid length. [ 974.268935][ T2531] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 974.272593][ T2534] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 974.448163][ T2558] pim6reg: entered allmulticast mode [ 974.478088][ T2560] netlink: 248 bytes leftover after parsing attributes in process `syz.3.7527'. [ 974.586840][ T2561] pim6reg: left allmulticast mode [ 974.825971][ T2573] netlink: 52 bytes leftover after parsing attributes in process `syz.6.7529'. [ 974.998133][ T2563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7528'. [ 975.202812][ T2589] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7532'. [ 975.675580][ T2598] syzkaller0: entered promiscuous mode [ 975.706070][ T2598] syzkaller0: entered allmulticast mode [ 975.742024][ T2596] lo speed is unknown, defaulting to 1000 [ 976.327519][ T2608] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7536'. [ 979.726033][ T2596] lo speed is unknown, defaulting to 1000 [ 979.844535][ T2626] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7539'. [ 979.853470][ T2628] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7541'. [ 979.870871][ T2625] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7540'. [ 980.247705][ T2653] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 980.712403][ T2670] lo speed is unknown, defaulting to 1000 [ 980.760146][ T2675] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 980.782501][ T2674] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 980.803121][ T2676] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7551'. [ 981.168873][ T2701] netlink: 'syz.4.7553': attribute type 1 has an invalid length. [ 981.482247][ T2670] lo speed is unknown, defaulting to 1000 [ 981.706703][ T2721] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 981.863006][ T2724] netlink: 'syz.0.7558': attribute type 13 has an invalid length. [ 981.894200][ T2724] netlink: 'syz.0.7558': attribute type 17 has an invalid length. [ 981.915637][ T2727] tipc: Enabled bearer , priority 0 [ 981.965546][ T2724] erspan0: left allmulticast mode [ 982.110867][ T2724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.166205][ T2724] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.217269][ T2724] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 982.310245][ T2727] syzkaller0: entered promiscuous mode [ 982.316607][ T2727] syzkaller0: entered allmulticast mode [ 982.327138][ T2727] tipc: Resetting bearer [ 982.470429][ T1318] tipc: Resetting bearer [ 982.526014][ T2726] tipc: Resetting bearer [ 985.373358][ T2726] tipc: Disabling bearer [ 985.414126][ T2740] lo speed is unknown, defaulting to 1000 [ 985.759508][ T2757] netlink: 'syz.0.7563': attribute type 4 has an invalid length. [ 985.854629][ T2740] lo speed is unknown, defaulting to 1000 [ 985.878489][ T2756] lo speed is unknown, defaulting to 1000 [ 986.009624][ T2769] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7566'. [ 986.030927][ T2769] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7566'. [ 986.041104][ T2769] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7566'. [ 986.122862][ T2769] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.7566'. [ 986.135752][ T2768] team0: Mode changed to "broadcast" [ 986.325964][ T2756] lo speed is unknown, defaulting to 1000 [ 986.648390][ T2796] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7573'. [ 986.785186][ T2800] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7575'. [ 986.828783][ T2804] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7576'. [ 987.062545][ T2817] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7578'. [ 987.126454][ T2822] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7579'. [ 987.175484][ T2822] vlan3: entered promiscuous mode [ 987.180969][ T2822] batadv0: entered promiscuous mode [ 987.351441][ T2827] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7579'. [ 988.863443][ T2873] lo speed is unknown, defaulting to 1000 [ 989.364273][ T2873] lo speed is unknown, defaulting to 1000 [ 989.531559][ T2903] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 990.118688][ T2917] bond3: (slave geneve2): Opening slave failed [ 990.813236][ T2941] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 991.355021][ T2962] __nla_validate_parse: 4 callbacks suppressed [ 991.355041][ T2962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7610'. [ 991.394232][ T2960] sctp: [Deprecated]: syz.0.7610 (pid 2960) Use of int in max_burst socket option deprecated. [ 991.394232][ T2960] Use struct sctp_assoc_value instead [ 991.483250][ T2967] netlink: 200 bytes leftover after parsing attributes in process `syz.3.7611'. [ 991.730143][ T2986] netlink: 'syz.3.7617': attribute type 12 has an invalid length. [ 991.744099][ T2986] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.7617'. [ 992.011604][ T3002] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7621'. [ 992.025316][ T3004] netlink: 'syz.4.7622': attribute type 1 has an invalid length. [ 992.061020][ T3007] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7623'. [ 992.097346][ T3007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7623'. [ 992.109505][ T3005] bond5 (unregistering): Released all slaves [ 992.113289][ T3007] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7623'. [ 992.145638][ T3016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7624'. [ 992.146285][ T3004] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 992.181134][ T3016] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 992.336031][ T3024] syzkaller0: entered promiscuous mode [ 992.343031][ T3024] syzkaller0: entered allmulticast mode [ 992.355004][ T3022] netlink: 'syz.2.7626': attribute type 2 has an invalid length. [ 992.368238][ T3022] netlink: 'syz.2.7626': attribute type 1 has an invalid length. [ 992.375591][ T3027] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7628'. [ 992.384737][ T3022] netlink: 'syz.2.7626': attribute type 2 has an invalid length. [ 992.393944][ T3027] veth0_to_bond: entered allmulticast mode [ 992.407715][ T3022] netlink: 'syz.2.7626': attribute type 2 has an invalid length. [ 992.417889][ T3022] netlink: 'syz.2.7626': attribute type 1 has an invalid length. [ 992.437917][ T3022] netlink: 'syz.2.7626': attribute type 1 has an invalid length. [ 992.444382][ T3030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7629'. [ 992.489381][ T3030] syzkaller1: entered promiscuous mode [ 992.495550][ T3030] syzkaller1: entered allmulticast mode [ 992.617243][ T3036] netlink: 'syz.6.7630': attribute type 1 has an invalid length. [ 992.670857][ T3038] [ 992.673236][ T3038] ====================================================== [ 992.680675][ T3038] WARNING: possible circular locking dependency detected [ 992.688780][ T3038] syzkaller #0 Not tainted [ 992.693301][ T3038] ------------------------------------------------------ [ 992.700678][ T3038] syz.2.7631/3038 is trying to acquire lock: [ 992.706763][ T3038] ffffffff8f68e758 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 992.716302][ T3038] [ 992.716302][ T3038] but task is already holding lock: [ 992.723937][ T3038] ffff888144ac8f70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 992.733377][ T3038] [ 992.733377][ T3038] which lock already depends on the new lock. [ 992.733377][ T3038] [ 992.744138][ T3038] [ 992.744138][ T3038] the existing dependency chain (in reverse order) is: [ 992.753417][ T3038] [ 992.753417][ T3038] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 992.761515][ T3038] lock_acquire+0x120/0x360 [ 992.766560][ T3038] _raw_spin_lock_bh+0x36/0x50 [ 992.771873][ T3038] nr_rt_device_down+0x12a/0x720 [ 992.777348][ T3038] nr_device_event+0x137/0x150 [ 992.782726][ T3038] notifier_call_chain+0x1b6/0x3e0 [ 992.788357][ T3038] __dev_notify_flags+0x18d/0x2e0 [ 992.793915][ T3038] netif_change_flags+0xe8/0x1a0 [ 992.799368][ T3038] dev_change_flags+0x130/0x260 [ 992.804733][ T3038] dev_ioctl+0x7b4/0x1150 [ 992.809673][ T3038] sock_do_ioctl+0x22c/0x300 [ 992.815489][ T3038] sock_ioctl+0x576/0x790 [ 992.820519][ T3038] __se_sys_ioctl+0xf9/0x170 [ 992.825780][ T3038] do_syscall_64+0xfa/0x3b0 [ 992.831440][ T3038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.838381][ T3038] [ 992.838381][ T3038] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 992.846204][ T3038] lock_acquire+0x120/0x360 [ 992.851416][ T3038] _raw_spin_lock_bh+0x36/0x50 [ 992.857541][ T3038] nr_rt_device_down+0xa9/0x720 [ 992.862925][ T3038] nr_device_event+0x137/0x150 [ 992.868303][ T3038] notifier_call_chain+0x1b6/0x3e0 [ 992.873941][ T3038] __dev_notify_flags+0x18d/0x2e0 [ 992.879669][ T3038] netif_change_flags+0xe8/0x1a0 [ 992.885136][ T3038] dev_change_flags+0x130/0x260 [ 992.890515][ T3038] dev_ioctl+0x7b4/0x1150 [ 992.895674][ T3038] sock_do_ioctl+0x22c/0x300 [ 992.901225][ T3038] sock_ioctl+0x576/0x790 [ 992.906469][ T3038] __se_sys_ioctl+0xf9/0x170 [ 992.911857][ T3038] do_syscall_64+0xfa/0x3b0 [ 992.916879][ T3038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.923406][ T3038] [ 992.923406][ T3038] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 992.931680][ T3038] validate_chain+0xb9b/0x2140 [ 992.937259][ T3038] __lock_acquire+0xab9/0xd20 [ 992.942823][ T3038] lock_acquire+0x120/0x360 [ 992.948115][ T3038] _raw_spin_lock_bh+0x36/0x50 [ 992.953696][ T3038] nr_remove_neigh+0x25/0xe0 [ 992.959042][ T3038] nr_add_node+0x1d9f/0x2570 [ 992.964477][ T3038] nr_rt_ioctl+0xc12/0xd50 [ 992.969972][ T3038] sock_do_ioctl+0xdc/0x300 [ 992.975024][ T3038] sock_ioctl+0x576/0x790 [ 992.979889][ T3038] __se_sys_ioctl+0xf9/0x170 [ 992.985107][ T3038] do_syscall_64+0xfa/0x3b0 [ 992.990135][ T3038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.996591][ T3038] [ 992.996591][ T3038] other info that might help us debug this: [ 992.996591][ T3038] [ 993.006996][ T3038] Chain exists of: [ 993.006996][ T3038] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 993.006996][ T3038] [ 993.020919][ T3038] Possible unsafe locking scenario: [ 993.020919][ T3038] [ 993.028541][ T3038] CPU0 CPU1 [ 993.034770][ T3038] ---- ---- [ 993.040126][ T3038] lock(&nr_node->node_lock); [ 993.045415][ T3038] lock(nr_node_list_lock); [ 993.052584][ T3038] lock(&nr_node->node_lock); [ 993.060145][ T3038] lock(nr_neigh_list_lock); [ 993.065114][ T3038] [ 993.065114][ T3038] *** DEADLOCK *** [ 993.065114][ T3038] [ 993.073260][ T3038] 1 lock held by syz.2.7631/3038: [ 993.078359][ T3038] #0: ffff888144ac8f70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 993.088300][ T3038] [ 993.088300][ T3038] stack backtrace: [ 993.094637][ T3038] CPU: 0 UID: 0 PID: 3038 Comm: syz.2.7631 Not tainted syzkaller #0 PREEMPT(full) [ 993.094661][ T3038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 993.094672][ T3038] Call Trace: [ 993.094682][ T3038] [ 993.094692][ T3038] dump_stack_lvl+0x189/0x250 [ 993.094714][ T3038] ? __pfx_dump_stack_lvl+0x10/0x10 [ 993.094730][ T3038] ? __pfx__printk+0x10/0x10 [ 993.094760][ T3038] ? stack_trace_save+0x9c/0xe0 [ 993.094781][ T3038] print_circular_bug+0x2ee/0x310 [ 993.094798][ T3038] check_noncircular+0x134/0x160 [ 993.094817][ T3038] validate_chain+0xb9b/0x2140 [ 993.094830][ T3038] ? do_syscall_64+0xfa/0x3b0 [ 993.094853][ T3038] __lock_acquire+0xab9/0xd20 [ 993.094875][ T3038] ? nr_remove_neigh+0x25/0xe0 [ 993.094893][ T3038] lock_acquire+0x120/0x360 [ 993.094910][ T3038] ? nr_remove_neigh+0x25/0xe0 [ 993.094932][ T3038] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 993.094948][ T3038] ? nr_remove_neigh+0x25/0xe0 [ 993.094966][ T3038] _raw_spin_lock_bh+0x36/0x50 [ 993.094984][ T3038] ? nr_remove_neigh+0x25/0xe0 [ 993.095002][ T3038] nr_remove_neigh+0x25/0xe0 [ 993.095021][ T3038] nr_add_node+0x1d9f/0x2570 [ 993.095040][ T3038] ? dev_get_by_name+0x21/0x200 [ 993.095057][ T3038] ? dev_get_by_name+0x21/0x200 [ 993.095072][ T3038] ? dev_get_by_name+0x21/0x200 [ 993.095087][ T3038] ? nr_call_to_digi+0x136/0x1b0 [ 993.095106][ T3038] nr_rt_ioctl+0xc12/0xd50 [ 993.095127][ T3038] ? kasan_quarantine_put+0xdd/0x220 [ 993.095143][ T3038] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 993.095164][ T3038] ? apparmor_capable+0x137/0x1b0 [ 993.095185][ T3038] ? capable+0x89/0xe0 [ 993.095198][ T3038] ? nr_ioctl+0x1b1/0x3b0 [ 993.095214][ T3038] sock_do_ioctl+0xdc/0x300 [ 993.095234][ T3038] ? __pfx_sock_do_ioctl+0x10/0x10 [ 993.095250][ T3038] ? __lock_acquire+0xab9/0xd20 [ 993.095272][ T3038] sock_ioctl+0x576/0x790 [ 993.095289][ T3038] ? __pfx_sock_ioctl+0x10/0x10 [ 993.095306][ T3038] ? __fget_files+0x2a/0x420 [ 993.095318][ T3038] ? __fget_files+0x3a0/0x420 [ 993.095329][ T3038] ? __fget_files+0x2a/0x420 [ 993.095341][ T3038] ? bpf_lsm_file_ioctl+0x9/0x20 [ 993.095358][ T3038] ? __pfx_sock_ioctl+0x10/0x10 [ 993.095374][ T3038] __se_sys_ioctl+0xf9/0x170 [ 993.095391][ T3038] do_syscall_64+0xfa/0x3b0 [ 993.095404][ T3038] ? lockdep_hardirqs_on+0x9c/0x150 [ 993.095418][ T3038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.095431][ T3038] ? clear_bhb_loop+0x60/0xb0 [ 993.095447][ T3038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.095461][ T3038] RIP: 0033:0x7f5ea7d8ebe9 [ 993.095475][ T3038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 993.095487][ T3038] RSP: 002b:00007f5ea8ba9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 993.095503][ T3038] RAX: ffffffffffffffda RBX: 00007f5ea7fc5fa0 RCX: 00007f5ea7d8ebe9 [ 993.095515][ T3038] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000004 [ 993.095524][ T3038] RBP: 00007f5ea7e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 993.095534][ T3038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 993.095543][ T3038] R13: 00007f5ea7fc6038 R14: 00007f5ea7fc5fa0 R15: 00007ffe152fc8c8 [ 993.095565][ T3038]