last executing test programs: 9m7.071589476s ago: executing program 32 (id=153): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f0000000200)=0x6, 0x4) (async) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) (async) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (rerun: 32) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, 0x0) (async) sendmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000380)="8eb30e5c02e37726faa798c32889e83dbabf63ed23cb1058fddea8b0daa4c0f7eda53b434f0db2c239f4dea79ed3ddf239c23f3d65b1090d223956b94215d148d4595f8d76db33ed5964588e610d3b1ab44f8fadd354edcdd8ffe0d194a856d4a524adbf1aa490c4a2ed0b9a539145e7eed67940670c6aa3380d1ada37fe9a29f49baeadad278658e9fa371c51404fbcbf25ffa003cbf226c4c7d0ab3a38b333f2", 0xa1}], 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10000000109900003a00000003000000"], 0x10}}], 0x1, 0x20040050) (async, rerun: 64) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x1, 0x8, 0x201, 0x7fffffff, 0x2, 0x2, 0x32d4, 0x6f}, 0x20) (async, rerun: 64) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000240)={@dev={0xac, 0x14, 0x14, 0x2b}, @rand_addr=0x64010102, 0x0, "282af97c21dfc50dfa8932cdde3b3e8b3b065c749dde29083d5297cb4201b7e9", 0x9, 0x6, 0x3, 0x3}, 0x3c) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 8m23.52557328s ago: executing program 33 (id=856): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_deladdrlabel={0x70, 0x49, 0x0, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x40, 0x0, r3, 0x6}, [@IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @private1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008800}, 0x44010) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f0000000840), &(0x7f0000004880)=@udp=r4}, 0x20) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x14f) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) listen(r4, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) (async) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_deladdrlabel={0x70, 0x49, 0x0, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x40, 0x0, r3, 0x6}, [@IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @private1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008800}, 0x44010) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f0000000840), &(0x7f0000004880)=@udp=r4}, 0x20) (async) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x14f) (async) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) (async) 8m23.387372244s ago: executing program 34 (id=858): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000000000000000000000000000061107e000000000095"], &(0x7f00000005c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) 8m23.298343861s ago: executing program 35 (id=860): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0xc8, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xc8}}, 0x800) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 6m37.841790786s ago: executing program 36 (id=2122): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x244080, 0x0) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f00000000c0)={'\x00', 0x400}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r2, 0x8) accept4(r2, 0x0, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b02805402178006"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x4000010) recvfrom$inet(r5, &(0x7f0000000000)=""/8, 0xfffffffffffffd21, 0x100ca, 0x0, 0xfffffffffffffd25) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r1, @ANYRESOCT=r2], 0x38}, 0x1, 0x300}, 0x20004001) (rerun: 64) 6m37.301583728s ago: executing program 37 (id=2127): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0xff, 0x9, 0x9, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, 0x8000, 0x8000, 0x10000, 0x4f}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x94, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}]}]}, 0x94}, 0x1, 0x0, 0x0, 0xc011}, 0x88000) close(r0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0x228, r5, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88e5}, @NL80211_ATTR_FRAME={0x52, 0x33, @ctrl_frame=@bar={{}, {0x7}, @device_a, @device_a, @multi={{0x1, 0x1, 0x1, 0x0, 0x5}, [{0x0, 0x4, {0x5, 0x7df}, "3ed0023c2244bce7"}, {0x0, 0xd, {0x4, 0xff8}, "a0c230fbdd97afb4"}, {0x0, 0x5, {0xf, 0x6}, "091b29686cfabe61"}, {0x0, 0x1, {0x7, 0x6}, "900f3f35ae554f82"}, {0x0, 0x5, {0x1, 0x783}, "3a0d87a716f66de8"}]}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x18f, 0x33, @mgmt_frame=@reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1}, @broadcast, @device_a, @random="240aeaa6374a", {0x9, 0xf7}}, 0x3b1, 0x7fff, @device_b, {0x0, 0xe, @random="320e3a44ee24a1ecb904562a0fe0"}, @val={0x1, 0x6, [{0x12}, {0xb}, {0x5}, {0x5}, {0x9}, {0x1b}]}, @val={0x2d, 0x1a, {0x2000, 0x0, 0x7, 0x0, {0x0, 0x1, 0x0, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x1, 0x200, 0x3}}, [{0xdd, 0xc6, "8352a038c7b5e13d0c3f27646165acdf6a070587a8caffc2b487e6b02089b4fd0b9c1ad70efc7b74d9915030ab0c6b7e64500516a275227997b519fe361e6bd6f57a49083bb10ff39225f8c3a704b63570335e74a1c56e83522d9432703e5a2eeeb8d5421df56f577f3db94b2b3335ce353dbe8a93a7be4ae548b99276e88cfa1073fb2fe9b61c901d4576f816ff4b031ebfdbacd18d35ba7f741a9d70b485b08d7ddd644bde1e3c9afaf599c629ba5d8f54d65ff801901ee18869357979f8f0ca61a3e2a4bb"}, {0xdd, 0x6b, "0e608c1e536ad8918fe78c5faad950411b652ef960b60c73f5c03738d29f11fba8cce9fdc983dbd4a5abe3ec4e9dcce1a5c297df16bf7844dd7f76b98b24f48b90ff919234190e4c38038305e24e04c6d856c2937f2184a46833f290c4f3672fae4547d9713dde6916ff23"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9100}]}, 0x228}, 0x1, 0x0, 0x0, 0x44003}, 0x4004014) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x1407, 0x200, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x1) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8001}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x100}]}, 0x3c}}, 0x20028800) socket$alg(0x26, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000800)={0x1000, 0x1, 0x8, 0x6}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x5c}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2d}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000090}, 0x800) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x60, 0x1403, 0x100, 0x70bd26, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5f95253082571cc0}, 0x400c800) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000b00), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r8, 0x200, 0x6, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x855}, 0x800) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, r9, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x3c}}, 0x4001) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x6c, r5, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x26}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x2}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x40}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x6}, @NL80211_ATTR_BSS_HT_OPMODE={0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000001) r10 = openat$cgroup_ro(r4, &(0x7f0000000e80)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000f00), r0) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0xb4, r11, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8a}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x99}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x97e6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xeb6c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000010c0)={'pimreg0\x00'}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x68, r1, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x61}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x41}, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r10, &(0x7f0000001400)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000013c0)={&(0x7f0000001280)={0x104, r5, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0xab, 0x33, @mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xe}, @device_a, @device_b, @from_mac, {0xd, 0x5}, @value=@ver_80211n={0x0, 0x7, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @tdls_teardown={0xc, 0x3, {0x20, {0x37, 0x71, {0x6, 0x3, "ad34b1796b4f8cfb80b16bc84314f2fe", "08bd986a22aecd8c4bec871b26c9660f3fbeec86a2ee5380073a9e9ab17443ad", "a57e2626a8ab2933a435eddaabfab44103d3851553f83e2a7520425495adecc2", [{0x4, 0x8, "00decfc8d52d78c2"}, {0x1, 0x5, "cd74ac1e2a"}, {0x4, 0xc, "e840f03ba1809117d72c039e"}]}}, {0x65, 0x12, {@random="4c4a5484cfd1", @broadcast, @broadcast}}}}}}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x19}, @device_b}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xc}, @device_b, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x4142}, @device_b, @random="1998884bc8ce"}}]}, 0x104}, 0x1, 0x0, 0x0, 0x4048081}, 0x40040d1) socket$igmp6(0xa, 0x3, 0x2) 6m21.099542045s ago: executing program 8 (id=2274): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000440)=ANY=[@ANYBLOB="84010000100001000000000000000000ff020000000000000000000000000001fc02000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x184}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0x4) 6m21.084464123s ago: executing program 5 (id=2276): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@kprobe_multi=@syms={0x0, 0x2, &(0x7f00000002c0)=[&(0x7f00000001c0)='GPL\x00', &(0x7f0000000280)='\x00'], 0x0, 0x3}}, 0x30) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x25, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x9c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000340)=0x80000000, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r5}, @CGW_SRC_IF={0x8, 0x9, r5}]}, 0x24}}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) 6m20.728563896s ago: executing program 6 (id=2280): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x7d, &(0x7f0000000080), &(0x7f00000000c0)=0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x0, 0x67, 0x23, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x20, 0x7, 0x8}}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x18, r4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, r3, 0x801, 0x100400, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48054}, 0x0) 6m19.176258859s ago: executing program 5 (id=2281): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000004004880140001801000108004000f800800020010000000080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r1, 0x0, 0x0, 0x48094) socket$alg(0x26, 0x5, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000016c0)=[{{&(0x7f0000001300)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001340)='Y', 0x1}, {0x0, 0x18}], 0x2}}], 0x1, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) 6m19.116057522s ago: executing program 6 (id=2283): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000032, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) 6m19.114988364s ago: executing program 8 (id=2284): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r1, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@volatile={0x7, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x61, 0x2e, 0x0, 0x30, 0x5f]}}, &(0x7f00000004c0)=""/157, 0x2b, 0x9d, 0x0, 0x80000001}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x3ff, 0x0}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) (async) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000005, 0x4010, r6, 0xe44a0000) close(r6) (async) close(r6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)='%pi6 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001700), &(0x7f0000001740)}, 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r9, &(0x7f0000000140)=[{&(0x7f0000000200)='F', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{}, &(0x7f00000017c0), &(0x7f0000001800)='%pS \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000017c0), &(0x7f0000001800)='%pS \x00'}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001880)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x50, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) (async) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001880)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x50, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x16, 0x2a, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0xfffffff8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x8, 0x2, 0x0, 0xffff, 0xffffffff}, @alu={0x0, 0x0, 0xe, 0x8, 0x6, 0x109, 0xfffffffffffffff0}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x28}, @ldst={0x2, 0x1, 0x4, 0x3, 0x5, 0x100, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x10001, 0x1000, &(0x7f0000000700)=""/4096, 0x41000, 0x0, '\x00', 0x0, @flow_dissector=0x11, r3, 0x8, &(0x7f0000000400)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x9, 0x1, 0x1}, 0x10, r4, r6, 0x4, &(0x7f0000001900)=[r7, 0x1, 0x1, r8, 0x1, 0x1, r9, r10, r11, 0xffffffffffffffff], &(0x7f0000001940)=[{0x2, 0x2, 0x0, 0x8}, {0x0, 0x6, 0x5}, {0x5, 0x4, 0xb, 0x4}, {0x4, 0x3, 0x10, 0xc}], 0x10, 0x3}, 0x94) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) 6m18.904784232s ago: executing program 5 (id=2286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x80) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r3 = accept4$unix(r2, 0x0, 0x0, 0x800) recvfrom$unix(r3, &(0x7f0000000140)=""/248, 0xf8, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x38}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m18.803010778s ago: executing program 8 (id=2288): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8}, @IFLA_BOND_MIN_LINKS={0x8}]}}}]}, 0x44}}, 0x40) 6m18.802049654s ago: executing program 6 (id=2289): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xfff0, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x4, 0xfffffff7, 0x7, 0x27, 0x4, 0x2, 0x4}, 0x1c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) getsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m18.727715798s ago: executing program 8 (id=2291): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x49) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x9}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000280)="0000000016001400060000", 0xb}, {0x0}], 0x2}, 0x4040010) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd62}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000037c0)=@bpf_ext={0x1c, 0xf, &(0x7f00000025c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf0c3, r3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@empty, @in=@empty, 0x4e22, 0xd39c, 0x4e20, 0x7ff, 0x2, 0x50, 0x20, 0x16, r4, r5}, {0x8000000000000004, 0xace, 0x5580000000000000, 0x8000000000000001, 0x1, 0x2, 0x2, 0x5}, {0x3, 0x3ff, 0x100000000, 0x8c8}, 0xaf1, 0x6e6bb8, 0x1, 0x1, 0x3, 0x3}, {{@in6=@private1, 0x4d3, 0x32}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3, 0x0, 0x8, 0x8, 0x5, 0xb}}, 0xe8) 6m18.660000138s ago: executing program 5 (id=2292): socket(0x25, 0x4, 0xfffffffe) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40480d5}, 0x4000000) 6m18.65901677s ago: executing program 6 (id=2294): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x80}, {}, {0x1, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x72}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x72}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_REASON={0xfffffffffffffe98, 0x12, 0x38}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4004044) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) (async) connect$inet(r4, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) splice(r4, 0x0, r3, 0x0, 0xfea8, 0xa) (async) splice(r4, 0x0, r3, 0x0, 0xfea8, 0xa) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000004c0)={@dev, @multicast1, 0x0}, &(0x7f0000000500)=0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r8, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xffffff1f, 0x2000000}}, 0x20) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r8, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xffffff1f, 0x2000000}}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) (async) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r12], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x1293, 0x0, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x11, 0xcdc, 0x2be3, 0x0, 0x8, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x11, 0xcdc, 0x2be3, 0x0, 0x8, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x14, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7}, [@map_fd={0x18, 0x0, 0x1, 0x0, r3}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}]}, &(0x7f0000000380)='syzkaller\x00', 0x401, 0x8f, &(0x7f00000003c0)=""/143, 0x41000, 0x38, '\x00', r7, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0xd, 0x1ff, 0x8001}, 0x10, 0xffffffffffffffff, r8, 0x3, &(0x7f0000000740)=[0x1, r9, r0, r12, r13, r14], &(0x7f0000000780)=[{0x1, 0x1, 0x2, 0x6}, {0x0, 0x3, 0xd, 0x2}, {0x5, 0x5, 0x4, 0x2}], 0x10, 0xfffffffc}, 0x94) 6m18.560698607s ago: executing program 8 (id=2296): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000004004880140001801000108004000f800800020010000000080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r1, 0x0, 0x0, 0x48094) socket$alg(0x26, 0x5, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000016c0)=[{{&(0x7f0000001300)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001340)='Y', 0x1}, {0x0, 0x18}], 0x2}}], 0x1, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) 6m18.508043252s ago: executing program 5 (id=2297): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r0, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r1, 0x24, 0x0, 0x6, &(0x7f0000000240)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) socketpair(0x16, 0xa, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r3 = gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x403, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x10d39, 0x55223}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x406c406}, 0x0) (async) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000080)=0xbd11, &(0x7f00000000c0)=0x4) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@nat={'nat\x00', 0x1b, 0x2, 0x468, 0x590, 0x270, 0xffffffff, 0x0, 0xf0, 0x590, 0x590, 0xffffffff, 0x590, 0x590, 0x5, 0x0, {[{{@ipv6={@loopback, @private2, [], [], 'veth1_virt_wifi\x00', 'tunl0\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@private0, @ipv4=@empty, @gre_key=0x9, @icmp_id}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [], [0x0, 0x0, 0x0, 0xff], 'dvmrp1\x00', 'netpci0\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x28}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x8, @ipv6=@loopback, @ipv4=@loopback, @gre_key=0x8000, @gre_key=0xfffd}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b10c2b32d88332bae7eeec407d5b77fe6e35fc4922b23a0007d5e70f0891"}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1b}, @local, [], [], 'batadv_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x4c8) (async) setsockopt$sock_int(r5, 0x1, 0x22, &(0x7f0000000100)=0xfffffffd, 0x4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001600010a00000080fedbdf25020000000400ec00210002003c124be7b3cf68b3d2a388ccd403f8235807f9ee6fdbf382071c8412f87a7fbeab7d434afbd14e93bcaf70902426c66e32b33caa29824ff62d5baf745d59eab4aafebd2bca6c444ffb80f7057eb41c87429019877e5b1d1787aceb8cae0f10a2669d71"], 0x1c}}, 0x0) 6m18.424452782s ago: executing program 6 (id=2298): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0xa4, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0x9}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0xd, 0x1, 0x6, 0x80, 0x0, 0x6, 0xfffb, 0x2, [{0xca, 0xe, 0xf}, {0xfff, 0x4, 0x7, 0x7}, {0xb, 0xe2a7, 0x8c18}, {0xfffffffa, 0xa678, 0x4}, {0x5, 0x2, 0x9, 0x1}, {0x1, 0x8c1c, 0x907, 0x8001}]}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004080}, 0x40d0) (async) socket$unix(0x1, 0x2, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m18.179930912s ago: executing program 5 (id=2301): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@getneightbl={0x14, 0x42, 0x800, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r5, 0x40107447, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 6m18.178666298s ago: executing program 6 (id=2302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000030000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000040000000060a010400000000000000000100000008000b400000000018000480140001800b0001006578746864720000040002800900010073797a3000000000140000001100010000000000000000000700000a"], 0xb4}}, 0x0) 6m17.745001967s ago: executing program 38 (id=2301): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@getneightbl={0x14, 0x42, 0x800, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r5, 0x40107447, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 6m17.725093729s ago: executing program 8 (id=2306): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x8000f28, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="28f94174f9f5ffff07003d"], 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000400)="1333", 0x2}], 0x1, 0x1) 6m17.611140625s ago: executing program 39 (id=2306): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x8000f28, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="28f94174f9f5ffff07003d"], 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000400)="1333", 0x2}], 0x1, 0x1) 6m17.567756255s ago: executing program 40 (id=2302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000030000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000040000000060a010400000000000000000100000008000b400000000018000480140001800b0001006578746864720000040002800900010073797a3000000000140000001100010000000000000000000700000a"], 0xb4}}, 0x0) 2m8.890772684s ago: executing program 1 (id=4620): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x2000) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x8, 0x1, 0xa, @vifc_lcl_ifindex=r2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000e00000000000000000"], 0x48) r5 = socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="c56afee0a08d945f115312dc8f0132ea78f9138e77f9aa1831ff2ee6be157baf82e06f7218da5aaa8148eafc86f3feb1157bfe2e66e3da28a4b53352f4b7da13091fda920dd3ecfb73ba8e5de6f1f4519ba500243b7ce7ebcc20855dff680ce7959a214f43f6a95c88185f4d285f41e5d66b0ec3e6fa4de436d1b6134ca0fc656e66f4d2e642c5d9ace13428f4cbb556bf7df470fedd7873254b", @ANYRES64=r1], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r4, &(0x7f0000000800), &(0x7f00000001c0)=@tcp=r5, 0x2}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x1d8, 0x5c, 0x160, 0x1d8, 0x3e0, 0x2e8, 0x228, 0x25a, 0x2e8, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0xffffffff, 0x0, 0xffffffff], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0x168, 0x1b0, 0x52020000, {0x0, 0x6802000000000000}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@rand_addr=0x9f, [0xffffff00, 0xffffff, 0xff000000, 0xffffffff], @ipv4=@multicast2, [0xffffff00, 0xff, 0xffffff00, 0xffffffff], @ipv4=@loopback, [0xff, 0xff000000, 0xff000000, 0xffffff], @ipv4=@loopback, [0xff, 0xffffff00], 0x1cb3, 0x4800000, 0x0, 0x4e23, 0x4e22, 0x4e21, 0x4e20, 0x80, 0x1884}, 0x1, 0x107}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x4, 0x0, 0x1, 'pptp\x00', {0x200}}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x3, '\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f00000004c0)=ANY=[@ANYBLOB="2e020000000000000001000708000000030005f7ff0401"], 0x20) sendto$inet6(r6, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000680)={@in={{0x2, 0x2, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0xadf7, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x810, 0xffffffffffffffff, 0x215eb000) socket(0x14, 0x1, 0xf) shutdown(r1, 0x1) sendmmsg$inet6(r7, &(0x7f0000003740)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e22, 0xffffff34, @local}, 0x1c, &(0x7f0000002440)=[{&(0x7f0000000c80)="e0", 0x1}], 0x1}}], 0x2, 0x0) 2m8.828288873s ago: executing program 9 (id=4621): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580020011200000026bd5000fcdbdf2508060a014e244e23f8ffffff03004efbfee467d3f961000000048000090000000800000009000000", @ANYRES32=0x0, @ANYBLOB="0100000003000000040000000b00000009000100f102dcf29e000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) 2m8.721960248s ago: executing program 9 (id=4624): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES16=r1], 0x40}, 0x1, 0x0, 0x0, 0x20044050}, 0x0) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62646c95c716727eb53bcc1379f3d83cd0dfe2066008efa4b0ae", 0x41, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r4, 0x5411, &(0x7f0000005280)) r5 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0xc0) 2m8.660146887s ago: executing program 1 (id=4625): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c, 0x800) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x1, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x13, [{0x3ff}, {0x5}, {}, {0x2, 0x0, 0x1}, {0x6}, {0x4, 0x0, 0x1}, {0x2}, {0x1fdc}, {0xff, 0x0, 0x1}, {0xfff, 0x0, 0x1}, {}, {0x9, 0x0, 0x1}, {0x5f5}, {0x7, 0x0, 0x1}, {0xffffc, 0x0, 0x1}, {0x101, 0x0, 0x1}, {0x4}, {0x4, 0x0, 0x1}, {0xe}, {0xe2}, {0x1, 0x0, 0x1}, {0x2}, {0x101, 0x0, 0x1}, {0x1000}, {0xf30b}, {0xe1e3, 0x0, 0x1}, {0x1}, {0xffc00, 0x0, 0x1}, {0x40, 0x0, 0x1}, {0x2}, {0xf2e}, {0x5, 0x0, 0x1}]}]}, 0xa0}}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x20}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004c084}, 0xd0) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) 2m8.435485455s ago: executing program 9 (id=4629): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34010000", @ANYRES16=r1, @ANYBLOB="0100000000003fc14d7a0100000004000480080002000100000008000100000000000400088008010c8054000b800800090000000000080009000000000008000a0000000000080009000000000008000a00000000000800090000000009"], 0x134}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34010000", @ANYRES16=r1, @ANYBLOB="0100000000003fc14d7a0100000004000480080002000100000008000100000000000400088008010c8054000b800800090000000000080009000000000008000a0000000000080009000000000008000a00000000000800090000000009"], 0x134}}, 0x0) 2m8.43509323s ago: executing program 1 (id=4630): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2}, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="100100004c62556a3a309aaa2f6a", @ANYRES16=r3, @ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x80}, 0x40008055) (async) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003a80)=ANY=[@ANYRES32], 0xe8}}], 0x2, 0x24000801) 2m8.283211414s ago: executing program 1 (id=4634): syz_emit_ethernet(0x58, &(0x7f00000002c0)={@random="9f0fb34289a8", @remote, @val={@val={0x88a8, 0x6, 0x0, 0x1}, {0x8100, 0x1, 0x1, 0x3}}, {@mpls_mc={0x8848, {[{0x4, 0x0, 0x1}], @ipv6=@dccp_packet={0x2, 0x6, "daff06", 0x16, 0x21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], {{0x4e22, 0x4e24, 0x4, 0x1, 0x7, 0x0, 0x0, 0x8, 0x0, "9004e0", 0x80, "75dbe4"}, "cfd440de0671"}}}}}}}, &(0x7f0000000040)={0x1, 0x1, [0x2ad, 0x8a9, 0xad3, 0xb4b]}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syzkaller1\x00', &(0x7f0000000140)=@ethtool_cmd={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800feea, [0x1]}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2daa000000000000711012000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) syz_emit_ethernet(0x58, &(0x7f00000002c0)={@random="9f0fb34289a8", @remote, @val={@val={0x88a8, 0x6, 0x0, 0x1}, {0x8100, 0x1, 0x1, 0x3}}, {@mpls_mc={0x8848, {[{0x4, 0x0, 0x1}], @ipv6=@dccp_packet={0x2, 0x6, "daff06", 0x16, 0x21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], {{0x4e22, 0x4e24, 0x4, 0x1, 0x7, 0x0, 0x0, 0x8, 0x0, "9004e0", 0x80, "75dbe4"}, "cfd440de0671"}}}}}}}, &(0x7f0000000040)={0x1, 0x1, [0x2ad, 0x8a9, 0xad3, 0xb4b]}) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syzkaller1\x00', &(0x7f0000000140)=@ethtool_cmd={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800feea, [0x1]}}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2daa000000000000711012000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) (async) 2m8.245998485s ago: executing program 9 (id=4635): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="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", 0xfffffd6b}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x18d}, 0x0) sendmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x200048c1) (async) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/104, 0x68}, {&(0x7f0000000140)=""/163, 0xa3}], 0x2, 0x7, 0x1) (async) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m8.086793715s ago: executing program 9 (id=4636): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0x380, 0xffffffff, 0xe8, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0xfff, 0x80000001, 0x0, 0x0, 0x52, 0x0, 0x8]}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@CLASSIFY={0x0, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0xa8, 0xd8, 0x0, {}, [@common=@ipv6header={{}, {0x43f75e579204adb5, 0xa5, 0x1}}, @common=@srh={{}, {0x87, 0x0, 0x5, 0x8, 0x10, 0x240, 0x380}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3ed) r1 = socket$kcm(0x10, 0x5, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$netlink(0xffffffffffffffff, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbff, 0x2}, 0xc) bind$inet6(r2, &(0x7f0000000440)={0xa, 0x4e21, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000000}, 0x1c) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000004000)={0x3b, 0x1d, '\x00', [@enc_lim={0x4, 0x1, 0x31}, @jumbo={0xc2, 0x4, 0xa}, @generic={0x76, 0xdd, "75dbf1729b46d9ee1ce1cef69b3505af4feaef5fccd43c46e5583f334e016fdf1d1c9aa0d255294d7e50742a1f1a9ea308ea84dd4fd83c7a8bc4c371fc1b6b223171a1cc0e5eef1c825ebcf99cadc2ecce3152776f15dbf1aaec2776353d9d3cd3997f7923e48e8063310c3d397f03dea9425a6930fe824c7bd79239e7a1dd5e79c995c7c91af0e084bdd2c3f438324babb7cc83c98d736c8c8a826ae92ce0f889d95338f4b190c51a3a833731a167d107e10dbb6c08b08a052c90df248657d71cad2130ebdb6b0c200213a1f0db281e4986a74a3db977e51eb43d6d28"}, @ra={0x5, 0x2, 0x5}]}, 0xf8) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000003e80)=[{{&(0x7f0000000500)=@ax25={{0x3, @rose}, [@remote, @netrom, @null, @default, @bcast, @netrom, @rose, @bcast]}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/239, 0xef}], 0x2, &(0x7f0000001400)=""/4096, 0x1000}, 0xfffff0e9}, {{&(0x7f0000000840)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/40, 0x28}, {&(0x7f00000008c0)=""/79, 0x4f}], 0x2, &(0x7f0000000980)=""/186, 0xba}, 0x6}, {{&(0x7f0000000ac0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000b40)=""/90, 0x5a}, {&(0x7f0000000a40)}, {&(0x7f0000000bc0)=""/37, 0x25}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000000c00)}, {&(0x7f0000000c40)=""/30, 0x1e}, {&(0x7f0000000c80)=""/216, 0xd8}], 0x7}, 0x6}, {{&(0x7f0000000e80)=@rc={0x1f, @none}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000f00)=""/236, 0xec}, {&(0x7f0000001000)=""/206, 0xce}, {&(0x7f0000001100)=""/168, 0xa8}, {&(0x7f0000000e00)=""/55, 0x37}, {&(0x7f00000011c0)=""/56, 0x38}, {&(0x7f0000001200)=""/254, 0xfe}], 0x6, &(0x7f0000003400)=""/39, 0x27}, 0x6}, {{&(0x7f0000003440)=@phonet, 0x80, &(0x7f0000003900)=[{&(0x7f00000034c0)=""/113, 0x71}, {&(0x7f0000003540)=""/115, 0x73}, {&(0x7f00000035c0)=""/132, 0x84}, {&(0x7f0000003680)=""/99, 0x63}, {&(0x7f0000003700)=""/213, 0xd5}, {&(0x7f0000003800)=""/87, 0x57}, {&(0x7f0000003880)=""/116, 0x74}], 0x7, &(0x7f0000003980)=""/248, 0xf8}, 0x6}, {{&(0x7f0000003a80)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000003b00)=""/149, 0x95}, {&(0x7f0000003bc0)=""/116, 0x74}, {&(0x7f0000003c40)=""/91, 0x5b}, {&(0x7f0000003cc0)=""/130, 0x82}, {&(0x7f0000003d80)=""/48, 0x30}], 0x5, &(0x7f0000003e40)=""/29, 0x1d}, 0x4}], 0x6, 0x12021, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f00000013c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001380)={&(0x7f0000000e40)={0x20, r6, 0x101, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r7}, {0x4}}]}, 0x20}}, 0x8800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004100)={{0x14}, [@NFT_MSG_NEWTABLE={0x70, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0x36, 0x6, "d7c111b26d3f51929fca1bbaadd19d9d9e2602954e34ebf77966884dc1dc0c5e5086c30defbb0d156dc0f9fcd479bbbdf6db"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0) socketpair(0x15, 0x1, 0xa7, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bind$xdp(r4, &(0x7f00000004c0)={0x2c, 0x5, r7, 0x5, r9}, 0x10) 2m8.071174609s ago: executing program 1 (id=4637): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@ipv4_delroute={0x24, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {0x2, 0x20, 0x80, 0xcc, 0xfd, 0x2, 0xc8, 0x6, 0x400}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) 2m7.639589363s ago: executing program 1 (id=4640): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000080)={0x5, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}}}, 0x88) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f00000005c0)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000008f00000095"], &(0x7f0000000300)='GPL\x00'}, 0x90) 2m7.31160751s ago: executing program 41 (id=4640): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000080)={0x5, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}}}, 0x88) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f00000005c0)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000008f00000095"], &(0x7f0000000300)='GPL\x00'}, 0x90) 2m7.297532836s ago: executing program 9 (id=4644): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @local}) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (rerun: 32) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x4) close(r4) (async, rerun: 64) r5 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x5, 0xffe0}, {0xffe0, 0xb}, {0xd, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xa8, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4018840) r8 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) (async, rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r10, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d00)={0x28, r11, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r11, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7e}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x61}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x40) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m7.059127787s ago: executing program 42 (id=4644): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @local}) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (rerun: 32) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x4) close(r4) (async, rerun: 64) r5 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x5, 0xffe0}, {0xffe0, 0xb}, {0xd, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xa8, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4018840) r8 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) (async, rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r10, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d00)={0x28, r11, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r11, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7e}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x61}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x40) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 12.064970993s ago: executing program 4 (id=5283): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000100)={@empty, @rand_addr, 0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x74, 0x28, 0x10, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xfff1}, {0x3, 0xb}, {0xa, 0xfff3}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0xacf}}}, @TCA_RATE={0x6, 0x5, {0x17, 0xdb}}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x9c, 0x4}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) r8 = openat$cgroup_int(r3, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x9) r9 = socket$packet(0x11, 0x2, 0x300) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f"], 0x6f4}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg(r9, &(0x7f0000000880)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x20000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x3}, 0x80, 0x0, 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r11, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @multicast1}}}], 0x20, 0x3f}}], 0x1, 0xc0) getsockname$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @local}, &(0x7f0000000400)=0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r13) sendmsg$NL802154_CMD_SET_CHANNEL(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2ca30628fe9d2c1d9e647d92de066997562c8c34bffd15356d3e84af00", @ANYRES16=r14, @ANYBLOB="010025bd7000fcdbdf2509000000050008000400000008000100010000000500070010000000"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x64000) sendmsg$NL802154_CMD_SET_CCA_MODE(r12, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r14, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x10000000) 11.392148669s ago: executing program 4 (id=5292): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r0, &(0x7f0000000100)=@abs={0x27, 0x0, 0x4e23}, 0x6e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x2}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x7, 0x8, 0x3, 0x9}, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000000400000241000000030013"], 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) 10.942929018s ago: executing program 4 (id=5294): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) r4 = openat$cgroup_freezer_state(r3, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f00000001c0)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r4, &(0x7f0000000140)='THAWED\x00', 0x7) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r7], 0x38}}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000001f00)=@newtaction={0x17e4, 0x30, 0x628, 0x70bd2b, 0x25dfdbff, {}, [{0x17d0, 0x1, [@m_pedit={0x1114, 0x1f, 0x0, 0x0, {{0xa}, {0x1004, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x13c, 0x5, 0x0, 0x1, [{0x4}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x100, 0x9, 0x2, 0xe7d, 0x5}, 0x6, 0xc, [{0x0, 0x7, 0x2, 0x7fffffff, 0x9, 0x7}, {0x8, 0x0, 0x8, 0x10, 0x14c7, 0xb5}]}, [{0x6, 0x2, 0x80000000, 0x6, 0x5, 0x5}, {0x4, 0x7, 0x55bd, 0xaa52, 0x3b, 0x1}, {0x8, 0xe4, 0xff9, 0x0, 0x4a09ecf0, 0x53}, {0x7fffffff, 0x3c59, 0x5, 0xfffffbff, 0x477991fa, 0x1}, {0xf, 0x4, 0x0, 0x6, 0x7f, 0x1}, {0x7, 0xa, 0x7, 0xffffffff, 0x0, 0x2}, {0xd9f, 0x37, 0x8, 0x3, 0x5}, {0x145f, 0x1ff, 0xffffff8a, 0x9, 0x2, 0x80000000}, {0x80000000, 0xb4bf, 0x2, 0x6, 0x2, 0x4}, {0xcc9f, 0x5, 0x5, 0x2, 0x8, 0x5}, {0x9, 0x9, 0x1, 0x8, 0x2, 0x3ff}, {0x7, 0x7, 0xffff, 0x0, 0x2, 0x7f}, {0x2b, 0xc, 0x0, 0xc7, 0x68, 0x7fff}, {0xfffffffb, 0x9, 0x0, 0x9, 0x9, 0x1ff}, {0xfff, 0x3, 0xfffffffb, 0x9, 0xe}, {0xe6, 0xe, 0x4, 0x3, 0x0, 0x7ff}, {0x8, 0x8, 0x0, 0x3, 0x400, 0x7}, {0xf, 0x5, 0x4, 0x1, 0x2, 0xffffff29}, {0x80, 0x4, 0x562a, 0x9, 0x1, 0x6857}, {0x6, 0x6, 0x48, 0x2, 0x7, 0x10}, {0x82, 0x7, 0x3, 0x1000, 0x10000, 0x7}, {0x0, 0x7, 0xa, 0x6, 0x8, 0xfffffff6}, {0x5, 0x6, 0x9, 0x7fffffff, 0x7, 0x1}, {0x2, 0x1, 0x10000, 0x4, 0xfff, 0x10}, {0x7, 0x9, 0x47ef, 0x5, 0x0, 0xffffffe5}, {0xba, 0x4, 0x3, 0x80, 0x8, 0x1}, {0x86a8, 0xc6, 0x3, 0xd, 0x6, 0xab64}, {0x4, 0x8, 0x6, 0x80000, 0xd3, 0x2}, {0xccdf, 0x1, 0x7, 0x9, 0x7, 0x10}, {0x0, 0x0, 0x80000001, 0xfffffff7, 0x0, 0x101}, {0xdcf7, 0x9, 0x9, 0x8, 0x2, 0x5}, {0x1, 0x4, 0xe, 0xfffffffa, 0x9, 0x8}, {0x3, 0x4, 0x4, 0x0, 0x5, 0x6}, {0x8, 0x1, 0x7, 0x1000, 0xe27, 0x294}, {0x0, 0x9, 0x9, 0x2, 0xffffffff, 0x7fffffff}, {0x7, 0xff2, 0x5, 0xa0, 0x1813, 0x95}, {0x239, 0xe3ce, 0x7, 0xffff, 0xfffffffa, 0xec9}, {0x7, 0x4, 0x2, 0x6, 0x8, 0xffffeb31}, {0x6, 0x4351, 0x5dc2, 0x4, 0x4, 0x9}, {0x0, 0x5, 0x10000, 0xc, 0x8, 0x7fff}, {0x2, 0x970, 0xe, 0x10, 0x7f, 0x3}, {0x10001, 0x7, 0x1, 0x400, 0x7, 0xd}, {0x2a1f, 0x8, 0x7, 0x5, 0x6ba12c1f, 0x3}, {0xa, 0x1, 0x3, 0x4, 0x7c, 0xfffffff8}, {0x9d, 0x61f0, 0x3, 0x2, 0x1, 0x2}, {0xfffffff7, 0x6, 0x0, 0x7, 0x5, 0x7}, {0x3, 0x1, 0x80000000, 0xa, 0x6911, 0xfffffffd}, {0x1, 0x4, 0x6, 0x7, 0x10001, 0x7}, {0x6, 0x3e, 0x4d3, 0x8, 0x1, 0xfffffff9}, {0x7df6, 0xe, 0xfffffff8, 0x8000, 0x0, 0x2}, {0x800, 0xfa, 0x6, 0x10001, 0x8, 0xfffffff9}, {0x3, 0x200, 0x5, 0x4, 0x3, 0x67}, {0x9, 0x6, 0xf, 0xd56, 0x800, 0xffff5aa8}, {0x8, 0x7, 0x7f, 0x4, 0x530c4000, 0x80000}, {0x401, 0x80000000, 0x8, 0x9, 0x4b, 0x3}, {0x1, 0x4, 0x2, 0x4, 0x790d, 0x7fffffff}, {0xfff, 0xad5e, 0xa2, 0x8, 0x0, 0x1}, {0x6, 0x7, 0x9, 0x1000, 0x3800, 0x6}, {0x10, 0x4, 0x5, 0x7, 0x0, 0x694}, {0x2, 0x1, 0x0, 0x5, 0x8, 0x3}, {0x2, 0x4f4e4c43, 0xbd, 0x4, 0x2, 0xf}, {0x1, 0x1, 0x40, 0xa3, 0xd, 0x7}, {0x8000, 0x7, 0x0, 0xfffffff7, 0x80000001, 0x200}, {0xfad, 0x7, 0x8, 0x9, 0x19, 0xe549}, {0x7ff, 0x7fffffff, 0x4, 0x6, 0x33fe, 0x7}, {0xf, 0xb47, 0x1000, 0xc86, 0x3, 0x1}, {0x1, 0xd9, 0x50a, 0x8, 0x5, 0x8}, {0x4, 0x3, 0x1ff, 0x200, 0x4, 0x2}, {0x8c, 0x7, 0x9, 0x8, 0x0, 0x3}, {0x5, 0x8000, 0xd5, 0x4, 0x3e2, 0x1ff}, {0x1, 0x3, 0xffffff0a, 0x4, 0x5, 0x98d4}, {0x1c, 0x3, 0xd76, 0xd6, 0x8, 0x7}, {0x8, 0x9, 0x9, 0x80000001, 0xc, 0x31}, {0x7, 0x400, 0x80000000, 0x5, 0xd, 0x9}, {0x5661, 0x7, 0x6, 0x32f, 0xfffffffd, 0x4}, {0x7fff, 0xdaa, 0x2, 0x7fff, 0x8, 0x401}, {0x417, 0x7, 0x4, 0xd3, 0xde, 0xd616}, {0x9, 0x0, 0x0, 0x4, 0xffff98de, 0x2}, {0x5, 0x6, 0xa, 0x7, 0x3, 0x4}, {0x3ff, 0x9, 0x101, 0x7, 0xc, 0x7}, {0x1556, 0x9, 0x0, 0x8, 0x6, 0x4}, {0x3, 0x6, 0x2, 0x6, 0xc, 0xff}, {0x8, 0x8, 0x9, 0x5, 0xd7e, 0x6e}, {0x4, 0x52, 0x401, 0x2b, 0x5, 0x4}, {0xff, 0x6, 0x100, 0x2, 0x3, 0x2}, {0xa, 0xf1, 0x40, 0x2, 0x0, 0xfffff801}, {0x2d4b1d6c, 0x800, 0xffffffc0, 0x40, 0x40}, {0x5, 0x6, 0x48, 0x3, 0x6, 0x6}, {0x5, 0x5, 0x6, 0x10, 0x401, 0x7}, {0x8, 0x4, 0x80, 0x0, 0x8, 0x8}, {0x1, 0x80000000, 0x0, 0x2b7d, 0x68000000, 0xdc1}, {0x3, 0x9, 0x2, 0x1, 0x1, 0x40}, {0x0, 0xbe0, 0xfdd, 0x1, 0x0, 0x12e6}, {0x7, 0x6, 0x1, 0xc93, 0x3, 0x19a}, {0x9, 0x2, 0x9, 0x4, 0xa, 0xcf}, {0x8a, 0x1, 0x7, 0x2, 0x6, 0xffff}, {0x9, 0x40, 0x61, 0x7fff, 0x3, 0x691}, {0x0, 0x401, 0x7, 0x6, 0x3, 0x3}, {0xb, 0x9, 0x5, 0x9, 0x3, 0x7}, {0x3e, 0xd9, 0xa8, 0x0, 0x9, 0xc2}, {0x2, 0x1, 0xfffffffd, 0x7fff, 0x5, 0x6}, {0x10000, 0x81, 0x3, 0x4, 0x9, 0xfffffff9}, {0x8, 0x4, 0x8, 0xfef8, 0x8, 0x1}, {0x99c, 0xd, 0x1000, 0x1, 0x9, 0x80000000}, {0x5, 0x9, 0xfffffffa, 0x0, 0x5, 0x3fff80}, {0x9, 0x0, 0x0, 0x9, 0x6, 0xf71}, {0x965, 0x8, 0x40000000, 0xfffffff7, 0x8, 0x8}, {0x5, 0x5, 0x3, 0x10002000, 0x8, 0xb8c}, {0x2d1, 0x7, 0xa, 0xfffffff1, 0x200, 0x9}, {0x7, 0x0, 0x738, 0xffff0001, 0x7, 0x3}, {0x4, 0x7fff, 0x4, 0x7, 0x33, 0x1}, {0x2, 0x80000000, 0x2, 0x0, 0x9, 0x3}, {0x3, 0x8, 0x1, 0x47cf, 0x0, 0x2}, {0x0, 0x8, 0xf, 0x5, 0x3, 0x5}, {0x401, 0x3e, 0x8e9, 0x2, 0x1ff, 0x1ff}, {0xff, 0x98a, 0x80000000, 0x9, 0x9, 0x5}, {0x2, 0x3, 0x6, 0x6, 0x7, 0xfff}, {0x9, 0x8000, 0x2, 0x379c8, 0x9, 0x5}, {0xfffffffa, 0x9d, 0x1, 0x8, 0x4, 0x7}, {0x80000000, 0x0, 0x1, 0x401, 0x1, 0x3}, {0x71, 0x170, 0x2, 0x101, 0x2, 0x7}, {0x10000, 0x5, 0x4f3, 0x7, 0x2, 0xff}, {0x0, 0x80000000, 0x1000, 0x0, 0x40}, {0x5d, 0x8000, 0x8, 0x5, 0x8000, 0x6}, {0x9, 0x1000, 0x40, 0x1, 0xfffffff6, 0x449768c4}, {0x9, 0x46, 0x2, 0x200, 0x4ecd5258, 0x7fffffff}, {0x4, 0x5, 0x9ae, 0xf, 0x5, 0x6}, {0x3, 0xf9, 0x1, 0x7, 0x2, 0x2}], [{0x2}, {0x2}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x7}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x3}, {0x5}, {0x2}, {0x4, 0x2}, {0x4}, {}, {0x2, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x2, 0x1}, {}, {0x3, 0x478bcf79b375814b}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x3}, {}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x3, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x44, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}]}, {0xe6, 0x6, "d5cf4918e65b539aa309452ff7587abfe3a977c19a61c59b5feabbb5b67e1c259a01a1fb233cf80d042066100fd7a372ded2af32847fba4c20f8499bd8648c7f4a24c940cbd4ce5ccfd5b0efefd7129c9b88f0fb12406f3c08bfd2b65e2c98eaac53d6934dd25c60462cb2bbd2f56d68242242eb0d08e206a6b3ad08be6695af57c4cf38bb472ee162234464a509e6ccac63ea68e259ef399935d9a88202a51f2ba8ef3c6a69384b8ae000f2cc97a98af2faee27d3d3effb4259b47b5de237e91b0ffee84b502d6e5702e16de3221483c7351a3d9075d140e378b2b2b440e2754ef7"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_csum={0xdc, 0x10, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d, 0x4, 0xffffffffffffffff, 0xf, 0x1}, 0x4f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x1, 0x862, 0x5}, 0x1f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x0, 0xdbc4, 0x2}, 0x55}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xf0f8, 0x9, 0x4, 0x0, 0xcb89}, 0x36}}]}, {0x3d, 0x6, "4c99b62bdfae5fec2d0885f0ed357c185b82f5b50e39d2ad4b29ef61d7d58a229020ab51c758970e98b833ae531990f5ef48e91ae8d2f2eaa2"}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}, @m_mpls={0x178, 0x12, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xb}, @TCA_MPLS_LABEL={0x8, 0x5, 0xa4498}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x403, 0x0, 0x6, 0x3}, 0x1}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x400, 0x2, 0x6}}}]}, {0xfb, 0x6, "1cf76f7b54301651a053507e894d5f4ec1e92b948a789107f62b42423812c3b487088ed3a2e31409f4572479c0fd4fa1f78eb6cc62e371d71c23856a123bc2e69f704a78b10bc03259ba41c2e2a3e43d7ec4e1c3161bd954fed6f7203d6a3a7a54f0e40d0e867971bbfc98545c005ca2523252fc42c22b83d84b29b3e20e614dfe6a833d25af0cd61bdd6a88f7fbfb73bce657642b30d35cc5fde56b047ff4c6678250a07f55ab03311c2cdf1b0390f5cd7ed74034600ff294a3814c9c5ecddc00e781b1442f29349ead6163b250c991b5cddffdbaf94fb2b2947e101e9ca7f92ef1871c57c5613cc1805bdc8babb6029550bcc661a234"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0x250, 0x8, 0x0, 0x0, {{0x7}, {0x188, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x6f, 0x6, {0x6, 'filter\x00', 0x1, 0x1, "e58306626ffa5d0c54c73112207d52e432cc8b1c5afb042a49329d11dd155b0bca9f040f577e6972f59137d97bfc4b26d4baf626101572b949a8388ded6337e070467011f2"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0xeb, 0x6, {0x1, 'security\x00', 0xbd, 0xfae, "462521d5d465981cc1b6c61cc9f42a62831faf5904f59cfbbd7949e8b9431a9b450f4b9570bf25f06856d104b66db64bf4e172bde853cf84d9fc16016cd5561cb8220eac95fda53bb16aadcedf438be497452e91eb5c1fa87f4447acaf5e5ce1d316258975edef5760caecff317694bda7929902ae3b8ff026aecc54fd66720fc972dcb197502b01c347f5390ea15307612159179a0410e63eace290275d5581553161dbd9529a78cabea6805503668914d9b7aaa3ea3ca0d74e44074e02f96b4f"}}]}, {0xa1, 0x6, "cdad42e94cd5434a360bad102d7ad34247122530a0640656c7582fb1fea960cf34cc46ccb3440b31e4a96b5ea2dbce9e7966f7f00db2b2a611c8a87f6685e416e105afcfa7d0a719aa5151a8302a95022dba4610905cacb2249e05040727b8289d944d79ae1198728544aba56254c971b5f330d2936d9ecca525a2e71cf17de63caf67cafd8a23fcb5dd08fb48af3abac2894975d8717c6cb39df4f328"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0xd0, 0x6, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x9, 0x0, 0x5, 0x8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0xfffffffe, 0x2, 0x0, 0x50000000}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x4, 0x10000000, 0x3, 0x5}}]}, {0x4a, 0x6, "523b2fb5c7115160f916bb8bdbf4bf006b058251ec11dcfbd9aeda8694c291afb6e614064e10429caae12acda57b5169bc23e156250215f55b5c2cf3683f07286e0da53f528e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_vlan={0x144, 0x14, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf9d}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb0c}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x9, 0x1, 0xf, 0x3}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb6b}]}, {0xcc, 0x6, "db1ee5c5885e6ff00690f6117fe635f6a60aec1ad0762663cf82bb4af30d7a4832c38aa1280ee4846b00d90ed7b167906050d2194929bef4272a66f4704b6fadecd391321b50252b18a3baa6c87ccb0e447353854b57607ff6160c1fbe64605e5cf9cf61dc915a79a857f2574878be987ce25382bb2b58dc4d8b0e2b9dc90e3cf5b4d959845ebfdea88817058af57593b35235bf97cd5d520a6e981d93d2df2c8f48e0894a33d87b9a6f34e29829679eabc7eee39b4ced1a3b2112a810474c78ae9abe374715c0c0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x17e4}, 0x1, 0x0, 0x0, 0x4010}, 0x4040000) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r6, 0x101, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c040) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, r10, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x26}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x30}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x368c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x88}, 0x1, 0x0, 0x0, 0x40041}, 0x4) r11 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r11, &(0x7f00000009c0)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000200)="7da5", 0x2}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00\x00'], 0x30, 0x4040081}, 0x90f0) clock_gettime(0x1, &(0x7f0000000080)) 10.731525547s ago: executing program 4 (id=5298): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x2400a040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x120, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x78}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xf}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_DATA={0x20, 0xc5, "f5997470ac23413da83d8de8378e2529675256979d6d735cde436677"}, @NL80211_ATTR_VENDOR_DATA={0xbc, 0xc5, "135277498af1061d359abca03c22df1983313b10d9aa80b92fc96b296d3cd58d2f36cd592c8e16f53c1ab5ce8475c8691ee625a3a61a18618c9f85a1462d9ab4bfaa4d9e96693eae3470f686e9a64e023cadfad9726bd657bf6a7a6744a977b0b17b12281ef54b28c0b0e7b281908f1705270b8aee9f9b922ff3f9a737c83af652dabdaa6ad51480b032fa8ba25e0b49619784f80e450842b43d2845605fc8a98af0350c1d8833f49b1e3a2212e295f3f42f3278deb51b56"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xaff}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048005) 10.335859136s ago: executing program 4 (id=5305): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf2502000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 10.09603426s ago: executing program 4 (id=5309): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x40000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xd, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @loopback}}]}}]}, 0x48}}, 0x4000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000c40)="bad330752181516b2b316f3a277f953286dd", 0x12, 0x2000041, &(0x7f0000000140)={0x11, 0xf, r5, 0x1, 0xd8, 0x6, @link_local}, 0x14) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.280823832s ago: executing program 2 (id=5365): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x76, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) r1 = socket$rds(0x15, 0x5, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "36dad83aea8d"}]}}}}}}, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="760a00000000000061109800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = accept$inet(r3, &(0x7f0000000600), &(0x7f0000000640)=0x10) setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, &(0x7f0000000680)={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, 0x0, "e6d16b7f19bfa65070b44c169bb73e219f280ff400725b5a0c05a1728dcf9fcb", 0x8, 0x3, 0xffff20f7, 0x5}, 0x3c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2800}}, 0x3, 0x0, 0x20000, 0x81, 0xe, 0x0, 0x4}, 0x9c) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/34, 0x22}, {&(0x7f0000000140)=""/248, 0xf8}, {&(0x7f0000000240)=""/187, 0xbb}, {&(0x7f00000003c0)=""/139, 0x8b}], 0x4, &(0x7f00000004c0)=""/211, 0xd3}, 0x40000000) sendto$inet(r3, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg(r3, &(0x7f0000000080)={0x0, 0xfe, 0x0}, 0x12160) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@mask_fadd={0x58, 0x114, 0x8, {{0x9ab1, 0x3}, &(0x7f0000000080)=0x1, 0x0, 0x4, 0xd75, 0x0, 0x8, 0x37, 0x3}}], 0x58}, 0x0) 2.127611764s ago: executing program 2 (id=5366): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a2003200010100000057fc5ad90200fb6a880000d6c9db0000db15d088bd8b7002300e00d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c805bbf9315033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23ded2aa000000", 0xb8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x844}, 0x851) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x292, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x2}, 0x20) 1.998672211s ago: executing program 2 (id=5369): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000380)={0x0, 0x70}}, 0x4081) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0x0, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c000180090001006d617371000000000c00028008000140000000250900010073797a30000000000900020073797a320000000014000000110001"], 0x74}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x2, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0xf}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1.245728312s ago: executing program 3 (id=5375): listen(0xffffffffffffffff, 0xfffffffd) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @restrict]}}, 0x0, 0x32}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xf, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) 1.155053752s ago: executing program 2 (id=5376): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000003c0)=@req={0x2, 0x1ff, 0x4, 0x3}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c2900"/233, @ANYRES32, @ANYRES64=r0, @ANYRES64=r0], 0x144}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=@getpolicy={0xe8, 0x15, 0x100, 0x70bd27, 0x25dfdbfd, {{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x0, 0x4e23, 0x505b, 0xa, 0xa0, 0x20, 0x33, r3, 0xee00}, 0x6e7bb2, 0x1}, [@lifetime_val={0x24, 0x9, {0x9, 0x0, 0x401, 0x7fffffff}}, @algo_comp={0x48, 0x3, {{'lzs\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@mcast1, 0x0, 0x2}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4}, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) (async) accept$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000003c0)=@req={0x2, 0x1ff, 0x4, 0x3}, 0x10) (async) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c2900"/233, @ANYRES32, @ANYRES64=r0, @ANYRES64=r0], 0x144}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=@getpolicy={0xe8, 0x15, 0x100, 0x70bd27, 0x25dfdbfd, {{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x0, 0x4e23, 0x505b, 0xa, 0xa0, 0x20, 0x33, r3, 0xee00}, 0x6e7bb2, 0x1}, [@lifetime_val={0x24, 0x9, {0x9, 0x0, 0x401, 0x7fffffff}}, @algo_comp={0x48, 0x3, {{'lzs\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@mcast1, 0x0, 0x2}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async) 1.135385882s ago: executing program 3 (id=5377): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x71, &(0x7f00000002c0)="1a00000002000000", 0x8) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r9}, &(0x7f0000000200), &(0x7f0000000240)=r6}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r11) sendmsg$IPVS_CMD_NEW_DAEMON(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r12, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="7d195102a62802d0f00329f00c19217ba304b68110e7d312599a6322c1038086a83efbf965f6bc39e3fee8383d993142336236749daaaa14b60d42563609d2851d6d775abe312a82b5207ec45c2cdf345e4545a7c4ce454e3a2701ee57204a11998486c0bcfb8c51353d0bf424234a2efd8888f9e831c60d4a1d54d2dca2ef4424574422cee8db8193ae4905137c640b3827e7be2017a6c0325fe1cc4f41d37d876157c018a06ac1f0e306ec4aa7f26027567040d17682f54fc2915a6d177e72e0698d95367b9c8ba0831f81aaf512561ea26c95e69040fc2834319aa37acc5ad3f4f9d28b2096332624012342d87a51cdc6117ee909ba883231bafa3ee983444469adb8ba4b3131668d9edfa85b1ee070556a0f910c360db32466f0b7565cee55d6c7316d4301989b189da40f7a07f7affb4475b3eb0809cd4e6497b33110a27c7ccb21d25d9ddc901df66e0691c0a9e00bb2a72918c8b9ebe23a67ee25cbf75be05e5d167cff1023dc7f7f68c4f20fa848b1fb22063be5320e3ec2def1c0a87af732a29e3fb7e7877549f2eef2468d", @ANYRES16=r12, @ANYBLOB="04002dbd7000fbdbdf2504000000080006000001000060000180080005000400000014000300fe8000000000000000000000000000aa060004004e220000060004004e22000014000300e000000100000000000000000000000014000300ff020000000000000000000000000001080006006f766600"], 0x7c}}, 0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x8, 0x8, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0) 1.096962248s ago: executing program 0 (id=5378): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x841, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000580)={0x41, 0x0, 0x1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x1, 0x9, 0x0, 0x1}}}}, 0x30}}, 0x40c0) 1.027752294s ago: executing program 2 (id=5379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet6(0xa, 0x1, 0x100) listen(r2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="000086dd8001110004000000a60c6eec00be00642ffffe8000000000000000000000000000aaff0200000000000000000000000000013b02000000000000c910ff020000000000000000000000000001000000000000042088be000000030c000800050086dd88a888be000000021609660501000000000088a8080022eb00020000200cf0080200000000000002000414030800655800000002"], 0x9a) 971.013619ms ago: executing program 3 (id=5380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x8040) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x13}, 0x6}, 0xffffffffffffffcb) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async, rerun: 64) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000010471"], 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async, rerun: 64) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000500)={0x0, "a70ee5b8c2f2bb7351ee21be74d8bd93"}) 890.937532ms ago: executing program 0 (id=5381): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000080)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f00000022c0)=""/4096, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x2, 0x9, 0x8db, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa1}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x38, r4, 0x731, 0x0, 0x20, {0x38}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73, 0x2}}}]}, 0x38}, 0x1, 0x2}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f00000007c0)="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", 0xb89}], 0x1) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002dbd7000fbdbdf2502000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="547f1e51", @ANYRES16=r7, @ANYBLOB="000226bd7000ffdbdf25050000000c000600020000000000000008000a00706369000c000800070000000000000008000a00706369000c00060002000000000000000c0006000200000000000000"], 0x54}}, 0x4) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38}}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r8, 0x0, 0x1, 0x0, &(0x7f0000000380)) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x9) 764.007153ms ago: executing program 3 (id=5382): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000009e149798b0e23034"], 0x3c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYBLOB='\f'], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) (async) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="850095000000000080f5e52d6edf23a2756169295b895d3fd7b16e6e4f715cb42e3922d722f7a32e73ab1e59f7405780d160c32e1dfc1bd5ada6d2f333fa30eb6970d6facb89d0ef3ffe865b64cc8a336076be148db251b32c3262d406f464081104dd3cee7ba0fa4aca7fc3f99634e81b2164f5d4ebcc5f462c7e0ba678c1cdb62fb23aba1ad4ed1234c7f0574e61905efdb1cd5084b90006842036a0a24cbe802967096ecd9f4c61955d7badb6b741b0c582a52d7369a219364206a2f500339c13151518dc85a855e3730696aaff4efce980cbd656f7cc50d85fef36ce9df92d0e0e894fe5dbe414ef"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000080)="98", 0x1, 0x20040841, &(0x7f0000000200)={0xa, 0xffff, 0x0, @rand_addr=' \x01\x00'}, 0x1c) shutdown(r3, 0x1) (async) setsockopt(r3, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30000000006c000000060a010400000000000000000100000008000b40000000000900010073797a30000000064400048014000180090001006c61737400000000040002802c0001800e000100696d6d6564696174650000001800028008000140000000010c000280050001004c00000014000000110001"], 0xf4}}, 0x0) socket$isdn_base(0x22, 0x3, 0x0) 755.050882ms ago: executing program 2 (id=5383): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x7d, &(0x7f0000000700)={r1, 0xfffff801, 0x11e2000, 0x62c, 0x100, 0x2, 0x2, 0x4, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x3, 0xfffffffb, 0x3, 0x1000, 0x1}}, &(0x7f00000007c0)=0xb0) 746.398218ms ago: executing program 0 (id=5384): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0xc, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="bc1400002e00090027bd70000000000004000000a51411804b8a9f750c996372b5b14b3a91a3ff88cca5dd0d428ddfdd02a37c0b93bcdade6c5307b79c2d122f"], 0x14bc}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b140)=@delchain={0x2c, 0x66, 0x221, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x721}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) close(r6) (async) close(r6) 599.248824ms ago: executing program 7 (id=5385): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x2b}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0xb4f, 0x543}, {0x4, 0x7fffffffffffffff, 0xfffffffffffffffc}, {0x2, 0x6}, 0x70bd2c, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x3, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 552.223039ms ago: executing program 3 (id=5386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) syz_emit_ethernet(0x82, &(0x7f0000001900)={@local, @broadcast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast2, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0xf, 0x0, [@dev, @broadcast, @loopback]}, @timestamp={0x44, 0x4, 0x56}]}}}}}}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r4, r4, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r4, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000200), 0x0, 0x0}, 0x40) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0x7, 0x0, 0x700, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x38}, 0x1, 0x7}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r7, 0x0, 0x34, 0x0, &(0x7f00000001c0)) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000280)=""/182, 0x0, 0x1000, 0x7, 0x1}, 0x20) writev(r6, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 547.322593ms ago: executing program 7 (id=5387): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@volatile={0x10, 0x0, 0x0, 0x9, 0x4}, @union={0xb, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x4}]}]}, {0x0, [0x0, 0x30, 0x0, 0x0, 0x61, 0x30]}}, &(0x7f0000000080)=""/54, 0x44, 0x36, 0x1, 0x9}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x100, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) r4 = socket$netlink(0x10, 0x3, 0xb) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), r2) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x78, r6, 0x20, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'sit0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0xff}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000080) r7 = socket$kcm(0x29, 0x7, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000600)={0x0, @empty, @loopback}, &(0x7f0000000640)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x2, 0xdea, 0x40, @remote, @mcast1, 0x40, 0x7, 0x7, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000007c0)={'wg2\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000800)={@private1, 0x0}, &(0x7f0000000840)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) getpeername$packet(r0, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000980)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a40)={'erspan0\x00', &(0x7f00000009c0)={'tunl0\x00', 0x0, 0x20, 0x8, 0x10000, 0x6, {{0x14, 0x4, 0x3, 0x2c, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @multicast1, @local, {[@ssrr={0x89, 0x7, 0x7f, [@private=0xa010101]}, @end, @timestamp_prespec={0x44, 0x24, 0xd8, 0x3, 0x8, [{@loopback, 0xb}, {@multicast2, 0x4}, {@private=0xa010102, 0xc25}, {@empty, 0x292b}]}, @timestamp_addr={0x44, 0xc, 0x36, 0x1, 0x7, [{@empty, 0xe23}]}, @ra={0x94, 0x4, 0x8}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000b00)={'tunl0\x00', &(0x7f0000000a80)={'tunl0\x00', 0x0, 0x7, 0x80, 0x0, 0x8001, {{0x15, 0x4, 0x3, 0x37, 0x54, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @rand_addr=0x64010102, {[@rr={0x7, 0xb, 0xd1, [@rand_addr=0x64010102, @loopback]}, @timestamp_addr={0x44, 0x2c, 0xa6, 0x1, 0x9, [{@private=0xa010100, 0x4}, {@empty, 0x4}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@empty, 0x9}, {@broadcast, 0x32a}]}, @lsrr={0x83, 0x7, 0x57, [@empty]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000c40)={'syztnl1\x00', &(0x7f0000000b40)={'erspan0\x00', 0x0, 0x80, 0x700, 0x3, 0x2, {{0x2d, 0x4, 0x2, 0x3c, 0xb4, 0x67, 0x0, 0x3, 0x29, 0x0, @broadcast, @rand_addr=0x64010100, {[@generic={0x7, 0x8, "24adf3c7fc24"}, @lsrr={0x83, 0x23, 0xed, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x1b}, @loopback, @remote]}, @ra={0x94, 0x4}, @cipso={0x86, 0x9, 0x0, [{0x5, 0x3, "fd"}]}, @lsrr={0x83, 0xb, 0xe1, [@multicast2, @loopback]}, @rr={0x7, 0xb, 0x20, [@remote, @dev={0xac, 0x14, 0x14, 0x18}]}, @cipso={0x86, 0x2e, 0x3, [{0x0, 0x6, "a217f465"}, {0x2, 0x5, "3afb1e"}, {0x2, 0x3, "d4"}, {0x5, 0x7, "1dc816a7f6"}, {0x5, 0x10, "53136e2e5b0e21080a7f09e1e844"}, {0x0, 0x3, '?'}]}, @timestamp={0x44, 0x24, 0xfe, 0x0, 0xc, [0x1000, 0x8, 0x3ff, 0x10001, 0x9, 0xffffffff, 0x0, 0x5]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000c80)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r5, 0x0, 0x3c0c790add5d0ff3, &(0x7f0000000cc0)={@loopback, @empty, 0x0}, &(0x7f0000000d00)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000001a00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001040)={0x944, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x65d}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x200, 0xaa, 0x4, 0xfffffff1}, {0x0, 0x3, 0xfd}, {0x3, 0xbe, 0xd, 0x6}, {0x7, 0xa8, 0x0, 0x50}, {0x4, 0xdf, 0x0, 0x9259}, {0xb, 0x75, 0x5, 0xe4}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r18}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r21}}}]}}, {{0x8, 0x1, r22}, {0x1e0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7c8b}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xd01}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r24}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x280}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x944}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000010) 444.234885ms ago: executing program 0 (id=5388): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockname(r0, &(0x7f0000000040)=@llc, &(0x7f0000000100)=0x80) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f00000003c0)={0xfffffffd}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r3, 0x25, 0x0, @void}, 0x10) r4 = socket(0x10, 0x803, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d800000019000100000212ba0d8105040a600000ff0f040b067c55a1bc0009007d0006000000000015001500fe808178a80035fd00e4ff3f0200000901ac040000d67f6f94007100a007a290457f0189b316277ce06b9e9dfc487d5d32bace8017cbec4c2ee5a71602b2a10c11ce1b14d600741f795025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fec114c5d46a73290f9eaef6288b97192309a00000e000000000000000000000000000000000000000000000000000ab62800"/216, 0xd8}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0xb, 0xe, &(0x7f0000000200)=ANY=[@ANYRES8=r0], &(0x7f00000001c0)='GPL\x00', 0x77c267ca, 0x4e, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x400000, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1081}, 0x94) 363.435091ms ago: executing program 7 (id=5389): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x5, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000000f000000000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012800b00010062726964676500000c0002800400180000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0xffffffffffffffff}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x8, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) writev(r1, &(0x7f0000001780)=[{&(0x7f00000006c0)="ba74", 0x2}], 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x22, 0xa01, 0x0, 0x0, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 241.176925ms ago: executing program 0 (id=5390): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x22000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x402, 0x0, 0x0, {{0xb}, {0xfffffffffffffdf5, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x100}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x48195) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xba}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$nl_crypto(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)=@del={0x108, 0x11, 0x20, 0x70bd2b, 0x25dfdbfc, {{'drbg_pr_hmac_sha256\x00'}, '\x00', '\x00', 0x400, 0x6c00}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x80000000}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x5}]}, 0x108}}, 0x4) 186.039832ms ago: executing program 7 (id=5391): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x7) (async) listen(r0, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000710000ffff000000000000000163000000000095000000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 75.492215ms ago: executing program 7 (id=5392): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710435000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @binary="feffffff"}]}, 0x1c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) 19.874417ms ago: executing program 3 (id=5393): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'macvlan0\x00', @local}) write$tun(r3, &(0x7f00000015c0)={@val={0xa, 0x201}, @val={0x2, 0x1, 0xff3f, 0x0, 0xe, 0x8}, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \n', 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x43, 0x100}}}}}}}}}, 0x54) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="24005a8020000180140003000000200000000000edff"], 0x40}}, 0x0) 474.753µs ago: executing program 7 (id=5394): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000004c0)=ANY=[@ANYBLOB="2e020000000000000001000708000000030005f7ff04"], 0x20) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)=""/195, 0x34, 0xc3, 0x1, 0x8}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000007c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0xffffffffffffff1e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='neigh_create\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000029c0)={'ip6gre0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) r6 = socket(0x8000000010, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, 0x2c, 0x107, 0x0, 0x0, {0x7, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) getsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000140)=0x4) write(r6, &(0x7f00000002c0)="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", 0xfc) 0s ago: executing program 0 (id=5395): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r0 = socket$netlink(0x10, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200051b08000300ac1414aa0800060021"], 0x38}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x20008880) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x1, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00', 0x0, 0x8}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x15, 0xb8, 0x8, 0x2, 0x180c0, 0xffffffffffffffff, 0x2bed, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="f53c000004000000"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x20, &(0x7f0000000380)=""/32, 0x41000, 0x6, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000440)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x10000}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000600)=[0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, r6], &(0x7f0000000640)=[{0x4, 0x4, 0x6, 0x8}, {0x1, 0x3, 0x3, 0x7}, {0x1, 0x5, 0x10, 0xe}, {0x5, 0x5, 0x3, 0xc}, {0x4, 0x1, 0x6, 0xb}, {0x3, 0x1, 0x5, 0xa}, {0x4, 0x311, 0xe, 0xc}], 0x10, 0x686}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000007140100000000000000000005006000b8"], 0x18}}, 0x0) kernel console output (not intermixed with test programs): ttributes in process `syz.0.3508'. [ 459.048331][T18071] netlink: 'syz.0.3511': attribute type 21 has an invalid length. [ 459.061598][T18071] IPv6: NLM_F_CREATE should be specified when creating new route [ 459.208892][T18067] syzkaller0: entered promiscuous mode [ 459.214469][T18067] syzkaller0: entered allmulticast mode [ 459.300800][T18088] netlink: 'syz.3.3515': attribute type 9 has an invalid length. [ 459.413512][T18093] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3517'. [ 461.093168][T12774] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.132775][T18109] netlink: 112 bytes leftover after parsing attributes in process `syz.9.3523'. [ 461.250637][T12774] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.296229][T18114] netlink: 64138 bytes leftover after parsing attributes in process `syz.9.3524'. [ 461.297914][T18118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3527'. [ 461.409323][T12774] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.520701][T12774] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.966478][ T6227] wlan1: Trigger new scan to find an IBSS to join [ 462.040602][T12774] bridge_slave_1: left allmulticast mode [ 462.064213][T12774] bridge_slave_1: left promiscuous mode [ 462.085765][T12774] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.158999][T12774] bridge_slave_0: left allmulticast mode [ 462.185200][T12774] bridge_slave_0: left promiscuous mode [ 462.204164][T12774] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.875793][T18177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3538'. [ 462.923347][T12774] bond9 (unregistering): (slave gretap2): Releasing active interface [ 463.536052][T12774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.549026][T12774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.559964][T12774] bond0 (unregistering): Released all slaves [ 463.670544][T12774] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 463.682600][T12774] bond1 (unregistering): (slave bond2): Releasing active interface [ 463.691380][T12774] bond1 (unregistering): Released all slaves [ 463.803830][T12774] bond2 (unregistering): Released all slaves [ 463.821942][T12774] bond3 (unregistering): Released all slaves [ 463.837704][T12774] bond4 (unregistering): Released all slaves [ 463.957070][T12774] bond5 (unregistering): Released all slaves [ 463.971486][T12774] bond6 (unregistering): Released all slaves [ 463.987362][T12774] bond7 (unregistering): Released all slaves [ 464.105106][T12774] bond8 (unregistering): Released all slaves [ 464.224082][T12774] bond9 (unregistering): Released all slaves [ 464.250241][T18164] tipc: Started in network mode [ 464.255230][T18164] tipc: Node identity b235ca2cf091, cluster identity 4711 [ 464.267662][T18164] tipc: Enabled bearer , priority 0 [ 464.294304][T18165] syzkaller0: entered promiscuous mode [ 464.322354][T18165] syzkaller0: entered allmulticast mode [ 464.396238][T12774] tipc: Left network mode [ 464.477624][T18190] netlink: 'syz.3.3540': attribute type 12 has an invalid length. [ 464.487524][T18190] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3540'. [ 464.535087][T18176] tipc: Resetting bearer [ 464.597124][T18176] tipc: Disabling bearer [ 464.672244][T18196] netlink: 'syz.3.3540': attribute type 12 has an invalid length. [ 464.697887][T18196] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3540'. [ 464.740060][T18198] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3543'. [ 464.837155][T18198] netlink: 'syz.9.3543': attribute type 1 has an invalid length. [ 465.032533][ T1039] wlan1: Trigger new scan to find an IBSS to join [ 465.362512][T18231] netlink: 'syz.3.3554': attribute type 9 has an invalid length. [ 465.489210][T18236] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3555'. [ 465.506512][T18233] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3555'. [ 465.598554][T18242] netlink: 'syz.3.3558': attribute type 1 has an invalid length. [ 465.614526][T18239] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3557'. [ 465.624329][T18243] netlink: 'syz.3.3558': attribute type 1 has an invalid length. [ 465.682534][T18239] gre0: entered allmulticast mode [ 465.738402][T18252] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3559'. [ 465.766667][T18242] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 465.769721][T18243] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 465.949412][T18257] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3560'. [ 465.951057][T12778] wlan1: Creating new IBSS network, BSSID 3a:50:13:d2:22:45 [ 466.005487][T18265] netlink: 'syz.1.3562': attribute type 1 has an invalid length. [ 466.040712][T12774] hsr_slave_0: left promiscuous mode [ 466.052309][T12774] hsr_slave_1: left promiscuous mode [ 466.202903][T18275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3562'. [ 466.866677][T18264] bond1: Unable to set up delay as MII monitoring is disabled [ 466.878140][T18264] bond1 (unregistering): Released all slaves [ 466.909225][T18265] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 466.929335][T18269] bond2: (slave veth0_to_bond): Releasing active interface [ 466.974389][T18272] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 467.259910][T18299] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3568'. [ 467.442439][T18306] netlink: 'syz.9.3572': attribute type 2 has an invalid length. [ 467.457235][T12774] IPVS: stop unused estimator thread 0... [ 467.479244][T18306] netlink: 'syz.9.3572': attribute type 11 has an invalid length. [ 467.661879][T18316] netlink: 'syz.1.3576': attribute type 10 has an invalid length. [ 467.694476][T18316] team0: Device veth1_macvtap failed to register rx_handler [ 467.730656][T18318] tipc: Enabled bearer , priority 0 [ 467.755349][T18318] syzkaller0: entered promiscuous mode [ 467.763029][T18318] syzkaller0: entered allmulticast mode [ 467.937105][T18318] tipc: Resetting bearer [ 467.985748][T18314] tipc: Resetting bearer [ 468.074946][T18314] tipc: Disabling bearer [ 468.102457][T18344] x_tables: duplicate underflow at hook 2 [ 468.141080][T18334] pim6reg1: entered promiscuous mode [ 468.165510][T18334] pim6reg1: entered allmulticast mode [ 468.499395][T18371] lo speed is unknown, defaulting to 1000 [ 468.528729][T18371] lo speed is unknown, defaulting to 1000 [ 468.563066][T18371] lo speed is unknown, defaulting to 1000 [ 468.894798][T18371] infiniband syz2: set active [ 468.899704][ T8355] lo speed is unknown, defaulting to 1000 [ 468.907462][T18371] infiniband syz2: added lo [ 469.007261][T18371] RDS/IB: syz2: added [ 469.011763][T18371] smc: adding ib device syz2 with port count 1 [ 469.026461][T18371] smc: ib device syz2 port 1 has no pnetid [ 469.036522][ T980] lo speed is unknown, defaulting to 1000 [ 469.046018][T18371] lo speed is unknown, defaulting to 1000 [ 469.450310][T18371] lo speed is unknown, defaulting to 1000 [ 469.803685][T18428] tipc: Enabled bearer , priority 0 [ 469.909645][T18428] tipc: Disabling bearer [ 469.948958][T18441] __nla_validate_parse: 11 callbacks suppressed [ 469.948978][T18441] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3612'. [ 470.010506][T18371] lo speed is unknown, defaulting to 1000 [ 470.097068][T18445] validate_nla: 1 callbacks suppressed [ 470.097089][T18445] netlink: 'syz.0.3613': attribute type 3 has an invalid length. [ 470.341727][T18463] tipc: Failed to remove unknown binding: 66,0,0/2739206247:4220071627/4220071628 [ 470.371403][T18463] tipc: Failed to remove unknown binding: 66,0,0/2739206247:4220071627/4220071628 [ 470.467636][T18371] lo speed is unknown, defaulting to 1000 [ 470.721858][T18471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3624'. [ 470.732775][T18471] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3624'. [ 470.819426][T18371] lo speed is unknown, defaulting to 1000 [ 471.108376][T18487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3630'. [ 471.144485][T18487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3630'. [ 471.418861][T18507] netlink: 'syz.9.3637': attribute type 4 has an invalid length. [ 471.427595][T18507] netlink: 152 bytes leftover after parsing attributes in process `syz.9.3637'. [ 471.484533][T18508] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3637'. [ 471.522395][T18507] `: renamed from bond0 (while UP) [ 471.756685][T18522] syzkaller0: entered promiscuous mode [ 471.772904][T18522] syzkaller0: entered allmulticast mode [ 472.196913][T18556] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3653'. [ 472.446441][T18570] netlink: 'syz.0.3657': attribute type 39 has an invalid length. [ 472.919849][T18579] IPv6: NLM_F_CREATE should be specified when creating new route [ 472.946964][T18579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3662'. [ 473.169369][T18587] xt_socket: unknown flags 0xe4 [ 473.477256][T18598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3668'. [ 473.505190][T18598] netlink: 'syz.3.3668': attribute type 1 has an invalid length. [ 473.934925][T18621] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 474.221218][T18634] netlink: 'syz.3.3681': attribute type 2 has an invalid length. [ 474.623933][T18660] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 474.690057][T18662] vlan4: entered promiscuous mode [ 474.695164][T18662] geneve1: entered promiscuous mode [ 474.709183][T18662] vlan4: entered allmulticast mode [ 474.733697][T18662] geneve1: entered allmulticast mode [ 474.832255][T18668] tipc: Enabling of bearer rejected, failed to enable media [ 475.432158][T18706] dvmrp6: entered allmulticast mode [ 475.575138][T18714] __nla_validate_parse: 7 callbacks suppressed [ 475.575159][T18714] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3706'. [ 475.597234][T18714] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3706'. [ 475.861399][T18732] syzkaller0: entered promiscuous mode [ 475.891077][T18732] syzkaller0: entered allmulticast mode [ 475.901155][T18738] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3710'. [ 476.089055][T18748] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3715'. [ 476.285077][T18765] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3719'. [ 476.424483][T18774] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3721'. [ 476.488232][T18777] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3722'. [ 476.527297][T18777] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3722'. [ 476.538346][T18779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3723'. [ 476.712277][T18792] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3726'. [ 476.724371][T18786] vlan5: entered allmulticast mode [ 476.766187][T18793] syzkaller0: entered promiscuous mode [ 476.771931][T18793] syzkaller0: entered allmulticast mode [ 477.064950][T18818] netlink: 'syz.0.3735': attribute type 1 has an invalid length. [ 477.290957][T18826] bridge0: port 3(batadv1) entered blocking state [ 477.305654][T18826] bridge0: port 3(batadv1) entered disabled state [ 477.313148][T18826] batadv1: entered allmulticast mode [ 477.347855][T18826] batadv1: entered promiscuous mode [ 477.497858][T18842] syzkaller0: entered promiscuous mode [ 477.513642][T18842] syzkaller0: entered allmulticast mode [ 477.776909][T12771] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 477.787048][T12771] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 477.858695][T18866] netlink: 'syz.3.3750': attribute type 1 has an invalid length. [ 477.887003][T18869] netlink: 'syz.1.3749': attribute type 26 has an invalid length. [ 477.896405][T18869] netlink: 'syz.1.3749': attribute type 26 has an invalid length. [ 478.134519][T18887] netlink: 'syz.1.3755': attribute type 13 has an invalid length. [ 478.172121][T18887] erspan0: refused to change device tx_queue_len [ 478.197143][T18887] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 478.217070][T12337] lo speed is unknown, defaulting to 1000 [ 478.226709][T18892] syzkaller0: entered promiscuous mode [ 478.232308][T18892] syzkaller0: entered allmulticast mode [ 478.313398][T18894] syzkaller0: entered promiscuous mode [ 478.328307][T18894] syzkaller0: entered allmulticast mode [ 478.345494][T18897] netlink: 'syz.9.3757': attribute type 3 has an invalid length. [ 479.020072][T18945] syzkaller0: entered promiscuous mode [ 479.026991][T18945] syzkaller0: entered allmulticast mode [ 479.072187][T18950] team_slave_0: entered promiscuous mode [ 479.078026][T18950] team_slave_1: entered promiscuous mode [ 479.090593][T18950] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 479.099544][T18950] team0: Device macvtap1 is already an upper device of the team interface [ 479.113496][T18950] team_slave_0: left promiscuous mode [ 479.119135][T18950] team_slave_1: left promiscuous mode [ 479.376258][T18967] ip_vti0: entered promiscuous mode [ 479.415055][T18974] netlink: 'syz.4.3781': attribute type 5 has an invalid length. [ 479.729850][T18994] netlink: 'syz.4.3786': attribute type 15 has an invalid length. [ 479.818134][T12337] IPVS: starting estimator thread 0... [ 479.825109][T18990] netlink: 'syz.3.3784': attribute type 1 has an invalid length. [ 479.854453][T18988] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 479.883655][T19000] syzkaller0: entered promiscuous mode [ 479.890079][T19000] syzkaller0: entered allmulticast mode [ 479.906909][T18997] IPVS: using max 29 ests per chain, 69600 per kthread [ 480.001404][T19006] syzkaller0: entered promiscuous mode [ 480.007174][T19006] syzkaller0: entered allmulticast mode [ 480.487190][T19036] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 480.558911][ T6227] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 480.570076][T19040] netlink: 'syz.3.3798': attribute type 1 has an invalid length. [ 480.579059][T19040] __nla_validate_parse: 14 callbacks suppressed [ 480.579081][T19040] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3798'. [ 480.844371][T19046] syzkaller0: entered promiscuous mode [ 480.850955][T19046] syzkaller0: entered allmulticast mode [ 480.938606][T19051] syz.1.3802: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 480.953740][T19051] CPU: 1 UID: 0 PID: 19051 Comm: syz.1.3802 Not tainted syzkaller #0 PREEMPT(full) [ 480.953769][T19051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 480.953783][T19051] Call Trace: [ 480.953789][T19051] [ 480.953796][T19051] dump_stack_lvl+0xe8/0x150 [ 480.953820][T19051] warn_alloc+0x214/0x310 [ 480.953837][T19051] ? stack_trace_save+0x9c/0xe0 [ 480.953862][T19051] ? __pfx_warn_alloc+0x10/0x10 [ 480.953883][T19051] ? kasan_save_track+0x4f/0x80 [ 480.953897][T19051] ? kasan_save_track+0x3e/0x80 [ 480.953910][T19051] ? __kasan_kmalloc+0x93/0xb0 [ 480.953924][T19051] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 480.953938][T19051] ? xskq_create+0x56/0x170 [ 480.953951][T19051] ? xsk_setsockopt+0x4dc/0x8d0 [ 480.953972][T19051] ? do_sock_setsockopt+0x17c/0x1b0 [ 480.953988][T19051] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 480.954004][T19051] ? do_syscall_64+0xec/0xf80 [ 480.954023][T19051] __vmalloc_node_range_noprof+0x134/0x16a0 [ 480.954062][T19051] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 480.954082][T19051] ? __kasan_kmalloc+0x93/0xb0 [ 480.954102][T19051] vmalloc_user_noprof+0xad/0xf0 [ 480.954125][T19051] ? xskq_create+0xbf/0x170 [ 480.954157][T19051] xskq_create+0xbf/0x170 [ 480.954173][T19051] xsk_init_queue+0xb0/0x110 [ 480.954199][T19051] xsk_setsockopt+0x4dc/0x8d0 [ 480.954224][T19051] ? __pfx_xsk_setsockopt+0x10/0x10 [ 480.954246][T19051] ? __pfx_aa_sk_perm+0x10/0x10 [ 480.954268][T19051] ? aa_sock_opt_perm+0xff/0x1a0 [ 480.954291][T19051] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 480.954305][T19051] ? __pfx_xsk_setsockopt+0x10/0x10 [ 480.954329][T19051] do_sock_setsockopt+0x17c/0x1b0 [ 480.954350][T19051] __x64_sys_setsockopt+0x13f/0x1b0 [ 480.954375][T19051] do_syscall_64+0xec/0xf80 [ 480.954392][T19051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.954406][T19051] ? trace_irq_disable+0x37/0x100 [ 480.954427][T19051] ? clear_bhb_loop+0x60/0xb0 [ 480.954445][T19051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.954460][T19051] RIP: 0033:0x7f5463d9acb9 [ 480.954474][T19051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.954489][T19051] RSP: 002b:00007f5464bee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 480.954537][T19051] RAX: ffffffffffffffda RBX: 00007f5464015fa0 RCX: 00007f5463d9acb9 [ 480.954553][T19051] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 480.954572][T19051] RBP: 00007f5463e08bf7 R08: 0000000000000004 R09: 0000000000000000 [ 480.954585][T19051] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.954599][T19051] R13: 00007f5464016038 R14: 00007f5464015fa0 R15: 00007ffdde565998 [ 480.954635][T19051] [ 480.954651][T19051] Mem-Info: [ 481.235932][T19051] active_anon:4902 inactive_anon:0 isolated_anon:0 [ 481.235932][T19051] active_file:3534 inactive_file:40090 isolated_file:0 [ 481.235932][T19051] unevictable:768 dirty:118 writeback:0 [ 481.235932][T19051] slab_reclaimable:12266 slab_unreclaimable:112329 [ 481.235932][T19051] mapped:30330 shmem:1368 pagetables:1115 [ 481.235932][T19051] sec_pagetables:0 bounce:0 [ 481.235932][T19051] kernel_misc_reclaimable:0 [ 481.235932][T19051] free:1311124 free_pcp:14627 free_cma:0 [ 481.288236][T19051] Node 0 active_anon:19608kB inactive_anon:0kB active_file:14136kB inactive_file:160156kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121320kB dirty:472kB writeback:0kB shmem:3936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13740kB pagetables:4324kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 481.325142][T19051] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 481.416793][T19056] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3803'. [ 481.453039][T19051] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 481.525432][T19051] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 481.532188][T19051] Node 0 DMA32 free:1339432kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19208kB inactive_anon:0kB active_file:14136kB inactive_file:160156kB unevictable:1536kB writepending:472kB zspages:0kB present:3129332kB managed:2559484kB mlocked:0kB bounce:0kB free_pcp:38944kB local_pcp:18084kB free_cma:0kB [ 481.532955][T19063] syzkaller0: entered promiscuous mode [ 481.593657][T19063] syzkaller0: entered allmulticast mode [ 481.618068][T19065] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3806'. [ 481.645531][T19051] lowmem_reserve[]: 0 0 1 1 1 [ 481.650414][T19051] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 481.690956][T19051] lowmem_reserve[]: 0 0 0 0 0 [ 481.696037][T19051] Node 1 Normal free:3891116kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18748kB local_pcp:8908kB free_cma:0kB [ 481.734776][T19051] lowmem_reserve[]: 0 0 0 0 0 [ 481.751163][T19051] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 481.764184][T19051] Node 0 DMA32: 3508*4kB (UM) 4605*8kB (UM) 2770*16kB (UME) 1299*32kB (UME) 249*64kB (UME) 253*128kB (UME) 459*256kB (UME) 345*512kB (UME) 252*1024kB (UME) 108*2048kB (UM) 93*4096kB (M) = 1339384kB [ 481.808592][T19051] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 481.865628][T19051] Node 1 Normal: 149*4kB (U) 47*8kB (UME) 44*16kB (UME) 127*32kB (UME) 35*64kB (UME) 7*128kB (UME) 5*256kB (UME) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3891116kB [ 481.883999][T19051] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 481.911972][T19051] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 481.926608][T19051] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 481.959907][T19081] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3810'. [ 481.961262][T19051] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 482.006715][T19051] 44988 total pagecache pages [ 482.026896][T19086] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3812'. [ 482.038195][T19051] 0 pages in swap cache [ 482.044445][T19051] Free swap = 124996kB [ 482.050173][T19051] Total swap = 124996kB [ 482.054751][T19086] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3812'. [ 482.065022][T19051] 2097051 pages RAM [ 482.072988][T19051] 0 pages HighMem/MovableOnly [ 482.082036][T19051] 425090 pages reserved [ 482.088220][T19086] validate_nla: 4 callbacks suppressed [ 482.088241][T19086] netlink: 'syz.0.3812': attribute type 1 has an invalid length. [ 482.102005][T19051] 0 pages cma reserved [ 482.132481][T19086] syzkaller0: entered promiscuous mode [ 482.146952][T19086] syzkaller0: entered allmulticast mode [ 482.733356][T19127] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3824'. [ 482.743783][T19124] syzkaller0: entered promiscuous mode [ 482.755507][T19124] syzkaller0: entered allmulticast mode [ 482.896116][T19140] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3823'. [ 483.238304][T19157] openvswitch: netlink: IPv4 tunnel dst address is zero [ 483.273512][T19162] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3833'. [ 483.337272][T19163] bond5: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 483.415088][T19165] bond6: option arp_all_targets: invalid value (18446744073709551613) [ 483.520604][T19165] bond6 (unregistering): Released all slaves [ 483.753404][ T8350] IPVS: starting estimator thread 0... [ 483.760718][T19183] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20003 [ 483.865890][T19184] IPVS: using max 29 ests per chain, 69600 per kthread [ 483.903671][T19190] syzkaller0: entered promiscuous mode [ 483.914846][T19190] syzkaller0: entered allmulticast mode [ 484.000421][T19198] syzkaller1: entered promiscuous mode [ 484.015427][T19198] syzkaller1: entered allmulticast mode [ 484.123702][T19205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3845'. [ 484.209257][T19208] bridge0: port 3(batadv1) entered blocking state [ 484.219905][T19208] bridge0: port 3(batadv1) entered disabled state [ 484.226844][T19208] batadv1: entered allmulticast mode [ 484.240996][T19208] batadv1: entered promiscuous mode [ 484.435629][T19224] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:20003 [ 484.666953][T19229] gtp0: entered promiscuous mode [ 484.696894][ T6427] batman_adv: batadv1: IGMP Querier appeared [ 484.703736][ T6427] batman_adv: batadv1: MLD Querier appeared [ 484.714035][T19229] gtp0: entered allmulticast mode [ 484.783728][T19238] bond0: (slave ip6_vti0): Device is not bonding slave [ 484.807781][T19238] bond0: option active_slave: invalid value (ip6_vti0) [ 484.816938][T19238] bond0 (unregistering): Released all slaves [ 484.887735][T19250] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 484.909456][T19246] syzkaller0: entered promiscuous mode [ 484.914995][T19246] syzkaller0: entered allmulticast mode [ 485.166598][T19267] ip6gre1: entered promiscuous mode [ 485.171888][T19267] ip6gre1: entered allmulticast mode [ 485.443248][T19289] syzkaller0: entered promiscuous mode [ 485.456177][T19289] syzkaller0: entered allmulticast mode [ 485.609622][T19300] syzkaller0: entered promiscuous mode [ 485.619032][T19300] syzkaller0: entered allmulticast mode [ 485.787283][T19307] nbd0: detected capacity change from 0 to 127 [ 485.842453][ T5150] block nbd0: Receive control failed (result -32) [ 485.927389][T19317] __nla_validate_parse: 6 callbacks suppressed [ 485.927408][T19317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3877'. [ 485.975590][T19316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3877'. [ 485.984630][T19316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3877'. [ 486.012950][T19317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3877'. [ 486.151018][T19324] xfrm1: entered allmulticast mode [ 486.206038][T19328] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3882'. [ 486.215296][T19328] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3882'. [ 486.428000][T19340] bond0: (slave wlan1): Releasing backup interface [ 486.471922][T19343] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.479514][T19343] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.563498][T19345] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 486.629213][T19352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3890'. [ 486.802700][T19369] netlink: 'syz.3.3895': attribute type 13 has an invalid length. [ 486.819707][T19369] netlink: 'syz.3.3895': attribute type 17 has an invalid length. [ 486.967099][T19377] netlink: 'syz.1.3898': attribute type 1 has an invalid length. [ 486.978754][T19369] 8021q: adding VLAN 0 to HW filter on device v [ 486.988732][T19369] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 487.079573][T19375] netlink: 'syz.0.3897': attribute type 1 has an invalid length. [ 487.117228][T19380] 8021q: adding VLAN 0 to HW filter on device bond5 [ 487.126405][T19380] bond4: (slave bond5): making interface the new active one [ 487.134453][T19380] bond4: (slave bond5): Enslaving as an active interface with an up link [ 487.147996][T19384] netlink: 'syz.1.3898': attribute type 1 has an invalid length. [ 487.162229][T19377] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 487.177808][T19377] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 487.264807][T19394] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3901'. [ 487.274654][T19394] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3901'. [ 487.287590][T19375] 8021q: adding VLAN 0 to HW filter on device bond6 [ 487.294339][T19394] netlink: 'syz.4.3901': attribute type 6 has an invalid length. [ 487.309579][T19394] netlink: 'syz.4.3901': attribute type 5 has an invalid length. [ 487.310911][T19380] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 487.322036][T19394] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3901'. [ 487.350880][T19379] bond6: (slave veth0_to_bond): making interface the new active one [ 487.367279][T19379] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 487.403132][T19396] netlink: 'syz.4.3901': attribute type 6 has an invalid length. [ 487.412544][T19396] netlink: 'syz.4.3901': attribute type 5 has an invalid length. [ 487.425298][T19392] bond6: entered promiscuous mode [ 487.435910][T19392] veth0_to_bond: entered promiscuous mode [ 487.453820][T19392] bond6: entered allmulticast mode [ 487.489661][T19392] veth0_to_bond: entered allmulticast mode [ 487.530216][T19401] netlink: 'syz.3.3903': attribute type 1 has an invalid length. [ 487.545542][T19401] netlink: 'syz.3.3903': attribute type 2 has an invalid length. [ 487.653823][T19408] netlink: 'syz.0.3905': attribute type 1 has an invalid length. [ 487.872941][T19420] ip6gretap0: entered allmulticast mode [ 488.029980][T19426] xt_NFQUEUE: number of queues (8) out of range (got 65539) [ 488.069016][T19428] netlink: 'syz.1.3912': attribute type 2 has an invalid length. [ 488.096867][T19428] netlink: 'syz.1.3912': attribute type 3 has an invalid length. [ 488.234512][T19410] lo speed is unknown, defaulting to 1000 [ 488.422982][T19437] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 488.493825][T19437] bond5 (unregistering): Released all slaves [ 489.063162][T19464] netlink: set zone limit has 4 unknown bytes [ 489.120043][T19476] syzkaller0: entered promiscuous mode [ 489.161229][T19476] syzkaller0: entered allmulticast mode [ 489.372562][T19486] bridge0: entered allmulticast mode [ 489.496329][ T6427] tipc: Subscription rejected, illegal request [ 489.655045][T19495] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 490.649893][T19534] bond5: (slave ip6gretap3): Enslaving as a backup interface with an up link [ 490.688688][T19542] 8021q: adding VLAN 0 to HW filter on device bond5 [ 490.697733][ T6427] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 490.846366][T12769] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 491.650520][T19609] __nla_validate_parse: 18 callbacks suppressed [ 491.650540][T19609] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3966'. [ 492.032812][T19643] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3973'. [ 492.057508][T19643] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3973'. [ 492.082083][T19643] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3973'. [ 492.448641][T19666] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3977'. [ 494.028959][T19671] syzkaller0: entered promiscuous mode [ 494.044278][T19671] syzkaller0: entered allmulticast mode [ 494.101144][T19677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3982'. [ 494.462059][T19702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.482728][T19702] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3990'. [ 494.662232][T19714] tipc: Started in network mode [ 494.669379][T19714] tipc: Node identity e689067febf5, cluster identity 4711 [ 494.679122][T19714] tipc: Enabled bearer , priority 0 [ 494.690537][T19714] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 494.709763][T19714] tipc: Resetting bearer [ 494.725719][T19713] tipc: Disabling bearer [ 494.878234][T19725] team_slave_0: entered promiscuous mode [ 494.884006][T19725] team_slave_1: entered promiscuous mode [ 494.900084][T19725] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 494.950992][T19728] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 495.690698][T19772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4012'. [ 495.748593][T19776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4012'. [ 495.791826][T19772] bond6: entered promiscuous mode [ 495.806323][T19776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4012'. [ 495.826017][T19772] 8021q: adding VLAN 0 to HW filter on device bond6 [ 495.900933][T19787] 8021q: adding VLAN 0 to HW filter on device bond6 [ 495.924700][T19787] bond6: (slave xfrm1): The slave device specified does not support setting the MAC address [ 495.949832][T19787] bond6: (slave xfrm1): Error -95 calling set_mac_address [ 496.042757][T19791] 8021q: VLANs not supported on sit0 [ 496.195245][T19806] validate_nla: 5 callbacks suppressed [ 496.195266][T19806] netlink: 'syz.3.4022': attribute type 29 has an invalid length. [ 496.295412][ T5834] Bluetooth: hci4: command 0x0401 tx timeout [ 496.359788][T19821] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 496.743107][T19846] __nla_validate_parse: 3 callbacks suppressed [ 496.743129][T19846] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4033'. [ 497.126748][T19868] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 497.220921][T19871] syzkaller0: entered promiscuous mode [ 497.251174][T19871] syzkaller0: entered allmulticast mode [ 497.341311][T19882] netlink: 'syz.1.4045': attribute type 1 has an invalid length. [ 497.388922][T19885] syzkaller0: entered promiscuous mode [ 497.394723][T19885] syzkaller0: entered allmulticast mode [ 497.417506][T19879] syzkaller0: entered promiscuous mode [ 497.426636][T19879] syzkaller0: entered allmulticast mode [ 497.459052][T19882] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 497.506813][ T6426] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 497.521637][T19882] 8021q: adding VLAN 0 to HW filter on device bond7 [ 497.677841][ T6426] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 497.743476][T19900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 497.857545][T19902] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4048'. [ 498.055305][T19922] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4052'. [ 498.089143][T19926] veth0: entered promiscuous mode [ 498.146294][T19924] veth0: left promiscuous mode [ 498.332937][T19948] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 498.350334][T19935] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4057'. [ 498.380121][T19935] IPVS: rr: FWM 3 0x00000003 - no destination available [ 498.428725][T19951] netlink: 'syz.0.4062': attribute type 1 has an invalid length. [ 498.473666][T19955] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4063'. [ 498.512125][T19956] bond7: (slave gretap1): making interface the new active one [ 498.520782][T19956] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 498.825261][T19978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4068'. [ 498.835811][T19978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4068'. [ 498.912930][T19980] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4069'. [ 499.256079][T19995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4073'. [ 499.332083][T19998] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4074'. [ 499.626973][T20010] bridge_slave_1: left allmulticast mode [ 499.632704][T20010] bridge_slave_1: left promiscuous mode [ 499.665262][T20010] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.689681][T20010] bridge_slave_0: left allmulticast mode [ 499.701671][T20010] bridge_slave_0: left promiscuous mode [ 499.715934][T20010] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.475760][T20040] netlink: 'syz.1.4088': attribute type 7 has an invalid length. [ 501.093327][T20075] netlink: 'syz.9.4099': attribute type 1 has an invalid length. [ 501.109499][T20077] netlink: 'syz.3.4100': attribute type 2 has an invalid length. [ 501.232737][T20082] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 501.429274][T20098] netlink: 'syz.4.4107': attribute type 1 has an invalid length. [ 501.519510][T20098] bond1: entered promiscuous mode [ 501.524887][T20098] bond1: entered allmulticast mode [ 501.531907][T20098] 8021q: adding VLAN 0 to HW filter on device bond1 [ 501.615251][T20103] macvlan8: entered promiscuous mode [ 501.645781][T20103] macvlan8: entered allmulticast mode [ 501.666870][T20103] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 501.778765][T20120] __nla_validate_parse: 9 callbacks suppressed [ 501.778788][T20120] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4110'. [ 501.859329][T20115] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 501.897119][T20127] x_tables: duplicate underflow at hook 2 [ 501.991793][T20129] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20001 [ 502.004318][T20109] syzkaller0: entered promiscuous mode [ 502.020399][T20109] syzkaller0: entered allmulticast mode [ 504.279558][T20158] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4119'. [ 504.993658][T20218] macsec1: entered promiscuous mode [ 505.120886][T20226] atomic_op ffff8880286b2998 conn xmit_atomic 0000000000000000 [ 505.146413][T20224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.156471][T20228] ip6gre1: entered allmulticast mode [ 505.322549][T20239] syzkaller0: entered allmulticast mode [ 505.354781][T20239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4140'. [ 505.573226][T20257] netlink: 'syz.9.4147': attribute type 4 has an invalid length. [ 505.629892][T20257] netlink: 'syz.9.4147': attribute type 4 has an invalid length. [ 505.710221][T20257] netlink: 'syz.9.4147': attribute type 4 has an invalid length. [ 505.749774][T20257] netlink: 'syz.9.4147': attribute type 4 has an invalid length. [ 505.801713][T20257] netlink: 'syz.9.4147': attribute type 4 has an invalid length. [ 505.854600][T20257] netlink: 'syz.9.4147': attribute type 4 has an invalid length. [ 505.890493][T20257] netlink: 'syz.9.4147': attribute type 4 has an invalid length. [ 505.905907][T20257] netlink: 'syz.9.4147': attribute type 4 has an invalid length. [ 505.927456][T20257] netlink: 'syz.9.4147': attribute type 4 has an invalid length. [ 506.001477][T20282] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 506.360977][T20302] gtp1: entered promiscuous mode [ 506.394818][T20302] gtp1: entered allmulticast mode [ 506.491936][T20311] validate_nla: 25 callbacks suppressed [ 506.491955][T20311] netlink: 'syz.9.4161': attribute type 1 has an invalid length. [ 506.565150][T20311] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 506.627438][T20325] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4163'. [ 506.989098][T20336] xt_policy: output policy not valid in PREROUTING and INPUT [ 507.011977][T20336] xt_TPROXY: Can be used only with -p tcp or -p udp [ 507.252399][T20346] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4174'. [ 507.366730][T20355] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4175'. [ 507.409380][T20356] xt_CT: No such helper "pptp" [ 507.514285][T20368] netlink: 'syz.9.4178': attribute type 30 has an invalid length. [ 507.558350][T20372] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20000 [ 507.566356][T20366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4177'. [ 507.873778][T20391] tipc: Enabled bearer , priority 0 [ 507.911447][T20389] syzkaller0: entered promiscuous mode [ 507.927455][T20389] syzkaller0: entered allmulticast mode [ 507.943730][T20393] netlink: 'syz.0.4186': attribute type 3 has an invalid length. [ 507.977187][T20389] tipc: Resetting bearer [ 507.998651][T20397] netlink: 'syz.9.4187': attribute type 2 has an invalid length. [ 508.408768][T20417] netlink: 348 bytes leftover after parsing attributes in process `syz.9.4191'. [ 508.438326][T20417] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 508.707217][T20387] tipc: Resetting bearer [ 508.840213][T20387] tipc: Disabling bearer [ 509.053895][T20435] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 509.129732][T20435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4200'. [ 509.449934][T20457] netlink: 'syz.0.4205': attribute type 3 has an invalid length. [ 509.472261][T20459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4206'. [ 509.603563][T20469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4208'. [ 509.648320][T20470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4208'. [ 509.672684][T20473] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4210'. [ 509.684492][T20469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4208'. [ 509.935515][T20438] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 510.362368][T20494] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 510.423461][T20494] netlink: 'syz.9.4217': attribute type 1 has an invalid length. [ 510.432792][T20496] netlink: 'syz.9.4217': attribute type 1 has an invalid length. [ 510.460067][T20496] netlink: 'syz.9.4217': attribute type 2 has an invalid length. [ 510.536217][T20499] syzkaller1: entered promiscuous mode [ 510.555646][T20499] syzkaller1: entered allmulticast mode [ 510.895795][T20515] veth0_to_bond: entered allmulticast mode [ 511.085050][T20525] netlink: 'syz.3.4227': attribute type 10 has an invalid length. [ 511.115942][T20525] veth0_vlan: left promiscuous mode [ 511.129180][T20528] netlink: 'syz.4.4230': attribute type 30 has an invalid length. [ 511.146748][T20525] veth0_vlan: entered promiscuous mode [ 511.164923][T20525] v: Device veth0_vlan failed to register rx_handler [ 511.450660][T20551] tipc: Trying to set illegal importance in message [ 511.460590][T20546] bridge_slave_0: left allmulticast mode [ 511.471130][T20546] bridge_slave_0: left promiscuous mode [ 511.477909][T20546] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.497471][T20546] bridge_slave_1: left allmulticast mode [ 511.504432][T20546] bridge_slave_1: left promiscuous mode [ 511.511458][T20546] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.524573][T20546] bond0: (slave bond_slave_0): Releasing backup interface [ 511.544911][T20546] bond0: (slave bond_slave_1): Releasing backup interface [ 511.583596][T20546] v: Port device team_slave_0 removed [ 511.624423][T20546] v: Port device team_slave_1 removed [ 511.644819][T20546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.654595][T20546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.669854][T20546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.678301][T20546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.689301][T20546] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 511.713665][T20551] team0: Mode changed to "activebackup" [ 511.860744][T20568] netlink: 'syz.9.4238': attribute type 12 has an invalid length. [ 512.212328][T20590] netlink: 'syz.3.4247': attribute type 4 has an invalid length. [ 512.233254][T20590] netlink: 'syz.3.4247': attribute type 4 has an invalid length. [ 512.263368][T20592] bridge_slave_0: left promiscuous mode [ 512.272968][T20592] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.289209][T20592] bridge_slave_1: left allmulticast mode [ 512.289789][T20594] __nla_validate_parse: 9 callbacks suppressed [ 512.289830][T20594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4248'. [ 512.298300][T20592] bridge_slave_1: left promiscuous mode [ 512.320098][T20592] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.338344][T20592] bond0: (slave bond_slave_0): Releasing backup interface [ 512.366845][T20592] bond0: (slave bond_slave_1): Releasing backup interface [ 512.397133][T20592] team_slave_0: left promiscuous mode [ 512.407864][T20592] team0: Port device team_slave_0 removed [ 512.427089][T20592] team_slave_1: left promiscuous mode [ 512.444251][T20592] team0: Port device team_slave_1 removed [ 512.449218][T20604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4250'. [ 512.477739][T20592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.485165][T20592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.519311][T20592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.547954][T20592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.569678][T20592] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 512.800102][T20617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4253'. [ 512.952886][T20625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4256'. [ 512.962264][T20625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4256'. [ 512.972013][T20625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4256'. [ 513.018668][ T6428] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.019030][T20625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4256'. [ 513.058200][ T6428] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.075777][T20625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4256'. [ 513.095003][ T6428] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.109345][T20625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4256'. [ 513.124914][ T6428] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.326848][T20640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4262'. [ 513.364812][T20640] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 514.246007][T20689] x_tables: unsorted entry at hook 3 [ 514.268436][T20686] netem: incorrect ge model size [ 514.276082][T20686] netem: change failed [ 514.280652][T20689] net veth1_virt_wifi .: renamed from virt_wifi0 [ 514.618900][T20719] netlink: 'syz.1.4284': attribute type 1 has an invalid length. [ 514.911443][T20729] bridge4: entered promiscuous mode [ 514.917193][T20729] bridge4: entered allmulticast mode [ 515.013703][T20733] netlink: 'syz.3.4290': attribute type 1 has an invalid length. [ 515.971532][T20814] netlink: 'syz.4.4315': attribute type 13 has an invalid length. [ 516.306357][T20826] bond2: option mode: invalid value (133) [ 516.337947][T20826] bond2 (unregistering): Released all slaves [ 516.593459][T20842] xt_hashlimit: invalid interval [ 517.113666][T20871] netlink: 'syz.0.4328': attribute type 10 has an invalid length. [ 517.157254][T20875] netlink: 'syz.0.4328': attribute type 10 has an invalid length. [ 517.325211][T20881] __nla_validate_parse: 11 callbacks suppressed [ 517.325233][T20881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4330'. [ 517.376956][T20882] netlink: 'syz.4.4330': attribute type 12 has an invalid length. [ 517.415044][T20882] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.4330'. [ 517.494720][T20872] lo speed is unknown, defaulting to 1000 [ 517.686687][T20889] bond6: option lp_interval: invalid value (0) [ 517.703184][T20889] bond6: option lp_interval: allowed values 1 - 2147483647 [ 517.737114][T20889] bond6 (unregistering): Released all slaves [ 518.075601][T20914] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4338'. [ 518.118166][T20911] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4338'. [ 518.165737][T20910] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4338'. [ 518.237546][T20921] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4341'. [ 518.372718][T20927] vcan1: entered promiscuous mode [ 518.386663][T20927] vcan1: entered allmulticast mode [ 518.473916][T20934] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4345'. [ 519.281104][T20952] netlink: 'syz.3.4351': attribute type 1 has an invalid length. [ 519.324078][T20952] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4351'. [ 519.383734][T20952] netlink: 'syz.3.4351': attribute type 1 has an invalid length. [ 519.413537][T20952] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4351'. [ 519.465722][T20962] netlink: 'syz.9.4354': attribute type 4 has an invalid length. [ 519.466256][T20956] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4350'. [ 519.486278][T20963] netlink: 'syz.9.4354': attribute type 4 has an invalid length. [ 520.151528][T20994] pim6reg: entered allmulticast mode [ 520.170034][T20994] pim6reg: left allmulticast mode [ 520.599182][T21026] netlink: 'syz.9.4376': attribute type 5 has an invalid length. [ 520.771290][T21039] netlink: 'syz.3.4379': attribute type 58 has an invalid length. [ 521.107692][T21065] netlink: 'syz.0.4385': attribute type 1 has an invalid length. [ 521.663841][T21103] delete_channel: no stack [ 522.522070][T21151] syzkaller0: entered promiscuous mode [ 522.528009][T21151] syzkaller0: entered allmulticast mode [ 522.572285][ T6426] syzkaller0: tun_net_xmit 48 [ 522.587847][T21151] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 522.618803][T21151] syzkaller0: create flow: hash 1721217315 index 1 [ 522.905903][T21129] lo speed is unknown, defaulting to 1000 [ 522.929507][T21150] syzkaller0: delete flow: hash 1721217315 index 1 [ 525.415037][T21160] lo speed is unknown, defaulting to 1000 [ 525.505142][T21208] pim6reg1: entered promiscuous mode [ 525.511163][T21208] pim6reg1: entered allmulticast mode [ 526.480529][T21236] validate_nla: 2 callbacks suppressed [ 526.480552][T21236] netlink: 'syz.1.4444': attribute type 26 has an invalid length. [ 526.495227][T21236] __nla_validate_parse: 13 callbacks suppressed [ 526.495247][T21236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4444'. [ 526.560996][T21238] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4445'. [ 526.574952][T21236] netlink: 'syz.1.4444': attribute type 26 has an invalid length. [ 526.598238][T21236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4444'. [ 526.726425][T21246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.837862][T21251] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 527.249104][T21275] syzkaller0: entered promiscuous mode [ 527.276251][T21275] syzkaller0: entered allmulticast mode [ 527.398021][T21282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4457'. [ 527.768040][T21303] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4465'. [ 527.841316][T21305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4466'. [ 528.043864][T21315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4469'. [ 528.152787][T21319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4470'. [ 528.449850][T21346] netlink: 'syz.3.4479': attribute type 9 has an invalid length. [ 528.459016][T21346] netlink: 'syz.3.4479': attribute type 11 has an invalid length. [ 528.472690][T21341] bond3: entered promiscuous mode [ 528.477918][T21341] bond3: entered allmulticast mode [ 528.483479][T21341] 8021q: adding VLAN 0 to HW filter on device bond3 [ 528.492147][T21346] netlink: 'syz.3.4479': attribute type 12 has an invalid length. [ 528.501349][T21346] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.4479'. [ 528.511016][T21346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4479'. [ 529.030931][T21384] netlink: 'syz.9.4488': attribute type 15 has an invalid length. [ 529.197017][T21375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.400161][ T8013] lo speed is unknown, defaulting to 1000 [ 529.409446][ T8013] syz2: Port: 1 Link DOWN [ 529.522784][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.541973][ T8013] lo speed is unknown, defaulting to 1000 [ 529.547902][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.559046][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.583232][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.724214][T21411] netlink: 'syz.3.4492': attribute type 1 has an invalid length. [ 529.732600][T21411] netlink: 'syz.3.4492': attribute type 11 has an invalid length. [ 529.820778][T21415] netlink: 'syz.0.4493': attribute type 12 has an invalid length. [ 529.930038][T21415] bond8: option primary_reselect: invalid value (255) [ 529.953410][T21415] bond8 (unregistering): Released all slaves [ 530.252443][T21450] netlink: 'syz.9.4500': attribute type 1 has an invalid length. [ 530.462495][T21444] lo speed is unknown, defaulting to 1000 [ 530.971294][T21477] tipc: Enabled bearer , priority 0 [ 531.104791][T21477] syzkaller0: entered promiscuous mode [ 531.126162][T21477] syzkaller0: entered allmulticast mode [ 531.132717][T21477] tipc: Resetting bearer [ 531.243020][ T6227] tipc: Resetting bearer [ 531.270038][T21476] tipc: Resetting bearer [ 533.179648][T21476] tipc: Disabling bearer [ 533.236810][T21494] pimreg3: entered allmulticast mode [ 533.625919][T21521] syzkaller1: entered promiscuous mode [ 533.631595][T21521] syzkaller1: entered allmulticast mode [ 535.450326][T21519] lo speed is unknown, defaulting to 1000 [ 535.735811][T21543] validate_nla: 1 callbacks suppressed [ 535.735830][T21543] netlink: 'syz.0.4526': attribute type 16 has an invalid length. [ 535.764105][T21543] netlink: 'syz.0.4526': attribute type 17 has an invalid length. [ 535.827470][T21543] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 535.978190][T21547] __nla_validate_parse: 8 callbacks suppressed [ 535.978210][T21547] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4527'. [ 535.997449][T21552] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4530'. [ 536.039832][T21548] syzkaller1: entered promiscuous mode [ 536.046717][T21548] syzkaller1: entered allmulticast mode [ 538.044601][T21573] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4536'. [ 538.259048][T21592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4541'. [ 538.296905][ T6227] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.306450][T21592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4541'. [ 538.332607][ T6227] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.342549][ T6227] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.353681][ T6227] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.557166][T21600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4543'. [ 538.575557][T21600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4543'. [ 539.068147][T21632] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4555'. [ 539.238580][T21616] lo speed is unknown, defaulting to 1000 [ 539.297211][T21639] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4557'. [ 539.308249][T21638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4558'. [ 540.060606][T21675] SET target dimension over the limit! [ 540.891819][T21719] syzkaller0: entered promiscuous mode [ 540.908447][T21719] syzkaller0: entered allmulticast mode [ 541.206557][T21708] lo speed is unknown, defaulting to 1000 [ 541.407439][T21745] __nla_validate_parse: 2 callbacks suppressed [ 541.407461][T21745] netlink: 212324 bytes leftover after parsing attributes in process `syz.1.4585'. [ 541.456318][T21745] netlink: 212324 bytes leftover after parsing attributes in process `syz.1.4585'. [ 541.580002][T21744] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 541.631190][T21744] bond2 (unregistering): Released all slaves [ 541.714236][T21758] sctp: [Deprecated]: syz.1.4590 (pid 21758) Use of int in max_burst socket option deprecated. [ 541.714236][T21758] Use struct sctp_assoc_value instead [ 541.882264][T21709] lo speed is unknown, defaulting to 1000 [ 542.011879][T21765] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4591'. [ 542.186663][T21776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4594'. [ 542.219295][T21777] tipc: New replicast peer: 255.255.255.255 [ 542.239224][T21777] tipc: Enabled bearer , priority 10 [ 542.723081][T21796] netlink: 'syz.9.4601': attribute type 4 has an invalid length. [ 542.809369][T21800] netlink: 'syz.9.4601': attribute type 4 has an invalid length. [ 543.072734][T21806] FAULT_INJECTION: forcing a failure. [ 543.072734][T21806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.135646][T21806] CPU: 0 UID: 0 PID: 21806 Comm: syz.9.4604 Not tainted syzkaller #0 PREEMPT(full) [ 543.135684][T21806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 543.135697][T21806] Call Trace: [ 543.135706][T21806] [ 543.135715][T21806] dump_stack_lvl+0xe8/0x150 [ 543.135750][T21806] should_fail_ex+0x414/0x560 [ 543.135789][T21806] _copy_from_user+0x2d/0xb0 [ 543.135818][T21806] ___sys_sendmsg+0x158/0x2a0 [ 543.135849][T21806] ? __pfx____sys_sendmsg+0x10/0x10 [ 543.135921][T21806] ? __fget_files+0x2a/0x420 [ 543.135955][T21806] ? __fget_files+0x3a0/0x420 [ 543.135992][T21806] __x64_sys_sendmsg+0x19b/0x260 [ 543.136023][T21806] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 543.136059][T21806] ? __pfx_ksys_write+0x10/0x10 [ 543.136093][T21806] do_syscall_64+0xec/0xf80 [ 543.136117][T21806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.136137][T21806] ? trace_irq_disable+0x37/0x100 [ 543.136165][T21806] ? clear_bhb_loop+0x60/0xb0 [ 543.136191][T21806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.136211][T21806] RIP: 0033:0x7f6fb179acb9 [ 543.136231][T21806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.136249][T21806] RSP: 002b:00007f6fb26c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.136272][T21806] RAX: ffffffffffffffda RBX: 00007f6fb1a15fa0 RCX: 00007f6fb179acb9 [ 543.136287][T21806] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 543.136301][T21806] RBP: 00007f6fb26c3090 R08: 0000000000000000 R09: 0000000000000000 [ 543.136314][T21806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.136326][T21806] R13: 00007f6fb1a16038 R14: 00007f6fb1a15fa0 R15: 00007ffe90ff97c8 [ 543.136361][T21806] [ 543.326269][ T8327] tipc: Node number set to 1118095916 [ 543.346808][T21810] netlink: 'syz.4.4606': attribute type 11 has an invalid length. [ 543.653212][T21821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 543.963842][T21841] syzkaller0: entered promiscuous mode [ 543.969771][T21841] syzkaller0: entered allmulticast mode [ 544.099442][T21850] openvswitch: netlink: EtherType 0 is less than min 600 [ 544.388171][T21867] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4628'. [ 544.515580][T21874] netlink: 176 bytes leftover after parsing attributes in process `syz.9.4629'. [ 544.539212][T21874] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4629'. [ 544.549980][T21878] netlink: 176 bytes leftover after parsing attributes in process `syz.9.4629'. [ 544.586252][T21878] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4629'. [ 544.710190][T21888] xt_hashlimit: size too large, truncated to 1048576 [ 545.354977][T21908] sctp: [Deprecated]: syz.3.4641 (pid 21908) Use of struct sctp_assoc_value in delayed_ack socket option. [ 545.354977][T21908] Use struct sctp_sack_info instead [ 545.390745][T21905] 8021q: adding VLAN 0 to HW filter on device bond8 [ 545.532535][T21911] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 545.545132][T21911] bond4 (unregistering): Released all slaves [ 545.809308][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 545.819709][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 545.829858][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 545.838866][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 545.846826][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 545.957527][T21924] x_tables: duplicate underflow at hook 2 [ 546.178862][ T5150] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 546.196695][ T5150] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 546.206740][ T5150] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 546.225243][ T5150] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 546.234824][ T5150] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 546.337325][T21915] lo speed is unknown, defaulting to 1000 [ 546.686989][T21954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4657'. [ 546.830783][T21958] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4658'. [ 546.877310][T21963] netlink: 'syz.0.4660': attribute type 10 has an invalid length. [ 546.909720][T21934] lo speed is unknown, defaulting to 1000 [ 546.927745][T21963] team0: Device ipvlan1 failed to register rx_handler [ 546.960060][T21965] netlink: 'syz.0.4660': attribute type 10 has an invalid length. [ 546.999949][T21965] team0: Device ipvlan1 failed to register rx_handler [ 547.159904][T21968] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4662'. [ 547.228630][T21971] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4661'. [ 547.381549][T21915] chnl_net:caif_netlink_parms(): no params data found [ 547.731857][T21999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4669'. [ 547.747875][T21915] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.772215][T21915] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.783251][T21915] bridge_slave_0: entered allmulticast mode [ 547.796986][T21915] bridge_slave_0: entered promiscuous mode [ 547.814499][T21915] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.821972][T21915] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.831366][T21915] bridge_slave_1: entered allmulticast mode [ 547.846715][T21915] bridge_slave_1: entered promiscuous mode [ 547.886283][ T5150] Bluetooth: hci1: command tx timeout [ 547.919944][T21915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.933688][T21915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.964126][T21934] chnl_net:caif_netlink_parms(): no params data found [ 547.997752][T21915] team0: Port device team_slave_0 added [ 548.016343][T21915] team0: Port device team_slave_1 added [ 548.072702][T21915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.079930][T21915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.106917][T21915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.125243][T21915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.132673][T21915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.159165][T21915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.201901][T21934] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.209265][T21934] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.217668][T21934] bridge_slave_0: entered allmulticast mode [ 548.224971][T21934] bridge_slave_0: entered promiscuous mode [ 548.235596][T21934] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.242887][T21934] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.250960][T21934] bridge_slave_1: entered allmulticast mode [ 548.258493][T21934] bridge_slave_1: entered promiscuous mode [ 548.285605][ T5150] Bluetooth: hci3: command tx timeout [ 548.322933][T21934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.339818][T21915] hsr_slave_0: entered promiscuous mode [ 548.346903][T21915] hsr_slave_1: entered promiscuous mode [ 548.356259][T21934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.404888][T21934] team0: Port device team_slave_0 added [ 548.420241][T21934] team0: Port device team_slave_1 added [ 548.476268][T21934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.483249][T21934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.510357][T21934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.530473][T21934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.537555][T21934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.563872][T21934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.660821][T21934] hsr_slave_0: entered promiscuous mode [ 548.667697][T21934] hsr_slave_1: entered promiscuous mode [ 548.673912][T21934] debugfs: 'hsr0' already exists in 'hsr' [ 548.680550][T21934] Cannot create hsr debugfs directory [ 549.240547][T21915] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 549.259577][T21915] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 549.271714][T21915] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 549.294796][T21915] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 549.354062][T21934] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 549.365770][T21934] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 549.379872][T21934] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 549.392625][T21934] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 549.482510][T21915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.506562][T21915] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.527634][ T6427] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.534795][ T6427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.553912][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.561133][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.586366][T21934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.625144][T21934] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.645408][T12769] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.652608][T12769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.679749][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.687005][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.959246][T21934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.966924][ T5150] Bluetooth: hci1: command tx timeout [ 549.980471][T21915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 550.052113][T21915] veth0_vlan: entered promiscuous mode [ 550.072690][T21915] veth1_vlan: entered promiscuous mode [ 550.110759][T21915] veth0_macvtap: entered promiscuous mode [ 550.129083][T21915] veth1_macvtap: entered promiscuous mode [ 550.160513][T21915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.180991][T21915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.197948][ T6429] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.208799][ T6429] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.229459][ T6429] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.241290][ T6429] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.330306][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.345466][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.367422][ T5150] Bluetooth: hci3: command tx timeout [ 550.390423][ T6428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.400102][ T6428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.452554][T21934] veth0_vlan: entered promiscuous mode [ 550.473372][T21934] veth1_vlan: entered promiscuous mode [ 550.513466][T21934] veth0_macvtap: entered promiscuous mode [ 550.525170][T21934] veth1_macvtap: entered promiscuous mode [ 550.551440][T21934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.579966][T21934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.594852][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.604851][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.616064][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.624860][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.714022][T12769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.722733][T12769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.755112][ T6262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.763448][ T6262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.831100][T22037] ref_ctr_offset mismatch. inode: 0x190 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 552.045624][ T5150] Bluetooth: hci1: command tx timeout [ 552.445784][ T5150] Bluetooth: hci3: command tx timeout [ 554.126042][ T5150] Bluetooth: hci1: command tx timeout [ 554.525556][ T5150] Bluetooth: hci3: command tx timeout [ 600.935135][T22054] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4673'. [ 600.947726][T22046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 600.954072][T22051] netlink: 'syz.3.4675': attribute type 1 has an invalid length. [ 600.994919][T22050] bond1: Removing last arp target with arp_interval on [ 601.054472][T22054] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4673'. [ 601.067045][T22054] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4673'. [ 601.077472][T22062] netlink: 'syz.2.4676': attribute type 7 has an invalid length. [ 601.087282][T22062] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4676'. [ 601.124918][T22054] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4673'. [ 601.156503][T22054] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4673'. [ 601.170055][T22054] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4673'. [ 601.180849][T22054] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4673'. [ 601.190556][T22054] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4673'. [ 601.205809][T22054] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4673'. [ 601.285906][T22067] tipc: Enabled bearer , priority 0 [ 601.333281][T22074] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 601.351460][T22074] bond1 (unregistering): Released all slaves [ 601.692079][T22096] netlink: 'syz.2.4688': attribute type 1 has an invalid length. [ 601.738178][T22096] veth3: entered promiscuous mode [ 603.097103][T22066] tipc: Disabling bearer [ 605.977651][T22108] __nla_validate_parse: 56 callbacks suppressed [ 605.977676][T22108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4692'. [ 606.039773][T22110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4693'. [ 606.049826][T22110] netlink: 'syz.2.4693': attribute type 30 has an invalid length. [ 606.059191][T22110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4693'. [ 606.086587][T22110] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4693'. [ 606.193231][T22112] IPVS: persistence engine module ip_vs_pe_ not found [ 606.208937][T22118] netlink: 'syz.7.4695': attribute type 10 has an invalid length. [ 606.560508][T22147] netlink: 'syz.4.4706': attribute type 39 has an invalid length. [ 606.737531][T22159] netlink: 596 bytes leftover after parsing attributes in process `syz.3.4709'. [ 606.751608][T22155] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 606.795084][T22162] netlink: 'syz.0.4710': attribute type 1 has an invalid length. [ 607.010721][T22173] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4713'. [ 607.014642][T22174] netlink: 'syz.0.4714': attribute type 1 has an invalid length. [ 607.133274][T22186] sctp: [Deprecated]: syz.0.4717 (pid 22186) Use of int in max_burst socket option deprecated. [ 607.133274][T22186] Use struct sctp_assoc_value instead [ 607.180516][T22166] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 607.200776][T22190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4719'. [ 607.216527][T22190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4719'. [ 607.432217][T22203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 607.490714][T22208] openvswitch: netlink: Flow actions attr not present in new flow. [ 607.513765][T22210] xt_l2tp: v2 tid > 0xffff: 1114244 [ 607.522645][T22210] netlink: 'syz.4.4724': attribute type 29 has an invalid length. [ 607.558308][T22210] netlink: 'syz.4.4724': attribute type 29 has an invalid length. [ 607.917195][T22239] netlink: 'syz.3.4733': attribute type 58 has an invalid length. [ 607.927154][T22239] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4733'. [ 608.131000][T22254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4737'. [ 608.411299][T22239] lo speed is unknown, defaulting to 1000 [ 608.492026][T22266] netlink: 'syz.7.4740': attribute type 5 has an invalid length. [ 608.508750][T22266] netlink: 'syz.7.4740': attribute type 5 has an invalid length. [ 608.923463][T22277] syzkaller0: entered promiscuous mode [ 609.682229][T22310] x_tables: duplicate underflow at hook 2 [ 611.025849][T22355] __nla_validate_parse: 6 callbacks suppressed [ 611.025981][T22355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4770'. [ 611.279802][T22365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4772'. [ 611.750615][T22395] Bluetooth: MGMT ver 1.23 [ 612.099998][T22409] netlink: 'syz.3.4788': attribute type 1 has an invalid length. [ 612.157224][T22409] 8021q: adding VLAN 0 to HW filter on device bond7 [ 612.219221][T22409] netlink: 'syz.3.4788': attribute type 1 has an invalid length. [ 612.234725][T22409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4788'. [ 612.330568][T22412] bond7: (slave veth5): Enslaving as an active interface with a down link [ 612.403435][T22409] vlan3: entered allmulticast mode [ 612.408956][T22409] veth1: entered allmulticast mode [ 612.758824][T22447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4796'. [ 613.064564][T22457] netlink: 124 bytes leftover after parsing attributes in process `syz.7.4803'. [ 613.139089][T22459] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4801'. [ 613.221640][T22468] openvswitch: netlink: Flow actions attr not present in new flow. [ 613.437974][T22483] syzkaller1: entered promiscuous mode [ 613.443720][T22483] syzkaller1: entered allmulticast mode [ 613.501811][T22485] netlink: 'syz.0.4807': attribute type 1 has an invalid length. [ 613.516932][T22485] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4807'. [ 613.552125][T22485] netlink: 'syz.0.4807': attribute type 3 has an invalid length. [ 613.719240][T22498] netlink: 'syz.2.4814': attribute type 2 has an invalid length. [ 614.012432][T22516] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4818'. [ 614.110252][T22510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4816'. [ 614.119538][T22510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4816'. [ 614.586873][T22552] sctp: [Deprecated]: syz.2.4826 (pid 22552) Use of int in max_burst socket option. [ 614.586873][T22552] Use struct sctp_assoc_value instead [ 614.988492][T22562] 8021q: adding VLAN 0 to HW filter on device bond8 [ 615.271069][T22565] bond8 (unregistering): Released all slaves [ 615.652552][T22588] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.660327][T22588] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.807504][T22588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.822739][T22588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.993710][ T6429] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.010756][ T6429] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.054692][ T6429] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.092727][ T6429] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.219031][T22609] __nla_validate_parse: 3 callbacks suppressed [ 616.219054][T22609] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4841'. [ 616.268196][T22609] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4841'. [ 616.293294][T22609] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 616.342574][T22619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4845'. [ 616.687012][T22635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4850'. [ 616.707281][T22640] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4851'. [ 616.878834][T22649] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4853'. [ 616.936482][T22654] vcan0: tx drop: invalid da for name 0xfffffffffffffffe [ 617.223507][T22663] tipc: MTU too low for tipc bearer [ 617.320725][T22680] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4861'. [ 617.364671][T22674] macsec1: entered promiscuous mode [ 617.490033][T22682] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4861'. [ 617.513170][T22688] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4865'. [ 617.530383][T22688] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4865'. [ 617.603225][T22686] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 617.622986][T22686] bond3 (unregistering): Released all slaves [ 618.209037][T22741] netlink: 'syz.0.4876': attribute type 11 has an invalid length. [ 618.696598][T22731] nbd: device at index 64 is going down [ 618.875042][T22775] netlink: 'syz.0.4884': attribute type 7 has an invalid length. [ 619.008194][T22775] netlink: 'syz.0.4884': attribute type 7 has an invalid length. [ 619.061001][T22785] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 619.113518][ T6427] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.145737][ T6427] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.172321][ T6427] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.217928][ T6427] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.482602][T22805] netlink: 'syz.0.4896': attribute type 39 has an invalid length. [ 619.485478][T22808] syzkaller1: entered promiscuous mode [ 619.544268][T22808] syzkaller1: entered allmulticast mode [ 619.553126][T22819] ksmbd: Unknown IPC event: 3, ignore. [ 620.025151][T22824] syzkaller0: entered promiscuous mode [ 620.047676][T22824] syzkaller0: entered allmulticast mode [ 620.235877][T22853] netlink: 'syz.4.4907': attribute type 13 has an invalid length. [ 622.455845][T22853] gre0: left allmulticast mode [ 622.530060][T22853] wg2: left allmulticast mode [ 622.544923][T22853] veth0_to_bond: left allmulticast mode [ 622.727114][T22853] vlan2: left promiscuous mode [ 622.733677][T22853] bridge0: left promiscuous mode [ 622.745023][T22853] geneve2: left promiscuous mode [ 622.750553][T22853] geneve2: left allmulticast mode [ 622.763589][T22853] vlan4: left promiscuous mode [ 622.769526][T22853] geneve1: left promiscuous mode [ 622.774856][T22853] vlan4: left allmulticast mode [ 622.780244][T22853] geneve1: left allmulticast mode [ 622.793292][T22853] bond1: left promiscuous mode [ 622.799379][T22853] bond1: left allmulticast mode [ 622.808376][T22853] bond3: left promiscuous mode [ 622.813310][T22853] bond3: left allmulticast mode [ 622.943941][T22881] __nla_validate_parse: 16 callbacks suppressed [ 622.943964][T22881] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4914'. [ 623.003515][T22881] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4914'. [ 623.027185][T22881] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4914'. [ 623.279130][T22905] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4919'. [ 623.327002][T22905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4919'. [ 623.342472][T22905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4919'. [ 623.377174][T22905] netlink: 'syz.4.4919': attribute type 1 has an invalid length. [ 623.402055][T22905] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4919'. [ 623.412984][T22914] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4922'. [ 623.457585][T22915] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 623.527074][T22916] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4921'. [ 623.544047][T22909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4921'. [ 623.916028][T22936] netlink: 'syz.7.4928': attribute type 20 has an invalid length. [ 623.978909][T22936] netlink: 'syz.7.4928': attribute type 20 has an invalid length. [ 624.063147][T22943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.084932][T22943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.113117][T22943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.145547][T22943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.341317][T22962] netlink: 'syz.7.4933': attribute type 10 has an invalid length. [ 624.455992][T22962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.482303][T22962] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 624.524113][T22966] netlink: 'syz.3.4935': attribute type 3 has an invalid length. [ 624.534819][T22967] netlink: 'syz.3.4935': attribute type 3 has an invalid length. [ 624.665600][T22973] netlink: 'syz.0.4936': attribute type 3 has an invalid length. [ 624.698174][T22979] netlink: 'syz.7.4939': attribute type 1 has an invalid length. [ 624.708053][T22979] netlink: 'syz.7.4939': attribute type 3 has an invalid length. [ 624.720808][T22979] NCSI netlink: No device for ifindex 813332851 [ 624.816429][T22984] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 624.920530][T22990] macsec0: entered promiscuous mode [ 624.946281][T22990] macsec0: entered allmulticast mode [ 624.980458][T22990] veth1_macvtap: entered allmulticast mode [ 625.015672][T22990] macsec0: left promiscuous mode [ 625.033661][T22990] macsec0: left allmulticast mode [ 625.045821][T22990] veth1_macvtap: left allmulticast mode [ 625.072804][T22997] tipc: Started in network mode [ 625.107179][T22997] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 625.127149][T22997] tipc: Enabled bearer , priority 2 [ 625.437382][T23018] bond0: (slave team0): Releasing backup interface [ 625.905217][T23018] bond6: (slave veth0_to_bond): Releasing active interface [ 625.923800][T23018] veth0_to_bond: left promiscuous mode [ 625.934884][T23018] veth0_to_bond: left allmulticast mode [ 625.951832][T23018] bond0: (slave bond_slave_0): Releasing backup interface [ 625.967487][T23018] bond0: (slave bond_slave_1): Releasing backup interface [ 625.988053][T23018] team0: Port device team_slave_0 removed [ 626.004741][T23018] team0: Port device team_slave_1 removed [ 626.027709][T23018] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 626.132273][T23035] tipc: Enabled bearer , priority 0 [ 626.155886][ T5921] !yz!: Port: 1 Link DOWN [ 626.259605][T23035] tipc: Disabling bearer [ 626.327761][ T5921] tipc: Node number set to 10136234 [ 627.157775][ T6420] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 627.210577][T23098] netlink: 'syz.0.4963': attribute type 10 has an invalid length. [ 629.014827][T23098] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 629.144077][T23100] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.151905][T23100] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.300548][T23100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.320761][T23100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.505119][T22703] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.533870][T22703] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.544416][T22703] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.605713][T22703] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.752127][T23136] netlink: 'syz.4.4972': attribute type 1 has an invalid length. [ 629.806472][T23138] netlink: 'syz.4.4972': attribute type 1 has an invalid length. [ 629.865608][T23137] __nla_validate_parse: 11 callbacks suppressed [ 629.865629][T23137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4972'. [ 629.870660][T23136] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4972'. [ 629.913783][T23136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4972'. [ 629.992437][T23145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4974'. [ 630.259931][T23110] lo speed is unknown, defaulting to 1000 [ 630.498930][T23172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4983'. [ 630.524605][T23172] block nbd1: Unsupported socket: should be TCP or UNIX. [ 630.726324][T23186] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4988'. [ 630.736238][T23186] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4988'. [ 630.808093][T12774] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 630.855161][T23194] xfrm1: entered allmulticast mode [ 631.352899][T23198] netlink: 'syz.4.4991': attribute type 1 has an invalid length. [ 631.381094][T23198] bond5: entered promiscuous mode [ 631.387000][T23198] 8021q: adding VLAN 0 to HW filter on device bond5 [ 631.415891][T23198] bond5: (slave bridge2): making interface the new active one [ 631.423603][T23198] bridge2: entered promiscuous mode [ 631.431794][T23198] bridge2: left promiscuous mode [ 631.761412][T23214] netlink: 'syz.0.4994': attribute type 1 has an invalid length. [ 631.787480][T23214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.882918][T23220] veth0: entered promiscuous mode [ 631.891721][T23220] veth0: left promiscuous mode [ 631.974664][T23220] sit0: entered promiscuous mode [ 631.993638][T23220] netlink: 'syz.7.4999': attribute type 1 has an invalid length. [ 632.012014][T23220] netlink: 1 bytes leftover after parsing attributes in process `syz.7.4999'. [ 632.277545][T23252] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5005'. [ 632.320792][T23245] syzkaller1: entered promiscuous mode [ 632.329626][T23245] syzkaller1: entered allmulticast mode [ 632.343830][T23255] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 632.372493][T23256] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5008'. [ 632.575188][T23261] openvswitch: netlink: Missing key (keys=40, expected=80) [ 632.652612][T23235] lo speed is unknown, defaulting to 1000 [ 632.727406][T23256] tipc: Started in network mode [ 632.732360][T23256] tipc: Node identity 6a4ab513b7ee, cluster identity 4711 [ 632.739974][T23256] tipc: Enabled bearer , priority 0 [ 632.759414][T23256] veth1_vlan: left promiscuous mode [ 632.766223][T23256] veth1_vlan: entered promiscuous mode [ 632.784350][T23256] veth1_vlan: entered allmulticast mode [ 632.809207][T23256] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 632.842614][T23270] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 632.864118][T23254] tipc: Disabling bearer [ 632.881481][T23265] syzkaller0: entered promiscuous mode [ 632.887241][T23265] syzkaller0: entered allmulticast mode [ 633.026895][T23278] IPVS: Error connecting to the multicast addr [ 633.035842][T23278] IPVS: Error connecting to the multicast addr [ 633.042398][T23278] IPVS: Error connecting to the multicast addr [ 633.066175][T23278] IPVS: Error connecting to the multicast addr [ 633.080067][T23278] IPVS: Error connecting to the multicast addr [ 633.096526][T23278] IPVS: Error connecting to the multicast addr [ 633.113359][T23278] IPVS: Error connecting to the multicast addr [ 633.132108][T23278] IPVS: Error connecting to the multicast addr [ 633.141734][T23280] ip6tnl0: entered allmulticast mode [ 633.163063][T23278] IPVS: Error connecting to the multicast addr [ 633.187103][T23278] IPVS: Error connecting to the multicast addr [ 633.204181][T23278] IPVS: Error connecting to the multicast addr [ 633.213515][T23278] IPVS: Error connecting to the multicast addr [ 633.239568][T23278] IPVS: Error connecting to the multicast addr [ 633.247274][T23278] IPVS: Error connecting to the multicast addr [ 633.253971][T23278] IPVS: Error connecting to the multicast addr [ 633.263064][T23278] IPVS: Error connecting to the multicast addr [ 633.271066][T23278] IPVS: Error connecting to the multicast addr [ 633.293798][T23278] IPVS: Error connecting to the multicast addr [ 633.308493][T23278] IPVS: Error connecting to the multicast addr [ 633.324307][T23278] IPVS: Error connecting to the multicast addr [ 633.343858][T23278] IPVS: Error connecting to the multicast addr [ 633.366827][T23278] IPVS: Error connecting to the multicast addr [ 633.380341][T23278] IPVS: Error connecting to the multicast addr [ 633.391548][T23278] IPVS: Error connecting to the multicast addr [ 633.424340][T23278] IPVS: Error connecting to the multicast addr [ 633.445093][T23278] IPVS: Error connecting to the multicast addr [ 633.498404][T23278] IPVS: Error connecting to the multicast addr [ 633.525034][T23278] IPVS: Error connecting to the multicast addr [ 633.579363][T23278] IPVS: Error connecting to the multicast addr [ 633.597154][T23278] IPVS: Error connecting to the multicast addr [ 633.617997][T23278] IPVS: Error connecting to the multicast addr [ 633.631853][T23278] IPVS: Error connecting to the multicast addr [ 633.652409][T23278] IPVS: Error connecting to the multicast addr [ 634.074650][T23317] syzkaller1: entered promiscuous mode [ 634.081208][T23317] syzkaller1: entered allmulticast mode [ 634.244850][T23330] openvswitch: netlink: Unknown key attributes 2 [ 634.374577][T23330] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 634.571143][T23347] xt_CT: You must specify a L4 protocol and not use inversions on it [ 634.749522][T23366] netlink: 'syz.3.5039': attribute type 19 has an invalid length. [ 634.912332][T23371] geneve2: entered promiscuous mode [ 634.938071][T23373] __nla_validate_parse: 3 callbacks suppressed [ 634.938087][T23373] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5042'. [ 635.003825][T23377] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5043'. [ 635.372226][T23388] tipc: Enabled bearer , priority 0 [ 635.417591][T23387] tipc: Disabling bearer [ 635.719869][T23412] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5054'. [ 635.758543][T23412] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5054'. [ 636.041909][T23428] syzkaller0: entered promiscuous mode [ 636.059868][T23428] syzkaller0: entered allmulticast mode [ 636.222449][T23434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5057'. [ 636.886669][T23466] openvswitch: netlink: Tunnel attr 44 out of range max 16 [ 636.949403][T23468] syzkaller0: entered promiscuous mode [ 636.954945][T23468] syzkaller0: entered allmulticast mode [ 636.982791][T23468] tipc: Enabled bearer , priority 0 [ 637.050763][T23478] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5067'. [ 637.067066][T23480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5064'. [ 637.091438][T23478] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5067'. [ 637.100211][T23480] netlink: 98 bytes leftover after parsing attributes in process `syz.2.5064'. [ 637.269016][T23467] tipc: Resetting bearer [ 637.326640][T23467] tipc: Disabling bearer [ 637.578614][T23505] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5075'. [ 637.764730][T23521] tipc: Enabled bearer , priority 0 [ 637.900717][T23521] syzkaller0: entered promiscuous mode [ 637.908719][T23521] syzkaller0: entered allmulticast mode [ 637.915095][T23521] tipc: Resetting bearer [ 637.944189][T23521] tipc: Resetting bearer [ 640.248544][T23521] tipc: Disabling bearer [ 640.270583][T23556] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 640.305472][T23556] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 640.467625][T23578] __nla_validate_parse: 2 callbacks suppressed [ 640.467645][T23578] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5093'. [ 640.550244][T23578] atomic_op ffff88807c2ff198 conn xmit_atomic 0000000000000000 [ 640.844570][T23605] netlink: 'syz.3.5100': attribute type 1 has an invalid length. [ 641.175044][T23626] netlink: 'syz.0.5109': attribute type 1 has an invalid length. [ 641.276855][T23626] 8021q: adding VLAN 0 to HW filter on device bond9 [ 641.336341][T23628] bond9: (slave gretap2): making interface the new active one [ 641.345605][T23628] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 641.354623][T23639] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5101'. [ 641.386230][T23639] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5101'. [ 641.402066][T23639] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5101'. [ 641.418835][T23639] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5101'. [ 641.428148][T23639] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5101'. [ 641.438500][T23639] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5101'. [ 641.448307][T23639] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5101'. [ 641.462727][T23639] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5101'. [ 641.472024][T23639] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5101'. [ 641.703611][T23648] syzkaller0: entered promiscuous mode [ 641.709458][T23648] syzkaller0: entered allmulticast mode [ 642.557037][T23704] syzkaller0: entered promiscuous mode [ 642.563347][T23704] syzkaller0: entered allmulticast mode [ 644.715149][T23751] netlink: 'syz.3.5141': attribute type 1 has an invalid length. [ 644.862517][T23758] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 644.879054][T23758] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 644.973265][T23751] gretap2: entered promiscuous mode [ 644.997326][T23751] bond9: (slave gretap2): making interface the new active one [ 645.028525][T23751] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 645.081299][T23764] macvlan6: entered promiscuous mode [ 645.095722][T23764] macvlan6: entered allmulticast mode [ 645.102846][T23764] bond9: entered promiscuous mode [ 645.130152][T23764] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 645.165073][T23764] bond9: (slave macvlan6): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 645.222198][T23764] bond9: left promiscuous mode [ 645.621964][T23794] sctp: [Deprecated]: syz.0.5152 (pid 23794) Use of struct sctp_assoc_value in delayed_ack socket option. [ 645.621964][T23794] Use struct sctp_sack_info instead [ 645.732802][T23802] syzkaller1: entered promiscuous mode [ 645.748199][T23802] syzkaller1: entered allmulticast mode [ 645.827576][T23806] __nla_validate_parse: 75 callbacks suppressed [ 645.827596][T23806] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5156'. [ 645.845149][T23808] netlink: 'syz.2.5155': attribute type 1 has an invalid length. [ 646.073347][ T6429] bond5: (slave ip6gretap3): link status up again after 0 ms [ 646.086004][ T6429] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 646.156360][T23825] tipc: Failed to remove unknown binding: 66,1,1/1684392036:2114883624/2114883626 [ 646.171677][T23825] tipc: Failed to remove unknown binding: 66,1,1/1684392036:2114883624/2114883626 [ 646.215487][ T6429] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 646.308438][T23836] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 646.355470][T12774] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 646.449863][T23844] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5166'. [ 646.547062][T22703] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 646.715779][ T6424] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 646.774204][T23863] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5172'. [ 646.839043][ T6424] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 646.873541][T23867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5174'. [ 646.967066][ T6420] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 647.075837][T23851] lo speed is unknown, defaulting to 1000 [ 647.105642][ T6424] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 647.122420][T23874] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5176'. [ 647.500256][T23884] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 647.513503][T23884] bond10 (unregistering): Released all slaves [ 647.600509][T23880] netlink: 'syz.3.5179': attribute type 3 has an invalid length. [ 647.609105][T23880] netlink: 'syz.3.5179': attribute type 1 has an invalid length. [ 647.619754][T23880] netlink: 212 bytes leftover after parsing attributes in process `syz.3.5179'. [ 647.653260][T23880] NCSI netlink: No device for ifindex 813332851 [ 647.671084][T23880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5179'. [ 647.685803][T23880] macsec3: entered promiscuous mode [ 647.696044][T23880] bridge0: entered promiscuous mode [ 647.701472][T23880] macsec3: entered allmulticast mode [ 647.716639][T23880] bridge0: entered allmulticast mode [ 647.723635][T23880] bridge0: port 1(macsec3) entered blocking state [ 647.732284][T23880] bridge0: port 1(macsec3) entered disabled state [ 647.749951][T23880] bridge0: left allmulticast mode [ 647.755156][T23880] bridge0: left promiscuous mode [ 647.783487][T23889] tap0: tun_chr_ioctl cmd 1074025676 [ 647.791009][T23889] tap0: owner set to 0 [ 647.812181][T23892] sctp: [Deprecated]: syz.4.5182 (pid 23892) Use of struct sctp_assoc_value in delayed_ack socket option. [ 647.812181][T23892] Use struct sctp_sack_info instead [ 648.037133][T23902] netlink: 'syz.4.5184': attribute type 22 has an invalid length. [ 648.045208][T23902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5184'. [ 648.180397][T23910] netlink: 'syz.3.5185': attribute type 1 has an invalid length. [ 648.216675][T23902] netlink: 'syz.4.5184': attribute type 22 has an invalid length. [ 648.224561][T23902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5184'. [ 648.393299][T23910] 8021q: adding VLAN 0 to HW filter on device bond10 [ 648.421949][T23920] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5187'. [ 648.533289][T23913] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 648.598594][T23905] 8021q: adding VLAN 0 to HW filter on device bond11 [ 648.610106][T23905] bond10: (slave bond11): Enslaving as an active interface with a down link [ 649.150307][T23940] : entered promiscuous mode [ 649.760238][T23931] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 649.772906][T23931] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 649.790553][T23959] xt_CT: You must specify a L4 protocol and not use inversions on it [ 649.897901][T23931] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 649.936927][T23977] netlink: 'syz.0.5200': attribute type 2 has an invalid length. [ 649.938702][T23931] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 649.967623][T23977] netlink: 'syz.0.5200': attribute type 2 has an invalid length. [ 650.008456][T23931] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 650.014777][T23931] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 650.231332][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 650.268877][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 650.278233][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 650.288531][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 650.296372][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 650.328107][ T5150] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 650.336000][ T5150] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 650.343415][ T5150] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 650.351895][ T5150] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 650.362013][ T5150] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 650.912086][T23957] lo speed is unknown, defaulting to 1000 [ 651.171972][T22704] net_ratelimit: 19 callbacks suppressed [ 651.171995][T22704] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 651.206814][T24025] __nla_validate_parse: 8 callbacks suppressed [ 651.206834][T24025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5210'. [ 651.296237][ T1013] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 651.416691][T24039] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 651.435430][ T6420] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 651.595588][T24046] syzkaller1: entered promiscuous mode [ 651.601221][T24046] syzkaller1: entered allmulticast mode [ 651.828892][ T6420] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 651.965804][ T6420] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 651.988519][T24066] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5218'. [ 652.011327][T24066] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5218'. [ 652.166227][ T1013] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 652.248248][T24078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5219'. [ 652.275875][T22704] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 652.309550][T24078] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5219'. [ 652.342374][T24083] SET target dimension over the limit! [ 652.450549][ T5150] Bluetooth: hci5: command tx timeout [ 652.461487][T23957] chnl_net:caif_netlink_parms(): no params data found [ 652.550418][T24093] syzkaller0: entered promiscuous mode [ 652.562438][T24093] syzkaller0: entered allmulticast mode [ 652.717656][T24102] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 652.891072][T22704] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 653.041373][T24115] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5227'. [ 653.076831][T23957] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.084118][T23957] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.111369][T24126] netlink: 'syz.2.5229': attribute type 3 has an invalid length. [ 653.121031][T23957] bridge_slave_0: entered allmulticast mode [ 653.142550][T24126] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5229'. [ 653.145877][T23957] bridge_slave_0: entered promiscuous mode [ 653.191537][T23957] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.203010][T23957] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.210591][T23957] bridge_slave_1: entered allmulticast mode [ 653.229905][T23957] bridge_slave_1: entered promiscuous mode [ 653.361573][T23957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.384362][T24137] sctp: [Deprecated]: syz.2.5232 (pid 24137) Use of struct sctp_assoc_value in delayed_ack socket option. [ 653.384362][T24137] Use struct sctp_sack_info instead [ 653.423216][T23957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.441947][T24139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5231'. [ 653.564571][T23957] team0: Port device team_slave_0 added [ 653.616451][T12774] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 653.626263][T24146] syzkaller1: entered promiscuous mode [ 653.645754][T24146] syzkaller1: entered allmulticast mode [ 653.656229][T23957] team0: Port device team_slave_1 added [ 653.761879][T23957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.794065][T23957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.840934][T23957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.884416][T23957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.894534][T23957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.921424][T23957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.975237][T24160] syzkaller0: entered promiscuous mode [ 653.981023][T24160] syzkaller0: entered allmulticast mode [ 654.007102][T24163] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5236'. [ 654.189247][T23957] hsr_slave_0: entered promiscuous mode [ 654.222312][T23957] hsr_slave_1: entered promiscuous mode [ 654.244035][T23957] debugfs: 'hsr0' already exists in 'hsr' [ 654.269023][T23957] Cannot create hsr debugfs directory [ 654.386256][T24179] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5239'. [ 654.525915][ T5150] Bluetooth: hci5: command tx timeout [ 654.884791][T23957] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.242102][T23957] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.541292][T23957] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.784163][T23957] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.255736][ T3746] net_ratelimit: 9 callbacks suppressed [ 656.255758][ T3746] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 656.406563][ T3746] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 656.515604][ T6418] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 656.568063][T23957] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 656.615758][ T5150] Bluetooth: hci5: command tx timeout [ 656.655685][T23957] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 656.692316][T23957] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 656.749961][T23957] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 656.844803][T24275] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5258'. [ 656.855593][ T3746] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 656.985425][ T6428] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 657.064549][T24287] netlink: 'syz.0.5260': attribute type 4 has an invalid length. [ 657.225838][T23957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.690265][ T5150] Bluetooth: hci5: command tx timeout [ 659.388858][T24308] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 659.419097][T23957] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.486096][ T6427] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.493316][ T6427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.541913][ T6427] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.549171][ T6427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.563026][T24338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5265'. [ 659.595525][ T6427] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 659.606565][T24343] ipt_rpfilter: unknown options [ 659.785947][ T6427] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 659.906465][T12774] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 660.045511][ T3425] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 660.155938][ T6427] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 660.269455][T23957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.287639][T24375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5276'. [ 660.346791][T24375] sit0: entered promiscuous mode [ 660.357104][T24375] netlink: 'syz.0.5276': attribute type 1 has an invalid length. [ 660.365003][T24375] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5276'. [ 660.379243][T24375] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5276'. [ 660.417566][T24378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5277'. [ 660.429461][T23957] veth0_vlan: entered promiscuous mode [ 660.451730][T23957] veth1_vlan: entered promiscuous mode [ 660.514103][T24381] pim6reg527: entered allmulticast mode [ 660.550762][T23957] veth0_macvtap: entered promiscuous mode [ 660.569992][T23957] veth1_macvtap: entered promiscuous mode [ 660.597787][T23957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.642148][T23957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.671865][ T6427] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.692908][ T6427] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.728451][ T6427] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.739949][ T6427] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.767275][ T5150] Bluetooth: hci5: command tx timeout [ 660.784117][T24386] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5280'. [ 660.869375][T24390] bond0: (slave macvlan4): Error -98 calling set_mac_address [ 661.110143][T24405] ip6gre1: entered promiscuous mode [ 661.121209][T24405] ip6gre1: entered allmulticast mode [ 661.122310][T24397] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 661.241187][ T6427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.263133][ T6427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.358479][ T3746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.375495][ T3746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.435977][ T6420] net_ratelimit: 6 callbacks suppressed [ 661.436004][ T6420] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 661.536293][ T6420] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 661.550005][ T6420] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 661.565830][T23122] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 661.635702][ T6420] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 661.747424][T24431] netlink: 'syz.3.5194': attribute type 1 has an invalid length. [ 661.889305][ T6427] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 661.922495][T24430] netlink: 'syz.7.5293': attribute type 6 has an invalid length. [ 662.005558][ T6427] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 662.126939][ T6427] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 662.220956][T24451] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5297'. [ 662.245777][ T3425] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 662.327531][T24455] netlink: 'syz.3.5300': attribute type 64 has an invalid length. [ 662.343510][T24455] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5300'. [ 662.356485][ T6429] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 662.475478][T22703] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 662.526038][ T6547] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 662.544572][ T6547] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 662.563207][T24467] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5303'. [ 662.574872][T24466] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5303'. [ 662.667202][T24470] netlink: 'syz.0.5304': attribute type 1 has an invalid length. [ 662.684682][T24472] block nbd0: NBD_DISCONNECT [ 662.690086][T24472] block nbd0: Send disconnect failed -32 [ 662.699520][T24472] block nbd0: shutting down sockets [ 662.781016][T24470] 8021q: adding VLAN 0 to HW filter on device bond10 [ 662.824119][T24485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5304'. [ 662.858993][ T6427] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 662.934045][T24482] bond10: (slave geneve2): making interface the new active one [ 662.957502][T24482] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 663.018036][T24485] veth11: entered promiscuous mode [ 663.043025][T24502] IPVS: set_ctl: invalid protocol: 0 172.20.20.10:20004 [ 663.062782][T24470] vlan3: entered allmulticast mode [ 663.080112][T24470] bond10: entered allmulticast mode [ 663.094454][T24470] geneve2: entered allmulticast mode [ 663.119402][T24470] bond10: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 663.245788][T24500] syzkaller0: entered promiscuous mode [ 663.255084][T24500] syzkaller0: entered allmulticast mode [ 663.424419][ T3425] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 663.533398][T24522] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5316'. [ 663.556056][T24522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5316'. [ 663.601293][T24524] netlink: 212360 bytes leftover after parsing attributes in process `syz.7.5315'. [ 663.761510][T24528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5319'. [ 663.828795][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 663.838933][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 663.847334][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 663.855988][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 663.863754][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 664.037470][T24535] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5320'. [ 664.290422][T22701] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.302675][T22701] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.339467][T24530] lo speed is unknown, defaulting to 1000 [ 664.553009][T22701] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.573739][T22701] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.784327][T24570] netlink: 'syz.7.5327': attribute type 1 has an invalid length. [ 664.850354][T22701] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.862898][T22701] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.951508][T24570] 8021q: adding VLAN 0 to HW filter on device bond2 [ 664.974275][T24563] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 665.043293][T24574] 8021q: adding VLAN 0 to HW filter on device bond3 [ 665.054560][T24574] bond2: (slave bond3): Enslaving as an active interface with a down link [ 665.237474][T22701] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 665.271093][T22701] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.886204][ T5834] Bluetooth: hci4: command tx timeout [ 666.281861][T22701] bond0 (unregistering): Released all slaves [ 666.418323][T22701] bond1 (unregistering): Released all slaves [ 666.432908][T22701] bond2 (unregistering): Released all slaves [ 666.645076][T22701] bond3 (unregistering): Released all slaves [ 666.660133][T22701] bond4 (unregistering): Released all slaves [ 666.795856][T22701] bond5 (unregistering): Released all slaves [ 666.912777][T22701] : left promiscuous mode [ 667.045711][ T3746] net_ratelimit: 7 callbacks suppressed [ 667.045731][ T3746] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 667.107910][T22701] tipc: Disabling bearer [ 667.136003][T24530] chnl_net:caif_netlink_parms(): no params data found [ 667.142906][T22701] tipc: Left network mode [ 667.210475][T22701] IPVS: stopping master sync thread 17720 ... [ 667.328784][T24644] bond4: option xmit_hash_policy: invalid value (64) [ 667.339899][T24644] bond4 (unregistering): Released all slaves [ 667.438651][T24659] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 667.773820][T24673] netlink: 'syz.0.5350': attribute type 10 has an invalid length. [ 667.864435][T24530] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.874959][T24530] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.882927][T24530] bridge_slave_0: entered allmulticast mode [ 667.894062][T24530] bridge_slave_0: entered promiscuous mode [ 667.904024][T24530] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.911721][T24530] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.919353][T24530] bridge_slave_1: entered allmulticast mode [ 667.937079][T24530] bridge_slave_1: entered promiscuous mode [ 667.967262][ T5834] Bluetooth: hci4: command tx timeout [ 667.995865][ T6424] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 668.051899][T24680] netlink: 'syz.7.5351': attribute type 7 has an invalid length. [ 668.122058][T24530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.193355][T24530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.412260][T24530] team0: Port device team_slave_0 added [ 668.435183][T24530] team0: Port device team_slave_1 added [ 668.662323][T24530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.704390][T24530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.806077][T24530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.921018][T24530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.969861][T24530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.058472][T24530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.093179][T24698] syzkaller1: entered promiscuous mode [ 669.107777][T24698] syzkaller1: entered allmulticast mode [ 669.282224][T22701] hsr_slave_0: left promiscuous mode [ 669.296448][T22701] hsr_slave_1: left promiscuous mode [ 669.342905][T22701] veth1_macvtap: left promiscuous mode [ 669.349117][T22701] veth0_macvtap: left promiscuous mode [ 669.354894][T22701] veth1_vlan: left promiscuous mode [ 669.360648][T22701] veth0_vlan: left promiscuous mode [ 670.045695][ T5834] Bluetooth: hci4: command tx timeout [ 670.482213][T24715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 670.603996][T24530] hsr_slave_0: entered promiscuous mode [ 670.617319][T24530] hsr_slave_1: entered promiscuous mode [ 670.624050][T24530] debugfs: 'hsr0' already exists in 'hsr' [ 670.633974][T24530] Cannot create hsr debugfs directory [ 670.905643][T22703] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 670.955169][T24736] __nla_validate_parse: 8 callbacks suppressed [ 670.955189][T24736] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5368'. [ 671.136203][T24742] netlink: 'syz.7.5371': attribute type 1 has an invalid length. [ 671.191293][T24742] bond4: entered promiscuous mode [ 671.197471][T24742] 8021q: adding VLAN 0 to HW filter on device bond4 [ 671.205799][T24738] syzkaller0: entered promiscuous mode [ 671.213121][T24742] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5371'. [ 671.233877][T24738] syzkaller0: entered allmulticast mode [ 671.240652][T24742] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5371'. [ 671.265544][T12755] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 671.319363][T22701] IPVS: stop unused estimator thread 0... [ 671.535502][T12755] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 671.655532][ T6424] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 671.787293][ T6424] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 671.887934][T24768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5379'. [ 671.967120][T24530] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 671.996006][T24530] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 672.067249][T24530] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 672.092470][T24530] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 672.126366][ T5834] Bluetooth: hci4: command tx timeout [ 672.225536][ T6424] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 672.258898][T24789] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 672.382641][T12774] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 672.419622][T24530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.469371][T24530] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.497796][T12774] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.505033][T12774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.541391][ T6424] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.548890][ T6424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.602294][T24799] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5386'. [ 672.642582][T24805] netlink: 'syz.7.5389': attribute type 4 has an invalid length. [ 672.770188][T24807] : entered promiscuous mode [ 672.836462][T22701] bond5: (slave ip6gretap3): failed to get link speed/duplex [ 672.957382][T24818] ip6gre0: Master is either lo or non-ether device [ 672.982793][T24821] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 672.990183][T24821] IPv6: NLM_F_CREATE should be set when creating new route [ 672.997536][T24821] IPv6: NLM_F_CREATE should be set when creating new route [ 673.007461][T24818] netlink: 'syz.7.5394': attribute type 12 has an invalid length. [ 673.008536][T24821] ------------[ cut here ]------------ [ 673.022749][T24821] WARNING: drivers/net/netdevsim/fib.c:831 at nsim_fib_event_nb+0xed8/0x1080, CPU#0: syz.0.5395/24821 [ 673.034105][T24821] Modules linked in: [ 673.038131][T24821] CPU: 0 UID: 0 PID: 24821 Comm: syz.0.5395 Not tainted syzkaller #0 PREEMPT(full) [ 673.039174][T24822] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5395'. [ 673.047669][T24821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 673.047690][T24821] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 [ 673.047733][T24821] Code: fa be 02 00 00 00 eb 0a e8 c5 b2 d7 fa be 01 00 00 00 4c 89 f7 e8 78 b5 a4 fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 a9 b2 d7 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 673.047754][T24821] RSP: 0018:ffffc9000b8e6f08 EFLAGS: 00010283 [ 673.047777][T24821] RAX: ffffffff86e94607 RBX: 0000000000000002 RCX: 0000000000080000 [ 673.047794][T24821] RDX: ffffc90011ece000 RSI: 00000000000048d8 RDI: 00000000000048d9 [ 673.047809][T24821] RBP: dffffc0000000000 R08: ffff88807a411c2f R09: 1ffff1100f482385 [ 673.047827][T24821] R10: dffffc0000000000 R11: ffffed100f482386 R12: ffff888034af2000 [ 673.047845][T24821] R13: ffffc9000b8e7080 R14: 0000000000000001 R15: ffffc9000b8e7098 [ 673.047862][T24821] FS: 00007fed2e9f56c0(0000) GS:ffff888125e1e000(0000) knlGS:0000000000000000 [ 673.047882][T24821] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 673.047897][T24821] CR2: 0000000000000000 CR3: 0000000079a52000 CR4: 00000000003526f0 [ 673.047915][T24821] Call Trace: [ 673.047925][T24821] [ 673.047947][T24821] notifier_call_chain+0x19d/0x3a0 [ 673.047982][T24821] ? atomic_notifier_call_chain+0x26/0x180 [ 673.186596][T24821] atomic_notifier_call_chain+0xda/0x180 [ 673.192296][T24821] call_fib_notifiers+0x31/0x60 [ 673.197278][T24821] call_fib6_multipath_entry_notifiers+0xe6/0x150 [ 673.203763][T24821] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 673.209217][T24821] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 673.216497][T24821] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 673.222418][T24821] inet6_rtm_newroute+0x12f5/0x18c0 [ 673.228130][T24821] ? kasan_quarantine_put+0xbb/0x1f0 [ 673.233478][T24821] ? lockdep_hardirqs_on+0x7b/0x110 [ 673.239101][T24821] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 673.244715][T24821] ? kmem_cache_free+0x197/0x620 [ 673.250170][T24821] ? nlmon_xmit+0xb0/0x100 [ 673.254686][T24821] ? lockdep_hardirqs_on+0x7b/0x110 [ 673.260047][T24821] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 673.265747][T24821] rtnetlink_rcv_msg+0x7cf/0xb70 [ 673.270757][T24821] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 673.276016][T24821] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 673.281551][T24821] ? ref_tracker_free+0x63a/0x7d0 [ 673.286708][T24821] ? __asan_memcpy+0x40/0x70 [ 673.291372][T24821] ? __pfx_ref_tracker_free+0x10/0x10 [ 673.296896][T24821] netlink_rcv_skb+0x208/0x470 [ 673.301907][T24821] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 673.307619][T24821] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 673.312984][T24821] ? netlink_deliver_tap+0x2e/0x1b0 [ 673.318342][T24821] netlink_unicast+0x82f/0x9e0 [ 673.323694][T24821] ? __pfx_netlink_unicast+0x10/0x10 [ 673.329627][T24821] ? __alloc_skb+0x198/0x3a0 [ 673.334292][T24821] ? netlink_sendmsg+0x642/0xb30 [ 673.339374][T24821] ? skb_put+0x11b/0x210 [ 673.343673][T24821] netlink_sendmsg+0x805/0xb30 [ 673.348650][T24821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.354003][T24821] ? aa_sock_msg_perm+0xf1/0x1b0 [ 673.359081][T24821] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 673.364430][T24821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.369872][T24821] __sock_sendmsg+0x21c/0x270 [ 673.374621][T24821] ____sys_sendmsg+0x52d/0x820 [ 673.379880][T24821] ? __pfx_____sys_sendmsg+0x10/0x10 [ 673.385371][T24821] ? import_iovec+0x74/0xa0 [ 673.389939][T24821] ___sys_sendmsg+0x21f/0x2a0 [ 673.394715][T24821] ? __pfx____sys_sendmsg+0x10/0x10 [ 673.400087][T24821] ? __pfx_futex_wake_mark+0x10/0x10 [ 673.405738][T24821] ? __fget_files+0x2a/0x420 [ 673.410387][T24821] ? __fget_files+0x3a0/0x420 [ 673.415129][T24821] __sys_sendmmsg+0x227/0x430 [ 673.420041][T24821] ? __pfx___sys_sendmmsg+0x10/0x10 [ 673.425804][T24821] ? do_futex+0x333/0x420 [ 673.430214][T24821] ? fd_install+0x95/0x3d0 [ 673.434675][T24821] ? lock_acquire+0x107/0x340 [ 673.439907][T24821] ? rcu_is_watching+0x15/0xb0 [ 673.445093][T24821] __x64_sys_sendmmsg+0xa0/0xc0 [ 673.450073][T24821] do_syscall_64+0xec/0xf80 [ 673.454637][T24821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.460856][T24821] ? trace_irq_disable+0x37/0x100 [ 673.465965][T24821] ? clear_bhb_loop+0x60/0xb0 [ 673.470687][T24821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.476665][T24821] RIP: 0033:0x7fed2db9acb9 [ 673.481120][T24821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.501217][T24821] RSP: 002b:00007fed2e9f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 673.509867][T24821] RAX: ffffffffffffffda RBX: 00007fed2de15fa0 RCX: 00007fed2db9acb9 [ 673.518064][T24821] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000006 [ 673.526165][T24821] RBP: 00007fed2dc08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 673.534673][T24821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 673.543232][T24821] R13: 00007fed2de16038 R14: 00007fed2de15fa0 R15: 00007fff188f0688 [ 673.551463][T24821] [ 673.554537][T24821] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 673.561872][T24821] CPU: 0 UID: 0 PID: 24821 Comm: syz.0.5395 Not tainted syzkaller #0 PREEMPT(full) [ 673.571290][T24821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 673.581389][T24821] Call Trace: [ 673.584719][T24821] [ 673.587693][T24821] vpanic+0x1e0/0x670 [ 673.591736][T24821] panic+0xb9/0xc0 [ 673.595516][T24821] ? __pfx_panic+0x10/0x10 [ 673.600009][T24821] __warn+0x317/0x4b0 [ 673.604129][T24821] ? nsim_fib_event_nb+0xed8/0x1080 [ 673.609395][T24821] ? nsim_fib_event_nb+0xed8/0x1080 [ 673.614659][T24821] __report_bug+0x288/0x500 [ 673.619248][T24821] ? inet6_rtm_newroute+0x12f5/0x18c0 [ 673.624673][T24821] ? rtnetlink_rcv_msg+0x7cf/0xb70 [ 673.629844][T24821] ? netlink_rcv_skb+0x208/0x470 [ 673.634836][T24821] ? nsim_fib_event_nb+0xed8/0x1080 [ 673.640102][T24821] ? __pfx___report_bug+0x10/0x10 [ 673.645202][T24821] ? nsim_fib_event_nb+0xed8/0x1080 [ 673.650455][T24821] report_bug+0x16a/0x220 [ 673.654831][T24821] ? nsim_fib_event_nb+0xed8/0x1080 [ 673.660091][T24821] ? nsim_fib_event_nb+0xeda/0x1080 [ 673.665364][T24821] handle_bug+0x98/0x200 [ 673.669736][T24821] exc_invalid_op+0x1a/0x50 [ 673.674273][T24821] asm_exc_invalid_op+0x1a/0x20 [ 673.679155][T24821] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 [ 673.684999][T24821] Code: fa be 02 00 00 00 eb 0a e8 c5 b2 d7 fa be 01 00 00 00 4c 89 f7 e8 78 b5 a4 fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 a9 b2 d7 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 673.704631][T24821] RSP: 0018:ffffc9000b8e6f08 EFLAGS: 00010283 [ 673.710731][T24821] RAX: ffffffff86e94607 RBX: 0000000000000002 RCX: 0000000000080000 [ 673.718756][T24821] RDX: ffffc90011ece000 RSI: 00000000000048d8 RDI: 00000000000048d9 [ 673.726747][T24821] RBP: dffffc0000000000 R08: ffff88807a411c2f R09: 1ffff1100f482385 [ 673.734739][T24821] R10: dffffc0000000000 R11: ffffed100f482386 R12: ffff888034af2000 [ 673.742737][T24821] R13: ffffc9000b8e7080 R14: 0000000000000001 R15: ffffc9000b8e7098 [ 673.750743][T24821] ? nsim_fib_event_nb+0xed7/0x1080 [ 673.755992][T24821] ? nsim_fib_event_nb+0xed7/0x1080 [ 673.761293][T24821] notifier_call_chain+0x19d/0x3a0 [ 673.766473][T24821] ? atomic_notifier_call_chain+0x26/0x180 [ 673.772338][T24821] atomic_notifier_call_chain+0xda/0x180 [ 673.778031][T24821] call_fib_notifiers+0x31/0x60 [ 673.782912][T24821] call_fib6_multipath_entry_notifiers+0xe6/0x150 [ 673.789362][T24821] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 673.794675][T24821] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 673.801736][T24821] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 673.807180][T24821] inet6_rtm_newroute+0x12f5/0x18c0 [ 673.812477][T24821] ? kasan_quarantine_put+0xbb/0x1f0 [ 673.817799][T24821] ? lockdep_hardirqs_on+0x7b/0x110 [ 673.823037][T24821] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 673.828692][T24821] ? kmem_cache_free+0x197/0x620 [ 673.833653][T24821] ? nlmon_xmit+0xb0/0x100 [ 673.838118][T24821] ? lockdep_hardirqs_on+0x7b/0x110 [ 673.843364][T24821] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 673.848931][T24821] rtnetlink_rcv_msg+0x7cf/0xb70 [ 673.853917][T24821] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 673.859067][T24821] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 673.864573][T24821] ? ref_tracker_free+0x63a/0x7d0 [ 673.869638][T24821] ? __asan_memcpy+0x40/0x70 [ 673.874313][T24821] ? __pfx_ref_tracker_free+0x10/0x10 [ 673.879727][T24821] netlink_rcv_skb+0x208/0x470 [ 673.884525][T24821] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 673.890103][T24821] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 673.895436][T24821] ? netlink_deliver_tap+0x2e/0x1b0 [ 673.900674][T24821] netlink_unicast+0x82f/0x9e0 [ 673.905483][T24821] ? __pfx_netlink_unicast+0x10/0x10 [ 673.910810][T24821] ? __alloc_skb+0x198/0x3a0 [ 673.915431][T24821] ? netlink_sendmsg+0x642/0xb30 [ 673.920395][T24821] ? skb_put+0x11b/0x210 [ 673.924673][T24821] netlink_sendmsg+0x805/0xb30 [ 673.929490][T24821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.934829][T24821] ? aa_sock_msg_perm+0xf1/0x1b0 [ 673.939817][T24821] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 673.945218][T24821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.950542][T24821] __sock_sendmsg+0x21c/0x270 [ 673.955263][T24821] ____sys_sendmsg+0x52d/0x820 [ 673.960076][T24821] ? __pfx_____sys_sendmsg+0x10/0x10 [ 673.965405][T24821] ? import_iovec+0x74/0xa0 [ 673.969945][T24821] ___sys_sendmsg+0x21f/0x2a0 [ 673.974655][T24821] ? __pfx____sys_sendmsg+0x10/0x10 [ 673.979889][T24821] ? __pfx_futex_wake_mark+0x10/0x10 [ 673.985224][T24821] ? __fget_files+0x2a/0x420 [ 673.989843][T24821] ? __fget_files+0x3a0/0x420 [ 673.994577][T24821] __sys_sendmmsg+0x227/0x430 [ 673.999350][T24821] ? __pfx___sys_sendmmsg+0x10/0x10 [ 674.004585][T24821] ? do_futex+0x333/0x420 [ 674.008968][T24821] ? fd_install+0x95/0x3d0 [ 674.013459][T24821] ? lock_acquire+0x107/0x340 [ 674.018188][T24821] ? rcu_is_watching+0x15/0xb0 [ 674.022997][T24821] __x64_sys_sendmmsg+0xa0/0xc0 [ 674.027879][T24821] do_syscall_64+0xec/0xf80 [ 674.032424][T24821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.038524][T24821] ? trace_irq_disable+0x37/0x100 [ 674.043579][T24821] ? clear_bhb_loop+0x60/0xb0 [ 674.048287][T24821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.054217][T24821] RIP: 0033:0x7fed2db9acb9 [ 674.058664][T24821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 674.078306][T24821] RSP: 002b:00007fed2e9f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 674.086749][T24821] RAX: ffffffffffffffda RBX: 00007fed2de15fa0 RCX: 00007fed2db9acb9 [ 674.094745][T24821] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000006 [ 674.102751][T24821] RBP: 00007fed2dc08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 674.110749][T24821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.118747][T24821] R13: 00007fed2de16038 R14: 00007fed2de15fa0 R15: 00007fff188f0688 [ 674.126778][T24821] [ 674.130439][T24821] Kernel Offset: disabled [ 674.134772][T24821] Rebooting in 86400 seconds..