last executing test programs: 3.794349668s ago: executing program 1 (id=923): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x200, 0x8, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000010001fff0d00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32, @ANYBLOB="08000428a39b1756186a707a87f1eb2c51ad354163cab62d4be40c86bfc2ef3736d4b9ca875b74dce7afeba7287c49821701880514dc639306b425f525870a46ec0415b39db4bfcb7ddb80d9f92c"], 0x4c}}, 0x0) 3.549300584s ago: executing program 1 (id=927): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)=',', 0x1) (async, rerun: 64) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) r3 = accept(r1, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000300)=0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001840)={0x0}, &(0x7f0000001880)=0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f00000000c0)=r5, 0x4) r7 = getgid() (async, rerun: 32) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) (rerun: 32) close(r8) r9 = getpid() sendmsg$unix(r8, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='C', 0x1}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r9, 0x0, 0xee01}}}], 0x20, 0x10}, 0x80) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000018c0)=0x0) (async, rerun: 32) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001900)={0x0, 0x0, 0x0}, &(0x7f0000001940)=0xc) (rerun: 32) sendmmsg$unix(r3, &(0x7f0000001e40)=[{{&(0x7f0000000400), 0x6e, &(0x7f0000000340)=[{&(0x7f0000000480)="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", 0x1000}], 0x1, 0x0, 0x0, 0x20000010}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001480)="a734b4555664ed67562d7a837e06e27ec76f7f4f0780eea3c5a2fb0cab414b590f27aafe08b87a05ff840600", 0x2c}, {&(0x7f00000014c0)="50596ec138aadc5f76e73fdb92d6cf236e1cb1df5a1cecd7cd23173c7dc8975be3733422fda5228d47b2a6a696456a32994045e790d440066143618d819d1bdc606adebfc902e21aa30fbc10b12e52f7e2e15c3509e2f690198bbfa986774397b35ea509e9643385fb958c3dfa57357937c41fcb4be229ab55461192a13ca05ce0865334c3f8219b8154610f1bfbbffe21a3681f56ffb7e164fabfecb69ffc6548966369d08cbeded6be5f62a88237e28dfca2fedf2446159f5179e646cb07ca82d102fe6102269ae775c853584ef6ab680022892565af", 0xd7}, {&(0x7f00000015c0)}, {&(0x7f0000001600)="4f4f6c44e6ccaf3f56dfbcd925badbfd6a1128d3e1b7c23bf8ce3bf68b848f15f059ca2b901542a495ce04911a31734922f2dd423e3f51414c789f91f2cb086cc92621e392ab8fd8df4128fd1df6b189c9bc72d9dda253737bc1169a2beefcc598e871ef0fc4d52589f3833f1d1113cd734d3975a87bbf3fd2cf2d4a7bceb4e365fc7798842231ebe4a9a0cd04a3695cdb249620541d3d9497ba09198d6e0190700653ff", 0xa4}, {&(0x7f00000016c0)="01e4c85eaea4e316b9c6eb6b791cfea5778d64b194431cec07b5f264ce3b96689b052cc5fb4aea155da024a6f5ccce22c96ca6f1bda3e86b891d917276f65dd221ce875ac504d48a440bc3d812cbd16745c90507551599664dd2b2c77035b02f00fb633ecd55bc1ef21e854b63ebd4065eec6123b6eb3520ba341a105ab74a1bb0fbbdfb78b60acab0c309f273015df27b5880699bbaf6bd421d3cf9c8eaac724b044ee879b55ae171058952c8184700e53ccda87e2b98793090ac3b39495df15bf36a65db3d27faa806e4428017bac3dede04f982c42312d2b24b9e92e46ab46a1c3245158a56608bb2896b944a63", 0xef}], 0x5, &(0x7f0000001980)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xee01, r7}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}], 0x40, 0x44805}}, {{&(0x7f00000019c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001a40)="c194c4b357973e7d74922b3589a82b61b4905dca026dc5607fc1cf1ce8dfe995f759aea6b4429065aa839cd228e96495a4f6bfbae30cdb7dea69ba0a9967a640bd37e9", 0x43}, {&(0x7f0000001ac0)="116bcf4b72c53868db6d619923468d3c747621e8a3efa078e356d637e89bac1dde25fa6b4a580dcb1c1ab5365db1215d79cc77de855b1a4beec034bb31ce680904f76b45e02bf46e2d3e06769046b7e8ca06a58d1bebdbf5ea147b02583af6f727df889f43fdb451be9339a391f5cfe35653b99739c83bf8b4ab31bbbe7b7081b99939783b3cae07ce5b7dc99c16798f4bceb97ec34e2877e5f96e5113", 0x9d}, {&(0x7f0000001b80)="a1954b47784bd866abb6f2343f50882aa57730fdb8f526b06ed3db569803620d0bc7ff1e88dbae580ab854aae611ae4c8f563c20", 0x34}, {&(0x7f0000001bc0)="269e9055bd4b208ba9dceb2c742f24b1d132cca7470f5f20111fb207bab31b16aba331ffa158b5e0d112fe9385363e212b9eee6086bb9dd914cb1b27a26d1e29141957b525194ee62e89fbdd156d69b60ba1a1f2c0c8b287afba4048c3bb3d7f56ab", 0x62}, {&(0x7f0000001c40)="f37662f110428ea591fc02757704e6383c8a09abb7c0fddf70e4e74b0af7dac48dbbfe436848bc40d9dfe7f8f26c9b20acb0954be4feee522dfd20932f7c30d373ebc823960f94285caa1ed69abbb1dbbf8571f2c0e7383ec1ede31b2b961babbced4c23d62d44212daabddcba19fd0355b9182c6d39540b", 0x78}, {&(0x7f0000001cc0)="2a04abe420ca37be6cec02cd8f7ff8c99db5b43cda5b8d359c01e0c7621d93546f27bfe615c14fc1f58de62f52875d5db855590ec89f2bca12328b2b88ee36ce78199705c94697bf94a936b049a46d85c5c0a7500056f7f674f02a9bbcd2356bc96e5f8325391335179140ae52d8f7c75576cee813f01bbcab8f09bdac315648a0a198faa1667df5171564c4e595e427e3eb50d94f33d6823d6efbab49b02b64a8b5353cd004b5281a17870b70a4a84dc2b96c90fd0a1af773b98a30602f7957ca4ec9a384bc58cd7470de6938ab3bc83daee4b38e84944942f00ded1a8477f60d96cf76e3a9288e76e92b2c186ab55b10", 0xf1}], 0x6, 0x0, 0x0, 0x800}}], 0x3, 0x40000) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004"], 0x0, 0x34}, 0x28) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) r13 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000380)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r14, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006cef770aaa898bfffddb23aed73c6f6164"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 3.309702225s ago: executing program 1 (id=931): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3e000000020605000000000000000000000000000c0007800800060d0000000005000100060000000500050c39add9cdd1ebcb00000000000900020073797a3100000000150003ab25a0ee81e1b14858dcbeaf5653cb5800686173683a697000"], 0x50}}, 0x0) 3.06712114s ago: executing program 1 (id=937): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200004}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x188, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffa}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc4c2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xdd49}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7ff}}]}, 0x188}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000841) sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x3c}, @in=@local, {0x200000, 0x0, 0xffffffffffff7fff}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 2.697556716s ago: executing program 0 (id=944): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @address_request}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r3, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x11, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800900010068617368000000002c00028008000640e80000ff08000140000000030800044020000003080003400000000408000240000000120900010073797a30000000000900020073797a32"], 0x94}}, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r8}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r9, &(0x7f0000000140), 0x0}, 0x20) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r10, 0x12, 0x3, &(0x7f0000000140)=0x20, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100e70300000800034000000001140000001100010000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0xb, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) r11 = socket(0x10, 0x3, 0x0) sendto$inet6(r11, &(0x7f0000000640)="7800000018002502b9409b02ffff480002034e00000006050a08040c5c000900580004000a0000000d0085a168d0bf46d32345653600648d270005000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a000f4a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250049547f8afe08e040d97d842c23bc69b747b95ee7ec67bf56d43a306ffaad5d616fb95d40db158f09c7763fa0c83b2fc2392f82c5e0e0920f03608ccc159384007e55d563e4df230801a8cfee0652ab4ded652df13b6e9c4ee2ffe8aa0b30dd0a1c2014b7a4a2c8a7c3eea", 0xe3, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x44) 2.478865559s ago: executing program 4 (id=946): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x3, 0x7, 0x0, 'vlan0\x00', 'veth0_to_team\x00', 'ip6gre0\x00', 'team0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0xff, 0x0, 0xff], @local, [0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x1a6) getsockname$packet(r3, 0x0, &(0x7f0000000200)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x500, 0x0) ioctl$PPPIOCSDEBUG(r5, 0x40047440, &(0x7f0000000080)=0xff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061107e000000000095"], &(0x7f00000005c0)='GPL\x00', 0x5}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x8, 0x8080, 0x5, 0x623, {{0xb, 0x4, 0x1, 0x20, 0x2c, 0x64, 0x0, 0x0, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x2b}, {[@rr={0x7, 0x7, 0x2, [@broadcast]}, @rr={0x7, 0xf, 0xd5, [@local, @empty, @private=0xa010101]}, @noop]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@getqdisc={0x28, 0x26, 0x100, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x6cf6be980d305f1c}, {0x6, 0x4}, {0xfff2, 0x19}}, [{0x4}]}, 0x28}}, 0x0) 2.47438372s ago: executing program 0 (id=947): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x8, 0xfff1}, {0x2, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xb2b3, 0x5, 0xf88f}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x10) 2.277415495s ago: executing program 4 (id=950): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1407, 0x100, 0xfffffffd, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x60, 0x1}]}, 0x18}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x42, &(0x7f0000000040), 0x3b) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x8000, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002980)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000014}, 0x200e4040) ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f0000000540)={0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x3, '\x00', r8, r9, 0x5, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000140), &(0x7f0000000200)=@tcp6=r4, 0x2}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0x30) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000100)=0x421, 0x4) r10 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711734000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000300)=""/82, 0x32c000, 0x1000}, 0x20) unshare(0x20000400) sendmmsg$inet6(r11, 0x0, 0x0, 0x24040040) ioctl$sock_SIOCINQ(r10, 0x541b, &(0x7f0000003b80)) 2.156764474s ago: executing program 0 (id=952): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000dc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @fwd={0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x52}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x810) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r7, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8840) 1.918636264s ago: executing program 0 (id=955): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0xfffffffffffffe52, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x14, 0x0, 0x1, [@generic="b0"]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r5 = accept$alg(r0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x8, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) sendmmsg$alg(r5, &(0x7f0000003f40)=[{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)='g', 0x1}], 0x1, 0x0, 0x0, 0x4008801}], 0x1, 0x20008084) accept4$ax25(r5, 0x0, 0x0, 0x80800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac14141500f33948495b67b7000000000000080000000000000005000000000a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001000000000000004400050000000000000000000000000000000000000004d23c00000000000000ffffffff00000000000000000000000000000000000300004900"/180], 0xfc}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000440), r7) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000200)={0x20, r8, 0x539, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040840}, 0xc840) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r11 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r11, &(0x7f0000000800)=[{{&(0x7f0000000280)={0xa, 0x0, 0x2, @mcast2, 0x5}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000580)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xe}}], 0x18}}], 0x1, 0x40000000) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x20008b88) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 1.867117911s ago: executing program 2 (id=956): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000011c0)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000500000000060015000700000018001680bd"], 0x3c}}, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='net_cls.classid\x00', 0x2, 0x0) poll(&(0x7f0000000040)=[{r1, 0x8}, {r0, 0xc004}, {r0, 0x20}], 0x3, 0x3) (async) poll(&(0x7f0000000040)=[{r1, 0x8}, {r0, 0xc004}, {r0, 0x20}], 0x3, 0x3) 1.865062045s ago: executing program 4 (id=957): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) r2 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) readv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r4) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r5, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x480c6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 1.787487555s ago: executing program 1 (id=958): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet6_int(r1, 0x29, 0x1, &(0x7f0000000440), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000), 0x4) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 1.69215728s ago: executing program 2 (id=960): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x40, 0x25dfdbfb, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r4, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x74, 0xb, 0x6, 0xb00, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x40, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xb}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0xfffffffffffffec4, 0xb, 0x1, 0x0, 0xfffffffd}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000004}, 0x41) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_delrule={0x1c, 0x21, 0x121, 0x70bd2d, 0x0, {0xa, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x8044) 1.398874374s ago: executing program 2 (id=962): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x20000328) bind$packet(r1, &(0x7f0000000080)={0x11, 0x4, r2, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xffff}, {0xfff1, 0xa}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x40000) 1.33695344s ago: executing program 3 (id=963): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x80, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x26, 0xffff, 0x9, 0x2, 0x2, 0x8, 0x2}}, {0x8, 0x2, [0x6, 0x6]}}, {{0x1c, 0x1, {0x4, 0xc, 0x7f, 0x8, 0x0, 0x10, 0x3, 0x1}}, {0x6, 0x2, [0x5fd]}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8800}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0xca, &(0x7f0000000340)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x1c, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r4, 0x4) r5 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='T'], 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x1e}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100766574680000000004000280090029000000000008001b0000000000"], 0x44}}, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000140)=0x8) 1.126234799s ago: executing program 2 (id=964): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x6, 0xf1ffffff, 0x2}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) shutdown(r1, 0x0) socket(0x2b, 0x2, 0x2) 942.626024ms ago: executing program 2 (id=965): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c0e0}, 0x20004080) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_hci(r0, 0x0, 0x2fe2f7675ab6245b, &(0x7f0000000200)=""/227, &(0x7f0000000000)=0xe3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) pread64(r2, &(0x7f0000000b40)=""/4096, 0x1000, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, 0x7, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000100}, 0x24000000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 940.007645ms ago: executing program 3 (id=966): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r1 = socket$inet(0xa, 0x801, 0x84) (async) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="f7c947c9", @ANYRES16=r5, @ANYBLOB="010029bd7000fedbdf250200000008000100", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) (async) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r4], 0x4) (async) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, 0x0) (async) listen(r1, 0xffffffff) (async) sendto$inet6(r0, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) (async) close(r0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f0000000040)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850900000000204244e94ec10b2600009510f34fd4b641526061a465b3c55eaced845f21511298b61e60c3fe8dc23d8b3883635b633ffb8191b69e47c7259d4c1d70c7069c256c87e8cbe4abac589289f39758094bafd066"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000018000000000000000300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000596ce5f7535c3b428539000083000000bf090000000000005509010000006f26381bc200009500000000000000bf91000000000000b702000003000000850000008500000000000095000000000000002bd228caf810550d00ac82c6891147a27fc3fcc3b57f25009fad0a3c7d19ab4026c2d6e5dd1d375e45108f7e8dd64888d604680fd20f30200240b6cdb4404cfd8e0e9737b8b8c8d29d6efecc674ad40d292b990ccba34bdeadb320890ccec6794ad21b9e3babadba443fa655227e6d03e09d1e68acc194908cfb3553f1e3d15492822f32198c8b6edd8718153c6ac7"], &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40}, 0x94) (async) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x0, 0x10001}, 0xc) r10 = socket(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_plug={{0x9}, {0x4}}]}, 0x60}}, 0x0) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f00000002c0)={@mcast2, 0x3b, r12}) (async) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x82, 0x7, 0xfffffffb, 0x1, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1, 0x7800, 0x2000000, 0x3}}) ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f00000000c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x21, r14}) 734.444756ms ago: executing program 4 (id=967): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@ldst={0x4, 0x0, 0x2, 0x0, 0x0, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0xe, 0xc7, &(0x7f0000000080)=""/199, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9e5}, 0x1c, 0x0, 0x0, &(0x7f00000012c0)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x31}}}}], 0x28}}], 0x1, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @local}}}}}, 0x0) (async) syz_emit_ethernet(0x22, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @local}}}}}, 0x0) 633.032431ms ago: executing program 1 (id=968): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000b575cb2398001001000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r0, 0x0, 0x47, 0x68, &(0x7f0000000540)="4309b0297bec129ccda6dee6ae911785810b4669b07c88d39d40749da78908e93662e61e3d220546774316fd7aa73c186c322823dcffe09af317a814b483eb436e33c5a499fef9", &(0x7f00000008c0)=""/104, 0xfffffffb, 0x0, 0xec, 0x0, &(0x7f0000000940)="2e58f5579424269d58e31c31814382bfa8266643df79ffc1762958d4a79ad151064b41572fd7b1c0655e30ef8c1f794ec5ad76efa382ff9e1caa0fc002e0d0abc6bf9f2e704853521d6c452ecd7e121049874d12e3aa475d17e313b7c99fd2fd64cbc8cdc2ead4d92f730c124b23a0190682129bcc0987e4ef6ca0ecd1c5db7d2e8487144a88e7d6a36885877acb4059bfdd753bff4cd896814b82d60c951ccce94d1a3d38e6d1643bbd120432b19678987e954057d2eb927138a59fdd02d2d52a4aff06ffa4c1ab55f7da31b75f5915d4c8808181e8234c16335986814864f84e4cb7e07e66e86b014a4e47", &(0x7f0000000a40), 0x1, 0x0, 0x8}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000220}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000220}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r3], 0x30}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x0, 0x0, r1, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) socket$inet_udplite(0x2, 0x2, 0x88) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'dummy0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000480)={r2, 0x6, 0x7, 0x10001}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000480)={r2, 0x6, 0x7, 0x10001}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x1000, '\x00', r7, r9, 0x3, 0x5, 0x1}, 0x50) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r10 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@vsock, &(0x7f0000000000)=0x80, 0x800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000140)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@private2}}, {{@in=@private}, 0x0, @in6=@private0}}, &(0x7f00000003c0)=0xe8) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private0}}, &(0x7f00000003c0)=0xe8) sendmsg$nl_xfrm(r10, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="84010000210042992abd7000ffdbdf2564010100000000000000000000000000fe80000000000000000000000000001b4e2300094e2401e00200a08000000000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x4}, 0x24000004) 514.18343ms ago: executing program 0 (id=969): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003440)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0xfe, 0x3, 0x20001800}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x27}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004090) (async) r1 = socket(0x1e, 0x5, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x22}, @private1={0xfc, 0x1, '\x00', 0x7}, [0x0, 0xff, 0xffffff00, 0xff000000], [0x0, 0xff000000, 0x0, 0xff], 'veth0_vlan\x00', 'veth0_to_team\x00', {}, {}, 0x2f, 0x1, 0x1, 0x1}, 0x0, 0xd0, 0xf8, 0x60030000, {0x0, 0xff000000}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r3 = socket(0x1e, 0x805, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'pimreg1\x00', @broadcast}) sendmsg$tipc(r3, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) 450.586285ms ago: executing program 3 (id=970): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r1, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="620ac4ff000000007110ac000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) 439.362318ms ago: executing program 4 (id=971): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x17}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x401}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20024000}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r3, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x48, 0xa8, @random="f5f19e0eac344169b887a31089f054f4ba15f917eafe9a65382790c588a32c4900a2cf74b617896defaeaca73eb1d8d44a0567da0e1c6b2cf7acede8dcaa2365a7d05214"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x80000001}]}, 0x68}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) bind$rds(r0, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x2}) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x202448}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x15, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) recvmsg$unix(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)=""/204, 0xcc}, {&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/109, 0x6d}, {&(0x7f0000000740)=""/47, 0x2f}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x5, &(0x7f0000001800)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x98}, 0x0) ioctl$XFS_IOC_GETBMAPX(r6, 0xc0205838, &(0x7f0000001900)={0x7, 0xed1d, 0x0, 0xfaa, 0x5, 0x20, 0x2}) syz_open_procfs$namespace(r8, &(0x7f0000001940)='ns/time_for_children\x00') ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000001980)={0x0, @vsock={0x28, 0x0, 0x0, @my=0x1}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x4, 0x1}}, @generic={0x1e, "8e05a22b0f624633ff0f33c57c1d"}, 0xb, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7f, 0x5, 0x1ba4}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x3, &(0x7f0000001a00)=""/66, &(0x7f0000001a80)=0x42) r10 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001ac0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r7, 0x4058587a, &(0x7f0000001cc0)={{r6, &(0x7f0000001b40)=':)*\\\x00', 0x40000, &(0x7f0000001b80)={@_ha_fsid={[0x7d5b4d99, 0x5]}, {0x200, 0x800, 0x6d91209, 0x435}}, 0x5, &(0x7f0000001bc0), &(0x7f0000001c00)=0x40}, {[0x2, 0x0, 0x4, 0x4]}, 0x1, 0x42, &(0x7f0000001c40)=""/66}) syz_genetlink_get_family_id$ipvs(&(0x7f0000001b00), r11) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r12, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x4c, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x515, 0xfff3, 0x6]}, @NL80211_ATTR_STA_CAPABILITY={0x6}, @NL80211_ATTR_STA_WME={0x24, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xf2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8d}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x80}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2404c805}, 0x20000080) socket$nl_generic(0x10, 0x3, 0x10) r13 = accept4$packet(0xffffffffffffffff, &(0x7f0000001e80), &(0x7f0000001ec0)=0x14, 0x100000) sendmsg(r13, &(0x7f0000003240)={&(0x7f0000001f00)=@pppoe={0x18, 0x0, {0x2, @empty, 'bond_slave_0\x00'}}, 0x80, &(0x7f0000003140)=[{&(0x7f0000001f80)="26118d0f221b19c604427af0428873e20dbfdf6b1c29190d0842a1a9985d44e7b2091ad63a99083c6a513d95f3e7d65240d0c549a10b805fd2", 0x39}, {&(0x7f0000001fc0)="f7332ed042419de211a1262fd7a9987e10b843e08e29d58e886e080e5792110c2a7310f831fe6fd8e1a8f126d961a234ccbb1a55e5c9dd064ab9184a2796bbadd883bc33e6888c0118ff0127a4c70543b590c507d397c5632ef49adc0a176211a05b2952dfde046a08f0c58ca936f7b0bce7ebfad99e9415d836b40ba1e7a938cc16669270ff155b72ff4a63cd10016f31e705a4042b4eec846b5647963539bff795e073665f97f9d706c5dc04d318402fe426a0a1bb6c2cb0c8f59ac5965cfb2490601829d5c3aede0df3ed0798c6a5a3b3bb814ee1bfa5cd813036f027da68c0a0349251b86098693f6e4ce8bde29e", 0xf0}, {&(0x7f00000020c0)="7a459cec60e6be83eae8c9c1e27d3042ccf6f35799e12be538acb759ead7aee3114e538f4a63de7ac8a93fe33db84c6be95f1e3d3752393fc67133d9067d6bf44d0a187040d9b1957335ca31b276", 0x4e}, {&(0x7f0000002140)="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", 0x1000}], 0x4, &(0x7f0000003180)=[{0x88, 0x103, 0x5, "c0261ddf71b88c209184b9f3d81bd7e7597b8fe06438a34c9275e7ccd8515163f2409b151ee8144acbe6dfa0bc9568d63d62bf02bc8b3bb26a1aa75cae6b26a8593a0ca9fc194763ac99b0e84d5092e6dc35680bd8619d9d8a6320ca8123510cea9ae18f360a16cd37e99f1731aa3f1b1d64b8e8bb108f9c"}], 0x88}, 0x10010) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000003280)={'wlan1\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000003440)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003400)={&(0x7f0000003300)={0xd0, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x8000) recvmsg$unix(r0, &(0x7f0000004bc0)={&(0x7f0000003480), 0x6e, &(0x7f0000004a80)=[{&(0x7f0000003500)=""/177, 0xb1}, {&(0x7f00000035c0)=""/188, 0xbc}, {&(0x7f0000003680)=""/202, 0xca}, {&(0x7f0000003780)=""/7, 0x7}, {&(0x7f00000037c0)=""/74, 0x4a}, {&(0x7f0000003840)=""/170, 0xaa}, {&(0x7f0000003900)=""/148, 0x94}, {&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000049c0)=""/172, 0xac}], 0x9, &(0x7f0000004b40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}, 0x10060) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r14, &(0x7f0000004d00)={&(0x7f0000004c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004cc0)={&(0x7f0000004c40)={0x64, 0x0, 0x9, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @empty}}}]}]}, 0x64}}, 0x4881) 287.105769ms ago: executing program 2 (id=972): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x0, 0xd}}}, 0x24}}, 0x4000000) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000200)=[{&(0x7f00000003c0)=""/158, 0x9e}, {&(0x7f00000005c0)=""/150, 0x96}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, &(0x7f0000000540)=""/74, 0x4a}, 0x10000) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) 241.663494ms ago: executing program 3 (id=973): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000001c0)={r0, &(0x7f0000000040)='\x00', 0x180, &(0x7f0000000080)={@_ha_fsid={[0x1, 0x3]}, {0x7, 0x7, 0x80000000, 0x64bfc293}}, 0x2, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000140)=0x100}) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000001c0)={r0, &(0x7f0000000040)='\x00', 0x180, &(0x7f0000000080)={@_ha_fsid={[0x1, 0x3]}, {0x7, 0x7, 0x80000000, 0x64bfc293}}, 0x2, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000140)=0x100}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES8=r1], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x401) listen(r0, 0x0) (async) listen(r0, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) shutdown(r0, 0x0) 162.44546ms ago: executing program 4 (id=974): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x27, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100004000"/20, @ANYRES32=0x0, @ANYBLOB="041004000000000008000400f903000008001b0000000000"], 0x30}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000080)=r4) 111.415475ms ago: executing program 0 (id=975): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000480)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000), 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001c40)={{0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x40, &(0x7f00000000c0)={@_ha_fsid={[0x5, 0xffffffff]}, {0x0, 0x5, 0x4, 0x1000}}, 0xfffffffe, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x5}, 0x9, &(0x7f0000001b00)=[{0x1, 0x8, &(0x7f00000001c0)=')%\xda\x8d$]\x00', &(0x7f00000002c0)="0f0580e4e9105ddaa1837aef3bef902895fe2f2382f66a4ad89f801fdf574ff55e5f510d8aea9e7a35692db5636eff77e04395920c9a3a0f19ac56a840ace3a8c262ce2e1da69206ce773fd06a1860d59784254f8aca07a4a0721d8ac271f947a6edf4b48ebcf39f191d680184f6a9c19add415a18be811972c1ec5f2cde79d36f04c659cb5901ecae5564fb8a28e8361a82d7ff78926a052cefea820cefab531b719a2102db24", 0xa7, 0x20}, {0x1, 0x0, &(0x7f0000000380)='\x00', &(0x7f00000003c0)="ea8ce808f7297390f12dfb3ea35918bda34d490ee30a4a920b8f90e14cae726ac5566dcb0882634d0df198ca79b019e199057d4d802acec885be2407c8ec9397e96a7f665ffd0374f5bb2a496129ebdeeb08221b992a5143b8f9b6be0aa69d1f6a5fe366c95b3263accbf6729fadd96e284bc42a4a170dd3a15f4ebda8c414e87b32e0fb3a608afca8ba98eea2bc5b61c41d7b62e28b20801bc3af62d23ae51978ef7d3f", 0xa4, 0x8}, {0x3, 0x800, &(0x7f0000000480)='-\xf5]c-]+%)^\\\x00', &(0x7f00000005c0)="d329aff0446804b46cf196f60844b96e1f0156de70912bf57513f6c01b539a991a2e9511d0a7cb386a974b492dd7cf77bdcfc76a35b5dc0b72b0db5c00b7ce256671317c92f5869a1f9abc010fe1a254054062f3f1328136a6f033c6221ce5ba759d494658569693261320404b6c65b23715a9234a3303e09624b91da60aeb8959e1c0c20ffbaf6d8cf53422ef7ca7d5f08269a81b69160c6d3210da1cbe165978becf2a0fcd12c2240ff801f6985b35a18c8bafe5f0ec2036884fc99d6e87a56cbe", 0xc2, 0x2}, {0x2, 0x30, &(0x7f00000004c0)='\x00', &(0x7f00000006c0)="2ae6100a7e5bdf477fbf3b12ae400b30b4d443dda2d9e9fb7f06a1303bd1c2d316a4d908d01f315015aebad39b575f8106ae0f6eebaf6914a7578cdace506361f2c62665383ce4fcf8482b13a16ffbd893afeb1fd5919d5cadb2589c4708d3bd06f816e36aba4ef4309bd1bebc75c09ab167335ae7f5ded8b747b7d0775d6b7d78928acbedd873aa03a5302a730b1da2580695d1dde444718451b81a1e944ed878c2eaab5f00c7f4a5099cc4fdb21a74a794d2c41ff8c10023a82da72bcea5", 0xbf, 0x12}, {0x2, 0x400, &(0x7f0000000500)='&\x00', &(0x7f0000000780)="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", 0x1000, 0x10}, {0x3, 0xfffffbff, &(0x7f0000000540)='\x00', &(0x7f0000001780)="6d818d45e3b00736f9c34ac2fa7fcedcff5501e602ca610f6944b93c1c92bd5a440b65354f873a8567f34639d73c0290153d3eeaac54aafa1b961e723a41e4cb90286e8e57efc54eae0dbdf6278eff64fff8da46916f26622657084d8aa56ddd7dae9aa751f453920500f5982bfb6d6ab476e783374d5f2de90b24fd92c9923cb7c35fb0db236c133e515d643ffdd0ec6b5db3e146312ba213acd0aded4b2a587fec96bfc8a2469f5fc51f733b1925f2793146fef3a2677773eafa8fe2baf600a10200000058a1424849adfff0fa4a2a8e119e9d3d23433b1ea90bbbeab9dc878bdf39419371227b567566", 0xeb, 0x2}, {0x1, 0xff, &(0x7f0000001880)='\x00', &(0x7f00000018c0)="62d9f608a6a175bd98df1e11", 0xc, 0x10}, {0x2, 0x7, &(0x7f0000001900)='+#^\\][@s\x00', &(0x7f0000001940)="6ae7d3bb92eeeae4cc05d1bd05a9f04e82b13a06a7456818c55fad42ebc17fca66d718d3605605584d0973e8a91b69662a5633f9ffc2e8b8a38b42f0a4e52b496b31582f9bcc3a92689fa37d4821572355714e54852a2e467bd3e82d70699af13f95fec042d791e19641d0981707efec6cfa67fcfb8224a47c610be80066e715c45bc1bfc241b76397a286fe785660d506a0e4c38e351962a021d4560bb8052ee672", 0xa2, 0x10}, {0x3, 0x9, &(0x7f0000001a00)='+\\%\x00', &(0x7f0000001a40)="4801d46c3cc487e52169513d511041b4e329e37069382eb9d54bcfa12fa540e77f814c095f3b8364064e88b18ab643ca2c368d7c2af86951a87eb53e30a7c333f4068aafda055a52f610f64708ac79f51e15854a8ffed3492196161d4bc7435a64acb3c09ca788348b4bc9cd95a7053684794a34b41829623c0822af18dd2c625885f9e8b1780564f83840de10a9e3ea1f03866ec16e6cdab6e6e6139abf14", 0x9f, 0x12}]}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$caif_stream(0x25, 0x1, 0x2) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000046f5ffffffffffff0000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000fffffffc3c0000"], 0xfc}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f00000000c0), &(0x7f0000000300)}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f0000007cc0)=@generic={&(0x7f0000007c80)='.\x00', 0x0, 0x10}, 0x18) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="ec000000210001000000000000000000e0000001000000000000000000000000fc02000000000000000000000000000000000000000000000a00e0003b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe8000000000000000000000000080bbfe8000000000000000000000000000aaac1e0001000000000000000000000000ac1e000100000000000000000000000032010000023500000a00080000000000000000000000ffff7f000001ff0100000000000000000000000000017f000001000000000000000000000000fc0200000000000000000000000000003c0000000000000008000a00"], 0xec}, 0x1, 0x0, 0x0, 0xd1}, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0xd, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0xd, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000140)=@mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @broadcast, @initial, {0x0, 0x8}, @value=@ver_80211n={0x0, 0xed, 0x0, 0x3, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x0, 0x1, 0x63, @val={0x10, 0x1, 0xe0}}, 0x25) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) listen(r10, 0x0) ioctl$sock_SIOCOUTQ(r10, 0x5411, 0x0) write$bt_hci(r9, &(0x7f0000000580)=ANY=[@ANYBLOB="3500000002"], 0x8) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000001cc0)={0x84, @empty, 0x4e22, 0x3, 'ovf\x00', 0xa, 0x9, 0x3b}, 0x2c) 95.883527ms ago: executing program 3 (id=976): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5", 0xc2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x0, &(0x7f0000000080), &(0x7f00000000c0)='GPL\x00', 0x39b, 0x1e, &(0x7f0000000100)=""/30, 0x6e67658344cb5cda, 0x24, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000001c0)=[{0x3, 0x2, 0xb, 0x4}, {0x4, 0x4, 0xc, 0xc}, {0x2, 0x3, 0x3, 0x8}, {0x4, 0x2, 0xb, 0xb}, {0x1, 0x4, 0x5, 0x3}], 0x10, 0x100}, 0x94) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x25, 0x0, 0x0, 0x8003f}, {0x6, 0x2, 0x9, 0xfdfffff7}]}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) (async) writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5", 0xc2}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x0, &(0x7f0000000080), &(0x7f00000000c0)='GPL\x00', 0x39b, 0x1e, &(0x7f0000000100)=""/30, 0x6e67658344cb5cda, 0x24, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000001c0)=[{0x3, 0x2, 0xb, 0x4}, {0x4, 0x4, 0xc, 0xc}, {0x2, 0x3, 0x3, 0x8}, {0x4, 0x2, 0xb, 0xb}, {0x1, 0x4, 0x5, 0x3}], 0x10, 0x100}, 0x94) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x25, 0x0, 0x0, 0x8003f}, {0x6, 0x2, 0x9, 0xfdfffff7}]}, 0x10) (async) 0s ago: executing program 3 (id=977): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000140)) socket$inet6(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b70400", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [r9]}}], 0x18}, 0x800) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x2}]}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a030000000000000000000100000808000240000000050900010073797a300000740028000000000a0104"], 0x78}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000080) r12 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x4020940d, &(0x7f0000000000)={'vcan0\x00'}) recvmmsg(r10, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}, 0xfffffffe}], 0x1, 0x0, 0x0) r13 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002740)={0x14, r13, 0x79964d8cba2f455d, 0xa070bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040005}, 0x24004801) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2b97cbcfb961eb08000000000000c255786230c914fca79982e899e68cae4b3a8dc2965dfe58", @ANYRES16=r13, @ANYBLOB="020025bd7000fddbdf25020000000c00020006000000000000000c0003001204000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0xf88d5c9b0ad4222}, 0x20008010) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.170' (ED25519) to the list of known hosts. [ 80.823137][ T5813] cgroup: Unknown subsys name 'net' [ 80.973216][ T5813] cgroup: Unknown subsys name 'cpuset' [ 80.982438][ T5813] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.607682][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.311082][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.319968][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.328106][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.336574][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.344482][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.354725][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.368247][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.382995][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.403347][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.414260][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.414421][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.430146][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.442944][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.460594][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.469549][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.501705][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.510308][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.530107][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.537445][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.549588][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.557704][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.560668][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.572647][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.581259][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.589642][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.216393][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 87.305752][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 87.353180][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 87.501555][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.508796][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.517059][ T5826] bridge_slave_0: entered allmulticast mode [ 87.524300][ T5826] bridge_slave_0: entered promiscuous mode [ 87.560900][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.568081][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.575333][ T5826] bridge_slave_1: entered allmulticast mode [ 87.582374][ T5826] bridge_slave_1: entered promiscuous mode [ 87.642618][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.650269][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.657873][ T5830] bridge_slave_0: entered allmulticast mode [ 87.674860][ T5830] bridge_slave_0: entered promiscuous mode [ 87.698800][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.707073][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.714836][ T5834] bridge_slave_0: entered allmulticast mode [ 87.723905][ T5834] bridge_slave_0: entered promiscuous mode [ 87.746913][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.754314][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.762156][ T5830] bridge_slave_1: entered allmulticast mode [ 87.770514][ T5830] bridge_slave_1: entered promiscuous mode [ 87.805711][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.813984][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.821243][ T5834] bridge_slave_1: entered allmulticast mode [ 87.828255][ T5834] bridge_slave_1: entered promiscuous mode [ 87.859767][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.887309][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.903788][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.915295][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.925025][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 87.938204][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.956435][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 87.970201][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.059537][ T5834] team0: Port device team_slave_0 added [ 88.076808][ T5830] team0: Port device team_slave_0 added [ 88.085201][ T5826] team0: Port device team_slave_0 added [ 88.102462][ T5834] team0: Port device team_slave_1 added [ 88.123489][ T5830] team0: Port device team_slave_1 added [ 88.136747][ T5826] team0: Port device team_slave_1 added [ 88.202714][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.210115][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.236462][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.275042][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.282232][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.308788][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.321167][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.328159][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.358074][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.385803][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.392903][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.420421][ T5829] Bluetooth: hci0: command tx timeout [ 88.426010][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.448134][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.455374][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.481499][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.499963][ T5829] Bluetooth: hci1: command tx timeout [ 88.516363][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.523638][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.549929][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.569335][ T5829] Bluetooth: hci2: command tx timeout [ 88.601429][ T5834] hsr_slave_0: entered promiscuous mode [ 88.607814][ T5834] hsr_slave_1: entered promiscuous mode [ 88.614751][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.622409][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.630066][ T5837] bridge_slave_0: entered allmulticast mode [ 88.637140][ T5837] bridge_slave_0: entered promiscuous mode [ 88.649292][ T5829] Bluetooth: hci4: command tx timeout [ 88.649677][ T52] Bluetooth: hci3: command tx timeout [ 88.663139][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.671019][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.678163][ T5840] bridge_slave_0: entered allmulticast mode [ 88.685338][ T5840] bridge_slave_0: entered promiscuous mode [ 88.713701][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.721015][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.728140][ T5837] bridge_slave_1: entered allmulticast mode [ 88.735500][ T5837] bridge_slave_1: entered promiscuous mode [ 88.752408][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.759737][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.766981][ T5840] bridge_slave_1: entered allmulticast mode [ 88.774233][ T5840] bridge_slave_1: entered promiscuous mode [ 88.798641][ T5826] hsr_slave_0: entered promiscuous mode [ 88.805055][ T5826] hsr_slave_1: entered promiscuous mode [ 88.811641][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 88.817551][ T5826] Cannot create hsr debugfs directory [ 88.895271][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.907463][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.925305][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.976324][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.997299][ T5830] hsr_slave_0: entered promiscuous mode [ 89.004229][ T5830] hsr_slave_1: entered promiscuous mode [ 89.010365][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 89.016093][ T5830] Cannot create hsr debugfs directory [ 89.064829][ T5837] team0: Port device team_slave_0 added [ 89.111252][ T5837] team0: Port device team_slave_1 added [ 89.125066][ T5840] team0: Port device team_slave_0 added [ 89.133863][ T5840] team0: Port device team_slave_1 added [ 89.242167][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.249447][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.275540][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.294509][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.301594][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.328223][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.353468][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.360649][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.389204][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.411800][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.418773][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.445082][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.617352][ T5840] hsr_slave_0: entered promiscuous mode [ 89.624393][ T5840] hsr_slave_1: entered promiscuous mode [ 89.630909][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 89.636659][ T5840] Cannot create hsr debugfs directory [ 89.658523][ T5837] hsr_slave_0: entered promiscuous mode [ 89.664871][ T5837] hsr_slave_1: entered promiscuous mode [ 89.671396][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 89.677128][ T5837] Cannot create hsr debugfs directory [ 89.829344][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.842948][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.878445][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.889006][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.032625][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.052555][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.063469][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.081077][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.177798][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.198010][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.207958][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.220684][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.347542][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.361557][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.392333][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.421770][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.430340][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.489395][ T52] Bluetooth: hci0: command tx timeout [ 90.517529][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.526954][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.542129][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.550654][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.563677][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.579263][ T52] Bluetooth: hci1: command tx timeout [ 90.593028][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.600460][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.616112][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.645048][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.652215][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.660123][ T52] Bluetooth: hci2: command tx timeout [ 90.684814][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.725456][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.729372][ T52] Bluetooth: hci3: command tx timeout [ 90.732663][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.745670][ T52] Bluetooth: hci4: command tx timeout [ 90.784517][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.791660][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.825683][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.974660][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.028102][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.035353][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.057346][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.076295][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.083642][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.145016][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.178076][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.225871][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.233368][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.261901][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.292690][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.310905][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.318040][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.350335][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.437665][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.445019][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.503213][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.510484][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.534818][ T5826] veth0_vlan: entered promiscuous mode [ 91.552262][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.625129][ T5826] veth1_vlan: entered promiscuous mode [ 91.673488][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.716852][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.746754][ T5834] veth0_vlan: entered promiscuous mode [ 91.815582][ T5834] veth1_vlan: entered promiscuous mode [ 91.842617][ T5826] veth0_macvtap: entered promiscuous mode [ 91.872284][ T5826] veth1_macvtap: entered promiscuous mode [ 91.933477][ T798] cfg80211: failed to load regulatory.db [ 91.986005][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.023421][ T5834] veth0_macvtap: entered promiscuous mode [ 92.057277][ T5834] veth1_macvtap: entered promiscuous mode [ 92.086976][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.135158][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.157582][ T72] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.182858][ T72] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.223547][ T72] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.258774][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.268958][ T72] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.296149][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.322621][ T1160] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.335835][ T1160] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.360018][ T72] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.376390][ T1160] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.393819][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.533595][ T5830] veth0_vlan: entered promiscuous mode [ 92.555851][ T5837] veth0_vlan: entered promiscuous mode [ 92.567650][ T5840] veth0_vlan: entered promiscuous mode [ 92.574225][ T52] Bluetooth: hci0: command tx timeout [ 92.613774][ T5830] veth1_vlan: entered promiscuous mode [ 92.631388][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.642440][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.647065][ T5840] veth1_vlan: entered promiscuous mode [ 92.659313][ T52] Bluetooth: hci1: command tx timeout [ 92.672241][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.690380][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.700539][ T5837] veth1_vlan: entered promiscuous mode [ 92.729664][ T52] Bluetooth: hci2: command tx timeout [ 92.773083][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.784839][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.790280][ T5830] veth0_macvtap: entered promiscuous mode [ 92.803951][ T5830] veth1_macvtap: entered promiscuous mode [ 92.810487][ T52] Bluetooth: hci4: command tx timeout [ 92.810494][ T5829] Bluetooth: hci3: command tx timeout [ 92.843195][ T5840] veth0_macvtap: entered promiscuous mode [ 92.855198][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.855829][ T5840] veth1_macvtap: entered promiscuous mode [ 92.883480][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.919567][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.971887][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.003150][ T5837] veth0_macvtap: entered promiscuous mode [ 93.020483][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.052910][ T5837] veth1_macvtap: entered promiscuous mode [ 93.083410][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.115822][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.152446][ T5940] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 93.155248][ T5942] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.201467][ T72] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.232674][ T72] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.251852][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.263348][ T72] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.304153][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.326338][ T72] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.344616][ T5947] syz.2.6 uses obsolete (PF_INET,SOCK_PACKET) [ 93.345098][ T72] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.391516][ T72] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.407512][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7'. [ 93.421462][ T72] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.434652][ T5946] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 93.472593][ T72] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.490509][ T72] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.515179][ T72] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.526578][ T72] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.564992][ T72] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.638661][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.662618][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.804167][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 93.813402][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.823381][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.832848][ T5961] netlink: 'syz.3.9': attribute type 5 has an invalid length. [ 93.843164][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.859493][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.868459][ T5961] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9'. [ 93.927699][ T5961] geneve2: entered promiscuous mode [ 93.933464][ T5961] geneve2: entered allmulticast mode [ 93.961767][ T72] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 93.979527][ T5966] netlink: 'syz.2.10': attribute type 1 has an invalid length. [ 94.001629][ T72] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 94.047513][ T72] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 94.060143][ T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 94.080100][ T5965] bridge0: port 3(veth0_to_bond) entered blocking state [ 94.091679][ T5965] bridge0: port 3(veth0_to_bond) entered disabled state [ 94.098856][ T5965] veth0_to_bond: entered allmulticast mode [ 94.128488][ T5965] veth0_to_bond: entered promiscuous mode [ 94.172710][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.195355][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.222743][ T5965] : entered promiscuous mode [ 94.243535][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.268001][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.321688][ T5965] bridge0: port 4(bond1) entered blocking state [ 94.330961][ T5965] bridge0: port 4(bond1) entered disabled state [ 94.338360][ T5965] bond1: entered allmulticast mode [ 94.345382][ T5965] bond1: entered promiscuous mode [ 94.509795][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.525961][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.529524][ T5982] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.609018][ T5982] netlink: 'syz.4.5': attribute type 18 has an invalid length. [ 94.651067][ T52] Bluetooth: hci0: command tx timeout [ 94.729342][ T52] Bluetooth: hci1: command tx timeout [ 94.809685][ T52] Bluetooth: hci2: command tx timeout [ 94.896411][ T52] Bluetooth: hci4: command tx timeout [ 94.899650][ T5829] Bluetooth: hci3: command tx timeout [ 95.124293][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18'. [ 95.332422][ T5999] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16'. [ 95.382967][ T5999] Zero length message leads to an empty skb [ 95.989644][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24'. [ 96.004172][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24'. [ 96.061344][ T6031] pimreg: entered allmulticast mode [ 96.261177][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 96.354128][ T6042] netlink: 'syz.3.26': attribute type 8 has an invalid length. [ 96.570529][ T6057] netlink: 'syz.3.32': attribute type 3 has an invalid length. [ 96.600189][ T6055] netlink: 20 bytes leftover after parsing attributes in process `syz.1.31'. [ 97.463191][ T6047] infiniband syz0: set active [ 97.489213][ T6047] infiniband syz0: added bond0 [ 97.514598][ T6047] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 97.524991][ T6047] infiniband syz0: Couldn't open port 1 [ 97.578931][ T6101] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:8192 [ 97.683603][ T6047] RDS/IB: syz0: added [ 97.688096][ T6047] smc: adding ib device syz0 with port count 1 [ 97.739777][ T6047] smc: ib device syz0 port 1 has no pnetid [ 97.776924][ T6107] netlink: 'syz.0.42': attribute type 29 has an invalid length. [ 97.845155][ T6112] trusted_key: syz.2.44 sent an empty control message without MSG_MORE. [ 97.991961][ T6111] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.253086][ T6123] netlink: 'syz.3.46': attribute type 12 has an invalid length. [ 98.311199][ T6121] netlink: 'syz.1.47': attribute type 4 has an invalid length. [ 98.365454][ T6128] netlink: 'syz.1.47': attribute type 4 has an invalid length. [ 98.392784][ T6123] bond1: option primary_reselect: invalid value (255) [ 98.404812][ T6123] bond1 (unregistering): Released all slaves [ 98.537706][ T6134] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 98.971873][ T6153] __nla_validate_parse: 3 callbacks suppressed [ 98.971896][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'. [ 99.070380][ T6162] netlink: 16 bytes leftover after parsing attributes in process `syz.1.58'. [ 99.100484][ T6164] netlink: 'syz.2.59': attribute type 11 has an invalid length. [ 99.126679][ T6164] netlink: 'syz.2.59': attribute type 11 has an invalid length. [ 99.150968][ T6164] netlink: 224 bytes leftover after parsing attributes in process `syz.2.59'. [ 99.439089][ T6181] netlink: 24 bytes leftover after parsing attributes in process `syz.2.64'. [ 99.461464][ T6181] netlink: 20 bytes leftover after parsing attributes in process `syz.2.64'. [ 99.842681][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.68'. [ 99.881180][ T6202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.68'. [ 100.135464][ T6214] netlink: 32 bytes leftover after parsing attributes in process `syz.2.71'. [ 100.613243][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.76'. [ 101.410524][ T6258] netlink: 'syz.1.85': attribute type 1 has an invalid length. [ 101.421364][ T6258] netlink: 96 bytes leftover after parsing attributes in process `syz.1.85'. [ 101.453097][ T6258] netlink: 'syz.1.85': attribute type 1 has an invalid length. [ 101.529758][ T6258] netlink: 'syz.1.85': attribute type 8 has an invalid length. [ 101.571106][ T6256] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 101.579384][ T6256] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 101.587347][ T6256] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 101.595389][ T6256] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 101.603455][ T6256] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 101.611468][ T6256] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 101.619511][ T6256] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 101.627522][ T6256] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 101.635593][ T6256] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 101.920626][ T6274] syzkaller0: entered promiscuous mode [ 101.946594][ T6274] syzkaller0: entered allmulticast mode [ 102.003708][ T6278] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 102.121410][ T6280] nbd: must specify a size in bytes for the device [ 102.547128][ T6296] syzkaller0: entered promiscuous mode [ 102.570429][ T6296] syzkaller0: entered allmulticast mode [ 103.028236][ T6319] netlink: 'syz.2.101': attribute type 1 has an invalid length. [ 103.040234][ T6319] netlink: 'syz.2.101': attribute type 7 has an invalid length. [ 103.210426][ T6325] netlink: 'syz.1.103': attribute type 11 has an invalid length. [ 103.315745][ T6331] netlink: 'syz.4.106': attribute type 5 has an invalid length. [ 103.598140][ T6341] netlink: 'syz.0.111': attribute type 1 has an invalid length. [ 104.131081][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057bbbc00: rx timeout, send abort [ 104.631642][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057bbb800: rx timeout, send abort [ 104.640301][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057bbbc00: abort rx timeout. Force session deactivation [ 105.067827][ T6402] __nla_validate_parse: 9 callbacks suppressed [ 105.067848][ T6402] netlink: 164 bytes leftover after parsing attributes in process `syz.4.129'. [ 105.112432][ T6402] netlink: 'syz.4.129': attribute type 1 has an invalid length. [ 105.140148][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057bbb800: abort rx timeout. Force session deactivation [ 105.154710][ T6404] netlink: 24 bytes leftover after parsing attributes in process `syz.3.130'. [ 105.526312][ T6423] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 105.678640][ T6432] netlink: 32 bytes leftover after parsing attributes in process `syz.1.139'. [ 105.934757][ T6443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.141'. [ 105.956694][ T6443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.141'. [ 105.973954][ T1113] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.029536][ T1113] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.049723][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.095297][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.554120][ T6460] syzkaller0: entered promiscuous mode [ 106.584822][ T6460] syzkaller0: entered allmulticast mode [ 106.636470][ T6460] warning: `syz.4.149' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.720035][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.151'. [ 106.730888][ T6472] gretap0: entered promiscuous mode [ 107.081258][ T6490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.156'. [ 107.081258][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.156'. [ 107.320430][ T6492] macvtap1: entered promiscuous mode [ 107.325931][ T6492] vlan0: entered promiscuous mode [ 107.340843][ T6492] macvtap1: entered allmulticast mode [ 107.346524][ T6492] vlan0: entered allmulticast mode [ 107.352848][ T6492] veth0_vlan: entered allmulticast mode [ 107.421588][ T6490] macvtap2: entered promiscuous mode [ 107.427262][ T6490] macvtap2: entered allmulticast mode [ 107.563237][ T6500] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 107.591794][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'. [ 107.718026][ T6501] bond1: entered promiscuous mode [ 107.725622][ T6501] bond1: entered allmulticast mode [ 107.731689][ T6501] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.236375][ T6535] netlink: 56 bytes leftover after parsing attributes in process `syz.0.166'. [ 108.361795][ T6542] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.427277][ T6542] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.489485][ T6553] tipc: Enabling of bearer rejected, failed to enable media [ 108.653907][ T6555] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 108.672271][ T6555] bond1 (unregistering): Released all slaves [ 108.732041][ T6559] rdma_rxe: rxe_newlink: failed to add bond0 [ 108.785974][ T1160] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.819265][ T1160] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.857530][ T1160] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.869965][ T6564] netlink: 'syz.2.175': attribute type 13 has an invalid length. [ 108.887491][ T1160] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.050176][ T6569] xfrm1: entered allmulticast mode [ 109.183710][ T6580] gre1: entered promiscuous mode [ 109.197466][ T6580] gre1: entered allmulticast mode [ 109.549140][ T6595] Driver unsupported XDP return value 0 on prog (id 45) dev N/A, expect packet loss! [ 109.652896][ T6595] netlink: 'syz.3.186': attribute type 4 has an invalid length. [ 109.793936][ T6608] syzkaller0: entered promiscuous mode [ 109.804198][ T6608] syzkaller0: entered allmulticast mode [ 110.267045][ T6591] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 110.287454][ T6591] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 110.316301][ T6628] bridge0: port 5(ipvlan2) entered blocking state [ 110.342316][ T6628] bridge0: port 5(ipvlan2) entered disabled state [ 110.360923][ T6628] ipvlan2: entered allmulticast mode [ 110.389269][ T6628] bridge0: entered allmulticast mode [ 110.446713][ T6628] ipvlan2: left allmulticast mode [ 110.486309][ T6628] bridge0: left allmulticast mode [ 110.784247][ T6650] __nla_validate_parse: 5 callbacks suppressed [ 110.784279][ T6650] netlink: 72 bytes leftover after parsing attributes in process `syz.4.201'. [ 110.825346][ T6648] netlink: 16 bytes leftover after parsing attributes in process `syz.1.200'. [ 111.360387][ T6678] netlink: 'syz.2.211': attribute type 3 has an invalid length. [ 111.450114][ T6674] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 111.508102][ T6674] netlink: 'syz.0.209': attribute type 1 has an invalid length. [ 111.663545][ T6690] netlink: 64 bytes leftover after parsing attributes in process `syz.1.216'. [ 111.706153][ T6690] block nbd0: not configured, cannot reconfigure [ 112.015614][ T6712] netlink: 28 bytes leftover after parsing attributes in process `syz.3.223'. [ 112.057110][ T6712] netlink: 'syz.3.223': attribute type 7 has an invalid length. [ 112.109487][ T6712] netlink: 'syz.3.223': attribute type 8 has an invalid length. [ 112.117355][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.223'. [ 112.218197][ T6724] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.226568][ T6724] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.606678][ T6727] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.723920][ T6727] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.810964][ T6727] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.866302][ T6727] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.930350][ T6759] net_ratelimit: 45 callbacks suppressed [ 112.930371][ T6759] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 112.944152][ T6759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.958079][ T6759] netlink: 'syz.0.235': attribute type 4 has an invalid length. [ 112.971960][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.980967][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.008594][ T6759] netlink: 'syz.0.235': attribute type 4 has an invalid length. [ 113.015719][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.034803][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.304982][ T6734] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 115.525995][ T6761] netlink: 'syz.2.237': attribute type 29 has an invalid length. [ 115.592993][ T6773] team_slave_0: entered promiscuous mode [ 115.598920][ T6773] team_slave_1: entered promiscuous mode [ 115.606211][ T6773] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 115.614455][ T6773] team0: Device macvlan2 is already an upper device of the team interface [ 115.624262][ T6773] team_slave_0: left promiscuous mode [ 115.629852][ T6773] team_slave_1: left promiscuous mode [ 116.648181][ T6809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.252'. [ 117.149990][ T6828] netlink: 'syz.4.257': attribute type 13 has an invalid length. [ 117.218456][ T9] IPVS: starting estimator thread 0... [ 117.229754][ T6828] veth0_macvtap: left promiscuous mode [ 117.267811][ T6828] macvtap0: entered allmulticast mode [ 117.315387][ T6828] macvtap0: refused to change device tx_queue_len [ 117.329309][ T6834] IPVS: using max 26 ests per chain, 62400 per kthread [ 117.613255][ T6856] netlink: 'syz.4.264': attribute type 4 has an invalid length. [ 117.669804][ T6861] Bluetooth: MGMT ver 1.23 [ 118.005920][ T6879] xt_l2tp: missing protocol rule (udp|l2tpip) [ 118.105083][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.275'. [ 118.140824][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.275'. [ 118.157186][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.276'. [ 118.171172][ T6879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.273'. [ 118.180253][ T6885] bridge0: port 3(team0) entered blocking state [ 118.199721][ T6885] bridge0: port 3(team0) entered disabled state [ 118.206317][ T6885] team0: entered allmulticast mode [ 118.215116][ T6885] team_slave_0: entered allmulticast mode [ 118.227347][ T6885] team_slave_1: entered allmulticast mode [ 118.236015][ T6885] team0: entered promiscuous mode [ 118.241171][ T6885] team_slave_0: entered promiscuous mode [ 118.247127][ T6885] team_slave_1: entered promiscuous mode [ 118.255431][ T6885] bridge0: port 3(team0) entered blocking state [ 118.262329][ T6885] bridge0: port 3(team0) entered forwarding state [ 118.282299][ T6887] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 118.297078][ T6889] bridge1: entered promiscuous mode [ 118.304228][ T6889] bridge1: entered allmulticast mode [ 118.306725][ T6887] netlink: 59 bytes leftover after parsing attributes in process `syz.4.276'. [ 118.743279][ T6920] netlink: 48 bytes leftover after parsing attributes in process `syz.3.284'. [ 118.766592][ T6919] netlink: 32 bytes leftover after parsing attributes in process `syz.4.283'. [ 118.831529][ T6920] netem: change failed [ 118.884978][ T6924] openvswitch: netlink: IPv6 tunnel dst address is zero [ 118.908755][ T6922] xt_CT: You must specify a L4 protocol and not use inversions on it [ 119.466955][ T6940] tipc: Started in network mode [ 119.472124][ T6940] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 119.488550][ T6940] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 119.497986][ T6940] tipc: Enabled bearer , priority 10 [ 119.552282][ T6953] netlink: 'syz.3.292': attribute type 11 has an invalid length. [ 119.662544][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.293'. [ 119.691949][ T52] Bluetooth: hci2: command 0x0401 tx timeout [ 119.698279][ T5829] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 120.077611][ T6962] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 120.125370][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.297'. [ 120.371186][ T6984] netlink: 'syz.1.301': attribute type 83 has an invalid length. [ 120.610973][ T5924] tipc: Node number set to 1 [ 120.965711][ T7018] netlink: 'syz.3.310': attribute type 1 has an invalid length. [ 120.988395][ T7018] netlink: 'syz.3.310': attribute type 2 has an invalid length. [ 121.330837][ T7036] netlink: 'syz.0.314': attribute type 1 has an invalid length. [ 121.348937][ T7036] NCSI netlink: No device for ifindex 0 [ 122.078851][ T7072] __nla_validate_parse: 4 callbacks suppressed [ 122.078889][ T7072] netlink: 24 bytes leftover after parsing attributes in process `syz.3.323'. [ 122.099556][ T5829] Bluetooth: hci4: command tx timeout [ 122.238436][ T7077] bond1: option min_links: invalid value (18446744073709551614) [ 122.246369][ T7077] bond1: option min_links: allowed values 0 - 2147483647 [ 122.255747][ T7077] bond1 (unregistering): Released all slaves [ 122.537346][ T7081] netlink: 'syz.4.325': attribute type 7 has an invalid length. [ 122.545427][ T7081] netlink: 'syz.4.325': attribute type 8 has an invalid length. [ 124.419459][ T7039] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 124.439896][ T7075] netlink: 'syz.3.324': attribute type 11 has an invalid length. [ 124.851443][ T7102] x_tables: duplicate underflow at hook 1 [ 125.077515][ T7111] ipvlan2: entered allmulticast mode [ 125.087206][ T7111] batadv_slave_1: entered allmulticast mode [ 125.107944][ T7111] batman_adv: batadv0: Adding interface: ipvlan2 [ 125.137754][ T7111] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.243705][ T7111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.279292][ T7111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.307506][ T7111] batman_adv: batadv0: Interface activated: ipvlan2 [ 125.373415][ T7134] netlink: 28 bytes leftover after parsing attributes in process `syz.3.339'. [ 125.408961][ T7123] netlink: 32 bytes leftover after parsing attributes in process `syz.1.338'. [ 125.438771][ T7123] netlink: 32 bytes leftover after parsing attributes in process `syz.1.338'. [ 125.689011][ T7144] netlink: 'syz.3.342': attribute type 1 has an invalid length. [ 125.694147][ T7153] netlink: 'syz.4.345': attribute type 7 has an invalid length. [ 125.728150][ T7144] netlink: 'syz.3.342': attribute type 11 has an invalid length. [ 125.753284][ T7144] netlink: 224 bytes leftover after parsing attributes in process `syz.3.342'. [ 126.151742][ T7173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.351'. [ 126.190502][ T7173] netlink: 'syz.0.351': attribute type 3 has an invalid length. [ 126.244782][ T7184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.354'. [ 126.265142][ T7175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.295770][ T7175] bond0: (slave rose0): Enslaving as an active interface with an up link [ 126.319417][ T7177] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 126.421490][ T7184] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.524264][ T7187] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 126.620941][ T7187] nbd0: detected capacity change from 0 to 127 [ 126.671148][ T7192] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 126.691197][ T7192] bond1 (unregistering): Released all slaves [ 126.746872][ T5829] block nbd0: Receive control failed (result -104) [ 132.891817][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.898349][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 157.221855][ T11] block nbd0: Possible stuck request ffff888025c10000: control (read@0,1024B). Runtime 30 seconds [ 157.233706][ T11] block nbd0: Possible stuck request ffff888025c10200: control (read@1024,1024B). Runtime 30 seconds [ 157.245333][ T11] block nbd0: Possible stuck request ffff888025c10400: control (read@2048,1024B). Runtime 30 seconds [ 157.257112][ T11] block nbd0: Possible stuck request ffff888025c10600: control (read@3072,1024B). Runtime 30 seconds [ 170.369042][ T7250] netlink: 'syz.0.355': attribute type 10 has an invalid length. [ 170.503474][ T7250] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 170.632458][ T7264] syzkaller0: entered promiscuous mode [ 170.638056][ T7264] syzkaller0: entered allmulticast mode [ 171.362836][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.371'. [ 171.445789][ T7314] netlink: 'syz.4.375': attribute type 9 has an invalid length. [ 171.494809][ T7316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.374'. [ 171.811225][ T7330] netlink: 20 bytes leftover after parsing attributes in process `syz.4.377'. [ 171.826622][ T7330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.377'. [ 171.865969][ T7333] syzkaller0: entered promiscuous mode [ 171.899254][ T7333] syzkaller0: entered allmulticast mode [ 171.975219][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'. [ 171.994746][ T7340] netlink: 'syz.1.380': attribute type 64 has an invalid length. [ 172.043959][ T7343] sctp: [Deprecated]: syz.4.382 (pid 7343) Use of int in maxseg socket option. [ 172.043959][ T7343] Use struct sctp_assoc_value instead [ 172.127614][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.384'. [ 172.264500][ T7357] bond0: (slave gre0): Error: Device type is different from other slaves [ 172.308869][ T7361] netlink: 'syz.3.387': attribute type 2 has an invalid length. [ 172.347037][ T7359] netlink: 24 bytes leftover after parsing attributes in process `syz.1.386'. [ 172.356528][ T7359] netlink: 24 bytes leftover after parsing attributes in process `syz.1.386'. [ 172.370419][ T7359] tc_dump_action: action bad kind [ 172.652719][ T7369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.788726][ T7394] netlink: 'syz.1.395': attribute type 61 has an invalid length. [ 172.890936][ T7401] netlink: 20 bytes leftover after parsing attributes in process `syz.1.396'. [ 172.908657][ T7401] geneve2: entered promiscuous mode [ 175.464994][ T7378] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 175.742406][ T7423] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.401'. [ 175.801909][ T7416] bond0: entered promiscuous mode [ 175.807080][ T7416] bond_slave_0: entered promiscuous mode [ 175.836109][ T7416] bond_slave_1: entered promiscuous mode [ 175.848556][ T7416] bond0: left promiscuous mode [ 175.869907][ T7416] bond_slave_0: left promiscuous mode [ 175.881522][ T7416] bond_slave_1: left promiscuous mode [ 176.597421][ T7454] __nla_validate_parse: 2 callbacks suppressed [ 176.597444][ T7454] netlink: 56 bytes leftover after parsing attributes in process `syz.4.414'. [ 176.909415][ T7459] netlink: 'syz.4.416': attribute type 39 has an invalid length. [ 176.961933][ T7461] netlink: 'syz.4.416': attribute type 1 has an invalid length. [ 177.480969][ T7478] netlink: 28 bytes leftover after parsing attributes in process `syz.4.421'. [ 177.572388][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.422'. [ 177.618390][ T7481] netlink: 'syz.3.422': attribute type 5 has an invalid length. [ 177.633999][ T7481] netlink: 20 bytes leftover after parsing attributes in process `syz.3.422'. [ 177.755336][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.424'. [ 177.796314][ T7489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.982390][ T7492] netlink: 'syz.3.426': attribute type 12 has an invalid length. [ 178.040242][ T7495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.041778][ T7494] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.153107][ T7494] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.247836][ T7494] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.415340][ T7494] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.434368][ T7501] netlink: 224 bytes leftover after parsing attributes in process `syz.3.428'. [ 178.458346][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'. [ 178.475428][ T7506] netlink: 64 bytes leftover after parsing attributes in process `syz.0.431'. [ 178.485215][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.428'. [ 178.564674][ T7513] netlink: 'syz.4.430': attribute type 30 has an invalid length. [ 178.933036][ T297] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.049156][ T297] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.082905][ T297] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.120025][ T297] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.188058][ T7543] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 179.254847][ T7546] netlink: 'syz.1.440': attribute type 11 has an invalid length. [ 179.384885][ T7546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.454073][ T7560] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 179.627503][ T7564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.444'. [ 179.680460][ T7564] bond2: entered promiscuous mode [ 179.685985][ T7564] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.693383][ T7570] veth0: entered promiscuous mode [ 179.701689][ T7569] veth0: left promiscuous mode [ 179.752930][ T7571] bond_slave_0: entered promiscuous mode [ 179.758893][ T7571] bond_slave_1: entered promiscuous mode [ 179.768726][ T7571] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 179.779665][ T7571] macvlan2: entered promiscuous mode [ 179.785208][ T7571] bond0: entered promiscuous mode [ 179.793128][ T7571] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 179.975041][ T7582] bridge2: entered promiscuous mode [ 179.989457][ T7582] bridge2: entered allmulticast mode [ 180.127268][ T7592] veth0: entered promiscuous mode [ 180.155136][ T7593] veth0: left promiscuous mode [ 181.175667][ T30] audit: type=1107 audit(1770827386.018:2): pid=7643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 181.289454][ T5829] Bluetooth: hci3: command tx timeout [ 181.436748][ T7657] bond1: entered promiscuous mode [ 181.444771][ T7657] bond1: entered allmulticast mode [ 181.450966][ T7657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.471882][ T7663] macvlan3: entered promiscuous mode [ 181.506591][ T7663] macvlan3: entered allmulticast mode [ 181.531250][ T7663] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 181.604695][ T7670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.879896][ T7689] __nla_validate_parse: 9 callbacks suppressed [ 181.879915][ T7689] netlink: 40 bytes leftover after parsing attributes in process `syz.4.480'. [ 182.013414][ T7692] syzkaller0: entered promiscuous mode [ 182.019760][ T7692] syzkaller0: entered allmulticast mode [ 182.036272][ T7694] netlink: 104 bytes leftover after parsing attributes in process `syz.4.482'. [ 182.335190][ T7703] tipc: Started in network mode [ 182.352553][ T7703] tipc: Node identity 765ba50e08e3, cluster identity 4711 [ 182.363007][ T7703] tipc: Enabled bearer , priority 0 [ 182.375430][ T7703] +: renamed from syzkaller0 [ 182.395652][ T7703] tipc: Disabling bearer [ 182.427623][ T7710] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 182.708561][ T7719] netlink: 144 bytes leftover after parsing attributes in process `syz.3.489'. [ 183.034734][ T7723] netlink: 60 bytes leftover after parsing attributes in process `syz.3.490'. [ 183.047498][ T7726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.067755][ T7723] unsupported nlmsg_type 40 [ 183.088750][ T7726] netlink: 40 bytes leftover after parsing attributes in process `syz.2.492'. [ 183.115371][ T7727] syzkaller0: entered promiscuous mode [ 183.137222][ T7727] syzkaller0: entered allmulticast mode [ 183.285121][ T7729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.493'. [ 183.307979][ T7727] sctp: [Deprecated]: syz.1.491 (pid 7727) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.307979][ T7727] Use struct sctp_sack_info instead [ 183.339644][ T7729] netlink: 2 bytes leftover after parsing attributes in process `syz.3.493'. [ 183.369193][ T5829] Bluetooth: hci3: command tx timeout [ 183.391761][ T7741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.495'. [ 183.513406][ T7749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'. [ 183.559621][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.496'. [ 183.579373][ T7752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.698375][ T7752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.821357][ T7766] netlink: 'syz.3.503': attribute type 5 has an invalid length. [ 183.830896][ T7756] tipc: Started in network mode [ 183.835785][ T7756] tipc: Node identity ca3d92eaf3c7, cluster identity 4711 [ 183.846386][ T7756] tipc: Enabled bearer , priority 11 [ 183.854536][ T7758] netlink: 'syz.1.501': attribute type 23 has an invalid length. [ 184.069901][ T7771] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.122356][ T7775] vlan2: entered promiscuous mode [ 184.137943][ T7775] vlan2: entered allmulticast mode [ 184.151181][ T7775] hsr_slave_1: entered allmulticast mode [ 184.153737][ T7771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.235378][ T7771] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.292626][ T7786] netlink: 'syz.2.508': attribute type 15 has an invalid length. [ 184.854042][ T7822] vcan0: tx address claim with different name [ 184.959248][ T5890] tipc: Node number set to 972722922 [ 185.287361][ T7848] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.338095][ T7849] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.371778][ T7813] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.383927][ T7813] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.396763][ T7813] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.420244][ T7813] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.449292][ T5829] Bluetooth: hci3: command tx timeout [ 185.617152][ T7865] syzkaller0: entered promiscuous mode [ 185.626240][ T7865] syzkaller0: entered allmulticast mode [ 185.952250][ T7888] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 185.992852][ T7888] sctp: [Deprecated]: syz.4.530 (pid 7888) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.992852][ T7888] Use struct sctp_sack_info instead [ 187.297119][ T25] block nbd0: Possible stuck request ffff888025c10000: control (read@0,1024B). Runtime 60 seconds [ 187.308359][ T25] block nbd0: Possible stuck request ffff888025c10200: control (read@1024,1024B). Runtime 60 seconds [ 187.319405][ T25] block nbd0: Possible stuck request ffff888025c10400: control (read@2048,1024B). Runtime 60 seconds [ 187.331499][ T25] block nbd0: Possible stuck request ffff888025c10600: control (read@3072,1024B). Runtime 60 seconds [ 187.480076][ T7920] netlink: 'syz.3.539': attribute type 25 has an invalid length. [ 187.494366][ T7920] netlink: 'syz.3.539': attribute type 10 has an invalid length. [ 187.529208][ T52] Bluetooth: hci3: command tx timeout [ 187.772342][ T7933] netlink: 'syz.1.545': attribute type 1 has an invalid length. [ 187.807485][ T7938] s5: renamed from vlan1 (while UP) [ 188.029605][ T7954] syzkaller0: entered promiscuous mode [ 188.049415][ T7954] syzkaller0: entered allmulticast mode [ 188.060157][ T7954] netlink: 'syz.1.549': attribute type 1 has an invalid length. [ 188.133980][ T7954] bond3: entered promiscuous mode [ 188.140390][ T7954] 8021q: adding VLAN 0 to HW filter on device bond3 [ 188.189496][ T7960] netlink: 'syz.2.551': attribute type 3 has an invalid length. [ 188.197497][ T7962] netlink: 'syz.2.551': attribute type 3 has an invalid length. [ 188.355728][ T7965] __nla_validate_parse: 10 callbacks suppressed [ 188.355760][ T7965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.553'. [ 188.419214][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 188.611177][ T7982] netlink: 'syz.0.556': attribute type 1 has an invalid length. [ 188.677446][ T7982] bond2: entered promiscuous mode [ 188.685008][ T7982] 8021q: adding VLAN 0 to HW filter on device bond2 [ 188.768021][ T7998] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 188.790260][ T7998] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 188.872387][ T8002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'. [ 188.966375][ T8003] netlink: 76 bytes leftover after parsing attributes in process `syz.2.561'. [ 189.282131][ T8024] validate_nla: 2 callbacks suppressed [ 189.282149][ T8024] netlink: 'syz.2.567': attribute type 1 has an invalid length. [ 189.314616][ T8024] netlink: 228 bytes leftover after parsing attributes in process `syz.2.567'. [ 189.326583][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.567'. [ 189.354520][ T8024] netlink: 'syz.2.567': attribute type 3 has an invalid length. [ 189.358656][ T8030] netlink: 774 bytes leftover after parsing attributes in process `syz.4.570'. [ 189.385451][ T8027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.568'. [ 189.402098][ T8027] netlink: 52 bytes leftover after parsing attributes in process `syz.3.568'. [ 189.430626][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.568'. [ 189.601276][ T8042] geneve2: entered promiscuous mode [ 189.615597][ T5829] Bluetooth: hci3: command tx timeout [ 189.652302][ T8044] lo: entered promiscuous mode [ 189.669966][ T8044] netlink: 'syz.2.572': attribute type 2 has an invalid length. [ 189.688970][ T8044] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.980531][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.581'. [ 190.207433][ T8075] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 190.597188][ T8094] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 190.777941][ T8106] netlink: 'syz.4.593': attribute type 11 has an invalid length. [ 190.798703][ T8105] xt_hashlimit: max too large, truncated to 1048576 [ 190.817652][ T8108] netlink: 'syz.3.591': attribute type 4 has an invalid length. [ 190.833002][ T8106] netlink: 'syz.4.593': attribute type 11 has an invalid length. [ 191.056440][ T8122] netlink: 'syz.2.596': attribute type 11 has an invalid length. [ 191.671685][ T8143] veth0_vlan: entered allmulticast mode [ 191.699647][ T5829] Bluetooth: hci3: command tx timeout [ 192.151162][ T8165] bridge_slave_0: left allmulticast mode [ 192.156883][ T8165] bridge_slave_0: left promiscuous mode [ 192.180690][ T8165] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.263862][ T8165] bridge_slave_1: left allmulticast mode [ 192.285382][ T8165] bridge_slave_1: left promiscuous mode [ 192.292181][ T8165] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.315438][ T8165] bond0: (slave bond_slave_0): Releasing backup interface [ 192.347424][ T8165] bond0: (slave bond_slave_1): Releasing backup interface [ 192.406987][ T8165] team0: Port device team_slave_0 removed [ 192.447153][ T8165] team0: Port device team_slave_1 removed [ 192.453751][ T8165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.467705][ T8165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.478356][ T8165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.486238][ T8165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.496952][ T8165] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 192.682284][ T8181] syzkaller0: entered promiscuous mode [ 192.687820][ T8181] syzkaller0: entered allmulticast mode [ 192.889298][ T5829] Bluetooth: hci2: command 0x0401 tx timeout [ 193.046065][ T8199] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 193.061919][ T8199] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 193.330077][ T8221] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.349648][ T8221] ip6t_srh: unknown srh match flags 5F28 [ 193.431622][ T8233] __nla_validate_parse: 10 callbacks suppressed [ 193.431641][ T8233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.623'. [ 193.551834][ T8240] netlink: 28 bytes leftover after parsing attributes in process `syz.4.624'. [ 193.557484][ T8242] netlink: 24 bytes leftover after parsing attributes in process `syz.0.625'. [ 193.570390][ T8240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.624'. [ 193.586288][ T8240] netlink: 24 bytes leftover after parsing attributes in process `syz.4.624'. [ 193.679720][ T8249] netlink: 20 bytes leftover after parsing attributes in process `syz.4.624'. [ 193.769261][ T5829] Bluetooth: hci3: command tx timeout [ 193.834478][ T8257] netlink: 'syz.1.629': attribute type 11 has an invalid length. [ 193.871778][ T8257] netlink: 'syz.1.629': attribute type 11 has an invalid length. [ 193.885770][ T8257] netlink: 224 bytes leftover after parsing attributes in process `syz.1.629'. [ 194.206064][ T8270] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.632'. [ 194.227673][ T8272] netlink: 212304 bytes leftover after parsing attributes in process `syz.0.634'. [ 194.250738][ T8270] netlink: 156 bytes leftover after parsing attributes in process `syz.1.632'. [ 194.273557][ T8272] openvswitch: netlink: Message has 6 unknown bytes. [ 194.334075][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.340605][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.500771][ T8287] tc_dump_action: action bad kind [ 194.783684][ T8307] netlink: 'syz.0.642': attribute type 10 has an invalid length. [ 194.797127][ T8307] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.806536][ T8307] bridge_slave_1: left allmulticast mode [ 194.818303][ T8307] bridge_slave_1: left promiscuous mode [ 194.841047][ T8307] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.905232][ T8307] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 195.317559][ T8349] sctp: [Deprecated]: syz.2.652 (pid 8349) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.317559][ T8349] Use struct sctp_sack_info instead [ 195.382284][ T8349] openvswitch: netlink: IP tunnel dst address not specified [ 195.849452][ T5829] Bluetooth: hci3: command tx timeout [ 195.946419][ T8379] netlink: 'syz.4.662': attribute type 1 has an invalid length. [ 195.957025][ T8374] : entered promiscuous mode [ 196.439560][ T8410] delete_channel: no stack [ 196.492651][ T8406] tipc: Enabling of bearer rejected, failed to enable media [ 196.591684][ T8409] openvswitch: netlink: Flow actions attr not present in new flow. [ 196.769749][ T8424] netlink: 'syz.4.675': attribute type 1 has an invalid length. [ 196.967120][ T8438] netlink: 'syz.0.677': attribute type 21 has an invalid length. [ 197.238593][ T8447] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.510643][ T8472] Bluetooth: MGMT ver 1.23 [ 197.713561][ T8484] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.776855][ T8480] ip6_vti0: entered promiscuous mode [ 197.929290][ T5829] Bluetooth: hci3: command tx timeout [ 198.007955][ T8499] netlink: 'syz.4.692': attribute type 6 has an invalid length. [ 198.036208][ T8496] ipvlan2: entered allmulticast mode [ 198.058319][ T8496] batadv_slave_1: entered allmulticast mode [ 198.082348][ T8496] batman_adv: batadv0: Adding interface: ipvlan2 [ 198.099681][ T8496] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.148176][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.177901][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.212624][ T8496] batman_adv: batadv0: Interface activated: ipvlan2 [ 198.530373][ T8523] netlink: 'syz.1.700': attribute type 21 has an invalid length. [ 198.548511][ T8523] netlink: 'syz.1.700': attribute type 6 has an invalid length. [ 198.556922][ T8523] __nla_validate_parse: 17 callbacks suppressed [ 198.556939][ T8523] netlink: 132 bytes leftover after parsing attributes in process `syz.1.700'. [ 198.760925][ T8534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.703'. [ 198.914104][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'. [ 198.925041][ T8543] xt_hashlimit: size too large, truncated to 1048576 [ 199.093932][ T8542] bond3: option xmit_hash_policy: invalid value (64) [ 199.142571][ T8542] bond3 (unregistering): Released all slaves [ 199.226951][ T8547] netlink: 'syz.4.704': attribute type 21 has an invalid length. [ 199.588990][ T8574] syzkaller1: entered promiscuous mode [ 199.594898][ T8574] syzkaller1: entered allmulticast mode [ 200.019210][ T5829] Bluetooth: hci3: command tx timeout [ 200.165612][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.720'. [ 200.205874][ T8568] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 200.257453][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.720'. [ 200.290946][ T8615] netlink: 100 bytes leftover after parsing attributes in process `syz.1.724'. [ 200.317954][ T8604] netlink: 24 bytes leftover after parsing attributes in process `syz.2.720'. [ 200.332282][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.724'. [ 200.350965][ T8615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.724'. [ 200.379323][ T8615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.464913][ T8615] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.634925][ T8627] syzkaller0: entered promiscuous mode [ 200.640782][ T8627] syzkaller0: entered allmulticast mode [ 200.657763][ T8631] syzkaller0: entered promiscuous mode [ 200.666203][ T8631] syzkaller0: entered allmulticast mode [ 201.307376][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.735'. [ 202.100232][ T5829] Bluetooth: hci3: command 0x0809 tx timeout [ 202.255468][ T8652] netlink: 'syz.3.736': attribute type 83 has an invalid length. [ 204.169236][ T5829] Bluetooth: hci3: command 0x0809 tx timeout [ 205.389821][ T5195] udevd[5195]: worker [6184] /devices/virtual/block/nbd0 is taking a long time [ 206.249291][ T5829] Bluetooth: hci3: command 0x0809 tx timeout [ 208.329336][ T5829] Bluetooth: hci3: command 0x0809 tx timeout [ 210.409239][ T8663] Bluetooth: hci3: command 0x0809 tx timeout [ 211.771740][ T5832] Bluetooth: hci2: command 0x0401 tx timeout [ 211.779444][ T8663] Bluetooth: hci1: command 0x0406 tx timeout [ 211.780703][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 212.489518][ T5829] Bluetooth: hci3: command 0x0809 tx timeout [ 214.569435][ T5829] Bluetooth: hci3: command 0x0809 tx timeout [ 216.649244][ T5829] Bluetooth: hci3: command 0x0809 tx timeout [ 217.370759][ T25] block nbd0: Possible stuck request ffff888025c10000: control (read@0,1024B). Runtime 90 seconds [ 217.381584][ T25] block nbd0: Possible stuck request ffff888025c10200: control (read@1024,1024B). Runtime 90 seconds [ 217.393076][ T25] block nbd0: Possible stuck request ffff888025c10400: control (read@2048,1024B). Runtime 90 seconds [ 217.404091][ T25] block nbd0: Possible stuck request ffff888025c10600: control (read@3072,1024B). Runtime 90 seconds [ 218.729227][ T5829] Bluetooth: hci3: command 0x0809 tx timeout [ 220.809187][ T5829] Bluetooth: hci3: command 0x0809 tx timeout [ 222.120512][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.744'. [ 222.190557][ T8704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.242654][ T8706] netlink: 24 bytes leftover after parsing attributes in process `syz.3.746'. [ 222.360738][ T8712] netlink: 7 bytes leftover after parsing attributes in process `syz.0.748'. [ 222.370057][ T8711] netlink: 7 bytes leftover after parsing attributes in process `syz.0.748'. [ 222.840929][ T8730] netlink: 452 bytes leftover after parsing attributes in process `syz.2.752'. [ 222.865718][ T8737] openvswitch: netlink: IPv4 tun info is not correct [ 222.897027][ T8737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.901093][ T5829] Bluetooth: hci3: command 0x0809 tx timeout [ 223.099311][ T8739] netlink: 'syz.2.755': attribute type 1 has an invalid length. [ 223.104253][ T8741] netlink: 'syz.0.756': attribute type 3 has an invalid length. [ 223.107087][ T8739] netlink: 224 bytes leftover after parsing attributes in process `syz.2.755'. [ 223.125672][ T8741] netlink: 666 bytes leftover after parsing attributes in process `syz.0.756'. [ 223.350750][ T8756] veth0_virt_wifi: renamed from macsec0 (while UP) [ 223.367893][ T8756] veth1_macvtap: left promiscuous mode [ 223.841688][ T8775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.765'. [ 224.037971][ T8791] netlink: 'syz.4.771': attribute type 39 has an invalid length. [ 224.141835][ T8790] netlink: 16 bytes leftover after parsing attributes in process `syz.0.769'. [ 224.161147][ T8799] netlink: 'syz.2.774': attribute type 1 has an invalid length. [ 224.204439][ T8799] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 224.461094][ T8817] netlink: 30 bytes leftover after parsing attributes in process `syz.3.780'. [ 224.485700][ T8814] syzkaller0: entered promiscuous mode [ 224.492713][ T8814] syzkaller0: entered allmulticast mode [ 224.523967][ T8814] xt_hashlimit: invalid interval [ 224.722599][ T8833] netlink: 'syz.4.785': attribute type 5 has an invalid length. [ 224.812064][ T8838] netem: change failed [ 224.969369][ T5829] Bluetooth: hci3: command 0x0809 tx timeout [ 225.775626][ T8906] openvswitch: netlink: Flow key attr not present in new flow. [ 225.906702][ T8910] bond0: option ad_select: unable to set because the bond device is up [ 226.095153][ T8925] netlink: 'syz.2.816': attribute type 16 has an invalid length. [ 226.135560][ T8925] netlink: 'syz.2.816': attribute type 3 has an invalid length. [ 226.206352][ T8930] netlink: 'syz.1.818': attribute type 3 has an invalid length. [ 226.861395][ T8975] netlink: zone id is out of range [ 226.894122][ T8975] netlink: zone id is out of range [ 226.909652][ T8963] bond4: option resend_igmp: invalid value (32767) [ 226.916421][ T8975] netlink: zone id is out of range [ 226.944607][ T8975] netlink: zone id is out of range [ 226.951089][ T8975] netlink: zone id is out of range [ 226.956863][ T8975] netlink: zone id is out of range [ 226.964804][ T8963] bond4: option resend_igmp: allowed values 0 - 255 [ 227.055194][ T52] Bluetooth: hci3: command 0x0809 tx timeout [ 227.063945][ T8963] bond4 (unregistering): Released all slaves [ 227.356683][ T8990] netlink: 'syz.2.835': attribute type 10 has an invalid length. [ 227.357411][ T8992] __nla_validate_parse: 15 callbacks suppressed [ 227.357427][ T8992] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.836'. [ 227.421569][ T8993] : entered promiscuous mode [ 227.670305][ T9007] syzkaller0: entered promiscuous mode [ 227.700735][ T9007] syzkaller0: entered allmulticast mode [ 227.734656][ T9007] tipc: Enabled bearer , priority 0 [ 227.787026][ T9006] tipc: Started in network mode [ 227.792821][ T9006] tipc: Node identity 92c4fdb72b8a, cluster identity 4711 [ 227.804227][ T9006] tipc: Enabled bearer , priority 0 [ 227.848962][ T9016] tipc: Resetting bearer [ 227.955645][ T9016] tipc: Disabling bearer [ 227.990560][ T9004] tipc: Disabling bearer [ 228.053553][ T9025] netlink: 44 bytes leftover after parsing attributes in process `syz.2.845'. [ 228.132675][ T9035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.848'. [ 228.138244][ T9037] xt_TPROXY: Can be used only with -p tcp or -p udp [ 228.181435][ T9037] xt_policy: too many policy elements [ 228.228895][ T9041] netlink: 'syz.3.852': attribute type 4 has an invalid length. [ 228.269855][ T9041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.852'. [ 228.398295][ T9050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.853'. [ 228.437018][ T9050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.853'. [ 228.477458][ T9050] gretap0: entered promiscuous mode [ 228.483649][ T9048] netlink: 32 bytes leftover after parsing attributes in process `syz.0.855'. [ 228.501288][ T9050] gretap0: left promiscuous mode [ 228.542527][ T9055] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 228.822027][ T9069] netlink: 32 bytes leftover after parsing attributes in process `syz.4.858'. [ 228.880641][ T9069] netlink: 32 bytes leftover after parsing attributes in process `syz.4.858'. [ 229.129215][ T5829] Bluetooth: hci3: command 0x0809 tx timeout [ 229.177435][ T9091] set match dimension is over the limit! [ 229.205988][ T9094] set match dimension is over the limit! [ 229.220551][ T9096] syzkaller1: entered promiscuous mode [ 229.227084][ T9096] syzkaller1: entered allmulticast mode [ 229.236989][ T9093] syzkaller1: entered promiscuous mode [ 229.246954][ T9093] syzkaller1: entered allmulticast mode [ 229.276758][ T9093] netlink: 28 bytes leftover after parsing attributes in process `syz.2.866'. [ 229.322536][ T9093] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.329981][ T9093] bridge0: port 2(bridge_slave_1) entered listening state [ 229.337471][ T9093] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.344741][ T9093] bridge0: port 1(bridge_slave_0) entered listening state [ 229.824468][ T9133] netlink: 'syz.0.875': attribute type 1 has an invalid length. [ 230.198849][ T9146] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 230.361160][ T9160] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 230.522640][ T9160] tipc: Enabling of bearer rejected, failed to enable media [ 231.222393][ T5829] Bluetooth: hci3: command 0x0809 tx timeout [ 231.534354][ T9203] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 231.562393][ T9203] syzkaller1: linktype set to 823 [ 231.804953][ T9226] netlink: 'syz.2.893': attribute type 1 has an invalid length. [ 231.892110][ T9226] bond3: entered promiscuous mode [ 231.905796][ T9226] bond3: entered allmulticast mode [ 231.919773][ T9226] 8021q: adding VLAN 0 to HW filter on device bond3 [ 232.001060][ T9231] erspan1: entered allmulticast mode [ 232.018699][ T9231] bond3: (slave erspan1): making interface the new active one [ 232.031657][ T9231] erspan1: entered promiscuous mode [ 232.061156][ T9231] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 232.364254][ T9256] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 232.385109][ T9256] bond4 (unregistering): Released all slaves [ 232.670837][ T9277] __nla_validate_parse: 8 callbacks suppressed [ 232.670858][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.906'. [ 232.696849][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.906'. [ 232.718268][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.906'. [ 233.017537][ T9286] can: request_module (can-proto-0) failed. [ 233.121874][ T9294] net_ratelimit: 48 callbacks suppressed [ 233.121896][ T9294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.265089][ T9299] netlink: 'syz.2.911': attribute type 7 has an invalid length. [ 233.286168][ T9300] netlink: 'syz.4.913': attribute type 2 has an invalid length. [ 233.297330][ T5829] Bluetooth: hci3: command 0x0809 tx timeout [ 233.305984][ T9300] netlink: 244 bytes leftover after parsing attributes in process `syz.4.913'. [ 233.539114][ T9315] netlink: 'syz.4.916': attribute type 15 has an invalid length. [ 233.555133][ T9315] netlink: 24 bytes leftover after parsing attributes in process `syz.4.916'. [ 233.696324][ T9320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.921'. [ 233.718055][ T5829] Bluetooth: hci4: link tx timeout [ 233.724625][ T5829] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.736763][ T9321] netlink: 211536 bytes leftover after parsing attributes in process `syz.3.919'. [ 233.763146][ T9327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.921'. [ 233.820054][ T9331] netlink: 52 bytes leftover after parsing attributes in process `syz.0.922'. [ 233.832481][ T9331] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.053208][ T9348] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 234.163964][ T9350] 8021q: VLANs not supported on ip6tnl0 [ 234.213322][ T9354] netlink: 44 bytes leftover after parsing attributes in process `syz.3.928'. [ 234.260279][ T9354] netlink: 'syz.3.928': attribute type 5 has an invalid length. [ 234.775346][ T9380] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.790447][ T9380] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.893663][ T9380] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.969973][ T9380] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.095139][ T9380] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.125356][ T9380] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.248323][ T9380] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.270542][ T9380] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.369229][ T52] Bluetooth: hci3: command 0x0809 tx timeout [ 235.471904][ T7684] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.492174][ T7684] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.598280][ T7679] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.615940][ T7679] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.632337][ T7679] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.652135][ T7679] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.695643][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.715094][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.769284][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 235.804807][ T9435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.014633][ T9457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.360546][ T9469] hsr_slave_0 (unregistering): left promiscuous mode [ 236.454671][ T9477] netlink: 'syz.3.963': attribute type 41 has an invalid length. [ 237.449259][ T5829] Bluetooth: hci3: command 0x0809 tx timeout [ 237.605222][ T9538] ip6_vti0: left promiscuous mode [ 237.641340][ T9541] ip6_vti0 speed is unknown, defaulting to 1000 [ 237.665245][ T9541] ip6_vti0 speed is unknown, defaulting to 1000 [ 237.690554][ T9541] ip6_vti0 speed is unknown, defaulting to 1000 [ 237.761271][ T9554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.790851][ T9547] ------------[ cut here ]------------ [ 237.796656][ T9547] msk->pm.local_addr_used == 0 [ 237.796674][ T9547] WARNING: net/mptcp/pm_kernel.c:1070 at mptcp_pm_nl_del_addr_doit+0xfb7/0x1420, CPU#0: syz.3.977/9547 [ 237.812689][ T9547] Modules linked in: [ 237.816860][ T9547] CPU: 0 UID: 0 PID: 9547 Comm: syz.3.977 Not tainted syzkaller #0 PREEMPT(full) [ 237.826136][ T9547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 237.836289][ T9547] RIP: 0010:mptcp_pm_nl_del_addr_doit+0xfb7/0x1420 [ 237.842883][ T9547] Code: 01 00 00 49 89 c6 e8 68 33 3e f6 e9 26 fb ff ff e8 5e 33 3e f6 48 89 df be 03 00 00 00 e8 d1 72 1a f9 eb a4 e8 4a 33 3e f6 90 <0f> 0b 90 e9 ad fe ff ff 89 d9 80 e1 07 38 c1 0f 8c 12 fb ff ff 48 [ 237.862602][ T9547] RSP: 0018:ffffc9001a4bf160 EFLAGS: 00010283 [ 237.868712][ T9547] RAX: ffffffff8b864406 RBX: 0000000000000000 RCX: 0000000000080000 [ 237.876788][ T9547] RDX: ffffc9000bd1a000 RSI: 000000000000359a RDI: 000000000000359b [ 237.884814][ T9547] RBP: ffffc9001a4bf3b0 R08: ffff8880267fc937 R09: 1ffff11004cff926 [ 237.892848][ T9547] R10: dffffc0000000000 R11: ffffed1004cff927 R12: 1ffff11004cff925 [ 237.900893][ T9547] R13: ffff88805c708380 R14: ffff8880267fbe80 R15: ffff8880267fc928 [ 237.908908][ T9547] FS: 00007fa3c6e136c0(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000 [ 237.917922][ T9547] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.924581][ T9547] CR2: 00007fa6f99d5d58 CR3: 000000007718a000 CR4: 00000000003526f0 [ 237.932647][ T9547] Call Trace: [ 237.935959][ T9547] [ 237.938928][ T9547] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 237.945194][ T9547] ? rcu_is_watching+0x15/0xb0 [ 237.950042][ T9547] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 237.956419][ T9547] genl_family_rcv_msg_doit+0x22a/0x330 [ 237.962048][ T9547] ? __asan_memcpy+0x40/0x70 [ 237.966684][ T9547] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 237.972846][ T9547] ? bpf_lsm_capable+0x9/0x20 [ 237.977576][ T9547] ? security_capable+0x7e/0x2c0 [ 237.982623][ T9547] genl_rcv_msg+0x61c/0x7a0 [ 237.987170][ T9547] ? __pfx_genl_rcv_msg+0x10/0x10 [ 237.992301][ T9547] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 237.998490][ T9547] ? __pfx_ref_tracker_free+0x10/0x10 [ 238.003970][ T9547] netlink_rcv_skb+0x232/0x4b0 [ 238.008767][ T9547] ? __pfx_genl_rcv_msg+0x10/0x10 [ 238.013882][ T9547] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 238.019229][ T9547] ? genl_rcv+0x19/0x40 [ 238.023528][ T9547] ? down_read+0x272/0x2e0 [ 238.028080][ T9547] ? genl_rcv+0xd/0x40 [ 238.032334][ T9547] genl_rcv+0x28/0x40 [ 238.036350][ T9547] netlink_unicast+0x80f/0x9b0 [ 238.041238][ T9547] ? __pfx_netlink_unicast+0x10/0x10 [ 238.046602][ T9547] ? __alloc_skb+0x193/0x390 [ 238.051385][ T9547] ? netlink_sendmsg+0x650/0xb40 [ 238.056357][ T9547] ? skb_put+0x11b/0x210 [ 238.060681][ T9547] netlink_sendmsg+0x813/0xb40 [ 238.065596][ T9547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.070964][ T9547] ? aa_sock_msg_perm+0xf1/0x1b0 [ 238.075935][ T9547] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 238.081339][ T9547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.086662][ T9547] ____sys_sendmsg+0xa68/0xad0 [ 238.091528][ T9547] ? __might_fault+0xaf/0x130 [ 238.096279][ T9547] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.101682][ T9547] ? import_iovec+0x73/0xa0 [ 238.106232][ T9547] ___sys_sendmsg+0x2a5/0x360 [ 238.111013][ T9547] ? __lock_acquire+0x6b5/0x2cf0 [ 238.115997][ T9547] ? __pfx____sys_sendmsg+0x10/0x10 [ 238.121324][ T9547] ? futex_wake+0x4ac/0x580 [ 238.125889][ T9547] ? __fget_files+0x2a/0x420 [ 238.130578][ T9547] ? __fget_files+0x3a0/0x420 [ 238.135301][ T9547] __x64_sys_sendmsg+0x1bd/0x2a0 [ 238.139137][ T936] ip6_vti0 speed is unknown, defaulting to 1000 [ 238.140415][ T9547] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 238.152340][ T9547] ? rcu_is_watching+0x15/0xb0 [ 238.156003][ T9541] infiniband syz2: set down [ 238.157161][ T9547] do_syscall_64+0xe2/0xf80 [ 238.157194][ T9547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.166139][ T9541] infiniband syz2: added ip6_vti0 [ 238.166260][ T9547] ? trace_irq_disable+0x37/0x100 [ 238.182461][ T9547] ? clear_bhb_loop+0x60/0xb0 [ 238.187148][ T9547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.193104][ T9547] RIP: 0033:0x7fa3c5f9bf79 [ 238.197561][ T9547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.217230][ T9547] RSP: 002b:00007fa3c6e13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.225985][ T9547] RAX: ffffffffffffffda RBX: 00007fa3c6215fa0 RCX: 00007fa3c5f9bf79 [ 238.234159][ T9547] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000b [ 238.242202][ T9547] RBP: 00007fa3c60327e0 R08: 0000000000000000 R09: 0000000000000000 [ 238.250251][ T9547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.258530][ T9547] R13: 00007fa3c6216038 R14: 00007fa3c6215fa0 R15: 00007ffec1f4a378 [ 238.266603][ T9547] [ 238.269721][ T9547] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 238.277038][ T9547] CPU: 0 UID: 0 PID: 9547 Comm: syz.3.977 Not tainted syzkaller #0 PREEMPT(full) [ 238.286263][ T9547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 238.296582][ T9547] Call Trace: [ 238.299903][ T9547] [ 238.302953][ T9547] vpanic+0x1e0/0x670 [ 238.306994][ T9547] panic+0xc5/0xd0 [ 238.310755][ T9547] ? __pfx_panic+0x10/0x10 [ 238.315316][ T9547] __warn+0x315/0x4a0 [ 238.319380][ T9547] ? mptcp_pm_nl_del_addr_doit+0xfb7/0x1420 [ 238.325399][ T9547] ? mptcp_pm_nl_del_addr_doit+0xfb7/0x1420 [ 238.331335][ T9547] __report_bug+0x29a/0x540 [ 238.335874][ T9547] ? mptcp_pm_nl_del_addr_doit+0xfb7/0x1420 [ 238.342262][ T9547] ? __pfx___report_bug+0x10/0x10 [ 238.347326][ T9547] ? __lock_acquire+0x6b5/0x2cf0 [ 238.352319][ T9547] ? __lock_sock_fast+0x45/0xe0 [ 238.357223][ T9547] ? mptcp_pm_nl_del_addr_doit+0xfb7/0x1420 [ 238.363235][ T9547] report_bug+0x16a/0x220 [ 238.367601][ T9547] ? mptcp_pm_nl_del_addr_doit+0xfb7/0x1420 [ 238.373544][ T9547] ? mptcp_pm_nl_del_addr_doit+0xfb9/0x1420 [ 238.379473][ T9547] handle_bug+0x98/0x200 [ 238.383852][ T9547] exc_invalid_op+0x1a/0x50 [ 238.388395][ T9547] asm_exc_invalid_op+0x1a/0x20 [ 238.393250][ T9547] RIP: 0010:mptcp_pm_nl_del_addr_doit+0xfb7/0x1420 [ 238.399790][ T9547] Code: 01 00 00 49 89 c6 e8 68 33 3e f6 e9 26 fb ff ff e8 5e 33 3e f6 48 89 df be 03 00 00 00 e8 d1 72 1a f9 eb a4 e8 4a 33 3e f6 90 <0f> 0b 90 e9 ad fe ff ff 89 d9 80 e1 07 38 c1 0f 8c 12 fb ff ff 48 [ 238.419410][ T9547] RSP: 0018:ffffc9001a4bf160 EFLAGS: 00010283 [ 238.425485][ T9547] RAX: ffffffff8b864406 RBX: 0000000000000000 RCX: 0000000000080000 [ 238.433468][ T9547] RDX: ffffc9000bd1a000 RSI: 000000000000359a RDI: 000000000000359b [ 238.441554][ T9547] RBP: ffffc9001a4bf3b0 R08: ffff8880267fc937 R09: 1ffff11004cff926 [ 238.449545][ T9547] R10: dffffc0000000000 R11: ffffed1004cff927 R12: 1ffff11004cff925 [ 238.457799][ T9547] R13: ffff88805c708380 R14: ffff8880267fbe80 R15: ffff8880267fc928 [ 238.465878][ T9547] ? mptcp_pm_nl_del_addr_doit+0xfb6/0x1420 [ 238.471799][ T9547] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 238.478060][ T9547] ? rcu_is_watching+0x15/0xb0 [ 238.482841][ T9547] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 238.489313][ T9547] genl_family_rcv_msg_doit+0x22a/0x330 [ 238.494875][ T9547] ? __asan_memcpy+0x40/0x70 [ 238.499476][ T9547] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 238.505559][ T9547] ? bpf_lsm_capable+0x9/0x20 [ 238.510249][ T9547] ? security_capable+0x7e/0x2c0 [ 238.515285][ T9547] genl_rcv_msg+0x61c/0x7a0 [ 238.519798][ T9547] ? __pfx_genl_rcv_msg+0x10/0x10 [ 238.524841][ T9547] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 238.531004][ T9547] ? __pfx_ref_tracker_free+0x10/0x10 [ 238.536480][ T9547] netlink_rcv_skb+0x232/0x4b0 [ 238.541251][ T9547] ? __pfx_genl_rcv_msg+0x10/0x10 [ 238.546295][ T9547] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 238.551668][ T9547] ? genl_rcv+0x19/0x40 [ 238.555867][ T9547] ? down_read+0x272/0x2e0 [ 238.560295][ T9547] ? genl_rcv+0xd/0x40 [ 238.564459][ T9547] genl_rcv+0x28/0x40 [ 238.568444][ T9547] netlink_unicast+0x80f/0x9b0 [ 238.573226][ T9547] ? __pfx_netlink_unicast+0x10/0x10 [ 238.578539][ T9547] ? __alloc_skb+0x193/0x390 [ 238.583172][ T9547] ? netlink_sendmsg+0x650/0xb40 [ 238.588129][ T9547] ? skb_put+0x11b/0x210 [ 238.592669][ T9547] netlink_sendmsg+0x813/0xb40 [ 238.597472][ T9547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.602786][ T9547] ? aa_sock_msg_perm+0xf1/0x1b0 [ 238.607743][ T9547] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 238.613043][ T9547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.618340][ T9547] ____sys_sendmsg+0xa68/0xad0 [ 238.623116][ T9547] ? __might_fault+0xaf/0x130 [ 238.627811][ T9547] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.633113][ T9547] ? import_iovec+0x73/0xa0 [ 238.637728][ T9547] ___sys_sendmsg+0x2a5/0x360 [ 238.643961][ T9547] ? __lock_acquire+0x6b5/0x2cf0 [ 238.649286][ T9547] ? __pfx____sys_sendmsg+0x10/0x10 [ 238.654523][ T9547] ? futex_wake+0x4ac/0x580 [ 238.659065][ T9547] ? __fget_files+0x2a/0x420 [ 238.663670][ T9547] ? __fget_files+0x3a0/0x420 [ 238.668365][ T9547] __x64_sys_sendmsg+0x1bd/0x2a0 [ 238.673314][ T9547] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 238.678797][ T9547] ? rcu_is_watching+0x15/0xb0 [ 238.683598][ T9547] do_syscall_64+0xe2/0xf80 [ 238.688107][ T9547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.694174][ T9547] ? trace_irq_disable+0x37/0x100 [ 238.699198][ T9547] ? clear_bhb_loop+0x60/0xb0 [ 238.703886][ T9547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.709779][ T9547] RIP: 0033:0x7fa3c5f9bf79 [ 238.714196][ T9547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.734071][ T9547] RSP: 002b:00007fa3c6e13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.742491][ T9547] RAX: ffffffffffffffda RBX: 00007fa3c6215fa0 RCX: 00007fa3c5f9bf79 [ 238.750567][ T9547] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000b [ 238.758541][ T9547] RBP: 00007fa3c60327e0 R08: 0000000000000000 R09: 0000000000000000 [ 238.766519][ T9547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.774595][ T9547] R13: 00007fa3c6216038 R14: 00007fa3c6215fa0 R15: 00007ffec1f4a378 [ 238.782608][ T9547] [ 238.785779][ T9547] Kernel Offset: disabled [ 238.790100][ T9547] Rebooting in 86400 seconds..