last executing test programs: 2m38.571453151s ago: executing program 32 (id=3514): syz_emit_ethernet(0x34, &(0x7f00000004c0)={@local, @random="99879e18f3ff", @void, {@generic={0x8906, "434b5682f8682ed45b171376ad6a4e38b7aea7854bdfacbcb6245fd5539d8ffe6a8f98cecd73"}}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000001100)={'ip_vti0\x00', 0x0, 0x7, 0x80, 0x7, 0x9c2, {{0x2b, 0x4, 0x0, 0x0, 0xac, 0x66, 0x0, 0x7, 0x29, 0x0, @broadcast, @private=0xa010101, {[@rr={0x7, 0x7, 0x49, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @ra={0x94, 0x4}, @generic={0x44, 0x2}, @noop, @cipso={0x86, 0x44, 0xffffffffffffffff, [{0x7, 0xa, "6de7ab88a2213b06"}, {0x6, 0x12, "13d0a308a2b69cb1fe0c83e31699ddd7"}, {0x5, 0x5, "86c793"}, {0x7, 0x10, "319ebbaa6152b4505f1bb1b07203"}, {0x0, 0xd, "afd095b3a5f9d051293f84"}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0x98, 0x3, 0xb, [{@private=0xa010102, 0x4}, {@private=0xa010101, 0x7}, {@private=0xa010102, 0x100}, {@private=0xa010102, 0x7fffffff}, {@empty, 0x4}]}, @lsrr={0x83, 0x13, 0x5d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty, @private=0xa010101]}]}}}}}) r4 = getuid() sendmsg$nl_xfrm(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001200)=@newsa={0x224, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x3c}, @in=@local, {0x200000, 0x0, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x7bb}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8, 0x16, 0xf}, @sa={0xe4, 0x6, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e22, 0x6, 0x4e22, 0xd18, 0x2, 0x20, 0x40, 0xc, r3, r4}, {@in=@remote, 0x4d6, 0x32}, @in6=@local, {0xc97, 0x2, 0x9b7c, 0x77, 0x3, 0x2, 0x3, 0x4}, {0x4, 0x10, 0x6, 0xb53}, {0xffff9ed5, 0x2138}, 0x70bd2a, 0x3502, 0x2, 0x4, 0xff, 0x1}}]}, 0x224}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000000100)=""/4096, 0x1000, 0x2002, 0x0, 0x0) 2m23.273454625s ago: executing program 33 (id=3723): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 2m16.923917582s ago: executing program 4 (id=4022): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x40, 0x40}, 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r0, 0x0, 0x0}, 0x20) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x5, @private2, 0x9}]}, &(0x7f0000000080)=0x10) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) (async) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000002c0)={r2, 0x4, 0x6, 0x80000001}, 0x10) (async) socket$isdn(0x22, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r5) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00~', @ANYRES16=r6, @ANYBLOB="010029bd7000ffdbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00030000000c008f00ffffff7f000000000c0090000900000000000000"], 0x54}}, 0x48000) 2m16.795606401s ago: executing program 2 (id=4023): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x24}, 0x1, 0x0, 0x0, 0x44001}, 0xc800) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xff0000ff, 0xff0001fe, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'pim6reg1\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x2e, 0xb, 0x3, 0x3c}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7ff, 0x101}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, [0x0, 0x0, 0x0, 0xff], [0xffffffff], 'wg1\x00', 'gre0\x00', {}, {0xff}, 0x87, 0x0, 0x0, 0x2}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x200003, 0x4, 0x7, 0x5, 0x8, 0xa8}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x350) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x3, 0x5, 0xfffdfffe) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x400448c9, &(0x7f00000000c0)={'wlan0\x00', 0x1}) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x24, 0x66, 0xf31, 0xf7fffffb, 0x3, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {0x0, 0xffff}, {0x9, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet6(r0, &(0x7f0000000e00)={0xa, 0x4e22, 0x1de, @mcast1, 0x91}, 0x1c) 2m16.643966123s ago: executing program 0 (id=4024): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000100)=0x1) (async) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000100)=0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x0, 0xfffeffff}, 0xc) ioctl$sock_rose_SIOCADDRT(r0, 0x891b, 0x0) (async) ioctl$sock_rose_SIOCADDRT(r0, 0x891b, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @multicast2}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010101}}) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10) (async) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000140)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x51c, 0x40, 0x107, 0x70bd26, 0x0, {0x4, 0x7c}, [@nested={0x508, 0x1c2, 0x0, 0x1, [@nested={0x501, 0xee, 0x0, 0x1, [@generic="cb1bccab3400e37b7ca4820f8662c31a25c132f829a527cbc30d26ab39b5b2c5e9af54f450ba923c8754f6973fdad16e4c62484e07775c7fe444ed16c229843fe8d9136046913dd129d08a5b2a7c37abd5544e8937ec9e14f28d63b88f47c367ffb690839484550c5f23408d7e52e51bf01d77d675359f42617456efe82a4b3bfe6ee555c8e832579e56dcdb9b036458c604cfab56a8878e06a3651d035f5c971c04caa631534499a52cd0fa19713869f609fa52b207bea4e6a5c34539", @generic="3842ddd4279271c0f4bd04e019c4dedea5cde68d", @typed={0x94, 0x96, 0x0, 0x0, @binary="f95be46598acbb7fb3aef7a5423402f6613e78e8c3233b89debdc7b98d59d4c038e417d99177d3f03e4b91d21d6f8ca2b92ef9c8cde16446d77997070a14da5a9b1424efefa4c78666ded521e461e7bf62845d1b38900cc1fec81f77b1833bbe0abb5ec4e613f977e6b0ad2e6d8517bb516bfa65ed512bdfb85eb2363f057b842a14965f8e509bb1c2128f3c839294a6"}, @nested={0x267, 0x2b, 0x0, 0x1, [@typed={0x8, 0x41, 0x0, 0x0, @pid=r5}, @nested={0x4, 0xff}, @typed={0x14, 0x134, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @generic="67c7ce7fc6c6a9145f2fd002bac30b1772206e41689315daaf4bdd24a4a2cd53f3ceafc28f1d86decda59eb6c9c4fc74fb26efe385824d5d125a0255e94b5fb706646f6a16ecfa7638c4cb77b81fd3646a64f00384d18db2b67d7235fae204c6dd98a908a8d70b4c1ccef605ae58b7463cfdfe4542", @typed={0x8, 0xae, 0x0, 0x0, @pid=r6}, @typed={0xc0, 0x7a, 0x0, 0x0, @binary="d3ac21501df620cfc4ff3e217f54e0cdbacf006ca636746620122b0e6fc25adc184e16242e3e00e2365ab604801d4f3e98faa1fd43d177b2d5b17bb134babe4c13db65b358d79d3a87fef6eccd683ae88581d90232bff9f9114dabbe5b9b7b423874f61bb7c969b952f710c4279e334f875bd8e56440fb5fc1ae437a377225284d54b0b7c54cd461165a271c3dc69f94ad2dbb068046f795dd0bc45ced2162c94ec16c8491ebd82205d935b7d8fb1776f742421a163a1c19c82a0585"}, @generic="44c58abeac31e393cf4d92daf357113969e592b5cbaf5923968ccf96dd98419a73b27c7c71beef8f52eca75c5d5677384f", @generic="4bd6d2862485304d06f63efca6524d493974defc1bff0a02a1c4e66b7ab9c0ee2e66a4b40ff147d9b1bd8a45715ff4f071cb8d548abb3ed77b594aa261eca9cd52d51ad1387ed0860f48dabfd4770506928df352c802594b669faa56d2b09a71e9d88ff92a577de090cc619d317738be0e9dd8bd731f11c0584a7418b41d58707c84867c64cdcdd4f95cc6b4144e3299de01061f94740197e7ed9b7448cec6b9106b584d970bc2a2f6140e8c20ed81277128517eef8a62fbba935ef52247051ff293345b1a7e223f501baf86caa77b739873963e91"]}, @nested={0x130, 0xce, 0x0, 0x1, [@generic="fa06efbcd443876cebe8b5c3b65a6d7dac16653b9226fa1e20681951324635bb638a79dc8ae2dfa3d44aa9e506bf9736898c88f59b63f3f1b5346a1d", @nested={0x4, 0x10e}, @nested={0x4, 0xb}, @generic="8288c8d7614056fa9eca82d39187b9831a3f840d8d7546fb4ae9681d88e1f2d18ee5bdf48a305d922c17be5a9012822a08394ccca6efa7ba40add8ce1baaab5dad4a9b6109d7aeac242eb003cce3e26b", @generic="8b3ce35b5953b3df3c80e4eb1c12925767b2571fa94bb3b281d0c92fbfe3fac80127a0a664f3986a4f3a6473fc8b7c96e88f52ad7a208376fc3c4b25dd3df2075411da106ed8448b4520411c568ed777886b2ee776d35a22d9b9c93f7995051cf3ad56c06aee90ca631744b65b69f0b528f168fbba4c3778410904869e5c75bc8ba4f90429544b0ef01b6374f400d922e6ef61e4022088c1"]}]}]}]}, 0x51c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) listen(r2, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x53, 0x0, 0x0, 0x8d}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x53, 0x0, 0x0, 0x8d}, 0x28) accept4(r2, 0x0, 0x0, 0x80800) 2m16.643523855s ago: executing program 4 (id=4025): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008"], 0x0) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 2m16.607350413s ago: executing program 2 (id=4026): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1000000}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000001640)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@tcp={0x4, 0x6, "f87176", 0xf98, 0x6, 0xff, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e23, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x1000, 0x0, 0x42}, {"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"}}}}}}, 0xfce) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000000)=r3) 2m16.47217394s ago: executing program 0 (id=4028): r0 = socket$netlink(0x10, 0x3, 0x10) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000000)={'wlan0\x00'}) (async) socket$nl_crypto(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e3371", 0x24}], 0x1) 2m16.288131542s ago: executing program 0 (id=4031): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, 0x0) 2m16.287346379s ago: executing program 4 (id=4032): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB="1282b0c8", @ANYRES32=r5, @ANYBLOB], 0x44}}, 0x0) 2m16.182168901s ago: executing program 2 (id=4033): r0 = socket$rds(0x15, 0x5, 0x0) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$netlink(0x10, 0x3, 0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) write(r3, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b0f33b49db96ad24d12595fbea5", 0x29) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xcf}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c800}, 0x4010) 2m16.030310854s ago: executing program 2 (id=4034): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x14, r1, 0xb01}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a40200000000090000000000000e0000000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) 2m15.972025712s ago: executing program 4 (id=4035): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, r1, 0x25, 0x4, @val=@tcx}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000980)={@local, @random="4a26292432ca", @void, {@ipv6={0x86dd, @tipc_packet={0xe, 0x6, "e0fef6", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, {[], @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x1, 0x6, 0x1, 0x2, 0x400, 0x0, 0x1, 0xe, 0x4, 0x0, 0x8, 0x600, 0x1, 0x4e20, 0x4e22}}}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001300f5d100000000eb01801700000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r'], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 2m15.96880625s ago: executing program 0 (id=4036): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="120000000c000000080000000300000000000000", @ANYRESOCT=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000ca2d00007d69e9fea87d547a5230e4bafaf63e20b69e9c18be3fa100"/45], 0x31) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000e0ff00000000000000000000630100000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8}]}}]}, 0x40}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0xfffffffffffffffd, &(0x7f00000002c0)=0x4) close(r0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001200230500"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000efff002100010007031c000a"], 0x70}}, 0x0) 2m15.837939737s ago: executing program 0 (id=4038): r0 = socket$kcm(0x10, 0x2, 0x10) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async, rerun: 32) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000580)=@qipcrtr, 0x80, &(0x7f00000006c0)=[{&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/7, 0x7}], 0x2, &(0x7f0000000700)=""/70, 0x46}, 0x40) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x28, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b00)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000100)=""/122, 0x7a}, {&(0x7f0000000200)=""/144, 0x90}], 0x4}, 0x1}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) (async, rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) sendto$inet6(r4, &(0x7f00000004c0)="44d0ae7ba6a475879f6db90fd869e0b03bcfd09e0cd9bce22a15242c98ff8969340f892b0f2978099c64b399f72c23519436", 0x32, 0x20000000, &(0x7f0000000540)={0xa, 0x4e20, 0x2, @loopback, 0x5}, 0x1c) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x12, 0x0, 0x7, {[@cipso={0x86, 0x14, 0xfffffffffffffffe, [{0x2, 0xe, "722be30cfb360b015d590dbe"}]}]}}}], 0x28}, 0x8000) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) (async) ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000)) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x17, 0x9}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe18}, 0x90) (async, rerun: 64) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r9, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8f}, 0x19) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4c044) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async, rerun: 32) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) (rerun: 32) setsockopt$ax25_SO_BINDTODEVICE(r9, 0x101, 0x19, &(0x7f0000000040)=@netrom={'nr', 0x0}, 0x10) (async, rerun: 32) getsockopt$sock_int(r5, 0x1, 0x2f, 0x0, 0x0) (rerun: 32) 2m15.77415777s ago: executing program 4 (id=4039): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xbb}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffde, 0x0, 0x0}, 0x94) 2m15.772209749s ago: executing program 2 (id=4040): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x80}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x25dfdbfd, {0x7, 0x0, 0x0, r2, 0x850}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x8}}]}]}, 0x2c}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}, @dstopts_2292={{0x18, 0x29, 0x3b}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x58}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r5], 0x70}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x80}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x25dfdbfd, {0x7, 0x0, 0x0, r2, 0x850}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x8}}]}]}, 0x2c}}, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}, @dstopts_2292={{0x18, 0x29, 0x3b}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x58}, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r5], 0x70}}, 0x0) (async) 2m15.581272504s ago: executing program 2 (id=4042): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x2}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x81}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x9}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048005}, 0x8000) 2m15.406046527s ago: executing program 34 (id=4042): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x2}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x81}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x9}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048005}, 0x8000) 2m15.351411371s ago: executing program 4 (id=4045): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x43, 0x9, 0xffffffff, 0x25dfdbfb, {0x2}, [@typed={0x4, 0x11f}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x3, @loopback, 0x101}}, 0x0, 0x0, 0x48, 0x0, "8e4ed5b6cd6e3a3be2da5590ede383d2d7ac8deb4a44299f9f0cf768192aed7631289c5d29a3aa7c5c772f383a909e691eb2eddd4322253d1e303a96c995b3e2189cf625a0720ad0fdf0917e7d9e57d5"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1808dba30000160000000000084768ff04a606f0e300000018000081c5040000000000000000fc4102009500000000000000bf00ffff0100000095000000000000000462d81f2e676ff2e4dbce11ba99d894b565cc965dad4015fd231a30659fa7c6334b6154c9398ffe2f36a8fac215d269815d9200e68474f335405ba7385ca7a297a8dd91fdb6756a689087cb54e8f1ab3ed004b6d4d3a3b764284a6054180f83c08843f7f488bcb361"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x48}, 0x94) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='lp', 0x2) sendto$inet(r3, &(0x7f0000000180)="27a3557736d3c84a338e8fe4d32a1251", 0x10, 0x14008885, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000001840), 0x4) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @void, {@ipv4={0x88e5, @dccp={{0x5, 0x4, 0x2, 0x1, 0x24, 0x67, 0x0, 0x7, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, {{0x4e22, 0x4e23, 0x4, 0x1, 0xc, 0x0, 0x0, 0x1, 0x1, "05f945", 0x4, "44f28b"}}}}}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@remote, 0x35, r5}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, r5}, {0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xc7}, {0xffffffffffffffff}, 0x3, 0x0, 0x1, 0x1, 0x3, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x200001}}, 0xe8) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) recvfrom(r8, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x28f4, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffbff}, 0x1c) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x81}]}}}]}, 0x44}}, 0x0) 2m15.075278017s ago: executing program 35 (id=4045): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x43, 0x9, 0xffffffff, 0x25dfdbfb, {0x2}, [@typed={0x4, 0x11f}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x3, @loopback, 0x101}}, 0x0, 0x0, 0x48, 0x0, "8e4ed5b6cd6e3a3be2da5590ede383d2d7ac8deb4a44299f9f0cf768192aed7631289c5d29a3aa7c5c772f383a909e691eb2eddd4322253d1e303a96c995b3e2189cf625a0720ad0fdf0917e7d9e57d5"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1808dba30000160000000000084768ff04a606f0e300000018000081c5040000000000000000fc4102009500000000000000bf00ffff0100000095000000000000000462d81f2e676ff2e4dbce11ba99d894b565cc965dad4015fd231a30659fa7c6334b6154c9398ffe2f36a8fac215d269815d9200e68474f335405ba7385ca7a297a8dd91fdb6756a689087cb54e8f1ab3ed004b6d4d3a3b764284a6054180f83c08843f7f488bcb361"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x48}, 0x94) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='lp', 0x2) sendto$inet(r3, &(0x7f0000000180)="27a3557736d3c84a338e8fe4d32a1251", 0x10, 0x14008885, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000001840), 0x4) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @void, {@ipv4={0x88e5, @dccp={{0x5, 0x4, 0x2, 0x1, 0x24, 0x67, 0x0, 0x7, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, {{0x4e22, 0x4e23, 0x4, 0x1, 0xc, 0x0, 0x0, 0x1, 0x1, "05f945", 0x4, "44f28b"}}}}}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@remote, 0x35, r5}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, r5}, {0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xc7}, {0xffffffffffffffff}, 0x3, 0x0, 0x1, 0x1, 0x3, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x200001}}, 0xe8) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) recvfrom(r8, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x28f4, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffbff}, 0x1c) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x81}]}}}]}, 0x44}}, 0x0) 2m15.047786837s ago: executing program 6 (id=3942): pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x11, &(0x7f0000000200)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}, @ldst={0x2, 0x2, 0x2, 0x7, 0x5, 0x2, 0x1}, @map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x9de00000}, @alu={0x7, 0x1, 0x6, 0x6, 0x0, 0xffffffffffffffe0, 0xffffffffffffffff}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x874d}], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2m14.726243411s ago: executing program 36 (id=3942): pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x11, &(0x7f0000000200)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}, @ldst={0x2, 0x2, 0x2, 0x7, 0x5, 0x2, 0x1}, @map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x9de00000}, @alu={0x7, 0x1, 0x6, 0x6, 0x0, 0xffffffffffffffe0, 0xffffffffffffffff}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x874d}], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2m14.716005301s ago: executing program 0 (id=4047): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x3069e}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = getpid() ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000340)=r7) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030600"/20, @ANYRES32=0x0, @ANYBLOB="4008030000100000140012800800010067726500080002800400120008000a00", @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x2000000) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x7, 0xb, &(0x7f0000000780)=@raw=[@ringbuf_query, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3ff}, @ldst={0x0, 0x0, 0xd0e45661ea6bb074, 0x2, 0x3, 0xc, 0xfffffffffffffffc}], &(0x7f0000000480)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) setsockopt$inet_int(r8, 0x0, 0x33, &(0x7f0000000000)=0x80000003, 0x4) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000d0000000c000000020800000000000000000004000000000000"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800006fe5c7a5f189377b236f730000851000000300000018200000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x90) listen(r8, 0xea) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="200000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="1b6eb772b3767d20"], 0x20}, 0x1, 0x0, 0x0, 0xc042}, 0x8000) 2m14.094419102s ago: executing program 37 (id=4047): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x3069e}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = getpid() ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000340)=r7) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030600"/20, @ANYRES32=0x0, @ANYBLOB="4008030000100000140012800800010067726500080002800400120008000a00", @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x2000000) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x7, 0xb, &(0x7f0000000780)=@raw=[@ringbuf_query, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3ff}, @ldst={0x0, 0x0, 0xd0e45661ea6bb074, 0x2, 0x3, 0xc, 0xfffffffffffffffc}], &(0x7f0000000480)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) setsockopt$inet_int(r8, 0x0, 0x33, &(0x7f0000000000)=0x80000003, 0x4) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000d0000000c000000020800000000000000000004000000000000"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800006fe5c7a5f189377b236f730000851000000300000018200000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x90) listen(r8, 0xea) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="200000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="1b6eb772b3767d20"], 0x20}, 0x1, 0x0, 0x0, 0xc042}, 0x8000) 1m28.113025986s ago: executing program 1 (id=4705): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000002071a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950001000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050505f8e6fb0fd7ddcb12b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7131b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc8136bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b001000000a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5b787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72323cc924e627f2f4b775dd4e9e3070756f97a6791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdfa2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa802000000872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b9243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00c75367966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b0600000000000000564a2b49b745f3bf2cf7908b6d7d748308eea09fb4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578f93046aaddea8ec4ca37f71c2710a7e58ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e4fe9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eee46eb20c20bb82aa31771cd379ec83554cea5e6539d85b980e358d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f9166965a53beb05142e1b1550a8cb7852f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9d95fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b9617432e251d14b283f7d82761c26e329555f9290af4100000000000000749efd3f63655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b0000000032a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002157a3609b6ff9843ee19ec647249a9375de5858818f3c2432e6ced4380217ac51a84a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3bbdc8c17a23692759ccf5a205111b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c8e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd809269f816fa748b20ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f9289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f05714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc30935455f6de5b64bcdfaf8ac04ce96c421e5dbc85e168d3559ab13df98163e39e4065e65a2f43412535d6f7c09830f3a0865356602363c690d2755768612bb7330a8b285f2584892eaff1889a61ee0c2a6d1831d41805707bb43991d40feb5dd070000000000006ed70faa6f42ab4065dfa5227deb52b2a3730558dcacc145d5bcffe5f90f85b0a27b0439b5e9edf1856b4a09d4cc333e7c4893bd8c434414335e34390c9ad847d8d26c90ce53214d7083f10cf25b5f2381d83e30dc622453251b7189282e6e40557a8645fdf27c2b474b4200ddafa6538cdb45cc93dbebd91d1fbbd6ebb081c6efb001adc641e929750452932cd0f8d7a0c9f8de0d64d7a9751d93b973b9cce1aaed8b00681cac4332bcaf97864627698e395ae0cd2ee505bf472e11b2dbfcbcb793872e261f626818555f6fa3bdb302ba1089ba5ec8e66d0ae72da2bc09ab98a8e711a39d438cf5f59eebe3d71331850cfd587b35e58d5b23f065642ff58a5a71213c9ceeb40f81f24832863e3d26d167290c0c5bb9c8ae9b201ffde31b7d6ad3d27347b38befa07be186b0c7ad6fdec572a3fb2568de245f1bde56391c95d80a5479575fa7c13f1e1589dc3501c88cac9155fd5b62306f5c4aa74c2994055353dac64a2d38671b000000000000"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0103000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380"], 0xd8}}, 0x0) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r2}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x108, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f09df33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000080)={0x0, 0x9}, 0x8) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2, 0xdd}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796412000000000010000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xd, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x90) 1m27.884107346s ago: executing program 1 (id=4710): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210106, @local, {[@ssrr={0x89, 0xf, 0xe9, [@multicast2, @remote, @multicast2]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x8000}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x37, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800) 1m27.765033889s ago: executing program 1 (id=4714): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='c 122'], 0xa) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@ldst={0x3, 0x0, 0x6, 0x2, 0x2, 0x0, 0xf1}]}, &(0x7f0000000200)='GPL\x00', 0x3, 0x82, &(0x7f0000000240)=""/130}, 0x94) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0xd}]}, @NHA_BLACKHOLE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x1c}}, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r4) 1m27.55983676s ago: executing program 1 (id=4718): socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r2, 0x8b22, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000003900)=@dellinkprop={0x38, 0x6d, 0x511, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2, 0x442c4}, [@IFLA_IFNAME={0x14, 0x3, 'gre0\x00'}, @IFLA_PROP_LIST={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040841) (async) sendmsg$nl_route(r4, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000003900)=@dellinkprop={0x38, 0x6d, 0x511, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2, 0x442c4}, [@IFLA_IFNAME={0x14, 0x3, 'gre0\x00'}, @IFLA_PROP_LIST={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040841) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 1m27.420345151s ago: executing program 1 (id=4722): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x14}, 0x7ff}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x14}, 0x7ff}, 0xe) shutdown(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffd, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x4, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x6, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x3, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xfffffffb, 0x8, 0x2, 0x5, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0x2c, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x3, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0xd, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x1, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r13, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="010025bd0020000000009b4a000008000300", @ANYRES32=r15], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 1m27.144459683s ago: executing program 1 (id=4726): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x4070bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "d8dfd91b"}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4807}, 0x8080) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08010000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d300000", @ANYRES32=0x0, @ANYBLOB="cc001680c80001800c000500ff0f00000008000014000a0004000000000000000400000000000000100006"], 0x108}}, 0x24040800) 1m12.111330035s ago: executing program 38 (id=4726): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x4070bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "d8dfd91b"}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4807}, 0x8080) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08010000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d300000", @ANYRES32=0x0, @ANYBLOB="cc001680c80001800c000500ff0f00000008000014000a0004000000000000000400000000000000100006"], 0x108}}, 0x24040800) 3.075865676s ago: executing program 7 (id=5920): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)="991347dd5da528c3010000006b7dae7b947006645c9c07b1e4eff6e683ad28bd823fedc2f4258294ef4eb94abe47fcd8f6a674662de9ec", 0x37}}, 0x40050) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket(0x25, 0x1, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) socket(0x2, 0x80805, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x18fd9ca9fb75925e}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1, 0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40408c4}, 0x20000814) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 2.836035949s ago: executing program 7 (id=5925): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0xac141442, @empty=0xe0000001}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x9, 0x2, @vifc_lcl_addr=@private=0xa010102, @multicast1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r2, {0x4, 0x2}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x4, 0x1, {0x3, 0x2}}]}}]}, 0x3c}}, 0x20040054) 2.609536086s ago: executing program 7 (id=5932): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000380)={0x24, @long={0x3, 0xffff}}, 0x14) 2.47342615s ago: executing program 7 (id=5936): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e00)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x300, 0x4e20, 0x8}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6c0000000206050000002f5db55d000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3100000000200007800c00018008000140400000000800080000000000080006400000000005000500020000000500010006000000"], 0x6c}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000050000000000000000711251000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.423971393s ago: executing program 5 (id=5937): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x2000, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0xfdef) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="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", 0x1000}, {}, {&(0x7f0000000040)="ef09dcf9c7630ee02b9a8b0952cb303bc1e584634c4dabb3e309f8d42f25e83e1aa5ead085067c1e6c37949ec1a85424162151ac0d9d7ee54c85cd674ed9161aca4ae8209880f7a5d957c3f70dd72269ec2bc402b79dddf66914fa354f879c28f740", 0x62}, {&(0x7f00000000c0)}, {&(0x7f00000012c0)="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", 0x1000}], 0x5}, 0x20000000) 1.931929171s ago: executing program 9 (id=5940): r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@perf_event={0xa}}, 0x18) r2 = socket$xdp(0x2c, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) bind$xdp(r2, &(0x7f0000000200)={0x2c, 0xc, r3, 0x2}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) sendmsg$inet(r2, &(0x7f00000005c0)={&(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001b00)=[{&(0x7f00000003c0)="4796b62da8b65e4aba28bdb892fe081e116d2a0af398d7ad7f9a4e61a1c7c6f6cb0a2243165ee4337988d803029b5f2e7da0977172c08fba6c79271726e03428dbb512574e77dbb73f7b9eece5e0f922d3ee4d4ee985604446bfeda7b9164efc543b574313baa47c315aa73750bab77c92564850c848da23acb4bc951f1e2874791847493a82a26a33c4fd7d53a0", 0x8e}, {&(0x7f0000000480)="f437624d9c917a13ba27d0368fac22aba52cf253089e8d83bd2cd55c97b78585ab72e1cd6be364fc21c83f395e9a08fbbeb58f527c89df48dfc306cd96af39c5d1a48ff20806f5885a5ba295b6ba186cce0506b3423412bdeb6731feb13a1aff4d6184d88e7b03eb7dbc7bba3cb64989a4cff3025ca2e559f1b74b94889ca859891e350503835f57510b3a8d354e7e3fd63d417dd6e64fbca2cf6107cc6fba352a6dcb5fa6b20cb53316be5588270831114cb6639260123cdbbc19a30d1f3f835e14952991d30c22b8514dafbde0da52db1aca2b930c51cff4486e48907bc01718289ac4341792fdc240aa", 0xeb}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="80511f23f82fc578f504078dfd6e83f3e4b744eb6c5af7438e6d9740290c66f271373b6c02098244ad576458552656c2f3031b9a0929aab970c15391072d1477ce5212bd8fdc45ee7f62c83ceca9b6dd2714e1f69ad7005b27a446f146bde39e3984c12fbb0b9e98c12051da8c45e1206514d845c98158cf4f428a526c1291d859eefaedbc00c8b1d1ecf922cd2ce68ebb955d1eaf7193007d9d2883f0a9114fd208b930b0428c2f4fc08a118a2d180d2901b089d918f6a5907ffae581d700c14af45fae5d4f5c28da4613a424b9", 0xce}, {&(0x7f00000006c0)="c91d4ce9bbf4c5f1be32b77dac0a97c71938c9238a6a77f36b526ea2af0ff34d7132b7e2bd2bce5156722f7782eb941d5806a2e7d731a49367c8414faaa1a4170610b746ade6bf77201f5d13706bef1d44ee513fde0bcb9ce891bcef4ea4460dfb6ae2fb345a432d4e8bbab3bc32a7bb4dc3e09c4e2e89d08446a6cefc9a449b6cbb88a36645d1f34cc342ea55d934be3186944640caa2a4db0351de73748fc51b52a1453fad420266c30be5a93082261b", 0xb1}, {&(0x7f0000001940)="d103e360e2599d114159fb0d4cf4d27525962a6b5bd7cfe466e0cc04855b652c61a517eb7d488395da988d2ce312cc2ce473f1d626bc092bc8ac4b0d5efcb885ed9c609b09d65237e3d09ee9bf9f4a04f4776f20896df2d092a9596cf44175265530cafae28beb6e8d95ef5df68e15612ed32355fd4a3d1ceaa7e44ec9e00e2dfe98bf106f97fc92225c8d51153456728a32c2e464fc7a1936b1fc206d2c9c4a4e4d414e5fba25025f8453e3cce3a39298e79eec92500f12669d0d829b30bc67f586c7eff587e9d0331bcbac23ddb0b79f10658475addc3228ca1b96bb90b3b868df3bd5", 0xe4}, {&(0x7f0000001a40)="b06d49beec031cf3ef3d8458103c1b2d5d4465e6c6018754abc7835b9966bf18313b6c248642b630fb8e8a74a4b37461ca25b8284e1f0a84aeba13168c3498c3799b4407e1e57bf63d2cbcccbc326e8f417979d211ee13cdd8ca7d34112700494f0de9125fe6a4c63addbceba2255b4364c9bc2a8ce4ac5c4acca5495b19ac3b1eb62064efc912f0e6ba55ae6823657c9580dc68f717273f57ed5e22e3df0fd46b34f8d1e6ff52b92723a4293f0b5518d392e3a781b1c391a5ceb20c08f70820", 0xc0}], 0x7, &(0x7f00000002c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1ff}}], 0x18}, 0x10) socket$netlink(0x10, 0x3, 0x14) r5 = socket$phonet(0x23, 0x2, 0x1) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="e502140000001600010700000000000000000200"], 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x854) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="260a00000000000061116c0000000000180000180000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) 1.60402775s ago: executing program 9 (id=5944): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000611004000000000095000000b68c298900000000"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000040)=0x7, &(0x7f0000000080)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, 0x27, 0x4, 0x70bd25, 0x25dfdbfd, {0x4}, [@typed={0x14, 0x30, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @generic="d3ef294c16f1bc6ebc927ad9ff38805b740d548ab915b30d4fa8c66ddfaa8a68bdd9d7b5d586b249ec54e42a984ad3f088c4e6fec7c36eb8b66fb4"]}, 0x64}}, 0x4000044) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000611004000000000095000000b68c298900000000"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) (async) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000040)=0x7, &(0x7f0000000080)=0x2) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, 0x27, 0x4, 0x70bd25, 0x25dfdbfd, {0x4}, [@typed={0x14, 0x30, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @generic="d3ef294c16f1bc6ebc927ad9ff38805b740d548ab915b30d4fa8c66ddfaa8a68bdd9d7b5d586b249ec54e42a984ad3f088c4e6fec7c36eb8b66fb4"]}, 0x64}}, 0x4000044) (async) 1.584613638s ago: executing program 5 (id=5946): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000100300000000020000000200000002000000000000000000000105000000080000000000000001000005000000000000000001000000000000000000"], 0x0, 0x5a}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000dc6f0a02d58d353abbc00", @ANYRES16=r1, @ANYBLOB="130f000000000000000007000000"], 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0xe8, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xbc, 0x2, [@TCA_FW_ACT={0xb8, 0x4, [@m_tunnel_key={0xb4, 0x20, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1ff}]}, {0x4a, 0x6, "5a202f5df2183da213b7a936a99d006dcf521a495d82a66fc88e455bf9411b6aa8a253199cccf478f78b8ae0d46a3f230af60b7f429706c9bbebe4aa017cfc2d4cff1e6274f1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000"], 0xf0}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x3000000, 0x0, 0x4000001}, 0x40000) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r2, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x7, 0x4, 0x6, 0x400}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40400d0}, 0x20004045) 1.533570457s ago: executing program 9 (id=5947): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0095d3302554a19d78000000000000000000000000000009000000006200922805bd3abd8cb8d1db25e1557292137e83aba39bb1535595f61f2c97fdf6bcad98d4ffd9edfa95fda8b545996ab08a94fdce14cb55fdb9551a2abe8dec72998aebce05f594b835e8ec3e53"], 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0095d3302554a19d78000000000000000000000000000009000000006200922805bd3abd8cb8d1db25e1557292137e83aba39bb1535595f61f2c97fdf6bcad98d4ffd9edfa95fda8b545996ab08a94fdce14cb55fdb9551a2abe8dec72998aebce05f594b835e8ec3e53"], 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000b, 0x8010, r2, 0xacb46000) r3 = accept4(r2, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000480)=""/231, 0xe7, 0x1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@delqdisc={0xd4, 0x25, 0x800, 0x70bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xe}, {0x7, 0x9}, {0xd, 0xffe0}}, [@q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9d}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xbadc}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0x4}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) (async) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@delqdisc={0xd4, 0x25, 0x800, 0x70bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xe}, {0x7, 0x9}, {0xd, 0xffe0}}, [@q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9d}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xbadc}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0x4}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/223, 0xdf}], 0x1}, 0x101}], 0x1, 0x60, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="040100001a00010000000000000000000a010101000000000000000000000000ac1414aa000000000000000000000000fffc00"/64, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="fe8000000000000000000000000000aa000000013c000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bfae00000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e"], 0x104}}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRESDEC], 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 1.391877616s ago: executing program 9 (id=5950): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f, 0x10, &(0x7f0000000000), 0x222}, 0x48) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="33032000d1fd140000007ef52f555f2a0c9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x62}, 0x14) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r4, &(0x7f0000000340)="24000000010001", 0x7) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 1.277735534s ago: executing program 7 (id=5952): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1c00000, 0x1, 0x7, 0x1011, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x3}, 0x50) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'veth1_to_bond\x00', &(0x7f00000001c0)=@ethtool_gfeatures={0x3a, 0x8, [{}, {}, {}, {}, {}, {}, {}, {}]}}) r2 = socket$inet(0x2, 0x800, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x6, 0x5, 0x0, 0x10001, 0xce, 0xb583, 0x1}, &(0x7f0000000380)=0x9c) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000003c0)=r3, 0x4) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000400)='connect aa:aa:aa:aa:aa:11 2', 0x1b) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000440)={0x2, 0x4, 0x9, 0x98, 0x35, 0xd, 0x4, 0x4, 0x92, 0x3, 0x73, 0x7c, 0xd, 0x2}, 0xe) listen(r0, 0x63) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000480)={r3, @in6={{0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1000}}, 0x4, 0x3, 0x1f8800, 0x3, 0x6}, &(0x7f0000000540)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000580)={r5, 0x3c, "ae43d4f9368b2274a0f6fa59ffae812f621eb8db25a26174af3f1be4ed3ee0b0bc8fe9d42c4b2b6370e540f4823855e5ca32c31017d7267e4dbbbcdd"}, &(0x7f0000000600)=0x44) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000640)={r0, 0x1, 0x6, 0x6bf9}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='cpuset.memory_pressure\x00', 0x0, 0x0) r8 = gettid() r9 = gettid() r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000006c0), 0x412c01, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000740)={r6, r7, 0x25, 0x0, @val=@iter={&(0x7f0000000700)=@task={r8, r9, r10}, 0x10}}, 0x20) sendmsg$AUDIT_SET(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, 0x3e9, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r9, 0x0, 0x89ea, 0x2, 0x2, 0x0, 0x40, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x10040005}, 0x14) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r7) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000900)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x6c, r11, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x4}, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x8, 0x5}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x5c}}, @NL80211_ATTR_PID={0x8, 0x52, r8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r13}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x71}, @NL80211_ATTR_PID={0x8, 0x52, r8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000010) r14 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r14, 0x29, 0x23, &(0x7f0000000a80)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x9, 0x4e21, 0x0, 0x0, 0x20, 0x80, 0x6, r1, 0xffffffffffffffff}, {0x10, 0x81, 0x40, 0xd96a, 0x1329, 0x6, 0x7, 0x8}, {0x1, 0x4, 0x3, 0x8001}, 0x0, 0x6e6bb4, 0x0, 0x1, 0x6, 0x1}, {{@in=@multicast1, 0x4d2, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00', 0x3504, 0x2, 0x3, 0x4, 0x9, 0xfffff800, 0xa}}, 0xe8) bind$l2tp(r7, &(0x7f0000000b80)={0x2, 0x0, @private=0xa010101}, 0x10) r15 = socket$vsock_stream(0x28, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000003c00)={0x0, 0x0}) recvmmsg(r15, &(0x7f0000003b00)=[{{&(0x7f0000000bc0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000c40)=""/4096, 0x1000}], 0x1, &(0x7f0000001c80)=""/204, 0xcc}, 0x5}, {{&(0x7f0000001d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002140)=[{&(0x7f0000001e00)=""/125, 0x7d}, {&(0x7f0000001e80)=""/117, 0x75}, {&(0x7f0000001f00)=""/207, 0xcf}, {&(0x7f0000002000)=""/221, 0xdd}, {&(0x7f0000002100)}], 0x5, &(0x7f00000021c0)=""/120, 0x78}, 0x8}, {{&(0x7f0000002240)=@ieee802154, 0x80, &(0x7f0000002440)=[{&(0x7f00000022c0)=""/174, 0xae}, {&(0x7f0000002380)=""/65, 0x41}, {&(0x7f0000002400)=""/14, 0xe}], 0x3, &(0x7f0000002480)=""/108, 0x6c}, 0x800}, {{&(0x7f0000002500)=@pptp, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002580)=""/92, 0x5c}, {&(0x7f0000002600)=""/241, 0xf1}, {&(0x7f0000002700)=""/84, 0x54}, {&(0x7f0000002780)=""/46, 0x2e}, {&(0x7f00000027c0)=""/73, 0x49}, {&(0x7f0000002840)=""/171, 0xab}, {&(0x7f0000002900)=""/148, 0x94}, {&(0x7f00000029c0)=""/178, 0xb2}], 0x8, &(0x7f0000002b00)=""/4096, 0x1000}, 0x58}], 0x4, 0x10002, &(0x7f0000003c40)={r16, r17+10000000}) 1.275291951s ago: executing program 9 (id=5953): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000180)=0x3, 0x4) listen(r1, 0x5) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfe80, @loopback}, 0x1c) 1.262565949s ago: executing program 8 (id=5954): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x60}, 0x6400888c) 1.183787646s ago: executing program 5 (id=5955): socket$can_raw(0x1d, 0x3, 0x1) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtaction={0x14, 0x21, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtaction={0x14, 0x21, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0xfffffffffffffefc, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r2, 0x1, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x36}, {0x5, 0x8e, 0x1}}]}, 0x4c}}, 0x8000) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000400)) (async) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000400)) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$sock(r4, &(0x7f0000000180)={&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="559cef20b4fbdfb46b13a3f0f1b5db75137442f415a675fdab01b6203841165ec5fcdaf22bd4f9830d932f51ed06e8a85157796a42975a851ca9e514ff54d0d3", 0x40}], 0x1, &(0x7f0000000280)=[@mark={{0x14, 0x1, 0x24, 0x100}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x8f}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x401}}, @txtime={{0x18, 0x1, 0x3d, 0xe}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x80000000}}], 0xf0}, 0x2000400c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) syz_genetlink_get_family_id$l2tp(&(0x7f0000001840), r3) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001840), r3) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000001940)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x4c, r7, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x6fe}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg1\x00'}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xb5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8081) sendmmsg$alg(r6, &(0x7f0000001800)=[{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000440)="fc148457edbf5064f6ca8c00db069831508c6284b0f80888ba5dc38ff5e9bc16279a02eddeee788ce579a9ef47f78180f426d69142bac1351222d1da9ef723206ec8455b836aa8ffd123a19bce70bedbf3f9fc31cd7ba5deda7598b9ae5b8b066e4cf494fa360a9e4a5420bca1025c788570f05800c2aa8885f174f961c0bf03e0c1fda1a81e64dd11ec8fa790930c674747c9da28ba18c2b2e29fa7f20a91126ea39c0b18249941b28884f0ec6a418818483897e39f9e09e856a8ff22b98fdf13a2c0985f17da0a7aa8e1cc5a0826d399b3089c8eb1e6141648dbd8d305f0ff54dd4942aa62760aed205e", 0xeb}, {&(0x7f0000000540)="48b1db853bed680962c3757bc78934d6159f2df41bc58b04a15d9646267823a9e6e7261cdbed0cf6a4890732a2046dc53ae02bd67467d87d6e498efa7b60dc96292cdad88c6b9582b97970a5d2323837fea92a874c4d3db9b9959a491cf0be1d2943f699bf8d45718572769d94173f71deef7623a508f44dde3f51ae197f201cbc5beba95a98c09ead3bb6cf63c99ae3eae697c078faaadb0515fd9cb254dcabf2ba73c78098c45f099819b7c1f5b5e1ed9d0071ea484272267ea29ad671", 0xbe}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="8b5ffa553b", 0x5}, {&(0x7f0000001640)="90586195d393f9e4e4de4099f694b047954b66673876ec03bb3d322f71b99610c3fc3b0842080947a6462c27669c8a28e4d15983df9e4b", 0x37}, {&(0x7f0000001680)="dc0b583be616a5e7b4d7830491038ce5587778e12aaca201c35fe06f61a4db817a19532681e88d5b1fb6a949f37efba3929bbbf2cc92386e8e4e126951bda3ef44a57568f762bc694c5c82fe2e09e0fcc73643c5bc1eb09d9dcf6284f3dc09068cebeed883fe24f4e38187267ddf811f7d45014746101d3838e9bbd27cdeca0974adad121a58aa6a9e81eecb607c219a05ce1d5b3d0fa0f40f47d138d5f3b48cb62d852016039283c8d0e50a32", 0xad}], 0x6, &(0x7f00000017c0), 0x0, 0x8000}], 0x1, 0x4) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000380)={'bridge0\x00', 0x100}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xab}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xab}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) 991.709678ms ago: executing program 8 (id=5957): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800900010062be7ee8bf1a0fa0c400028008001e0001000000"], 0x3c}, 0x1, 0x2000000000000000}, 0x0) 909.418147ms ago: executing program 3 (id=5958): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x18, r2, 0x1, 0x70bd28, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x240280d0}, 0x2000c890) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$packet(r4, &(0x7f0000000200)="ada4950e9fd8ccc812e1fdd51bd72bf03ccfdfe619ad6404c625e05707c3c9783e1f1946e4c537cbb3ac56647e18ab044e523efb5ecdb80e", 0x38, 0x20000800, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(r5) getsockopt$IP_SET_OP_GET_BYINDEX(r5, 0x1, 0x53, &(0x7f0000000080)={0x7, 0x7, 0x4}, &(0x7f00000000c0)=0x28) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r4}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x65, 0x0, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x96}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 854.865189ms ago: executing program 9 (id=5959): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000010000000000ecffffff00000000", @ANYRES32=r2, @ANYBLOB="0000000000000000300012800e0001006970366772657461700000001c00028006000f000000000006000e"], 0x50}}, 0x0) 853.786006ms ago: executing program 7 (id=5960): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x3c, r3, 0x1, 0xffffffff, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000007600090b000000000000000003000200000000000800050000000eb5"], 0x20}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSET={0x60, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xf3b7}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x3}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd}]}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0xa8, 0x9, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_DESC={0x4c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_CONCAT={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}]}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x80000000}]}}}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x80000001}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9de}]}]}, @NFT_MSG_NEWRULE={0x310, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_USERDATA={0xb1, 0x7, 0x1, 0x0, "7aa981eb3c0ccf866f318f8df3e33f23074ca65abed93f79e1dc40ca2d7528d4607fdf964ce1351cd4639f21bcd309c1e194ca6249ad8204d5660312bf784603189fbdbd91ba3dae65002fa377cf41703e2dc897d8f7d4fb182f72615d109e875ac5e9a75d71c05fc6adf0bd71c57d7fc52ce05c9d5dde7e4ee67d31527740797220e84bf0979d9b60bb23cbf7fb6b6e85fdc88054f1da758da41d381002aa2d44ea3b06fb581be9bc59fe256e"}, @NFTA_RULE_EXPRESSIONS={0xc4, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8d20}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x5c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x53014cfb2759de8d}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8847}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x31}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x44}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x110, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x4c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x4c7}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_INNER_FLAGS={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @immediate={{0xe}, @void}}, @NFTA_INNER_FLAGS={0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x1d}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELSETELEM={0x28, 0xe, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0x550}, 0x1, 0x0, 0x0, 0x20000010}, 0x20044800) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x8000}, 0x8) shutdown(r7, 0x1) poll(&(0x7f0000000200)=[{r0, 0x1004}, {r4, 0x614}, {r7, 0x8030}, {r4, 0x8}], 0x4, 0x2) r8 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r8, 0x6a, 0x3, 0x0, &(0x7f0000000000)=0xfffffffffffffd68) close(r6) r9 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x130, 0x0, 0x1c8, 0x130, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x32, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000240000000000889078000000009e00000000000000000010907802000001000000d2dc9aa1bc560e0fbc2da78550295e34c0aa16ceb37ab42909dfe39576cf34b849b315b792710a115b49ab"], 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffffffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x2000000}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x30}, 0x4, 0x700000000000000}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x50, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0xc000}, 0x40) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 852.729563ms ago: executing program 5 (id=5961): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}, '\x00\x00eX\x00\x00\x00\x00'}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x5}, 0x8) r1 = socket(0x840000000002, 0x3, 0xff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x5, "f47e6aeb88"}, &(0x7f0000000100)=0x2d) ioctl$F2FS_IOC_COMPRESS_FILE(r2, 0xf518, 0x0) sendmmsg$inet(r1, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="86edb1c6000000e5db6417e58f44aa00348f0399", 0x14}], 0x1}}], 0x1, 0x20004086) 744.051235ms ago: executing program 3 (id=5962): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff81ff0d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}, 0x6}]}, &(0x7f0000000100)=0x10) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x34, 0x0, &(0x7f0000000040)=0x1) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x1404, 0x10, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x21}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='9\x00\x00\b', @ANYRES16=r4, @ANYBLOB="030b25bd7000fcdbdf2501000000400001007b000000"], 0x24}, 0x1, 0x0, 0x0, 0x40061}, 0x4000000) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r3) writev(r2, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0x1}], 0x1) 743.026054ms ago: executing program 8 (id=5963): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000280)={0x9, {{0x2, 0x0, @multicast2}}, 0x1, 0x2, [{{0x2, 0x4, @broadcast}}, {{0x2, 0x4e20, @empty}}]}, 0x190) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) 682.05039ms ago: executing program 5 (id=5964): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) listen(r2, 0x7d4165c9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x7d4165c9) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r9) writev(r9, &(0x7f0000000140)=[{&(0x7f0000000240)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@fallback, 0x0, 0x0, 0xffffffff, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0]}, 0x40) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x410, 0xffffffff, 0x210, 0x2a8, 0x0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @multicast2, 0xff000000, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e20], [0x4e22, 0x4e24], [0x40, 0x3, 0x6, 0x8, 0x34, 0x0, 0x0, 0x5, 0x8000, 0x81, 0xfffffffd, 0xfffffffe, 0x8000, 0x7ff, 0x44, 0x58639972, 0x9, 0x10, 0x8, 0x3ff, 0xfffffff2, 0x91, 0x9, 0x1, 0x1ca8, 0xb96d, 0x100, 0x9, 0x80000000, 0x8, 0xe, 0x6, 0x26c, 0xb9ae, 0x80, 0x400, 0x99d8, 0x1, 0x10000, 0x7, 0x6, 0x3, 0x9, 0x5, 0xad3, 0x6, 0xff, 0x8, 0x8, 0x1, 0x0, 0x7, 0xb, 0xd, 0x6, 0xc, 0x5, 0x40000000, 0x10, 0x3, 0x3, 0x78, 0x9, 0x9], 0x0, [{0x0, 0x0, 0xd5}, {0x0, 0x51, 0x6}, {0x3, 0x3, 0xa}, {0x8, 0x80, 0x8}], 0x0, 0x4}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @broadcast, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@private=0xa010103, @loopback, 0xff000000, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x62, 0x1, 0x1}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0xd, 0x8, [0x8, 0x27, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x6, 0x31, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000800)="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", 0xfb, 0x880, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) 611.826048ms ago: executing program 8 (id=5965): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e1f, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x3a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x5452, &(0x7f00000000c0)) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x4, 0x1, 0x4, {0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0xfffffffffffffcc1) 516.082637ms ago: executing program 3 (id=5966): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x22, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3a080601088864060000010180c200000e0180c20000008b4d5b68c22f67880800eba2b9fbc0107cb4f0843c979f8e8c97f912d7d988d3899d0e0f87263e1d68fa49993d09823bb1081adb0b9bae3c8ddceae5b67bf2c7a90e78f98996f33784a115bac07bfacbd9fb23944085eead4c7ecbac50b7955dab468c1a4faa6ea5b765"], 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32, @ANYBLOB="180006"], 0x34}}, 0x4000000) r3 = socket$inet_icmp(0x2, 0x2, 0x1) recvfrom$inet(r3, &(0x7f0000000c40)=""/4096, 0x1000, 0x1, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="68e313d6480201b3c0cfc5aa008000100001002f03000000dbdf25000000005b89b11d7ae0f384a816ef18d479b01c6bf8277a6b192a7f47e28d46337bb50976466c8ab2291febb4d3702698753e01f4263d1500da04b49a2175f80dc5e24ad468e6a295bf35c0ab70cd46d5155b8ab12ad98f9c68", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c000c801400010008000000430100008000000088a800001400010012390000310f00007f00000081000000"], 0x68}, 0x1, 0x0, 0x0, 0x20008080}, 0x24040800) 482.437477ms ago: executing program 8 (id=5967): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x12, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf090000000000005509010000000000950000000000000018200000", @ANYRES32=r0, @ANYBLOB="000000000100000025000400fcffffffbc91100000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2f}, 0x94) 438.901945ms ago: executing program 3 (id=5968): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000180)=0x3, 0x4) listen(r1, 0x5) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (fail_nth: 11) 295.972674ms ago: executing program 3 (id=5969): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000180)=0x3, 0x4) listen(r1, 0x5) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xff00, @loopback}, 0x1c) 51.081108ms ago: executing program 3 (id=5970): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x43c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x410, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x40, 0x6, 0xe3b, 0x401, 0x8, 0x7d3d, 0x9, 0x1, 0x8, 0x0, 0x8, 0xc, 0x6, 0x5, 0x4, 0x5, 0x4, 0x4, 0x3, 0x937d, 0x7, 0x7, 0x29, 0x9, 0x1, 0xfd3, 0x1000, 0x4c1, 0x3, 0xf6c, 0x4, 0x12, 0x2, 0x6, 0x9, 0xffffff00, 0x3, 0x0, 0x7f, 0x6, 0x200, 0x2, 0x1, 0x1, 0x101, 0x5, 0x7, 0x6, 0x0, 0x10000, 0x43, 0x5, 0xdc, 0x2, 0x0, 0x6, 0xffffffff, 0x5, 0x8, 0xfffffff0, 0x5, 0x0, 0x7, 0x101, 0x0, 0x4, 0xb244917, 0x0, 0x8, 0x2, 0x3, 0x6, 0x4, 0xfffffffc, 0x8, 0x9, 0x523, 0x1, 0xa, 0x9, 0x72, 0x96, 0x98f4, 0x9, 0x0, 0x4, 0x4, 0x7, 0x200, 0x6, 0x5, 0x1, 0x2, 0xa2, 0x0, 0xffffff49, 0x6, 0x8, 0x4, 0x7f, 0xfff, 0x7f, 0x4, 0xfffffff7, 0x4f1, 0x8, 0xfffffff7, 0x0, 0x7, 0x0, 0x4, 0x8, 0x5, 0x7, 0x2, 0x3, 0x4, 0x28, 0x1, 0x2, 0xfffffffa, 0xbb46, 0xfffffff7, 0x9, 0x3, 0x6, 0x5, 0x8, 0x2, 0x78c6cd4b, 0x1, 0x14000000, 0xfffffa90, 0xd, 0x1, 0x8001, 0x0, 0x9, 0x4, 0x7, 0x2, 0x8000, 0xffff, 0x0, 0x21c0e688, 0x2, 0x1, 0x5, 0xc6, 0x0, 0xa, 0xff, 0x81, 0x81, 0x9, 0xa, 0x3, 0x0, 0xe, 0x7, 0x7, 0x6, 0x8000, 0xd6c, 0x8, 0x6, 0xfff, 0x5, 0x8, 0x1, 0x7, 0x1, 0x4, 0x4, 0x80000001, 0x0, 0x7, 0x100, 0x0, 0x3, 0x6, 0x9, 0x2, 0x7, 0x4, 0x40, 0xb, 0x9, 0x7, 0x7f, 0x5, 0xec4f, 0x3, 0x5, 0x401, 0x0, 0x7f, 0x7f, 0x6, 0x2, 0xc, 0x9, 0x10, 0x5, 0x5, 0x8, 0x8, 0x10001, 0x9, 0x81, 0x4d, 0x3, 0xfffffffc, 0x5, 0x80, 0xfff, 0x0, 0x8001, 0xf, 0x6, 0x0, 0x101, 0x6, 0x7, 0xfff, 0x5, 0x120, 0x1, 0xad3, 0x81, 0x10, 0x1, 0x4, 0x9, 0x7, 0x5, 0x81, 0x8, 0x1, 0x4c, 0x3, 0xe, 0x8, 0x6, 0x7, 0xfffffffc, 0x0, 0x1, 0xce, 0x2d4, 0x8, 0x10000, 0x0, 0x10000, 0x1d2, 0x10001]}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x43c}}, 0x44080) 49.827048ms ago: executing program 8 (id=5971): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000002280)={'bridge0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165c9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000006726e5f193b79536178b516473fbbe8d2de1eb55fd738d1f5912b5ae82e9ac4c583a3957a26c3fb7a66c0a30f50472a1f5741701e4318713add44486dc13d3b1cb8f1c4bcf09b0a9bb9ec2f5b8eda3a58168cc618df65145063de1da6c8239bc2613173e2e750817ead0fa0b184ee8655cd9281a575ab172b3d8868fd7958b7a8476860cb1211b77c103607ae072701f607a3c58084cbec0441d84d76a4af455513b4acf89f64ebd28fb4d5c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r9}, &(0x7f0000000a00), &(0x7f0000000a40)=r8}, 0x20) listen(r7, 0x0) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x1, 0x1, 0x20, 0x67, 0x0, 0x4, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x4, 0xad, 0x0, 0xf}]}}, {0x1e, 0x7, 0x0, @multicast1}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r8, 0x0, 0x73, 0x47, &(0x7f00000002c0)="2c2298ccde8cebe221b3d42abe3524d2dbdc155ea52048fc53f0f0eab65f25effb8eb2736166b3cbe23b952ac5612217a1f63c2817b5cd42b3ae6619de6c06a8994f1457f9d721707c49e632d257090b4259340ff43a61250ae533b28c59cab6dafb1b222438b56fa275ecbf689a67b17a8585", &(0x7f0000000340)=""/71, 0x1, 0x0, 0x21, 0xf4, &(0x7f0000000100)="321ca1b7bb71f8b5b1018f5a8bb65b221ce96b98e7d8f6cc88002de0774c5c21de", &(0x7f00000003c0)="6460aed31dd7174dba0029f6114e4e11588acbb59e43a9a57f8f1850206c6a0c9fd0d20fb8267a1f38eac2991137ba83474e06e04c38d513abf0eb6cff62f83f5e94f7820f5c115bc2f8d7bb012c55d83d05e410675acbac402274bafe789007462d862571ea8ea266963b284cbdf2e583cdb0ff4882d19a7d8602b14fa77b75a0ebc2552f9277ba8b2d764e965f79beef53343011c9a5087c4aff45a4760f2a2ec5123b5f24a517e228d6f2554b4e57c7818d1507a360937a3e1a5f686b4b8dcf86f26a09bde1b8710b19a4201060edf1866d86983373fcd057d814650df5d1d3973a183631f409a201b641c39f5c585d287c28", 0x2, 0x0, 0x7}, 0x50) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0xfff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}, 0x1c) 0s ago: executing program 5 (id=5972): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@delqdisc={0x24, 0x25, 0x20, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x3, 0x4}, {0xfff2, 0xfffe}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@delqdisc={0x24, 0x25, 0x20, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x3, 0x4}, {0xfff2, 0xfffe}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40) kernel console output (not intermixed with test programs): state [ 472.995442][T11108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.169239][T20108] veth0_vlan: entered promiscuous mode [ 473.226327][T20108] veth1_vlan: entered promiscuous mode [ 473.286328][T20105] veth0_vlan: entered promiscuous mode [ 473.327641][T20105] veth1_vlan: entered promiscuous mode [ 473.384817][T20108] veth0_macvtap: entered promiscuous mode [ 473.431584][T20108] veth1_macvtap: entered promiscuous mode [ 473.488059][T20105] veth0_macvtap: entered promiscuous mode [ 473.538023][T20105] veth1_macvtap: entered promiscuous mode [ 473.557909][T20108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.580148][T20114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.597747][T20108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.655257][T20105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.665852][T11111] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.681252][T11111] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.724066][T11111] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.732832][T11111] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.749367][T20105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.802164][ T7695] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.821783][T20116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.850666][ T7695] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.866258][ T7695] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.910000][ T7695] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.094422][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.102279][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.191272][T11111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.200646][T20116] veth0_vlan: entered promiscuous mode [ 474.206510][T11111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.209385][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.228486][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.267724][T20116] veth1_vlan: entered promiscuous mode [ 474.311952][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.321479][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.400361][T20116] veth0_macvtap: entered promiscuous mode [ 474.433785][T20116] veth1_macvtap: entered promiscuous mode [ 474.456368][T20314] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4052'. [ 474.488794][T20114] veth0_vlan: entered promiscuous mode [ 474.572414][T20116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.609054][T20114] veth1_vlan: entered promiscuous mode [ 474.642575][T20116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.681827][T20325] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4086'. [ 474.708985][ T1016] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.722361][ T1016] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.732622][ T1016] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.747197][T20323] delete_channel: no stack [ 474.752667][ T1016] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.764535][T20327] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 474.791642][T20114] veth0_macvtap: entered promiscuous mode [ 474.848287][T20114] veth1_macvtap: entered promiscuous mode [ 474.908809][T20329] tipc: Started in network mode [ 474.914507][T20329] tipc: Node identity d62fce8d0d35, cluster identity 4711 [ 474.921792][T20329] tipc: Enabled bearer , priority 0 [ 474.934839][T20333] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4089'. [ 474.945664][T20329] syzkaller0: entered promiscuous mode [ 474.951190][T20329] syzkaller0: entered allmulticast mode [ 474.961417][T11111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.964663][T20331] tipc: Resetting bearer [ 474.978591][T20114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.986621][T11111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.997590][T20329] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 475.052745][T20333] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4089'. [ 475.064362][T20114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.077769][T20328] tipc: Resetting bearer [ 475.097534][T20328] tipc: Disabling bearer [ 475.130595][T20333] netlink: 'syz.7.4089': attribute type 1 has an invalid length. [ 475.131291][T11109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.158122][T11109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.193151][ T7702] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.201968][ T7702] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.236541][ T7702] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.255896][ T7702] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.411856][T20340] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4091'. [ 475.452447][T20342] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4092'. [ 475.470858][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.501127][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.505710][T20342] netlink: 'syz.8.4092': attribute type 1 has an invalid length. [ 475.571558][T20342] bridge0: port 3(ip6gretap1) entered blocking state [ 475.573060][T20348] netlink: 'syz.5.4093': attribute type 1 has an invalid length. [ 475.581454][T20342] bridge0: port 3(ip6gretap1) entered disabled state [ 475.601888][T20348] netlink: 'syz.5.4093': attribute type 3 has an invalid length. [ 475.628728][T20342] ip6gretap1: entered allmulticast mode [ 475.633811][T20348] netlink: 172 bytes leftover after parsing attributes in process `syz.5.4093'. [ 475.644886][T20348] NCSI netlink: No device for ifindex 813332851 [ 475.645518][T20342] ip6gretap1: entered promiscuous mode [ 475.701164][T20342] veth3: entered promiscuous mode [ 475.707142][T20342] bridge0: port 4(veth3) entered blocking state [ 475.717766][T20342] bridge0: port 4(veth3) entered disabled state [ 475.719003][T20348] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4093'. [ 475.757319][T20342] veth3: entered allmulticast mode [ 475.789358][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.804081][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.862124][T20363] netlink: 'syz.1.4097': attribute type 21 has an invalid length. [ 475.864977][T20364] netlink: 'syz.1.4097': attribute type 21 has an invalid length. [ 475.871094][T20363] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4097'. [ 475.888224][T20364] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4097'. [ 475.965515][T20348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.981427][T20348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.994567][T20348] bond0 (unregistering): Released all slaves [ 476.030725][T20362] tipc: Failed to obtain node identity [ 476.056513][T20362] tipc: Enabling of bearer rejected, failed to enable media [ 476.068484][T20363] netlink: 'syz.1.4097': attribute type 4 has an invalid length. [ 476.083591][T20363] netlink: 'syz.1.4097': attribute type 5 has an invalid length. [ 476.103985][T20364] netlink: 'syz.1.4097': attribute type 4 has an invalid length. [ 476.119315][T20364] netlink: 'syz.1.4097': attribute type 5 has an invalid length. [ 476.245707][T20376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.425306][T20387] Cannot find set identified by id 0 to match [ 476.974351][T20415] openvswitch: netlink: Key type 2593 is out of range max 32 [ 477.322276][T20430] dummy0: entered promiscuous mode [ 477.339243][T20430] bridge0: port 4(dummy0) entered blocking state [ 477.369397][T20430] bridge0: port 4(dummy0) entered disabled state [ 477.386657][T20430] dummy0: entered allmulticast mode [ 477.403939][T20430] bridge0: port 4(dummy0) entered blocking state [ 477.410491][T20430] bridge0: port 4(dummy0) entered forwarding state [ 477.844308][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 478.303252][T20503] SET target dimension over the limit! [ 478.552626][T20522] sctp: [Deprecated]: syz.7.4154 (pid 20522) Use of struct sctp_assoc_value in delayed_ack socket option. [ 478.552626][T20522] Use struct sctp_sack_info instead [ 478.591492][T20522] nbd: device at index 7 is going down [ 478.622682][T20522] Cannot find add_set index 0 as target [ 478.711870][T20528] IPv6: addrconf: prefix option has invalid lifetime [ 479.088398][T20553] Bluetooth: MGMT ver 1.23 [ 479.176759][T20552] tipc: Started in network mode [ 479.181677][T20552] tipc: Node identity c6b7977c226c, cluster identity 4711 [ 479.238899][T20552] tipc: Enabled bearer , priority 0 [ 479.397047][T20552] tipc: Disabling bearer [ 480.158968][T20605] x_tables: duplicate underflow at hook 2 [ 480.276864][T20613] __nla_validate_parse: 16 callbacks suppressed [ 480.276882][T20613] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4181'. [ 480.313732][T20613] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4181'. [ 480.377626][T20619] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4182'. [ 480.416132][T20620] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4182'. [ 480.464445][T20627] veth0: entered promiscuous mode [ 480.497347][T20627] IPVS: Unknown mcast interface: netpci0 [ 480.513823][T20625] veth0: left promiscuous mode [ 480.554048][T20638] validate_nla: 3 callbacks suppressed [ 480.554065][T20638] netlink: 'syz.5.4189': attribute type 12 has an invalid length. [ 480.588616][T20638] netlink: 'syz.5.4189': attribute type 29 has an invalid length. [ 480.604354][T20638] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4189'. [ 480.632415][T20641] tipc: Enabling of bearer rejected, media not registered [ 480.696330][T20644] netlink: 'syz.7.4190': attribute type 3 has an invalid length. [ 480.733703][T20647] netlink: 'syz.1.4191': attribute type 83 has an invalid length. [ 480.880583][T20656] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4197'. [ 480.958939][T20662] netlink: 'syz.9.4195': attribute type 21 has an invalid length. [ 480.977641][T20662] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4195'. [ 481.136398][T20671] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4199'. [ 481.202565][T20674] netlink: 'syz.9.4202': attribute type 30 has an invalid length. [ 481.525387][T20699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4210'. [ 481.544898][T20701] netlink: 'syz.8.4212': attribute type 18 has an invalid length. [ 481.640113][T11111] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.669605][T11111] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.725608][T11111] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.765909][T11111] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.796421][T20716] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4215'. [ 481.805893][T20718] netlink: 'syz.8.4216': attribute type 29 has an invalid length. [ 481.834985][T20723] netlink: 'syz.8.4216': attribute type 29 has an invalid length. [ 482.082815][T20741] netlink: 'syz.5.4224': attribute type 3 has an invalid length. [ 482.808532][T20779] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 482.835431][T20779] bond0 (unregistering): Released all slaves [ 483.127845][T20808] x_tables: duplicate underflow at hook 2 [ 483.229604][T20818] pim6reg527: entered allmulticast mode [ 483.341279][T11109] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.346608][T20825] syz.7.4249: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 483.365495][T11109] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.385071][T20825] CPU: 0 UID: 0 PID: 20825 Comm: syz.7.4249 Not tainted syzkaller #0 PREEMPT(full) [ 483.385096][T20825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 483.385113][T20825] Call Trace: [ 483.385121][T20825] [ 483.385129][T20825] dump_stack_lvl+0x189/0x250 [ 483.385161][T20825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.385185][T20825] ? __pfx__printk+0x10/0x10 [ 483.385205][T20825] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 483.385227][T20825] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 483.385252][T20825] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 483.385277][T20825] warn_alloc+0x214/0x310 [ 483.385303][T20825] ? stack_depot_save_flags+0x40/0x860 [ 483.385332][T20825] ? __pfx_warn_alloc+0x10/0x10 [ 483.385358][T20825] ? kasan_save_track+0x3e/0x80 [ 483.385379][T20825] ? __kasan_kmalloc+0x93/0xb0 [ 483.385404][T20825] ? xsk_setsockopt+0x4dc/0x8d0 [ 483.385420][T20825] ? do_sock_setsockopt+0x17c/0x1b0 [ 483.385444][T20825] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 483.385466][T20825] ? do_syscall_64+0xfa/0xfa0 [ 483.385483][T20825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.385509][T20825] __vmalloc_node_range_noprof+0x125/0x12d0 [ 483.385570][T20825] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 483.385593][T20825] ? __kasan_kmalloc+0x93/0xb0 [ 483.385617][T20825] vmalloc_user_noprof+0xad/0xf0 [ 483.385636][T20825] ? xskq_create+0xbf/0x170 [ 483.385652][T20825] xskq_create+0xbf/0x170 [ 483.385670][T20825] xsk_init_queue+0xb0/0x110 [ 483.385687][T20825] xsk_setsockopt+0x4dc/0x8d0 [ 483.385703][T20825] ? __pfx_xsk_setsockopt+0x10/0x10 [ 483.385720][T20825] ? __pfx_aa_sk_perm+0x10/0x10 [ 483.385739][T20825] ? aa_sock_opt_perm+0xff/0x1b0 [ 483.385761][T20825] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 483.385774][T20825] ? __pfx_xsk_setsockopt+0x10/0x10 [ 483.385789][T20825] do_sock_setsockopt+0x17c/0x1b0 [ 483.385813][T20825] __x64_sys_setsockopt+0x13f/0x1b0 [ 483.385838][T20825] do_syscall_64+0xfa/0xfa0 [ 483.385853][T20825] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.385869][T20825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.385883][T20825] ? clear_bhb_loop+0x60/0xb0 [ 483.385899][T20825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.385916][T20825] RIP: 0033:0x7f1abb18efc9 [ 483.385931][T20825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.385943][T20825] RSP: 002b:00007f1abbfed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 483.385959][T20825] RAX: ffffffffffffffda RBX: 00007f1abb3e6090 RCX: 00007f1abb18efc9 [ 483.385969][T20825] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 483.385977][T20825] RBP: 00007f1abb211f91 R08: 0000000000000004 R09: 0000000000000000 [ 483.385986][T20825] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.385994][T20825] R13: 00007f1abb3e6128 R14: 00007f1abb3e6090 R15: 00007ffc1d12a918 [ 483.386019][T20825] [ 483.386032][T20825] Mem-Info: [ 483.420103][T11109] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.459956][T20825] active_anon:4533 inactive_anon:0 isolated_anon:0 [ 483.459956][T20825] active_file:3401 inactive_file:40038 isolated_file:0 [ 483.459956][T20825] unevictable:768 dirty:91 writeback:0 [ 483.459956][T20825] slab_reclaimable:14040 slab_unreclaimable:157246 [ 483.459956][T20825] mapped:39271 shmem:1366 pagetables:1079 [ 483.459956][T20825] sec_pagetables:0 bounce:0 [ 483.459956][T20825] kernel_misc_reclaimable:0 [ 483.459956][T20825] free:1234854 free_pcp:16666 free_cma:0 [ 483.480335][T11109] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.549111][T20825] Node 0 active_anon:18132kB inactive_anon:0kB active_file:13604kB inactive_file:159948kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:156984kB dirty:360kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17232kB pagetables:4284kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 483.822562][T20825] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 483.895991][T20825] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 483.934036][T20825] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 483.944458][T20825] Node 0 DMA32 free:1029760kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18240kB inactive_anon:0kB active_file:13604kB inactive_file:159948kB unevictable:1536kB writepending:368kB zspages:0kB present:3129332kB managed:2565208kB mlocked:0kB bounce:0kB free_pcp:47972kB local_pcp:25200kB free_cma:0kB [ 484.058667][T20825] lowmem_reserve[]: 0 0 0 0 0 [ 484.072186][T20825] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 484.155509][T20825] lowmem_reserve[]: 0 0 0 0 0 [ 484.160278][T20825] Node 1 Normal free:3897472kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15412kB local_pcp:10784kB free_cma:0kB [ 484.211179][T20825] lowmem_reserve[]: 0 0 0 0 0 [ 484.216556][T20825] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 484.232212][T20825] Node 0 DMA32: 1680*4kB (UM) 752*8kB (UM) 345*16kB (UM) 234*32kB (UM) 107*64kB (UME) 26*128kB (UME) 20*256kB (UME) 3*512kB (UME) 10*1024kB (UME) 5*2048kB (UME) 236*4096kB (M) = 1029712kB [ 484.253646][T20825] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 484.266635][T20825] Node 1 Normal: 78*4kB (UME) 61*8kB (UME) 46*16kB (UME) 194*32kB (UME) 63*64kB (UME) 13*128kB (UME) 4*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3897472kB [ 484.286614][T20825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 484.297410][T20825] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 484.307148][T20825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 484.321035][T20825] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 484.341110][T20825] 44802 total pagecache pages [ 484.444175][T20825] 0 pages in swap cache [ 484.458577][T20825] Free swap = 124996kB [ 484.462768][T20825] Total swap = 124996kB [ 484.487852][T20825] 2097051 pages RAM [ 484.490085][T20871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.497466][T20825] 0 pages HighMem/MovableOnly [ 484.516052][T20825] 424107 pages reserved [ 484.521492][T20825] 0 pages cma reserved [ 485.242001][T20924] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 485.490284][T20936] __nla_validate_parse: 17 callbacks suppressed [ 485.490302][T20936] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4283'. [ 485.516101][T20936] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4283'. [ 486.073890][T20979] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4294'. [ 486.112582][T20979] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4294'. [ 486.438422][T20995] validate_nla: 2 callbacks suppressed [ 486.438438][T20995] netlink: 'syz.7.4299': attribute type 4 has an invalid length. [ 486.674029][T21012] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4302'. [ 486.724017][T21020] netlink: 'syz.1.4305': attribute type 3 has an invalid length. [ 486.861821][T21028] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4308'. [ 487.058844][T21040] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4314'. [ 487.078153][T21040] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4314'. [ 487.150233][T21044] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4317'. [ 487.224858][T21044] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4317'. [ 487.964839][T21105] netlink: 'syz.1.4332': attribute type 25 has an invalid length. [ 488.083693][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 488.127653][T21113] IPv6: NLM_F_REPLACE set, but no existing node found! [ 488.162621][T21120] netlink: 'syz.5.4338': attribute type 3 has an invalid length. [ 488.190262][T21125] Cannot find add_set index 0 as target [ 488.207966][T21120] netlink: 'syz.5.4338': attribute type 3 has an invalid length. [ 488.216907][T21120] netlink: 'syz.5.4338': attribute type 3 has an invalid length. [ 488.229824][T21120] netlink: 'syz.5.4338': attribute type 3 has an invalid length. [ 488.238404][T21120] netlink: 'syz.5.4338': attribute type 3 has an invalid length. [ 488.247648][T21120] netlink: 'syz.5.4338': attribute type 3 has an invalid length. [ 488.255966][T21120] netlink: 'syz.5.4338': attribute type 3 has an invalid length. [ 488.266020][T21133] SET target dimension over the limit! [ 488.679772][T21161] sctp: [Deprecated]: syz.5.4350 (pid 21161) Use of int in max_burst socket option. [ 488.679772][T21161] Use struct sctp_assoc_value instead [ 488.711961][T21163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.837815][ T7687] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.851907][ T7687] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.871122][ T7687] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.890896][ T7687] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.317091][T21198] team0 (unregistering): Port device team_slave_0 removed [ 489.330375][T21198] team0 (unregistering): Port device team_slave_1 removed [ 489.986642][T21226] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.994402][T21226] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.243984][T21230] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 490.244309][T21244] 8021q: adding VLAN 0 to HW filter on device bond1 [ 490.350869][T21255] bond1: entered allmulticast mode [ 490.361122][T21258] tipc: Enabled bearer , priority 0 [ 490.390043][T21247] syzkaller0: entered promiscuous mode [ 490.395647][T21247] syzkaller0: entered allmulticast mode [ 490.504265][T21245] tipc: Resetting bearer [ 490.570051][T21245] tipc: Disabling bearer [ 490.759847][T21285] erspan0: entered allmulticast mode [ 490.877852][T21287] __nla_validate_parse: 13 callbacks suppressed [ 490.877871][T21287] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4387'. [ 490.927927][T21287] NCSI netlink: No device for ifindex 0 [ 491.437591][T21328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4398'. [ 491.558518][T21337] validate_nla: 46 callbacks suppressed [ 491.558535][T21337] netlink: 'syz.8.4402': attribute type 10 has an invalid length. [ 491.578384][T21337] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.617254][T21337] bridge_slave_1: left allmulticast mode [ 491.623013][T21337] bridge_slave_1: left promiscuous mode [ 491.629560][T21337] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.657442][T21337] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 491.687208][T21339] tipc: Started in network mode [ 491.692556][T21339] tipc: Node identity 4a16eae3e871, cluster identity 4711 [ 491.705523][T21339] tipc: Enabled bearer , priority 0 [ 491.715209][T21339] syzkaller0: entered promiscuous mode [ 491.720693][T21339] syzkaller0: entered allmulticast mode [ 491.778564][T21351] syzkaller0: entered promiscuous mode [ 491.799967][T21352] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4406'. [ 491.818349][T21351] syzkaller0: entered allmulticast mode [ 491.843917][T21348] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4406'. [ 491.873426][T21348] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4406'. [ 491.940914][T21360] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4407'. [ 491.955137][T21339] tipc: Resetting bearer [ 491.984855][T21338] tipc: Resetting bearer [ 492.017282][T21338] tipc: Disabling bearer [ 492.035437][T21367] netlink: 'syz.1.4410': attribute type 1 has an invalid length. [ 492.192073][T21365] pim6reg: entered allmulticast mode [ 492.240334][T21374] syzkaller0: entered promiscuous mode [ 492.246461][T21374] syzkaller0: entered allmulticast mode [ 492.367581][T21388] netlink: 'syz.1.4415': attribute type 21 has an invalid length. [ 492.481461][T21388] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 492.516727][T21385] wg1 speed is unknown, defaulting to 1000 [ 492.654078][T21399] sctp: [Deprecated]: syz.7.4418 (pid 21399) Use of int in max_burst socket option deprecated. [ 492.654078][T21399] Use struct sctp_assoc_value instead [ 492.894108][T21409] netem: change failed [ 493.124851][T21424] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4423'. [ 493.140158][T21423] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4424'. [ 493.200724][T21385] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4414'. [ 493.536546][T21435] netlink: 'syz.7.4428': attribute type 21 has an invalid length. [ 493.583474][T21435] netlink: 128 bytes leftover after parsing attributes in process `syz.7.4428'. [ 493.611766][T21435] netlink: 'syz.7.4428': attribute type 4 has an invalid length. [ 493.635485][T21435] netlink: 'syz.7.4428': attribute type 5 has an invalid length. [ 494.262741][T21479] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.297280][T21479] wg2: entered promiscuous mode [ 494.302183][T21479] wg2: entered allmulticast mode [ 494.558594][T21499] tipc: Enabled bearer , priority 0 [ 494.589236][T21499] syzkaller0: entered promiscuous mode [ 494.603931][T21499] syzkaller0: entered allmulticast mode [ 494.640359][T21503] bond1: invalid ARP target 0.0.0.0 specified for addition [ 494.667165][T21503] bond1: option arp_ip_target: invalid value (0) [ 494.682869][T21503] bond1 (unregistering): Released all slaves [ 494.711650][T21499] tipc: Enabling of bearer rejected, already enabled [ 494.714601][ T7687] tipc: Subscription rejected, illegal request [ 494.791807][T21499] tipc: Resetting bearer [ 494.858687][T21498] tipc: Resetting bearer [ 494.898438][T21498] tipc: Disabling bearer [ 495.004700][T21534] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 495.255958][T21550] IPv6: addrconf: prefix option has invalid lifetime [ 495.309641][T21550] IPv6: addrconf: prefix option has invalid lifetime [ 495.501744][T21561] netlink: 'syz.9.4465': attribute type 4 has an invalid length. [ 495.510632][T21564] x_tables: duplicate underflow at hook 2 [ 495.533852][T21567] x_tables: duplicate underflow at hook 2 [ 495.577140][T21570] netlink: 'syz.8.4467': attribute type 1 has an invalid length. [ 495.614745][T21570] tipc: Enabled bearer , priority 0 [ 495.730393][ T7975] IPVS: starting estimator thread 0... [ 495.823045][T21578] IPVS: using max 24 ests per chain, 57600 per kthread [ 495.982561][T21570] syzkaller0: entered promiscuous mode [ 495.991207][T21570] syzkaller0: entered allmulticast mode [ 496.010589][T21575] : renamed from bridge_slave_0 (while UP) [ 496.037579][T21577] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 496.092834][T21565] tipc: Resetting bearer [ 496.145880][T21565] tipc: Disabling bearer [ 496.179688][T21592] __nla_validate_parse: 15 callbacks suppressed [ 496.179706][T21592] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4471'. [ 496.376371][T21600] netlink: 'syz.5.4475': attribute type 11 has an invalid length. [ 496.412813][T21603] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4478'. [ 496.428123][T21604] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4476'. [ 496.455604][T21604] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4476'. [ 496.469557][T21603] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4478'. [ 496.587200][T21617] netlink: 'syz.7.4480': attribute type 21 has an invalid length. [ 496.598335][T21617] netlink: 'syz.7.4480': attribute type 6 has an invalid length. [ 496.613017][T21617] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4480'. [ 496.641520][T21617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.650953][T21621] netlink: 'syz.8.4481': attribute type 2 has an invalid length. [ 496.669259][T21619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.765968][T21625] bond0: entered promiscuous mode [ 496.784928][T21625] bond0: entered allmulticast mode [ 496.801962][T21625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.857806][T21634] nftables ruleset with unbound chain [ 496.878962][T21634] netlink: 'syz.1.4485': attribute type 28 has an invalid length. [ 496.903286][T21634] netlink: 'syz.1.4485': attribute type 3 has an invalid length. [ 496.919593][T21634] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4485'. [ 496.956387][T21644] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4487'. [ 496.965731][T21644] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4487'. [ 496.987903][T21639] netlink: 256 bytes leftover after parsing attributes in process `syz.8.4488'. [ 497.027150][T21640] netlink: 'syz.5.4489': attribute type 2 has an invalid length. [ 497.054242][T21647] netlink: 'syz.9.4491': attribute type 5 has an invalid length. [ 497.062333][T21648] netlink: 'syz.9.4491': attribute type 5 has an invalid length. [ 497.211719][T21660] Bluetooth: MGMT ver 1.23 [ 497.239176][T21660] 0: reclassify loop, rule prio 0, protocol 800 [ 497.492219][ T7975] IPVS: starting estimator thread 0... [ 497.583315][T21689] IPVS: using max 28 ests per chain, 67200 per kthread [ 497.793096][T21705] lo: entered promiscuous mode [ 497.802322][T21705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.263703][T21729] tipc: Enabled bearer , priority 0 [ 498.380834][T21734] syzkaller0: entered promiscuous mode [ 498.386951][T21734] syzkaller0: entered allmulticast mode [ 498.389772][T21743] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 498.403968][T21734] tipc: Resetting bearer [ 498.452242][T21728] tipc: Resetting bearer [ 499.306951][ T5914] tipc: Node number set to 2724719331 [ 499.932273][T21728] tipc: Disabling bearer [ 500.109576][T21755] IPVS: set_ctl: invalid protocol: 0 172.30.1.6:20003 [ 500.142214][T21753] netlink: 'syz.1.4521': attribute type 21 has an invalid length. [ 500.406379][ T5149] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 500.413074][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 500.595700][T21786] tap0: tun_chr_ioctl cmd 1074812118 [ 500.607848][T21786] tap0: tun_chr_ioctl cmd 1074025672 [ 500.634688][T21786] tap0: ignored: set checksum disabled [ 501.070206][T21822] wg1 speed is unknown, defaulting to 1000 [ 501.080182][T21824] netlink: 'syz.8.4545': attribute type 11 has an invalid length. [ 501.088663][T21827] netlink: 'syz.8.4545': attribute type 11 has an invalid length. [ 501.388051][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 501.539361][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804f4f2c00: rx timeout, send abort [ 501.548209][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804f4f0c00: rx timeout, send abort [ 501.556847][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804f4f2c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 501.572538][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804f4f0c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 501.727657][T21848] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.735406][T21848] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.804923][T21848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.822713][T21848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.025256][T11109] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.041002][T21868] netlink: 'syz.5.4558': attribute type 2 has an invalid length. [ 502.060202][T11109] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.078828][T11109] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.095081][T11109] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.122154][T21868] 9: entered promiscuous mode [ 502.128613][T11109] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.148047][T11109] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.168653][T11109] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.184285][T11109] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.238322][T21877] wg1 speed is unknown, defaulting to 1000 [ 502.595356][T21896] __nla_validate_parse: 13 callbacks suppressed [ 502.595375][T21896] netlink: 65039 bytes leftover after parsing attributes in process `syz.8.4569'. [ 502.710025][T21907] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4574'. [ 502.762457][T21908] netlink: 22 bytes leftover after parsing attributes in process `syz.5.4573'. [ 502.786088][T21904] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4573'. [ 502.890505][T21910] netlink: 'syz.8.4575': attribute type 1 has an invalid length. [ 503.022050][T21915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.036390][T21915] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 503.153336][T21910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 504.329330][T21987] wg1 speed is unknown, defaulting to 1000 [ 504.945361][T22013] wg1 speed is unknown, defaulting to 1000 [ 505.128619][T22025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.147180][T22025] team0: Port device bond0 added [ 505.167523][T22027] team0: Failed to send port change of device bond0 via netlink (err -105) [ 505.194835][T22027] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 505.208119][T22027] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 505.247792][T22038] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4627'. [ 506.103287][T22085] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4647'. [ 506.116400][T22087] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4648'. [ 506.268027][T22095] netlink: 'syz.5.4651': attribute type 1 has an invalid length. [ 506.428050][T22095] 8021q: adding VLAN 0 to HW filter on device bond1 [ 506.679806][T22120] x_tables: duplicate underflow at hook 3 [ 507.133843][T22145] sctp: [Deprecated]: syz.1.4666 (pid 22145) Use of struct sctp_assoc_value in delayed_ack socket option. [ 507.133843][T22145] Use struct sctp_sack_info instead [ 507.151864][T22145] sctp: [Deprecated]: syz.1.4666 (pid 22145) Use of struct sctp_assoc_value in delayed_ack socket option. [ 507.151864][T22145] Use struct sctp_sack_info instead [ 507.177856][T22145] tipc: Started in network mode [ 507.183465][T22145] tipc: Node identity ac14140f, cluster identity 4711 [ 507.204289][T22145] tipc: New replicast peer: 255.255.255.255 [ 507.212150][T22145] tipc: Enabled bearer , priority 10 [ 507.219198][T22145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4666'. [ 507.231571][T22145] sctp: [Deprecated]: syz.1.4666 (pid 22145) Use of struct sctp_assoc_value in delayed_ack socket option. [ 507.231571][T22145] Use struct sctp_sack_info instead [ 507.680755][T22173] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4675'. [ 507.690740][T22173] netlink: 'syz.8.4675': attribute type 1 has an invalid length. [ 507.698820][T22173] netlink: 'syz.8.4675': attribute type 1 has an invalid length. [ 507.708667][T22173] netlink: 'syz.8.4675': attribute type 2 has an invalid length. [ 507.716644][T22173] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4675'. [ 507.730726][T22173] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 507.762672][T22175] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4676'. [ 507.782692][T22175] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4676'. [ 507.801692][T22175] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4676'. [ 508.030312][T22186] netlink: 'syz.7.4681': attribute type 29 has an invalid length. [ 508.203966][ T5907] tipc: Node number set to 2886997007 [ 508.265504][T22194] tipc: Enabled bearer , priority 10 [ 508.664640][T22217] tipc: Enabled bearer , priority 0 [ 508.682072][T22217] syzkaller0: entered promiscuous mode [ 508.713168][T22217] syzkaller0: entered allmulticast mode [ 508.789216][T22217] tipc: Resetting bearer [ 508.827370][T22216] tipc: Resetting bearer [ 508.880839][T22216] tipc: Disabling bearer [ 508.913666][T22237] netlink: 'syz.8.4698': attribute type 12 has an invalid length. [ 508.930710][T22235] netlink: 'syz.9.4697': attribute type 1 has an invalid length. [ 508.999436][T22235] 8021q: adding VLAN 0 to HW filter on device bond3 [ 509.047800][T22235] veth3: entered promiscuous mode [ 509.072584][T22235] bond3: (slave veth3): Enslaving as an active interface with a down link [ 509.101590][T22244] vlan2: entered allmulticast mode [ 509.107328][T22244] bond3: entered allmulticast mode [ 509.117847][T22244] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 509.234947][T22248] bridge_slave_0: left allmulticast mode [ 509.245341][T22248] bridge_slave_0: left promiscuous mode [ 509.251259][T22248] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.265913][T22248] bond0: (slave bridge_slave_1): Releasing backup interface [ 509.282274][T22248] bond0: (slave bond_slave_0): Releasing backup interface [ 509.302337][T22248] bond0: (slave bond_slave_1): Releasing backup interface [ 509.326855][T22248] team0: Port device team_slave_0 removed [ 509.339494][T22248] team0: Port device team_slave_1 removed [ 509.346324][T22248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.353963][T22248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.362233][T22248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.370970][T22248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.379991][T22248] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 509.397067][T22257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 509.530645][T22270] netlink: 'syz.1.4705': attribute type 11 has an invalid length. [ 509.548079][T22270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4705'. [ 509.642324][T22274] openvswitch: netlink: Flow actions attr not present in new flow. [ 509.691669][T22280] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4709'. [ 510.052042][T22308] netlink: 'syz.1.4718': attribute type 1 has an invalid length. [ 510.069771][T22309] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4719'. [ 510.089614][T22308] 8021q: adding VLAN 0 to HW filter on device bond1 [ 510.090585][T22309] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4719'. [ 510.112106][T22308] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 510.148934][T22312] wg1 speed is unknown, defaulting to 1000 [ 510.206320][T22316] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4721'. [ 510.555416][T22334] 8021q: adding VLAN 0 to HW filter on device bond2 [ 510.570961][T22334] bond0: (slave bond2): Enslaving as an active interface with a down link [ 510.610532][T22339] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 510.694330][T22343] netlink: 'syz.5.4728': attribute type 9 has an invalid length. [ 510.732692][T22343] netlink: 'syz.5.4728': attribute type 7 has an invalid length. [ 510.788088][T22352] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 511.245480][T22376] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 511.431331][T22403] syzkaller0: entered promiscuous mode [ 511.447820][T22403] syzkaller0: entered allmulticast mode [ 511.518641][T22405] x_tables: duplicate underflow at hook 2 [ 511.625862][T22414] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 511.695856][T22416] tipc: Enabled bearer , priority 0 [ 511.750124][T22416] tipc: Disabling bearer [ 512.650781][T22479] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_tx_wq": -EINTR [ 512.756971][T22503] xt_hashlimit: size too large, truncated to 1048576 [ 512.804893][T22505] __nla_validate_parse: 7 callbacks suppressed [ 512.804910][T22505] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4774'. [ 513.266097][T22533] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 513.296845][T22533] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 513.479789][T22545] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 513.859007][T22563] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4793'. [ 513.875897][T22563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.890530][T22563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.905966][T22563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.916854][T22563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.967516][T22575] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 514.426828][T22612] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4807'. [ 514.456079][T22614] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 514.549715][T22620] validate_nla: 6 callbacks suppressed [ 514.549732][T22620] netlink: 'syz.5.4811': attribute type 2 has an invalid length. [ 514.935464][T22648] netlink: 208 bytes leftover after parsing attributes in process `syz.9.4820'. [ 515.523211][T22666] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4827'. [ 515.562939][T22670] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4828'. [ 515.663296][T22675] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4829'. [ 515.676546][T22673] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4829'. [ 515.899575][T22694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.087284][T22693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.144784][T22690] infiniband syz1: set active [ 516.149959][T22690] infiniband syz1: added team0 [ 516.237487][T22690] RDS/IB: syz1: added [ 516.256718][T22690] smc: adding ib device syz1 with port count 1 [ 516.279109][T22708] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4839'. [ 516.289668][T22707] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 516.300240][T22690] smc: ib device syz1 port 1 has no pnetid [ 516.439097][T22713] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4842'. [ 516.923892][T22722] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20003 [ 517.121532][T22731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.204697][T22738] xt_ecn: cannot match TCP bits for non-tcp packets [ 517.471305][T22745] netlink: 'syz.8.4852': attribute type 10 has an invalid length. [ 517.507802][T22745] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 517.673542][T22754] netlink: 'syz.8.4854': attribute type 21 has an invalid length. [ 517.691701][T22754] macvlan0: entered promiscuous mode [ 517.714444][T22754] batadv0: entered promiscuous mode [ 517.729481][T22754] debugfs: 'hsr1' already exists in 'hsr' [ 517.735445][T22754] Cannot create hsr debugfs directory [ 517.741169][T22754] hsr1: entered allmulticast mode [ 517.747850][T22754] macvlan0: entered allmulticast mode [ 517.754060][T22754] veth1_vlan: entered allmulticast mode [ 517.759644][T22754] batadv0: entered allmulticast mode [ 517.774882][T22754] macvlan0: left promiscuous mode [ 517.789982][T22754] batadv0: left promiscuous mode [ 518.172777][T22782] __nla_validate_parse: 2 callbacks suppressed [ 518.172795][T22782] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4862'. [ 518.195397][T22783] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4861'. [ 518.238837][T22783] syzkaller1: entered promiscuous mode [ 518.257343][T22783] syzkaller1: entered allmulticast mode [ 518.781678][T22817] sctp: [Deprecated]: syz.5.4872 (pid 22817) Use of struct sctp_assoc_value in delayed_ack socket option. [ 518.781678][T22817] Use struct sctp_sack_info instead [ 518.956170][T22826] netlink: 148 bytes leftover after parsing attributes in process `syz.7.4875'. [ 519.151770][T22833] netlink: 'syz.7.4878': attribute type 5 has an invalid length. [ 519.165111][T22833] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4878'. [ 519.317488][T22837] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4880'. [ 519.845287][T22854] tipc: Enabled bearer , priority 0 [ 519.858930][T22853] veth0: entered promiscuous mode [ 519.868624][T22854] syzkaller0: entered promiscuous mode [ 519.876323][T22854] syzkaller0: entered allmulticast mode [ 519.886966][T22853] netlink: 'syz.5.4885': attribute type 39 has an invalid length. [ 519.895340][T22856] xt_CT: You must specify a L4 protocol and not use inversions on it [ 519.918500][T22856] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4887'. [ 519.922141][T22854] tipc: Resetting bearer [ 519.939400][T22852] tipc: Resetting bearer [ 520.097900][T22852] tipc: Disabling bearer [ 520.114915][T22851] veth0: left promiscuous mode [ 520.349889][T22867] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4890'. [ 520.386755][T22872] netlink: 'syz.8.4892': attribute type 1 has an invalid length. [ 520.460089][T22872] 8021q: adding VLAN 0 to HW filter on device bond2 [ 520.600913][T22881] sctp: [Deprecated]: syz.7.4895 (pid 22881) Use of struct sctp_assoc_value in delayed_ack socket option. [ 520.600913][T22881] Use struct sctp_sack_info instead [ 520.663734][T22881] bond2: option lp_interval: invalid value (0) [ 520.670148][T22881] bond2: option lp_interval: allowed values 1 - 2147483647 [ 520.682153][T22881] bond2 (unregistering): Released all slaves [ 520.879641][T22892] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 521.339772][T22896] syzkaller0: entered promiscuous mode [ 521.353390][T22896] syzkaller0: entered allmulticast mode [ 523.021989][T22915] tipc: Enabled bearer , priority 0 [ 523.073272][T22915] tipc: Disabling bearer [ 523.455904][T22956] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4916'. [ 523.500770][T22956] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4916'. [ 523.630833][T22965] dvmrp0: entered allmulticast mode [ 523.871516][T22980] bridge3: entered promiscuous mode [ 523.878987][T22980] bridge3: entered allmulticast mode [ 524.142112][T22992] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4926'. [ 524.367106][T23012] IPVS: set_ctl: invalid protocol: 50 10.1.1.0:20000 [ 524.372327][T23010] netlink: 452 bytes leftover after parsing attributes in process `syz.5.4933'. [ 524.452826][T23017] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4934'. [ 524.478341][T23018] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4934'. [ 524.528232][T23018] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4934'. [ 524.563884][T23023] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4936'. [ 524.732389][T23035] : entered promiscuous mode [ 524.824132][T23037] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4942'. [ 524.860975][T23039] tipc: Enabled bearer , priority 0 [ 524.872013][T23039] syzkaller0: entered promiscuous mode [ 524.882156][T23039] syzkaller0: entered allmulticast mode [ 524.918789][T23039] netlink: 'syz.7.4941': attribute type 21 has an invalid length. [ 524.926948][T23039] netlink: 156 bytes leftover after parsing attributes in process `syz.7.4941'. [ 525.060983][T23039] tipc: Resetting bearer [ 525.078592][T23038] tipc: Resetting bearer [ 525.097590][T23038] tipc: Disabling bearer [ 525.224063][T23066] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5 [ 525.981616][ T5149] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 526.004724][ T5149] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 526.015535][ T5149] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 526.024393][ T5149] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 526.031979][ T5149] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 526.077339][T23105] wg1 speed is unknown, defaulting to 1000 [ 526.557903][T23129] netlink: 'syz.5.4962': attribute type 1 has an invalid length. [ 526.860775][T23143] syz.5.4969 uses old SIOCAX25GETINFO [ 526.937201][T23105] chnl_net:caif_netlink_parms(): no params data found [ 526.995868][T23146] xt_hashlimit: size too large, truncated to 1048576 [ 527.003922][T23146] netlink: 'syz.9.4971': attribute type 5 has an invalid length. [ 527.935354][ T7702] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 527.961622][ T7702] bond1 (unregistering): (slave ip6gretap2): Releasing backup interface [ 528.058627][ T7702] bond2 (unregistering): (slave gretap2): Releasing active interface [ 528.081019][ T7702] bond6 (unregistering): (slave gretap3): Releasing active interface [ 528.089427][ T5826] Bluetooth: hci7: command tx timeout [ 528.096542][ T7702] gretap3 (unregistering): left allmulticast mode [ 528.561455][ T7702] bond0 (unregistering): Released all slaves [ 528.663404][ T7702] bond1 (unregistering): Released all slaves [ 528.677908][ T7702] bond2 (unregistering): Released all slaves [ 528.778239][ T7702] bond3 (unregistering): Released all slaves [ 528.791538][ T7702] bond4 (unregistering): Released all slaves [ 528.893898][ T7702] bond5 (unregistering): Released all slaves [ 528.989297][ T7702] bond6 (unregistering): Released all slaves [ 529.148357][T23162] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 529.162559][T23162] __nla_validate_parse: 5 callbacks suppressed [ 529.162569][T23162] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4976'. [ 529.199006][ T7702] tipc: Disabling bearer [ 529.220269][ T7702] tipc: Left network mode [ 529.395836][T23105] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.413638][T23105] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.440495][T23105] bridge_slave_0: entered allmulticast mode [ 529.458964][T23105] bridge_slave_0: entered promiscuous mode [ 529.488701][T23105] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.504633][T23105] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.531232][T23105] bridge_slave_1: entered allmulticast mode [ 529.547871][T23105] bridge_slave_1: entered promiscuous mode [ 529.644364][T23188] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4981'. [ 529.699852][T23193] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4981'. [ 529.742252][T23105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.760626][T23105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.774942][T23199] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4983'. [ 529.828843][T23201] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4985'. [ 529.924802][T23105] team0: Port device team_slave_0 added [ 529.934782][T23105] team0: Port device team_slave_1 added [ 530.165032][ T5826] Bluetooth: hci7: command tx timeout [ 530.234545][T23227] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4993'. [ 530.307357][T23231] x_tables: duplicate underflow at hook 1 [ 530.358008][ T7702] hsr_slave_0: left promiscuous mode [ 530.380004][T23232] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4993'. [ 530.405898][ T7702] pim6reg (unregistering): left allmulticast mode [ 531.094445][ T7702] vlan1 (unregistering): left allmulticast mode [ 531.100907][ T7702] veth0_vlan (unregistering): left allmulticast mode [ 531.605325][T23105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.612557][T23105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.640801][T23105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.727305][T23105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.744964][T23105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.787360][T23105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.907034][T23105] hsr_slave_0: entered promiscuous mode [ 531.914774][T23105] hsr_slave_1: entered promiscuous mode [ 531.921314][T23105] debugfs: 'hsr0' already exists in 'hsr' [ 531.928068][T23105] Cannot create hsr debugfs directory [ 532.175195][T23262] syzkaller1: entered promiscuous mode [ 532.180830][T23262] syzkaller1: entered allmulticast mode [ 532.244069][ T5149] Bluetooth: hci7: command tx timeout [ 532.303829][T23105] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.395706][T23105] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.424270][ T7702] IPVS: stop unused estimator thread 0... [ 532.495456][T23105] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.588399][T23105] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.775824][T23280] netlink: 'syz.8.5009': attribute type 10 has an invalid length. [ 532.816899][T23280] team0: Port device dummy0 added [ 532.837696][T23279] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 532.937098][T23105] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 532.970993][T23105] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 532.992599][T23291] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5014'. [ 533.002718][T23291] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5014'. [ 533.021486][T23105] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 533.065959][T23105] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 533.074015][T23294] xt_TCPMSS: Only works on TCP SYN packets [ 533.117859][T23294] bridge0: mtu less than device minimum [ 533.219454][T23311] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5018'. [ 533.269765][T23105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.307789][T23105] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.328681][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.335892][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.352001][ T7702] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.359236][ T7702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.463325][T23321] 8021q: VLANs not supported on ip_vti0 [ 533.648162][T23105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.689753][T23105] veth0_vlan: entered promiscuous mode [ 533.701878][T23105] veth1_vlan: entered promiscuous mode [ 533.731974][T23105] veth0_macvtap: entered promiscuous mode [ 533.742144][T23105] veth1_macvtap: entered promiscuous mode [ 533.760871][T23105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.779340][T23105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.796920][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.806650][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.817426][ T7702] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.827768][ T7702] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.951774][T23312] nbd: must specify a device to reconfigure [ 534.097221][ T7702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.132113][ T7702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.238800][T11111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.266641][T11111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.325425][ T5149] Bluetooth: hci7: command tx timeout [ 534.461128][T23358] IPVS: sh: FWM 3 0x00000003 - no destination available [ 534.508474][T23358] __nla_validate_parse: 1 callbacks suppressed [ 534.508494][T23358] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5033'. [ 535.101909][T23398] netlink: 'syz.7.5046': attribute type 11 has an invalid length. [ 535.122164][T23399] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5047'. [ 535.154256][T23399] netlink: 10 bytes leftover after parsing attributes in process `syz.8.5047'. [ 535.246805][T23410] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5048'. [ 535.271668][T23410] pimreg: entered allmulticast mode [ 535.312408][T23415] netlink: 'syz.7.5051': attribute type 58 has an invalid length. [ 535.327176][T23415] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5051'. [ 535.466511][T23428] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5054'. [ 535.551010][T23436] 8021q: VLANs not supported on ip6gre0 [ 536.098238][T23469] FAULT_INJECTION: forcing a failure. [ 536.098238][T23469] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 536.115243][T23469] CPU: 0 UID: 0 PID: 23469 Comm: syz.5.5066 Not tainted syzkaller #0 PREEMPT(full) [ 536.115268][T23469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 536.115279][T23469] Call Trace: [ 536.115286][T23469] [ 536.115294][T23469] dump_stack_lvl+0x189/0x250 [ 536.115323][T23469] ? __pfx____ratelimit+0x10/0x10 [ 536.115345][T23469] ? __pfx_dump_stack_lvl+0x10/0x10 [ 536.115367][T23469] ? __pfx__printk+0x10/0x10 [ 536.115399][T23469] should_fail_ex+0x414/0x560 [ 536.115429][T23469] _copy_to_user+0x31/0xb0 [ 536.115453][T23469] simple_read_from_buffer+0xe1/0x170 [ 536.115483][T23469] proc_fail_nth_read+0x1b3/0x220 [ 536.115509][T23469] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 536.115534][T23469] ? rw_verify_area+0x2a6/0x4d0 [ 536.115555][T23469] ? __lock_acquire+0xab9/0xd20 [ 536.115572][T23469] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 536.115594][T23469] vfs_read+0x200/0xa30 [ 536.115616][T23469] ? fdget_pos+0x247/0x320 [ 536.115637][T23469] ? __pfx___mutex_lock+0x10/0x10 [ 536.115661][T23469] ? __pfx_vfs_read+0x10/0x10 [ 536.115685][T23469] ? __fget_files+0x2a/0x420 [ 536.115707][T23469] ? __fget_files+0x3a0/0x420 [ 536.115722][T23469] ? __fget_files+0x2a/0x420 [ 536.115749][T23469] ksys_read+0x145/0x250 [ 536.115774][T23469] ? __pfx_ksys_read+0x10/0x10 [ 536.115808][T23469] ? do_syscall_64+0xbe/0xfa0 [ 536.115833][T23469] do_syscall_64+0xfa/0xfa0 [ 536.115852][T23469] ? lockdep_hardirqs_on+0x9c/0x150 [ 536.115872][T23469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.115890][T23469] ? clear_bhb_loop+0x60/0xb0 [ 536.115911][T23469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.115928][T23469] RIP: 0033:0x7fbb1218d9dc [ 536.115945][T23469] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 536.115964][T23469] RSP: 002b:00007fbb12f89030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 536.115983][T23469] RAX: ffffffffffffffda RBX: 00007fbb123e5fa0 RCX: 00007fbb1218d9dc [ 536.115997][T23469] RDX: 000000000000000f RSI: 00007fbb12f890a0 RDI: 0000000000000004 [ 536.116008][T23469] RBP: 00007fbb12f89090 R08: 0000000000000000 R09: 0000000000000000 [ 536.116019][T23469] R10: 000000000000006a R11: 0000000000000246 R12: 0000000000000001 [ 536.116030][T23469] R13: 00007fbb123e6038 R14: 00007fbb123e5fa0 R15: 00007fff0d4ff858 [ 536.116062][T23469] [ 536.743866][T23499] netlink: 'syz.5.5073': attribute type 1 has an invalid length. [ 536.762863][T23499] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5073'. [ 536.788028][T23502] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5074'. [ 536.859764][T23504] xt_l2tp: wrong L2TP version: 0 [ 536.902774][T23508] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5077'. [ 537.408721][T23535] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5087'. [ 537.492438][T23543] syz.8.5089: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 537.523055][T23543] CPU: 1 UID: 0 PID: 23543 Comm: syz.8.5089 Not tainted syzkaller #0 PREEMPT(full) [ 537.523081][T23543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 537.523091][T23543] Call Trace: [ 537.523099][T23543] [ 537.523107][T23543] dump_stack_lvl+0x189/0x250 [ 537.523139][T23543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.523163][T23543] ? __pfx__printk+0x10/0x10 [ 537.523182][T23543] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 537.523206][T23543] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 537.523231][T23543] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 537.523257][T23543] warn_alloc+0x214/0x310 [ 537.523289][T23543] ? __pfx_warn_alloc+0x10/0x10 [ 537.523323][T23543] ? __get_vm_area_node+0x28f/0x300 [ 537.523347][T23543] ? hash_ip_create+0x741/0x1410 [ 537.523370][T23543] __vmalloc_node_range_noprof+0x690/0x12d0 [ 537.523393][T23543] ? do_syscall_64+0xfa/0xfa0 [ 537.523442][T23543] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 537.523464][T23543] ? hash_ip_create+0x741/0x1410 [ 537.523485][T23543] ? rcu_is_watching+0x15/0xb0 [ 537.523504][T23543] ? hash_ip_create+0x741/0x1410 [ 537.523519][T23543] __kvmalloc_node_noprof+0x674/0x910 [ 537.523544][T23543] ? hash_ip_create+0x741/0x1410 [ 537.523558][T23543] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 537.523579][T23543] ? hash_ip_create+0x6d5/0x1410 [ 537.523602][T23543] hash_ip_create+0x741/0x1410 [ 537.523618][T23543] ? __lock_acquire+0xab9/0xd20 [ 537.523648][T23543] ? __pfx_hash_ip_create+0x10/0x10 [ 537.523669][T23543] ? __nla_parse+0x40/0x60 [ 537.523687][T23543] ? __pfx_hash_ip_create+0x10/0x10 [ 537.523706][T23543] ip_set_create+0xa97/0x1940 [ 537.523728][T23543] ? ip_set_create+0x4a2/0x1940 [ 537.523760][T23543] ? __pfx_ip_set_create+0x10/0x10 [ 537.523818][T23543] nfnetlink_rcv_msg+0xb4d/0x1130 [ 537.523842][T23543] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 537.523882][T23543] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 537.523909][T23543] ? kasan_save_track+0x4f/0x80 [ 537.523983][T23543] netlink_rcv_skb+0x208/0x470 [ 537.524006][T23543] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.524028][T23543] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 537.524052][T23543] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 537.524089][T23543] ? bpf_lsm_capable+0x9/0x20 [ 537.524109][T23543] ? security_capable+0x7e/0x2e0 [ 537.524140][T23543] nfnetlink_rcv+0x282/0x2590 [ 537.524165][T23543] ? __dev_queue_xmit+0x27b/0x3b50 [ 537.524184][T23543] ? __dev_queue_xmit+0x1d79/0x3b50 [ 537.524200][T23543] ? kasan_save_track+0x3e/0x80 [ 537.524220][T23543] ? __kasan_slab_alloc+0x6c/0x80 [ 537.524254][T23543] ? __dev_queue_xmit+0x27b/0x3b50 [ 537.524285][T23543] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 537.524307][T23543] ? __pfx___dev_queue_xmit+0x10/0x10 [ 537.524341][T23543] ? ref_tracker_free+0x63a/0x7d0 [ 537.524359][T23543] ? __asan_memcpy+0x40/0x70 [ 537.524380][T23543] ? __pfx_ref_tracker_free+0x10/0x10 [ 537.524414][T23543] ? skb_clone+0x246/0x3a0 [ 537.524437][T23543] ? __netlink_deliver_tap+0x807/0x850 [ 537.524461][T23543] ? netlink_deliver_tap+0x2e/0x1b0 [ 537.524493][T23543] ? netlink_deliver_tap+0x2e/0x1b0 [ 537.524526][T23543] netlink_unicast+0x82f/0x9e0 [ 537.524558][T23543] ? __pfx_netlink_unicast+0x10/0x10 [ 537.524583][T23543] ? netlink_sendmsg+0x642/0xb30 [ 537.524606][T23543] ? skb_put+0x11b/0x210 [ 537.524634][T23543] netlink_sendmsg+0x805/0xb30 [ 537.524669][T23543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.524697][T23543] ? aa_sock_msg_perm+0xf1/0x1d0 [ 537.524723][T23543] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 537.524740][T23543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.524765][T23543] __sock_sendmsg+0x21c/0x270 [ 537.524791][T23543] ____sys_sendmsg+0x505/0x830 [ 537.524814][T23543] ? __pfx_____sys_sendmsg+0x10/0x10 [ 537.524841][T23543] ? import_iovec+0x74/0xa0 [ 537.524865][T23543] ___sys_sendmsg+0x21f/0x2a0 [ 537.524885][T23543] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.524948][T23543] ? __fget_files+0x2a/0x420 [ 537.524964][T23543] ? __fget_files+0x3a0/0x420 [ 537.524991][T23543] __x64_sys_sendmsg+0x19b/0x260 [ 537.525011][T23543] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 537.525046][T23543] ? do_syscall_64+0xbe/0xfa0 [ 537.525071][T23543] do_syscall_64+0xfa/0xfa0 [ 537.525090][T23543] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.525110][T23543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.525128][T23543] ? clear_bhb_loop+0x60/0xb0 [ 537.525149][T23543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.525166][T23543] RIP: 0033:0x7fe0dd38efc9 [ 537.525183][T23543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.525198][T23543] RSP: 002b:00007fe0de30c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.525218][T23543] RAX: ffffffffffffffda RBX: 00007fe0dd5e5fa0 RCX: 00007fe0dd38efc9 [ 537.525231][T23543] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 537.525243][T23543] RBP: 00007fe0dd411f91 R08: 0000000000000000 R09: 0000000000000000 [ 537.525254][T23543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.525264][T23543] R13: 00007fe0dd5e6038 R14: 00007fe0dd5e5fa0 R15: 00007ffe467316e8 [ 537.525297][T23543] [ 537.525305][T23543] Mem-Info: [ 538.054611][T23543] active_anon:4950 inactive_anon:0 isolated_anon:0 [ 538.054611][T23543] active_file:3529 inactive_file:40063 isolated_file:0 [ 538.054611][T23543] unevictable:785 dirty:31 writeback:0 [ 538.054611][T23543] slab_reclaimable:14178 slab_unreclaimable:161011 [ 538.054611][T23543] mapped:44419 shmem:1366 pagetables:1230 [ 538.054611][T23543] sec_pagetables:0 bounce:0 [ 538.054611][T23543] kernel_misc_reclaimable:0 [ 538.054611][T23543] free:1218812 free_pcp:13684 free_cma:0 [ 538.107800][T23559] tipc: Enabling of bearer rejected, failed to enable media [ 538.110804][T23543] Node 0 active_anon:19748kB inactive_anon:0kB active_file:14116kB inactive_file:160048kB unevictable:1604kB isolated(anon):0kB isolated(file):0kB mapped:177652kB dirty:136kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17492kB pagetables:4696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 538.236229][T23543] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 538.299478][T23543] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 538.339049][T23543] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 538.363050][T23543] Node 0 DMA32 free:960836kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19548kB inactive_anon:0kB active_file:14116kB inactive_file:160048kB unevictable:1604kB writepending:136kB zspages:0kB present:3129332kB managed:2565208kB mlocked:76kB bounce:0kB free_pcp:41828kB local_pcp:22244kB free_cma:0kB [ 538.409592][T23543] lowmem_reserve[]: 0 0 0 0 0 [ 538.435285][T23543] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 538.468920][T23543] lowmem_reserve[]: 0 0 0 0 0 [ 538.475322][T23543] Node 1 Normal free:3899288kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13600kB local_pcp:10528kB free_cma:0kB [ 538.526450][T23543] lowmem_reserve[]: 0 0 0 0 0 [ 538.531322][T23543] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 538.534588][T23578] netlink: 'syz.5.5094': attribute type 21 has an invalid length. [ 538.544299][T23543] Node 0 DMA32: 1687*4kB (UME) 655*8kB (UM) 339*16kB (UME) 377*32kB (UM) 92*64kB (UM) 71*128kB (UME) 40*256kB (UM) 18*512kB (UM) 16*1024kB (UME) 6*2048kB (UME) 212*4096kB (M) = 960932kB [ 538.544488][T23543] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 538.544607][T23543] Node 1 Normal: 204*4kB (UME) 61*8kB (UME) 46*16kB (UME) 207*32kB (UME) 73*64kB (UME) 15*128kB (UME) 4*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3899288kB [ 538.642211][T23543] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 538.654121][T23543] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 538.663963][T23543] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 538.674136][T23543] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 538.684384][T23543] 44955 total pagecache pages [ 538.689090][T23543] 0 pages in swap cache [ 538.693303][T23543] Free swap = 124996kB [ 538.697599][T23543] Total swap = 124996kB [ 538.703363][T23543] 2097051 pages RAM [ 538.707200][T23543] 0 pages HighMem/MovableOnly [ 538.712015][T23543] 424107 pages reserved [ 538.716798][T23543] 0 pages cma reserved [ 538.914095][T23591] bond4: option resend_igmp: invalid value (32767) [ 538.920652][T23591] bond4: option resend_igmp: allowed values 0 - 255 [ 538.972368][T23591] bond4 (unregistering): Released all slaves [ 539.301908][T23629] netlink: 'syz.9.5112': attribute type 3 has an invalid length. [ 539.340164][T23630] netlink: 'syz.9.5112': attribute type 3 has an invalid length. [ 539.415561][T23638] syzkaller0: entered promiscuous mode [ 539.433812][T23638] syzkaller0: entered allmulticast mode [ 539.811707][T23671] sctp: [Deprecated]: syz.9.5126 (pid 23671) Use of struct sctp_assoc_value in delayed_ack socket option. [ 539.811707][T23671] Use struct sctp_sack_info instead [ 539.960920][T23688] netlink: 'syz.7.5130': attribute type 1 has an invalid length. [ 539.970653][T23683] xt_ecn: cannot match TCP bits for non-tcp packets [ 539.981436][T23688] netlink: 'syz.7.5130': attribute type 2 has an invalid length. [ 540.150485][T23699] netlink: 'syz.9.5136': attribute type 3 has an invalid length. [ 540.268410][T23704] __nla_validate_parse: 9 callbacks suppressed [ 540.268428][T23704] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5138'. [ 540.363401][T23711] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5141'. [ 540.466157][T23719] tipc: Enabled bearer , priority 0 [ 540.478357][T23721] syzkaller0: entered promiscuous mode [ 540.485762][T23721] syzkaller0: entered allmulticast mode [ 540.499083][T23719] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5143'. [ 540.555566][T23721] tipc: Resetting bearer [ 540.578712][T23716] tipc: Resetting bearer [ 540.651711][T23716] tipc: Disabling bearer [ 541.152647][T23763] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5160'. [ 541.197595][T23765] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5159'. [ 541.914591][T23821] netlink: 84 bytes leftover after parsing attributes in process `syz.9.5175'. [ 541.958374][T23821] netlink: 64 bytes leftover after parsing attributes in process `syz.9.5175'. [ 541.975299][T23824] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5176'. [ 542.219175][T23841] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5181'. [ 542.371685][T23851] syzkaller0: entered promiscuous mode [ 542.381391][T23851] syzkaller0: entered allmulticast mode [ 542.546162][T23851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 542.571179][T23862] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5189'. [ 542.746774][T23872] netlink: 'syz.8.5193': attribute type 1 has an invalid length. [ 542.894104][T23883] netlink: 'syz.7.5199': attribute type 9 has an invalid length. [ 542.960030][T23889] xt_CT: You must specify a L4 protocol and not use inversions on it [ 543.075223][T23895] netlink: 'syz.9.5203': attribute type 178 has an invalid length. [ 543.087749][T23896] xt_CT: You must specify a L4 protocol and not use inversions on it [ 543.185066][T23911] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 543.571227][T23929] netlink: 'syz.7.5210': attribute type 30 has an invalid length. [ 543.674718][T23934] netlink: 'syz.8.5214': attribute type 1 has an invalid length. [ 543.682634][T23934] nbd: error processing sock list [ 543.690255][T23934] block nbd3: shutting down sockets [ 543.707545][T23939] tipc: Started in network mode [ 543.716032][T23939] tipc: Node identity e6eec8a54436, cluster identity 4711 [ 543.728745][T23939] tipc: Enabled bearer , priority 0 [ 543.778036][T23939] syzkaller0: entered promiscuous mode [ 543.783735][T23939] syzkaller0: entered allmulticast mode [ 543.790227][T23939] tipc: Resetting bearer [ 543.884855][ T7702] tipc: Resetting bearer [ 543.897207][T23938] tipc: Resetting bearer [ 544.375229][ T30] audit: type=1800 audit(1761182363.977:8): pid=23957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5220" name="memory.events" dev="tmpfs" ino=1880 res=0 errno=0 [ 544.396974][ T30] audit: type=1804 audit(1761182363.987:9): pid=23957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.5220" name="/newroot/366/memory.events" dev="tmpfs" ino=1880 res=1 errno=0 [ 544.775822][ T5914] tipc: Node number set to 2732116133 [ 545.420850][T23938] tipc: Disabling bearer [ 545.759877][T23991] __nla_validate_parse: 8 callbacks suppressed [ 545.759894][T23991] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5226'. [ 545.795979][T23991] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5226'. [ 546.009947][T24003] tipc: Enabled bearer , priority 0 [ 546.025600][T24003] syzkaller0: entered promiscuous mode [ 546.031235][T24003] syzkaller0: entered allmulticast mode [ 546.047472][T24004] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5233'. [ 546.067990][T24008] bridge_slave_0: left allmulticast mode [ 546.090359][T24008] bridge_slave_0: left promiscuous mode [ 546.097957][T24009] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 546.109312][T24008] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.129189][T24008] bridge_slave_1: left allmulticast mode [ 546.150626][T24008] bridge_slave_1: left promiscuous mode [ 546.152116][T24014] netlink: 112 bytes leftover after parsing attributes in process `syz.7.5238'. [ 546.158326][T24008] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.186916][T24008] bond0: (slave bond_slave_0): Releasing backup interface [ 546.198558][T24008] bond0: (slave bond_slave_1): Releasing backup interface [ 546.212856][T24008] team0: Port device team_slave_0 removed [ 546.224526][T24008] team0: Port device team_slave_1 removed [ 546.230830][T24008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.239696][T24008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.249863][T24008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.257449][T24008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.267484][T24008] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 546.297731][T24010] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 546.360818][T24018] tipc: Resetting bearer [ 546.368530][T24018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.402212][T24002] tipc: Resetting bearer [ 546.410560][T24020] x_tables: duplicate underflow at hook 1 [ 546.440437][T24020] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:255 [ 546.449052][T24002] tipc: Disabling bearer [ 546.578868][T24034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5244'. [ 546.756395][T24041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5246'. [ 547.187812][T24081] tipc: Enabled bearer , priority 0 [ 547.257480][T24083] tipc: Enabling of bearer rejected, already enabled [ 547.309620][T24083] tipc: Resetting bearer [ 547.364197][T24079] tipc: Disabling bearer [ 547.625948][T24104] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5267'. [ 547.685092][T24106] wg1 speed is unknown, defaulting to 1000 [ 547.784282][T24116] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5271'. [ 547.803644][T24111] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5270'. [ 548.117073][T24127] tipc: Enabled bearer , priority 0 [ 548.172075][T24127] syzkaller0: entered promiscuous mode [ 548.199326][T24127] syzkaller0: entered allmulticast mode [ 548.240729][T24136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5276'. [ 548.267806][T24127] tipc: Resetting bearer [ 548.276598][T24125] tipc: Resetting bearer [ 548.296580][T24125] tipc: Disabling bearer [ 548.628347][T24151] netlink: 'syz.9.5282': attribute type 9 has an invalid length. [ 548.796477][T24155] netlink: 'syz.7.5284': attribute type 1 has an invalid length. [ 548.939063][T24160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.080637][T24158] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 549.097775][T24158] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 549.138061][T24163] bond3: (slave gretap1): making interface the new active one [ 549.151747][T24163] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 549.180046][T24155] macvlan2: entered promiscuous mode [ 549.186590][T24155] macvlan2: entered allmulticast mode [ 549.193994][T24155] bond3: entered promiscuous mode [ 549.199791][T24155] gretap1: entered promiscuous mode [ 549.208238][T24155] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 549.221926][T24155] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 549.254662][T24155] bond3: left promiscuous mode [ 549.259496][T24155] gretap1: left promiscuous mode [ 549.321388][T24174] bridge0: port 1(batadv1) entered blocking state [ 549.328358][T24174] bridge0: port 1(batadv1) entered disabled state [ 549.335191][T24174] batadv1: entered allmulticast mode [ 549.342750][T24174] batadv1: entered promiscuous mode [ 549.738310][T24205] x_tables: duplicate underflow at hook 2 [ 549.764515][ T7702] wlan0: Trigger new scan to find an IBSS to join [ 549.826730][ T7687] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 549.837093][ T7687] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 550.167994][T24230] SET target dimension over the limit! [ 550.182858][T24228] netdevsim netdevsim5: Direct firmware load for /. failed with error -2 [ 550.196580][T24233] SET target dimension over the limit! [ 550.204299][T24228] netdevsim netdevsim5: Falling back to sysfs fallback for: /. [ 550.588772][T24261] netlink: 'syz.8.5320': attribute type 1 has an invalid length. [ 550.676772][T24261] 8021q: adding VLAN 0 to HW filter on device bond3 [ 550.740439][T24261] bond3: (slave geneve2): making interface the new active one [ 550.749942][T24261] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 550.758935][T11109] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 550.782211][T11109] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 550.809148][T11109] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 550.824767][ T7687] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 551.140167][T24293] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 551.148164][T24293] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 551.156063][T24293] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 551.163965][T24293] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 551.171867][T24293] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 551.179772][T24293] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 551.187680][T24293] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 551.195575][T24293] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 551.203462][T24293] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 551.211303][T24293] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 551.526712][T24319] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 551.534007][T24319] IPv6: NLM_F_CREATE should be set when creating new route [ 551.624317][T24327] netlink: 'syz.3.5338': attribute type 2 has an invalid length. [ 551.745367][ T5149] block nbd3: Receive control failed (result -32) [ 551.842369][T24341] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 551.851277][T24341] __nla_validate_parse: 9 callbacks suppressed [ 551.851294][T24341] netlink: 56 bytes leftover after parsing attributes in process `syz.9.5342'. [ 552.035965][T24347] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5344'. [ 552.068014][T24347] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5344'. [ 552.293669][T24365] IPVS: length: 191 != 24 [ 552.492559][T24380] netlink: 'syz.5.5359': attribute type 3 has an invalid length. [ 552.526342][T24376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5356'. [ 552.611112][T24389] syzkaller0: entered promiscuous mode [ 552.617988][T24389] syzkaller0: entered allmulticast mode [ 552.665410][T24389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5362'. [ 552.688749][T24389] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5362'. [ 552.807067][T11109] wlan0: Trigger new scan to find an IBSS to join [ 552.973819][T24413] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5369'. [ 553.213146][T24424] syzkaller0: entered promiscuous mode [ 553.219371][T24424] syzkaller0: entered allmulticast mode [ 553.365790][ T30] audit: type=1800 audit(1761182372.977:10): pid=24437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5377" name=B9FF030F6044238CB89E14F088A81BFF886411 dev="tmpfs" ino=1340 res=0 errno=0 [ 553.885158][T24453] netlink: 'syz.5.5381': attribute type 10 has an invalid length. [ 554.915632][T24453] team0: Device veth1_macvtap failed to register rx_handler [ 555.051202][T24460] netlink: 440 bytes leftover after parsing attributes in process `syz.5.5384'. [ 555.334891][T24479] syzkaller1: entered promiscuous mode [ 555.353512][T24479] syzkaller1: entered allmulticast mode [ 555.491243][T24492] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5395'. [ 555.509992][T24492] netlink: 272 bytes leftover after parsing attributes in process `syz.5.5395'. [ 555.771371][T11109] wlan0: Trigger new scan to find an IBSS to join [ 555.815492][T24519] vcan0: entered allmulticast mode [ 556.116193][T24541] syzkaller0: entered promiscuous mode [ 556.121705][T24541] syzkaller0: entered allmulticast mode [ 556.859077][T24588] netlink: 'syz.7.5420': attribute type 10 has an invalid length. [ 556.872263][T24567] x_tables: duplicate underflow at hook 2 [ 556.906671][T11109] wlan0: Creating new IBSS network, BSSID 0a:1a:bf:dd:fc:09 [ 557.192405][T24602] netlink: 'syz.3.5424': attribute type 1 has an invalid length. [ 557.324056][T24602] 8021q: adding VLAN 0 to HW filter on device bond1 [ 557.426544][T11111] wlan0: Selected IBSS BSSID 0a:1a:bf:dd:fc:09 based on configured SSID [ 557.455357][T24603] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 557.852495][T24646] __nla_validate_parse: 2 callbacks suppressed [ 557.852513][T24646] netlink: 56 bytes leftover after parsing attributes in process `syz.8.5434'. [ 557.930671][T24653] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5436'. [ 557.960740][T24640] netlink: 'syz.9.5431': attribute type 1 has an invalid length. [ 557.963778][T24653] bridge1: entered promiscuous mode [ 557.983139][T24653] bridge1: entered allmulticast mode [ 558.099771][T24660] block nbd4: Unsupported socket: should be TCP or UNIX. [ 558.167003][T24668] netlink: 'syz.8.5440': attribute type 10 has an invalid length. [ 558.177385][T24668] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 558.225250][T24671] netlink: 'syz.8.5440': attribute type 10 has an invalid length. [ 558.365775][T24671] team0: Failed to send options change via netlink (err -105) [ 558.386509][T24671] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 558.462431][T24671] team0: Port device dummy0 removed [ 558.500848][T24671] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 558.705030][T24696] IPVS: ip_vs_add_dest(): server weight less than zero [ 559.259044][T24715] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5456'. [ 559.419263][T24730] net_ratelimit: 44 callbacks suppressed [ 559.419282][T24730] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 559.890021][T24737] bridge0: port 4(dummy0) entered disabled state [ 559.896678][T24737] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.904362][T24737] bridge0: port 1() entered disabled state [ 560.391680][T24737] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 560.455397][T24737] macvtap1: left promiscuous mode [ 560.460538][T24737] macvtap1: left allmulticast mode [ 560.475983][T24737] vlan0: left allmulticast mode [ 560.481082][T24737] veth0_vlan: left allmulticast mode [ 560.486553][T24737] vlan0: left promiscuous mode [ 560.492054][T24737] macvtap2: left promiscuous mode [ 560.498621][T24737] macvtap2: left allmulticast mode [ 560.521433][T24737] bond0: left promiscuous mode [ 560.526335][T24737] bond0: left allmulticast mode [ 560.547718][T24744] veth0: entered promiscuous mode [ 560.568079][T24747] veth0: left promiscuous mode [ 560.599986][ T7686] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.616831][ T7686] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.633545][ T7686] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.644015][ T7686] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.817931][T24783] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5464'. [ 560.881378][T24784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.894394][T24784] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5469'. [ 560.924372][T24784] team1: entered promiscuous mode [ 560.929471][T24784] team1: entered allmulticast mode [ 561.750503][T24827] sctp: [Deprecated]: syz.7.5481 (pid 24827) Use of int in max_burst socket option. [ 561.750503][T24827] Use struct sctp_assoc_value instead [ 561.861912][T24833] netlink: 'syz.5.5483': attribute type 1 has an invalid length. [ 561.968206][T24833] 8021q: adding VLAN 0 to HW filter on device bond3 [ 562.021995][T24843] veth7: entered promiscuous mode [ 562.037535][T24843] bond3: (slave veth7): Enslaving as an active interface with a down link [ 562.260186][T24850] syzkaller1: entered promiscuous mode [ 562.265887][T24850] syzkaller1: entered allmulticast mode [ 562.486134][T24881] netlink: 88 bytes leftover after parsing attributes in process `syz.5.5495'. [ 562.704396][T24894] xt_recent: Unsupported userspace flags (000000b1) [ 562.717325][T24894] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5502'. [ 562.791122][T24894] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5502'. [ 562.811133][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 563.057015][T24921] sctp: [Deprecated]: syz.8.5509 (pid 24921) Use of int in max_burst socket option deprecated. [ 563.057015][T24921] Use struct sctp_assoc_value instead [ 563.223195][T24940] netlink: 'syz.8.5509': attribute type 2 has an invalid length. [ 563.249024][T24940] 9: entered promiscuous mode [ 563.736296][T24963] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5523'. [ 563.792851][T24963] bond4: Invalid ad_actor_system MAC address. [ 563.799038][T24963] bond4: option ad_actor_system: invalid value (1) [ 563.807884][T24963] bond4 (unregistering): Released all slaves [ 564.260126][T24981] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5529'. [ 564.309298][T24984] syzkaller0: entered promiscuous mode [ 564.319510][T24984] syzkaller0: entered allmulticast mode [ 564.420170][T24991] netlink: 'syz.3.5534': attribute type 1 has an invalid length. [ 564.430541][T24991] netlink: 'syz.3.5534': attribute type 3 has an invalid length. [ 564.556422][T25004] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5533'. [ 564.883711][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 565.030534][T25016] tap0: tun_chr_ioctl cmd 1074025676 [ 565.070456][T25016] tap0: owner set to 0 [ 565.272426][T25033] wg1 speed is unknown, defaulting to 1000 [ 565.308693][T25038] netlink: 100 bytes leftover after parsing attributes in process `syz.7.5546'. [ 565.641090][T25046] bond5: entered promiscuous mode [ 565.647208][T25046] bond5: entered allmulticast mode [ 565.653683][T25046] 8021q: adding VLAN 0 to HW filter on device bond5 [ 565.949089][T25067] netlink: 'syz.5.5554': attribute type 10 has an invalid length. [ 565.958395][T25069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.104302][T25068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.285914][T25086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.297994][T25076] netlink: 'syz.3.5556': attribute type 1 has an invalid length. [ 566.433541][T25085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.512139][T25096] delete_channel: no stack [ 566.797660][T25114] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5570'. [ 566.811988][T25114] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5570'. [ 566.928756][T25124] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5574'. [ 566.972746][T25126] dvmrp0: entered allmulticast mode [ 567.055347][T25135] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5575'. [ 567.338974][T25150] xt_CT: You must specify a L4 protocol and not use inversions on it [ 567.372227][T25155] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 567.372624][T25153] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5579'. [ 567.404232][T25155] Cannot find add_set index 1 as target [ 567.414581][T25155] netlink: 208 bytes leftover after parsing attributes in process `syz.9.5580'. [ 567.924967][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 567.964874][T25194] netlink: 'syz.8.5592': attribute type 1 has an invalid length. [ 567.977076][T25194] nbd: error processing sock list [ 567.982238][T25194] block nbd4: shutting down sockets [ 568.815306][T25245] __nla_validate_parse: 4 callbacks suppressed [ 568.815324][T25245] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5604'. [ 569.300762][T24763] IPVS: starting estimator thread 0... [ 569.322525][T25268] netlink: 'syz.3.5611': attribute type 10 has an invalid length. [ 569.404661][T25270] IPVS: using max 26 ests per chain, 62400 per kthread [ 569.414417][T25268] batman_adv: batadv0: Adding interface: team0 [ 569.434909][T25268] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.475663][T25268] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 569.510356][T25276] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5618'. [ 569.652583][T25286] xt_TPROXY: Can be used only with -p tcp or -p udp [ 569.723871][T25291] netlink: 'syz.7.5623': attribute type 1 has an invalid length. [ 569.736493][T25288] team0: Device wireguard0 is of different type [ 569.747060][T25291] netlink: 228 bytes leftover after parsing attributes in process `syz.7.5623'. [ 569.860471][T25301] openvswitch: netlink: Flow key attr not present in new flow. [ 569.921775][T25307] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 4, id = 0 [ 570.634485][T25355] vlan2: entered promiscuous mode [ 570.648989][T25355] vlan2: entered allmulticast mode [ 570.673067][T25355] hsr_slave_1: entered allmulticast mode [ 570.739258][T25360] netlink: 'syz.5.5640': attribute type 83 has an invalid length. [ 570.863111][T25369] netlink: 'syz.5.5642': attribute type 1 has an invalid length. [ 570.894323][T25369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5642'. [ 570.917987][T25369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5642'. [ 571.302082][T25392] netlink: 'syz.5.5649': attribute type 2 has an invalid length. [ 571.343105][T25392] netlink: 188 bytes leftover after parsing attributes in process `syz.5.5649'. [ 571.429605][T25393] netlink: 'syz.5.5649': attribute type 1 has an invalid length. [ 571.676559][T25399] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5651'. [ 571.854911][T25415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5655'. [ 571.873769][T25417] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5657'. [ 571.898569][T25417] geneve3: entered promiscuous mode [ 572.071458][T25426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 572.279986][T25433] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5663'. [ 572.376565][T25433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.393113][T25433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.431481][T25433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.455128][T25433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.750651][T25450] netlink: 'syz.5.5669': attribute type 4 has an invalid length. [ 572.796420][T25448] netlink: 'syz.3.5667': attribute type 32 has an invalid length. [ 572.805818][T25454] netlink: 'syz.5.5669': attribute type 4 has an invalid length. [ 572.852214][T25448] bond2: option coupled_control: invalid value (115) [ 572.866299][T25448] bond2 (unregistering): Released all slaves [ 573.400127][T25485] batadv1: left allmulticast mode [ 573.451513][T25485] batadv1: left promiscuous mode [ 573.469036][T25485] bridge0: port 1(batadv1) entered disabled state [ 573.489445][T25485] veth3: left allmulticast mode [ 573.503272][T25485] bridge0: port 4(veth3) entered disabled state [ 573.516664][T25485] ip6gretap1: left allmulticast mode [ 573.544001][T25485] ip6gretap1: left promiscuous mode [ 573.549486][T25485] bridge0: port 3(ip6gretap1) entered disabled state [ 573.632443][T25485] bond0: (slave bridge0): Releasing backup interface [ 573.692779][T25489] tipc: Enabling of bearer rejected, failed to enable media [ 573.706477][T25501] netlink: 'syz.9.5683': attribute type 1 has an invalid length. [ 573.895048][T25513] __nla_validate_parse: 9 callbacks suppressed [ 573.895064][T25513] netlink: 56 bytes leftover after parsing attributes in process `syz.9.5687'. [ 573.906057][T25518] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5688'. [ 573.963171][T25514] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5687'. [ 574.024027][T25521] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5685'. [ 574.081598][T25519] syzkaller0: entered promiscuous mode [ 574.091013][T25519] syzkaller0: entered allmulticast mode [ 574.100799][T25521] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5685'. [ 574.181971][T25529] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5692'. [ 574.275772][T25534] netlink: 'syz.5.5693': attribute type 8 has an invalid length. [ 576.467341][T25555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5699'. [ 576.494134][T25555] bridge_slave_1: left allmulticast mode [ 576.541364][T25555] bridge_slave_1: left promiscuous mode [ 576.549519][T25555] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.656019][T25555] bridge_slave_0: left allmulticast mode [ 576.661707][T25555] bridge_slave_0: left promiscuous mode [ 576.666859][T25570] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5702'. [ 576.693399][T25555] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.812128][T25570] netlink: 56 bytes leftover after parsing attributes in process `syz.9.5702'. [ 576.932222][T25579] netlink: 'syz.3.5704': attribute type 1 has an invalid length. [ 576.984508][T25579] bond2: (slave gretap1): making interface the new active one [ 576.993261][T25579] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 577.009111][T25581] netlink: 'syz.9.5705': attribute type 5 has an invalid length. [ 577.297231][T25593] lo: entered allmulticast mode [ 577.303228][T25593] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5708'. [ 577.934976][T25618] pim6reg1: entered promiscuous mode [ 577.940383][T25618] pim6reg1: entered allmulticast mode [ 578.030928][T25623] IPVS: set_ctl: invalid protocol: 43 172.30.0.8:20000 [ 578.312646][T25643] netlink: 'syz.3.5720': attribute type 1 has an invalid length. [ 578.760342][ T7702] bond1 (unregistering): (slave gretap1): Releasing active interface [ 578.785844][ T7702] bond9 (unregistering): (slave gretap2): Releasing active interface [ 578.876063][ T7702] bond16 (unregistering): (slave geneve3): Releasing active interface [ 579.119230][ T7702] bond12 (unregistering): (slave bridge0): Releasing backup interface [ 579.127592][ T7702] bridge0 (unregistering): left promiscuous mode [ 579.236445][ T7702] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 579.246189][ T7702] bridge_slave_1: left allmulticast mode [ 579.258497][ T7702] bond0 (unregistering): Released all slaves [ 579.279725][ T7702] bond1 (unregistering): Released all slaves [ 579.434159][ T7702] bond2 (unregistering): Released all slaves [ 579.456146][ T7702] bond3 (unregistering): Released all slaves [ 579.608647][ T7702] bond4 (unregistering): Released all slaves [ 579.634632][ T7702] bond5 (unregistering): Released all slaves [ 579.852737][ T7702] bond6 (unregistering): Released all slaves [ 579.983839][T25662] __nla_validate_parse: 2 callbacks suppressed [ 579.983857][T25662] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5726'. [ 580.252432][ T7702] bond7 (unregistering): Released all slaves [ 580.278762][ T7702] bond8 (unregistering): Released all slaves [ 580.432014][ T7702] bond9 (unregistering): Released all slaves [ 580.450666][ T7702] bond10 (unregistering): Released all slaves [ 580.469762][ T7702] bond11 (unregistering): Released all slaves [ 580.620370][ T7702] bond12 (unregistering): Released all slaves [ 580.761114][ T7702] bond13 (unregistering): Released all slaves [ 580.781049][ T7702] bond14 (unregistering): Released all slaves [ 580.800597][ T7702] bond15 (unregistering): Released all slaves [ 580.946632][ T7702] bond16 (unregistering): Released all slaves [ 581.204226][ T7702] : left promiscuous mode [ 581.370359][T25666] IPVS: persistence engine module ip_vs_pe_ not found [ 581.416370][ T7702] tipc: Disabling bearer [ 581.501203][ T7702] tipc: Disabling bearer [ 581.584287][ T7702] tipc: Left network mode [ 583.200342][T25736] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5746'. [ 583.497665][T25742] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 583.721033][ T7702] hsr_slave_0: left promiscuous mode [ 583.737353][ T7702] batman_adv: batadv0: Removing interface: team0 [ 583.774766][ T7702] batman_adv: batadv0: Removing interface: dummy0 [ 583.795798][ T7702] veth0_macvtap: left allmulticast mode [ 583.890341][T25773] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5752'. [ 584.059884][ T7702] pim6reg (unregistering): left allmulticast mode [ 584.778935][T25762] tipc: Enabled bearer , priority 0 [ 584.788127][T25765] syzkaller0: entered promiscuous mode [ 584.803443][T25765] syzkaller0: entered allmulticast mode [ 584.873249][T25753] tipc: Resetting bearer [ 584.948681][T25753] tipc: Disabling bearer [ 584.995451][T25788] netlink: 'syz.8.5758': attribute type 5 has an invalid length. [ 585.074796][T25795] Unsupported ieee802154 address type: 0 [ 585.081387][T25795] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:20001 [ 585.269351][T25800] netlink: 596 bytes leftover after parsing attributes in process `syz.8.5761'. [ 585.314159][T25798] netlink: 'syz.8.5761': attribute type 29 has an invalid length. [ 585.355156][T25799] netlink: 'syz.8.5761': attribute type 29 has an invalid length. [ 585.365830][T25747] Bluetooth: hci2: command 0x0406 tx timeout [ 585.372516][T25747] Bluetooth: hci3: command 0x0406 tx timeout [ 585.504097][T25806] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5763'. [ 585.519621][T25813] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5765'. [ 585.553588][T25806] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5763'. [ 585.577717][T25806] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5763'. [ 585.659300][T25818] netlink: 'syz.5.5767': attribute type 10 has an invalid length. [ 585.827946][ T7702] IPVS: stop unused estimator thread 0... [ 585.859284][T25830] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5770'. [ 585.886888][T25833] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5769'. [ 585.937848][T25838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5769'. [ 585.976990][T25825] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5771'. [ 586.009143][T25825] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5771'. [ 586.199494][T25848] tipc: Enabled bearer , priority 0 [ 586.245049][T25847] tipc: Enabling of bearer rejected, already enabled [ 586.270896][T25851] syzkaller0: entered promiscuous mode [ 586.290887][T25851] syzkaller0: entered allmulticast mode [ 586.326572][T25848] syzkaller0: left promiscuous mode [ 586.332047][T25848] syzkaller0: left allmulticast mode [ 586.342602][T25845] tipc: Resetting bearer [ 586.377992][T25845] tipc: Disabling bearer [ 586.498593][T25859] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 586.498687][T25858] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 586.581458][T25876] dummy0: left allmulticast mode [ 586.587635][T25876] dummy0: left promiscuous mode [ 586.593097][T25876] bridge0: port 4(dummy0) entered disabled state [ 586.638430][T25876] : left allmulticast mode [ 586.674984][T25876] : left promiscuous mode [ 586.679664][T25876] bridge0: port 1() entered disabled state [ 586.697687][T25885] netlink: 'syz.7.5783': attribute type 10 has an invalid length. [ 586.721650][T25876] bridge_slave_1: left allmulticast mode [ 586.729926][T25886] netlink: 'syz.9.5784': attribute type 4 has an invalid length. [ 586.761403][T25876] bridge_slave_1: left promiscuous mode [ 586.767290][T25876] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.788766][T25876] team0: Port device team_slave_0 removed [ 586.797742][T25876] team0: Port device team_slave_1 removed [ 586.806493][T25876] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 586.894729][T25893] netlink: 'syz.9.5784': attribute type 4 has an invalid length. [ 587.161800][ T5933] hid-generic 0005:16C0:5505.0002: item fetching failed at offset 0/1 [ 587.180035][ T5933] hid-generic 0005:16C0:5505.0002: probe with driver hid-generic failed with error -22 [ 587.237152][T25917] netlink: 'syz.5.5794': attribute type 21 has an invalid length. [ 587.399956][T25929] xt_policy: output policy not valid in PREROUTING and INPUT [ 587.468452][T25931] sctp: [Deprecated]: syz.9.5796 (pid 25931) Use of struct sctp_assoc_value in delayed_ack socket option. [ 587.468452][T25931] Use struct sctp_sack_info instead [ 587.577081][T25942] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 587.649904][T25944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 587.735675][T25948] netlink: 'syz.3.5803': attribute type 1 has an invalid length. [ 587.768444][T25944] bond5 (unregistering): Released all slaves [ 587.807776][T25951] Unsupported ieee802154 address type: 0 [ 587.964668][T25961] syzkaller1: entered promiscuous mode [ 587.970180][T25961] syzkaller1: entered allmulticast mode [ 588.146233][T25974] syzkaller0: entered promiscuous mode [ 588.152218][T25974] syzkaller0: entered allmulticast mode [ 588.601852][T26002] mac80211_hwsim hwsim60 : renamed from wlan1 (while UP) [ 588.616545][T25995] caif0: entered promiscuous mode [ 588.629006][T25995] caif0: entered allmulticast mode [ 588.762562][T26011] netlink: 'syz.5.5824': attribute type 7 has an invalid length. [ 588.801945][ T7687] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.821986][ T7687] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.846605][ T7687] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.865067][T26016] macvlan1: entered promiscuous mode [ 588.870578][T26016] macvlan1: entered allmulticast mode [ 588.876661][T26016] veth1_vlan: entered allmulticast mode [ 588.903062][ T7687] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.915364][T26020] veth1_macvtap: left promiscuous mode [ 590.101282][T26069] validate_nla: 2 callbacks suppressed [ 590.101299][T26069] netlink: 'syz.9.5842': attribute type 21 has an invalid length. [ 590.119202][T26071] netlink: 'syz.9.5842': attribute type 21 has an invalid length. [ 590.195429][T26075] netlink: 'syz.3.5844': attribute type 5 has an invalid length. [ 590.288969][T26080] __nla_validate_parse: 22 callbacks suppressed [ 590.288987][T26080] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5845'. [ 590.381614][T26084] netlink: 'syz.3.5848': attribute type 1 has an invalid length. [ 590.457253][T26084] bond3 (unregistering): Released all slaves [ 590.483597][T25803] Bluetooth: hci5: command 0x0406 tx timeout [ 590.507735][T26089] bridge0: port 1(ipvlan2) entered blocking state [ 590.518087][T26089] bridge0: port 1(ipvlan2) entered disabled state [ 590.530084][T26089] ipvlan2: entered allmulticast mode [ 590.537468][T26089] bridge0: entered allmulticast mode [ 590.545773][T26089] ipvlan2: left allmulticast mode [ 590.550906][T26089] bridge0: left allmulticast mode [ 590.564835][T26092] ip6tnl1: entered promiscuous mode [ 590.570043][T26092] ip6tnl1: entered allmulticast mode [ 590.635299][T26100] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5853'. [ 590.646357][T26099] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5853'. [ 591.118826][T26133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5863'. [ 591.136229][ T5149] Bluetooth: hci7: command 0x0405 tx timeout [ 591.225238][T26139] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5864'. [ 591.315716][T26139] bond6 (unregistering): Released all slaves [ 591.581441][T26160] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20004 [ 591.633288][T26164] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5870'. [ 591.999992][T26189] syzkaller1: entered promiscuous mode [ 592.011842][T26189] syzkaller1: entered allmulticast mode [ 592.259340][T26210] netlink: 'syz.9.5886': attribute type 33 has an invalid length. [ 592.267378][T26210] netlink: 152 bytes leftover after parsing attributes in process `syz.9.5886'. [ 592.363130][T26213] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5887'. [ 592.661530][T26223] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 592.678818][T26225] FAULT_INJECTION: forcing a failure. [ 592.678818][T26225] name failslab, interval 1, probability 0, space 0, times 0 [ 592.683935][T26223] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 592.692061][T26225] CPU: 0 UID: 0 PID: 26225 Comm: syz.9.5893 Not tainted syzkaller #0 PREEMPT(full) [ 592.692085][T26225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 592.692096][T26225] Call Trace: [ 592.692103][T26225] [ 592.692111][T26225] dump_stack_lvl+0x189/0x250 [ 592.692138][T26225] ? __pfx____ratelimit+0x10/0x10 [ 592.692158][T26225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 592.692181][T26225] ? __pfx__printk+0x10/0x10 [ 592.692204][T26225] ? __pfx___might_resched+0x10/0x10 [ 592.692233][T26225] ? fs_reclaim_acquire+0x7d/0x100 [ 592.692264][T26225] should_fail_ex+0x414/0x560 [ 592.692294][T26225] should_failslab+0xa8/0x100 [ 592.692313][T26225] __kmalloc_cache_noprof+0x6f/0x6f0 [ 592.692335][T26225] ? __genradix_ptr_alloc+0x463/0x4a0 [ 592.692355][T26225] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 592.692383][T26225] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 592.692415][T26225] sctp_association_new+0x15d3/0x25f0 [ 592.692455][T26225] sctp_connect_new_asoc+0x2c5/0x690 [ 592.692484][T26225] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 592.692506][T26225] ? __local_bh_enable_ip+0x12d/0x1c0 [ 592.692532][T26225] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 592.692550][T26225] ? security_sctp_bind_connect+0x7e/0x2e0 [ 592.692573][T26225] sctp_sendmsg+0x155c/0x2810 [ 592.692609][T26225] ? __pfx_sctp_sendmsg+0x10/0x10 [ 592.692636][T26225] ? aa_sk_perm+0x81e/0x950 [ 592.692663][T26225] ? __pfx_aa_sk_perm+0x10/0x10 [ 592.692689][T26225] ? sock_rps_record_flow+0x19/0x410 [ 592.692716][T26225] ? inet_sendmsg+0x2f4/0x370 [ 592.692742][T26225] __sock_sendmsg+0x19c/0x270 [ 592.692767][T26225] __sys_sendto+0x3bd/0x520 [ 592.692793][T26225] ? __pfx___sys_sendto+0x10/0x10 [ 592.692814][T26225] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 592.692852][T26225] ? __fget_files+0x3a0/0x420 [ 592.692880][T26225] ? ksys_write+0x22a/0x250 [ 592.692905][T26225] ? __pfx_ksys_write+0x10/0x10 [ 592.692931][T26225] __x64_sys_sendto+0xde/0x100 [ 592.692959][T26225] do_syscall_64+0xfa/0xfa0 [ 592.692978][T26225] ? lockdep_hardirqs_on+0x9c/0x150 [ 592.692998][T26225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.693015][T26225] ? clear_bhb_loop+0x60/0xb0 [ 592.693036][T26225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.693053][T26225] RIP: 0033:0x7f56bc78efc9 [ 592.693069][T26225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.693084][T26225] RSP: 002b:00007f56ba9ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 592.693103][T26225] RAX: ffffffffffffffda RBX: 00007f56bc9e5fa0 RCX: 00007f56bc78efc9 [ 592.693116][T26225] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 592.693127][T26225] RBP: 00007f56ba9ee090 R08: 000020000005ffe4 R09: 000000000000001c [ 592.693139][T26225] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 592.693149][T26225] R13: 00007f56bc9e6038 R14: 00007f56bc9e5fa0 R15: 00007ffe52acb108 [ 592.693181][T26225] [ 593.248665][T26251] sctp: [Deprecated]: syz.9.5901 (pid 26251) Use of struct sctp_assoc_value in delayed_ack socket option. [ 593.248665][T26251] Use struct sctp_sack_info instead [ 593.285226][T26255] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.5903'. [ 593.308476][T26258] netlink: 'syz.8.5904': attribute type 1 has an invalid length. [ 593.350000][T26257] sctp: [Deprecated]: syz.9.5901 (pid 26257) Use of struct sctp_assoc_value in delayed_ack socket option. [ 593.350000][T26257] Use struct sctp_sack_info instead [ 593.385209][T26266] vlan0: entered promiscuous mode [ 593.390458][T26266] bridge0: entered promiscuous mode [ 593.425193][T26255] tap0: tun_chr_ioctl cmd 1074025672 [ 593.432322][T26255] tap0: ignored: set checksum disabled [ 593.663765][T26278] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5911'. [ 593.756954][T26278] netlink: 'syz.7.5911': attribute type 6 has an invalid length. [ 593.890909][ T7687] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.901860][T26278] netlink: 'syz.7.5911': attribute type 6 has an invalid length. [ 593.920059][ T7687] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.938214][ T7687] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.980014][ T7687] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.463707][T26305] netlink: 'syz.9.5918': attribute type 4 has an invalid length. [ 594.492049][T26305] netlink: 'syz.9.5918': attribute type 4 has an invalid length. [ 595.102278][T26345] FAULT_INJECTION: forcing a failure. [ 595.102278][T26345] name failslab, interval 1, probability 0, space 0, times 0 [ 595.133044][T26345] CPU: 1 UID: 0 PID: 26345 Comm: syz.8.5935 Not tainted syzkaller #0 PREEMPT(full) [ 595.133070][T26345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 595.133082][T26345] Call Trace: [ 595.133090][T26345] [ 595.133098][T26345] dump_stack_lvl+0x189/0x250 [ 595.133128][T26345] ? __pfx____ratelimit+0x10/0x10 [ 595.133149][T26345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 595.133172][T26345] ? __pfx__printk+0x10/0x10 [ 595.133205][T26345] should_fail_ex+0x414/0x560 [ 595.133235][T26345] should_failslab+0xa8/0x100 [ 595.133255][T26345] __kmalloc_cache_noprof+0x6f/0x6f0 [ 595.133278][T26345] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 595.133299][T26345] ? sctp_add_bind_addr+0x8c/0x370 [ 595.133320][T26345] sctp_add_bind_addr+0x8c/0x370 [ 595.133340][T26345] sctp_copy_local_addr_list+0x30b/0x4e0 [ 595.133360][T26345] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 595.133376][T26345] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 595.133394][T26345] ? sctp_v6_is_any+0x64/0x80 [ 595.133412][T26345] ? sctp_copy_one_addr+0x93/0x360 [ 595.133431][T26345] sctp_bind_addr_copy+0xb3/0x3c0 [ 595.133449][T26345] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 595.133466][T26345] sctp_connect_new_asoc+0x2e0/0x690 [ 595.133488][T26345] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 595.133507][T26345] ? __local_bh_enable_ip+0x12d/0x1c0 [ 595.133527][T26345] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 595.133542][T26345] ? security_sctp_bind_connect+0x7e/0x2e0 [ 595.133560][T26345] sctp_sendmsg+0x155c/0x2810 [ 595.133589][T26345] ? __pfx_sctp_sendmsg+0x10/0x10 [ 595.133611][T26345] ? aa_sk_perm+0x81e/0x950 [ 595.133633][T26345] ? __pfx_aa_sk_perm+0x10/0x10 [ 595.133653][T26345] ? sock_rps_record_flow+0x19/0x410 [ 595.133675][T26345] ? inet_sendmsg+0x2f4/0x370 [ 595.133696][T26345] __sock_sendmsg+0x19c/0x270 [ 595.133716][T26345] __sys_sendto+0x3bd/0x520 [ 595.133738][T26345] ? __pfx___sys_sendto+0x10/0x10 [ 595.133756][T26345] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 595.133784][T26345] ? __fget_files+0x3a0/0x420 [ 595.133807][T26345] ? ksys_write+0x22a/0x250 [ 595.133828][T26345] ? __pfx_ksys_write+0x10/0x10 [ 595.133849][T26345] __x64_sys_sendto+0xde/0x100 [ 595.133871][T26345] do_syscall_64+0xfa/0xfa0 [ 595.133887][T26345] ? lockdep_hardirqs_on+0x9c/0x150 [ 595.133903][T26345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.133917][T26345] ? clear_bhb_loop+0x60/0xb0 [ 595.133934][T26345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.133947][T26345] RIP: 0033:0x7fe0dd38efc9 [ 595.133960][T26345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.133972][T26345] RSP: 002b:00007fe0de30c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 595.133988][T26345] RAX: ffffffffffffffda RBX: 00007fe0dd5e5fa0 RCX: 00007fe0dd38efc9 [ 595.133998][T26345] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 595.134007][T26345] RBP: 00007fe0de30c090 R08: 000020000005ffe4 R09: 000000000000001c [ 595.134016][T26345] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 595.134024][T26345] R13: 00007fe0dd5e6038 R14: 00007fe0dd5e5fa0 R15: 00007ffe467316e8 [ 595.134053][T26345] [ 595.541193][T26347] __nla_validate_parse: 7 callbacks suppressed [ 595.541211][T26347] netlink: 212400 bytes leftover after parsing attributes in process `syz.7.5936'. [ 595.559634][T26354] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5938'. [ 595.612067][T26354] ip6gretap0: entered allmulticast mode [ 596.100525][T26379] netlink: 5 bytes leftover after parsing attributes in process `syz.5.5946'. [ 596.110367][T26379] 0{X: renamed from gretap0 [ 596.135217][T26379] 0{X: entered allmulticast mode [ 596.143385][T26379] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 596.289477][T26391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5949'. [ 596.422469][T26405] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5955'. [ 596.675516][T26415] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5957'. [ 596.990683][T26431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 597.082028][T26436] netlink: 'syz.3.5966': attribute type 11 has an invalid length. [ 597.190146][T26442] FAULT_INJECTION: forcing a failure. [ 597.190146][T26442] name failslab, interval 1, probability 0, space 0, times 0 [ 597.204313][T26442] CPU: 1 UID: 0 PID: 26442 Comm: syz.3.5968 Not tainted syzkaller #0 PREEMPT(full) [ 597.204338][T26442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 597.204348][T26442] Call Trace: [ 597.204356][T26442] [ 597.204364][T26442] dump_stack_lvl+0x189/0x250 [ 597.204391][T26442] ? __pfx____ratelimit+0x10/0x10 [ 597.204412][T26442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 597.204434][T26442] ? __pfx__printk+0x10/0x10 [ 597.204467][T26442] should_fail_ex+0x414/0x560 [ 597.204497][T26442] should_failslab+0xa8/0x100 [ 597.204517][T26442] __kmalloc_cache_noprof+0x6f/0x6f0 [ 597.204540][T26442] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 597.204561][T26442] ? sctp_add_bind_addr+0x8c/0x370 [ 597.204588][T26442] sctp_add_bind_addr+0x8c/0x370 [ 597.204613][T26442] sctp_copy_local_addr_list+0x30b/0x4e0 [ 597.204646][T26442] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 597.204667][T26442] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 597.204691][T26442] ? sctp_v6_is_any+0x64/0x80 [ 597.204714][T26442] ? sctp_copy_one_addr+0x93/0x360 [ 597.204739][T26442] sctp_bind_addr_copy+0xb3/0x3c0 [ 597.204761][T26442] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 597.204784][T26442] sctp_connect_new_asoc+0x2e0/0x690 [ 597.204812][T26442] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 597.204835][T26442] ? __local_bh_enable_ip+0x12d/0x1c0 [ 597.204862][T26442] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 597.204880][T26442] ? security_sctp_bind_connect+0x7e/0x2e0 [ 597.204903][T26442] sctp_sendmsg+0x155c/0x2810 [ 597.204940][T26442] ? __pfx_sctp_sendmsg+0x10/0x10 [ 597.204967][T26442] ? aa_sk_perm+0x81e/0x950 [ 597.204996][T26442] ? __pfx_aa_sk_perm+0x10/0x10 [ 597.205022][T26442] ? sock_rps_record_flow+0x19/0x410 [ 597.205049][T26442] ? inet_sendmsg+0x2f4/0x370 [ 597.205075][T26442] __sock_sendmsg+0x19c/0x270 [ 597.205097][T26442] __sys_sendto+0x3bd/0x520 [ 597.205121][T26442] ? __pfx___sys_sendto+0x10/0x10 [ 597.205141][T26442] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 597.205174][T26442] ? __fget_files+0x3a0/0x420 [ 597.205203][T26442] ? ksys_write+0x22a/0x250 [ 597.205232][T26442] ? __pfx_ksys_write+0x10/0x10 [ 597.205258][T26442] __x64_sys_sendto+0xde/0x100 [ 597.205286][T26442] do_syscall_64+0xfa/0xfa0 [ 597.205304][T26442] ? lockdep_hardirqs_on+0x9c/0x150 [ 597.205324][T26442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.205342][T26442] ? clear_bhb_loop+0x60/0xb0 [ 597.205363][T26442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.205378][T26442] RIP: 0033:0x7fc42f38efc9 [ 597.205394][T26442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.205407][T26442] RSP: 002b:00007fc4302c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 597.205426][T26442] RAX: ffffffffffffffda RBX: 00007fc42f5e5fa0 RCX: 00007fc42f38efc9 [ 597.205437][T26442] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 597.205448][T26442] RBP: 00007fc4302c2090 R08: 000020000005ffe4 R09: 000000000000001c [ 597.205458][T26442] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 597.205467][T26442] R13: 00007fc42f5e6038 R14: 00007fc42f5e5fa0 R15: 00007fffe7b666a8 [ 597.205498][T26442] [ 597.210607][T26422] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5959'. [ 597.424407][ T31] INFO: task syz.3.3723:18925 blocked for more than 143 seconds. [ 597.567645][ T31] Not tainted syzkaller #0 [ 597.572752][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 597.584075][ T31] task:syz.3.3723 state:D stack:27368 pid:18925 tgid:18924 ppid:16933 task_flags:0x400040 flags:0x00080002 [ 597.598932][ T31] Call Trace: [ 597.602297][ T31] [ 597.608738][ T31] __schedule+0x1798/0x4cc0 [ 597.613585][ T31] ? __lock_acquire+0xab9/0xd20 [ 597.618623][ T31] ? __lock_acquire+0xab9/0xd20 [ 597.624082][ T31] ? __pfx___schedule+0x10/0x10 [ 597.629036][ T31] ? schedule+0x91/0x360 [ 597.640673][ T31] schedule+0x165/0x360 [ 597.646634][ T31] schedule_preempt_disabled+0x13/0x30 [ 597.652189][ T31] __mutex_lock+0x7e6/0x1350 [ 597.657107][ T31] ? __mutex_lock+0x5bb/0x1350 [ 597.662272][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 597.669930][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 597.675671][ T31] ? __nlmsg_put+0xef/0x1b0 [ 597.680493][ T31] ? genlmsg_put+0x137/0x2e0 [ 597.689006][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 597.695196][ T31] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 597.701042][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 597.707667][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 597.715303][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 597.721850][ T31] genl_rcv_msg+0x60e/0x790 [ 597.731033][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 597.742096][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 597.748538][ T31] ? __asan_memcpy+0x40/0x70 [ 597.753540][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 597.759145][ T31] netlink_rcv_skb+0x208/0x470 [ 597.764292][ T31] ? __lock_acquire+0xab9/0xd20 [ 597.769335][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 597.774954][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 597.780459][ T31] ? down_read+0x1ad/0x2e0 [ 597.785092][ T31] genl_rcv+0x28/0x40 [ 597.790591][ T31] netlink_unicast+0x82f/0x9e0 [ 597.795649][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 597.801130][ T31] ? netlink_sendmsg+0x642/0xb30 [ 597.806319][ T31] ? skb_put+0x11b/0x210 [ 597.810689][ T31] netlink_sendmsg+0x805/0xb30 [ 597.815795][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.821195][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 597.827084][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 597.832401][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.837837][ T31] __sock_sendmsg+0x21c/0x270 [ 597.842519][ T31] ____sys_sendmsg+0x505/0x830 [ 597.847394][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 597.852712][ T31] ? import_iovec+0x74/0xa0 [ 597.857382][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 597.862056][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 597.867453][ T31] ? __fget_files+0x2a/0x420 [ 597.872033][ T31] ? __fget_files+0x3a0/0x420 [ 597.876746][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 597.881682][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 597.887227][ T31] ? do_syscall_64+0xbe/0xfa0 [ 597.892831][ T31] do_syscall_64+0xfa/0xfa0 [ 597.897431][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 597.902636][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.908728][ T31] ? clear_bhb_loop+0x60/0xb0 [ 597.913578][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.919558][ T31] RIP: 0033:0x7f423c58efc9 [ 597.924175][ T31] RSP: 002b:00007f423d3fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 597.932596][ T31] RAX: ffffffffffffffda RBX: 00007f423c7e5fa0 RCX: 00007f423c58efc9 [ 597.940968][ T31] RDX: 0000000020048000 RSI: 0000200000000000 RDI: 0000000000000003 [ 597.948991][ T31] RBP: 00007f423c611f91 R08: 0000000000000000 R09: 0000000000000000 [ 597.957015][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.965020][ T31] R13: 00007f423c7e6038 R14: 00007f423c7e5fa0 R15: 00007ffd067e41a8 [ 597.973289][ T31] [ 597.976459][ T31] [ 597.976459][ T31] Showing all locks held in the system: [ 597.987625][ T31] 1 lock held by khungtaskd/31: [ 598.001584][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 598.014593][ T31] 3 locks held by kworker/u8:2/36: [ 598.019818][ T31] #0: ffff8880b893a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 598.030097][ T31] #1: ffffc90000ac7ba0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 598.043117][ T31] #2: ffffffff8ddd53b0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 598.054743][ T31] 2 locks held by getty/5587: [ 598.059502][ T31] #0: ffff88814da2e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 598.069386][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 598.080291][ T31] 3 locks held by kworker/u8:32/11111: [ 598.086336][ T31] #0: ffff88802f279148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 598.098687][ T31] #1: ffffc90003577ba0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 598.111615][ T31] #2: ffffffff8f2cc808 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 598.121174][ T31] 2 locks held by syz.1.3514/18214: [ 598.126416][ T31] #0: ffffffff8f332490 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 598.134638][ T31] #1: ffffffff8e226b68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 598.144834][ T31] 2 locks held by syz.3.3723/18925: [ 598.150013][ T31] #0: ffffffff8f332490 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 598.159505][ T31] #1: ffffffff8e226b68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 598.170064][ T31] 2 locks held by syz.1.4726/22335: [ 598.175403][ T31] #0: ffffffff8f332490 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 598.184131][ T31] #1: ffffffff8e226b68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 598.194566][ T31] 2 locks held by syz.7.5960/26419: [ 598.200518][ T31] #0: ffffffff8f2cc808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 598.209994][ T31] #1: ffffffff8df42d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 598.221259][ T31] 1 lock held by syz.8.5971/26446: [ 598.226408][ T31] #0: ffffffff8f2cc808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 598.235494][ T31] 1 lock held by syz.8.5971/26452: [ 598.240596][ T31] #0: ffffffff8f2cc808 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 598.249758][ T31] 1 lock held by syz.3.5970/26448: [ 598.254961][ T31] #0: ffffffff8f2cc808 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 598.264700][ T31] 1 lock held by syz.5.5972/26450: [ 598.269949][ T31] #0: ffffffff8f2cc808 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1df0 [ 598.279865][ T31] 1 lock held by syz.5.5972/26455: [ 598.285116][ T31] #0: ffffffff8f2cc808 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 598.295040][ T31] [ 598.297382][ T31] ============================================= [ 598.297382][ T31] [ 598.307060][ T31] NMI backtrace for cpu 1 [ 598.307076][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 598.307095][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 598.307105][ T31] Call Trace: [ 598.307112][ T31] [ 598.307120][ T31] dump_stack_lvl+0x189/0x250 [ 598.307150][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 598.307173][ T31] ? __pfx__printk+0x10/0x10 [ 598.307203][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 598.307231][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 598.307258][ T31] ? __pfx__printk+0x10/0x10 [ 598.307280][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 598.307309][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 598.307338][ T31] watchdog+0xf60/0xfa0 [ 598.307361][ T31] ? watchdog+0x1e2/0xfa0 [ 598.307386][ T31] kthread+0x711/0x8a0 [ 598.307410][ T31] ? __pfx_watchdog+0x10/0x10 [ 598.307427][ T31] ? __pfx_kthread+0x10/0x10 [ 598.307451][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 598.307487][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 598.307506][ T31] ? __pfx_kthread+0x10/0x10 [ 598.307528][ T31] ret_from_fork+0x4bc/0x870 [ 598.307550][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 598.307575][ T31] ? __switch_to_asm+0x39/0x70 [ 598.307589][ T31] ? __switch_to_asm+0x33/0x70 [ 598.307603][ T31] ? __pfx_kthread+0x10/0x10 [ 598.307627][ T31] ret_from_fork_asm+0x1a/0x30 [ 598.307659][ T31] [ 598.307666][ T31] Sending NMI from CPU 1 to CPUs 0: [ 598.455364][ C0] NMI backtrace for cpu 0 [ 598.455381][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 598.455398][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 598.455408][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 598.455431][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 a1 22 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 598.455444][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 598.455459][ C0] RAX: e65f914615658f00 RBX: ffffffff81967c07 RCX: e65f914615658f00 [ 598.455472][ C0] RDX: 0000000000000001 RSI: ffffffff8d70bfbf RDI: ffffffff8bbf0860 [ 598.455483][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 598.455495][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7ceb70 [ 598.455507][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 598.455518][ C0] FS: 0000000000000000(0000) GS:ffff88812613f000(0000) knlGS:0000000000000000 [ 598.455531][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 598.455542][ C0] CR2: 00007fbb12f46f98 CR3: 000000003091e000 CR4: 00000000003526f0 [ 598.455557][ C0] Call Trace: [ 598.455564][ C0] [ 598.455570][ C0] default_idle+0x13/0x20 [ 598.455590][ C0] default_idle_call+0x73/0xb0 [ 598.455610][ C0] do_idle+0x1e7/0x510 [ 598.455630][ C0] ? __pfx_do_idle+0x10/0x10 [ 598.455653][ C0] cpu_startup_entry+0x44/0x60 [ 598.455670][ C0] rest_init+0x2de/0x300 [ 598.455691][ C0] start_kernel+0x3ae/0x410 [ 598.455713][ C0] x86_64_start_reservations+0x24/0x30 [ 598.455736][ C0] x86_64_start_kernel+0x143/0x1c0 [ 598.455752][ C0] common_startup_64+0x13e/0x147 [ 598.455781][ C0] [ 602.803250][ T5933] page_pool_release_retry() stalled pool shutdown: id 149, 1 inflight 60 sec