last executing test programs: 42.954210004s ago: executing program 0 (id=4302): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273"], 0x294}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000300000008000400ac14140008000200"], 0x2c}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000007910300000000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x80000000, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "e4"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @rand_addr=0x64010101}}]}, 0x60}, 0x1, 0x7}, 0x0) bind$bt_sco(r3, &(0x7f0000000280)={0x1f, @none}, 0x8) listen(r3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x13, 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000340)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x7ff, 0x0, r5, 0x2, '\x00', 0x0, r5, 0x1, 0x3, 0x2}, 0x50) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000e40)={{r2, &(0x7f00000009c0)='\x00', 0x1, &(0x7f0000000a00)={@align=0x4, {0x1, 0x3aab, 0x8001, 0x2}}, 0x2f, &(0x7f0000000a40)={@_ha_fsid}, &(0x7f0000000a80)=0x80000000}, 0x4, &(0x7f0000000dc0)=[{0x3, 0x19d4825e, &(0x7f0000000ac0)='&.\\/{:#\x00', &(0x7f0000000b00)="d99ea2ac673166c6c6baa334650619a9b8475ebfceb735e77969259a089587ce1b0767", 0x23, 0x20}, {0x8de2051d3a186dc9, 0x6, &(0x7f0000000b40)='\x00', &(0x7f0000000b80)="70f93ab08e4ad32991fb93eeb1a479f30e2cedd8c11b23ac926a9e791cb6b41a9092f3b80d6b7763e57ad0e213f18a410e9c60eafee164b61d92cf5ca966fec5ce648c092b0387126c41c327483d76a9fe4c95cf1675bad23998665ea2fc8235834e19c735ac7cea0a0e43d1e907b35fb819c2dd21c11b8e8808e8c1b3d9a2013df3ca79b3781f757af0f0faaee8dd0a5aef0d25972e3ff3a5c08a88b4b85c7776f72bae890de04a66a8b25d0a9ef0f9f53c511114bf400bc5dd64e6ae95cbecab9dbb02c8c6cc5ce06498007be77accc106959838b3cf23d0c0dd81f715b8fdb7038170972afb8629337467ed89e32fb06f64625c5ab44312", 0xf9, 0x1}, {0x1, 0x1, &(0x7f0000000c80)='\x00', &(0x7f0000000cc0)="4ef7ed1e11a0d9f7bf05e85824beb0fcb9e146552a1208c634b16f10b756abe1c0b2a8eb797cc5ac27374257e0887850aa76452d73085c37daabf1bd5d1dd71f8f83691fd7fbb6923f72265c1ac6847521e2420f29b057c17c4022e1e1a552f09e04b38c", 0x64, 0x30}, {0x2, 0x6, &(0x7f0000000d40)='\x00', &(0x7f0000000d80)="6b0a9062eacc", 0x6, 0x20}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x22, 0xb, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4060}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000000840)='GPL\x00', 0x7858, 0x5d, &(0x7f0000000880)=""/93, 0x40f00, 0x8, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x2, 0x6, 0x87, 0x7ff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000ec0)=[0xffffffffffffffff, r5, r5, 0xffffffffffffffff, r5, r5, r7, r8], &(0x7f0000000f00)=[{0x4, 0x4, 0x0, 0x1}, {0x3, 0x2, 0x1, 0xa}, {0x0, 0x5, 0xf, 0x8}, {0x0, 0x5, 0xa, 0x6}], 0x10, 0x4}, 0x94) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000780)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000440)={0x20, r6, 0x410, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7b}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x64004882) sendmmsg$sock(r8, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001000)="bd6896ff305125bf1b047cfe5d53a82112ac1bf0cdabfa99b889b96f9e09a18f6aded2f2e5ea4730ccc926fc90df9e99cafd00420c79d16995b520cef0f75289f3625a888a0166680322f0087828ee14f16ffc027173e529d28d805bc208a5b994467f11e73afd922dc497152f3735167a7c45093d3935b787cf86426d6c6acf5ec677d50c77b16932f40032f7da1d05a46a31fcbeda6e7d5d90b155916c054fe03f2fbb333435f884f34d8481b5bb292a7c36d97c67f8d7330998ac48b2b73af6e1da84e458dc6470", 0xc9}, {&(0x7f0000001100)="d7440bb14e9b51f9a8b3db5def557b59c53e372294dc7b1b443ce7c82516719a512a35bc4867d0bdc095655182566c011f5932d99fe41a3af919321e3217d9c615563e028ac3fe2e38e321488fdce2fdf6720ca5d8162e8c87f7a681c2ebfd205c27edd03fd942354e409f8a431998d8a02c682d6498758020753289a6f476ee333fee40a70503337f4a074ec128e1a104320a356a1b8104c8a524553989e42b3d83bb4da40dc245be0f723fea0d4d0f66daad7b43ee85a24017e42774e4ed5e62fdefd3ef36c22d684bead7c54dbb84a818bc", 0xd3}, {&(0x7f0000001200)="1a89bd3b1a915f3f3603453070b8dc3a19ff42617b80bfb70f932f56219b0e49bb8eaa7dd1358e19cd9e1852421924c2c24ead3b1f8fa17c640d7934ea294d7b43b6ad54d7d2a8e645ebdde09c283888da02d552b6ccd2d8ae1ea21b9c983044c2779a084165016eeb4416581220e9aa15faf6e810f79e0b4135f4bb4be9465ed583c9a22eb73a60ed68d8a090f1f546d05d9305b71440ff3289651f7a184fec84195994fd18925e8b5c3f8e20ae8c9bc9c8e5e2c7e6c96d8ee5b26909aca83d053385a50922533e263ef4ac53", 0xcd}], 0x3, &(0x7f0000001340)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xfff}}, @mark={{0x14, 0x1, 0x24, 0x10001}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001440)="d08cfca364ec1edf9af90cebe905fe5b", 0x10}, {&(0x7f0000001480)="40f4a84457cd3fca646c9c185452f8c7df355805155c3b0b8222a1e09b98cec65fa55283a1ae5be796398f947e7801911bd234625a3bd658e230", 0x3a}, {&(0x7f00000014c0)="430e360b4b3bbf1f5d2fd45d44c614671d3edf92e0756f9a1b33f7cd920802c32ef952d34d81ac0fdf197a006c9a8597577e37a4001e0cb6bab3a60fc225cd706215997acddc2bb19984b39bdbc28020aa45afbfe6806efe5fabb67267bf92a6d6c2e21801fafda2", 0x68}, {&(0x7f0000001540)="f16c9370a66b3d17a6ee99fe353c1cb000522b3310129346564502c8db1355aa23b052ff6eac4ee8cf908358a2e9aa095732d711edc551074e9b276e", 0x3c}, {&(0x7f0000001580)="1d44f52ee9397c3e96351e7616db565a65b7cc97c95015993220f89d76030bd87cc8388d13c0a10910ac80deb69166331978dfb08a9df69310ab07aa3cf274be39fb5611d7a2c9011ab0376a9f3e265773a4f64d5caf07363dabad3174985d8107c89b0cb781688570b28b0bf2cfb28c85f5f9530fcff5c7bcb0c86e8e3d39338639e7b6cac411dc357262eefd101c584d652ab916c84d05d20e77a80451a197934238fbada872376850479fb5d9d03c9f50330b074397444df025e8ee59437503c893516aa8a0ccaaf20fa0053fd8285e88dbb2f2452a35df455d28faec9d14bd41f1477204", 0xe6}, {&(0x7f0000001680)="fe6b8501fb657975243b003e848706e2e5e722e1e3ff29382a06bf73dab6ab34cf346494fc39364f26f19d6cee6d02e3a05871b43d1a4b06b8d4af1dd59fc55c72fdd6906f8540b78eee64051368d10f50ea89efc06f56388cf057f5bb2f12a59126e33fefd0ca72bfdf8c5a95eef7d0cf9e3120f572d3eea052c55e2c3c03d9a298cb100e926a6cf0ce99680282a2c6645bcf62c00e7cf0f2", 0x99}, {&(0x7f0000001740)="62c8bca7f108cd84ea7845b6a8dac8526393d73cdbc4e690ac6c03ef86f4bf388fcadf21a443d9023f28f97ac3c0a064f0b6a942b38b07bf1208a499e4164772248276d72d669482098d3a4395d1951499a2f3a0f773bcafe5585228cb22604a4ac361dadf636adeb49f44238066bfb7d419072066da96379b7f191450e7bc20e8c936c5c8665620408eb59ba0ea9965499c98c336c93207c8a07527bcba6144d82b84a8d13957", 0xa7}], 0x7, &(0x7f0000001880)=[@mark={{0x14, 0x1, 0x24, 0x101}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x8001}}, @mark={{0x14, 0x1, 0x24, 0x1000}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0xa8}}], 0x2, 0x1) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x29, 0x1, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3c, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}, {0x3}, 0x0, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in6=@mcast2}, {{@in6=@remote, 0x4d4, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x23c}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r13, @ANYBLOB="0a0001"], 0x48}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r10) 41.821203699s ago: executing program 3 (id=4310): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000cc0)=ANY=[], 0xfe33) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1], 0x18}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) 41.615149191s ago: executing program 3 (id=4311): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x40, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}}, 0xc000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b40000000000000000614000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a011e00000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$netlink(0x10, 0x3, 0x9) r4 = socket$kcm(0x23, 0x5, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) sendmsg$sock(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000200)='team0\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0xc, 0x0, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0x4c, r10, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x0, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x5}, {0x7, 0x13}, {0x5, 0x3}, {0x3, 0x4}, {0x5, 0x7}]}]}]}]}]}]}, 0x4c}}, 0x0) 40.982162548s ago: executing program 1 (id=4314): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a20021000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db15000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3a5ff", 0xb8) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000001000010427da205ac342380c7c89f3a1", @ANYRES32=0x0, @ANYBLOB="014800001953010014003500626f6e643000000000000000000000001c00128009000100626f6e64000000000c00028005001100"], 0x50}, 0x1, 0x0, 0x0, 0x44840}, 0x0) 40.67331864s ago: executing program 1 (id=4318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000001300)={{r1, &(0x7f0000000000)='geneve1\x00', 0x2000, &(0x7f0000000080)={@_ha_fsid={[0x6, 0x6]}, {0x5669, 0x4, 0x0, 0x7}}, 0x3, &(0x7f00000000c0), &(0x7f0000000180)=0x101}, {[0x7ff, 0x78c3, 0x318, 0x9b]}, 0xffff, 0x1000, &(0x7f0000000300)=""/4096}) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000080)={r5, 0x100}, 0x8) r6 = syz_genetlink_get_family_id$team(&(0x7f00000013c0), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_BUCKETS_LOG={0x0, 0x8, 0xf}]}}]}, 0x48}}, 0x20008000) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r10, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001580)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001540)={&(0x7f0000001400)={0x110, r6, 0x400, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r9}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x70, 0x2, 0xd}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000010}, 0x8040) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 40.599124771s ago: executing program 4 (id=4319): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0xc040}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r3) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, r4, 0x1, 0x70b92a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe27, 0xb, 0x9}, {0x6, 0x11, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000040}, 0x200c0850) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb0, r4, 0xa2a, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1cc7}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x4004080) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000000006000500"], 0x24}}, 0x0) 40.381271344s ago: executing program 1 (id=4320): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000008"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x50) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000002c0)={{r0, &(0x7f0000000100)='\x00', 0x200002, &(0x7f0000000140)={@align=0x8, {0x6, 0x6fae, 0x6b6, 0x6}}, 0x3, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0xac17}, {[0x8001, 0x3, 0x98d4, 0x1]}, 0x928, 0x97, &(0x7f0000000200)=""/151}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1c, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) socket$kcm(0x10, 0x2, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x80800) close(0x4) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000000) close(r6) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001dc0), 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001e40)=@o_path={&(0x7f0000001e00)='./file0\x00', 0x0, 0x4008}, 0x18) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000001e80), 0x8) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001ec0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x150, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001fc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001f40), &(0x7f0000001f80)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002080)={{0x1, 0xffffffffffffffff}, &(0x7f0000002000), &(0x7f0000002040)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000020c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000021c0)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff0000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000dc0)=""/4096, 0x41000, 0x2a, '\x00', 0x0, 0x18, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18023, r7, 0x7, &(0x7f0000002100)=[r8, r1, r9, r10, r11, r12, 0x1, r13, r14, 0x1], &(0x7f0000002140)=[{0x1, 0x1, 0x0, 0x8}, {0x3, 0x5, 0xf, 0x1}, {0x3, 0x2, 0x6, 0x1}, {0x1, 0x5, 0x4, 0x4}, {0x5, 0x1, 0x0, 0x2}, {0x0, 0x3, 0x6, 0x5}, {0x0, 0x4, 0x10, 0x2}], 0x10, 0xd}, 0x94) 40.284911541s ago: executing program 1 (id=4321): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x4000000) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 40.283126905s ago: executing program 4 (id=4322): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r7 = syz_open_procfs$namespace(r4, &(0x7f0000001780)='ns/ipc\x00') (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r8, &(0x7f0000000240)='\x00', 0x1, 0x4040081, 0x0, 0x0) (async, rerun: 32) recvfrom$unix(r9, 0x0, 0xfffffffffffffe60, 0x2001, 0x0, 0x0) (async, rerun: 32) r10 = getpid() sendmmsg$unix(r3, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000001c0000000000080001000000020000004f261932912c9180e978a23198b5c37f539d19072347adff4d4522ea1d04e85c8c50c3f8c40ab27c551c38292bfdcf6385741302dd61774ea0f631445621a46f155f47b175b4910c8b59d0870ba72e45d189d8c8c9e17a258d753fdc8627d81562bfcc5617ac", @ANYRES32=r10, @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r7, @ANYRES32], 0x58, 0x800}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r15 = syz_open_procfs$namespace(r12, &(0x7f0000001780)='ns/ipc\x00') r16 = getpid() sendmmsg$unix(r11, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r12, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r12, 0x0, r14}}}, @cred={{0x1c, 0x1, 0x2, {r16, r13}}}, @rights={{0x18, 0x1, 0x1, [r15, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001500)=@broute={'broute\x00', 0x20, 0x4, 0xef0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000600], 0x0, &(0x7f0000000000), &(0x7f0000000600)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x5, 0x0, 0x3a6, 'vlan0\x00', 'batadv0\x00', 'rose0\x00', 'wg1\x00', @random="569aa43da29b", [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="d59e58811335", [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0x88e, 0x906, 0x936, [@mac={{'mac\x00', 0x0, 0x10}, {{@remote}}}, @u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x3}, {0x2a, 0x1}, {0x2, 0x2}, {0xbe4, 0x1}, {0x7fffffff, 0x2}, {0x967}, {0xa, 0x3}, {0x7}, {}, {0xff6, 0x3}, {0x9, 0x1}], [{0x7, 0x6cafbba8}, {0x0, 0x3}, {0x4, 0x4}, {0x551c}, {0x81, 0xb6}, {0xc}, {0x4, 0x6}, {0xb4280000}, {0xf, 0xfd1}, {0x6, 0xfffffffe}, {0x0, 0x8}], 0xa, 0xb}, {[{0x7, 0x2}, {0x4, 0x1}, {0x1f59, 0x1}, {0x1, 0x3}, {0x7, 0x3}, {0x101, 0x2}, {0xdaa9, 0x3}, {0x27fd, 0x1}, {0x5, 0x1}, {0x10, 0x2}, {0x1, 0x1}], [{0x7f, 0x4}, {0x630, 0x1}, {0x9, 0x3ff}, {0x1, 0x1000}, {0x4}, {0x8, 0x1012}, {0x5f5e3181, 0x1}, {0x80000000, 0x8}, {0xffffffff, 0xe91}, {0x80, 0x8}, {0xdc, 0xb031}], 0x1, 0x1}, {[{0x6, 0x3}, {0x8, 0x1}, {0x6, 0x7}, {0x80000000}, {0x401, 0x1}, {0xffff, 0x2}, {0x1, 0x2}, {0x458, 0x1}, {0x100, 0x3}, {0xfffffffb}, {0x8, 0x1}], [{0x0, 0x2dbf}, {0x6, 0x9db}, {0xca1, 0x3}, {0x5, 0x5}, {0x5, 0x80000000}, {0x37a, 0x7f}, {0x4}, {0x0, 0x7}, {0x2, 0x5}, {0x1000, 0x9}, {0x0, 0x9}], 0x7, 0x7}, {[{0x8, 0x1}, {0x7, 0x1}, {0x6}, {0x5}, {0x7, 0x3}, {0xde4c, 0x1}, {0x8}, {0x7, 0x2}, {0x1, 0x1}, {0x7, 0x3}, {0x7, 0x3}], [{0x401, 0x2}, {0x7ff, 0x3}, {0x800, 0x3}, {0xa8f0, 0x6}, {0x6, 0x100}, {0x400, 0x5}, {0xb, 0xcef758e8}, {0x2, 0x8}, {0x7, 0x8}, {0x84f1154, 0x7}, {0xd90e, 0x1}], 0x7, 0x1}, {[{0xf46, 0x1}, {0x3d, 0x1}, {0x9, 0x2}, {0x9, 0x2}, {0x7, 0x2}, {0x7f, 0x1}, {0x0, 0x3}, {0x5}, {0x4, 0x3}, {0x3, 0x1}, {0xffff, 0x1}], [{0x6, 0x8}, {0xf, 0x1}, {0xe2a, 0xe8000000}, {0x3, 0x2}, {0x2, 0x6}, {0xffffacb9, 0xfffff000}, {0x5, 0xb230}, {0x33b6, 0x80}, {0x8, 0x1}, {0xd, 0x4}, {0x0, 0xdd4}], 0x6, 0x2}, {[{0xe, 0x1}, {0x9, 0x3}, {0x3, 0x3}, {0x0, 0x1}, {0xece, 0x1}, {0x2, 0x2}, {0x7}, {0x4718}, {0x9, 0x3}, {0x3}, {0x100}], [{0x7, 0x5}, {0x52, 0x8}, {0x7f, 0xfffffffa}, {0x4, 0x3}, {0x8b3c, 0x800}, {0x5ad, 0x2}, {0x4, 0x7}, {0x5, 0x89}, {0x9, 0x480000}, {0xd, 0x5}, {0x5, 0x7ff}], 0x3, 0x3}, {[{}, {0x3, 0x2}, {0xffff7fff, 0x3}, {0xffffffff, 0x1}, {0xd4e}, {0x9, 0x7}, {0xa, 0x3}, {0x0, 0xfac1b7bc63c38e59}, {0x0, 0x1}, {0x4, 0x2}, {0x7, 0x3}], [{0x1, 0x800}, {0x3, 0x2}, {0xffffffff, 0x5}, {0x7, 0xa2}, {0x7f, 0xc374}, {0xb, 0xff}, {0x9, 0x1}, {0x401, 0x8}, {0x627, 0x8b8b}, {0xc, 0x2}, {0x2, 0xf100}], 0x9, 0xb}, {[{0xfffffff9, 0x1}, {0x3, 0x2}, {0xbfa, 0x3}, {0xfffffffe, 0x3}, {0x400, 0x1}, {0x4f99, 0x1}, {0x6}, {0xffff, 0x3}, {0x8, 0x3}, {0x1, 0x3}, {0x0, 0x2}], [{0x5, 0x8001}, {0x404, 0x3}, {0x2, 0x5}, {0x200, 0x800}, {0x6, 0xffffffff}, {0x8, 0xe08}, {0x7, 0xc949}, {0x71, 0x9}, {0x9}, {0x1, 0x66}, {0x200, 0xe}], 0x2, 0xb}, {[{0x4}, {0x4}, {0x400, 0x3}, {0x6, 0x1}, {0x7fffffff, 0x1}, {0x3, 0x3}, {0x0, 0x2}, {0x5}, {0x4ae5, 0x3}, {0xff, 0x2}, {0xfffffffd, 0x1}], [{0x3, 0x2}, {0x200, 0x9}, {0x4, 0x3ff}, {0x8, 0x38}, {0x81, 0x6}, {0x6, 0x1}, {0x7, 0xd28e}, {0x200, 0xb182}, {0x5, 0x6}, {0x10, 0xe}, {0xfffffff7, 0x6}], 0x7, 0x3}, {[{0x7fff, 0x3}, {0xffffffff}, {0xffffffff, 0x1}, {0x800, 0x3}, {0xfffffffd, 0x2}, {0xffffffff, 0x2}, {0xabd6, 0x3}, {0x3}, {0x5, 0x1}, {0x6, 0x2}, {0x1, 0x3}], [{0xff, 0x1}, {0x0, 0xffff}, {0xfffffff9, 0x4}, {0x9, 0x7a}, {0x5, 0x3}, {0x80, 0x1}, {0xfffffffd, 0x9}, {0x88, 0x8}, {0x6, 0xb}, {0x1, 0x10000}, {0x8, 0x7fffffff}], 0x0, 0x8}, {[{0x3, 0x3}, {0x9, 0x1}, {0x17, 0x3}, {0x6, 0x1}, {0x2}, {0x8}, {0xd, 0x1}, {0x3ff, 0x3}, {0x0, 0x3}, {0x2}, {0x4, 0x3}], [{0x5, 0x400}, {0x3faa, 0x2}, {0x10001, 0x1}, {0x4}, {0x4, 0x8}, {0x8, 0xb}, {0x0, 0x80000000}, {0x6c, 0x5}, {0x4, 0x2}, {0x10, 0x8}, {0x0, 0x8}], 0x3, 0x5}], 0x6, 0x1}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x68, 0x6, {0x3}}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x9, 0xffd82ebeddd46d0c, 0x200, 'nr0\x00', 'xfrm0\x00', 'wg2\x00', 'geneve1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, [0x0, 0xff, 0x0, 0xff, 0xff], @empty, [0x0, 0xff, 0xff, 0xff], 0x6e, 0x106, 0x136, [], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x6, 0x9, {0x2}}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10, 'syz1\x00', {0x100000000}}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x5, 0x6b, 0x88f5, 'nicvf0\x00', 'pimreg\x00', 'wg1\x00', 'bond_slave_0\x00', @empty, [0xff, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0x9e, 0xfe, 0x14e, [@cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x1}}}], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}], @common=@log={'log\x00', 0x28, {{0xd, "afeb0cde036e8bb76b3fec46ba9b9a86b273d6c9d2d0856580b031f52149", 0x6}}}}, {0x5, 0x7, 0x60, 'ip6erspan0\x00', 'veth0_to_bond\x00', 'batadv0\x00', 'gretap0\x00', @multicast, [0x1fe, 0x0, 0x0, 0xff, 0xff], @remote, [0xff, 0xff, 0x0, 0xff, 0xff], 0xae, 0x176, 0x2a6, [@owner={{'owner\x00', 0x0, 0x18}, {{r1, r2, r6, r14, 0x2, 0x5}}}], [@common=@nflog={'nflog\x00', 0x50, {{0x8, 0x144a, 0x80d8, 0x0, 0x0, "c83cc6209a7d385a7b2d969a4bb0d0313b9a77a676675e8706b8b2f92dfe864fec0c4eaf5a1796d03ca3989e30323fbfc9063625770974bc806429b9147a186c"}}}, @common=@log={'log\x00', 0x28, {{0x40, "b651062bf0ef71c483fc3eea766b31c56862e2a16564abd74b9299f33e7f", 0x5}}}], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x6, 'system_u:object_r:lost_found_t:s0\x00'}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff}]}, 0xf68) (async) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x12001) r17 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r17, 0x6, 0x1f, 0x0, &(0x7f0000001800)) 40.281788469s ago: executing program 0 (id=4323): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) (async) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r0, 0x118, 0x3, 0x0, &(0x7f00000003c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_BITWISE_DATA={0x8, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_BITWISE_DATA={0x8, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) vmsplice(r1, &(0x7f00000002c0)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0x1) 40.082672613s ago: executing program 4 (id=4324): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x8, 0x4) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x5a, 0x601, 0x0, 0x0, "", [@nested={0x5, 0x0, 0x0, 0x1, [@generic='j']}]}, 0x18}], 0x1}, 0x0) (async, rerun: 64) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x2, 0x0}, 0x8) (rerun: 64) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@tail_call]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x3, 0x0, &(0x7f00000002c0)=[{0x3, 0x4, 0x400a, 0x6}, {0x0, 0x5, 0x3, 0x3}, {0x2, 0x2, 0xe, 0x8}], 0x10, 0x41b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xf7fffffe, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) 39.806114056s ago: executing program 2 (id=4325): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x4, &(0x7f0000000bc0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@delsa={0x3c, 0x11, 0x421, 0x0, 0x0, {}, [@srcaddr={0x14, 0xd, @in=@multicast2}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/78, 0x4e}, {&(0x7f00000018c0)=""/4108, 0x100c}, {&(0x7f0000000500)=""/114, 0x72}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f00000005c0)=""/61, 0x3d}], 0x5}, 0x7}, {{0x0, 0x0, 0x0}, 0xd3a7}, {{0x0, 0x0, 0x0}, 0x80000}, {{0x0, 0x0, 0x0, 0xffffffffffffffd1}, 0x8000005}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xa9e5}], 0x9, 0x2000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000000)={0x6, 'syzkaller1\x00', {0x1}, 0xcbb2}) r3 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000100)={r4, 0x5}, 0x8) r5 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0xf444, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000040)={0x0, 'veth1_to_hsr\x00', {0x4}, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x4, &(0x7f0000000bc0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@delsa={0x3c, 0x11, 0x421, 0x0, 0x0, {}, [@srcaddr={0x14, 0xd, @in=@multicast2}]}, 0x3c}}, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/78, 0x4e}, {&(0x7f00000018c0)=""/4108, 0x100c}, {&(0x7f0000000500)=""/114, 0x72}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f00000005c0)=""/61, 0x3d}], 0x5}, 0x7}, {{0x0, 0x0, 0x0}, 0xd3a7}, {{0x0, 0x0, 0x0}, 0x80000}, {{0x0, 0x0, 0x0, 0xffffffffffffffd1}, 0x8000005}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xa9e5}], 0x9, 0x2000, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000000)={0x6, 'syzkaller1\x00', {0x1}, 0xcbb2}) (async) socket$inet_sctp(0x2, 0x0, 0x84) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) (async) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000100)={r4, 0x5}, 0x8) (async) socket(0x848000000015, 0x805, 0x0) (async) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0xf444, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000040)={0x0, 'veth1_to_hsr\x00', {0x4}, 0x1}) (async) 39.756948724s ago: executing program 4 (id=4326): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x9, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r3, 0x84, 0x7f, 0x0, &(0x7f0000001180)=0x24) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xffffffffffffff0e, 0x0}}, 0x10) 39.752790165s ago: executing program 0 (id=4327): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a80)=@newqdisc={0x48, 0x24, 0xf0b, 0x3fff, 0x25dfdbfc, {0x0, 0x0, 0x12, r0, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000}]}}]}, 0x48}}, 0x4c094) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', r0, 0x10, 0x80, 0xf, 0x4, {{0x8, 0x4, 0x2, 0x27, 0x20, 0x66, 0x0, 0x1, 0x29, 0x0, @multicast1, @private=0xa010101, {[@generic={0x82, 0x8, "64d0cf48a8d9"}, @noop, @end]}}}}}) 39.752069868s ago: executing program 3 (id=4328): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}}], 0x2, 0x400122a0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000140)=0x1, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000200001002dbd7000000000000a801040000000080000000014000200fe9d00000000000000000000000000bb140001"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000002c0)={r5, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x17, 0x56, 0xd23}, 0x18}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, &(0x7f00000004c0)="f4c45e006408fb64d98c439af7797dd7f771e2e8fc727945c2cf6e02dbc1787de062b200982fa333f51d023fb4ea8ca0c7f31a28af10a1506611379b73f79a4a7bc2895ac1be68f9bd73a70f0c3d991dac6bf4c8c1af0fea60d031b7f1948df867e585f831cb1ddf55037efb3a2c2cb70527746fd4427f0a047cdaee1a8f8bf0605d1a22d35c44ca93b729786131d602ddaa60bba883d7b1f58602f3fa37c8860123e09836d0d60b9598b61ea3a9df63576b275763403f205b40cc232c8836cece5aee73d2c0c090f8180b688e436a11dde1100aa2050269866f4676a299d15acf0f36456fb96319e7bcb9c561c5adbec5f90ac7fe47bdc1c8cc66cc28bd21efaa6e74002d7f36e0624d7c1318dc6714162d5810cd52b8f98de1ca36432ac532709e2cda1a3653c83ee676986d05f9a61fa3bdbcd641860a399274bfc19fd649f4a72c5f4e07b5630c957f79369635b21fdd72159cf13b8281a0da4ba2dc5a718d557cda2cf6811346af46cea22a29d8f4cc89b3e48ebe3bf508348ce761ae1f4ba5d7d6ec2dca47ff869fc15f8b45b75b05b8c1bcd512c4bb6403bca3bde6e1c153323dd110d0d9acf57d3c35325e8bd6b9a76a192262f6b565b273ff7dfea6d9c16d6e1b647a4c712dcb0e0d699aa24b677ecf91b2dccb74871c187770d0c2806a00f0e162552db34524c213be1cdb13d1d6f3b2c93e0793ae00fe89b94ce45f6bd426bf9b724feefbcca8eaff22dfbde754351c009827b12350b258d3d65a14643b7eda5213fd74e82624fafbe2505e09365fab96c23c3222e8fcaaa3fed937f8cf5af49e2f83becb0966b16a0a63c9a6ba7fbf695737930d45f0e3724829767dded61e9755150fc43ad1c41fb451e2703d794ca63c44e3b5b2218f1ba8093aa6cd22e288c2b358f747e8767402751366cd86e78d7e3058362112b8f9d6c17ae4607a8025cfcf3762740ff93dda924cb61bf3ede1fb31aadeac6ed0c32bc5715cb1d9353702b7fa3460ec9f2c3503ce4e3142b09b6f7ec94c1be69e9859fbff668a512bd67c70839dff7d4a4d73ae6de125a874b9144ab4b5381ffadc441dfff46a0dc489d5d39f49cca3a7691ca44f86c33767febcce90bb1ef83021cef03aac5a27f6dc91903fbd8cdff5c3e4b33b246fdd83dcbc996dbb5fc8bdcb56b15f944fa5180eb0aaf8ebe849c15762c4d342bfcea1b15ff85024973124d259b4d23ea7e8fef549b9850f205dcd4b865e57cf8eab29d690e2f7d9fa7dfb8a5224ef0f4b57afa06e7a2a5a4d1f2689c2c8adf863a3636892fb45ccb608884dbdf71c40c51c8d9df18bc6d8b058a9edacf69fecf9fc6bbca7506f12ad16eb53ae68e7c89048e96ff541e1f0ac4f99f99b1f92fb0f9668f372f7c02ec0474d4d4c80a8a6251d707ae26f04680d7b71e44fb400b82746273d9a37d58659a33a312e34019f1ff7b94592c04031f26e5158681bd6a65e843026808b3952bccc21a510f565bcf5df9ce24b2efb5bca2c61cbc31a58b87becdad3a805175bd6034fc586651d3b155040d9096fde927d7387daa769833688026f56154358f9e972030e3cc130a7687e6914014ef31ccd823146b1179c2773c3e9961dfaddd6c27930a3a59bc3934e68fe3cd405cb1dfdf578dedab02e256ef6ee72dda09d1256f8c32562f9c07d53574192ec51c74f33677392b1869dd7bf8585e5d484980bc993caf11723747dc31794c1d1b714aae372369fa491d92542ddee25b3d9f693123b6a4103d6c65f1df21e2aa6cbef081737bb4fc260e6762c0cabeeab3ba5267bc67548a6c9996132a76bf60dd299499553e015c37bea1d920dd8b4763d9eeca0c2317c1dda77878093bb33de7abf9a3e5cf956a9df4496ffa57a0b61157a174169c4bbc6c280e209a7c256432ba317d92051c274f34742e489095523be2516b1784fccf8a65eee434c8b442ab58d259d91db1fb28c48f4ded07d26e2910a1215fda30037ebc3f74e6a9f7a275db86ab5b73d1457e1bf3270d144bad641c02ae6bbc0cf903a457dca87059e1cd68c855c185025e9353b7f4bf409a18a3c765e80573acc4783c445c0be7acf9f5a94b96897de51506ff20229edee24a4c8900f27dffd89c494a0257df17e5da0de3344b238c52c0ab1ce2902805bb125ec98a5119f857946dfa0ac92baa99c797114557f24b4213e45b6935d9e6313467de4476080a78e7eab447b667c7ccef5572d4b3c39bccd9bb0d5861ee8872d2a9fa97fe18ca946d7528569b36f205d7a657e8792b34d1470c77aa82931e55c8e18b1fdba145280f67592663a9dce9c1563ef178502d0b8e7cf4dbc7274720bd064074af2bf36ec1517483dd37bb2c954deedd43e77c8661a90a43fe3283d48803fb98e6e047dc37a741cd583b1aa4e2ab4d33e9d6e9668391370cd7f3ade1ae275cf76f85f268ce71adda4feb5090af07e5843e1b29eebe4e3ab3808a95598c97d305633993a84ec1402406b272ac22a6fe68e04a0bdd739f2b90f1b6b645bfe3ef0893c765e2726ca2e218144134702ed3bcb0d843236ffe4b75f3118a07e21127ddde94916cb44b3c37aaaf15f35ca5b27c8ba97204c2058d1865954a22fa7eceb4087a77bbfa3620ff3793c122ef81aa7c0b79ddb6ca6bec8b2765f5dcb99208cf94e08fcf4de0928ad509527f22f286246519b2915fce1932573125245dab45090dab67fee935f57cd502da751868ffe45a6ec15dfcb59ad47e34e8613decff52f3d03328f299b73ade6a57f8173235792aebfc6f1b7c1b7015f8d06ce0c50cb85b7ed3b8e0e9702b41a0b7f09d06f9b6c07d47fd818300ebc747cdbec9cfa916d4184b2d5d7a7daf9a2a8237cf581e7e60e70ad9265ac477312b0e20004ea99cd4ac5704d127e708496200a80318ac44da28c9c485d614a79168ae59e83784bbc22485179bac429771eace73fd8b6cbe675c79b673a37b5ec67991603fe5b6a4fa8b720e4e0c17d4e78d7b1430dda309e784cd38570728b1274d4ed381b90c0b9603c16224c466b5b6d1ffbd73dad760b1e022a3b3a949c864bb4a96e6f1370c2c7f82aa8c1405cf9a2efe1479d07008cc996831b9e68e675b5d75ad2f02f0fe0d14f32ed3150c361b703ab01795c5687e28b18a256a3439cdfcc020d9a242012a60040bd674927f19f2e2a1c32fc68508787a5235e5c5374288d174f6dd7b98d2c3ec094f0616ee137274630ca89ced0e409eacd667be7be22e0f0a3bcaf1055ea8b3428078181cb24bdfe0db4d829363ce02da961834cefbe753bedf50101bcadc91983623b06492f2095d51ddcbb2d6fc133355d65fd31207344b1bd090dfe7fb04c877b3c782114915c4073e4e96ef0658f59d69ad098b9dc32b081fe646c14d774fa509f930c57881bef25565bcd3e9272160603a69c740d9e1de9bb8b5f5535cd6feefd0e4778abe973c997dc2a59e7454a0093c6b64e451f8833884887344555267dae5c5fb1c80653ec98f0c67dadbcd8acfa0339c014cf44210556a590df7ff6ac7f51933107be3136fc6b72add0163c9ffa6f9b04f17304d1828c420607763882b529a3a1cfde9dde6b1d6079421d8bee9da9512fbe3a24ffbfb80bd317991468d929ce63a26163c71341be15b17debe9be83e1582b8b0b5e805de023776f3c40633766fb3d7e0b5c916e09902ca231b470f77ac60a0c31d0ae4afcb121970bdd385fa0d944f03a33a4ef1b6f2d42b134c3af8ad1f791612b0cb2343460b3a1d8461f67b9c45d643a454c06f8b01fd25b9b18aa973d269f6771137e168f0b2ddb307bc4495b4d77d3b4a10027f09c08a6a3ea75e18fafe7cf34e784e179cc260b7ee13f8d00882d626326c0d307cbc69809c1d0339e0121e3ac51500294d0091f17567059bceb0cf2981174a7ba1ab98a48069c47da752e44a6be326ad778d87cfcf4118be538110cd10f56d98a2214a1682bdf7bfca1cecded4befafac2f4fdcb1fe6055dbbfb38156479b96ebb9f0b8ac76089a65b0fb88e826e8bf556fe43511b0220f8347bd08c6d0e568c99bce9893d860f3128cebe3161e9a4750c0929322522ea10c3ad7bb9e7e2f069ceffd87c4f68280cae8acea43fadaa7a3554933b68ed447d00446395543ee14620915242436dedcf4b153653c01f9d01234820d61e447ca2c12437c239e823f4ac56992d8629c388e0d0a81e1b321b0737818451ec5fe073dcf22ccb9a3d8ea71d3a3c0db169b1bc0b00a2bc6d03b9847021b652c1518584f8e26773f7a90e275abd60cc6b4ca7df7d9d4c87ef867aa752908b799907f47314e3fc521d0181ab021796b43b24256aa6d6c9a5458449c2fb1a0c3fec8dca881508e67bdb3c89d6c84dc4adfebbe742420e1b9d7fbd77b16e1666f093fa7105896e6f8f35ad3b9d6920edfa4acb513828718409509d7ecde021e83c2377a30d2b06b56007698dc65dcaf2f3c7482ecdc30399773aa52469fb057d7b0935924e12dafc02b020f8c258e3f08b697e7ffd3db62c696356766849f4a795c8b311c5b000ee4d34592257243e8f304dcaa52d75ee3f2c62050a4d655a2a1f2783ce028c941af70fd234ff325addbf4a996f5999efb2e7fedd7389e12abeae043d05f7924ea5077cdc9ebb7195db77ed7ad557feff5988bbe901feea28607888bfd25cb6fad896a7f1f58467dcfaca10f710ef6191e73ada5b292e6d62df74d833f42dfd7d0d0c1152b4b67f54aa984cefb7ba9a2333ab90db65d6d75a4f3a050447b60311279cb4ca29195cf6cae76a587828587db8cb626c5ab31af0f0ad3b5379a4c9494ea50ebe2610ff3a486aea2b277d2a07d59a1f026440bb4b9602e9dc95dac90b28fde0f413e009068034db92dbf0ac350b8d8a66a4790e429977b9e31015238de51bc7e44a947e325026e8ce2e604d70a45327eb68dae198170f526ec94d4dc679774f806c9d5b384aa4ba5c6a53c58636ac9f167fadfd750716d023a42b337d020be20c510cc8a2752719ddb1f3926bf9bc6a1d968c36b19360efedae558355e6924c38c33d6f08e3d8b3093d05ec2ee71a016aede18e6d716858f23658996080ee89ffff2e90397a0fcad734e835b76bf9c274b09cf1a73b549f02b0844826aa86acd3c5435fa917232f617ba9d87053ef5edb9d1c54dfd5dcf4175cdab1b52bc160ce208b82fe84294881112afb6a24f8b4a34c760083a0d6a8d93c9e8ff994ced12ee7d8d4a8a8bb68a572066ff7143f5c98655bbd5aaf2bacd99f70bea68fc6dec29f260d179336e687c331fd6fa15cbec50f4149de39b9b4af1bf9534137fc81f5ae7c6468d2bc23cc69cebab8dfaf099da347996df87bad8ca55e4440efa51c9c4435ca66e86d9d486d98c2d935b52da7bc51fb05e6ce497101f082c2a9b461879384bb5323986b3d53088f927d6a505ec557485618c60da23b87d3ab7980896af4dd94765c4eebe2e361073774cdf471824dd3a7b656ae8658cab3ad94e6cf2a73aff68a5314569dfce8e4b0af6a69099ab02bf6410918a3d948a4a2814af03e4d2ef38faa20f61284bfaa368d6fc58ebbad988f0fe6ee0f0075c593b714b06f3d6fb9ac148c3c8fb086ddb9fe991687220900715d62d4820278c157617cb784f0d31488cd0b865ff490715be1e340838be874a226515cf7870d7a6859dc843bef1716d3fd4c2df56a679f662b14826cbea9956249d6c013c5605eff84728b06eb7ea117cf34a20d4d51934fde7a1bc105527863dea240ad6d9116b7e50da9783c2a844b3ccf9c67e14f613725d") 39.557867572s ago: executing program 1 (id=4329): r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000006900)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001d80)=""/4086, 0xff6}], 0x1}, 0x700000}], 0x1, 0x400000a0, 0x0) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f00000001c0)=0xfe, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0xfe}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0xfffffffffffffe5e, 0x2, {{0x2, [0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) sendmsg$can_raw(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@can={{0x4, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "0de9ee5ca2968d89"}, 0x10}, 0x1, 0x0, 0x0, 0x4044082}, 0x50) socket$can_j1939(0x1d, 0x2, 0x7) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000006900)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001d80)=""/4086, 0xff6}], 0x1}, 0x700000}], 0x1, 0x400000a0, 0x0) (async) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f00000001c0)=0xfe, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) (async) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0xfe}, 0x18) (async) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) (async) socket(0x10, 0x3, 0x6) (async) socket(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0xfffffffffffffe5e, 0x2, {{0x2, [0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) (async) sendmsg$can_raw(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@can={{0x4, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "0de9ee5ca2968d89"}, 0x10}, 0x1, 0x0, 0x0, 0x4044082}, 0x50) (async) 39.553923709s ago: executing program 4 (id=4330): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x134}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r3, 0x11a, 0x5, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c000280080001800000000014000000020a01"], 0xf4}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000ee", @ANYRES16, @ANYBLOB="010000000000000000000400000005000400e00000011400060076657468315f746f5f7465616d00000008000500e0000001"], 0x38}}, 0x0) 39.508991957s ago: executing program 0 (id=4331): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='\x00', 0x1}], 0x1}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6000002, 0x8032, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000100)={0x7ea1, 0x9, 0xa, 0x4, 0x8, 0x5, 0x3c4, 0x9, r5}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={r5, 0x3}, &(0x7f0000000180)=0x8) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'syztnl1\x00', r7, 0x20, 0x50c6082bc95609bf, 0x6, 0x7fff, {{0xe, 0x4, 0x3, 0x2c, 0x38, 0x65, 0x0, 0x80, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0x24, 0x46, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffe00}, {@rand_addr=0x64010102, 0x2}, {@multicast2, 0x5}, {@broadcast, 0x70bd}]}]}}}}}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x38018, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x48}}, 0x800) pipe(&(0x7f0000000000)) 39.196820899s ago: executing program 4 (id=4332): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r3, 0x0, 0xb, &(0x7f0000000040)=""/202, &(0x7f0000000400)=0xca) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="7c005a807400008005000700020000001e0001000a300c9f4812161b091b030430300109093006220b5112093003000007000100182418"], 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x20008840) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0xa, @local, 0xfffffe4a}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = getuid() sendmsg$nl_generic(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000400007012bbd700000000000017c00000400c28014000180080006001934c517fc9c987fa4c1dd", @ANYRES32=r7, @ANYBLOB="06001200843b000004000580"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c000) r8 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000000000063113300000000008510000002000000850000000000000095000000000000009500a505000000008a9c1b71b282a968312afb554e2678317011381a4d62d02cab8e9abf139e04d25ea9336494e8814e54c542f23ba5c3cb2e178ccac0e265b9a0f4ceff3a92bf02290bd517bdf0ec6d"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) bind$alg(r8, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) close(r8) listen(r5, 0x0) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000000280)=ANY=[@ANYBLOB="000088b5aaaaaaaaaa29bbbbbbbbbbbb08004519001400650000012f"], 0x26) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$TUNSETVNETHDRSZ(r13, 0x400454d8, &(0x7f0000000140)=0x400) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffe0, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}, [@TCA_NETEM_SLOT={0xfffffffffffffeeb, 0xc, {0x8000000000000001, 0x2f, 0x4, 0x7, 0x8, 0x1000}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20) 39.196430273s ago: executing program 2 (id=4333): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="510003000000", 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 38.886653455s ago: executing program 2 (id=4334): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async, rerun: 32) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000001700)=[{&(0x7f0000000180)=""/210, 0xd2}], 0x1, 0x2, 0x1) (async, rerun: 32) read$alg(r5, &(0x7f0000000040)=""/136, 0x88) (rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000480)={'wg1\x00', 0x0}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf0, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x8, 0xb, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x805}, [@map_fd={0x18, 0x8}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x8}, @generic={0x2, 0x5, 0x3, 0x1, 0xa77}, @ldst={0x1, 0x1, 0x0, 0x2, 0xa, 0x4, 0xfffffffffffffff0}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}]}, &(0x7f0000000c40)='syzkaller\x00', 0xe12, 0x0, 0x0, 0x40f00, 0x2f, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x7, 0x5, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000980)=[0x1], &(0x7f00000009c0)=[{0x0, 0x4, 0xa, 0x8}, {0x4, 0x5, 0xa, 0x2}, {0x4, 0x5, 0x9, 0x1}], 0x10, 0x100}, 0x94) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r10, @ANYBLOB="0000000002000000b705000008000000850000008f00000095"], &(0x7f0000000300)='GPL\x00'}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x14, 0x30, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xb}, @call={0x85, 0x0, 0x0, 0x86}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd42}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0xffffff7d, 0xad, &(0x7f00000003c0)=""/173, 0x41100, 0x24, '\x00', r7, @lirc_mode2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0xe, 0x3a, 0x4}, 0x10, r8, r9, 0x5, &(0x7f0000000ac0)=[r10, 0x1], &(0x7f0000000b00)=[{0x3, 0x5, 0x0, 0x8}, {0x4, 0x3, 0x7, 0x9}, {0x1, 0x5, 0xf, 0x7}, {0x5, 0x4, 0x10, 0x2}, {0x0, 0x5, 0x9, 0x4}], 0x10, 0x7}, 0x94) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001400bd7f4366c07a2cbfb7eb01"], 0x14}}, 0x0) 38.465047683s ago: executing program 2 (id=4335): ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x2, 'vlan0\x00', {0xc}, 0xee2}) r0 = epoll_create(0x9b0) write(r0, &(0x7f0000000040)="1139828deda5707439b6f84ff3e0c047016de2b053a6c36c353a529a48bf5e9a487219857606a996fef872afe2dda3f2c42c09463be028c1cf8edec385c2abf52cfb5b1107905d4df22c1e852a785ff2f09aee892401a80970442f6a35b3a2a4ef21c733d1cab10b0e89575f9bc5224e8c349ff369a56156cfb84dce79a3a183206e9040ab1b64b7a840dcf48c49629848d2278a2fe6c4c8c322cb6861bbdb064836dbe35a35cc30c1489b624288a8f2fbb64613556ffef2da398a24acd3d8277c34f3ada2fd076955eeb20c631358839b17cf", 0xd3) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000140)={0x30000000}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x20c, r1, 0x0, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x7}, @val={0x8}, @val={0xc, 0x99, {0x3, 0x52}}}}, [@NL80211_ATTR_VENDOR_DATA={0x4a, 0xc5, "abbc39895dab5d83edad90b78f3bee37d5ba6eb5b38c18f39e0fb48ae29530f9409cec7db2220c0def3b948a01298c8a9debf1de5382bcb3f026fcfa9cf603f308f65d668a40"}, @NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xa36}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_DATA={0xe4, 0xc5, "a4a4e24a6ad33bf5fc5a9ea481298162bc1435f1477e2616811f502c561dd320e11bef89a291e2dc1a7b6cab4e3e40bb9429ac5bdb28ea8055ea5433fd4bcc84c5da97602f472a912ddb34096c4ba2677c126b11183b904dda07dad3f9a54ec8f4de77a173ba7806593231c4e8a96db3d1a77e0eb180b9889434ec9e6c16ef4b03a99a398000be2d95bd0481bfbf52fd7a8bd7687700a2e0432506cc16c9014cea0c479ce116cde3f7a94b25d9b4f0db6906111c9414de176b6b326196c1473f8a3630889b1b18bee7e50c61b6681b5c01d0fcdc8b6e0b3cdd43ae5e148dd556"}, @NL80211_ATTR_VENDOR_DATA={0x12, 0xc5, "0f886a0f9ff36583b3d517aaf3c7"}, @NL80211_ATTR_VENDOR_DATA={0x80, 0xc5, "f8beb382521db836ad90612a81e7e60819dcf82914860b1c04d43b05c2c41afe02a814c558eb976fb6d9e1694559e74cd05b3ae07432bca73e3e15d731d646c0ddc27b068c0f3437ca307c49b92a2b704f0bdb3d28c0110e3d2fa8016eb4c1149ffdcc8f160ac938ee715a4f1673a810d40a944141b10a7c87699d2a"}]}, 0x20c}, 0x1, 0x0, 0x0, 0x40}, 0x40004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x74, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x50, 0x22, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xb}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x100000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3f}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x31}]}, 0x74}}, 0x48041) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680), r2) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r4, 0x2, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x8]}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x2, 0x3, 0x7, 0x7, 0x2]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044085}, 0x20000004) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, &(0x7f00000007c0)={0x1, 0x7a}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r2) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'gretap0\x00', &(0x7f00000008c0)={'erspan0\x00', 0x0, 0x10, 0x7f01, 0x3b79, 0x3, {{0x13, 0x4, 0x3, 0x36, 0x4c, 0x66, 0x0, 0x0, 0x2b, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x23}, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x58, 0x0, 0x9, [0xc9c1]}, @ssrr={0x89, 0x7, 0xc1, [@loopback]}, @timestamp={0x44, 0x24, 0x1, 0x0, 0x4, [0x0, 0x2, 0x9, 0x9, 0x6, 0xc1, 0x4, 0x4]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0xfb, 0x3, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x3, 0x7}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000dc0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d80)={&(0x7f0000000a80)={0x2cc, r6, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xa4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x65, 0x5, "df6ec65def3817de4f362dec76582fd2c0e887489e00585489f2f137bf5fce23d73a0f3900976f75156329e969c794acc6a912691107cde77f398943d6d80b9f34da4de46354770b9c9a1eca0b391b012d554ddce58bef86eeef12ff853c7da588"}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x1f, 0x5, "0ed21fe1fcaac42f79bb8082ab5a31281097cabb17929323bf58be"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1bc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_VALUE={0xcf, 0x4, "181d7367e38d0f21b8c827556e1bf2ffafa7eef695cde17af817f4bf7278de985b604aa589c2c5ed376598eb727effe87be050de099b3a79e729d2be14566f1561159e8863925372e70e949ef7410045928a2de66a0d5b2f08f90f2545fa252b1cfe65a079da36594904ff4432689e667955974f9a46913c716c62aab342b8dc31cba27c5255fbc5b052414f18f900b0d6e4eee446c4e3cf61a8c9b889374b32c7d5c2e3475a8b885fc3e01bcbae9d410e4ec9930983d0f4e01b429a90d90b4bb6b126c0413ba36a0bdef3"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x376}, @ETHTOOL_A_BITSET_MASK={0xd8, 0x5, "52991b7b51c977f6d5f3abb016ce8ac96c95326ec5b06694b4a3d683077d09851e1f1de3621387990823355b75af0a0f728bfcc14b09ba87dd03c0e4d5a3db392938695300ae65c4834fe9ef4c18f9f16936a75754dce2f6ffbbebd6840221b07e05a1bf403a8584e4695441984f4e20141f90feb18280fb3286201e27657ff04601bb214c6dbf2fd0868ea1fb283b99cbd3df7f51d1f329565ba4a90cc6827cb854857f02f98b60f65df128fb3068db53293078202ee13fd4a6618e4fa592d5372c62a38e8f01a4f1cb71f749731c8c95d31847"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x2cc}}, 0x20000000) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)={0x90, r3, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ec1b49db0f"}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "5f52d8"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "71f52dbb756c"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "26b33abbff9eb72fa269526175"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}]}, 0x90}}, 0x804) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000fc0), r2) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x58, r10, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10001}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x67}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x400c010) r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001100), 0x8800, 0x0) read$rfkill(r11, &(0x7f0000001140), 0x8) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000001180)={0x1, 'syzkaller1\x00', {}, 0x6}) r13 = syz_genetlink_get_family_id$team(&(0x7f0000001200), r2) sendmsg$TEAM_CMD_OPTIONS_SET(r12, &(0x7f00000014c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001480)={&(0x7f0000001240)={0x228, r13, 0x20, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r9}, {0x108, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x85e5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x228}, 0x1, 0x0, 0x0, 0x4}, 0x1) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, r14, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r12, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x3c, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x301}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffe01}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4c005) 38.429558816s ago: executing program 0 (id=4336): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000003fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad43000000000000600004"], 0x14}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@initdev, 0x0}, &(0x7f00000000c0)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000380)={0xa, 0xe22, 0x80, @mcast2, 0x1}, 0x1c) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000003dc0)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000003c40)={0x30, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x9, 0x5, 0x1, @empty, @mcast1, 0x8, 0x80, 0x8, 0x80000001}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'gretap0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x40, 0x1, 0x540, 0x5, {{0x9, 0x4, 0x0, 0x3b, 0x24, 0x64, 0x0, 0x83, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x7, 0x10, "343a3d8fb84ac21a568310f012f5"}]}}}}}) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) r8 = openat$cgroup_ro(r7, &(0x7f0000000600)='memory.swap.current\x00', 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r8, &(0x7f00000009c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f00000006c0)={0x2c0, r9, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x605}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x58f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xbab}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc5b}]}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x49}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd94}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8e, @loopback, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010101}}}}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}]}, @TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfc11}, @TIPC_NLA_NODE_ID={0x11, 0x3, "f6918a8fe79c7a2d7fdafae295"}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x81}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) connect$inet6(r7, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @empty, 0x3}, 0xb) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'gretap0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x700, 0x27, 0x8, 0x1, {{0x18, 0x4, 0x0, 0x3, 0x60, 0x64, 0x0, 0x20, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @local, {[@cipso={0x86, 0x4c, 0xffffffffffffffff, [{0x2, 0x9, "701bb18d20fecb"}, {0x5, 0x5, 'XxU'}, {0x6, 0x8, "36caba9d94ec"}, {0x6, 0xb, "b3b22fb44be3491ae5"}, {0x0, 0x6, "a3587e64"}, {0x7, 0xe, "c33c7419cddd96743fee2fae"}, {0x1, 0x11, "ab23b76d41b1eedef95ea86ed1f59d"}]}]}}}}}) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x1500, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000600014002020a600e41b0000900ac00060211000000120012000a00ff110048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r12, {0x0, 0x2}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x4000004, 0x20000001, 0x4, 0x2}, 0x1, r12}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb4, r1, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0xb4}}, 0x4040810) 38.411842383s ago: executing program 3 (id=4337): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, &(0x7f00000000c0)=0x10, 0x80000) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 37.928566561s ago: executing program 2 (id=4338): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', 0x0}) (async) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f0000000000)={0x6, 0x7}) (async, rerun: 64) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 64) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000340)) 36.761061366s ago: executing program 1 (id=4339): r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r0, &(0x7f0000000140), 0x18) (async) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) (async, rerun: 32) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (rerun: 32) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async, rerun: 32) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd70100400001c0200000006000800000000000800090002"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendfile(r1, r2, &(0x7f0000000100)=0x3, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000002000000791028e1ffffffff1d500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (rerun: 32) 36.718475426s ago: executing program 3 (id=4340): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000500)=@ipv6_newroute={0x24, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x8}, [@RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) 33.92107708s ago: executing program 2 (id=4341): syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB="08000400b9080000"], 0x4c}, 0x1, 0xba01, 0x0, 0x4010}, 0x0) 33.920606722s ago: executing program 0 (id=4342): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24014000}, 0x8c0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r6, 0x112, 0x9, 0x0, &(0x7f0000000e40)) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xfce) 27.480490886s ago: executing program 3 (id=4343): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, r2, 0x905, 0x0, 0x0, {0x24}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bc4fffb619b45f0877ddd00f05b457a65d54acc046575978fa63c84996f91dfab8f854f66770283b1088bfc185ff58091c43079ec647f46b51bfd31de4c10572ee0d3e151a33e56aa57e2294f686849277bbba3266a2ec4f4679efde8cf247ef4edee54f85ac023655a75cf5aaa9fc7b3e00a70d007ef1437aaabca2e4a82a093dde658a28be78e5e7668201c2dc09bdf4e2eee54fb4ae174dec1d5579c96a7d4612dacf994e7757204be487b87ffca2c4ec54080000800400"/224], 0xe0}], 0x1}, 0x0) syz_extract_tcp_res(&(0x7f0000000500)={0x41424344, 0x41424344}, 0x2, 0x9) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$TUNSETNOCSUM(r8, 0x400454c8, 0x1) syz_extract_tcp_res$synack(&(0x7f0000000540)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x16c, &(0x7f00000008c0)={@local, @empty, @val={@val={0x88a8, 0x4, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x2}}, {@ipv4={0x800, @tcp={{0x18, 0x4, 0x3, 0x7, 0x156, 0x68, 0x0, 0x4, 0x6, 0x0, @broadcast, @private=0xa010100, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x38, [@remote]}, @timestamp_prespec={0x44, 0x34, 0xc, 0x3, 0x5, [{@multicast2, 0x1}, {@multicast2, 0x40}, {@multicast2, 0x100}, {@broadcast, 0x3ff}, {@private=0xa010102, 0xbe06}, {@rand_addr=0x64010100, 0x8}]}, @noop, @generic={0x83, 0xc, "0e6c690261202a16e569"}]}}, {{0x4e21, 0x4e22, r7, r9, 0x0, 0x0, 0x10, 0x40, 0xfe00, 0x0, 0x1, {[@generic={0x5, 0xa, "2d5e3e4d8e03be8b"}, @sack_perm={0x4, 0x2}, @mss={0x2, 0x4, 0x9}, @exp_fastopen={0xfe, 0x6, 0xf989, "881a"}, @window={0x3, 0x3, 0x4}, @timestamp={0x8, 0xa, 0x9, 0x9e5}, @exp_smc={0xfe, 0x6}]}}, {"e74b252243ab2c1f62cc76c834a8523299f9e9e4da9318e58816248b2904db05f1524f9e023395b5cfd4763c4c1eeb5ddbf898eee4e61bf346b80a75a0be62801fe49ca383ba830800cf8c4c2c4d297449a34d4258af4878701711971f9bfe0d28bd2d52c93e357a6b1b6e071b1ab66ee5cb05bd3328addae79e44f1e426079e6fbe908b64b161542d47f1604164d7c21c48de5eb40b2f9b510b327285b0c4ff8b7169dbbffff851f57d49aeb6533aef1a3d84cfbe01"}}}}}}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x184}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e23, 0x8d, @private2, 0xa4}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe52}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in6={0xa, 0x4e24, 0x4, @local, 0x5d2b}, @in={0x2, 0x4e21, @empty}], 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="b0010000", @ANYRES16=r11, @ANYBLOB="01002cbd7000ffdbdf250e0000005400028006000b000200000005000d000100000006000e004e220000080008006c000000080004000200000006000b004a000000080004000600000006000b000200000006000f00fcff0000080004000700000008000400060000000c00028006000e004e22000008000600040000000c00028006000f00010000003c000280080008000700000008000400000100000800040001800000080007000400ff0f000000000000000006000e004e24000008000300020000006400038008000500640101020600040001000000140006000000000000000000000000000000000108000500ac1414aa14000600fe8000000000000000000000000000aa0800030004000000080001000000000008000500ac14142b0000010002000000080004000100010044000180060004004e230000060004004e220000140003007f0000010000000000000000000000001400030064010100000000000000000000000000080008000e00000034000280060002004e2400000600ec004e2400000800040000000100080005000080000008000500050000000800050001000000"], 0x1b0}, 0x1, 0x0, 0x0, 0x4080001}, 0x800) 19.066796289s ago: executing program 32 (id=4342): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24014000}, 0x8c0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r6, 0x112, 0x9, 0x0, &(0x7f0000000e40)) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xfce) 0s ago: executing program 33 (id=4339): r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r0, &(0x7f0000000140), 0x18) (async) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) (async, rerun: 32) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (rerun: 32) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async, rerun: 32) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd70100400001c0200000006000800000000000800090002"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendfile(r1, r2, &(0x7f0000000100)=0x3, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000002000000791028e1ffffffff1d500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (rerun: 32) kernel console output (not intermixed with test programs): VLAN 0 to HW filter on device bond2 [ 428.765172][T17047] 8021q: adding VLAN 0 to HW filter on device bond3 [ 428.860449][T17047] veth0_macvtap: entered promiscuous mode [ 428.871224][T17047] 8021q: adding VLAN 0 to HW filter on device bond4 [ 428.881631][T17047] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 428.929239][T17047] 8021q: adding VLAN 0 to HW filter on device bond5 [ 428.962805][T17047] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 428.976164][T17047] 8021q: adding VLAN 0 to HW filter on device bond6 [ 428.989507][T17047] 8021q: adding VLAN 0 to HW filter on device bond7 [ 429.003896][T17047] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.013018][T17047] veth0_to_team: entered promiscuous mode [ 429.026691][T17047] 8021q: adding VLAN 0 to HW filter on device bond8 [ 429.048137][T17047] 8021q: adding VLAN 0 to HW filter on device bond9 [ 429.057922][T17047] 8021q: adding VLAN 0 to HW filter on device bond10 [ 429.221514][ T68] bridge1: port 1(veth3) entered blocking state [ 429.227989][ T68] bridge1: port 1(veth3) entered forwarding state [ 429.293378][T17055] bridge_slave_1: mtu less than device minimum [ 429.306584][T17056] wlan1: mtu greater than device maximum [ 429.311001][T17061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2977'. [ 429.343472][T17061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2977'. [ 429.418146][T17063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2977'. [ 429.496433][T17063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2977'. [ 429.551614][T16913] hsr_slave_0: entered promiscuous mode [ 429.583094][T16913] hsr_slave_1: entered promiscuous mode [ 429.603189][T16913] debugfs: 'hsr0' already exists in 'hsr' [ 429.630650][T16913] Cannot create hsr debugfs directory [ 429.720150][T17066] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2978'. [ 429.892142][T10174] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 429.936373][T10174] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 429.944998][T12847] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 430.010437][T17077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2979'. [ 430.138837][T11384] bond5: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 430.443554][T10174] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 430.479540][T10174] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 430.489809][ T5940] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 430.574713][ T5940] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 430.606417][T17097] tipc: Enabling of bearer rejected, failed to enable media [ 430.667586][T17098] netlink: 'syz.4.2986': attribute type 1 has an invalid length. [ 430.696405][T12847] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 430.710405][T17098] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2986'. [ 430.766351][T10174] bond4: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 430.776551][ T5646] Bluetooth: hci4: command tx timeout [ 430.861123][ T68] wlan1: Trigger new scan to find an IBSS to join [ 430.939072][T12847] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 431.194848][T16913] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.584755][ T5940] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 431.742587][T16913] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.799932][T17136] nbd: must specify a size in bytes for the device [ 432.138280][T17155] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 432.330480][T16913] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.726908][T16913] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.854333][ T5646] Bluetooth: hci4: command tx timeout [ 432.860271][T17170] netlink: 'syz.4.2998': attribute type 1 has an invalid length. [ 433.020404][T17168] tipc: Resetting bearer [ 433.419190][T17183] __nla_validate_parse: 6 callbacks suppressed [ 433.419209][T17183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3004'. [ 433.986526][T17205] xt_connbytes: Forcing CT accounting to be enabled [ 434.249059][T16913] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 434.277414][T16913] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 434.311735][T16913] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 434.356682][T16913] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 434.409815][T16913] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 434.450832][T16913] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 434.579307][T16913] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 434.611968][T16913] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 434.653053][T17225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3014'. [ 434.782595][T17236] netlink: 300 bytes leftover after parsing attributes in process `syz.0.3017'. [ 434.802464][T17237] netlink: 'syz.4.3018': attribute type 10 has an invalid length. [ 434.876224][T17237] veth1_virt_wifi: entered promiscuous mode [ 435.053406][T16913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.122868][T17253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.168694][T17255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3023'. [ 435.193696][T16913] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.231269][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.238509][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.286334][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.293582][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.567345][T17271] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3028'. [ 436.020868][T17300] IPv4: Oversized IP packet from 127.202.26.0 [ 436.473671][T17322] IPv6: NLM_F_CREATE should be specified when creating new route [ 436.528422][T16913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.575078][T17327] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3042'. [ 436.595238][T17327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3042'. [ 436.690538][T16913] veth0_vlan: entered promiscuous mode [ 436.763244][T16913] veth1_vlan: entered promiscuous mode [ 436.822225][T16913] veth0_macvtap: entered promiscuous mode [ 436.846650][T16913] veth1_macvtap: entered promiscuous mode [ 436.928994][T16913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.970310][T16913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.033106][T11368] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.057593][T11368] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.118656][T17342] sit3: entered promiscuous mode [ 437.133231][T17342] sit3: entered allmulticast mode [ 437.153095][T11368] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.172810][T11368] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.388484][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.409398][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.477063][T11368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.498007][T11368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.549569][T17351] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3048'. [ 437.751412][T17357] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3050'. [ 437.810479][T17361] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3050'. [ 438.090202][ T4950] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 438.107718][ T4950] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 438.120669][ T4950] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 438.132434][T17383] netlink: 'syz.4.3056': attribute type 9 has an invalid length. [ 438.142485][ T4950] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 438.154732][ T4950] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 438.186042][T17361] bond11 (unregistering): Released all slaves [ 438.796749][ T1045] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.964497][ T1045] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.050663][ T1045] team0: Port device netdevsim1 removed [ 439.058627][ T1045] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.152652][ T1045] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.450157][T17381] lo speed is unknown, defaulting to 1000 [ 439.542659][ T1045] pimreg3: left allmulticast mode [ 440.020579][ T1045] team0: Port device bridge4 removed [ 440.060390][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.067583][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 440.214358][ T4950] Bluetooth: hci1: command tx timeout [ 440.244591][ T1045] bond9 (unregistering): (slave bridge8): Releasing backup interface [ 440.253675][ T1045] bridge8 (unregistering): left promiscuous mode [ 440.315641][ T1045] bond0 (unregistering): Released all slaves [ 440.326979][ T1045] bond1 (unregistering): Released all slaves [ 440.344912][ T1045] bond2 (unregistering): (slave veth3): Releasing active interface [ 440.358063][ T1045] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 440.390000][ T1045] bond2 (unregistering): (slave veth5): Releasing active interface [ 440.400737][ T1045] bond2 (unregistering): Released all slaves [ 440.416647][ T1045] bond3 (unregistering): Released all slaves [ 440.433304][ T1045] bond4 (unregistering): Released all slaves [ 440.456731][ T1045] bond5 (unregistering): Released all slaves [ 440.478102][ T1045] bond6 (unregistering): Released all slaves [ 440.500676][ T1045] bond7 (unregistering): Released all slaves [ 440.516570][ T1045] bond8 (unregistering): Released all slaves [ 440.570448][ T1045] bond9 (unregistering): Released all slaves [ 440.766373][ T1045] tipc: Disabling bearer [ 440.813212][ T1045] tipc: Left network mode [ 441.039225][T17381] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.047271][T17381] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.056107][T17381] bridge_slave_0: entered allmulticast mode [ 441.065898][T17381] bridge_slave_0: entered promiscuous mode [ 441.076774][T17381] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.084257][T17381] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.091584][T17381] bridge_slave_1: entered allmulticast mode [ 441.103486][T17381] bridge_slave_1: entered promiscuous mode [ 441.155637][T17381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.172655][T17381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.232626][T17381] team0: Port device team_slave_0 added [ 441.240618][T17381] team0: Port device team_slave_1 added [ 441.291239][T17381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.300998][T17381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.329356][T17381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.346512][T17381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.353506][T17381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.379974][T17381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.450139][T17381] hsr_slave_0: entered promiscuous mode [ 441.457163][T17381] hsr_slave_1: entered promiscuous mode [ 441.463537][T17381] debugfs: 'hsr0' already exists in 'hsr' [ 441.470157][T17381] Cannot create hsr debugfs directory [ 441.502270][T17390] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 441.829905][T17426] __nla_validate_parse: 3 callbacks suppressed [ 441.829925][T17426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3063'. [ 441.887895][T17427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3063'. [ 441.974282][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 441.974301][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 442.115137][T17442] netlink: 'syz.1.3069': attribute type 2 has an invalid length. [ 442.294456][ T4950] Bluetooth: hci1: command tx timeout [ 442.474023][T17458] xfrm0 speed is unknown, defaulting to 1000 [ 442.584179][T17465] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3072'. [ 442.584201][T17463] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3072'. [ 442.716779][T17458] xfrm0 speed is unknown, defaulting to 1000 [ 442.848376][T17458] xfrm0 speed is unknown, defaulting to 1000 [ 443.216624][T17493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3077'. [ 443.254318][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 443.379993][ T1045] hsr_slave_0: left promiscuous mode [ 443.440444][ T1045] hsr_slave_1: left promiscuous mode [ 443.794847][T17520] netlink: 'syz.4.3084': attribute type 21 has an invalid length. [ 443.825045][T17520] IPv6: NLM_F_CREATE should be specified when creating new route [ 443.925575][T17458] infiniband syz1: set active [ 443.930726][T17458] infiniband syz1: added xfrm0 [ 443.998893][T17458] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 444.027651][T17458] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 444.054160][T17458] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 444.120041][T17458] RDS/IB: syz1: added [ 444.125960][T17458] smc: adding ib device syz1 with port count 1 [ 444.132628][T17458] smc: ib device syz1 port 1 has no pnetid [ 444.268554][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1 [ 444.311761][ T5930] xfrm0 speed is unknown, defaulting to 1000 [ 444.375377][ T4950] Bluetooth: hci1: command tx timeout [ 444.426158][T12847] xfrm0 speed is unknown, defaulting to 1000 [ 444.473703][T17536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3086'. [ 444.484866][T17458] xfrm0 speed is unknown, defaulting to 1000 [ 444.767270][T17544] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 445.061623][T17555] tipc: Enabling of bearer rejected, failed to enable media [ 445.153570][T17458] xfrm0 speed is unknown, defaulting to 1000 [ 445.660423][T17580] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3096'. [ 445.853407][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2 [ 445.865456][T17458] xfrm0 speed is unknown, defaulting to 1000 [ 446.178566][T17458] xfrm0 speed is unknown, defaulting to 1000 [ 446.352213][T17458] xfrm0 speed is unknown, defaulting to 1000 [ 446.456135][ T4950] Bluetooth: hci1: command tx timeout [ 446.692492][T17458] xfrm0 speed is unknown, defaulting to 1000 [ 446.826503][T17602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3104'. [ 446.837466][T17602] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3104'. [ 446.928505][T17605] netlink: 'syz.1.3105': attribute type 1 has an invalid length. [ 446.941898][T17605] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.047495][T17458] xfrm0 speed is unknown, defaulting to 1000 [ 447.088342][T17610] 8021q: VLANs not supported on lo [ 447.429828][T11368] smc: removing ib device sz1 [ 447.511047][T17620] netlink: 'syz.2.3112': attribute type 32 has an invalid length. [ 447.581967][T11368] smbdirect: ib_dev[sz1] removed [ 447.764662][T17630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3114'. [ 448.402779][T17660] netlink: 'syz.4.3122': attribute type 83 has an invalid length. [ 448.411711][T17660] netlink: 596 bytes leftover after parsing attributes in process `syz.4.3122'. [ 448.530244][T17656] netlink: 'syz.1.3121': attribute type 6 has an invalid length. [ 449.005501][T17671] wg1: entered allmulticast mode [ 449.148179][T17684] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 449.169195][T17686] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3129'. [ 449.582838][T17381] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 449.619815][T17703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3133'. [ 449.677952][T17381] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 449.709734][T17381] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 449.803434][T17381] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 449.981723][T17703] 8021q: adding VLAN 0 to HW filter on device bond8 [ 450.157871][T17708] 8021q: adding VLAN 0 to HW filter on device bond9 [ 450.222957][T17708] bond8: (slave bond9): Enslaving as an active interface with an up link [ 450.243169][T17381] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 450.319206][T17381] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 450.478213][T17381] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 450.535858][T17381] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 450.624966][T17740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3138'. [ 450.781022][T17740] ipvlan2: entered allmulticast mode [ 450.799060][T17740] batadv_slave_1: entered allmulticast mode [ 450.831106][T17752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3140'. [ 451.168572][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.191069][T17381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.211751][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.466755][T17381] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.520094][T10173] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.527406][T10173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.613426][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.620640][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.897762][T17784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3149'. [ 451.927885][T17784] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 451.958506][T17784] netlink: 'syz.4.3149': attribute type 11 has an invalid length. [ 451.991097][T17784] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.3149'. [ 452.391482][T17797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3151'. [ 452.505596][T17806] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3151'. [ 453.286111][T17834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3158'. [ 453.322440][T17834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3158'. [ 453.416340][T17838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 453.713081][T17381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.117492][ T1045] IPVS: stop unused estimator thread 0... [ 454.165503][T17874] tipc: Failed to obtain node identity [ 454.205095][T17874] tipc: Enabling of bearer rejected, failed to enable media [ 454.217753][T17876] openvswitch: netlink: IP tunnel dst address not specified [ 454.240709][T17876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.308434][T17381] veth0_vlan: entered promiscuous mode [ 454.412326][T17879] netlink: 'syz.3.3166': attribute type 83 has an invalid length. [ 454.420309][T17381] veth1_vlan: entered promiscuous mode [ 454.516124][T17381] veth0_macvtap: entered promiscuous mode [ 454.640517][T17381] veth1_macvtap: entered promiscuous mode [ 454.784636][T17381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.840576][T17381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.932492][ T3365] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.966019][T17899] netlink: 'syz.3.3171': attribute type 11 has an invalid length. [ 454.999470][T17902] netlink: 'syz.4.3170': attribute type 16 has an invalid length. [ 455.011799][T17899] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3171'. [ 455.033711][T17902] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3170'. [ 455.080978][T17906] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3172'. [ 455.120929][ T3365] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.189499][T17901] 8021q: adding VLAN 0 to HW filter on device bond1 [ 455.218956][ T3365] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.295718][ T3365] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.502211][T17921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3175'. [ 455.664934][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.693273][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.968035][T11386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.025412][T11386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.755345][T17963] syzkaller0: entered promiscuous mode [ 456.767091][T17963] syzkaller0: entered allmulticast mode [ 456.860169][ T5646] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 456.871290][ T5646] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 456.881230][ T5646] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 456.896626][ T5646] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 456.908301][ T5646] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 457.334298][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 458.940289][ T5646] Bluetooth: hci0: command tx timeout [ 459.264365][T17993] xt_TCPMSS: Only works on TCP SYN packets [ 459.293190][T17993] __nla_validate_parse: 1 callbacks suppressed [ 459.293209][T17993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3190'. [ 459.616354][T18008] xt_TPROXY: Can be used only with -p tcp or -p udp [ 459.644874][T18007] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3195'. [ 459.669816][T11384] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.681052][T18016] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3197'. [ 459.723808][T11384] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.021517][T11384] team0: Port device netdevsim1 removed [ 460.060688][T11384] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.086986][T11384] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.347646][T11384] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.389163][T11384] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.535545][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 460.549235][T18054] netlink: 'syz.3.3204': attribute type 1 has an invalid length. [ 460.665454][T18054] bond1: entered promiscuous mode [ 460.683498][T18058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3205'. [ 460.721082][T18054] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.801644][T18059] bond1: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 460.850755][T18059] bond1: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 460.889994][T18059] bond1: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 461.015827][ T5646] Bluetooth: hci0: command tx timeout [ 461.047735][T17978] xfrm0 speed is unknown, defaulting to 1000 [ 461.139451][T18073] netlink: 'syz.3.3208': attribute type 10 has an invalid length. [ 461.214727][T18075] nbd: must specify an index to disconnect [ 461.295901][T18073] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 461.345347][T18073] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 461.661046][T11384] bridge_slave_1: left allmulticast mode [ 461.681052][T11384] bridge_slave_1: left promiscuous mode [ 461.703196][T11384] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.775754][T11384] bridge_slave_0: left allmulticast mode [ 461.794369][T11384] bridge_slave_0: left promiscuous mode [ 461.814099][T11384] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.252874][T11384] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 462.286241][T11384] bond5 (unregistering): (slave ip6gretap2): Releasing active interface [ 462.306207][T11384] ip6gretap2 (unregistering): left allmulticast mode [ 462.377344][ T5646] Bluetooth: hci3: command 0x0406 tx timeout [ 463.098068][ T5646] Bluetooth: hci0: command tx timeout [ 463.399075][T11384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.427819][ T36] smbdirect: ib_dev[s^z1] removed [ 463.433424][T11384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.448051][T11384] bond0 (unregistering): Released all slaves [ 463.474911][T11384] bond1 (unregistering): Released all slaves [ 463.501829][T11384] bond2 (unregistering): Released all slaves [ 463.524562][T11384] bond4 (unregistering): Released all slaves [ 463.541687][T11384] bond3 (unregistering): Released all slaves [ 463.568830][T11384] bond5 (unregistering): Released all slaves [ 463.592658][T11384] bond6 (unregistering): Released all slaves [ 463.625406][T11384] bond7 (unregistering): Released all slaves [ 463.644621][T11384] bond8 (unregistering): (slave bond9): Releasing backup interface [ 463.653380][T11384] bond8 (unregistering): Released all slaves [ 463.681636][T11384] bond9 (unregistering): Released all slaves [ 463.699202][T18103] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 463.730187][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1 [ 463.883059][T18140] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 464.000364][T11384] tipc: Left network mode [ 464.525878][T17978] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.536476][T17978] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.543784][T17978] bridge_slave_0: entered allmulticast mode [ 464.556952][T17978] bridge_slave_0: entered promiscuous mode [ 464.577130][T17978] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.584950][T17978] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.592780][T17978] bridge_slave_1: entered allmulticast mode [ 464.600998][T17978] bridge_slave_1: entered promiscuous mode [ 464.658289][T17978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.692681][T17978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.908751][T17978] team0: Port device team_slave_0 added [ 464.935847][T17978] team0: Port device team_slave_1 added [ 465.144423][T17978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.151601][T17978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.190906][ T4950] Bluetooth: hci0: command tx timeout [ 465.197127][T17978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.243994][T17978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.271789][T17978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.307150][T17978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.321801][T11384] hsr_slave_0: left promiscuous mode [ 465.328633][T11384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.336586][T11384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.347056][T11384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.355262][T11384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.366842][T11384] veth0_macvtap: left promiscuous mode [ 465.374506][T11384] veth1_vlan: left promiscuous mode [ 465.379865][T11384] veth0_vlan: left promiscuous mode [ 465.702051][T11384] team0 (unregistering): Port device team_slave_1 removed [ 465.795862][T18130] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 466.237517][T18173] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3226'. [ 466.250586][T17978] hsr_slave_0: entered promiscuous mode [ 466.268465][T17978] hsr_slave_1: entered promiscuous mode [ 466.324726][T18176] netlink: 640 bytes leftover after parsing attributes in process `syz.1.3228'. [ 466.355154][T18177] netlink: 'syz.0.3227': attribute type 1 has an invalid length. [ 466.363142][T18176] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 466.371375][T18177] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3227'. [ 467.254414][ T4950] Bluetooth: hci0: command 0x0405 tx timeout [ 467.517593][T18218] syzkaller0: entered promiscuous mode [ 467.534483][T18218] syzkaller0: entered allmulticast mode [ 467.642574][T18218] 0: reclassify loop, rule prio 0, protocol 800 [ 467.664772][T18218] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3236'. [ 467.866709][T18230] Unsupported ieee802154 address type: 0 [ 468.025179][T18238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.141962][T18242] sctp: [Deprecated]: syz.0.3243 (pid 18242) Use of struct sctp_assoc_value in delayed_ack socket option. [ 468.141962][T18242] Use struct sctp_sack_info instead [ 468.226894][T17978] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 468.277518][T17978] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 468.329407][T17978] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 468.394632][T17978] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 468.434609][T17978] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 468.476947][T17978] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 468.542785][T18265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3246'. [ 468.553606][T17978] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 468.623093][T17978] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 468.738839][T18274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3250'. [ 468.850639][T18274] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 468.870731][T18274] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 468.880840][T18274] gretap1: entered promiscuous mode [ 468.888230][T18274] gretap1: entered allmulticast mode [ 468.972072][T11368] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 469.052806][T17978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.123237][T17978] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.167326][T11386] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.174690][T11386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.243089][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.250375][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.541165][T18307] sit5: entered promiscuous mode [ 469.567382][T18307] sit5: entered allmulticast mode [ 469.599182][T18276] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 470.199000][T18335] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3260'. [ 470.243350][T18335] nbd: couldn't find a device at index 0 [ 470.758225][T18360] netlink: 'syz.0.3268': attribute type 14 has an invalid length. [ 470.782534][T18360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3268'. [ 470.875837][ T48] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.899062][ T48] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.940672][T18374] netlink: 'syz.2.3269': attribute type 13 has an invalid length. [ 470.965784][ T48] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.986701][T18374] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3269'. [ 471.001942][ T48] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.102592][T18381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.188080][T17978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.601620][T18399] pimreg: entered allmulticast mode [ 471.923278][T18421] netlink: 'syz.1.3281': attribute type 29 has an invalid length. [ 471.953270][T18421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3281'. [ 471.971465][T18418] netlink: 'syz.0.3279': attribute type 9 has an invalid length. [ 472.000420][T18421] netlink: 'syz.1.3281': attribute type 29 has an invalid length. [ 472.024918][T18418] netlink: 212396 bytes leftover after parsing attributes in process `syz.0.3279'. [ 472.037759][T18421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3281'. [ 472.217226][T18428] syzkaller0: entered promiscuous mode [ 472.231659][T18428] syzkaller0: entered allmulticast mode [ 472.462483][T17978] veth0_vlan: entered promiscuous mode [ 472.497203][T17978] veth1_vlan: entered promiscuous mode [ 472.694093][T17978] veth0_macvtap: entered promiscuous mode [ 472.771649][T17978] veth1_macvtap: entered promiscuous mode [ 472.869434][T17978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.918589][T17978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.933027][T18463] netlink: 'syz.0.3290': attribute type 1 has an invalid length. [ 473.036418][T18463] bond1: entered promiscuous mode [ 473.042114][T18463] 8021q: adding VLAN 0 to HW filter on device bond1 [ 473.050815][T11368] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.075774][T11368] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.209965][T18463] bond1: (slave bridge1): making interface the new active one [ 473.224652][T18463] bridge1: entered promiscuous mode [ 473.241602][T18463] bridge1: left promiscuous mode [ 473.306540][T10173] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.390567][T18488] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:20257 [ 473.397670][T12848] IPVS: starting estimator thread 0... [ 473.405610][T18487] IPVS: sh: FWM 3 0x00000003 - no destination available [ 473.482111][T10173] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.495791][T18490] IPVS: using max 39 ests per chain, 93600 per kthread [ 473.909189][T18501] netlink: 'syz.1.3297': attribute type 11 has an invalid length. [ 473.945508][T18501] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.3297'. [ 473.963176][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.994424][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.068952][T18514] bond11: Unable to set up delay as MII monitoring is disabled [ 474.092959][T18514] bond11 (unregistering): Released all slaves [ 474.167180][T10173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.201997][T10173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.473314][T18531] syzkaller0: entered promiscuous mode [ 474.506893][T18531] syzkaller0: entered allmulticast mode [ 474.837410][T18552] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3309'. [ 475.266750][T18573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3312'. [ 475.651479][T18588] netlink: 'syz.4.3317': attribute type 1 has an invalid length. [ 475.718390][ T4950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 475.734365][ T4950] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 475.743920][ T4950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 475.760682][ T4950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 475.782685][ T4950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 476.076074][T18603] netlink: 'syz.0.3319': attribute type 1 has an invalid length. [ 476.109555][T18603] netlink: 'syz.0.3319': attribute type 2 has an invalid length. [ 476.174514][T18612] netlink: 'syz.4.3320': attribute type 1 has an invalid length. [ 476.208034][T18612] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3320'. [ 476.243344][T18612] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3320'. [ 476.288246][T18612] netlink: 658 bytes leftover after parsing attributes in process `syz.4.3320'. [ 476.347266][T18613] netlink: 'syz.3.3321': attribute type 1 has an invalid length. [ 476.376567][T18613] netlink: 'syz.3.3321': attribute type 3 has an invalid length. [ 476.427551][T18613] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3321'. [ 476.468118][T18613] NCSI netlink: No device for ifindex 813332851 [ 477.118561][T11386] veth3: left allmulticast mode [ 477.137187][T11386] veth3: left promiscuous mode [ 477.166428][T11386] bridge1: port 1(veth3) entered disabled state [ 477.899221][ T5646] Bluetooth: hci2: command tx timeout [ 478.158808][ T48] smc: removing ib device syz1 [ 478.240387][ T48] smbdirect: ib_dev[syz1] removed [ 478.538677][T11386] bond1 (unregistering): (slave gretap1): Releasing active interface [ 479.327804][T11386] bond9 (unregistering): (slave bridge7): Releasing backup interface [ 479.709091][T11386] bond1 (unregistering): Released all slaves [ 479.743738][T11386] bond2 (unregistering): Released all slaves [ 479.800677][T11386] bond3 (unregistering): Released all slaves [ 479.875209][T11386] bond4 (unregistering): (slave veth5): Releasing active interface [ 479.883430][T11386] batadv1: entered promiscuous mode [ 479.916604][T11386] bond4 (unregistering): (slave batadv1): Releasing active interface [ 479.929509][T11386] bond4 (unregistering): Released all slaves [ 479.963053][T11386] bond5 (unregistering): (slave veth7): Releasing active interface [ 479.973430][T11386] batadv2: entered promiscuous mode [ 479.981644][ T5646] Bluetooth: hci2: command tx timeout [ 479.999670][T11386] bond5 (unregistering): (slave batadv2): Releasing active interface [ 480.020040][T11386] bond5 (unregistering): Released all slaves [ 480.063238][T11386] bond6 (unregistering): Released all slaves [ 480.109416][T11386] bond7 (unregistering): Released all slaves [ 480.170606][T11386] bond8 (unregistering): Released all slaves [ 480.235176][T11386] bond9 (unregistering): Released all slaves [ 480.318078][T11386] bond10 (unregistering): Released all slaves [ 480.417617][T11386] bond0 (unregistering): Released all slaves [ 480.493135][ T5931] xfrm0 speed is unknown, defaulting to 1000 [ 480.517129][ T5931] syz1: Port: 1 Link DOWN [ 481.196101][T18731] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 481.279078][T18735] __nla_validate_parse: 1 callbacks suppressed [ 481.279099][T18735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3339'. [ 481.471213][T18740] bridge1: entered promiscuous mode [ 481.499191][T18740] bridge1: entered allmulticast mode [ 481.908214][T11386] tipc: Disabling bearer [ 481.920976][T11386] tipc: Disabling bearer [ 481.935374][T11386] tipc: Left network mode [ 482.054300][ T5646] Bluetooth: hci2: command tx timeout [ 482.372387][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1 [ 482.401767][T18780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.541754][T18591] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.551466][T18591] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.558843][T18591] bridge_slave_0: entered allmulticast mode [ 482.566293][T18591] bridge_slave_0: entered promiscuous mode [ 482.575857][T18591] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.583390][T18591] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.591213][T18591] bridge_slave_1: entered allmulticast mode [ 482.607771][T18591] bridge_slave_1: entered promiscuous mode [ 482.877399][T18793] syzkaller0: entered promiscuous mode [ 482.885144][T18793] syzkaller0: entered allmulticast mode [ 482.923345][T18591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.956959][T18797] bond0: (slave bond_slave_1): Releasing backup interface [ 483.027446][T18797] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3350'. [ 483.095671][T18591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.792279][T18824] netlink: 'syz.0.3355': attribute type 58 has an invalid length. [ 483.800590][T18824] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3355'. [ 484.134299][ T5646] Bluetooth: hci2: command tx timeout [ 485.577080][T18814] tipc: Started in network mode [ 485.581984][T18814] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 485.590001][T18814] tipc: Enabled bearer , priority 14 [ 485.599372][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2 [ 485.608090][T18817] netlink: 'syz.0.3355': attribute type 1 has an invalid length. [ 485.642045][T18817] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3355'. [ 485.778287][T18591] team0: Port device team_slave_0 added [ 485.788388][T18591] team0: Port device team_slave_1 added [ 486.007307][T18848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3361'. [ 486.021041][T18848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3361'. [ 486.041321][T18848] netlink: 'syz.1.3361': attribute type 15 has an invalid length. [ 486.061861][T18845] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3362'. [ 486.171995][T18848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3361'. [ 486.185133][T18591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.205409][T18847] Cannot find add_set index 0 as target [ 486.206640][T18591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.220510][T18848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3361'. [ 486.296457][T18848] netlink: 'syz.1.3361': attribute type 15 has an invalid length. [ 486.311988][T18591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.366444][T18861] xt_hashlimit: size too large, truncated to 1048576 [ 486.466968][ T92] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 486.510738][T18591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.530145][T18591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.600456][T18591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.695510][ T92] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 486.713755][ T92] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 486.781479][T12843] tipc: Node number set to 10463914 [ 486.824981][T18877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3368'. [ 486.841302][ T92] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 486.945301][T18875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3368'. [ 487.081953][T18875] x_tables: duplicate underflow at hook 4 [ 487.146633][T18591] hsr_slave_0: entered promiscuous mode [ 487.179261][T18591] hsr_slave_1: entered promiscuous mode [ 487.204020][T18591] debugfs: 'hsr0' already exists in 'hsr' [ 487.232673][T18591] Cannot create hsr debugfs directory [ 487.405381][T11386] hsr_slave_0: left promiscuous mode [ 487.418466][T11386] hsr_slave_1: left promiscuous mode [ 487.438858][T11386] veth0_to_team: left promiscuous mode [ 487.456811][T11386] veth0_macvtap: left promiscuous mode [ 487.466752][T11386] veth1_macvtap: left promiscuous mode [ 487.472491][T11386] veth1_vlan: left promiscuous mode [ 487.480156][T11386] veth0_vlan: left promiscuous mode [ 488.145680][ T5296] 8021q: adding VLAN 0 to HW filter on device eth3 [ 488.635487][T11386] IPVS: stop unused estimator thread 0... [ 489.719235][T18878] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 489.763004][T18591] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 489.822740][T18591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 489.849129][T18591] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 489.925278][T18591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 489.963573][T18916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 489.985494][T18591] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 490.030208][T18591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 490.073491][T18591] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 490.120640][T18591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 490.193247][T18926] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 490.216594][T18919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3374'. [ 490.230587][T18926] bond2: (slave lo): Enslaving as an active interface with an up link [ 490.241461][T18926] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 490.327839][T18928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3375'. [ 490.362725][T18928] syzkaller0: entered promiscuous mode [ 490.385978][T18928] syzkaller0: entered allmulticast mode [ 490.507837][T18927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3376'. [ 490.529546][T18927] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3376'. [ 490.577440][T18942] block nbd2: Unsupported socket: should be TCP or UNIX. [ 490.813490][T18591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.947357][T18957] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3380'. [ 490.965862][T18591] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.066500][T10173] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.073800][T10173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.136478][T10173] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.143700][T10173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.282736][T12848] IPVS: starting estimator thread 0... [ 491.290547][ T48] bridge_slave_1: left allmulticast mode [ 491.301308][ T48] bridge_slave_1: left promiscuous mode [ 491.314948][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.343737][ T48] bridge_slave_0: left allmulticast mode [ 491.355009][ T48] bridge_slave_0: left promiscuous mode [ 491.369561][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.384341][T18976] IPVS: using max 26 ests per chain, 62400 per kthread [ 491.444024][T18984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3385'. [ 491.476303][T18983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3385'. [ 491.504702][T18984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3385'. [ 491.821758][ T48] bond3 (unregistering): (slave gretap2): Releasing active interface [ 491.894277][ T48] bond4 (unregistering): (slave geneve2): Releasing active interface [ 492.033229][ T48] bond2 (unregistering): (slave bridge1): Releasing active interface [ 492.308679][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.318941][ T48] bond0 (unregistering): Released all slaves [ 492.339613][ T48] bond1 (unregistering): Released all slaves [ 492.376720][ T48] bond2 (unregistering): Released all slaves [ 492.405819][ T48] bond3 (unregistering): Released all slaves [ 492.431853][ T48] bond4 (unregistering): Released all slaves [ 492.463428][ T48] bond5 (unregistering): Released all slaves [ 492.485293][ T48] bond6 (unregistering): Released all slaves [ 492.519775][ T48] bond7 (unregistering): Released all slaves [ 492.629436][T18983] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3385'. [ 492.751422][ T48] : left promiscuous mode [ 492.997917][ T48] tipc: Left network mode [ 493.365989][T19043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 493.518562][T19047] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3393'. [ 493.593803][T19047] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3393'. [ 493.909837][T19066] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3397'. [ 493.981731][T19066] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3397'. [ 494.083956][T19066] syz_tun: entered promiscuous mode [ 494.110556][T19066] erspan0: entered promiscuous mode [ 494.496676][T19086] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3400'. [ 494.701849][ T30] audit: type=1804 audit(1780158263.173:13): pid=19109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3405" name="/newroot/60/cgroup.controllers" dev="tmpfs" ino=323 res=1 errno=0 [ 494.752560][T19104] : renamed from bond0 (while UP) [ 494.794003][ T30] audit: type=1800 audit(1780158263.173:14): pid=19109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3405" name="cgroup.controllers" dev="tmpfs" ino=323 res=0 errno=0 [ 494.869586][T18591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.896939][T19121] netlink: 'syz.1.3407': attribute type 21 has an invalid length. [ 494.931230][T19121] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3407'. [ 495.007251][T19121] netlink: 'syz.1.3407': attribute type 5 has an invalid length. [ 495.036481][T19121] netlink: 'syz.1.3407': attribute type 6 has an invalid length. [ 495.042019][T19126] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3408'. [ 495.049381][T19121] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3407'. [ 495.252197][T19126] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 495.499623][T18591] veth0_vlan: entered promiscuous mode [ 495.535711][T19151] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3414'. [ 495.667479][T18591] veth1_vlan: entered promiscuous mode [ 495.803957][T18591] veth0_macvtap: entered promiscuous mode [ 495.883996][T18591] veth1_macvtap: entered promiscuous mode [ 496.039484][T18591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.100813][T18591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.158087][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.197535][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.216496][T19182] netlink: 'syz.4.3426': attribute type 1 has an invalid length. [ 496.240403][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.280935][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.435998][T19195] netlink: 'syz.4.3429': attribute type 1 has an invalid length. [ 496.639732][T19202] sctp: [Deprecated]: syz.1.3430 (pid 19202) Use of int in maxseg socket option. [ 496.639732][T19202] Use struct sctp_assoc_value instead [ 496.811569][T19195] 8021q: adding VLAN 0 to HW filter on device bond1 [ 496.897198][ T48] hsr_slave_0: left promiscuous mode [ 496.932514][ T48] hsr_slave_1: left promiscuous mode [ 496.949687][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.976459][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.027642][ T48] veth1_macvtap: left promiscuous mode [ 497.053516][ T48] veth0_macvtap: left promiscuous mode [ 497.063937][ T48] veth1_vlan: left promiscuous mode [ 497.076900][ T48] veth0_vlan: left promiscuous mode [ 497.310055][ T48] pim6reg (unregistering): left allmulticast mode [ 497.628496][ T48] team0 (unregistering): Port device team_slave_1 removed [ 497.842701][T19211] __nla_validate_parse: 9 callbacks suppressed [ 497.842721][T19211] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3432'. [ 497.966009][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.013963][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.246707][T19236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3438'. [ 498.264892][T10173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.279629][T10173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.293328][ T48] IPVS: stop unused estimator thread 0... [ 498.306532][ T30] audit: type=1804 audit(1780158266.773:15): pid=19236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3438" name="/newroot/107/cgroup.controllers" dev="tmpfs" ino=565 res=1 errno=0 [ 498.388225][ T30] audit: type=1800 audit(1780158266.773:16): pid=19236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3438" name="cgroup.controllers" dev="tmpfs" ino=565 res=0 errno=0 [ 498.616246][T19244] syzkaller0: entered promiscuous mode [ 498.638021][T19244] syzkaller0: entered allmulticast mode [ 498.657097][T19250] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3442'. [ 499.159185][T19269] netlink: 'syz.3.3448': attribute type 30 has an invalid length. [ 499.292566][T19275] netlink: 'syz.4.3449': attribute type 2 has an invalid length. [ 499.322995][T19275] netlink: 'syz.4.3449': attribute type 1 has an invalid length. [ 499.462315][T19283] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3451'. [ 499.486537][T19285] netlink: 'syz.4.3452': attribute type 33 has an invalid length. [ 499.608393][T19285] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 499.689242][T19285] bond2 (unregistering): Released all slaves [ 499.801608][T19299] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3456'. [ 499.833701][T19298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3458'. [ 499.853749][T19299] netlink: 'syz.1.3456': attribute type 7 has an invalid length. [ 499.915115][T19299] netlink: 'syz.1.3456': attribute type 8 has an invalid length. [ 499.929557][T19302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3459'. [ 499.967965][T19302] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3459'. [ 499.995777][T19302] netlink: 'syz.3.3459': attribute type 5 has an invalid length. [ 500.316079][T19316] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3461'. [ 500.611208][T19337] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3470'. [ 500.978096][T19347] No such timeout policy "syz0" [ 501.137504][T19351] veth5: entered allmulticast mode [ 501.198457][T19356] tipc: Started in network mode [ 501.203639][T19356] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 501.212192][T19356] tipc: Enabled bearer , priority 24 [ 501.227473][T19353] sctp: [Deprecated]: syz.4.3474 (pid 19353) Use of struct sctp_assoc_value in delayed_ack socket option. [ 501.227473][T19353] Use struct sctp_sack_info instead [ 501.496737][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.649637][T12847] IPVS: starting estimator thread 0... [ 501.741097][T19389] netlink: 'syz.0.3485': attribute type 1 has an invalid length. [ 501.754527][T19388] IPVS: using max 26 ests per chain, 62400 per kthread [ 501.767637][T19392] block nbd4: not configured, cannot reconfigure [ 501.781894][T19389] netlink: 'syz.0.3485': attribute type 2 has an invalid length. [ 501.807810][T19389] netlink: 'syz.0.3485': attribute type 1 has an invalid length. [ 501.820708][T19389] netlink: 'syz.0.3485': attribute type 3 has an invalid length. [ 501.929366][T19404] netlink: 'syz.0.3490': attribute type 1 has an invalid length. [ 501.959923][T19404] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 501.967304][T19404] IPv6: NLM_F_CREATE should be set when creating new route [ 501.974650][T19404] IPv6: NLM_F_CREATE should be set when creating new route [ 502.002586][T19404] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 502.120980][T19413] vxcan1 speed is unknown, defaulting to 1000 [ 502.130820][T19413] vxcan1 speed is unknown, defaulting to 1000 [ 502.145089][T19413] vxcan1 speed is unknown, defaulting to 1000 [ 502.183193][T19417] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 502.328980][T12847] tipc: Node number set to 10005162 [ 502.362654][T19432] 8021q: adding VLAN 0 to HW filter on device bond2 [ 502.390898][T19430] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 502.440760][T19431] netlink: 'syz.4.3497': attribute type 1 has an invalid length. [ 502.458889][T19435] netlink: 'syz.1.3499': attribute type 1 has an invalid length. [ 502.468129][T19435] netlink: 'syz.1.3499': attribute type 2 has an invalid length. [ 502.861278][T19413] infiniband syz2: set active [ 502.867134][ T5934] vxcan1 speed is unknown, defaulting to 1000 [ 502.889516][T19413] infiniband syz2: added vxcan1 [ 502.920728][T19413] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 502.942763][T19413] infiniband syz2: Couldn't open port 1 [ 502.980824][T19413] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 503.043567][T19413] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 503.100080][T19413] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 503.192433][T19413] RDS/IB: syz2: added [ 503.200952][T19413] smc: adding ib device syz2 with port count 1 [ 503.216132][T19413] smc: ib device syz2 port 1 has no pnetid [ 503.229681][ T5930] vxcan1 speed is unknown, defaulting to 1000 [ 503.247679][T19413] vxcan1 speed is unknown, defaulting to 1000 [ 503.370673][T19479] __nla_validate_parse: 10 callbacks suppressed [ 503.370694][T19479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3512'. [ 503.447375][T19479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3512'. [ 503.448810][ T3365] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.480755][ T3365] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.485406][T19481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3513'. [ 503.502227][ T3365] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.513339][ T3365] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.589576][T19481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3513'. [ 503.626535][T19492] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3515'. [ 503.650857][T19487] bond1 (unregistering): Released all slaves [ 503.747145][T19481] hsr_slave_0: left promiscuous mode [ 503.778098][T19481] hsr_slave_1: left promiscuous mode [ 503.848820][T19413] vxcan1 speed is unknown, defaulting to 1000 [ 504.020445][T19515] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3519'. [ 504.099827][T19518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3522'. [ 504.436468][T19537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3526'. [ 504.472215][T19413] vxcan1 speed is unknown, defaulting to 1000 [ 504.557670][T19543] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3527'. [ 504.589956][T19543] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3527'. [ 504.973087][T19560] validate_nla: 5 callbacks suppressed [ 504.973107][T19560] netlink: 'syz.2.3532': attribute type 1 has an invalid length. [ 505.042464][T19413] vxcan1 speed is unknown, defaulting to 1000 [ 505.516808][T19583] netlink: 'syz.3.3542': attribute type 39 has an invalid length. [ 505.576819][T19587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.607665][T19587] batadv_slave_1: entered promiscuous mode [ 505.663918][T19581] netlink: 'syz.1.3541': attribute type 10 has an invalid length. [ 505.677510][T19413] vxcan1 speed is unknown, defaulting to 1000 [ 505.687080][T19581] ipvlan0: entered allmulticast mode [ 505.698505][T19581] veth0_vlan: entered allmulticast mode [ 505.718251][T19581] team0: Device ipvlan0 failed to register rx_handler [ 506.099000][T19600] bond3: option resend_igmp: invalid value (32767) [ 506.105832][T19600] bond3: option resend_igmp: allowed values 0 - 255 [ 506.116208][T19600] bond3 (unregistering): Released all slaves [ 506.170642][T19413] vxcan1 speed is unknown, defaulting to 1000 [ 506.410889][T19604] syzkaller0: entered promiscuous mode [ 506.430076][T19604] syzkaller0: entered allmulticast mode [ 506.583260][T19625] netlink: 'syz.3.3555': attribute type 58 has an invalid length. [ 506.832513][T19635] netlink: 'syz.0.3558': attribute type 12 has an invalid length. [ 509.032938][T19672] bond0: (slave gre0): refused to change device type [ 509.144931][T19682] __nla_validate_parse: 7 callbacks suppressed [ 509.144950][T19682] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3568'. [ 509.146825][T19684] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3569'. [ 509.171632][T19684] netlink: 'syz.2.3569': attribute type 4 has an invalid length. [ 509.183612][T19684] netlink: 'syz.2.3569': attribute type 1 has an invalid length. [ 509.194354][T19684] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3569'. [ 509.461859][T19693] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3572'. [ 509.625496][T19698] syz.2.3573: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 509.643430][T19698] CPU: 1 UID: 0 PID: 19698 Comm: syz.2.3573 Not tainted syzkaller #0 PREEMPT(full) [ 509.643472][T19698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 509.643500][T19698] Call Trace: [ 509.643508][T19698] [ 509.643521][T19698] dump_stack_lvl+0xe8/0x150 [ 509.643557][T19698] warn_alloc+0x249/0x340 [ 509.643590][T19698] ? stack_trace_save+0xa9/0x100 [ 509.643624][T19698] ? __pfx_warn_alloc+0x10/0x10 [ 509.643663][T19698] ? kasan_save_track+0x4f/0x80 [ 509.643689][T19698] ? kasan_save_track+0x3e/0x80 [ 509.643716][T19698] ? __kasan_kmalloc+0x93/0xb0 [ 509.643743][T19698] ? __kmalloc_cache_noprof+0x31c/0x660 [ 509.643770][T19698] ? xskq_create+0x56/0x170 [ 509.643800][T19698] ? xsk_setsockopt+0x54c/0x990 [ 509.643824][T19698] ? do_sock_setsockopt+0x17c/0x1b0 [ 509.643853][T19698] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 509.643882][T19698] ? do_syscall_64+0x174/0x580 [ 509.643910][T19698] __vmalloc_node_range_noprof+0x132/0x1750 [ 509.643975][T19698] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 509.644012][T19698] ? __kasan_kmalloc+0x93/0xb0 [ 509.644048][T19698] vmalloc_user_noprof+0xad/0xe0 [ 509.644077][T19698] ? xskq_create+0xbf/0x170 [ 509.644107][T19698] xskq_create+0xbf/0x170 [ 509.644139][T19698] xsk_init_queue+0x8a/0xe0 [ 509.644170][T19698] xsk_setsockopt+0x54c/0x990 [ 509.644201][T19698] ? __pfx_xsk_setsockopt+0x10/0x10 [ 509.644229][T19698] ? __pfx_aa_sk_perm+0x10/0x10 [ 509.644263][T19698] ? aa_sock_opt_perm+0xff/0x1a0 [ 509.644297][T19698] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 509.644323][T19698] ? __pfx_xsk_setsockopt+0x10/0x10 [ 509.644352][T19698] do_sock_setsockopt+0x17c/0x1b0 [ 509.644388][T19698] __x64_sys_setsockopt+0x13d/0x1b0 [ 509.644422][T19698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.644446][T19698] do_syscall_64+0x174/0x580 [ 509.644465][T19698] ? trace_irq_disable+0x3b/0x140 [ 509.644495][T19698] ? clear_bhb_loop+0x40/0x90 [ 509.644522][T19698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.644549][T19698] RIP: 0033:0x7fd84419ce59 [ 509.644569][T19698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.644586][T19698] RSP: 002b:00007fd845001028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 509.644608][T19698] RAX: ffffffffffffffda RBX: 00007fd844415fa0 RCX: 00007fd84419ce59 [ 509.644623][T19698] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 509.644635][T19698] RBP: 00007fd844232d6f R08: 0000000000000004 R09: 0000000000000000 [ 509.644648][T19698] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.644661][T19698] R13: 00007fd844416038 R14: 00007fd844415fa0 R15: 00007fffabfbc3f8 [ 509.644696][T19698] [ 509.953855][T19698] Mem-Info: [ 509.957220][T19698] active_anon:5805 inactive_anon:0 isolated_anon:0 [ 509.957220][T19698] active_file:2629 inactive_file:40417 isolated_file:0 [ 509.957220][T19698] unevictable:768 dirty:68 writeback:0 [ 509.957220][T19698] slab_reclaimable:11715 slab_unreclaimable:110157 [ 509.957220][T19698] mapped:32371 shmem:1426 pagetables:3422 [ 509.957220][T19698] sec_pagetables:0 bounce:0 [ 509.957220][T19698] kernel_misc_reclaimable:0 [ 509.957220][T19698] free:1313045 free_pcp:9147 free_cma:0 [ 510.005846][T19698] Node 0 active_anon:23220kB inactive_anon:0kB active_file:10516kB inactive_file:161464kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129484kB dirty:268kB writeback:0kB shmem:4168kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13900kB pagetables:13564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 510.041377][T19698] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 510.074942][T19698] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 510.106697][T19698] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 510.113678][T19698] Node 0 DMA32 free:1308076kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23220kB inactive_anon:0kB active_file:10516kB inactive_file:161464kB unevictable:1536kB writepending:268kB zspages:0kB present:3129332kB managed:2552800kB mlocked:0kB bounce:0kB free_pcp:36788kB local_pcp:16896kB free_cma:0kB [ 510.147618][T19698] lowmem_reserve[]: 0 0 0 0 0 [ 510.152412][T19698] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 510.182643][T19698] lowmem_reserve[]: 0 0 0 0 0 [ 510.187528][T19698] Node 1 Normal free:3928744kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 510.219566][T19698] lowmem_reserve[]: 0 0 0 0 0 [ 510.224436][T19698] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 510.237280][T19698] Node 0 DMA32: 9229*4kB (UME) 5591*8kB (UME) 3116*16kB (UME) 674*32kB (UME) 1227*64kB (UME) 956*128kB (UME) 709*256kB (UME) 425*512kB (UME) 166*1024kB (UME) 48*2048kB (UME) 70*4096kB (UM) = 1308076kB [ 510.257636][T19698] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 510.269385][T19698] Node 1 Normal: 0*4kB 1*8kB (M) 10*16kB (UM) 8*32kB (UM) 6*64kB (UM) 5*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 957*4096kB (M) = 3928744kB [ 510.287178][T19698] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 510.298087][T19698] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 510.307532][T19698] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 510.317427][T19698] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 510.326891][T19698] 44468 total pagecache pages [ 510.333808][T19698] 0 pages in swap cache [ 510.338118][T19698] Free swap = 124996kB [ 510.342540][T19698] Total swap = 124996kB [ 510.352552][T19698] 2097051 pages RAM [ 510.356818][T19698] 0 pages HighMem/MovableOnly [ 510.361575][T19698] 427066 pages reserved [ 510.367559][T19653] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 510.403675][T19698] 0 pages cma reserved [ 510.598435][T19707] netlink: 'syz.1.3575': attribute type 1 has an invalid length. [ 510.658807][T19715] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3577'. [ 510.910143][T19728] xt_l2tp: wrong L2TP version: 0 [ 513.743799][T19747] netlink: 'syz.2.3584': attribute type 1 has an invalid length. [ 513.764639][T19747] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3584'. [ 513.862525][T19756] netlink: 198504 bytes leftover after parsing attributes in process `syz.2.3589'. [ 513.896022][T19756] netlink: 'syz.2.3589': attribute type 10 has an invalid length. [ 513.935395][T19760] netlink: 'syz.4.3590': attribute type 1 has an invalid length. [ 513.944028][T19760] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3590'. [ 513.959320][T19760] netlink: 'syz.4.3590': attribute type 1 has an invalid length. [ 513.968782][T19760] netlink: 'syz.4.3590': attribute type 8 has an invalid length. [ 513.977230][T19760] netlink: 606 bytes leftover after parsing attributes in process `syz.4.3590'. [ 513.986940][T19760] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3590'. [ 513.991781][T19756] team0 (unregistering): Port device team_slave_0 removed [ 514.009645][T19762] digital: digital_start_poll: Unknown protocol [ 514.023160][T19756] team0 (unregistering): Port device team_slave_1 removed [ 514.032740][T19762] xt_ipcomp: unknown flags 1D [ 514.562859][T19795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.678450][T19800] macvlan0: entered promiscuous mode [ 514.823299][T19808] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.846670][T19808] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.018283][T19817] netlink: 'syz.0.3604': attribute type 1 has an invalid length. [ 515.038182][T19817] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3604'. [ 515.065898][T19817] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3604'. [ 515.242181][T19824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3605'. [ 515.465862][T19831] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.3607'. [ 515.838582][T19857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3609'. [ 515.843635][T19856] IPVS: sh: FWM 3 0x00000003 - no destination available [ 515.861073][T19856] IPVS: sh: FWM 3 0x00000003 - no destination available [ 515.869554][T19855] netlink: 'syz.3.3613': attribute type 1 has an invalid length. [ 515.892271][T19856] syzkaller0: entered promiscuous mode [ 515.909394][T19856] syzkaller0: entered allmulticast mode [ 515.920806][T19856] IPVS: sh: FWM 3 0x00000003 - no destination available [ 515.928882][T19859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3613'. [ 515.975964][T19859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3613'. [ 516.001177][T19855] 8021q: adding VLAN 0 to HW filter on device bond3 [ 516.015898][ T5296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 516.072544][T19839] syzkaller1: entered promiscuous mode [ 516.078421][T19839] syzkaller1: entered allmulticast mode [ 516.161414][T19864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3615'. [ 516.184225][T19866] netlink: 'syz.3.3616': attribute type 8 has an invalid length. [ 516.392791][T19878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3617'. [ 516.433696][T19876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3620'. [ 516.548233][T19883] netlink: 'syz.2.3622': attribute type 1 has an invalid length. [ 516.575124][T19883] bond1: entered promiscuous mode [ 516.580718][T19883] 8021q: adding VLAN 0 to HW filter on device bond1 [ 516.604504][T19883] 8021q: adding VLAN 0 to HW filter on device bond1 [ 516.611762][T19883] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 516.622468][T19883] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 516.636149][T19883] bond1: (slave ip6gre1): making interface the new active one [ 516.643699][T19883] ip6gre1: entered promiscuous mode [ 516.652277][T19883] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 516.701633][T19883] bridge0: port 3(syz_tun) entered blocking state [ 516.708521][T19883] bridge0: port 3(syz_tun) entered disabled state [ 516.715439][T19883] syz_tun: entered allmulticast mode [ 516.722282][T19883] syz_tun: entered promiscuous mode [ 516.729254][T19883] bridge0: port 3(syz_tun) entered blocking state [ 516.735838][T19883] bridge0: port 3(syz_tun) entered forwarding state [ 517.071984][T19892] IPv6: NLM_F_CREATE should be specified when creating new route [ 517.080568][T19893] IPv6: NLM_F_CREATE should be specified when creating new route [ 517.169919][T19897] netlink: 'syz.3.3626': attribute type 1 has an invalid length. [ 517.500644][T19917] netlink: 'syz.2.3631': attribute type 1 has an invalid length. [ 517.558904][T19917] 8021q: adding VLAN 0 to HW filter on device bond2 [ 517.604008][T19921] bond2: (slave geneve2): making interface the new active one [ 517.640313][T19921] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 517.937863][T19937] netlink: 'syz.1.3640': attribute type 1 has an invalid length. [ 517.963109][T19940] IPv6: addrconf: prefix option has invalid lifetime [ 517.969931][T19940] IPv6: addrconf: prefix option has invalid lifetime [ 518.688192][T19973] netlink: 'syz.0.3649': attribute type 1 has an invalid length. [ 518.919953][T19988] xt_hashlimit: size too large, truncated to 1048576 [ 519.037969][ T9] syzkaller0: tun_net_xmit 76 [ 519.234619][ T9] syzkaller0: tun_net_xmit 76 [ 519.334294][ T9] syzkaller0: tun_net_xmit 76 [ 519.391555][T20011] netlink: 'syz.2.3661': attribute type 1 has an invalid length. [ 519.459813][T20012] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 519.489900][T20017] syzkaller0: entered promiscuous mode [ 519.497521][T20017] syzkaller0: entered allmulticast mode [ 519.538578][T20017] netlink: 'syz.3.3662': attribute type 1 has an invalid length. [ 521.429792][T20027] veth3: entered allmulticast mode [ 521.475492][T20032] : entered promiscuous mode [ 521.550637][T20034] __nla_validate_parse: 9 callbacks suppressed [ 521.550657][T20034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3667'. [ 521.628140][T20038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3669'. [ 521.646675][T20040] netlink: 'syz.4.3670': attribute type 12 has an invalid length. [ 521.666427][T20038] netlink: 'syz.0.3669': attribute type 62 has an invalid length. [ 521.701729][T20040] bond4: option primary_reselect: invalid value (255) [ 521.712358][T20040] bond4 (unregistering): Released all slaves [ 521.815878][T20047] netlink: 'syz.1.3672': attribute type 23 has an invalid length. [ 522.003200][T20058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3676'. [ 522.128548][T20058] 8021q: adding VLAN 0 to HW filter on device bond5 [ 522.197788][T20071] batadv1: entered allmulticast mode [ 522.209409][T20059] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 522.345736][T20069] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3677'. [ 522.483308][T20092] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3684'. [ 522.551422][T20100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3685'. [ 524.054499][T20056] Bluetooth: hci5: command 0x0406 tx timeout [ 549.654291][T20056] Bluetooth: hci4: command 0x0406 tx timeout [ 550.076902][T20150] tipc: Enabled bearer , priority 14 [ 550.159145][T20164] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 550.192991][T20170] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3706'. [ 550.202582][T20170] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3706'. [ 550.226430][T20170] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3706'. [ 550.307218][T20173] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3707'. [ 550.567671][T20188] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3712'. [ 550.722774][T20203] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3717'. [ 550.869169][T20210] syzkaller0: entered promiscuous mode [ 550.875233][T20210] syzkaller0: entered allmulticast mode [ 550.923292][T20210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.938916][T20217] IPv6: sit1: Disabled Multicast RS [ 550.953212][T20217] sit1: entered allmulticast mode [ 550.967593][T20220] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3722'. [ 551.096681][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 551.240555][T20220] sctp: [Deprecated]: syz.1.3722 (pid 20220) Use of int in max_burst socket option deprecated. [ 551.240555][T20220] Use struct sctp_assoc_value instead [ 552.508502][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 552.892253][T20283] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3736'. [ 553.635627][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 554.112167][T20306] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3743'. [ 554.899765][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 555.391353][T20334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3751'. [ 555.484547][T20334] bond3: entered promiscuous mode [ 555.489736][T20334] bond3: entered allmulticast mode [ 555.708111][T20340] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3754'. [ 555.732777][T20343] lo: entered allmulticast mode [ 555.956904][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 556.851920][T20338] lo: left allmulticast mode [ 557.206804][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 557.534324][T20370] IPv6: addrconf: prefix option has invalid lifetime [ 557.553194][T20370] netlink: 'syz.3.3763': attribute type 1 has an invalid length. [ 558.338586][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 558.658600][T20387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3770'. [ 558.682393][T20399] netlink: 'syz.3.3772': attribute type 1 has an invalid length. [ 558.694177][T20399] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3772'. [ 558.872997][T20401] xt_cgroup: xt_cgroup: no path or classid specified [ 558.964366][T20405] netlink: 'syz.0.3774': attribute type 1 has an invalid length. [ 558.984171][T20405] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 558.991445][T20405] IPv6: NLM_F_CREATE should be set when creating new route [ 559.204276][T20406] netlink: 'syz.0.3774': attribute type 1 has an invalid length. [ 559.220569][T20406] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 559.468145][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 560.486739][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 561.645717][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 562.775441][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 563.000713][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.854528][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 564.327763][T20438] x_tables: duplicate underflow at hook 3 [ 564.347342][T20438] h: entered promiscuous mode [ 564.765993][T20454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3786'. [ 564.792367][T20451] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 564.821895][ T5931] IPVS: starting estimator thread 0... [ 564.998652][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 565.016187][T20458] netlink: 'syz.3.3787': attribute type 4 has an invalid length. [ 565.081475][T20461] dvmrp0: entered allmulticast mode [ 565.290146][T20056] Bluetooth: hci1: command 0x0406 tx timeout [ 565.568737][T20456] IPVS: using max 27 ests per chain, 64800 per kthread [ 565.601978][T20479] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3793'. [ 565.846535][T20485] ip6_vti0: entered promiscuous mode [ 565.868126][T20485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3793'. [ 566.107587][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 566.512543][T20496] IPVS: Error connecting to the multicast addr [ 566.732039][T20506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3802'. [ 567.312821][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 567.998745][T20546] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3810'. [ 568.020364][T20534] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 568.029835][T20546] xt_hashlimit: size too large, truncated to 1048576 [ 568.349470][T20551] netlink: 'syz.3.3815': attribute type 11 has an invalid length. [ 568.396476][T20551] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3815'. [ 568.587172][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 568.739686][T20559] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 568.910623][T20560] netlink: 'syz.4.3814': attribute type 8 has an invalid length. [ 569.170056][T20559] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 569.177827][T20559] gretap2: entered promiscuous mode [ 569.183319][T20559] gretap2: entered allmulticast mode [ 569.804563][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 570.188678][T20594] syz_tun: entered allmulticast mode [ 570.201307][T20595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3828'. [ 570.478163][T20594] syz_tun (unregistering): left allmulticast mode [ 570.944228][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 571.536819][T20615] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3834'. [ 572.047040][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 572.070714][T20632] netlink: 'syz.1.3836': attribute type 2 has an invalid length. [ 572.083491][T20632] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3836'. [ 572.114311][T20622] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 572.134209][T20622] bond2 (unregistering): Released all slaves [ 572.692692][T20646] tipc: Resetting bearer [ 572.873843][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 572.883034][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 573.146701][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 573.172789][T20652] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3843'. [ 573.791306][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 573.861151][T20678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3849'. [ 574.156702][T20684] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3851'. [ 574.642864][T20692] netlink: 'syz.0.3852': attribute type 4 has an invalid length. [ 574.746375][T20692] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3852'. [ 574.798605][T20692] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 575.086094][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 575.169510][T20708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3857'. [ 575.289563][T20712] : entered promiscuous mode [ 575.868259][T20717] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 576.118967][T20738] gre1: entered promiscuous mode [ 576.150543][T20738] gre1: entered allmulticast mode [ 576.352354][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 576.389867][T20739] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 576.672672][T20746] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 576.964057][T20751] netlink: 'syz.3.3869': attribute type 10 has an invalid length. [ 576.971950][T20751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.979366][T20751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.995990][T20751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.028662][T20751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.206869][T20757] Bluetooth: MGMT ver 1.23 [ 577.277766][T20761] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3872'. [ 577.517754][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 577.631352][T20745] syzkaller1: entered promiscuous mode [ 577.642262][T20745] syzkaller1: entered allmulticast mode [ 577.910859][T20772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3876'. [ 578.153029][T20777] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3877'. [ 578.190578][T20780] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3878'. [ 578.635135][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 579.735152][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 579.793132][T20807] vlan2: entered allmulticast mode [ 580.462905][T20817] sctp: [Deprecated]: syz.0.3889 (pid 20817) Use of int in max_burst socket option. [ 580.462905][T20817] Use struct sctp_assoc_value instead [ 580.482841][T20817] openvswitch: netlink: IP tunnel dst address not specified [ 580.984566][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 581.301130][T20838] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3896'. [ 581.607200][T20846] tipc: Started in network mode [ 581.612153][T20846] tipc: Node identity ac14142f, cluster identity 3 [ 581.619219][T20846] tipc: Enabling of bearer rejected, failed to enable media [ 581.890348][T20848] bond4: entered allmulticast mode [ 581.920413][T20849] veth3: entered allmulticast mode [ 581.941880][T20849] bond4: (slave veth3): Enslaving as an active interface with an up link [ 582.239978][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 582.270335][T20848] bond4 (unregistering): (slave veth3): Releasing backup interface [ 582.635658][T20848] bond4 (unregistering): Released all slaves [ 582.789942][T20878] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3907'. [ 583.329008][T20882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3909'. [ 583.349502][T20882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3909'. [ 583.367983][T20884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3910'. [ 583.573267][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 583.584839][T20885] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 583.628918][T20884] veth0_macvtap: left promiscuous mode [ 584.423916][T20907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3913'. [ 584.462490][T20906] syzkaller0: entered promiscuous mode [ 584.477354][T20906] syzkaller0: entered allmulticast mode [ 584.530830][T20911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3917'. [ 584.709977][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 585.344921][T20931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3923'. [ 585.384630][T20933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3924'. [ 585.393549][T20933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3924'. [ 585.402489][T20933] netlink: 'syz.0.3924': attribute type 15 has an invalid length. [ 585.623396][T20933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3924'. [ 585.633028][T20933] netlink: 'syz.0.3924': attribute type 15 has an invalid length. [ 585.634210][ T92] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 585.654504][ T92] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 585.663235][ T92] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 585.873656][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 586.461785][T20950] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 586.730882][T20961] netlink: 'syz.2.3931': attribute type 1 has an invalid length. [ 586.771654][T20965] 8021q: VLANs not supported on ip6gre0 [ 586.966933][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 588.096927][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 588.144409][T20996] __nla_validate_parse: 7 callbacks suppressed [ 588.144430][T20996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3941'. [ 588.441502][T21009] netlink: 'syz.3.3943': attribute type 1 has an invalid length. [ 589.016967][T21008] mac80211_hwsim hwsim44 wlan0: entered promiscuous mode [ 589.216029][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 589.522045][T21023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3948'. [ 589.541364][T21023] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3948'. [ 589.596685][T21017] syzkaller0: entered promiscuous mode [ 589.783388][T21017] syzkaller0: entered allmulticast mode [ 589.798494][T21024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3947'. [ 589.819645][T21024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3947'. [ 590.346169][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 590.457289][T21043] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3954'. [ 591.384568][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 592.580229][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 593.797167][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 594.983261][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 595.814227][ T5646] Bluetooth: hci0: command 0x0405 tx timeout [ 595.960141][T21035] C: renamed from lo (while UP) [ 595.983474][T21035] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 596.150684][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 596.476293][T21055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 596.537485][T21058] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3958'. [ 596.823925][T21063] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3962'. [ 596.845546][T21065] netlink: 'syz.3.3960': attribute type 4 has an invalid length. [ 596.853381][T21065] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3960'. [ 597.189118][T11384] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 597.196944][T11384] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 597.222349][ T3365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.232182][ T3365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.436935][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 597.444382][T12842] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 597.751313][T21080] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 597.766422][T21080] bond6 (unregistering): Released all slaves [ 598.061907][T21086] xt_hashlimit: size too large, truncated to 1048576 [ 598.138993][T21091] netdevsim netdevsim4: Direct firmware load for /tun failed with error -2 [ 598.202308][T21091] netdevsim netdevsim4: Falling back to sysfs fallback for: /tun [ 598.351686][T12842] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 598.359826][T12842] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 598.613720][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 598.740985][T21103] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3972'. [ 598.864184][T21108] netlink: 'syz.2.3974': attribute type 1 has an invalid length. [ 598.872616][T21108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3974'. [ 598.882153][T21108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3974'. [ 598.891649][T21108] netlink: 'syz.2.3974': attribute type 2 has an invalid length. [ 598.900040][T21108] netlink: 'syz.2.3974': attribute type 2 has an invalid length. [ 598.908527][T21108] netlink: 'syz.2.3974': attribute type 2 has an invalid length. [ 599.380979][T21115] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3976'. [ 599.432858][T21119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3978'. [ 599.970439][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 600.285930][T21136] netlink: 'syz.0.3980': attribute type 1 has an invalid length. [ 600.293734][T21136] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3980'. [ 600.584896][T21123] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_cmd_wq": -EINTR [ 600.816428][T21153] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3983'. [ 600.896600][T20056] Bluetooth: hci2: command 0x0405 tx timeout [ 601.112523][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 601.142893][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 601.737169][T21178] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3989'. [ 601.932333][T11384] tipc: Subscription rejected, illegal request [ 602.188551][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 603.391830][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 603.846364][T21156] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 604.144770][T21200] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20004 [ 604.421778][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 604.442377][T21205] netlink: 'syz.3.3996': attribute type 1 has an invalid length. [ 604.711755][T21211] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 605.061341][T21227] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4005'. [ 605.070569][T21227] tipc: Invalid UDP bearer configuration [ 605.070631][T21227] tipc: Enabling of bearer rejected, failed to enable media [ 605.348848][T21234] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 605.575557][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 605.960983][T21249] syzkaller0: entered promiscuous mode [ 605.966764][T21249] syzkaller0: entered allmulticast mode [ 606.451292][T21264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 606.547738][T21269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4016'. [ 606.777759][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 606.789755][T21269] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4016'. [ 606.800813][T20056] Bluetooth: hci2: command 0x0405 tx timeout [ 607.735549][T21293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4024'. [ 607.947585][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 608.511148][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 608.910466][T21310] syzkaller0: entered promiscuous mode [ 608.916704][T21310] syzkaller0: entered allmulticast mode [ 609.168039][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 609.197913][T21319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4033'. [ 609.498376][T21325] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4034'. [ 609.584531][T21330] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4036'. [ 610.160654][T21347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4041'. [ 610.358573][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 610.675100][T21359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4044'. [ 610.709678][T21363] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4045'. [ 610.720516][T21363] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4045'. [ 610.911244][T21365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4043'. [ 611.525597][T21382] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4051'. [ 611.532613][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 611.806591][T21387] sctp: [Deprecated]: syz.1.4050 (pid 21387) Use of int in maxseg socket option. [ 611.806591][T21387] Use struct sctp_assoc_value instead [ 611.862738][T21395] tipc: Enabling of bearer rejected, failed to enable media [ 612.118277][T21402] tipc: Enabling of bearer rejected, failed to enable media [ 612.179197][T21404] netlink: 'syz.2.4056': attribute type 8 has an invalid length. [ 612.187271][T21398] netlink: 'syz.2.4056': attribute type 8 has an invalid length. [ 612.655964][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 612.740732][T21415] syzkaller0: entered promiscuous mode [ 612.746290][T21415] syzkaller0: entered allmulticast mode [ 612.976079][T21424] x_tables: duplicate underflow at hook 2 [ 613.090773][T21431] netlink: 'syz.4.4065': attribute type 1 has an invalid length. [ 613.300121][T21436] xt_hashlimit: size too large, truncated to 1048576 [ 613.854426][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 613.917929][T21449] nbd: must specify a size in bytes for the device [ 614.937731][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 615.045218][T21465] __nla_validate_parse: 5 callbacks suppressed [ 615.045239][T21465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4072'. [ 616.206585][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 617.425593][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 618.568294][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 619.696866][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 620.413687][T21444] vlan2: entered allmulticast mode [ 620.423885][T21452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4069'. [ 620.663387][T21475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.683906][T21473] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4074'. [ 620.902756][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 621.480472][T21488] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 621.521138][T21498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4083'. [ 621.522588][T21500] xt_hashlimit: invalid interval [ 621.789859][T21504] netlink: 'syz.3.4084': attribute type 1 has an invalid length. [ 622.029776][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 622.128726][T21516] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4088'. [ 622.155145][T21519] netlink: 'syz.1.4089': attribute type 1 has an invalid length. [ 622.163291][T21519] netlink: 'syz.1.4089': attribute type 1 has an invalid length. [ 622.171689][T21519] netlink: 'syz.1.4089': attribute type 1 has an invalid length. [ 622.179963][T21519] netlink: 'syz.1.4089': attribute type 1 has an invalid length. [ 622.188174][T21519] netlink: 'syz.1.4089': attribute type 1 has an invalid length. [ 622.196468][T21519] netlink: 'syz.1.4089': attribute type 1 has an invalid length. [ 622.205649][T21519] netlink: 'syz.1.4089': attribute type 1 has an invalid length. [ 622.215139][T21519] netlink: 'syz.1.4089': attribute type 1 has an invalid length. [ 622.223265][T21519] netlink: 'syz.1.4089': attribute type 1 has an invalid length. [ 622.453234][T21504] 8021q: adding VLAN 0 to HW filter on device bond7 [ 622.466927][T21523] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.4090'. [ 622.490662][T21508] bond7: (slave gretap1): making interface the new active one [ 622.498954][T21508] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 622.730111][T21524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4090'. [ 623.087945][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 623.155958][T21534] Cannot find map_set index 135 as target [ 623.166357][T21533] syzkaller0: entered promiscuous mode [ 623.171906][T21533] syzkaller0: entered allmulticast mode [ 623.402607][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 623.723332][T21538] 8021q: adding VLAN 0 to HW filter on device bond2 [ 623.734048][T21538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.746137][T21538] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 623.754805][T21538] 8021q: adding VLAN 0 to HW filter on device bond4 [ 623.763881][T21538] 8021q: adding VLAN 0 to HW filter on device bond6 [ 624.221184][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 624.288007][T21549] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 624.501354][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.599223][T21564] xt_l2tp: missing protocol rule (udp|l2tpip) [ 625.120395][T21579] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4108'. [ 625.500246][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 625.558108][T21595] nbd: must specify an index to disconnect [ 625.584350][T21596] nbd: must specify an index to disconnect [ 625.592571][T21595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4111'. [ 625.602569][T21595] block nbd3: Unsupported socket: should be TCP or UNIX. [ 625.935813][T21606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4117'. [ 626.210050][T21606] bond6: entered promiscuous mode [ 626.469277][T21616] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4119'. [ 626.717680][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 626.740864][T21616] bond5: entered promiscuous mode [ 626.748186][T21616] 8021q: adding VLAN 0 to HW filter on device bond5 [ 627.035161][ T3365] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 627.312938][T21640] syzkaller0: entered promiscuous mode [ 627.318489][T21640] syzkaller0: entered allmulticast mode [ 627.332945][T21642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4126'. [ 627.735037][T21653] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4129'. [ 627.744294][T21653] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4129'. [ 627.813234][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 627.872190][T21656] xt_SECMARK: invalid mode: 9 [ 628.155371][T21668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4134'. [ 628.155371][T21667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4134'. [ 628.155399][T21667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4134'. [ 628.164919][T21668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4134'. [ 628.213276][ T48] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 628.222481][ T48] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 628.233036][ T48] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 628.243096][ T48] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 628.915954][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 629.716805][T21621] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 630.155930][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 630.387224][T21704] sock: sock_timestamping_bind_phc: sock not bind to device [ 631.117370][T21714] netlink: 'syz.0.4145': attribute type 1 has an invalid length. [ 631.117370][T21715] validate_nla: 27 callbacks suppressed [ 631.117392][T21715] netlink: 'syz.0.4145': attribute type 1 has an invalid length. [ 631.154549][T21714] 8021q: adding VLAN 0 to HW filter on device bond7 [ 631.335564][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 631.622667][T21727] netlink: 'syz.4.4147': attribute type 33 has an invalid length. [ 631.872693][T21727] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 631.916348][T21727] bond4 (unregistering): Released all slaves [ 632.050308][T21747] sctp: [Deprecated]: syz.0.4149 (pid 21747) Use of struct sctp_assoc_value in delayed_ack socket option. [ 632.050308][T21747] Use struct sctp_sack_info instead [ 632.124536][T21745] __nla_validate_parse: 7 callbacks suppressed [ 632.124557][T21745] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4153'. [ 632.461353][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 632.524068][T21755] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4155'. [ 632.790995][T21761] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4157'. [ 633.410068][T21770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4161'. [ 633.647427][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 633.958853][T21793] netlink: 'syz.3.4167': attribute type 4 has an invalid length. [ 633.980348][T21783] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4160'. [ 634.006707][T21797] gre2: entered promiscuous mode [ 634.768754][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 635.217859][T21810] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4171'. [ 635.752615][T21821] ipt_REJECT: TCP_RESET invalid for non-tcp [ 635.797001][T21824] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4176'. [ 635.797001][T21825] netlink: 'syz.1.4176': attribute type 1 has an invalid length. [ 636.022041][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 636.139666][T21771] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 636.262354][T21829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 636.275907][T21829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 636.288161][T21829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 636.903461][T21836] bond6 (unregistering): Released all slaves [ 636.980860][T21842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4180'. [ 637.238224][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 638.438412][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 638.452054][T21876] netlink: 'syz.2.4189': attribute type 10 has an invalid length. [ 638.768290][T21886] netlink: 'syz.3.4192': attribute type 1 has an invalid length. [ 638.776117][T21886] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4192'. [ 639.294417][T21896] netlink: 'syz.2.4196': attribute type 29 has an invalid length. [ 639.306510][T21896] netlink: 'syz.2.4196': attribute type 29 has an invalid length. [ 639.321558][T21900] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4197'. [ 639.371217][T21902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4198'. [ 639.592396][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 640.307543][T21927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4203'. [ 640.643858][T21929] batadv_slave_1: entered promiscuous mode [ 640.656755][T21933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4208'. [ 640.671612][T21929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4206'. [ 640.689478][T21929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.748069][T21937] Bluetooth: MGMT ver 1.23 [ 640.923222][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 640.974208][T21929] batadv_slave_1 (unregistering): left promiscuous mode [ 641.003633][T21929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.179354][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 642.248041][T21965] can: request_module (can-proto-0) failed. [ 642.600877][T21974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4216'. [ 642.928083][T21985] netlink: 'syz.4.4219': attribute type 1 has an invalid length. [ 642.992448][T21987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4219'. [ 643.001698][T21987] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4219'. [ 643.482005][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 643.769901][T22004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4222'. [ 644.392718][T22015] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4225'. [ 644.456083][T11380] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 644.465733][T11380] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 644.486238][ T5931] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 644.512796][T22012] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4224'. [ 644.748879][ T5931] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 644.778365][T22016] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4224'. [ 644.790517][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 644.801182][T22017] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4226'. [ 644.962216][T22023] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4227'. [ 645.088351][T22020] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4227'. [ 645.109402][T22020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4227'. [ 645.118362][T22020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4227'. [ 645.148526][T22025] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4229'. [ 645.352771][ T5934] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 645.977509][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 646.027976][T22046] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4236'. [ 646.037186][T22046] openvswitch: netlink: Flow key attr not present in new flow. [ 646.100205][T22045] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 646.367454][T22045] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 646.384980][T22045] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 646.406695][T22045] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 647.252520][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 647.671296][T22089] netlink: 'syz.0.4245': attribute type 5 has an invalid length. [ 648.056573][T22093] netlink: Unknown conntrack attr (0) [ 648.165607][T22102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 648.393361][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 648.974366][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 649.608231][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 649.995633][T22131] geneve3: entered promiscuous mode [ 650.203280][T22131] geneve3: entered allmulticast mode [ 650.256393][T10174] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 650.265447][T10174] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 650.277669][T10174] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 650.357948][T22144] __nla_validate_parse: 7 callbacks suppressed [ 650.357971][T22144] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4255'. [ 650.909001][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 650.924645][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 651.226318][T10174] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 651.903065][T22169] netlink: 'syz.1.4259': attribute type 1 has an invalid length. [ 652.125076][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 652.137208][T22174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4259'. [ 652.146255][T22174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4259'. [ 652.346299][T22169] bond3: entered promiscuous mode [ 652.352193][T22169] 8021q: adding VLAN 0 to HW filter on device bond3 [ 652.842137][T22192] netlink: 'syz.2.4265': attribute type 16 has an invalid length. [ 652.850144][T22192] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4265'. [ 652.859248][T22192] veth0_macvtap: entered allmulticast mode [ 653.136285][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 654.483209][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 654.529642][T22229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4275'. [ 654.574972][T22229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4275'. [ 654.851961][T22229] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4275'. [ 654.861467][T22229] veth1_to_bridge: entered allmulticast mode [ 654.868749][T22233] netlink: 'syz.1.4277': attribute type 1 has an invalid length. [ 655.103375][T22229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4275'. [ 655.112328][T22229] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4275'. [ 655.158524][T22242] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 655.192159][T22233] bond4: entered promiscuous mode [ 655.202931][T22233] 8021q: adding VLAN 0 to HW filter on device bond4 [ 655.450605][T22233] bridge_slave_0: left allmulticast mode [ 655.456530][T22233] bridge_slave_0: left promiscuous mode [ 655.469615][T22233] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.501321][T22248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 655.726195][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 655.766758][T22233] bridge_slave_1: left allmulticast mode [ 655.772496][T22233] bridge_slave_1: left promiscuous mode [ 655.778435][T22233] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.790294][T22233] bond0: (slave bond_slave_0): Releasing backup interface [ 655.807255][T22233] bond0: (slave bond_slave_1): Releasing backup interface [ 656.013124][T22233] team0: Port device team_slave_0 removed [ 656.025234][T22233] team0: Port device team_slave_1 removed [ 656.037573][T22233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.044996][T22233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.053541][T22233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.062511][T22233] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 656.244580][T22237] 8021q: adding VLAN 0 to HW filter on device bond4 [ 656.251834][T22237] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 656.262124][T22237] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 656.275446][T22237] bond4: (slave ip6gre1): making interface the new active one [ 656.282973][T22237] ip6gre1: entered promiscuous mode [ 656.290351][T22237] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 656.597247][T22259] bond8: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 656.809211][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 656.836701][T22259] bond8: (slave C): Enslaving as an active interface with an up link [ 656.847462][T22259] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 656.871827][T22269] netlink: 'syz.4.4288': attribute type 2 has an invalid length. [ 657.114474][T22272] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4289'. [ 657.352843][T22274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4290'. [ 657.396609][T22279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4291'. [ 657.406854][T22279] openvswitch: netlink: Flow actions attr not present in new flow. [ 657.684210][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 657.701830][T22283] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 657.897553][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 657.908949][T22283] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 657.921585][T22290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4294'. [ 657.933312][T22290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4294'. [ 658.243952][T22296] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4297'. [ 658.604612][T22305] syzkaller1: entered promiscuous mode [ 658.610220][T22305] syzkaller1: entered allmulticast mode [ 658.826974][T22312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4302'. [ 658.883071][T22317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4303'. [ 658.906571][T22315] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4304'. [ 659.118895][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 659.165926][T22324] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4305'. [ 659.737540][T22337] xt_NFQUEUE: number of total queues is 0 [ 660.260920][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 660.300042][T22356] netlink: 'syz.4.4312': attribute type 16 has an invalid length. [ 660.308780][T22356] veth0_macvtap: entered allmulticast mode [ 660.327859][T22352] netlink: 'syz.3.4311': attribute type 11 has an invalid length. [ 660.755380][T22365] sit1: entered promiscuous mode [ 660.760415][T22365] sit1: entered allmulticast mode [ 661.459052][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 662.248528][T22412] __nla_validate_parse: 22 callbacks suppressed [ 662.248549][T22412] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4328'. [ 662.324682][T22418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4328'. [ 662.582433][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 662.604351][T22420] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4332'. [ 662.614938][T22420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4332'. [ 662.623856][T22420] openvswitch: netlink: Flow actions attr not present in new flow. [ 663.405108][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888021b7c000: rx timeout, send abort [ 663.414101][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888021b7c000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 664.783150][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 664.816498][T22437] netlink: 'syz.0.4336': attribute type 6 has an invalid length. [ 667.337941][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 667.382425][T22447] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4339'. [ 672.551283][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 674.974219][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 682.466258][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 701.579236][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 701.996611][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 708.884275][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 739.992836][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 740.051043][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 740.120597][ T4950] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 777.974251][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 810.103808][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 810.545778][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.575158][T20056] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 810.589124][T20056] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 810.600533][T20056] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 810.614578][T20056] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 810.623719][T20056] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 810.631990][T20056] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 810.641084][T20056] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 810.648730][T20056] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 820.170989][ C0] sched: DL replenish lagged too much [ 845.103924][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 845.116328][ C1] rcu: 0-....: (1 ticks this GP) idle=364c/1/0x4000000000000000 softirq=96052/96052 fqs=6 [ 845.127594][ C1] rcu: hardirqs softirqs csw/system [ 845.134043][ C1] rcu: number: 0 0 0 [ 845.140473][ C1] rcu: cputime: 0 0 0 ==> 34600(ms) [ 845.148300][ C1] rcu: (detected by 1, t=10505 jiffies, g=107985, q=1114 ncpus=2) [ 845.156237][ C1] Sending NMI from CPU 1 to CPUs 0: [ 845.156274][ C0] NMI backtrace for cpu 0 [ 845.156364][ C0] CPU: 0 UID: 0 PID: 18574 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 845.156385][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 845.156427][ C0] RIP: 0010:do_raw_spin_lock+0x91/0x2f0 [ 845.156460][ C0] Code: 14 4c 8d 77 04 4c 89 f0 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 f3 01 00 00 41 8b 06 3d ad 4e ad de 0f 85 32 01 00 00 4c 8d 73 10 <4c> 89 f0 48 c1 e8 03 48 89 44 24 10 80 3c 10 00 74 12 4c 89 f7 e8 [ 845.156476][ C0] RSP: 0018:ffffc90000007c60 EFLAGS: 00000046 [ 845.156492][ C0] RAX: 00000000dead4ead RBX: ffffffff9a70ed98 RCX: 0000000000010002 [ 845.156505][ C0] RDX: dffffc0000000000 RSI: ffffffff8e216082 RDI: ffffffff9a70ed98 [ 845.156518][ C0] RBP: ffffc90000007d18 R08: ffffffff84bc7d23 R09: ffffffff9a70edb0 [ 845.156531][ C0] R10: dffffc0000000000 R11: fffff52000000fac R12: 1ffff92000000f90 [ 845.156543][ C0] R13: dffffc0000000000 R14: ffffffff9a70eda8 R15: 0000000000000000 [ 845.156556][ C0] FS: 0000000000000000(0000) GS:ffff88812529e000(0000) knlGS:0000000000000000 [ 845.156570][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 845.156581][ C0] CR2: 00007ffd617142c8 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 845.156597][ C0] Call Trace: [ 845.156605][ C0] [ 845.156635][ C0] ? debug_object_activate+0x83/0x580 [ 845.156656][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 845.156687][ C0] _raw_spin_lock_irqsave+0x4c/0x60 [ 845.156714][ C0] debug_object_activate+0x83/0x580 [ 845.156735][ C0] enqueue_hrtimer+0xa9/0x2c0 [ 845.156761][ C0] __hrtimer_run_queues+0x4d2/0xa20 [ 845.156793][ C0] hrtimer_interrupt+0x44b/0x950 [ 845.156829][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 845.156852][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 845.156881][ C0] [ 845.156886][ C0] [ 845.156892][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 845.156913][ C0] RIP: 0010:lock_acquire+0x221/0x350 [ 845.156932][ C0] Code: ff ff ff e8 71 ae 05 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 db 78 96 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 00 a3 08 0a cc 48 8d 3d e8 d9 91 [ 845.156946][ C0] RSP: 0018:ffffc900058b7258 EFLAGS: 00000282 [ 845.156961][ C0] RAX: 6f4c05510d17fd00 RBX: 0000000000000000 RCX: 0000000000000046 [ 845.156972][ C0] RDX: 00000000a69b4a9e RSI: ffffffff8e216082 RDI: ffffffff8c28b760 [ 845.156985][ C0] RBP: ffffffff8176e256 R08: ffffffff8176e256 R09: ffffffff8e95cce0 [ 845.156997][ C0] R10: ffffc900058b73b8 R11: ffffffff81b0e210 R12: 0000000000000002 [ 845.157009][ C0] R13: ffffffff8e95cce0 R14: 0000000000000000 R15: 0000000000000246 [ 845.157022][ C0] ? unwind_next_frame+0xa6/0x2550 [ 845.157043][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 845.157069][ C0] ? unwind_next_frame+0xa6/0x2550 [ 845.157093][ C0] ? call_rcu+0xee/0x890 [ 845.157115][ C0] ? unwind_next_frame+0xa6/0x2550 [ 845.157134][ C0] unwind_next_frame+0xc3/0x2550 [ 845.157154][ C0] ? unwind_next_frame+0xa6/0x2550 [ 845.157177][ C0] ? unwind_next_frame+0xa6/0x2550 [ 845.157197][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 845.157217][ C0] ? call_rcu+0xee/0x890 [ 845.157237][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 845.157263][ C0] arch_stack_walk+0x11b/0x150 [ 845.157287][ C0] ? call_rcu+0xee/0x890 [ 845.157309][ C0] stack_trace_save+0xa9/0x100 [ 845.157333][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 845.157363][ C0] kasan_save_stack+0x3e/0x60 [ 845.157385][ C0] ? kasan_save_stack+0x3e/0x60 [ 845.157413][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 845.157432][ C0] ? call_rcu+0xee/0x890 [ 845.157478][ C0] ? tear_down_vmas+0x312/0x520 [ 845.157500][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 845.157520][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 845.157538][ C0] call_rcu+0xee/0x890 [ 845.157562][ C0] ? tear_down_vmas+0x312/0x520 [ 845.157583][ C0] kmem_cache_free+0x462/0x650 [ 845.157612][ C0] tear_down_vmas+0x312/0x520 [ 845.157637][ C0] exit_mmap+0x4b6/0x9e0 [ 845.157661][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 845.157688][ C0] ? uprobe_clear_state+0x53/0x3f0 [ 845.157719][ C0] ? __pfx_exit_aio+0x10/0x10 [ 845.157747][ C0] ? uprobe_clear_state+0x2bc/0x3f0 [ 845.157774][ C0] __mmput+0x118/0x430 [ 845.157791][ C0] exit_mm+0x1f6/0x2d0 [ 845.157815][ C0] do_exit+0x6a2/0x22c0 [ 845.157841][ C0] ? __pfx_do_exit+0x10/0x10 [ 845.157864][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 845.157893][ C0] do_group_exit+0x21b/0x2d0 [ 845.157916][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 845.157943][ C0] get_signal+0x1284/0x1330 [ 845.157971][ C0] arch_do_signal_or_restart+0xbc/0x840 [ 845.157998][ C0] ? __pfx___x64_sys_wait4+0x10/0x10 [ 845.158021][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 845.158046][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 845.158082][ C0] exit_to_user_mode_loop+0xa9/0x680 [ 845.158099][ C0] ? rcu_is_watching+0x15/0xb0 [ 845.158119][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.158137][ C0] do_syscall_64+0x353/0x580 [ 845.158153][ C0] ? trace_irq_disable+0x3b/0x140 [ 845.158178][ C0] ? clear_bhb_loop+0x40/0x90 [ 845.158198][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.158215][ C0] RIP: 0033:0x7fd844157fd7 [ 845.158229][ C0] Code: Unable to access opcode bytes at 0x7fd844157fad. [ 845.158238][ C0] RSP: 002b:00007fffabfbc8e0 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 845.158254][ C0] RAX: fffffffffffffe00 RBX: 0000555575c7f500 RCX: 00007fd844157fd7 [ 845.158267][ C0] RDX: 0000000040000000 RSI: 00007fffabfbc93c RDI: ffffffffffffffff [ 845.158279][ C0] RBP: 00007fffabfbc93c R08: 0000000000000000 R09: 0000000000000000 [ 845.158290][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 845.158300][ C0] R13: 0000000000000003 R14: 00007fffabfbcb98 R15: 0000000000000000 [ 845.158320][ C0] [ 845.159269][ C1] rcu: rcu_preempt kthread starved for 3445 jiffies! g107985 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 845.742055][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 845.752137][ C1] rcu: RCU grace-period kthread stack dump: [ 845.758045][ C1] task:rcu_preempt state:R running task stack:27536 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 845.771582][ C1] Call Trace: [ 845.774892][ C1] [ 845.777919][ C1] __schedule+0x1821/0x5740 [ 845.782462][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 845.787463][ C1] ? __pfx___schedule+0x10/0x10 [ 845.792368][ C1] ? schedule+0x90/0x360 [ 845.796660][ C1] schedule+0x164/0x360 [ 845.800875][ C1] schedule_timeout+0x158/0x2c0 [ 845.805769][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 845.811178][ C1] ? __pfx_process_timeout+0x10/0x10 [ 845.816506][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 845.822355][ C1] ? prepare_to_swait_event+0x340/0x370 [ 845.827947][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 845.832855][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 845.839037][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 845.844348][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 845.849597][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 845.855452][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 845.860075][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 845.865304][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 845.871155][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 845.876139][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 845.881209][ C1] kthread+0x389/0x470 [ 845.885314][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 845.890542][ C1] ? __pfx_kthread+0x10/0x10 [ 845.895178][ C1] ret_from_fork+0x514/0xb70 [ 845.899807][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 845.904956][ C1] ? __switch_to+0xc79/0x1410 [ 845.909681][ C1] ? __pfx_kthread+0x10/0x10 [ 845.914306][ C1] ret_from_fork_asm+0x1a/0x30 [ 845.919127][ C1] [ 845.922174][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 845.928523][ C1] CPU: 1 UID: 0 PID: 18591 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 845.938090][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 845.948171][ C1] RIP: 0010:smp_call_function_many_cond+0xfcf/0x13d0 [ 845.954884][ C1] Code: 79 45 8b 2e 44 89 ee 83 e6 01 31 ff e8 9a 07 0c 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 45 03 0c 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 06 01 00 00 00 74 1e e8 2a 03 0c [ 845.974520][ C1] RSP: 0018:ffffc90004d3f7a0 EFLAGS: 00000293 [ 845.980627][ C1] RAX: ffffffff81b9b4a6 RBX: ffff8880b873c188 RCX: ffff88802f491f00 [ 845.988635][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 845.996637][ C1] RBP: ffffc90004d3f8e0 R08: ffffffff903022f7 R09: 1ffffffff206045e [ 846.004645][ C1] R10: dffffc0000000000 R11: fffffbfff206045f R12: 1ffff110170c8591 [ 846.012653][ C1] R13: dffffc0000000000 R14: ffff8880b8642c88 R15: 0000000000000000 [ 846.020651][ C1] FS: 0000555575c7f500(0000) GS:ffff88812539e000(0000) knlGS:0000000000000000 [ 846.029608][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 846.036223][ C1] CR2: 0000564809214288 CR3: 0000000028728000 CR4: 00000000003526f0 [ 846.044226][ C1] Call Trace: [ 846.047535][ C1] [ 846.050510][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 846.055750][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 846.061186][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 846.067553][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 846.072558][ C1] ? rcu_is_watching+0x15/0xb0 [ 846.077361][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 846.082768][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 846.088008][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 846.093156][ C1] flush_tlb_mm_range+0x5c3/0x10b0 [ 846.098311][ C1] ? __pfx___css_rstat_updated+0x10/0x10 [ 846.104010][ C1] tlb_flush_mmu+0x1af/0xa30 [ 846.108650][ C1] tlb_finish_mmu+0xf9/0x230 [ 846.113280][ C1] ? change_prot_numa+0x14c/0x410 [ 846.118339][ C1] change_prot_numa+0x357/0x410 [ 846.123226][ C1] ? mas_next_slot+0xc3b/0xd10 [ 846.128038][ C1] ? __pfx_change_prot_numa+0x10/0x10 [ 846.133467][ C1] ? vma_migratable+0x2f6/0x3e0 [ 846.138361][ C1] task_numa_work+0xc22/0x15a0 [ 846.143183][ C1] ? __pfx_task_numa_work+0x10/0x10 [ 846.148433][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 846.153672][ C1] task_work_run+0x1d9/0x270 [ 846.158309][ C1] ? __pfx_task_work_run+0x10/0x10 [ 846.163455][ C1] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 846.169220][ C1] exit_to_user_mode_loop+0x193/0x680 [ 846.174623][ C1] ? rcu_is_watching+0x15/0xb0 [ 846.179428][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.185528][ C1] do_syscall_64+0x353/0x580 [ 846.190146][ C1] ? trace_irq_disable+0x3b/0x140 [ 846.195205][ C1] ? clear_bhb_loop+0x40/0x90 [ 846.199914][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.205845][ C1] RIP: 0033:0x7fd84415d68e [ 846.210290][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 846.229923][ C1] RSP: 002b:00007fffabfbc6d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 846.238374][ C1] RAX: 0000000000000000 RBX: 0000555575c7f500 RCX: 00007fd84415d68e [ 846.246374][ C1] RDX: 00007fffabfbc730 RSI: 0000000000000000 RDI: 0000000000000000 [ 846.254373][ C1] RBP: 00007fffabfbc79c R08: 0000000000000000 R09: 0000000000000000 [ 846.262368][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000b7 [ 846.270366][ C1] R13: 000000000000001f R14: 00000000000ab492 R15: 00007fffabfbc7f0 [ 846.278383][ C1]