last executing test programs: 4m2.060781105s ago: executing program 3 (id=860): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48, 0x800}, 0x40000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0) 4m2.054649939s ago: executing program 4 (id=861): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0xc040ff0b, 0x2000000000) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r3}, 0x10) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000019"], 0x60}}, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000008c0)={0x274, r7, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x70b8}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x36, 0x3, "3c39c95ed2b65c783255f89ec0a4950a5abadf68eba10aa2223f12b4e57189c3ae8679a75d00597bc881993f940d5d13dfcb"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb61b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x30}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_LINK={0xec, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffeffff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc0}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc6}]}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2a7b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010100}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @loopback, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x95}, 0x808) 4m1.97506833s ago: executing program 2 (id=864): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) (async) r1 = socket$inet6(0xa, 0x3, 0x3a) (async) socket$inet6(0xa, 0xa, 0x5) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0xa50, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x9d8, 0xffffffff, 0xffffffff, 0x9d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x73, 0x0, 0x0, 0x45}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, [], [0x0, 0xffffffff, 0xff000000], 'wg1\x00', 'gre0\x00'}, 0x0, 0x888, 0x8b0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x7fff, 0x1}, {0x8, 0x3}, {0xfffff7ec, 0x1}, {0xfff, 0xbd3626e1c8b1df09}, {0x5, 0x2}, {0xb34c, 0x3}, {0x2}, {0xe48b, 0x2}, {0x101, 0x2}, {0x5, 0x2}, {0x5}], [{0x400}, {0x6, 0x8001}, {0x401, 0x40}, {0x7fff}, {0xffffc1b1, 0x32de}, {0xfff, 0x8}, {0x2, 0x9}, {0x1, 0xbbca}, {0x83, 0x1}, {0x5, 0x7}, {0x3}], 0x1, 0x7}, {[{0x9, 0x3}, {0x6, 0x3}, {0x4, 0x3}, {0x1, 0x2}, {0x9, 0x1}, {0xfffffffa}, {0x0, 0x2}, {0x80000000, 0x3}, {0x80000001}, {0x8001, 0x2}, {0xff, 0x3}], [{0x7, 0x5}, {0x3, 0x6b6}, {0x4, 0x400}, {0x3}, {0x4, 0xfff}, {0x3ff, 0xe5d7}, {0x6, 0x3ff}, {0xa78, 0xffffffff}, {0xa9e1, 0x3}, {0x8, 0x1000}, {0xc7, 0xf385}], 0x6, 0x3}, {[{0x101, 0x2}, {0x9}, {0x3, 0x3}, {0x2, 0x3}, {0x48}, {0x9, 0x2}, {0x1, 0x2}, {0x7, 0x2}, {0x9}, {0x7, 0x1}, {0x0, 0x3}], [{0xfffffffb, 0x5}, {0x8, 0xa17}, {0x80, 0x4}, {0x8}, {0x3, 0x7}, {0x5e18, 0x7}, {0x4, 0x101}, {0x7, 0xfff}, {0xd, 0x7f}, {0x2, 0x2}, {0xfb3, 0xa94}], 0xb, 0x4}, {[{0x8, 0x1}, {0x4, 0x2}, {0x4e, 0xc781c4f1f9c1fa4f}, {0x8, 0x1}, {0x4e5, 0x2}, {0x3, 0x3}, {0x6, 0x1}, {0x7, 0x1}, {0x5, 0x2}, {0xfff}, {0x4}], [{0x9, 0x8001}, {0xffff, 0x4}, {0x7fff, 0xf}, {0x66d, 0x9}, {0x92, 0xb}, {0x3, 0x6}, {0x7, 0xfff}, {0x1, 0xff}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0xff}], 0xa}, {[{0x5, 0x2}, {0x7a3, 0x2}, {0x1, 0x3}, {0x100, 0x3}, {0x40}, {0x8d, 0x1}, {0x8, 0x3}, {0x9, 0x3}, {0x8, 0x2}, {0x1, 0x1}, {0x7}], [{0x854f, 0x6b}, {0x7, 0x7}, {0x6, 0x80}, {0x3, 0xffc00000}, {0x7}, {0x3, 0x6}, {0x2, 0xf17}, {0x25, 0x401}, {0x200, 0x84b}, {0x7fff, 0x80}, {0x3, 0x1}], 0x4, 0x8}, {[{0xc3d, 0x147d12363fe5c40a}, {0x64, 0x1}, {0xf, 0x3}, {0x5, 0x1}, {0x7fffffff, 0x2}, {0x5}, {0x2af0, 0x2}, {0x1bd6, 0x2}, {0x1, 0x2}, {0x7, 0x1}, {0x7, 0x2}], [{0x92b, 0x1ff}, {0x1, 0xf458}, {0x5, 0x3}, {0x84, 0x1}, {0xe923, 0x7fff}, {0x4, 0xe}, {0x3, 0x6}, {0xad3f, 0x59f}, {0x4, 0xfffffffc}, {0x6}, {0x5, 0x6f}], 0x9}, {[{0x8}, {0x2f, 0x1}, {0x7, 0x1}, {0x0, 0x2}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x8, 0x3}, {0x7}, {0x2}, {0x2, 0x3}], [{0x101, 0x80000000}, {0x1, 0x9}, {0x40, 0xff}, {0x4, 0x2}, {0x5, 0x6}, {0x2, 0x5}, {0x0, 0x3}, {0xe, 0x5}, {0x6, 0x1ff}, {0xc, 0x7}, {0x1, 0x4}], 0xb, 0x7}, {[{0x8c, 0x1}, {0xd}, {0x10000, 0x2}, {0x8, 0x2}, {0x3, 0x3}, {0x0, 0x3}, {0x1ff, 0x1}, {}, {0xc, 0x1}, {0xf0f}, {0xf629}], [{0x4, 0x5}, {0x35f7, 0x1}, {0x401, 0xf6}, {0x94, 0xd16}, {0x8, 0x5}, {0x35, 0x4929}, {0x8001, 0x5}, {0x1000, 0x9}, {0x9f, 0x65}, {0x9, 0x4}, {0x9, 0xf0a9}], 0x1, 0x4}, {[{0x9, 0x1}, {0x9, 0x2}, {0x7, 0x1}, {0x4, 0x4adbb8db8b6f3087}, {0x3}, {0x3, 0x3}, {0x7ff}, {0x7, 0x1}, {0x10000, 0x3}, {0x0, 0x2}, {0x80000000, 0x1}], [{0xf767, 0x8}, {0xc, 0x5}, {0x9, 0x8}, {0x6, 0xb23}, {0x101, 0x4}, {0xfffffff7, 0xb98}, {0x10001, 0x8f}, {0x9, 0xa83}, {0xd, 0x1}, {0x4, 0xe00}, {0x7, 0x444}], 0x6, 0x4}, {[{0x2, 0x3}, {0x2}, {0x26914786, 0x3}, {0x3}, {0xd7f, 0x1}, {0x7fffffff}, {0xf}, {0x4, 0x2}, {0x8, 0x1}, {0x4, 0x3}, {0xe, 0x1}], [{0xb59, 0x6}, {0x4, 0x70c063f5}, {0x2, 0xfffffffe}, {0x5, 0x6}, {0x10000, 0x872}, {0x6, 0x8}, {0xffff, 0x7}, {0x7, 0x4}, {0x6, 0x10}, {0xfff, 0xa}, {0x81, 0x4}], 0xb, 0x4}, {[{0x200, 0x1}, {0x2, 0x3}, {0xa, 0x1}, {0x3ff, 0x1}, {0x7}, {0x1, 0x2}, {0x6, 0x3}, {0x7}, {0x92, 0x3}, {0x6, 0x1}, {0x7fffffff, 0x2}], [{0x3, 0xbbb9}, {0x4, 0x400}, {0xdec, 0x9}, {0x7, 0x1d}, {0x0, 0x9a}, {0x1, 0x7}, {0x1, 0xf580}, {0x4, 0x9f}, {0x2, 0x4}, {0x5, 0x7}, {0xfff, 0x1}], 0x5, 0x7}], 0x4, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xab0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) (async, rerun: 32) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000200)={@mcast1}, 0x14) (async, rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xfffe, 0x0, 0x0, 0x0, 0x0, @loopback, @broadcast}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x0, 0xc10, 0x8f2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast}}}}) mmap(&(0x7f0000b02000/0x2000)=nil, 0x2000, 0x1000002, 0x28011, r0, 0x0) 4m1.817660992s ago: executing program 1 (id=865): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0xffff, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)="e9bed67a87ee4623d39c10780000000000", 0x11}}, 0x20040814) socket$unix(0x1, 0x5, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000040)=""/192, 0xc0}, {&(0x7f0000000140)=""/109, 0x6d}, {&(0x7f00000001c0)=""/245, 0xf5}, {&(0x7f0000000c00)=""/199, 0xc7}, {0xffffffffffffffff}, {&(0x7f0000000d00)=""/211, 0xd3}], 0x6}, 0x100) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 4m1.763024782s ago: executing program 3 (id=866): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe3d}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r3, &(0x7f0000000200)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e90009118db0049d90491ceaebfd26ceeef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000100)="09c69e16e1606f", 0x7}], 0x2) sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000003300010029bd0134c97000fddbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x4000034}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x7, 0x18, 0x0, @wg=@data={0x4, 0x1, 0x6}}}}}}, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) read(r0, &(0x7f0000000100)=""/41, 0x29) socket$nl_generic(0x10, 0x3, 0x10) 4m1.734230538s ago: executing program 4 (id=868): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x439, 0x70bd27, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x8000}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) socket$phonet_pipe(0x23, 0x5, 0x2) (async) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 4m1.43124533s ago: executing program 1 (id=869): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000000)={0x1, 0x5, 0x2, 0x0, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 4m1.317098439s ago: executing program 2 (id=870): syz_emit_ethernet(0x7e, &(0x7f0000000800)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x17, 0x4, 0x3, 0x6, 0x70, 0x68, 0x0, 0xdf, 0x1, 0x0, @loopback, @multicast1, {[@generic={0x88, 0x5, "74a741"}, @cipso={0x86, 0x34, 0xffffffffffffffff, [{0x1, 0xf, "0d7764880ff6291278b93cf5f1"}, {0x1, 0x7, "d07efe2760"}, {0x1, 0xa, "5a13e4d8a0b464ab"}, {0x0, 0xe, "8a97e43ce7f1ccca59120529"}]}, @lsrr={0x83, 0x7, 0x74, [@rand_addr=0x64010102]}, @cipso={0x86, 0x6, 0x3}, @end]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x6, 0xffff, 0x2, 0x3ff, 0x2}}}}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r1, 0x181, 0x0, 0x25dfdbfb}, 0xfffffffffffffe45}}, 0x20000811) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) writev(r2, &(0x7f0000003500)=[{&(0x7f00000035c0)='42', 0x2}, {&(0x7f0000000080)='C&', 0x2}, {0x0}, {&(0x7f0000001240)="d3", 0x1}], 0x4) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r4, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2e}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x240408c0) (async) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r4, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2e}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x240408c0) 4m1.153173905s ago: executing program 1 (id=871): socket$kcm(0xa, 0x2, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @mcast2, 0x3}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000040a01010000000000000000000000016c37cc0a86c783661a6cc956d9055766c0342556b39592b7c2ca85670218e5b180da6c83a2aae306e85becb6493cd8b4"], 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x44000) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'fo\x00', 0x1, 0x4, 0x6f}, 0x2c) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000240)={@broadcast, @empty, @multicast2}, 0xc) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'lblcr\x00', 0x0, 0x81, 0x39}, {@rand_addr=0x64010500, 0x4e25, 0x3, 0xc3, 0xfffffff8, 0x12d5c}}, 0x44) r10 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000005000000000000000000711232000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$sock(r10, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4m0.883214573s ago: executing program 2 (id=872): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r2, 0x29, 0x9, 0x7, 0x2, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x10, 0xff, 0x7fffffff}}) (async) sendto$packet(r3, &(0x7f0000000340)="956bc811622c05000000000000007969da2a002d7a3b376c3f0c06c99934cf03b90b1c30c8a1810682140d618475c3c7465a80d345f440fc8ad8b052ac1762f1e9a8b58cd600fdddd6440072d233ca43abb6a228dddaccefb71c61bc1f1e55643689b83ac913b0afdf9a64f0360fcf9652c1df662233776d0fe34b", 0x7b, 0x40004, &(0x7f0000000080)={0x11, 0xf8, r2, 0x1, 0x0, 0x6, @local}, 0x14) (async) syz_emit_ethernet(0xdd, &(0x7f0000000080)={@remote, @remote, @void, {@llc={0x4, {@llc={0xfc, 0xaa, "9d", "2ec9961191acc455254316b3c0aedc716bf89667ddd7a0a1e497be5eda840c31478b093a98e7bd3003b6e2fca9189aaf5fb86918d0a5d49ebcefea3570f2bbddd1f598292d74c19be6ecee7bb98502b38628a3a4f4a2365084e9d46591bda98cf75fc8a5855e8cf76c363962493297608fc0a5a2bac4ef4c00b27a27f071ccad3b493433f7ec8b310b1a541a5727173843bf4571c91141bf3a972e2561f6d6bed71af74b65693ec5be09e25ebd520653b1c7055038031ce820108fd16b07d77fff314b15c8da95a0db2f1393"}}}}}, &(0x7f0000000000)={0x1, 0x2, [0xf81, 0xc21, 0x3fb, 0x21b]}) (async) getsockopt$packet_int(r0, 0x107, 0xc, 0x0, &(0x7f0000000040)) 4m0.861155446s ago: executing program 4 (id=874): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff0085000000b200000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff0085000000b200000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178004"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 4m0.835421624s ago: executing program 1 (id=875): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0xa, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@map, 0xffffffffffffffff, 0x1d}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000d00)=ANY=[@ANYBLOB="9feb010018000000000000006400000064000000080000000100000000000008010000000100000000000008030000000e0000000000000c030000000100000005000006e09e00000b000000ff01000004000000070000000f00000007000900000000000000ffff1000000000000000080000000000000905000000005f5f303f"], 0x0, 0x84}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2], 0x38}}, 0x0) 4m0.751885234s ago: executing program 3 (id=876): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYBLOB="c8"], 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x24000000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044091}, 0x80) 4m0.686921493s ago: executing program 2 (id=877): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x68, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x2, 0x4, 0x2, 0x0, 0x1, 0x1, '\x00', r2, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x49}}}}}, 0x30}}, 0x240040c0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x1c, r9, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x130, r4, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfffe}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x89}, @NL80211_ATTR_FRAME_MATCH={0xe9, 0x5b, "6edba1f5bf90dbf421a458df357fe1c97a1382a6a2c39209f684475a7c4b36c70962eba7793804ffe93c16ac4b913bccd222d429b64ba1798e9882bf27cf3196a95d1350f955dfa26626d7d3b92c4bf56dcb1390fa0c2df3b1822c08295c7fcdf303cf113666fe08cd26e153471e48278ceaf1283f3acbef6d27abca76d834eb5340b51ce84b301fa9f2c5c9d7777382bcabaec863a57ea6435e03b49cf7a9e99d34d0a9ec589fc251be2cd139d3e91ec91fd2b4cde2877043b1eccb3085a9cf0973debed55ec08783d173d39ddba3f8e1a694ee461d7ead94a4e150c3d3afce9e9277fa11"}]}, 0x130}, 0x1, 0x0, 0x0, 0x91}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x10001}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x80}, @alu={0x7, 0x1, 0x9}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 4m0.682546935s ago: executing program 4 (id=878): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000002280)={@private0, 0x200000, 0x2, 0x0, 0x0, 0xfffd}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007050000080013002d15010000000000950017b8000000006916000000000000bf67000000000000350607000fff07206706000002000000160300000ee6fe5fbf500000000000000f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f19de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03cc86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40446d7074be86a912a5ac00f7ffffffffffffff000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000001fe4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b00631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809f905f12f6106f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3f00004d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad0fceee5f339550130a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3116dbc7e2bf2402275fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d644b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a67463d7db0825e9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f3b563ab9000000ff000000000077a99fb5b0a43749ca477c9c7ca20bd428d8f77bb920ad0db4c1da671bfad7f109b776476a54939e621232cd115ba9f37057ad891fea2353f3ad9c042c64a5ecf80f4e4cf927ae39347c22822375c26edf2754695c16780429e03759691adb63553e9c4561528ded5f35bb20e98b2e6d01dbfcde82608359c50881324524db0dbe21efba4f0fc338f4b0b11cb028d1063b3bacaab92fb7f9d2971440f873ec261d54c1570adef8004c91896fcd74c9e03dfd9a781210c0346ed1b02a44c64adad8a3f238a8ddf7207c45057c02e922b942f15ddcfbfb00"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 4m0.54923834s ago: executing program 1 (id=880): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000000c0)={0x0}, 0x7, 0x0, 0x0, 0x2004c004}, 0x0) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fc414a", 0x30, 0x3c, 0x0, @private0, @local, {[@srh={0x2f, 0x4, 0x4, 0x2, 0xe5, 0x70, 0x8, [@private1, @private0]}], {0x0, 0x0, 0x8}}}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x30, 0x3c, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0x10, 0x136, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}]}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc006) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 4m0.491284952s ago: executing program 3 (id=881): r0 = socket(0x10, 0x3, 0x0) getpeername$packet(r0, 0x0, 0x0) (async) write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040802000000000000050002000008000f40fe00000e", 0x24) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 4m0.383074303s ago: executing program 4 (id=882): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r3 = socket(0x14, 0x2, 0x4) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xc], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) sendmmsg$inet6(r2, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="7303a91cf817c6b34c7c56747b1b6ecf440300019ed289482555ebef2d4ae0f03fe19deadad32b865e2caa6c423281a4010ecd439bfb1a14ab92c5d835ddee61d00df85232897e6d4dab46ec4fb6a0a9445ea320cf57a45684e76b7cda746ba00ad16395741b841ffcc653487d29b65e6dfd2399afd2179f1085592566be43838de5792bf553e49b1c4df8aced", 0x8d}], 0x1, &(0x7f0000000380)}}, {{&(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty, 0x6}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000640)="e8f1f0cb140891dfa210f048ea13b568ddff1c17739c7973794362adb850673bef1b42bb1b913c960da5ad17d54e07f603bc73fe5b96cdfa2cce93f3f3bc295ca249a71f5187e6c59290cf71da19a15fa5ee74d9c18cd83ea2d804e7d44761c81f155ca949cd6fba63956afb79a41a00cb0f0b39b51750538b47601f2e5433b80b781a4aa3467f10c01a35b8377d34910c93b98229e610f0485cd4ec9221baf70e1c6dfd92663b018d10bbd7b232fe", 0xaf}, {&(0x7f0000000700)="32dfff8aae4a1df644fbd46cf694be15ba08493bc2b1e6783d610c662c0fa72ee6661158837c196f2ed861a93f1ec4e503bbd7f504ace6bd1df94e94e6588743e91bfd5ce0b4e65d35d770f19e77e365974dbc9ca8ac40702c23d94a478bb3f7a49e170604faa8900921ef6dff93d4f1982547e2119433963cb2c3d901159ff8c8d41434096830720deab2fce4f83a9a4b8ad66527285ffc8d8ae786ad0386bb103259bcafdb470b360d6b4158cdf1743dba6745d7d1c05f5073b1255ca9de53d2c13c779ae2e6d569a9352c0bdb59b5c00f41d80e40f81d6a0f5038c3f2e1bc7bf6ea7c89594088b1f0b67554cc618fd05eef", 0xf3}], 0x2, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], 0x3a0}}, {{&(0x7f0000000c00)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10000}, 0x1c, &(0x7f0000001080)=[{&(0x7f0000000d40)="d4fba9e5af8f14ae0cbca6c6418139bc8c4d8a3ff73785f23872e5c197e6205e4082287be2fa2577056947a2a49131168427db5874009f520e515284a6cac6fd161ab446d367e17bd3fe664aa45ccb6d1371cfb0fee33da04a8d5574c3d8224ddcf6288e529def7cf3ba7ad3030ba635c43d08559912d62d58b1e91aafe804981260384c56364f9572c31f4c1bea1183cceb4299d7009731fd8b12cd6f9af91f8f0827fe0f5f8338567f100200940afccaab912930c836b1b2b5eb5965c7b614fe62d99764f7c00e425add2e8ab32e64a6f47cc32a6c4aa86bb1e701164bdc14444a84d7fa3a9a8a3134a4d85a8ad78c8288", 0xf2}, {&(0x7f0000000c40)="1792636113c668678b039d0da8469b37076a608e19c1d15e3bf4c05807cf3d4d247cfc00e28e8a8c6f817d4a8170ac9bd876a087b612209ecc45c942980caa481a2c5d131b622b1b21ad5363405d6484218ac8722bb71fe7cc9135f6a5ea8b086d519119d42787389bc8090900f0f88c6987c24614e71886884cf159b1ca", 0x7e}, {&(0x7f0000000e40)="164866cae5779dde08f1449ee1c6d801102ef5d400dee6f129b6bb6e6c76de857bd5002a1aee2cbfd241a03a6067283c2bfff06b64cfd671b05df8403343b30c8c64ed229a011aa2748fc42735e6314896501a55eef43aacdcf9f967fd53f0b6fc18237b85ada85986be86fd0f071dba5ecc187e5825f0f6ee904d3e951e331477b40a9dac23cb2dab8976b29d54910e205094eff1bc75bf1f76c8f9a4d284a604cd8fcb6b2dce2e6750267134993977064e3d6065f025573398", 0xba}, {&(0x7f0000000f00)="44985fc6c447c5536b38a0dc1141312f87142950bdef71b6de452a9540fbd3377e8a03ba4b45b56a3e967fbe6531a08a9a1b1c1c5e4ec09b680872575557933fe730115cc0352bd57effa6e68d73822cad49a0311bb2ae6c8909cff58c1820f655c778541f804859a6a9acef3fd070b440dec0014ed36774be4af72ce5b36fea5e4a65dc768c45df27", 0x89}, {&(0x7f0000000fc0)="8d5420cf85e0a2897f1f68f59e0dc1d838cdcd7ccef90775ee02046f9edd3e45ee5a31b353893f4b6edb43c7a198badd53a9c996e607b5eb5c572a4bc7bfea157d99743da47eb74dcd331b9facb7d529763507dcce1dc7c0d306804856832bd31ed8a19109ca45b446276cf9f5e1fc920d44a2355f06831f72ff24617b3b026c77e367a7837e32e9f8f8ec9daef6102d5f9a45c7ad9fa68cb1d1b5da1d6a48c8a2e9426f6e85f46348650786c8798b3f176d00ddd8be98191d40dc4a27d88a", 0xbf}], 0x5}}, {{&(0x7f0000000cc0)={0xa, 0x4e22, 0x7, @loopback, 0xffffffff}, 0x1c, &(0x7f0000001400)=[{&(0x7f0000001100)="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", 0xfd}, {&(0x7f0000001200)="faa8cab384142756b25b5408409e1834ecb6ecf220b340f71e2c04f40f7e329d867cb475fdc0319f13866f5517daca8ea0dabe63f71eb16958c9258a998925925d4e60f25e0c97815e9b6bcbb9e970139c9fb68ee96271a2cc3ece045bcd2529b6b31ca98c028047c47012", 0x6b}, {&(0x7f0000001280)="da53e9b40db37cec8c4faeec78687b2400a94121a7e4a11af9fd9c2e8e5199923b8a34a2e56c2b7c286432bb1939e6158ca21bde989353c0484e7ffe39297ec00b34391b894eb25c2dba63e3a23ab10804c1a7", 0x53}, {&(0x7f0000001300)="093b87a82c2ef31d0592e4c31a103551c83e0517ceabee06b7207c93fda2e919", 0x20}, {&(0x7f0000001340)="a997312c96df39c9d0e95e0dc616508aef1f08be00a09a6f37e77bdf220872eb83063a19e48a0b247e64e74678aa954286f0f72302a7e72bc905a2910a5d687be2e0609b737a03e17a028d037def88ff480d14634813aff3e7cf7c25e53c810e53402009004a403b0909a59bd33da27dc0a6dfc8e19330e7b54ab17a3e39a084ca6f42c3497bad0dec74ee1a5c1bc6e4662c7f6ccfb5b6a4f476e4a2b90d8fedc2355254f0314d4d2333b5800d959505", 0xb0}], 0x5, &(0x7f0000001480)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x67, 0x1, '\x00', [@pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x28}}, {{&(0x7f00000014c0)={0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000001500)="ae1c57aa486d14615de4bce08a645b5c5a7a839566f8e7e3cf10af1fb3e82defa1f4a3f3b43998fc1d6a3957bcf2186c1c56a17d2e6d26ad55a597a2919678b0167d0ba4fa73b2111905eaa7273fc531943305a6397fc1f47c80f1191309f7ae544b2fe59828917cbe68de4d6bc814e1e6e7270b7e6d758f8803c5d48f", 0x7d}, {&(0x7f0000001580)="75d06466d1aeaf7a97d99649657548956547a4e1c6a12be23bd0ac35b2d3591fe864f92f1cfae70980ab64d36c37a39af17997a3f67437d3c8ad4b94682863181c4c66f8ec9cd583aa804545cf354899d8bef8468c5add", 0x57}], 0x2, &(0x7f0000000840)=ANY=[@ANYBLOB="1400000000000000290000003e0000000200000000000000300000000000000029000000370000006702000000000000c910fe8000000000000000000000000000bb00010000000020000000000000002900000037000000ff000000000000000001000000000000280000000000000029000000390000003c0201070000000000000000000000000000000000000000280000000000000029000000390000000602005400000000ff0200000000000000000000000000015000000098b40000000029000000360000002b0600000000000004010405020003010700e60000000000c20400000006080100c910ff020000000000000000000000000001040104c204ffffffdd00000000"], 0x108}}], 0x5, 0x4004080) ioctl$SIOCX25GDTEFACILITIES(r3, 0x618f, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x128}, 0x20044010) 4m0.304083911s ago: executing program 3 (id=883): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5000000010000305000000000000020000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0001000000000000000000050009000000000008000500", @ANYRES32=r2], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="8dc91bc00a6be9c822ba3ded4a41f35eddd5604ee1395bd9dbe9397171591d66d51e636f75a94348576c5c4ffb04d26129d507dcc878744b967dfdc87c3bd2d4d52dceff1ce60b7da0112f2ea2fa94cb3046b2f9cb45ec8342e11c5a1ce0d97fc4d9abd6c99c1368c37a10a803dd70b57c9a1ed2ba61b4b175cc5fe9e9945b21fb11dc32deb3c9f8ebb6982f31db9b3e0649b3f8fd48818b266511a9b1dc3b4f1bf6d48b5ce2e1be"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r4, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000000000)=0x10006, 0x4) recvmmsg(r4, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/245, 0xf5}, 0x80000001}], 0x1, 0x45833af92e4b39ff, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0)="37c15ed1a2e20fed70ba09963e48fc66498e984cb70609e9a0c3c1d346207277235c966b7de109eeba3bb59240c90ff774ddd3e5af3995303966592e24558ee5a9bdd3e1fb6e1c06e0ce84e7aef5a487deef09ab602103f2aa8afca39e2ea37cd39e9371d6c5e3ed22b1167e839d1173b63e0c5d0d376d2984f817a9b841814cf6f49538d18ae97bd1", 0x89, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="c50a00000000000061139c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x38, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8051}, 0x0) 4m0.203131533s ago: executing program 2 (id=884): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x28, 0x18, 0x35f32a6dfa748ddd, 0x0, 0xfffffffe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_MULTIPATH={0xc, 0x9, {0x0, 0x1d}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040814}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@map, r4, 0x36, 0x4, 0x0, @void, @value=r4}, 0x20) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xbb}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [], {0x14}}, 0x28}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRES32=0x0, @ANYBLOB="060018"], 0x84}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16=r8], &(0x7f0000000080)='GPL\x00', 0x4, 0x9d, &(0x7f0000000280)=""/157}, 0x94) 4m0.095429196s ago: executing program 1 (id=885): syz_emit_ethernet(0x4e, &(0x7f0000000880)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb86dd6001044800183aff20010000fe8000000000000000000000000000aa8800907800000000fe8000000000000000000000000000bb00"/78], 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x8000000, 0x0, 0x400c850}, 0x800) r1 = socket(0x11, 0x800000003, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000140), &(0x7f0000000240)=0x4) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000080)={0x0, 0xea60}, 0x10) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4004}}, 0x26) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711294000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) 3m59.492845494s ago: executing program 32 (id=885): syz_emit_ethernet(0x4e, &(0x7f0000000880)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb86dd6001044800183aff20010000fe8000000000000000000000000000aa8800907800000000fe8000000000000000000000000000bb00"/78], 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x8000000, 0x0, 0x400c850}, 0x800) r1 = socket(0x11, 0x800000003, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000140), &(0x7f0000000240)=0x4) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000080)={0x0, 0xea60}, 0x10) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4004}}, 0x26) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711294000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) 3m59.473270573s ago: executing program 2 (id=887): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x16, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000140)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000180)=[{0x4, 0x1, 0x2, 0x8}], 0x10, 0x8}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x16, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000140)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000180)=[{0x4, 0x1, 0x2, 0x8}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r0, 0x0, 0x16, 0x1000, &(0x7f0000000280)="6a6aa960be25df5ee7c26547998cfbc3160723f09c3c", &(0x7f00000002c0)=""/4096, 0x9, 0x0, 0xac, 0x41, &(0x7f00000012c0)="92f964f866850ee22ca54c1c167668b3612f72e7e0c65255f16747a44ee3a5bf35776fca08dd6e3cf861c140d3f6b6c2759b76e60840969547c27a9d295455e0e32609329c0900d24ef9ba89f4e8dc6e5a4b9b88f54d251e07572c928d93b9f7c61fad7bcc34bddb099f21267776e4339e55b203393b22ca83da4c65a1df68b1dac2f74def347f691907a620100b76502e09641e7e49ce0cc70a90f89d6d0789b7cea76b0023203302e30b29", &(0x7f0000001380)="ab24cecb232170e2dc2a43bf20a98776d37e8b5f9f689428ae40fed3f543383437289940faa2910e866f8d7f19779da3ff35e3f8ab212b141971846b09df1fe240", 0x6}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r0, 0x0, 0x16, 0x1000, &(0x7f0000000280)="6a6aa960be25df5ee7c26547998cfbc3160723f09c3c", &(0x7f00000002c0)=""/4096, 0x9, 0x0, 0xac, 0x41, &(0x7f00000012c0)="92f964f866850ee22ca54c1c167668b3612f72e7e0c65255f16747a44ee3a5bf35776fca08dd6e3cf861c140d3f6b6c2759b76e60840969547c27a9d295455e0e32609329c0900d24ef9ba89f4e8dc6e5a4b9b88f54d251e07572c928d93b9f7c61fad7bcc34bddb099f21267776e4339e55b203393b22ca83da4c65a1df68b1dac2f74def347f691907a620100b76502e09641e7e49ce0cc70a90f89d6d0789b7cea76b0023203302e30b29", &(0x7f0000001380)="ab24cecb232170e2dc2a43bf20a98776d37e8b5f9f689428ae40fed3f543383437289940faa2910e866f8d7f19779da3ff35e3f8ab212b141971846b09df1fe240", 0x6}, 0x50) ioctl$FIONCLEX(r0, 0x5450) (async) ioctl$FIONCLEX(r0, 0x5450) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=@bloom_filter={0x1e, 0x101, 0x5, 0x80, 0x120, 0x1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001800)={&(0x7f0000001480)="8f2a94d268e8adaf0d51a4ebdbc1423eb586bfa15544c186b86e8bcf08b41fe4f127546e3d385461e6b3b018b2f66be464121355c66c285e8a04d52fdc35c861a6b517c0336c18ddbe8f576838b389510561d2e85e2d52a46cd2a764a1ad0e3b21e7bd3aee873d15daba7a42f9cd935a4c90db27d2184cc0f2a39953b445b4b6f037ef81d6aa00a0b25c78370c0279cc4dd04cd0f488e86eadfd8530ae273286108ea756476e925261d248bd6dafc9712ed1ad3bcbea4dc905eec93e5d5783eeac5d706c7bd55ef6167250f561f26d32d7c1d236790bd41317e98c", &(0x7f0000001580)=""/72, &(0x7f0000001600)="656bb4e9aad0467c092b5f55d2dd1785031ab9551160e395cb48f0c28aa109d97f1d217854ad1bb1729e8e708c129d2e03831b3a99bc55c8011d2bb4734086bf50a3eb8eb5c2ee6fc320d6426b79d69555906bd9a7e1b41f0c920eff755cb37e", &(0x7f0000001680)="6bce8f19fac69d50b029ef4c06a6e2c024dffe1141b7f5dc771be02f9e22774851128e821653b26eb6f79e7683c535a0dfaebdb485a5c258b135c5f51c8c63d2dd958de737d8abdae9498c77318e6143d7b68e26a9e4f98238de517286d7c435ac62e2340936f3d255cd2e8ab2a21b3a103f35b100dd9f7c7b48b869925449241ffe88a27b0928046028db5d3a12fe4fd42cb020ee63628575ca0c75d8f7d2deadca3ade773667d6815c10a6115902d9bc73619feee70a4e7f89d4c023afc7aafa01352eafb8ecb8d39eb5e4c9fa29a5984bd3397b50da", 0x1, r1, 0x4}, 0x38) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000001840)) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000001880)) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f00000018c0)) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f00000018c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001940)={&(0x7f0000001900)='io_uring_cqring_wait\x00', r0, 0x0, 0x1}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001940)={&(0x7f0000001900)='io_uring_cqring_wait\x00', r0, 0x0, 0x1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8c1}, 0x40000) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000001a80)={0x1, [0x42]}, 0x6) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x34, 0x1, 0x7, 0x3, 0x0, 0x0, {0x8, 0x0, 0xa}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x80}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2f9f}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x40000d4) (async) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x34, 0x1, 0x7, 0x3, 0x0, 0x0, {0x8, 0x0, 0xa}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x80}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2f9f}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x40000d4) r5 = accept4(r3, &(0x7f0000001bc0)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000001c40)=0x80, 0x100800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r5, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x60, r6, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff7, 0x6a}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x27}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x30}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x11}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1d}]}, 0x60}, 0x1, 0x0, 0x0, 0xc040}, 0x40010) (async) sendmsg$NL80211_CMD_DISCONNECT(r5, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x60, r6, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff7, 0x6a}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x27}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x30}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x11}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1d}]}, 0x60}, 0x1, 0x0, 0x0, 0xc040}, 0x40010) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000001e00)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x6, 0x8001, 0x8, 0x2, 0x6, 0x0, 0x80}, &(0x7f0000001ec0)=0x9c) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000001f00)=@assoc_value={r7}, &(0x7f0000001f40)=0x8) sendmsg$nl_route(r5, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)=@RTM_NEWNSID={0x1c, 0x58, 0x400, 0x70bd28, 0x2, {}, [@NETNSA_NSID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) accept$inet6(r5, &(0x7f0000002080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000020c0)=0x1c) (async) r8 = accept$inet6(r5, &(0x7f0000002080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000020c0)=0x1c) setsockopt$inet6_MCAST_LEAVE_GROUP(r8, 0x29, 0x2d, &(0x7f0000002100)={0x7f, {{0xa, 0x4e20, 0x5, @local, 0xfff}}}, 0x88) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002200), r5) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000002240)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000022c0)={'syztnl0\x00', &(0x7f0000002280)={'sit0\x00', 0x0, 0x80, 0x80, 0xfff, 0x5cf, {{0x7, 0x4, 0x1, 0x6, 0x1c, 0x67, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp={0x44, 0x8, 0x5, 0x0, 0xa, [0x0]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000002300)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000023c0)={'syztnl1\x00', &(0x7f0000002340)={'erspan0\x00', 0x0, 0x8000, 0x700, 0x7, 0x1846, {{0xc, 0x4, 0x1, 0x2, 0x30, 0x66, 0x0, 0x4a, 0x29, 0x0, @rand_addr=0x64010102, @loopback, {[@rr={0x7, 0x1b, 0xf4, [@remote, @rand_addr=0x64010102, @local, @remote, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x6}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000023c0)={'syztnl1\x00', &(0x7f0000002340)={'erspan0\x00', 0x0, 0x8000, 0x700, 0x7, 0x1846, {{0xc, 0x4, 0x1, 0x2, 0x30, 0x66, 0x0, 0x4a, 0x29, 0x0, @rand_addr=0x64010102, @loopback, {[@rr={0x7, 0x1b, 0xf4, [@remote, @rand_addr=0x64010102, @local, @remote, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x6}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000024c0)={'syztnl2\x00', &(0x7f0000002400)={'gretap0\x00', 0x0, 0x80, 0x10010, 0x6, 0x3, {{0x21, 0x4, 0x0, 0x8, 0x84, 0x66, 0x0, 0xb, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x1c, 0x4f, 0x3, 0x6, [{@empty, 0x7fffffff}, {@multicast2, 0x2}, {@loopback, 0x5}]}, @end, @timestamp_addr={0x44, 0x24, 0x4e, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@private=0xa010101, 0x7}, {@local, 0x6}, {@multicast2, 0x3}]}, @lsrr={0x83, 0x1f, 0x23, [@remote, @local, @remote, @rand_addr=0x64010100, @rand_addr=0x1, @private=0xa010101, @private=0xa010100]}, @end, @timestamp_addr={0x44, 0xc, 0x5d, 0x1, 0xd, [{@loopback, 0x7}]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000029c0)={&(0x7f00000027c0)={0x1e0, r9, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x4}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x98a290a8623985f8}, 0x8010) 3m59.201240771s ago: executing program 33 (id=887): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x16, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000140)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000180)=[{0x4, 0x1, 0x2, 0x8}], 0x10, 0x8}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x16, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000140)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000180)=[{0x4, 0x1, 0x2, 0x8}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r0, 0x0, 0x16, 0x1000, &(0x7f0000000280)="6a6aa960be25df5ee7c26547998cfbc3160723f09c3c", &(0x7f00000002c0)=""/4096, 0x9, 0x0, 0xac, 0x41, &(0x7f00000012c0)="92f964f866850ee22ca54c1c167668b3612f72e7e0c65255f16747a44ee3a5bf35776fca08dd6e3cf861c140d3f6b6c2759b76e60840969547c27a9d295455e0e32609329c0900d24ef9ba89f4e8dc6e5a4b9b88f54d251e07572c928d93b9f7c61fad7bcc34bddb099f21267776e4339e55b203393b22ca83da4c65a1df68b1dac2f74def347f691907a620100b76502e09641e7e49ce0cc70a90f89d6d0789b7cea76b0023203302e30b29", &(0x7f0000001380)="ab24cecb232170e2dc2a43bf20a98776d37e8b5f9f689428ae40fed3f543383437289940faa2910e866f8d7f19779da3ff35e3f8ab212b141971846b09df1fe240", 0x6}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r0, 0x0, 0x16, 0x1000, &(0x7f0000000280)="6a6aa960be25df5ee7c26547998cfbc3160723f09c3c", &(0x7f00000002c0)=""/4096, 0x9, 0x0, 0xac, 0x41, &(0x7f00000012c0)="92f964f866850ee22ca54c1c167668b3612f72e7e0c65255f16747a44ee3a5bf35776fca08dd6e3cf861c140d3f6b6c2759b76e60840969547c27a9d295455e0e32609329c0900d24ef9ba89f4e8dc6e5a4b9b88f54d251e07572c928d93b9f7c61fad7bcc34bddb099f21267776e4339e55b203393b22ca83da4c65a1df68b1dac2f74def347f691907a620100b76502e09641e7e49ce0cc70a90f89d6d0789b7cea76b0023203302e30b29", &(0x7f0000001380)="ab24cecb232170e2dc2a43bf20a98776d37e8b5f9f689428ae40fed3f543383437289940faa2910e866f8d7f19779da3ff35e3f8ab212b141971846b09df1fe240", 0x6}, 0x50) ioctl$FIONCLEX(r0, 0x5450) (async) ioctl$FIONCLEX(r0, 0x5450) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=@bloom_filter={0x1e, 0x101, 0x5, 0x80, 0x120, 0x1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001800)={&(0x7f0000001480)="8f2a94d268e8adaf0d51a4ebdbc1423eb586bfa15544c186b86e8bcf08b41fe4f127546e3d385461e6b3b018b2f66be464121355c66c285e8a04d52fdc35c861a6b517c0336c18ddbe8f576838b389510561d2e85e2d52a46cd2a764a1ad0e3b21e7bd3aee873d15daba7a42f9cd935a4c90db27d2184cc0f2a39953b445b4b6f037ef81d6aa00a0b25c78370c0279cc4dd04cd0f488e86eadfd8530ae273286108ea756476e925261d248bd6dafc9712ed1ad3bcbea4dc905eec93e5d5783eeac5d706c7bd55ef6167250f561f26d32d7c1d236790bd41317e98c", &(0x7f0000001580)=""/72, &(0x7f0000001600)="656bb4e9aad0467c092b5f55d2dd1785031ab9551160e395cb48f0c28aa109d97f1d217854ad1bb1729e8e708c129d2e03831b3a99bc55c8011d2bb4734086bf50a3eb8eb5c2ee6fc320d6426b79d69555906bd9a7e1b41f0c920eff755cb37e", &(0x7f0000001680)="6bce8f19fac69d50b029ef4c06a6e2c024dffe1141b7f5dc771be02f9e22774851128e821653b26eb6f79e7683c535a0dfaebdb485a5c258b135c5f51c8c63d2dd958de737d8abdae9498c77318e6143d7b68e26a9e4f98238de517286d7c435ac62e2340936f3d255cd2e8ab2a21b3a103f35b100dd9f7c7b48b869925449241ffe88a27b0928046028db5d3a12fe4fd42cb020ee63628575ca0c75d8f7d2deadca3ade773667d6815c10a6115902d9bc73619feee70a4e7f89d4c023afc7aafa01352eafb8ecb8d39eb5e4c9fa29a5984bd3397b50da", 0x1, r1, 0x4}, 0x38) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000001840)) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000001880)) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f00000018c0)) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f00000018c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001940)={&(0x7f0000001900)='io_uring_cqring_wait\x00', r0, 0x0, 0x1}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001940)={&(0x7f0000001900)='io_uring_cqring_wait\x00', r0, 0x0, 0x1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8c1}, 0x40000) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000001a80)={0x1, [0x42]}, 0x6) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x34, 0x1, 0x7, 0x3, 0x0, 0x0, {0x8, 0x0, 0xa}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x80}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2f9f}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x40000d4) (async) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x34, 0x1, 0x7, 0x3, 0x0, 0x0, {0x8, 0x0, 0xa}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x80}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2f9f}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x40000d4) r5 = accept4(r3, &(0x7f0000001bc0)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000001c40)=0x80, 0x100800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r5, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x60, r6, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff7, 0x6a}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x27}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x30}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x11}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1d}]}, 0x60}, 0x1, 0x0, 0x0, 0xc040}, 0x40010) (async) sendmsg$NL80211_CMD_DISCONNECT(r5, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x60, r6, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff7, 0x6a}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x27}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x30}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x11}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1d}]}, 0x60}, 0x1, 0x0, 0x0, 0xc040}, 0x40010) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000001e00)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x6, 0x8001, 0x8, 0x2, 0x6, 0x0, 0x80}, &(0x7f0000001ec0)=0x9c) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000001f00)=@assoc_value={r7}, &(0x7f0000001f40)=0x8) sendmsg$nl_route(r5, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)=@RTM_NEWNSID={0x1c, 0x58, 0x400, 0x70bd28, 0x2, {}, [@NETNSA_NSID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) accept$inet6(r5, &(0x7f0000002080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000020c0)=0x1c) (async) r8 = accept$inet6(r5, &(0x7f0000002080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000020c0)=0x1c) setsockopt$inet6_MCAST_LEAVE_GROUP(r8, 0x29, 0x2d, &(0x7f0000002100)={0x7f, {{0xa, 0x4e20, 0x5, @local, 0xfff}}}, 0x88) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002200), r5) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000002240)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000022c0)={'syztnl0\x00', &(0x7f0000002280)={'sit0\x00', 0x0, 0x80, 0x80, 0xfff, 0x5cf, {{0x7, 0x4, 0x1, 0x6, 0x1c, 0x67, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp={0x44, 0x8, 0x5, 0x0, 0xa, [0x0]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000002300)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000023c0)={'syztnl1\x00', &(0x7f0000002340)={'erspan0\x00', 0x0, 0x8000, 0x700, 0x7, 0x1846, {{0xc, 0x4, 0x1, 0x2, 0x30, 0x66, 0x0, 0x4a, 0x29, 0x0, @rand_addr=0x64010102, @loopback, {[@rr={0x7, 0x1b, 0xf4, [@remote, @rand_addr=0x64010102, @local, @remote, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x6}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000023c0)={'syztnl1\x00', &(0x7f0000002340)={'erspan0\x00', 0x0, 0x8000, 0x700, 0x7, 0x1846, {{0xc, 0x4, 0x1, 0x2, 0x30, 0x66, 0x0, 0x4a, 0x29, 0x0, @rand_addr=0x64010102, @loopback, {[@rr={0x7, 0x1b, 0xf4, [@remote, @rand_addr=0x64010102, @local, @remote, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x6}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000024c0)={'syztnl2\x00', &(0x7f0000002400)={'gretap0\x00', 0x0, 0x80, 0x10010, 0x6, 0x3, {{0x21, 0x4, 0x0, 0x8, 0x84, 0x66, 0x0, 0xb, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x1c, 0x4f, 0x3, 0x6, [{@empty, 0x7fffffff}, {@multicast2, 0x2}, {@loopback, 0x5}]}, @end, @timestamp_addr={0x44, 0x24, 0x4e, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@private=0xa010101, 0x7}, {@local, 0x6}, {@multicast2, 0x3}]}, @lsrr={0x83, 0x1f, 0x23, [@remote, @local, @remote, @rand_addr=0x64010100, @rand_addr=0x1, @private=0xa010101, @private=0xa010100]}, @end, @timestamp_addr={0x44, 0xc, 0x5d, 0x1, 0xd, [{@loopback, 0x7}]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000029c0)={&(0x7f00000027c0)={0x1e0, r9, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x4}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x98a290a8623985f8}, 0x8010) 3m59.155169176s ago: executing program 3 (id=888): r0 = socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) sendto$rxrpc(r0, 0x0, 0x0, 0x90, 0x0, 0x0) 3m59.146169407s ago: executing program 34 (id=888): r0 = socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) sendto$rxrpc(r0, 0x0, 0x0, 0x90, 0x0, 0x0) 3m59.145790736s ago: executing program 4 (id=889): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061108b00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async, rerun: 64) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd0, 0x0, 0x4) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) (async) ioctl$TUNGETFILTER(r5, 0x801054db, &(0x7f00000001c0)=""/10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xf}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x6c, 0x0, @private1, @private2}}}}}}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) (async) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) (async, rerun: 64) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4000, r6}, 0x18) (rerun: 64) ioctl(r8, 0x8b27, &(0x7f0000000040)) (async) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m59.145292087s ago: executing program 35 (id=889): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061108b00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async, rerun: 64) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd0, 0x0, 0x4) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) (async) ioctl$TUNGETFILTER(r5, 0x801054db, &(0x7f00000001c0)=""/10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xf}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x6c, 0x0, @private1, @private2}}}}}}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) (async) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) (async, rerun: 64) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4000, r6}, 0x18) (rerun: 64) ioctl(r8, 0x8b27, &(0x7f0000000040)) (async) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.321677717s ago: executing program 7 (id=2841): syz_emit_ethernet(0x4e, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="bc00000090780000020499041d12910000000000006f00"/32], 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000006910880000000000950000bb00000000"], &(0x7f0000000480)='GPL\x00'}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000100)=@srh={0x0, 0x0, 0x4, 0x0, 0x5}, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e20, 0x47, @remote, 0x2}, 0x1c) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000c80)={'veth0_to_batadv\x00'}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000280)={0x0, 0x9a, "2ba1c836477ba0591f404febb63b8364391365097d78276ce2d5b5568aba94f267eff44ce1f9101f1ca96cacab8c5649845da30f88dafd8860106e49d45a8e4c430f941ea6ac5525e4da24f8aeb383f26e5e8c5bf288847403bf819e7e33e5a820ddd7f85f06903eee0dae97b35474b0bf28ed20f94fcd56a4bb9d8b399e253b95a4c0e6d31b5a94d3d4795721a782cf571d0859f92800cf9f54"}, &(0x7f0000000340)=0xa2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000380)={r3, 0x6}, &(0x7f00000003c0)=0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@private1, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8) 2.138506271s ago: executing program 7 (id=2842): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f00000017c0)) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="3000000000010104800800014000000000080002400000000008000140bd1e950aa1c9d63a5dff0000006a"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="900100000001010100000000000000000100000a80200d8008000200ffffffff14000400ff01000000000000000000000000000114000380060002004e210000060001004e23000014000500fe8000000000000000000000000000aa140004002001000000000000000000000000000008000200ffffffff14000500fc00000000000000000000000000000008000200ac1414bb100005800a000100482e323435000000100005800a000100512e39333100000008000740000000023c000d80140004000000000000000000000000000000000114000500fe800000000000000000000000000020080002007f00000108000200ac1e000188000d800c000380060002004e21000014000500fc02000000000000000000000000000108000200ffffffff34000380060002004e240000060002004e230000060001004e240000060002004e230000060002004e240000060002004e23000014000400fc01000000000000000000000000000014000400fc010000000000000000000000000000100016400004000000008000000002ad"], 0x190}, 0x1, 0x0, 0x0, 0x4}, 0xc001) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) socket(0x4, 0x3, 0x4) 1.731004019s ago: executing program 7 (id=2846): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x5, 0x0) (async) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="7e676b85291bbdc777f6967c2edd18ff60f535680683347cbe55fd3f40510e9e21b8c220a41801a35bd993c3319e064a8ea3a9f29a7b551d7564dceb272038a7", 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x68, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb00000000"}}}}}, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="88010000", @ANYRES16=r5, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) getsockopt$bt_hci(r6, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c00"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) listen(r1, 0x50) (async) listen(r1, 0x50) sendmsg$inet(r1, &(0x7f00000019c0)={&(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000380)="8cefbb785a23", 0x6}], 0x1}, 0x4000) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd70000400000005000000080009000200000008000c00a50a000008000b0000000000060001"], 0x34}}, 0x20) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r7, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x852d9c34ce36ed3e}, 0x8000) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r7, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x852d9c34ce36ed3e}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) 1.614735809s ago: executing program 8 (id=2850): setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x5d) (async, rerun: 32) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffeffffff3fbf, 0x0, 0x0) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) (async) sendmsg$tipc(r2, &(0x7f0000000180)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r6, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r5], 0x68}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (rerun: 64) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 1.507109001s ago: executing program 0 (id=2851): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRESDEC=0x0], 0x0, 0x26, 0x0, 0x1}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x4, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x10}]}}]}, 0x44}}, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) pread64(r0, &(0x7f0000000080)=""/154, 0xfffffffffffffe75, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x3f}, 0x28) 1.417951631s ago: executing program 8 (id=2853): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x5c}}, 0x0) 1.349431714s ago: executing program 5 (id=2854): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f0000000280), 0x0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x70bd29, 0x25dfdbfd, {0x2, 0x18, 0xc0, 0x2, r3}, [@IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0xffbb, 0x0, 0x0, 0x10001}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 1.221942411s ago: executing program 0 (id=2856): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x80, 0xd, 0x5, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x11}, 0x7800, 0x8020, 0x14853, 0x400000}}) (rerun: 64) r1 = socket$kcm(0x10, 0x2, 0x10) write(r1, &(0x7f0000001180)="178182e3a3715d79964f802e57639fcc7c98561c6ac54e9af55ad91551d2cbbc52796eeb54c67ae89e438621447f273886b5fcf4fbb030e04543b15cafdeb8090b993cf026083427f9dde3f58245d53ce82cf527ec3ae853ff42a27d53d7f90cbb5127508451896a59dc59d1d6b4717c0d5d543408836f62b8ad8b465b4c08890118165f615a2609a8f42672b240ccf3fda1bffa65e1a82ed83d3a7385833c75fe3431414ba0f2517b03cdc91fc1942c88a6760cf8081a74e879dc3051a91f659301d3d5c6a8e60d795735903f069599a58f38df5388825c7f2229d6b1c4ce9cd73bbbaee8f6560b8428cc4870526f113a8a6e41c17f64359312a000534d18313fcebe892f497388e12c2ae396c833c8b2ee0eb32dc97951550c1e0d326616a6e99e2ad9739c4e6ca1d46c417a8f1a8d19a60358f860649c0084c8ac3283c27982e5bed3a0717607a4239f5c493633a61270b2ffd6f4c3a0581304ebe5d5d531f50621c9ce83e62767730dbcb0cd4b29c60aca878cc0641f10688ce246fa3cccec45aa93ee9fc077948f0dfbec11eca4bad8d23f7b4a5ad956399fc205d311c4ac44053b784cb045d83a6ebbecd42b61416e868bb9b02fc364547f10efa6e40633d9c8c7cb7cc60efbfaea3bfaa51aa18c3b1b3b8aaaaece324ef1d6ebc9827e6cf3f93a9aced5b021132c3d2bddfcb0fcc5ef0daf432e1e0569bb1a79471942c5b4ab17a9cf4e6a6441714ce1e89a9f66717bfd81e156ac319cb91563ef3d79dcf571a015ade7084661425f18efa9a054580aac73a200eb5e0d8ebf4a97f991eeeb82e709da07643eb0c700bc5cd24817a76fef97d29f0f8bf7b84e4670154b2795535570336d59efd8425b4e84a251ca4c228c8f1c1edb8140895e8f7b899ea235f51f4d06a80363978ad0626d33c381e93aa6441e8005bb45ebbdd9a41af73ef6c9f847b07253b63a2f2207db10f9f0a26bf27561a0af887bb7c193e5e0e6b369bf0bdc431b88a0bd2555c56022f163870dd14a3adf7fbc87414687022f1cbaa39b7c96b0b357c359c0a416b8bc801f2bee5e1c43fdadee5c86b1c06852fbe42e063aaea294aa22d332dadb0e73a1e93bc0a41fc34437e34172c2f5004d2ea13a4642a667eed004662cf91cf988e30815d5c4289809672b7037f323e68c80dc1006f2a2c9ae84132a56fe12baa8331c5c2c44666d109b77deb01b4dd48e1116d5319f380b5a813bb6da4e167a39c73a3548801fe985c3650ee674c1652b8bf0f4269629dd89c0b0ee8103edaa09a245a68dee7fb1a3a9872c44bc5425e7b5a83fbcda18ba2624295aa234f30d4a2d67f0f59fed0b50cb67bb2514f7dd0d06ff126b39765c8807239538678ede0ea7f17ef14bcb41622cf12da06b50012c0f370e1bfb710bb2730fca822d5874a7e9f48de316c6f08a0a90621bc677277c69c4256766abcc88d6e85c177285ebca94696ab9c0ebde65f9fea1e42281bf14a77ab2028c21e6d24031ce7c6c6710a2da6abc75d1ec5435211ef53d18c29f77f4d6024f6f93fd482b7a58ad63d020968846cb1eb636d1e8b3eece45cf462bfd6de8c874d513b5d874dde82a9203e873f58392d3b2808eb78c1df4cc3e3d54f315bdabd55e2d06f2cc24a76dfe636a0680e3faa19a392ac8e7cd3eadcc9be63bf78dc78d97c98716e1594e2c0019266dff5d182e54acb8cab21be1a8e8a5085872c2ba4566d25a6440a3a9167499992fd752229efa5695380a47acf3c7e3187cb0dce79d3e517344c6c37bfd02d983c4aef872b55f1af2106db9fa875cd1736be5dfbd862ac739444044bf8423a187216c0b2f18ddc74c7c11519f1eab5766d27efd28759503066705b624f6a982a3b1782e88834dc600668ec77215046f962c5d7e05380b81a0abf87ade9953d07e1f9720c4606cb290ab368701096ecb231b7bb64c05cd58cb7c0a8620a921ddb9cde6a9a96c949958ecbbb64faa20925017142fcad479196f5ebcf34aede938c637fb2b926ffef6376e1e3c5c9b91e5efebe391eaed4463e7aedb11243cbf86441a5854ba0cf405d9228dc00a6a7ad5a73883d48eb8675f07390569f630bf63ded092a70b3b6550571dca4e8a1dd8d9c4241fcc79b9c8d7df55e8f8c9b0e171ecbac1566ad51df0f51cccf208375227c1396dedb44ccd1a41163ac85b2e7a691ca0d3d5d55c73351804abfc6ad47c01ae8e207e76698e3950539fa78907ad89650ec4fcef7440d666325833569047abafb3e9874a84f458797375584a9f6d78167f21ea611cfffc0bab3c5b96a5117b4ce8e4bc882b0c393b6693939f748f5996b885e56f0cf0abbec47bab6b422ae0f2614899ab358d7b6b981e8a32bc1130342b81d1a59bc1ce4e917db23062b088afbb0efd7a0202fc3e62e976e9bf6cb17b7831aeb0a023164c9a9caa57f383eb83b20320c9901fa9dd4e0075eb9c6d63499cbc16a74038f5179456fa36356e1456f38e3e7d6a696b42234272bc888143e045081a6d13f2f29fc62226a6954bc7ade44889e4029ea406d6761a1e08507894c096861c08f985e4f3321b7044d483c28e638e1b3c2fce9a58a85512de6d153186e1431d71bf24725a9b4b9b51ebc50616ebab9a2dc6b41b2cf6d330596aca6f5dab5b3caa9ee768e72d70e0a671e0e3fb5fdf708ce439404cf0fce0ba46999cb9f314d465f258b54db833b14acbf62c14b6ae5b0510f712c37a9fa214c5ce926b8fd01cf9fc8ee2f960909f362ca85d91a9870ab11d627a470b5c4b83322ea846dcd25ee7b593a775eaea7f578b8fcdf72f7eb47df8ee925721bd5478d13cb86a5bad8d5d29779699044f1f0b2fbe7a5dcc87eb215aa854d487a1e81f6d344c521f21ad7c60a0da605f9e0d4d6d712fc3d6f208b177d9a17bd84663661c90e205380395d80878c79497808498def8b11895243e836801beea5d294c30a7b25455366fca808c87eb65a63273ebb8323a51525afce6489e795b5364fc7cc2d780c76d5580b81ebbd0e71efe0b82802b03dd4a5fa80ac4dffda2af889e5b108e81b7d1353ce4c2fc3eeb485ad05dbbf527bd386a7d639f43ac54f4413b5fd33104f011a5229cdc76296bf6d12fe9bf74817bf2da54115175025852aa300cae43277f7c0aa40aad290eb6a3a2015dff7f168d0364fe6b20f0fa3b08895e0fb1224753dd9e8aa529b6b30e028c007e59c49d000307e21bd99410b423360c313c64e9fc2f7222acefa939d186b70398a71cf05a4f9923b0789e03c3d7495e7affe9e9607187922cc7c3743e262f3ae6519f42e6260194b582e6c6c70a821df2fb27956e2e3c657678809515e4935eba44fda6e393b4d933ecceab2dd762bbf42e9877426bbf6deed8e8659c81f9fa484470bbc95151581f5c259147023d075cfb15ec9a636768a290a9d330be20cd72dfd21ce445ec716bb25c54e6415b393d72ec7b080056db3d87119e47a090922625da48ef9cabd3e850f7a31f3e272b99b42fd12cd72f84f3f8ba5d2fc83251a2ed923f875eed968843ed76feb2845c47f69c380aa1d7c9f1c4d53db26fbad32a05de36fd0238a49a9c3b7a2eada5a0c54ceb302dd12000dfa9bb8e7045c36c38d99af592843923400f69f0452dd23b36c64f63cc2dae81d8442014eeae56a1e90acde018df26048b1a5a1b95fb7aa80c2309099e93b35fbe2d197fca172a8d4cb0768562f5195dbf1ecd541cb6ccb2cbef914fc504413039d4c62f0bcce5b028665d5c4e347371e5c87a643de3e55f16d82775f4cde62a609723b929c887d5e554ad2e81bea1ead0a34e93305a0a50742533275354106cfdf39ec2fb19b446f16fad3dcd63fd3c24dc006df1ac9c0d55fea5a2b5451c63f1a321dfc11e4aaaacc5b80c1c8c803a49d3f65d0cb8678d61306e4910bc9bd1598581d9bf5982e1183d1e5971741f3b6934702a32f4aa19a75c0acf47a324d58011c6a771ffdd8f603ace67220726315155ac13e01b76d01b7b0119729d2844d16a1e2094e72e2f3bb6dddd66302b1aa1c93e5c1c770c66530b5220bdb769cb2d42cd691d22fcf901d1c10a0da576cf38533dcea301235bc9b09a72b4d418c64d68589fdad4ba645ae8dfeb9f5f27f2a8d8d78906542a60af124fbeced5c7a039a93cb88b6d1eccb1b61a0d9cf6619cad465debc3abe579d10cea1b5dbd24186350396478c3b8c59572cb16bb072d4359cc9ecc9a5dd4a87589e6efa98dd1ec150d419deeeba7e452c5ba6ff3079d3cc0173569e1ff25a6a6c1b2527083f522caf2a7271b2c85da6c344d538ffd2d0684b6d9681b1b92c05404b8265ac7505cc27ad2b8cac387d13e82a4fa6bf3760d2678b4e6e5992a77448f0bfb3f528c192a0cb2dbdc126c19bdadbb88785f34b187bfe01cd219447626d7eee87e3efa1cde7707f1cbd74b376b31425023f65c046869bdfb17c3c2c246ed01efdb2da65579f4e1ae14666d5c3564a62df6eef858d6b6599dcdac10f02baa4cab194ee00036c9ecc6385df6146a7cf3689df4d952ba94c4d2b405152bf0bbc0b9a1505520c9c6c62802ed39322a47924c10771be33730a5561a447684b426c2901bfc3867171ffba998800efd0ed3e634231dfeb6b48f717e80d44bbdbd793bae3cda32fed4e3d15f3169d40bfa54f03311126ec6c61986d781267dfaffa05ca0a79f6a2bf92278d481cf62832f0142868957037438c3e7c46567d0ddcfe4245a3f885767b1485876042f44d73dfc9c2888bf8cd5ed2169be9343a0ce492cf7cb4513318d360999a07655fb5cb44430605c9d7963514fa13ae676f0f39376008af347cbdd162e102ffbf45323fc145524f7025ff8ab2507c2c98a3789d8367d19ca1f32c9c3f4d7ee84fcdb4ba60887b3dc456881c97525093d45c34920bc9db02007c0079488fde2f4b0fe16fcb2c5cd5e171f8d7306956a29254903e3c4ba4620283e684c8fd07f2ad4a8d06d931262f042eee13fefa902fdc2e0bd105e91b409eabd375ff147fceb9ea1fc74d787d7a59e76df4531ce940a17e2a618e46f4df1352bd117ff7dfe9b3aeb136ccbb717a8d5e3c3f797ef12325678d70d16f1eb135a4418817a60d6af0c4c23a28a541762ddc4177ee7b139752ad5ea99ef4e0cac7de156c8944984eb191d0d03978087c8721ab6431072b4bb08154f606c6b8a27adfa3cde23086cfd6d472f7538706c7d6955f255ca14f6c8266c97b208109477831c8a045d01e3d536a3f43793bff678ffd1ba88a411aa07c872022295f005f2d66247f9d066f0e0897c2f7a620cc0a77c0c2871528414a6b7724403fea1a1fa056d998255b5a9d097827e678af1b1351881141fa62c9d2b3ac5d47aba3f2cb0d04325aa2cb5e15ff3d74a3a03c72fa8e33d78cb24c3fb0201c991b734902827fabe3fa60b5ad182434a0deeaa3080c50c196202bc55984311be9f392f5bd214e03cfae2f2418792405486aaf34b14081211f9a8f3f8e1abfaca099cde3991f294db98fb4f46e3a24a35d03e8922601f1a43a7704e6ccaab69131dae5f382727329d14d8bce5f3831e8c4551a3f3f5e22a2133ffc6e86ed3ce4b17149993aff4d4d0073aad4119260cfdaa944e319853045909ab6d1c95277504ed212e5e0409aa8d07c4214487ff0325274652f54da36b39b3979a0b4c67d17d10a67becff08735a225681818009f9da6f59582399a359fd18be89177e3408205ab5e5a3bcd168e14409f694b19907856bdc026d1b7119520d9acf36f326233cf706d7b4e73768ebd201c906b8ac0117c6447d01ef3f47", 0x1000) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@ipmr_newroute={0x1c, 0x18, 0x1, 0x70bd2d, 0x25dfdbff, {0x80, 0x14, 0x20, 0x7, 0xfe, 0x1, 0xfe, 0x6, 0x100}}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)={0x14, 0x22, 0x1, 0x70bd2c, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000005}, 0x800) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 1.203606272s ago: executing program 8 (id=2857): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) close(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) write$tun(r7, &(0x7f00000012c0)={@val={0x0, 0x18}, @void, @llc={@snap={0xaa, 0x1, "eeee", "426313", 0x6003, "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"}}}, 0x100d) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r6}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x11, 0x10d, 0x0, 0x1, [@generic="905176c518740da397a9423603"]}]}]}, 0x3c}], 0x1}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@updpolicy={0xf4, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x80}, {0x1, 0x0, 0x9}, {0x0, 0x5}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @mark={0xc, 0x15, {0x35075b, 0x3}}, @encap={0x1c, 0x4, {0x0, 0x4e20, 0x4e24, @in=@broadcast}}, @lastused={0xc, 0xf, 0x10001}]}, 0xf4}}, 0x4000) 1.173018853s ago: executing program 5 (id=2858): r0 = socket$netlink(0x10, 0x3, 0x7bedcca179e0c5c5) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff0100000000000000"], 0x58}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000850) syz_emit_ethernet(0x46, &(0x7f00000004c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff}}}}}}, 0x0) 1.035607782s ago: executing program 0 (id=2860): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f00000004c0)={0x1, 0x29, "f35c6b574aa80d143539ad0cf9a4d4e7de662074a5de0e8e42a8ef39f03b9917addd1fa558aa2307f1"}) socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000600)) pipe(&(0x7f0000000500)={0xffffffffffffffff}) socket(0x2, 0x5, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r2, 0x20, &(0x7f0000000140)={&(0x7f00000002c0)=""/170, 0xaa, 0x0, &(0x7f0000000380)=""/216, 0xd8}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000000), 0x4) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r4, r4, 0x2f}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c2000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 969.352628ms ago: executing program 5 (id=2861): syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaa2aaaaac772528a7e77845d86dd60ff00f500140600fee06f79cb853d8219000000000000aa35fd8bf0ff7f00000000000000000001000000000000000000000000000000f84562166b4c641c92ec8b561985cb332930e9d475b5a95cdbdec174bb626707f324e3f40cc3b27fe8d9"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_delrule={0x38, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'sit0\x00'}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x38}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000c8010000090a010400000000000000ea0100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000218c0111800b00010074617267657400007c0102800400030008000240000000006b010100"], 0x210}}, 0x0) 919.299866ms ago: executing program 6 (id=2862): socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='gretap0\x00'}) 847.73965ms ago: executing program 6 (id=2863): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000000)=0x400, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000181401000000000000000000080001000000000008000300"], 0x20}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, 0x0, 0x10) socket$rds(0x15, 0x5, 0x0) (async) r2 = socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x9e9c6482de834993, r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x2f, &(0x7f0000001240)="432997c4f818dd26399e12cf2c6f3b8dfbb623b237b9a33e082cd95eac141f73d458c9cedb8345fb80c2cc8b156b2e445513e0e4a67088e76cf049455a3c728bf28cec32f84d52a6922e142cb7b7dc494d3a858adde7570e9109dfb6d8b85bb1190c1a2c8fdd9465268852f4c3acf41fcc21cf3546f3f24f3b269d025ec3ee302b6a888f80f3333d0a6ccffd1784c4b6ed7f5491b32bf8c5dad0adf4dec6bc27bc1f7819779aded59b87e004e3d5697b2f655e7683701586014e31c4378cf877e8f0e9395199a09080b56e08092ee9939dae58c953ec49d94fb2a5957c53e6cdd384a35a3f962e96a7225fa723e8542a4d29c7089fe079609dac364b83e97f9945ff1960f9a1798c", 0x108) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r4}, 0x57) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r4}, 0x57) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000009c0)={@map, 0xffffffffffffffff, 0x31}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000009c0)={@map, 0xffffffffffffffff, 0x31}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x99}}, &(0x7f0000000480)='GPL\x00'}, 0x90) 823.610592ms ago: executing program 7 (id=2864): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4008, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (rerun: 32) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x18}}], 0x2, 0x4001) 746.288905ms ago: executing program 5 (id=2865): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e21, 0xffff, @loopback, 0x6}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80004, {0x0, 0x0, 0x0, r9, {}, {0xffe6, 0xb}, {0xe, 0x8}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xffffe10e}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x9f8b8a2ee701f9b2}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_deladdr={0x30, 0x15, 0x800, 0x70bd29, 0x25dfdbfb, {0x2, 0x3f, 0x65, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010102}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x30}}, 0x0) 744.703414ms ago: executing program 8 (id=2866): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000200"], 0x390) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000840)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040), 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@local, 0x0, 0x0, 0x30, 0x0, [{@private}, {@private}, {@remote}]}}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5ac}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x34}}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000800)={0xf, 0x2, 0x1, 0x590}, 0x10) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRU1(r6, 0x40047452, &(0x7f0000000080)=0x5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000002c0)={0xe0002000}) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000080)={0x9484, {{0x2, 0x4e20, @multicast1}}}, 0x88) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r7, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000000)=@framed={{}, [@map_fd={0x18, 0x8, 0x1, 0x0, r8}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r11, 0x5452, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2=0xe0000001}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1, 0x1000000}}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004, {{}, 0x1, {0x401}}}}}}}}, 0x0) 649.327093ms ago: executing program 6 (id=2867): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @private=0xa010100, 0x4e20, 0x3, 'wlc\x00', 0x3d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x0, 0xc24, 0x9, 0xfffffffb}}, 0x44) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @default}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) close(r1) r2 = socket$rxrpc(0x21, 0x2, 0x2) close(r2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000200)='memory.swap.current\x00', 0x0, 0x0) listen(r1, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x48, &(0x7f0000000040)=ANY=[@ANYRES8=r0], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f00000000c0)=""/195, 0x41100, 0x2, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x40}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xd, 0x0, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) 630.247925ms ago: executing program 0 (id=2868): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000440)={0x0, 0x1005}, 0x4) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @private2, @mcast2, {[@routing={0x29}]}}}}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000009800)=ANY=[@ANYBLOB="1c0000002200010a29bd7000000000000a0000fd"], 0x1c}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x25dfdbfe, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'erspan0\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x1, 0x10, 0xfffffffb, 0xffff, {{0xb, 0x4, 0x0, 0x1, 0x2c, 0x65, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010100, @broadcast, {[@lsrr={0x83, 0x17, 0x4d, [@local, @loopback, @broadcast, @loopback, @empty]}]}}}}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)={0xc0, r5, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 531.184128ms ago: executing program 6 (id=2869): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="027b0209dfe4477ad7940122364148e2928606202054033c4ffa603b3a53157f306e1991aa3fe5bb958c52e52019b4e7fe35ebc0a7b1e1142fca41f3e66a8f45ab77c0a314b0ff91e677fc85f6dc975dbe6dfb92d1451b10eaff8a7749803f3dd53024902a06938b7adc2d25dec1713664fd56f75bfb76e603715ee6dda51c2934bb1c98e47a14e5622fdb89e342f8bb5f9ec7079262e49f6532d2a1f9c50202936b56a71d259273d1473fb488a50168a9708eb4f4b9ea0b79e86dadf64b50f572e1346d1f10b6f6435c9ccfa021ce3f61a67fd6cff93d87ab", 0xd9}, {&(0x7f0000000180)="950d3b1ca87ce7934d1a86672c9da197c0a24e9b824efcca8036988ce8ef74e0a6fde0c91f81010783e001fa3edcf893e7995efbd4f08fecf6afe64f8f961a3c50e260bdc5dc27a93d9ba1ed7b3bab4f94dbe963b504cd", 0x57}, {&(0x7f0000000200)="f7581f506e0d883bfae6c346fa8bf12f3a15080dc5f98f1a2d9f689cc3726e555328b466aa06d4ec1fed4f81df918868baba9449d2ef888def3c99425a4efc2c924aecc6cf3a11e063137288bbf69d48e4c1483089b7fb99fd6489a7c50290a63ba040573454d3d8ff8ee30ff4f4146dced68e83bbe82652d3e0eaec1e8b752517747d09239e87", 0x87}], 0x3, &(0x7f0000000340)=[@txtime={{0x18}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x22b3}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x1000}}, @txtime={{0x18, 0x1, 0x3d, 0x594}}, @timestamping={{0x14, 0x1, 0x25, 0x6a3}}], 0xc0}}], 0x1, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000480)=""/102, 0x66}], 0x1}, 0x2041) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59e3d", 0xd8}], 0x1}, 0x0) 466.022917ms ago: executing program 6 (id=2870): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=0x1, 0xffffffffffffffff, 0x22, 0x2004}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$bt_hci(r3, &(0x7f0000000300)=ANY=[], 0x5) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000000) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r4, 0x104, 0x2, 0x0, &(0x7f0000000380)) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000340)={0x10003, {{0x2, 0x800, @multicast2}}, {{0x2, 0x4e23, @loopback}}}, 0xa9) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000480)={0x5, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) getsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r8}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0xfc, 0x24, 0x4, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r8, {0x8}, {0x1, 0xfff3}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_STAB={0xc0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x6, 0x6, 0x2, 0x7ff, 0x7, 0x9}}, {0x16, 0x2, [0x10c, 0xb2, 0x4, 0x9, 0x0, 0x400, 0x5, 0x1, 0x4]}}, {{0x1c, 0x1, {0x40, 0x5, 0x8, 0x16, 0x1, 0x8, 0x8, 0x8}}, {0x14, 0x2, [0x9, 0x7d8, 0x7, 0x400, 0x1, 0x2, 0x8, 0x887a]}}, {{0x1c, 0x1, {0x0, 0x6, 0x7, 0x10000, 0x1, 0x97, 0x3ff, 0x7}}, {0x12, 0x2, [0x8000, 0xdc0, 0x22, 0xcf0, 0x62b1, 0x8, 0x3]}}, {{0x1c, 0x1, {0x7, 0x5, 0xa2cb, 0x101, 0x1, 0x5, 0x7, 0x3}}, {0xa, 0x2, [0x1, 0x7, 0x8001]}}]}]}, 0xfc}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 310.392662ms ago: executing program 0 (id=2871): r0 = socket(0x2, 0x80805, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="f8b8d1802838e7b15034200000", @ANYRES16=r4, @ANYBLOB="310429bd7800fcdbdf251600000018000180140002006e657464657673696d300000000000000500030001000000"], 0x34}}, 0x0) socket(0x2, 0x80805, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000002c0)) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="f8b8d1802838e7b15034200000", @ANYRES16=r4, @ANYBLOB="310429bd7800fcdbdf251600000018000180140002006e657464657673696d300000000000000500030001000000"], 0x34}}, 0x0) (async) 309.886504ms ago: executing program 7 (id=2872): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40600000004000071112400000000008510000002000000850000000700000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe8, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 237.601047ms ago: executing program 8 (id=2873): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x2b, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @local}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x20, 0x2b, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x2}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 235.560615ms ago: executing program 5 (id=2874): r0 = socket$pppoe(0x18, 0x1, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x2, @random="09583ade49d9", 'bond0\x00'}}, 0x1e) (async) r2 = socket(0x840000000002, 0x3, 0xff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) (async, rerun: 32) writev(0xffffffffffffffff, &(0x7f0000000b80)=[{&(0x7f0000000840)="a9", 0x1}], 0x1) (rerun: 32) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r3, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) (async) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r2) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00032abd7000fedbdf25040000000902000000140002006970766c616e30000000000000eb0000140002006970766c616e30000000000000000000000000000000000000000000000000fd2b23da54aff227f32b152e44fe6e013990214bd2ed59346ce910d140c9d69c8afbafb91d415b18bf720adbc5c1a8611275eaedf0bd208fd050a30804c0190d961da49f59069b2ee63a23b4"], 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x88d1) sendmsg$rds(r2, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000200)=""/41, 0x29}], 0x1, 0x0, 0x0, 0x8000}, 0x48004) (async) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x4000000, {0x4, @local, 'bridge_slave_1\x00'}}) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f00000006c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x20061, @private0, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x48000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000780)=[{0x3, 0x4, 0x1, 0x7}, {0x1, 0x2, 0xc, 0x3}], 0x10, 0x80000000}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r6, 0x0) recvmsg$unix(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r7, 0x0) shutdown(r5, 0x1) getsockopt$bt_hci(r5, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (rerun: 32) 231.825882ms ago: executing program 6 (id=2875): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0xac, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x6c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'lo\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'macsec0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2e1ed8d8}, @NFTA_HOOK_DEV={0x14, 0x3, 'team0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg\x00'}]}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x120}}, 0x0) sendto$inet(r0, &(0x7f0000000240)="557d227918c2066a5a2d3907a28d24293d99c3b326d609e1cf6172f3f43eed349f66a1178ee87a00bb286680396ab09c480d9d08160760bb12fd1137b4428e575e6d247ae50c6ad281d3eb8b0f6d2999495964d647b7f6acd15fdf2c451a77ceda5aae298d976905756132434ae7acb7c0979960b7ae779dbed9d4d94c29e6163778c74f6ccacb7e579232e36d035552b4b2d29482e9ffecadc7151e3426bcd76ab214be5af2e72d6e398b599ebaa25e41031ddb6c981eb2075f725fd42a70622b42e78923419caadd6f2067e5a5997a12284dbcdd75565135b2831f90c1fea3c6cce7bcda4d8664415d2a45a640", 0xee, 0x10, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x48, r4, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffe}]}, 0x48}}, 0x20000000) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 57.409359ms ago: executing program 7 (id=2876): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x20) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0xe9}}]}, 0x1c}}, 0x0) 56.134377ms ago: executing program 0 (id=2877): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="288a0efd6dc4f915260f30", 0xb) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x485c) (async) recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000540)=""/100, 0x64}], 0x1}, 0x400}], 0x1, 0x2103, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000f3d48862b95a4190000000000000000200", @ANYRES32=0x0, @ANYBLOB="0380000088030600140012800a00010069706f69620000000400028008000500", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) 55.576045ms ago: executing program 8 (id=2878): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710443000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@can={{}, 0x86, 0x0, 0x4, 0x2, '\x00\x00\x00\x00\a\x00'}, 0x10}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0xb0, 0x44, 0x107, 0xfffffffc, 0xfffffffe, {0x1, 0x7c}, [@nested={0x9c, 0x4, 0x0, 0x1, [@nested={0x98, 0x149, 0x0, 0x1, [@typed={0x8, 0x12a, 0x0, 0x0, @fd}, @nested={0x18, 0x4a, 0x0, 0x1, [@typed={0x14, 0x123, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @typed={0x14, 0x87, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x5d, 0xc7, 0x0, 0x1, [@generic="1bc9aff29710760b591d32eb13bd647f378b2614e113fc5cd99b13746a6e4d64834767a828a886d4926e622907e837be203afee9058a0c68dc1fb7e6b9cca7237917348640e177c36e755085e7c851b904a8b26f655d59cda7"]}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0xe8}}, 0x0) 0s ago: executing program 5 (id=2879): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f00000001c0)={0x8000000000000000, 0x18, '\x00', 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0]}) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a000014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) kernel console output (not intermixed with test programs): king state [ 183.359599][ T9179] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.367948][ T9179] bridge_slave_0: entered allmulticast mode [ 183.375752][ T9179] bridge_slave_0: entered promiscuous mode [ 183.419360][ T9182] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.427019][ T9182] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.434305][ T9182] bridge_slave_0: entered allmulticast mode [ 183.443120][ T9182] bridge_slave_0: entered promiscuous mode [ 183.451561][ T9179] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.459369][ T9179] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.466939][ T9179] bridge_slave_1: entered allmulticast mode [ 183.474342][ T9179] bridge_slave_1: entered promiscuous mode [ 183.503353][ T9182] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.517260][ T9182] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.524671][ T9182] bridge_slave_1: entered allmulticast mode [ 183.540034][ T9182] bridge_slave_1: entered promiscuous mode [ 183.569927][ T9186] chnl_net:caif_netlink_parms(): no params data found [ 183.617106][ T36] IPVS: stop unused estimator thread 0... [ 183.651443][ T9179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.671567][ T9176] chnl_net:caif_netlink_parms(): no params data found [ 183.687375][ T9182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.700383][ T9182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.712952][ T9179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.823938][ T9179] team0: Port device team_slave_0 added [ 183.854930][ T9182] team0: Port device team_slave_0 added [ 183.867090][ T9182] team0: Port device team_slave_1 added [ 183.876646][ T9179] team0: Port device team_slave_1 added [ 183.968055][ T9179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.975761][ T9179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.003584][ T9179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.071019][ T9179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.078797][ T9179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.105504][ T9179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.203925][ T9182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.211199][ T9182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.256436][ T9182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.270179][ T9182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.277645][ T9182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.304551][ T9182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.322797][ T9186] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.330330][ T9186] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.347474][ T9186] bridge_slave_0: entered allmulticast mode [ 184.363276][ T9186] bridge_slave_0: entered promiscuous mode [ 184.372411][ T9186] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.388798][ T9186] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.400331][ T9186] bridge_slave_1: entered allmulticast mode [ 184.413022][ T9186] bridge_slave_1: entered promiscuous mode [ 184.455667][ T5871] Bluetooth: hci2: command tx timeout [ 184.461132][ T5871] Bluetooth: hci1: command tx timeout [ 184.523505][ T9176] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.531115][ T9176] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.538272][ T5871] Bluetooth: hci3: command tx timeout [ 184.544004][ T9176] bridge_slave_0: entered allmulticast mode [ 184.551312][ T9176] bridge_slave_0: entered promiscuous mode [ 184.594941][ T9179] hsr_slave_0: entered promiscuous mode [ 184.610362][ T9179] hsr_slave_1: entered promiscuous mode [ 184.624231][ T9179] debugfs: 'hsr0' already exists in 'hsr' [ 184.625681][ T5871] Bluetooth: hci4: command tx timeout [ 184.633465][ T9179] Cannot create hsr debugfs directory [ 184.698252][ T9176] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.706838][ T9176] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.714549][ T9176] bridge_slave_1: entered allmulticast mode [ 184.722667][ T9176] bridge_slave_1: entered promiscuous mode [ 184.773558][ T9239] net_ratelimit: 7 callbacks suppressed [ 184.773577][ T9239] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 184.800014][ T9186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.813535][ T9186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.863602][ T9176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.880160][ T9176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.898699][ T9182] hsr_slave_0: entered promiscuous mode [ 184.906494][ T9182] hsr_slave_1: entered promiscuous mode [ 184.912792][ T9182] debugfs: 'hsr0' already exists in 'hsr' [ 184.918853][ T9182] Cannot create hsr debugfs directory [ 184.994079][ T9176] team0: Port device team_slave_0 added [ 185.026550][ T9176] team0: Port device team_slave_1 added [ 185.034460][ T9186] team0: Port device team_slave_0 added [ 185.116939][ T9186] team0: Port device team_slave_1 added [ 185.226391][ T9176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.233552][ T9176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.262123][ T9176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.289915][ T9250] netlink: 'syz.0.908': attribute type 4 has an invalid length. [ 185.357477][ T9176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.364577][ T9176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.400507][ T9176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.428757][ T9186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.439335][ T9186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.453105][ T9254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.909'. [ 185.472140][ T9186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.488412][ T9254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.909'. [ 185.494523][ T9186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.506209][ T9186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.539505][ T9186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.684541][ T9176] hsr_slave_0: entered promiscuous mode [ 185.692305][ T9176] hsr_slave_1: entered promiscuous mode [ 185.698844][ T9176] debugfs: 'hsr0' already exists in 'hsr' [ 185.704580][ T9176] Cannot create hsr debugfs directory [ 185.819392][ T9258] netlink: 24 bytes leftover after parsing attributes in process `syz.0.911'. [ 185.889956][ T9186] hsr_slave_0: entered promiscuous mode [ 185.897959][ T9186] hsr_slave_1: entered promiscuous mode [ 185.904434][ T9186] debugfs: 'hsr0' already exists in 'hsr' [ 185.910441][ T9186] Cannot create hsr debugfs directory [ 186.234278][ T9179] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 186.247242][ T9179] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 186.261912][ T9179] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 186.340810][ T9179] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 186.535692][ T5871] Bluetooth: hci1: command tx timeout [ 186.541245][ T5871] Bluetooth: hci2: command tx timeout [ 186.550061][ T9182] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 186.602979][ T9182] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 186.615433][ T5871] Bluetooth: hci3: command tx timeout [ 186.673715][ T9182] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 186.695482][ T5871] Bluetooth: hci4: command tx timeout [ 186.724189][ T9182] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 186.809370][ T9274] syzkaller1: entered promiscuous mode [ 186.814890][ T9274] syzkaller1: entered allmulticast mode [ 186.846333][ T9176] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 186.871140][ T9274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.915'. [ 186.887395][ T9176] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 186.898665][ T9274] bridge_slave_1: left allmulticast mode [ 186.904364][ T9274] bridge_slave_1: left promiscuous mode [ 186.910964][ T9274] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.920166][ T9274] bridge_slave_0: left allmulticast mode [ 186.926019][ T9274] bridge_slave_0: left promiscuous mode [ 186.931805][ T9274] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.026984][ T9176] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 187.073453][ T9176] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 187.184795][ T9186] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 187.208357][ T9186] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 187.233744][ T9179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.250300][ T9186] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 187.263364][ T9186] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 187.366861][ T9179] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.412218][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.419424][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.501746][ T4583] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.509083][ T4583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.654004][ T9182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.716650][ T9303] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 187.778864][ T9176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.806476][ T9182] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.837068][ T9186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.861065][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.868383][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.916014][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.923201][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.974653][ T9186] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.004285][ T9176] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.082160][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.089419][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.129473][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.136709][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.153703][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.160957][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.233214][ T9182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 188.268157][ T9182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.307329][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.314599][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.522159][ T9179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.626792][ T5871] Bluetooth: hci2: command tx timeout [ 188.632263][ T5871] Bluetooth: hci1: command tx timeout [ 188.695907][ T5871] Bluetooth: hci3: command tx timeout [ 188.775292][ T5871] Bluetooth: hci4: command tx timeout [ 189.079414][ T9182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.213188][ T9176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.396409][ T9186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.459512][ T9179] veth0_vlan: entered promiscuous mode [ 189.494844][ T9179] veth1_vlan: entered promiscuous mode [ 189.607157][ T9179] veth0_macvtap: entered promiscuous mode [ 189.652969][ T9179] veth1_macvtap: entered promiscuous mode [ 189.762553][ T9179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.824893][ T9179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.884683][ T78] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.951470][ T78] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.979353][ T78] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.012394][ T78] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.179038][ T9182] veth0_vlan: entered promiscuous mode [ 190.223701][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.238116][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.261473][ T9182] veth1_vlan: entered promiscuous mode [ 190.354771][ T9176] veth0_vlan: entered promiscuous mode [ 190.377407][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.388043][ T9176] veth1_vlan: entered promiscuous mode [ 190.401880][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.450769][ T9186] veth0_vlan: entered promiscuous mode [ 190.524070][ T9186] veth1_vlan: entered promiscuous mode [ 190.551901][ T9182] veth0_macvtap: entered promiscuous mode [ 190.639418][ T9176] veth0_macvtap: entered promiscuous mode [ 190.696051][ T9182] veth1_macvtap: entered promiscuous mode [ 190.724160][ T9176] veth1_macvtap: entered promiscuous mode [ 190.818588][ T9182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.850962][ T9182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.878122][ T9186] veth0_macvtap: entered promiscuous mode [ 190.891740][ T9176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.906124][ T9176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.945645][ T5871] Bluetooth: hci4: command tx timeout [ 190.956279][ T1102] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.977649][ T1102] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.034791][ T9186] veth1_macvtap: entered promiscuous mode [ 191.079153][ T1102] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.093982][ T1102] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.159041][ T1102] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.184015][ T1102] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.231913][ T9186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.256468][ T1102] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.287744][ T1102] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.349556][ T9186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.448910][ T3538] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.463791][ T3538] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.531290][ T3538] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.548075][ T3538] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.584535][ T9398] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 191.608332][ T3538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.641119][ T3538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.671976][ T3526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.720275][ T3526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.868511][ T3538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.886789][ T3538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.079167][ T9406] netlink: 20 bytes leftover after parsing attributes in process `syz.5.940'. [ 192.189235][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.216865][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.230014][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.238653][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.309127][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.316899][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.338055][ T9446] FAULT_INJECTION: forcing a failure. [ 193.338055][ T9446] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 193.402199][ T9446] CPU: 0 UID: 0 PID: 9446 Comm: syz.6.946 Not tainted syzkaller #0 PREEMPT(full) [ 193.402228][ T9446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 193.402239][ T9446] Call Trace: [ 193.402247][ T9446] [ 193.402255][ T9446] dump_stack_lvl+0x189/0x250 [ 193.402283][ T9446] ? __pfx____ratelimit+0x10/0x10 [ 193.402304][ T9446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.402326][ T9446] ? __pfx__printk+0x10/0x10 [ 193.402367][ T9446] should_fail_ex+0x414/0x560 [ 193.402401][ T9446] _copy_to_user+0x31/0xb0 [ 193.402430][ T9446] simple_read_from_buffer+0xe1/0x170 [ 193.402463][ T9446] proc_fail_nth_read+0x1b3/0x220 [ 193.402488][ T9446] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 193.402513][ T9446] ? rw_verify_area+0x2a6/0x4d0 [ 193.402536][ T9446] ? __lock_acquire+0xab9/0xd20 [ 193.402561][ T9446] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 193.402585][ T9446] vfs_read+0x200/0xa30 [ 193.402608][ T9446] ? fdget_pos+0x247/0x320 [ 193.402629][ T9446] ? __pfx___mutex_lock+0x10/0x10 [ 193.402651][ T9446] ? __pfx_vfs_read+0x10/0x10 [ 193.402677][ T9446] ? __fget_files+0x2a/0x420 [ 193.402698][ T9446] ? __fget_files+0x3a0/0x420 [ 193.402713][ T9446] ? __fget_files+0x2a/0x420 [ 193.402740][ T9446] ksys_read+0x145/0x250 [ 193.402778][ T9446] ? __pfx_ksys_read+0x10/0x10 [ 193.402800][ T9446] ? rcu_is_watching+0x15/0xb0 [ 193.402826][ T9446] ? do_syscall_64+0xbe/0x3b0 [ 193.402851][ T9446] do_syscall_64+0xfa/0x3b0 [ 193.402871][ T9446] ? lockdep_hardirqs_on+0x9c/0x150 [ 193.402889][ T9446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.402908][ T9446] ? clear_bhb_loop+0x60/0xb0 [ 193.402931][ T9446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.402949][ T9446] RIP: 0033:0x7fbeff78d5bc [ 193.402966][ T9446] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 193.402981][ T9446] RSP: 002b:00007fbf00690030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 193.403001][ T9446] RAX: ffffffffffffffda RBX: 00007fbeff9d5fa0 RCX: 00007fbeff78d5bc [ 193.403014][ T9446] RDX: 000000000000000f RSI: 00007fbf006900a0 RDI: 0000000000000005 [ 193.403026][ T9446] RBP: 00007fbf00690090 R08: 0000000000000000 R09: 0000000000000000 [ 193.403037][ T9446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 193.403047][ T9446] R13: 00007fbeff9d6038 R14: 00007fbeff9d5fa0 R15: 00007ffff0f30098 [ 193.403081][ T9446] [ 193.690805][ T9449] netlink: 'syz.7.948': attribute type 1 has an invalid length. [ 193.951120][ T9460] netlink: 32 bytes leftover after parsing attributes in process `syz.6.952'. [ 194.089332][ T9465] netlink: 20 bytes leftover after parsing attributes in process `syz.6.952'. [ 194.182283][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.953'. [ 194.246304][ T9473] netlink: 12 bytes leftover after parsing attributes in process `syz.5.953'. [ 194.286425][ T9472] netlink: 20 bytes leftover after parsing attributes in process `syz.8.955'. [ 194.369337][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.8.955'. [ 194.415048][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.6.957'. [ 194.454809][ T9474] can: request_module (can-proto-3) failed. [ 194.468068][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.668747][ T9476] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.838003][ T9497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.960'. [ 194.870062][ T9490] netlink: 12 bytes leftover after parsing attributes in process `syz.8.955'. [ 194.956030][ T9476] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.127808][ T9501] openvswitch: netlink: IPv4 tun info is not correct [ 195.250704][ T9476] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.594737][ T9476] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.951392][ T4583] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.026052][ T4583] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.119562][ T12] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.228508][ T9543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.265650][ T9544] tipc: Enabling of bearer rejected, failed to enable media [ 196.315401][ T4583] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.362440][ T9545] syzkaller0: entered promiscuous mode [ 196.394797][ T9545] syzkaller0: entered allmulticast mode [ 196.785197][ T5931] IPVS: starting estimator thread 0... [ 196.895259][ T9565] IPVS: using max 25 ests per chain, 60000 per kthread [ 197.090030][ T9574] __nla_validate_parse: 5 callbacks suppressed [ 197.090051][ T9574] netlink: 16 bytes leftover after parsing attributes in process `syz.0.983'. [ 197.111597][ T9574] netlink: 16 bytes leftover after parsing attributes in process `syz.0.983'. [ 197.621805][ T9595] netlink: 'syz.7.990': attribute type 1 has an invalid length. [ 197.648601][ T979] IPVS: starting estimator thread 0... [ 197.765431][ T9598] IPVS: using max 28 ests per chain, 67200 per kthread [ 197.946176][ T9607] netlink: 12 bytes leftover after parsing attributes in process `syz.7.995'. [ 198.003861][ T9613] netlink: 16 bytes leftover after parsing attributes in process `syz.7.995'. [ 198.440854][ T9630] netlink: 'syz.0.1003': attribute type 1 has an invalid length. [ 198.471547][ T9630] netlink: 'syz.0.1003': attribute type 2 has an invalid length. [ 198.554875][ T9638] netlink: 'syz.0.1003': attribute type 1 has an invalid length. [ 198.588897][ T9638] netlink: 'syz.0.1003': attribute type 2 has an invalid length. [ 198.674229][ T9645] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1006'. [ 198.690597][ T9645] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1006'. [ 198.704612][ T9645] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1006'. [ 198.735767][ T9645] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1006'. [ 198.800052][ T9645] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1006'. [ 198.830559][ T9645] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1006'. [ 198.926147][ T9653] netlink: 'syz.0.1007': attribute type 3 has an invalid length. [ 200.608718][ T9717] syzkaller0: entered promiscuous mode [ 200.614333][ T9717] syzkaller0: entered allmulticast mode [ 200.707616][ T9714] tipc: Started in network mode [ 200.712645][ T9714] tipc: Node identity 9a3c45fe7f11, cluster identity 4711 [ 200.730540][ T9714] tipc: Enabled bearer , priority 0 [ 201.737321][ T979] tipc: Node number set to 3844949502 [ 202.532267][ T9710] tipc: Resetting bearer [ 202.547373][ T9700] tipc: Resetting bearer [ 202.603797][ T9700] tipc: Disabling bearer [ 202.962479][ T9744] __nla_validate_parse: 29 callbacks suppressed [ 202.962499][ T9744] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1034'. [ 202.994043][ T9747] net veth1_virt_wifi .: renamed from virt_wifi0 [ 203.022338][ T9745] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1034'. [ 203.072963][ T9751] netlink: 256 bytes leftover after parsing attributes in process `syz.8.1036'. [ 203.113844][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1036'. [ 203.138036][ T9751] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 203.189417][ T9751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.308815][ T9754] tipc: Enabling of bearer rejected, failed to enable media [ 203.548204][ T9771] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1041'. [ 203.713718][ T9774] netlink: 'syz.6.1043': attribute type 1 has an invalid length. [ 204.084540][ T9784] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1047'. [ 204.128496][ T9784] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1047'. [ 204.368905][ T9798] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1049'. [ 204.481000][ T9804] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1050'. [ 204.506798][ T9802] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1052'. [ 204.852444][ T9820] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 204.896338][ T9818] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.903676][ T9818] IPv6: NLM_F_CREATE should be set when creating new route [ 204.931824][ T9826] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 204.941693][ T9817] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 205.207053][ T9840] netlink: 'syz.5.1064': attribute type 4 has an invalid length. [ 205.248410][ T9840] netlink: 'syz.5.1064': attribute type 4 has an invalid length. [ 205.261644][ T9840] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20001 [ 206.176693][ T9854] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 207.591034][ T9926] netlink: 'syz.5.1085': attribute type 8 has an invalid length. [ 208.074490][ T9940] __nla_validate_parse: 9 callbacks suppressed [ 208.074509][ T9940] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1091'. [ 208.118275][ T9950] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1094'. [ 208.149160][ T9940] netlink: 'syz.5.1091': attribute type 25 has an invalid length. [ 208.167819][ T9950] only policy match revision 0 supported [ 208.167842][ T9950] unable to load match [ 208.240397][ T9953] netlink: 'syz.6.1095': attribute type 10 has an invalid length. [ 208.302292][ T9953] team0: Device hsr_slave_0 failed to register rx_handler [ 208.956393][ T9972] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1100'. [ 208.957519][ T9974] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1101'. [ 208.969925][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1100'. [ 209.599450][ T9990] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1106'. [ 209.620594][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1106'. [ 209.828040][T10004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1111'. [ 210.274611][T10021] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1117'. [ 210.315254][T10021] netlink: 'syz.6.1117': attribute type 1 has an invalid length. [ 210.342073][T10024] netlink: 'syz.8.1118': attribute type 21 has an invalid length. [ 210.345912][T10021] netlink: 'syz.6.1117': attribute type 4 has an invalid length. [ 210.424058][T10024] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1118'. [ 211.623778][T10084] IPVS: set_ctl: invalid protocol: 4 10.1.1.0:20004 [ 211.665169][T10084] netlink: 'syz.5.1136': attribute type 10 has an invalid length. [ 212.293419][T10124] nbd: socks must be embedded in a SOCK_ITEM attr [ 212.468752][ T5871] block nbd3: Receive control failed (result -32) [ 212.777944][T10149] team0: Cannot enslave team device to itself [ 213.201852][T10162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.212639][T10160] netlink: 'syz.5.1161': attribute type 1 has an invalid length. [ 213.332151][T10160] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.340689][T10162] __nla_validate_parse: 7 callbacks suppressed [ 213.340708][T10162] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1160'. [ 213.358621][T10162] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1160'. [ 213.481506][T10167] bond1: (slave veth3): Enslaving as an active interface with a down link [ 213.610726][T10170] veth5: entered promiscuous mode [ 213.668227][T10170] bond1: (slave veth5): Enslaving as an active interface with a down link [ 213.700532][T10160] vlan2: entered allmulticast mode [ 213.708418][T10160] bond1: entered allmulticast mode [ 213.743624][T10160] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 214.151581][T10188] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1167'. [ 214.347129][T10194] netlink: 10 bytes leftover after parsing attributes in process `syz.7.1166'. [ 214.542486][T10205] netlink: 'syz.5.1168': attribute type 10 has an invalid length. [ 214.571935][T10205] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 214.793917][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1175'. [ 214.943182][T10224] netlink: 'syz.5.1176': attribute type 1 has an invalid length. [ 214.955864][T10224] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1176'. [ 215.028351][T10226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.518108][T10239] netlink: 'syz.8.1182': attribute type 1 has an invalid length. [ 215.541235][T10235] netlink: 'syz.5.1180': attribute type 17 has an invalid length. [ 215.568177][T10239] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1182'. [ 215.577292][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1180'. [ 215.600367][T10235] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1180'. [ 215.624573][T10239] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1182'. [ 215.687310][T10235] erspan0: entered promiscuous mode [ 215.694250][T10235] gretap0: entered promiscuous mode [ 215.753301][T10212] infiniband syz2: set down [ 215.768260][T10212] infiniband syz2: added ipvlan1 [ 215.797655][T10212] syz2: rxe_create_cq: returned err = -12 [ 215.804313][T10212] infiniband syz2: Couldn't create ib_mad CQ [ 215.843502][T10212] infiniband syz2: Couldn't open port 1 [ 215.940397][T10254] netlink: 'syz.0.1187': attribute type 178 has an invalid length. [ 216.017112][T10258] netlink: 'syz.0.1187': attribute type 178 has an invalid length. [ 216.066390][T10212] RDS/IB: syz2: added [ 216.071175][T10212] smc: adding ib device syz2 with port count 1 [ 216.113817][T10212] smc: ib device syz2 port 1 has pnetid [ 216.742147][T10289] Bluetooth: MGMT ver 1.23 [ 217.199719][T10304] netlink: 'syz.7.1201': attribute type 1 has an invalid length. [ 217.225721][T10304] netlink: 'syz.7.1201': attribute type 1 has an invalid length. [ 217.913967][T10340] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 218.323525][T10353] gretap0: entered promiscuous mode [ 218.414140][T10353] __nla_validate_parse: 6 callbacks suppressed [ 218.414160][T10353] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1216'. [ 218.706992][T10367] netlink: 'syz.5.1218': attribute type 3 has an invalid length. [ 218.716047][T10367] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1218'. [ 218.735939][T10326] syzkaller1: entered promiscuous mode [ 218.748695][T10326] syzkaller1: entered allmulticast mode [ 218.853476][T10369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1218'. [ 219.982023][ T3538] tipc: Subscription rejected, illegal request [ 219.983562][T10405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1229'. [ 220.265635][T10415] openvswitch: netlink: Missing valid actions attribute. [ 220.299794][T10415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.320593][T10416] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 221.498494][T10451] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1242'. [ 222.135911][T10480] netlink: 'syz.0.1248': attribute type 17 has an invalid length. [ 222.181150][T10480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1248'. [ 222.216853][T10480] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1248'. [ 222.406708][T10486] tipc: Started in network mode [ 222.414175][T10486] tipc: Node identity c67eadcce1c2, cluster identity 4711 [ 222.429690][T10486] tipc: Enabled bearer , priority 0 [ 222.619932][T10486] tipc: Disabling bearer [ 223.228072][T10508] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.477820][T10508] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.536435][T10518] veth1_macvtap: left promiscuous mode [ 223.557091][T10520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1264'. [ 223.562372][T10521] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 223.638074][T10508] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.698102][T10520] macsec2: entered promiscuous mode [ 223.705290][T10520] bridge0: entered promiscuous mode [ 223.714622][T10520] macsec2: entered allmulticast mode [ 223.721049][T10520] bridge0: entered allmulticast mode [ 223.868537][T10508] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.893771][T10527] netlink: 'syz.0.1267': attribute type 1 has an invalid length. [ 224.243061][ T3538] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.519634][ T3538] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.581951][T10541] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 224.609209][ T3538] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.630778][T10549] netlink: 'syz.6.1272': attribute type 1 has an invalid length. [ 224.640650][T10549] netlink: 232 bytes leftover after parsing attributes in process `syz.6.1272'. [ 224.661163][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1272'. [ 224.689305][ T13] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.878684][T10552] syzkaller0: entered promiscuous mode [ 224.886026][T10552] syzkaller0: entered allmulticast mode [ 224.957752][T10558] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1275'. [ 225.136217][T10558] netlink: 'syz.5.1275': attribute type 39 has an invalid length. [ 225.194895][T10567] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1275'. [ 225.692795][ T1102] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.738136][ T1102] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.761827][ T1102] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.790267][ T1102] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.050320][T10607] netlink: 'syz.8.1289': attribute type 1 has an invalid length. [ 226.060819][T10607] netlink: 'syz.8.1289': attribute type 3 has an invalid length. [ 226.073802][T10607] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1289'. [ 226.189703][T10615] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1292'. [ 226.199447][T10617] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1292'. [ 226.421796][T10624] netlink: 666 bytes leftover after parsing attributes in process `syz.8.1294'. [ 226.530098][T10629] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1295'. [ 226.706509][T10636] sctp: [Deprecated]: syz.8.1296 (pid 10636) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.706509][T10636] Use struct sctp_sack_info instead [ 227.225330][T10653] ieee802154 phy0 wpan0: encryption failed: -22 [ 228.520742][T10706] netlink: 'syz.6.1317': attribute type 10 has an invalid length. [ 228.782795][T10722] __nla_validate_parse: 6 callbacks suppressed [ 228.782816][T10722] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1321'. [ 228.936219][T10729] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1321'. [ 228.952567][T10722] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1321'. [ 228.986670][T10730] netlink: 'syz.5.1324': attribute type 1 has an invalid length. [ 229.144158][T10730] 8021q: adding VLAN 0 to HW filter on device bond2 [ 229.247919][T10734] bond2: (slave geneve2): making interface the new active one [ 229.269610][T10734] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 229.798113][T10771] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1339'. [ 229.888534][T10776] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1340'. [ 230.356437][T10791] netlink: 'syz.7.1343': attribute type 58 has an invalid length. [ 230.379315][T10791] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1343'. [ 230.479630][T10797] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1343'. [ 230.590078][T10800] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.1346'. [ 230.857203][ T4583] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 230.881757][ T4583] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 230.890204][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 230.907676][T10813] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1348'. [ 230.967825][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 231.250767][T10826] netlink: 'syz.5.1353': attribute type 1 has an invalid length. [ 231.353223][T10826] 8021q: adding VLAN 0 to HW filter on device bond3 [ 231.446576][T10838] netlink: 191568 bytes leftover after parsing attributes in process `syz.6.1357'. [ 231.456184][T10838] netlink: zone id is out of range [ 231.471036][T10838] netlink: zone id is out of range [ 231.495267][T10838] netlink: zone id is out of range [ 231.500527][T10838] netlink: zone id is out of range [ 231.535037][T10838] netlink: zone id is out of range [ 231.555389][T10838] netlink: zone id is out of range [ 231.583097][T10838] netlink: zone id is out of range [ 231.608842][T10838] netlink: zone id is out of range [ 231.635130][T10838] netlink: zone id is out of range [ 231.645406][T10838] netlink: zone id is out of range [ 231.655325][ T5945] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 231.671035][T10843] tipc: Enabled bearer , priority 0 [ 231.812668][T10839] tipc: Disabling bearer [ 231.989242][T10862] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 232.104011][T10868] tipc: Started in network mode [ 232.111765][T10868] tipc: Node identity 561226df34fb, cluster identity 4711 [ 232.120247][T10868] tipc: Enabled bearer , priority 0 [ 232.131251][T10868] syzkaller0: entered promiscuous mode [ 232.154141][T10868] syzkaller0: entered allmulticast mode [ 232.241297][T10872] syzkaller0: entered promiscuous mode [ 232.249136][T10872] syzkaller0: entered allmulticast mode [ 232.310812][T10868] tipc: Resetting bearer [ 232.402637][T10879] netlink: 'syz.0.1371': attribute type 4 has an invalid length. [ 232.433181][T10867] tipc: Resetting bearer [ 232.478544][T10867] tipc: Disabling bearer [ 232.551319][T10879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.651641][T10877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.663694][T10877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.755170][T10892] nbd: must specify at least one socket [ 232.774533][T10893] nbd: must specify at least one socket [ 232.819973][T10902] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 232.909258][T10905] netlink: 'syz.7.1378': attribute type 5 has an invalid length. [ 232.967665][T10900] tipc: Enabled bearer , priority 0 [ 233.009701][T10907] tipc: Started in network mode [ 233.014890][T10907] tipc: Node identity f21aef1eb768, cluster identity 4711 [ 233.022934][T10907] tipc: Enabled bearer , priority 0 [ 233.038275][T10907] syzkaller0: entered promiscuous mode [ 233.056892][T10907] syzkaller0: entered allmulticast mode [ 233.068619][T10900] tipc: Disabling bearer [ 233.104871][T10908] tipc: Resetting bearer [ 233.136879][T10906] tipc: Resetting bearer [ 233.216327][T10906] tipc: Disabling bearer [ 233.501576][T10929] netlink: 'syz.6.1387': attribute type 11 has an invalid length. [ 233.886250][T10946] __nla_validate_parse: 6 callbacks suppressed [ 233.886271][T10946] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1389'. [ 234.374699][T10972] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1395'. [ 234.600725][T10977] netlink: 212 bytes leftover after parsing attributes in process `syz.8.1399'. [ 234.663521][T10980] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1400'. [ 234.665508][T10983] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1401'. [ 234.874285][T10993] netlink: 'syz.6.1403': attribute type 4 has an invalid length. [ 234.908904][T10993] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1403'. [ 235.069358][T10993] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1403'. [ 235.111995][T11001] nbd: must specify an index to disconnect [ 235.203133][T11005] netlink: 316 bytes leftover after parsing attributes in process `syz.5.1407'. [ 235.255476][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 235.737127][T11021] netlink: 'syz.0.1412': attribute type 1 has an invalid length. [ 235.823978][T11032] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1415'. [ 235.852464][T11021] 8021q: adding VLAN 0 to HW filter on device bond3 [ 235.984397][T11031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1412'. [ 235.987917][T11021] bond3: (slave gretap1): making interface the new active one [ 236.014623][T11021] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 236.216858][T11046] netlink: 'syz.0.1417': attribute type 21 has an invalid length. [ 236.585766][T11058] netlink: 'syz.7.1421': attribute type 5 has an invalid length. [ 236.618160][ T5869] Bluetooth: hci4: command 0x0405 tx timeout [ 236.701136][T11063] IPVS: Scheduler module ip_vs_sip not found [ 236.870705][T11073] net_ratelimit: 10 callbacks suppressed [ 236.870727][T11073] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 236.912991][T11074] geneve2: entered promiscuous mode [ 236.920977][T11074] geneve2: entered allmulticast mode [ 236.974618][ T78] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 237.031941][T11078] nbd: must specify at least one socket [ 237.055264][ T5945] IPVS: starting estimator thread 0... [ 237.090937][ T78] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 237.118555][ T78] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 237.150865][ T78] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 237.155075][T11080] IPVS: using max 27 ests per chain, 64800 per kthread [ 237.622866][T11103] gretap0: entered promiscuous mode [ 237.821454][T11116] netlink: 'syz.8.1436': attribute type 6 has an invalid length. [ 237.862570][T11106] netlink: 'syz.6.1434': attribute type 5 has an invalid length. [ 238.705739][ T5869] Bluetooth: hci4: command 0x0405 tx timeout [ 238.776833][T11150] netlink: 'syz.5.1446': attribute type 1 has an invalid length. [ 238.913982][T11150] 8021q: adding VLAN 0 to HW filter on device bond5 [ 238.960364][T11158] 8021q: adding VLAN 0 to HW filter on device bond5 [ 238.969313][T11158] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 238.983094][T11158] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 239.122619][T11165] netlink: 'syz.8.1451': attribute type 1 has an invalid length. [ 239.185341][T11166] __nla_validate_parse: 6 callbacks suppressed [ 239.185360][T11166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1448'. [ 239.353001][T11175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.457693][T11175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.504715][T11175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.602576][T11193] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1456'. [ 239.703892][T11196] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1458'. [ 239.720498][T11198] netlink: 'syz.8.1457': attribute type 25 has an invalid length. [ 239.732779][T11200] netlink: 'syz.8.1457': attribute type 25 has an invalid length. [ 240.044676][T11216] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1462'. [ 240.267606][T11226] openvswitch: netlink: Message has 4 unknown bytes. [ 240.626074][T11238] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1470'. [ 240.648970][T11238] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1470'. [ 240.703970][T11238] Unsupported xt match [ 240.703991][T11238] unable to load match [ 240.787448][T11246] openvswitch: netlink: Tunnel attr 4 has unexpected len 3 expected 1 [ 241.235696][T11265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1479'. [ 241.320755][T11265] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1479'. [ 241.377971][T11265] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1479'. [ 242.192352][T11302] netlink: 'syz.8.1490': attribute type 1 has an invalid length. [ 242.372133][T11302] 8021q: adding VLAN 0 to HW filter on device bond2 [ 242.440085][T11311] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1493'. [ 242.978031][T11340] IPv4: Oversized IP packet from 127.202.26.0 [ 242.989360][T11335] netlink: 'syz.0.1501': attribute type 11 has an invalid length. [ 244.379086][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 245.682574][T11381] wg2: Master is either lo or non-ether device [ 245.784443][T11389] block nbd4: Unsupported socket: shutdown callout must be supported. [ 245.994140][T11397] netlink: 'syz.8.1520': attribute type 2 has an invalid length. [ 246.288081][ T30] audit: type=1107 audit(1758190050.543:4): pid=11407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ýeê±½Ô6=(à•/' [ 246.866861][T11421] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 246.893605][T11422] __nla_validate_parse: 6 callbacks suppressed [ 246.893624][T11422] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1527'. [ 247.059285][T11430] pim6reg1: entered promiscuous mode [ 247.073287][T11430] pim6reg1: entered allmulticast mode [ 247.286316][T11442] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1534'. [ 247.394469][ T30] audit: type=1800 audit(1758190051.653:5): pid=11448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1536" name="memory.events" dev="tmpfs" ino=557 res=0 errno=0 [ 247.417192][T11449] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 247.513076][ T30] audit: type=1804 audit(1758190051.683:6): pid=11448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.1536" name="/newroot/105/memory.events" dev="tmpfs" ino=557 res=1 errno=0 [ 247.565229][ T30] audit: type=1800 audit(1758190051.703:7): pid=11445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1536" name="memory.events" dev="tmpfs" ino=557 res=0 errno=0 [ 247.673402][T11455] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1540'. [ 247.717400][T11461] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1541'. [ 247.849772][T11473] netlink: 'syz.5.1539': attribute type 1 has an invalid length. [ 247.874817][T11474] netlink: 'syz.6.1542': attribute type 1 has an invalid length. [ 247.932281][T11475] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1542'. [ 248.196428][T11489] netlink: 'syz.8.1546': attribute type 12 has an invalid length. [ 248.425629][T11492] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1548'. [ 248.489724][T11492] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1548'. [ 248.519109][T11496] netlink: 'syz.7.1550': attribute type 1 has an invalid length. [ 248.604363][T11503] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 248.618637][T11503] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 248.632759][T11496] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1550'. [ 248.718328][T11496] 8021q: adding VLAN 0 to HW filter on device bond1 [ 248.734866][T11508] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1548'. [ 248.780126][T11508] netlink: 2 bytes leftover after parsing attributes in process `syz.8.1548'. [ 248.784591][T11505] vlan2: entered allmulticast mode [ 248.831596][T11505] bridge0: entered allmulticast mode [ 248.840581][T11505] bridge0: entered promiscuous mode [ 248.854523][T11505] bridge0: left promiscuous mode [ 248.893849][T11505] bond1: (slave vlan2): making interface the new active one [ 248.910712][T11505] bridge0: entered promiscuous mode [ 248.917878][T11516] netlink: 'syz.0.1555': attribute type 1 has an invalid length. [ 248.919653][T11505] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 248.935001][T11516] netlink: 'syz.0.1555': attribute type 1 has an invalid length. [ 249.407913][T11539] netlink: 'syz.5.1564': attribute type 3 has an invalid length. [ 249.447121][T11539] netlink: 'syz.5.1564': attribute type 3 has an invalid length. [ 251.191122][T11612] netlink: 'syz.6.1581': attribute type 8 has an invalid length. [ 251.344314][T11614] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 251.392491][T11614] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 251.642125][T11563] netlink: 'syz.0.1569': attribute type 13 has an invalid length. [ 251.755818][T11563] gretap0: left promiscuous mode [ 251.769327][T11622] can: request_module (can-proto-0) failed. [ 252.100518][T11563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.156392][T11563] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.190851][T11563] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 252.191144][T11635] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20000 [ 252.311766][T11635] __nla_validate_parse: 5 callbacks suppressed [ 252.311789][T11635] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1589'. [ 252.994626][T11648] IPVS: set_ctl: invalid protocol: 43 172.30.0.6:20000 [ 253.132011][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1597'. [ 253.188114][T11666] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 253.407392][T11671] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1600'. [ 253.486777][T11677] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1599'. [ 253.517196][T11674] team0: Device wireguard0 is of different type [ 253.697877][T11680] vlan2: entered allmulticast mode [ 253.708922][T11680] hsr0: entered allmulticast mode [ 253.724672][T11680] hsr_slave_0: entered allmulticast mode [ 253.757110][T11680] hsr_slave_1: entered allmulticast mode [ 253.924211][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1603'. [ 253.974270][T11689] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 254.356129][T11704] netlink: 80 bytes leftover after parsing attributes in process `syz.8.1606'. [ 254.593102][T11715] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1610'. [ 254.650041][T11715] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1610'. [ 254.738661][T11715] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1610'. [ 255.248507][T11739] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1617'. [ 255.391714][T11742] tipc: Enabling of bearer rejected, failed to enable media [ 255.453198][T11746] gretap2: entered promiscuous mode [ 255.471121][T11746] gretap2: entered allmulticast mode [ 255.640080][T11752] validate_nla: 1 callbacks suppressed [ 255.640101][T11752] netlink: 'syz.6.1620': attribute type 21 has an invalid length. [ 255.760748][T11757] unsupported nla_type 52263 [ 255.902318][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.132409][T11771] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.163590][T11767] bridge_slave_0: left allmulticast mode [ 256.188059][T11767] bridge_slave_0: left promiscuous mode [ 256.255456][T11767] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.303276][T11767] bridge_slave_1: left allmulticast mode [ 256.320374][T11767] bridge_slave_1: left promiscuous mode [ 256.351138][T11767] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.389789][T11788] netlink: 'syz.7.1629': attribute type 1 has an invalid length. [ 256.460415][T11767] bond0: (slave bond_slave_0): Releasing backup interface [ 256.491711][T11767] bond0: (slave bond_slave_1): Releasing backup interface [ 256.522758][T11767] team0: Port device team_slave_0 removed [ 256.547591][T11767] team0: Port device team_slave_1 removed [ 256.563859][T11767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.572585][T11767] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.586369][T11767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.593945][T11767] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.646028][ T5880] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 256.845717][ T5931] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 256.885403][T11801] netlink: 'syz.8.1632': attribute type 83 has an invalid length. [ 256.947353][T11801] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 257.460758][T11832] __nla_validate_parse: 14 callbacks suppressed [ 257.460779][T11832] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1642'. [ 257.657120][ T5931] IPVS: starting estimator thread 0... [ 257.678172][T11841] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1643'. [ 257.794407][T11840] IPVS: using max 22 ests per chain, 52800 per kthread [ 257.940185][T11849] xt_l2tp: invalid flags combination: 0 [ 258.299917][T11866] syzkaller1: entered promiscuous mode [ 258.325794][T11866] syzkaller1: entered allmulticast mode [ 258.364861][T11868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1653'. [ 258.405345][T11868] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1653'. [ 258.531323][T11880] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1656'. [ 258.544074][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1656'. [ 258.554705][T11880] netlink: 'syz.5.1656': attribute type 12 has an invalid length. [ 258.573426][T11880] netlink: 'syz.5.1656': attribute type 11 has an invalid length. [ 258.788641][T11890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1659'. [ 258.845852][T11852] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 258.852477][T11852] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 258.872806][T11890] sit1: entered promiscuous mode [ 258.880250][T11890] sit1: entered allmulticast mode [ 258.990839][T11852] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 259.027167][T11852] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 259.054787][T11852] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 259.077833][T11852] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 259.162629][T11852] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 259.179117][T11852] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 259.196678][T11909] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1663'. [ 259.273043][T11911] netlink: 'syz.0.1664': attribute type 1 has an invalid length. [ 259.451716][T11911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1664'. [ 259.679204][T11923] veth9: entered promiscuous mode [ 259.691739][T11923] bond4: (slave veth9): Enslaving as a backup interface with a down link [ 259.717563][T11911] 8021q: adding VLAN 0 to HW filter on device bond4 [ 259.813880][T11939] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1668'. [ 260.100777][T11951] tipc: Started in network mode [ 260.117732][T11951] tipc: Node identity ac14140f, cluster identity 4711 [ 260.133766][T11951] tipc: New replicast peer: 255.255.255.255 [ 260.161585][T11951] tipc: Enabled bearer , priority 10 [ 260.216768][T11958] ip6gre0: Master is either lo or non-ether device [ 260.302553][T11964] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 260.438600][T11964] netlink: 'syz.6.1674': attribute type 1 has an invalid length. [ 260.446766][T11964] netlink: 'syz.6.1674': attribute type 4 has an invalid length. [ 260.535726][ T5880] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 260.658464][T11979] IPv4: Oversized IP packet from 127.202.26.0 [ 260.755381][ T5880] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 261.276210][ T5981] tipc: Node number set to 2886997007 [ 261.566605][T12006] batadv_slave_1: entered promiscuous mode [ 261.576150][T12006] batman_adv: batadv0: Adding interface: macsec1 [ 261.605179][T12006] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.655149][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 261.721842][T12006] batman_adv: batadv0: Interface activated: macsec1 [ 262.328006][T12038] tipc: Enabled bearer , priority 0 [ 262.490951][T12038] syzkaller0: entered promiscuous mode [ 262.514526][T12038] syzkaller0: entered allmulticast mode [ 262.523628][T12038] tipc: Resetting bearer [ 262.571760][T12037] tipc: Resetting bearer [ 262.831681][T12071] netlink: 'syz.8.1705': attribute type 1 has an invalid length. [ 264.504865][T12037] tipc: Disabling bearer [ 264.523946][T12058] __nla_validate_parse: 4 callbacks suppressed [ 264.523966][T12058] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1703'. [ 264.585698][T12071] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 264.752633][T12086] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1709'. [ 264.801178][T12089] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 265.448533][T12122] tipc: Enabled bearer , priority 0 [ 265.474060][T12122] syzkaller0: entered promiscuous mode [ 265.491789][T12122] syzkaller0: entered allmulticast mode [ 265.506956][T12129] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1721'. [ 265.605468][T12121] tipc: Resetting bearer [ 265.721601][T12121] tipc: Disabling bearer [ 265.744398][T12140] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.934049][T12143] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.941375][T12143] IPv6: NLM_F_CREATE should be set when creating new route [ 265.961258][T12145] netlink: 'syz.6.1726': attribute type 1 has an invalid length. [ 266.169564][T12155] netlink: 'syz.8.1729': attribute type 1 has an invalid length. [ 266.243834][T12159] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1730'. [ 266.259866][T12159] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1730'. [ 266.268683][T12155] 8021q: adding VLAN 0 to HW filter on device bond3 [ 266.336731][T12155] bond3: (slave geneve3): making interface the new active one [ 266.378810][T12155] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 266.680950][T12174] netlink: 'syz.0.1735': attribute type 16 has an invalid length. [ 266.932421][T12185] netlink: 'syz.8.1739': attribute type 1 has an invalid length. [ 266.979087][T12185] netlink: 228 bytes leftover after parsing attributes in process `syz.8.1739'. [ 267.458108][T12206] pim6reg: entered allmulticast mode [ 267.677529][T12215] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 267.740739][T12217] netlink: 'syz.5.1748': attribute type 33 has an invalid length. [ 267.873178][T12223] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 268.023480][T12232] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1753'. [ 268.038852][T12234] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1753'. [ 268.893463][T12269] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1762'. [ 269.306814][T12275] bond2: entered promiscuous mode [ 269.313140][T12275] bond2: entered allmulticast mode [ 269.364467][T12275] 8021q: adding VLAN 0 to HW filter on device bond2 [ 270.230068][T12325] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1776'. [ 270.251314][T12325] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 270.264351][T12325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.406002][T12328] tap0: tun_chr_ioctl cmd 1074025672 [ 270.422100][T12328] tap0: ignored: set checksum disabled [ 270.751571][T12349] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1784'. [ 270.760932][T12350] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1784'. [ 270.772093][T12349] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1784'. [ 270.935115][T12355] veth1_macvtap: entered promiscuous mode [ 270.989711][T12355] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1785'. [ 271.033486][T12352] veth1_macvtap: left promiscuous mode [ 271.153938][T12361] xfrm1: entered allmulticast mode [ 272.051419][T12386] tipc: Enabled bearer , priority 0 [ 272.075430][T12386] syzkaller0: entered promiscuous mode [ 272.081128][T12386] syzkaller0: entered allmulticast mode [ 272.088455][T12389] netlink: 'syz.6.1800': attribute type 1 has an invalid length. [ 272.231270][T12400] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1802'. [ 272.327097][T12400] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1802'. [ 272.346705][T12404] nbd: must specify a device to reconfigure [ 272.388342][T12389] macvlan2: entered promiscuous mode [ 272.406167][T12389] macvlan2: entered allmulticast mode [ 272.470611][T12389] bond3: entered promiscuous mode [ 272.485940][T12389] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 272.547595][T12389] bond3: left promiscuous mode [ 272.616908][T12386] tipc: Resetting bearer [ 272.629016][T12384] tipc: Resetting bearer [ 272.666063][T12384] tipc: Disabling bearer [ 272.753468][T12408] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 272.806831][T12407] netlink: 'syz.0.1805': attribute type 10 has an invalid length. [ 272.878443][T12407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1805'. [ 273.036341][T12427] netlink: 'syz.6.1807': attribute type 2 has an invalid length. [ 273.385340][T12433] netlink: 'syz.8.1811': attribute type 1 has an invalid length. [ 273.395440][T12433] netlink: 'syz.8.1811': attribute type 1 has an invalid length. [ 273.871295][T12467] netlink: 'syz.0.1820': attribute type 5 has an invalid length. [ 274.496360][T12496] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1826'. [ 274.722389][T12509] tipc: Enabled bearer , priority 10 [ 274.833919][T12514] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 274.882717][T12514] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1830'. [ 275.248855][T12529] delete_channel: no stack [ 276.051343][T12536] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 276.081372][T12566] netlink: 'syz.0.1841': attribute type 2 has an invalid length. [ 276.089714][T12566] __nla_validate_parse: 2 callbacks suppressed [ 276.089734][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1841'. [ 276.091592][T12536] batman_adv: batadv0: Interface deactivated: macsec1 [ 276.098389][T12566] netlink: 'syz.0.1841': attribute type 2 has an invalid length. [ 276.122024][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1841'. [ 276.219354][ T49] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.260824][ T49] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.293713][ T49] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.318793][T12569] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1842'. [ 276.345376][ T49] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.484234][ T49] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.493678][T12582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.535621][ T49] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.565514][ T49] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.582603][ T49] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.180311][T12609] vlan1: entered allmulticast mode [ 277.199196][T12609] veth0_vlan: entered allmulticast mode [ 277.230617][T12609] veth1_macvtap: left promiscuous mode [ 277.236327][T12609] macsec0: entered promiscuous mode [ 277.241577][T12609] macsec0: entered allmulticast mode [ 277.253831][T12609] veth1_macvtap: entered promiscuous mode [ 277.282397][T12609] veth1_macvtap: entered allmulticast mode [ 277.301092][T12609] macsec0: left promiscuous mode [ 277.336241][T12609] macsec0: left allmulticast mode [ 277.341359][T12609] veth1_macvtap: left allmulticast mode [ 277.406692][T12609] delete_channel: no stack [ 277.406782][T12619] netlink: 'syz.0.1855': attribute type 19 has an invalid length. [ 277.494862][T12619] netlink: 'syz.0.1855': attribute type 1 has an invalid length. [ 277.607121][T12630] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1858'. [ 277.830101][T12641] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1862'. [ 277.840187][T12641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.048994][T12644] 8021q: adding VLAN 0 to HW filter on device bond5 [ 278.059815][T12648] netlink: 'syz.5.1863': attribute type 1 has an invalid length. [ 278.087490][T12654] netlink: 'syz.6.1865': attribute type 1 has an invalid length. [ 278.095815][T12648] netlink: 'syz.5.1863': attribute type 2 has an invalid length. [ 278.114188][T12654] netlink: 244 bytes leftover after parsing attributes in process `syz.6.1865'. [ 278.146822][T12648] netlink: 'syz.5.1863': attribute type 12 has an invalid length. [ 278.156523][T12646] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 278.561968][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1871'. [ 278.574847][T12670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1871'. [ 317.341023][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 336.591636][T12688] raw_sendmsg: syz.8.1876 forgot to set AF_INET. Fix it! [ 336.615757][T12697] tipc: Enabled bearer , priority 0 [ 336.623961][T12697] syzkaller0: entered promiscuous mode [ 336.630306][T12697] syzkaller0: entered allmulticast mode [ 336.637399][T12696] block nbd0: reconnected socket [ 336.715681][T12697] tipc: Resetting bearer [ 336.817785][ T5871] block nbd0: Receive control failed (result -32) [ 336.832641][T12695] tipc: Resetting bearer [ 336.889279][T12695] tipc: Disabling bearer [ 337.003209][T12718] netlink: 'syz.0.1881': attribute type 23 has an invalid length. [ 337.050543][ T4583] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.096561][ T4583] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.187778][T12726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.270932][ T4583] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.316224][ T4583] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.374122][T12733] 8021q: VLANs not supported on ipvlan1 [ 337.510264][ T4583] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.525215][ T4583] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.604169][T12733] 8021q: VLANs not supported on ipvlan1 [ 337.640803][T12742] netlink: 'syz.0.1885': attribute type 19 has an invalid length. [ 337.689524][T12742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1885'. [ 337.835150][ T4583] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.864723][ T4583] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.913832][T12742] netlink: 'syz.0.1885': attribute type 19 has an invalid length. [ 337.932628][T12742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1885'. [ 338.656620][T12791] netlink: 212388 bytes leftover after parsing attributes in process `syz.0.1899'. [ 338.667105][T12791] openvswitch: netlink: Message has 5 unknown bytes. [ 339.022273][ T4583] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.032991][ T4583] ` (unregistering): Released all slaves [ 339.050184][ T4583] bond1 (unregistering): Released all slaves [ 339.127528][T12794] pim6reg1: entered promiscuous mode [ 339.132914][T12794] pim6reg1: entered allmulticast mode [ 339.295905][ T4583] tipc: Left network mode [ 339.462363][T12810] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1904'. [ 340.177002][T12839] netlink: 'syz.0.1915': attribute type 10 has an invalid length. [ 340.185737][T12842] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1913'. [ 340.467979][T12848] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1916'. [ 340.492739][T12845] netlink: 'syz.5.1916': attribute type 30 has an invalid length. [ 340.682664][T12864] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1917'. [ 340.927765][T12856] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1917'. [ 341.063869][T12876] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1922'. [ 341.080846][T12874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.107539][T12874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.169968][T12874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.210972][T12874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.438345][ T4583] hsr_slave_0: left promiscuous mode [ 341.450877][ T4583] hsr_slave_1: left promiscuous mode [ 341.473552][ T4583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.494320][ T4583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.572610][ T4583] veth1_macvtap: left promiscuous mode [ 341.586628][ T4583] veth0_macvtap: left promiscuous mode [ 341.592465][ T4583] veth1_vlan: left promiscuous mode [ 341.611771][ T4583] veth0_vlan: left promiscuous mode [ 341.848195][ T4583] vlan1 (unregistering): left allmulticast mode [ 341.854666][ T4583] veth0_vlan (unregistering): left allmulticast mode [ 342.127198][ T4583] team0 (unregistering): Port device team_slave_1 removed [ 342.178787][ T4583] team0 (unregistering): Port device team_slave_0 removed [ 342.623826][T12896] netlink: 'syz.5.1929': attribute type 39 has an invalid length. [ 342.678608][T12897] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 342.860672][T12900] vlan0: entered promiscuous mode [ 342.919778][T12900] vlan0: entered allmulticast mode [ 343.001099][T12907] netlink: 'syz.0.1932': attribute type 1 has an invalid length. [ 343.008784][T12900] veth0_vlan: entered allmulticast mode [ 343.023829][T12907] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1932'. [ 343.033221][T12907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1932'. [ 343.086146][T12908] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1933'. [ 343.120934][T12908] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1933'. [ 343.171178][T12910] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1933'. [ 343.182105][T12909] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1930'. [ 343.454245][T12928] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1938'. [ 343.812950][T12941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.034268][T12955] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1947'. [ 344.133177][T12951] syzkaller1: entered promiscuous mode [ 344.139150][T12951] syzkaller1: entered allmulticast mode [ 344.152569][T12958] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1948'. [ 344.237257][T12961] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1948'. [ 344.505802][T12971] netlink: 'syz.0.1951': attribute type 10 has an invalid length. [ 344.528287][T12971] bond0: (slave wlan1): Opening slave failed [ 344.537492][T12975] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 344.956951][T12989] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 345.211244][T12998] policy can only be matched on NF_INET_PRE_ROUTING [ 345.211270][T12998] unable to load match [ 345.287622][T13007] netlink: 'syz.6.1966': attribute type 1 has an invalid length. [ 347.287408][T13103] netlink: 'syz.6.1996': attribute type 8 has an invalid length. [ 347.440791][T13114] netlink: 'syz.0.2001': attribute type 21 has an invalid length. [ 347.463196][T13120] netlink: 'syz.7.2000': attribute type 1 has an invalid length. [ 347.772392][T13129] 8021q: adding VLAN 0 to HW filter on device bond5 [ 347.849506][T13129] bond4: (slave bond5): making interface the new active one [ 347.858021][T13129] bond4: (slave bond5): Enslaving as an active interface with an up link [ 347.930445][T13120] bond4: (slave gretap3): Enslaving as a backup interface with an up link [ 347.941856][T13135] 8021q: adding VLAN 0 to HW filter on device bond4 [ 348.149550][T13158] __nla_validate_parse: 12 callbacks suppressed [ 348.149573][T13158] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2007'. [ 348.361101][T13157] bridge0: left allmulticast mode [ 348.367321][T13157] bridge0: left promiscuous mode [ 348.527380][T13176] af_packet: tpacket_rcv: packet too big, clamped from 59478 to 4294967272. macoff=96 [ 348.807007][T13191] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2018'. [ 349.387883][T13216] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 349.492843][T13223] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.2029'. [ 349.621894][T13232] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2034'. [ 349.675518][T13232] netlink: 'syz.8.2034': attribute type 1 has an invalid length. [ 349.683351][T13232] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2034'. [ 349.693402][T13221] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2030'. [ 349.958462][T13245] tipc: Enabled bearer , priority 0 [ 349.984480][T13245] syzkaller0: entered promiscuous mode [ 349.997363][T13245] syzkaller0: entered allmulticast mode [ 350.031935][T13245] tipc: Resetting bearer [ 350.122349][T13244] tipc: Resetting bearer [ 350.183121][T13244] tipc: Disabling bearer [ 350.631444][T13282] ieee802154 phy0 wpan0: encryption failed: -22 [ 350.702543][T13287] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2046'. [ 350.781642][T13269] syzkaller0: entered promiscuous mode [ 350.797938][T13269] syzkaller0: entered allmulticast mode [ 350.820711][T13290] netlink: 288 bytes leftover after parsing attributes in process `syz.8.2052'. [ 353.128959][T13322] netlink: 'syz.0.2060': attribute type 15 has an invalid length. [ 353.155578][T13322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2060'. [ 353.257312][T13332] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2063'. [ 353.329436][ T3526] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 353.347809][T13322] netlink: 'syz.0.2060': attribute type 15 has an invalid length. [ 353.376262][ T3526] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 353.405004][T13322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2060'. [ 353.426928][ T3526] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 353.695649][T13350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2067'. [ 353.837053][T13355] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2068'. [ 353.866757][T13361] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2069'. [ 354.138088][T13356] macvlan0: entered promiscuous mode [ 354.144013][T13356] macvlan0: entered allmulticast mode [ 354.151593][T13356] bond6: (slave macvlan0): Opening slave failed [ 354.189196][T13376] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2072'. [ 354.236129][T13357] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.2069'. [ 354.344711][T13372] netlink: 'syz.5.2069': attribute type 21 has an invalid length. [ 354.357314][T13376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.365130][T13372] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2069'. [ 354.368565][T13376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.425033][T13376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.433045][T13376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.536568][T13372] netlink: 'syz.5.2069': attribute type 21 has an invalid length. [ 354.562853][T13372] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2069'. [ 355.143342][T13407] netlink: 'syz.5.2082': attribute type 83 has an invalid length. [ 355.152542][T13407] netlink: 'syz.5.2082': attribute type 28 has an invalid length. [ 355.169257][T13407] netlink: 'syz.5.2082': attribute type 3 has an invalid length. [ 355.350317][T13412] netlink: 'syz.7.2081': attribute type 5 has an invalid length. [ 356.376990][T13448] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 356.439870][T13448] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 356.779395][T13463] netlink: 'syz.0.2097': attribute type 1 has an invalid length. [ 356.881215][T13463] 8021q: adding VLAN 0 to HW filter on device bond7 [ 358.175058][T13502] bridge3: entered promiscuous mode [ 358.192538][T13502] bridge3: entered allmulticast mode [ 358.267572][T13503] bridge4: entered promiscuous mode [ 358.272864][T13503] bridge4: entered allmulticast mode [ 358.328715][T13508] netdevsim netdevsim6 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 359.086191][T13540] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 359.094178][T13540] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 359.096534][T13538] __nla_validate_parse: 5 callbacks suppressed [ 359.096551][T13538] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2118'. [ 359.102137][T13540] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 359.125708][T13540] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 359.133752][T13540] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 359.141734][T13540] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 359.149682][T13540] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 359.157735][T13540] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 359.165685][T13540] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 359.173622][T13540] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 362.512994][T13590] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2132'. [ 362.669179][T13600] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2136'. [ 362.979048][T13600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.991229][T13600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.002168][T13625] netlink: 'syz.8.2142': attribute type 3 has an invalid length. [ 363.003920][T13600] bond0 (unregistering): Released all slaves [ 363.030740][T13601] tipc: Enabled bearer , priority 10 [ 363.595094][T13652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.052255][T13677] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2155'. [ 364.145310][ T982] tipc: Node number set to 666676684 [ 364.613467][T13704] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2165'. [ 364.644105][T13706] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2165'. [ 364.843327][T13717] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2168'. [ 364.975456][T13723] atomic_op ffff88802f329998 conn xmit_atomic 0000000000000000 [ 365.116545][T13728] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2174'. [ 365.126152][T13728] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2174'. [ 365.713960][T13758] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2184'. [ 365.724776][T13765] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 365.852818][T13774] net_ratelimit: 45 callbacks suppressed [ 365.852842][T13774] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 365.896643][T13776] tipc: Enabling of bearer rejected, failed to enable media [ 366.092552][T13785] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2190'. [ 366.111854][T13785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2190'. [ 366.125629][T13785] bond0: Error: Cannot enslave bond to itself. [ 366.846914][T13820] syzkaller1: entered promiscuous mode [ 366.857181][T13820] syzkaller1: entered allmulticast mode [ 366.983900][T13826] tipc: Enabled bearer , priority 0 [ 366.996309][T13826] syzkaller0: entered promiscuous mode [ 367.009646][T13832] netlink: 'syz.5.2204': attribute type 10 has an invalid length. [ 367.020261][T13826] syzkaller0: entered allmulticast mode [ 367.038356][T13832] veth0_vlan: entered allmulticast mode [ 367.179054][T13832] veth0_vlan: left promiscuous mode [ 367.197374][T13832] veth0_vlan: entered promiscuous mode [ 367.224697][T13832] team0: Device veth0_vlan failed to register rx_handler [ 367.333638][T13850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.389641][T13850] bond0: (slave rose0): Enslaving as an active interface with an up link [ 367.411784][T13829] tipc: Resetting bearer [ 367.514698][T13856] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 367.525894][T13825] tipc: Resetting bearer [ 367.553569][T13825] tipc: Disabling bearer [ 367.856544][T13863] syzkaller1: entered promiscuous mode [ 367.862160][T13863] syzkaller1: entered allmulticast mode [ 367.917386][T13883] ksmbd: Unknown IPC event: 3, ignore. [ 367.960864][T13886] netlink: 'syz.0.2217': attribute type 4 has an invalid length. [ 368.226142][T13894] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2222'. [ 368.234720][T13895] ieee802154 phy0 wpan0: encryption failed: -22 [ 368.253490][T13894] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2222'. [ 368.268508][T13894] netlink: 'syz.6.2222': attribute type 7 has an invalid length. [ 368.278675][T13894] netlink: 'syz.6.2222': attribute type 8 has an invalid length. [ 368.307627][T13894] erspan0: entered promiscuous mode [ 368.351639][T13894] erspan0: left promiscuous mode [ 369.215514][T13939] syz.0.2236 (13939) used obsolete PPPIOCDETACH ioctl [ 369.288625][T13944] tipc: Enabling of bearer rejected, failed to enable media [ 369.600034][T13962] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 369.632799][ T12] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 369.644345][T13964] netlink: 'syz.7.2241': attribute type 1 has an invalid length. [ 369.653276][ T12] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 369.733878][T13964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.753503][ T12] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 369.780249][ T12] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 369.790077][T13972] netlink: 'syz.5.2242': attribute type 29 has an invalid length. [ 369.812030][T13972] netlink: 'syz.5.2242': attribute type 29 has an invalid length. [ 369.862989][T13976] __nla_validate_parse: 3 callbacks suppressed [ 369.863004][T13976] netlink: 1224 bytes leftover after parsing attributes in process `syz.7.2244'. [ 369.881835][T13976] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2244'. [ 369.887963][T13977] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2242'. [ 369.902988][T13977] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2242'. [ 370.022003][T13981] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2246'. [ 370.201697][T13981] netlink: 'syz.6.2246': attribute type 30 has an invalid length. [ 370.617763][T14003] netlink: 'syz.7.2256': attribute type 1 has an invalid length. [ 370.635683][T14005] netlink: 'syz.8.2257': attribute type 10 has an invalid length. [ 370.712745][T14005] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 371.229677][T14042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.299099][T14047] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2272'. [ 371.301431][T14040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.450711][T14054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2274'. [ 371.544621][T14059] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2276'. [ 371.713079][T14070] netlink: 'syz.8.2277': attribute type 1 has an invalid length. [ 371.763609][T14075] openvswitch: netlink: IPv4 tun info is not correct [ 372.216618][T14096] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 372.274338][T14102] netlink: 'syz.5.2287': attribute type 10 has an invalid length. [ 372.296110][T14102] team0: Device veth1_macvtap failed to register rx_handler [ 372.536887][T14115] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2290'. [ 372.543161][T14111] 8021q: adding VLAN 0 to HW filter on device bond7 [ 372.546310][T14118] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2289'. [ 372.654611][T14117] 8021q: adding VLAN 0 to HW filter on device bond10 [ 372.664607][T14123] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 372.787262][T14124] 8021q: adding VLAN 0 to HW filter on device bond10 [ 372.794788][T14124] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 372.820629][T14124] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 372.978592][T14117] vlan2: entered allmulticast mode [ 373.010739][T14117] bond10: entered allmulticast mode [ 373.849392][T14170] delete_channel: no stack [ 374.641408][T14221] validate_nla: 2 callbacks suppressed [ 374.641428][T14221] netlink: 'syz.7.2318': attribute type 1 has an invalid length. [ 375.347370][T14247] netlink: 'syz.5.2321': attribute type 27 has an invalid length. [ 375.364819][T14247] netlink: 'syz.5.2321': attribute type 4 has an invalid length. [ 375.393126][T14247] __nla_validate_parse: 5 callbacks suppressed [ 375.393149][T14247] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2321'. [ 376.240392][T14270] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2331'. [ 376.253751][T14270] nbd: nbd0 already in use [ 376.588847][T14284] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2336'. [ 376.760679][T14291] netlink: 'syz.6.2340': attribute type 27 has an invalid length. [ 376.768915][T14291] netlink: 'syz.6.2340': attribute type 4 has an invalid length. [ 376.778233][T14291] netlink: 144 bytes leftover after parsing attributes in process `syz.6.2340'. [ 377.007158][T14300] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2343'. [ 377.139119][T14312] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2345'. [ 377.386962][T14325] : renamed from bridge_slave_0 [ 377.399416][T14329] netlink: 6 bytes leftover after parsing attributes in process `syz.7.2351'. [ 377.439233][T14329] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.536659][T14332] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2353'. [ 377.710407][T14342] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2357'. [ 377.747061][T14342] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2357'. [ 377.774767][T14343] siw: device registration error -23 [ 377.969948][T14352] netlink: 'syz.5.2360': attribute type 6 has an invalid length. [ 378.035252][T14359] Dead loop on virtual device ip6_vti0, fix it urgently! [ 378.126302][T14360] sctp: [Deprecated]: syz.7.2362 (pid 14360) Use of int in maxseg socket option. [ 378.126302][T14360] Use struct sctp_assoc_value instead [ 378.210420][T14369] netlink: 'syz.5.2364': attribute type 4 has an invalid length. [ 378.785563][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.610990][T14436] netlink: 'syz.8.2385': attribute type 3 has an invalid length. [ 379.733894][T14439] netlink: 'syz.5.2386': attribute type 4 has an invalid length. [ 380.361307][T14477] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 380.411962][T14476] __nla_validate_parse: 15 callbacks suppressed [ 380.411983][T14476] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2397'. [ 380.458177][T14480] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 380.812748][T14497] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2406'. [ 381.559163][T14537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2419'. [ 381.611490][T14545] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2419'. [ 381.738546][T14552] netlink: 'syz.6.2423': attribute type 1 has an invalid length. [ 381.760291][T14552] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2423'. [ 381.769808][T14550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2422'. [ 381.769874][T14550] tc_dump_action: action bad kind [ 382.414171][T14587] team0: Device wireguard0 is of different type [ 382.419128][T14590] netlink: 'syz.0.2432': attribute type 1 has an invalid length. [ 382.512434][T14595] netlink: 'syz.6.2433': attribute type 1 has an invalid length. [ 382.558885][T14595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.590261][T14590] 8021q: adding VLAN 0 to HW filter on device bond8 [ 382.918174][T14620] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2439'. [ 382.930998][T14620] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2439'. [ 383.025288][T14627] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2440'. [ 383.444576][T14633] siw: device registration error -23 [ 383.610546][T14648] netlink: 100 bytes leftover after parsing attributes in process `syz.8.2444'. [ 383.642506][T14649] nbd: must specify at least one socket [ 384.052191][T14673] netlink: 'syz.6.2454': attribute type 6 has an invalid length. [ 384.622330][T14711] netlink: 'syz.0.2461': attribute type 6 has an invalid length. [ 384.864454][T14716] netlink: 'syz.8.2463': attribute type 2 has an invalid length. [ 384.944227][T14718] netlink: 'syz.0.2464': attribute type 1 has an invalid length. [ 384.985814][T14721] netlink: 'syz.0.2464': attribute type 1 has an invalid length. [ 385.164664][T14729] ip6gre1: entered allmulticast mode [ 385.319911][T14732] ip6gre1: entered allmulticast mode [ 386.160444][T14784] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 386.196522][T14787] __nla_validate_parse: 10 callbacks suppressed [ 386.196543][T14787] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2487'. [ 386.337704][T14796] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2491'. [ 386.513929][T14802] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2492'. [ 386.532886][T14802] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2492'. [ 386.620664][T14807] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2495'. [ 386.933899][T14820] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2500'. [ 386.954521][T14820] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2500'. [ 387.028575][T14825] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2501'. [ 387.028575][T14827] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2501'. [ 387.362157][T14842] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2505'. [ 388.096018][T14881] sch_tbf: burst 4398 is lower than device lo mtu (17233) ! [ 388.369473][T14899] netlink: 'syz.7.2520': attribute type 6 has an invalid length. [ 388.622410][T14906] openvswitch: netlink: Actions may not be safe on all matching packets [ 388.661590][T14907] openvswitch: netlink: Actions may not be safe on all matching packets [ 388.847517][T14919] netlink: 'syz.5.2525': attribute type 39 has an invalid length. [ 389.659440][T14942] syzkaller0: entered promiscuous mode [ 389.665436][T14942] syzkaller0: entered allmulticast mode [ 390.052858][T14959] hsr_slave_0: left promiscuous mode [ 390.077519][T14959] hsr_slave_1: left promiscuous mode [ 390.200109][T14963] netlink: 'syz.8.2537': attribute type 11 has an invalid length. [ 390.240230][T14963] netlink: 'syz.8.2537': attribute type 4 has an invalid length. [ 390.297705][T14967] netlink: 'syz.5.2538': attribute type 2 has an invalid length. [ 390.347294][T14970] netlink: 'syz.7.2539': attribute type 1 has an invalid length. [ 390.401348][T14966] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.423835][T14966] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.471229][T14979] nbd: couldn't find a device at index -373156329 [ 390.515708][T14980] netlink: 'syz.8.2541': attribute type 10 has an invalid length. [ 390.527863][T14976] netlink: 'syz.6.2542': attribute type 9 has an invalid length. [ 390.551961][T14980] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.611987][T14980] bond0: (slave team0): Enslaving as an active interface with an up link [ 390.721302][T14992] syzkaller0: entered promiscuous mode [ 390.727308][T14992] syzkaller0: entered allmulticast mode [ 391.071289][T15004] nbd4: detected capacity change from 0 to 127 [ 391.151585][ T5871] block nbd4: Receive control failed (result -104) [ 391.483530][T15025] v: renamed from veth0_macvtap [ 391.895797][T15043] sit1: entered promiscuous mode [ 391.901036][T15043] sit1: entered allmulticast mode [ 392.789723][T15100] __nla_validate_parse: 16 callbacks suppressed [ 392.789745][T15100] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2575'. [ 393.158621][T15111] netlink: 9 bytes leftover after parsing attributes in process `syz.7.2578'. [ 393.200240][T15111] netlink: 5 bytes leftover after parsing attributes in process `syz.7.2578'. [ 393.213711][T15111] 0ªî{X¹¦: renamed from gretap0 [ 393.232711][T15111] 0ªî{X¹¦: left promiscuous mode [ 393.247421][T15111] 0ªî{X¹¦: entered allmulticast mode [ 393.258270][T15111] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 394.100780][T15131] netlink: 4924 bytes leftover after parsing attributes in process `syz.7.2583'. [ 394.134156][T15131] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2583'. [ 394.256231][T15150] netlink: 'syz.0.2590': attribute type 1 has an invalid length. [ 394.290729][T15150] netlink: 'syz.0.2590': attribute type 10 has an invalid length. [ 394.345538][T15150] netlink: 'syz.0.2590': attribute type 4 has an invalid length. [ 394.370457][T15152] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2591'. [ 394.391472][T15150] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2590'. [ 394.408593][T15158] netlink: 'syz.8.2592': attribute type 8 has an invalid length. [ 394.782756][T15168] netlink: 'syz.0.2594': attribute type 1 has an invalid length. [ 395.170848][T15168] 8021q: adding VLAN 0 to HW filter on device bond9 [ 395.330822][T15177] bond9: (slave veth19): Enslaving as an active interface with a down link [ 395.435523][T15183] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 395.627119][T15187] bond9: (slave veth21): Enslaving as an active interface with a down link [ 395.659819][T15208] netlink: 'syz.5.2601': attribute type 1 has an invalid length. [ 395.710912][T15210] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2603'. [ 395.754070][T15206] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2603'. [ 395.890349][T15208] 8021q: adding VLAN 0 to HW filter on device bond11 [ 396.003748][T15225] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2608'. [ 396.646810][T15267] netlink: 'syz.7.2617': attribute type 6 has an invalid length. [ 397.518735][T15305] syzkaller1: entered promiscuous mode [ 397.524660][T15305] syzkaller1: entered allmulticast mode [ 397.616180][T15311] netlink: 'syz.6.2632': attribute type 10 has an invalid length. [ 397.673897][T15311] team0: Port device dummy0 added [ 397.857474][T15324] __nla_validate_parse: 3 callbacks suppressed [ 397.857497][T15324] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2634'. [ 398.256557][T15342] veth0: entered promiscuous mode [ 398.353541][T15345] ieee802154 phy0 wpan0: encryption failed: -90 [ 398.581330][T15357] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2641'. [ 398.801346][T15364] tipc: Enabled bearer , priority 0 [ 398.844524][T15364] syzkaller0: entered promiscuous mode [ 398.851173][T15364] syzkaller0: entered allmulticast mode [ 398.960329][T15366] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2643'. [ 398.983030][T15365] tipc: Resetting bearer [ 399.019414][T15364] tipc: Resetting bearer [ 399.043934][T15364] tipc: Disabling bearer [ 399.074541][T15341] veth0: left promiscuous mode [ 399.367454][T15379] netlink: 'syz.7.2648': attribute type 5 has an invalid length. [ 399.594202][T15391] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2650'. [ 399.629945][T15391] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 399.655360][T15391] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 399.996115][T15415] netlink: 232 bytes leftover after parsing attributes in process `syz.7.2657'. [ 400.171861][T15419] bond0: entered allmulticast mode [ 400.198666][T15419] bond_slave_0: entered allmulticast mode [ 400.231346][T15419] bond_slave_1: entered allmulticast mode [ 400.420290][T15429] netlink: 'syz.7.2660': attribute type 3 has an invalid length. [ 400.508312][T15435] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2660'. [ 400.582962][T15433] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 400.737614][T15433] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 400.843995][T15451] netlink: 232 bytes leftover after parsing attributes in process `syz.5.2667'. [ 400.861701][T15433] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 400.884405][T15451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2667'. [ 401.210763][ T3538] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 401.229599][T15462] syzkaller1: entered promiscuous mode [ 401.242574][T15462] syzkaller1: entered allmulticast mode [ 401.281750][ T78] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 401.322964][ T3538] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 401.419094][ T1102] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 401.573594][T15472] nftables ruleset with unbound chain [ 402.020950][T15485] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2680'. [ 402.629999][T15516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2688'. [ 402.929690][T15527] netlink: 332 bytes leftover after parsing attributes in process `syz.6.2692'. [ 403.273501][T15543] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2696'. [ 403.356130][T15543] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2696'. [ 403.501929][T15550] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2698'. [ 403.559168][T15550] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2698'. [ 403.581456][T15555] netlink: 'syz.5.2698': attribute type 21 has an invalid length. [ 403.607465][T15555] netlink: 'syz.5.2698': attribute type 6 has an invalid length. [ 403.616805][T15560] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 403.629571][T15555] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2698'. [ 404.016198][T15580] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2706'. [ 404.356591][T15584] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2708'. [ 405.085442][T15625] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2722'. [ 405.114264][T15626] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2722'. [ 405.130757][T15622] vlan2: entered allmulticast mode [ 405.136153][T15625] netlink: 'syz.7.2722': attribute type 11 has an invalid length. [ 405.136178][T15625] netlink: 'syz.7.2722': attribute type 4 has an invalid length. [ 405.136372][T15626] netlink: 'syz.7.2722': attribute type 11 has an invalid length. [ 405.183763][T15626] netlink: 'syz.7.2722': attribute type 4 has an invalid length. [ 405.216083][ T3538] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 405.398119][T15638] sctp: [Deprecated]: syz.5.2725 (pid 15638) Use of struct sctp_assoc_value in delayed_ack socket option. [ 405.398119][T15638] Use struct sctp_sack_info instead [ 405.416329][T15643] openvswitch: netlink: Actions may not be safe on all matching packets [ 406.746447][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 406.756075][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 406.764203][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 406.773643][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 406.783283][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 406.845875][ T5871] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 406.855712][ T5871] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 406.864664][ T5871] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 406.873722][ T5871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 406.883670][ T5871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 408.195540][T15747] __nla_validate_parse: 9 callbacks suppressed [ 408.195561][T15747] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2755'. [ 408.662935][T15694] chnl_net:caif_netlink_parms(): no params data found [ 408.707353][T15769] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2765'. [ 408.911690][T15780] netlink: 'syz.8.2765': attribute type 1 has an invalid length. [ 408.935359][ T5869] Bluetooth: hci0: command tx timeout [ 409.076384][T15790] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2769'. [ 409.120153][T15694] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.135710][T15694] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.136322][T15795] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2771'. [ 409.143473][T15694] bridge_slave_0: entered allmulticast mode [ 409.172829][T15694] bridge_slave_0: entered promiscuous mode [ 409.182539][T15790] netlink: 'syz.7.2769': attribute type 2 has an invalid length. [ 409.191015][T15790] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2769'. [ 409.246079][T15694] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.272162][T15694] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.279791][T15694] bridge_slave_1: entered allmulticast mode [ 409.295719][T15694] bridge_slave_1: entered promiscuous mode [ 409.425177][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 409.453005][T15694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.490936][T15803] netlink: 'syz.8.2774': attribute type 1 has an invalid length. [ 409.502266][T15694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.730898][T15807] bond8: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 409.744012][T15807] bond8: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 409.755803][T15807] bond8: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode [ 409.834640][T15821] netlink: 64985 bytes leftover after parsing attributes in process `syz.5.2778'. [ 409.854648][T15694] team0: Port device team_slave_0 added [ 409.879235][T15694] team0: Port device team_slave_1 added [ 409.942457][T15694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.964952][T15694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.966844][T15797] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 409.992987][T15694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.017223][T15694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.033386][T15694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.038844][T15797] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 410.060703][T15694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.092509][T15825] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 410.149405][T15825] netlink: 'syz.8.2780': attribute type 10 has an invalid length. [ 410.209076][T15825] mac80211_hwsim hwsim18 wlan1: left allmulticast mode [ 410.217038][T15825] bond0: (slave wlan1): Opening slave failed [ 410.249763][T15828] bond0: (slave team0): Releasing backup interface [ 410.290968][T15828] bridge_slave_0: left allmulticast mode [ 410.301695][T15828] bridge_slave_0: left promiscuous mode [ 410.313401][T15828] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.342795][T15828] bridge_slave_1: left allmulticast mode [ 410.352672][T15828] bridge_slave_1: left promiscuous mode [ 410.362636][T15828] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.406829][T15828] bond0: (slave bond_slave_0): Releasing backup interface [ 410.414024][T15833] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 410.437340][T15828] bond0: (slave bond_slave_1): Releasing backup interface [ 410.463182][T15828] team0: Port device team_slave_0 removed [ 410.480200][T15828] team0: Port device team_slave_1 removed [ 410.500821][T15828] bond3: (slave geneve3): Releasing active interface [ 410.514402][T15828] bond6: (slave geneve4): Releasing backup interface [ 410.556706][T15694] hsr_slave_0: entered promiscuous mode [ 410.563441][T15694] hsr_slave_1: entered promiscuous mode [ 410.571715][T15694] debugfs: 'hsr0' already exists in 'hsr' [ 410.578093][T15694] Cannot create hsr debugfs directory [ 410.589630][ T49] netdevsim netdevsim8 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 410.613303][ T49] netdevsim netdevsim8 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 410.632542][ T49] netdevsim netdevsim8 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 410.764497][ T49] netdevsim netdevsim8 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 410.847384][T15845] netlink: 'syz.7.2785': attribute type 2 has an invalid length. [ 410.857539][T15841] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2783'. [ 410.867626][T15845] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2785'. [ 411.033399][T15852] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2787'. [ 411.102321][T15851] dvmrp0: entered allmulticast mode [ 411.407753][T15867] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2794'. [ 411.610323][T15694] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 411.649672][T15879] sctp: [Deprecated]: syz.7.2796 (pid 15879) Use of struct sctp_assoc_value in delayed_ack socket option. [ 411.649672][T15879] Use struct sctp_sack_info instead [ 411.760602][T15694] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 411.873494][T15694] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 412.073399][T15694] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 412.347487][T15694] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 412.400321][T15694] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 412.405159][T15903] netlink: 'syz.5.2806': attribute type 10 has an invalid length. [ 412.488887][T15903] bridge0: entered allmulticast mode [ 412.507706][T15903] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 412.531693][T15694] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 412.576832][T15694] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 412.746621][T15921] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 412.767503][T15911] syzkaller0: entered promiscuous mode [ 412.773028][T15911] syzkaller0: entered allmulticast mode [ 412.959644][T15930] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 413.244800][T15694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.350729][T15694] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.402831][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.410144][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.529371][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.536695][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.608847][T15948] netlink: 'syz.5.2817': attribute type 1 has an invalid length. [ 413.627185][T15950] __nla_validate_parse: 5 callbacks suppressed [ 413.627207][T15950] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2818'. [ 413.660000][T15950] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2818'. [ 413.690822][T15950] netlink: 'syz.6.2818': attribute type 7 has an invalid length. [ 413.819477][T15950] netlink: 'syz.6.2818': attribute type 8 has an invalid length. [ 413.836138][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2818'. [ 413.874624][T15950] gretap0: entered promiscuous mode [ 413.908432][T15950] gretap0: left promiscuous mode [ 414.449704][T15988] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2827'. [ 414.503209][T15991] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2828'. [ 414.540606][T15694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.744668][T15694] veth0_vlan: entered promiscuous mode [ 414.802221][T16013] syz.6.2832: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 414.863494][T15694] veth1_vlan: entered promiscuous mode [ 414.887238][T16013] CPU: 1 UID: 0 PID: 16013 Comm: syz.6.2832 Not tainted syzkaller #0 PREEMPT(full) [ 414.887269][T16013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 414.887281][T16013] Call Trace: [ 414.887289][T16013] [ 414.887298][T16013] dump_stack_lvl+0x189/0x250 [ 414.887334][T16013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.887357][T16013] ? __pfx__printk+0x10/0x10 [ 414.887386][T16013] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 414.887413][T16013] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 414.887439][T16013] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 414.887467][T16013] warn_alloc+0x214/0x310 [ 414.887505][T16013] ? __pfx_warn_alloc+0x10/0x10 [ 414.887547][T16013] ? __get_vm_area_node+0x28f/0x300 [ 414.887576][T16013] ? packet_set_ring+0x6f4/0x2350 [ 414.887619][T16013] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 414.887686][T16013] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 414.887718][T16013] ? alloc_pages_mpol+0x3cd/0x4a0 [ 414.887750][T16013] ? packet_set_ring+0x6f4/0x2350 [ 414.887778][T16013] vzalloc_noprof+0xb2/0xf0 [ 414.887807][T16013] ? packet_set_ring+0x6f4/0x2350 [ 414.887836][T16013] packet_set_ring+0x6f4/0x2350 [ 414.887891][T16013] ? __pfx_packet_set_ring+0x10/0x10 [ 414.887941][T16013] ? _copy_from_user+0x94/0xb0 [ 414.887974][T16013] packet_setsockopt+0xc5a/0x12c0 [ 414.888006][T16013] ? __pfx_packet_setsockopt+0x10/0x10 [ 414.888041][T16013] ? __lock_acquire+0xab9/0xd20 [ 414.888077][T16013] ? aa_sk_perm+0x81e/0x950 [ 414.888114][T16013] ? __pfx_aa_sk_perm+0x10/0x10 [ 414.888148][T16013] ? __fget_files+0x2a/0x420 [ 414.888165][T16013] ? aa_sock_opt_perm+0xff/0x1b0 [ 414.888190][T16013] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 414.888212][T16013] ? __pfx_packet_setsockopt+0x10/0x10 [ 414.888241][T16013] do_sock_setsockopt+0x179/0x1b0 [ 414.888272][T16013] __x64_sys_setsockopt+0x13f/0x1b0 [ 414.888304][T16013] do_syscall_64+0xfa/0x3b0 [ 414.888326][T16013] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.888347][T16013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.888366][T16013] ? clear_bhb_loop+0x60/0xb0 [ 414.888392][T16013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.888410][T16013] RIP: 0033:0x7fbeff78eba9 [ 414.888429][T16013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.888447][T16013] RSP: 002b:00007fbf0064e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 414.888469][T16013] RAX: ffffffffffffffda RBX: 00007fbeff9d6180 RCX: 00007fbeff78eba9 [ 414.888484][T16013] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000008 [ 414.888495][T16013] RBP: 00007fbeff811e19 R08: 000000000000001c R09: 0000000000000000 [ 414.888507][T16013] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 414.888520][T16013] R13: 00007fbeff9d6218 R14: 00007fbeff9d6180 R15: 00007ffff0f30098 [ 414.888555][T16013] [ 414.888563][T16013] Mem-Info: [ 415.014875][T15694] veth0_macvtap: entered promiscuous mode [ 415.039889][T16013] active_anon:4892 inactive_anon:0 isolated_anon:0 [ 415.039889][T16013] active_file:3208 inactive_file:39976 isolated_file:0 [ 415.039889][T16013] unevictable:768 dirty:135 writeback:0 [ 415.039889][T16013] slab_reclaimable:12611 slab_unreclaimable:123648 [ 415.039889][T16013] mapped:29232 shmem:1377 pagetables:1053 [ 415.039889][T16013] sec_pagetables:0 bounce:0 [ 415.039889][T16013] kernel_misc_reclaimable:0 [ 415.039889][T16013] free:1297779 free_pcp:14877 free_cma:0 [ 415.077577][T15694] veth1_macvtap: entered promiscuous mode [ 415.109623][T16013] Node 0 active_anon:19568kB inactive_anon:0kB active_file:12832kB inactive_file:159704kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116928kB dirty:540kB writeback:0kB shmem:3972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14248kB pagetables:4064kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 415.185629][T16021] sock: sock_timestamping_bind_phc: sock not bind to device [ 415.300416][T15694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.362440][T15694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.394593][T16013] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 415.497987][T16013] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 415.534589][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.556880][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.570327][T16013] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 415.588170][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.588642][T16032] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2838'. [ 415.610596][T16013] Node 0 DMA32 free:1285716kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19932kB inactive_anon:0kB active_file:12832kB inactive_file:158132kB unevictable:1536kB writepending:536kB present:3129332kB managed:2557420kB mlocked:0kB bounce:0kB free_pcp:42324kB local_pcp:20916kB free_cma:0kB [ 415.659783][T16030] openvswitch: netlink: Actions may not be safe on all matching packets [ 415.666876][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.687537][T16035] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2838'. [ 415.696998][T16013] lowmem_reserve[]: 0 0 1 1 1 [ 415.701771][T16013] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 415.818680][T16013] lowmem_reserve[]: 0 0 0 0 0 [ 415.832454][T16013] Node 1 Normal free:3888636kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18080kB local_pcp:9184kB free_cma:0kB [ 415.880076][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.906330][T16013] lowmem_reserve[]: 0 0 0 0 0 [ 415.911313][T16013] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 415.956351][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.002794][T16013] Node 0 DMA32: 800*4kB (UME) 348*8kB (UM) 143*16kB (M) 1434*32kB (UME) 572*64kB (UME) 143*128kB (UM) 32*256kB (UME) 8*512kB (UM) 4*1024kB (UME) 2*2048kB (UM) 282*4096kB (UM) = 1284624kB [ 416.048496][T16013] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 416.080298][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.100589][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.112031][T16013] Node 1 Normal: 195*4kB (UE) 50*8kB (UME) 36*16kB (UME) 71*32kB (UME) 23*64kB (UME) 9*128kB (UME) 8*256kB (UME) 4*512kB (UME) 3*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3888636kB [ 416.164208][T16013] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 416.217429][T16046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.229302][T16013] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 416.292982][T16013] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 416.314774][T16013] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 416.333018][T16013] 44558 total pagecache pages [ 416.341984][T16013] 0 pages in swap cache [ 416.354591][T16013] Free swap = 124996kB [ 416.360297][T16013] Total swap = 124996kB [ 416.364617][T16013] 2097051 pages RAM [ 416.397703][T16054] pim6reg1: entered promiscuous mode [ 416.403069][T16054] pim6reg1: entered allmulticast mode [ 416.406967][T16013] 0 pages HighMem/MovableOnly [ 416.414360][T16013] 425670 pages reserved [ 416.447631][T16013] 0 pages cma reserved [ 416.753419][T16072] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2846'. [ 416.789863][T16072] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2846'. [ 417.202234][T16099] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2858'. [ 417.224745][T16099] IPVS: Error joining to the multicast group [ 417.494488][T16114] netlink: 'syz.7.2864': attribute type 1 has an invalid length. [ 417.679489][T16114] 8021q: adding VLAN 0 to HW filter on device bond6 [ 417.739580][T16123] tipc: Enabled bearer , priority 0 [ 417.746102][T16134] netlink: 'syz.6.2869': attribute type 21 has an invalid length. [ 417.766562][T16123] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode [ 417.786165][T16123] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode [ 417.815276][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 417.884781][T16123] tipc: Resetting bearer [ 418.268577][T16152] [ 418.271048][T16152] ====================================================== [ 418.278087][T16152] WARNING: possible circular locking dependency detected [ 418.285123][T16152] syzkaller #0 Not tainted [ 418.289555][T16152] ------------------------------------------------------ [ 418.296575][T16152] syz.6.2875/16152 is trying to acquire lock: [ 418.302635][T16152] ffff88814238fba8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x19b/0x450 [ 418.312039][T16152] [ 418.312039][T16152] but task is already holding lock: [ 418.319400][T16152] ffff88814238f668 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: elevator_change+0x180/0x450 [ 418.329588][T16152] [ 418.329588][T16152] which lock already depends on the new lock. [ 418.329588][T16152] [ 418.340334][T16152] [ 418.340334][T16152] the existing dependency chain (in reverse order) is: [ 418.349516][T16152] [ 418.349516][T16152] -> #6 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 418.358125][T16152] lock_acquire+0x120/0x360 [ 418.363164][T16152] blk_alloc_queue+0x538/0x620 [ 418.368457][T16152] __blk_mq_alloc_disk+0x15c/0x340 [ 418.374182][T16152] nbd_dev_add+0x46c/0xae0 [ 418.379130][T16152] nbd_init+0x168/0x1f0 [ 418.383816][T16152] do_one_initcall+0x233/0x820 [ 418.389104][T16152] do_initcall_level+0x104/0x190 [ 418.394652][T16152] do_initcalls+0x59/0xa0 [ 418.399529][T16152] kernel_init_freeable+0x334/0x4b0 [ 418.405274][T16152] kernel_init+0x1d/0x1d0 [ 418.410145][T16152] ret_from_fork+0x436/0x7d0 [ 418.415352][T16152] ret_from_fork_asm+0x1a/0x30 [ 418.420648][T16152] [ 418.420648][T16152] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 418.427869][T16152] lock_acquire+0x120/0x360 [ 418.432913][T16152] fs_reclaim_acquire+0x72/0x100 [ 418.438381][T16152] __kmalloc_cache_node_noprof+0x44/0x3d0 [ 418.444640][T16152] create_worker+0x112/0x720 [ 418.449777][T16152] workqueue_prepare_cpu+0xe4/0x170 [ 418.455601][T16152] cpuhp_invoke_callback+0x442/0x860 [ 418.461423][T16152] _cpu_up+0x2c9/0x580 [ 418.466018][T16152] cpu_up+0x1d2/0x220 [ 418.470611][T16152] cpuhp_bringup_mask+0xb2/0x1a0 [ 418.476081][T16152] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 418.482423][T16152] bringup_nonboot_cpus+0x17/0x30 [ 418.487984][T16152] smp_init+0x32/0x110 [ 418.492597][T16152] kernel_init_freeable+0x316/0x4b0 [ 418.498426][T16152] kernel_init+0x1d/0x1d0 [ 418.503302][T16152] ret_from_fork+0x436/0x7d0 [ 418.508532][T16152] ret_from_fork_asm+0x1a/0x30 [ 418.513920][T16152] [ 418.513920][T16152] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 418.521752][T16152] lock_acquire+0x120/0x360 [ 418.526880][T16152] cpus_read_lock+0x42/0x160 [ 418.532087][T16152] static_key_slow_inc+0x12/0x30 [ 418.537552][T16152] nbd_genl_reconfigure+0xf24/0x1870 [ 418.543369][T16152] genl_family_rcv_msg_doit+0x212/0x300 [ 418.549440][T16152] genl_rcv_msg+0x60e/0x790 [ 418.554472][T16152] netlink_rcv_skb+0x208/0x470 [ 418.559847][T16152] genl_rcv+0x28/0x40 [ 418.564387][T16152] netlink_unicast+0x82f/0x9e0 [ 418.569702][T16152] netlink_sendmsg+0x805/0xb30 [ 418.575011][T16152] __sock_sendmsg+0x21c/0x270 [ 418.580260][T16152] ____sys_sendmsg+0x505/0x830 [ 418.585561][T16152] ___sys_sendmsg+0x21f/0x2a0 [ 418.591235][T16152] __x64_sys_sendmsg+0x19b/0x260 [ 418.596696][T16152] do_syscall_64+0xfa/0x3b0 [ 418.601724][T16152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.608141][T16152] [ 418.608141][T16152] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 418.615988][T16152] lock_acquire+0x120/0x360 [ 418.621032][T16152] __mutex_lock+0x187/0x1350 [ 418.626157][T16152] nbd_queue_rq+0x257/0xf10 [ 418.631655][T16152] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 418.637731][T16152] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 418.644704][T16152] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 418.651294][T16152] blk_mq_run_hw_queue+0x348/0x4f0 [ 418.656938][T16152] blk_mq_dispatch_list+0xd0c/0xe00 [ 418.662746][T16152] blk_mq_flush_plug_list+0x469/0x550 [ 418.668811][T16152] __blk_flush_plug+0x3d3/0x4b0 [ 418.674180][T16152] __submit_bio+0x2d3/0x5a0 [ 418.679308][T16152] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 418.685462][T16152] block_read_full_folio+0x599/0x830 [ 418.691456][T16152] filemap_read_folio+0x114/0x380 [ 418.697098][T16152] do_read_cache_folio+0x350/0x590 [ 418.702822][T16152] read_part_sector+0xb6/0x2b0 [ 418.708126][T16152] adfspart_check_ICS+0xa4/0xa50 [ 418.713861][T16152] bdev_disk_changed+0x75f/0x14b0 [ 418.719430][T16152] blkdev_get_whole+0x380/0x510 [ 418.725076][T16152] bdev_open+0x31e/0xd30 [ 418.729898][T16152] blkdev_open+0x457/0x600 [ 418.734841][T16152] do_dentry_open+0x953/0x13f0 [ 418.740219][T16152] vfs_open+0x3b/0x340 [ 418.744808][T16152] path_openat+0x2ee5/0x3830 [ 418.749922][T16152] do_filp_open+0x1fa/0x410 [ 418.754956][T16152] do_sys_openat2+0x121/0x1c0 [ 418.760167][T16152] __x64_sys_openat+0x138/0x170 [ 418.765540][T16152] do_syscall_64+0xfa/0x3b0 [ 418.770666][T16152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.777081][T16152] [ 418.777081][T16152] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 418.784320][T16152] lock_acquire+0x120/0x360 [ 418.789358][T16152] __mutex_lock+0x187/0x1350 [ 418.794472][T16152] nbd_queue_rq+0xc8/0xf10 [ 418.799416][T16152] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 418.805494][T16152] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 418.812358][T16152] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 418.818877][T16152] blk_mq_run_hw_queue+0x348/0x4f0 [ 418.824544][T16152] blk_mq_dispatch_list+0xd0c/0xe00 [ 418.830294][T16152] blk_mq_flush_plug_list+0x469/0x550 [ 418.836283][T16152] __blk_flush_plug+0x3d3/0x4b0 [ 418.841830][T16152] __submit_bio+0x2d3/0x5a0 [ 418.846892][T16152] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 418.853131][T16152] block_read_full_folio+0x599/0x830 [ 418.858941][T16152] filemap_read_folio+0x114/0x380 [ 418.864519][T16152] do_read_cache_folio+0x350/0x590 [ 418.870156][T16152] read_part_sector+0xb6/0x2b0 [ 418.875462][T16152] adfspart_check_ICS+0xa4/0xa50 [ 418.880963][T16152] bdev_disk_changed+0x75f/0x14b0 [ 418.886524][T16152] blkdev_get_whole+0x380/0x510 [ 418.891916][T16152] bdev_open+0x31e/0xd30 [ 418.896689][T16152] blkdev_open+0x457/0x600 [ 418.902071][T16152] do_dentry_open+0x953/0x13f0 [ 418.907366][T16152] vfs_open+0x3b/0x340 [ 418.911953][T16152] path_openat+0x2ee5/0x3830 [ 418.917063][T16152] do_filp_open+0x1fa/0x410 [ 418.922088][T16152] do_sys_openat2+0x121/0x1c0 [ 418.927289][T16152] __x64_sys_openat+0x138/0x170 [ 418.932665][T16152] do_syscall_64+0xfa/0x3b0 [ 418.937695][T16152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.944121][T16152] [ 418.944121][T16152] -> #1 (set->srcu){.+.+}-{0:0}: [ 418.951334][T16152] lock_sync+0xba/0x160 [ 418.956017][T16152] __synchronize_srcu+0x96/0x3a0 [ 418.961502][T16152] elevator_switch+0x12b/0x640 [ 418.966823][T16152] elevator_change+0x2d4/0x450 [ 418.972106][T16152] elevator_set_default+0x186/0x260 [ 418.978093][T16152] blk_register_queue+0x34e/0x3f0 [ 418.983867][T16152] __add_disk+0x677/0xd50 [ 418.988739][T16152] add_disk_fwnode+0xfc/0x480 [ 418.993949][T16152] nbd_dev_add+0x717/0xae0 [ 418.998885][T16152] nbd_init+0x168/0x1f0 [ 419.003567][T16152] do_one_initcall+0x233/0x820 [ 419.008860][T16152] do_initcall_level+0x104/0x190 [ 419.014329][T16152] do_initcalls+0x59/0xa0 [ 419.019182][T16152] kernel_init_freeable+0x334/0x4b0 [ 419.024992][T16152] kernel_init+0x1d/0x1d0 [ 419.029858][T16152] ret_from_fork+0x436/0x7d0 [ 419.035004][T16152] ret_from_fork_asm+0x1a/0x30 [ 419.040308][T16152] [ 419.040308][T16152] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 419.048220][T16152] validate_chain+0xb9b/0x2140 [ 419.053603][T16152] __lock_acquire+0xab9/0xd20 [ 419.058818][T16152] lock_acquire+0x120/0x360 [ 419.064034][T16152] __mutex_lock+0x187/0x1350 [ 419.069336][T16152] elevator_change+0x19b/0x450 [ 419.074639][T16152] elevator_set_none+0x42/0xb0 [ 419.079933][T16152] blk_mq_update_nr_hw_queues+0x598/0x1aa0 [ 419.086274][T16152] nbd_start_device+0x17f/0xb10 [ 419.091655][T16152] nbd_genl_connect+0x135b/0x18f0 [ 419.097212][T16152] genl_family_rcv_msg_doit+0x212/0x300 [ 419.103320][T16152] genl_rcv_msg+0x60e/0x790 [ 419.108380][T16152] netlink_rcv_skb+0x208/0x470 [ 419.113935][T16152] genl_rcv+0x28/0x40 [ 419.118714][T16152] netlink_unicast+0x82f/0x9e0 [ 419.124098][T16152] netlink_sendmsg+0x805/0xb30 [ 419.129392][T16152] __sock_sendmsg+0x21c/0x270 [ 419.134614][T16152] ____sys_sendmsg+0x505/0x830 [ 419.139900][T16152] ___sys_sendmsg+0x21f/0x2a0 [ 419.145108][T16152] __x64_sys_sendmsg+0x19b/0x260 [ 419.150653][T16152] do_syscall_64+0xfa/0x3b0 [ 419.155676][T16152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.162091][T16152] [ 419.162091][T16152] other info that might help us debug this: [ 419.162091][T16152] [ 419.172399][T16152] Chain exists of: [ 419.172399][T16152] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#54 [ 419.172399][T16152] [ 419.186144][T16152] Possible unsafe locking scenario: [ 419.186144][T16152] [ 419.193594][T16152] CPU0 CPU1 [ 419.199046][T16152] ---- ---- [ 419.204411][T16152] lock(&q->q_usage_counter(io)#54); [ 419.209904][T16152] lock(fs_reclaim); [ 419.216407][T16152] lock(&q->q_usage_counter(io)#54); [ 419.224331][T16152] lock(&q->elevator_lock); [ 419.228926][T16152] [ 419.228926][T16152] *** DEADLOCK *** [ 419.228926][T16152] [ 419.237252][T16152] 6 locks held by syz.6.2875/16152: [ 419.242491][T16152] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 419.250793][T16152] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 419.259854][T16152] #2: ffff888025635988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1aa0 [ 419.271290][T16152] #3: ffff8880256358d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1aa0 [ 419.282972][T16152] #4: ffff88814238f668 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: elevator_change+0x180/0x450 [ 419.293681][T16152] #5: ffff88814238f6a0 (&q->q_usage_counter(queue)#38){+.+.}-{0:0}, at: elevator_change+0x180/0x450 [ 419.304564][T16152] [ 419.304564][T16152] stack backtrace: [ 419.310465][T16152] CPU: 1 UID: 0 PID: 16152 Comm: syz.6.2875 Not tainted syzkaller #0 PREEMPT(full) [ 419.310485][T16152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 419.310496][T16152] Call Trace: [ 419.310503][T16152] [ 419.310509][T16152] dump_stack_lvl+0x189/0x250 [ 419.310532][T16152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.310550][T16152] ? __pfx__printk+0x10/0x10 [ 419.310573][T16152] ? print_lock_name+0xde/0x100 [ 419.310595][T16152] print_circular_bug+0x2ee/0x310 [ 419.310615][T16152] check_noncircular+0x134/0x160 [ 419.310634][T16152] validate_chain+0xb9b/0x2140 [ 419.310659][T16152] __lock_acquire+0xab9/0xd20 [ 419.310684][T16152] ? elevator_change+0x19b/0x450 [ 419.310697][T16152] lock_acquire+0x120/0x360 [ 419.310719][T16152] ? elevator_change+0x19b/0x450 [ 419.310738][T16152] __mutex_lock+0x187/0x1350 [ 419.310756][T16152] ? elevator_change+0x19b/0x450 [ 419.310771][T16152] ? xa_find_after+0xae/0x430 [ 419.310792][T16152] ? xa_find_after+0x402/0x430 [ 419.310811][T16152] ? elevator_change+0x19b/0x450 [ 419.310824][T16152] ? xa_find_after+0xae/0x430 [ 419.310844][T16152] ? __pfx___mutex_lock+0x10/0x10 [ 419.310863][T16152] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 419.310884][T16152] elevator_change+0x19b/0x450 [ 419.310898][T16152] ? elevator_set_none+0x37/0xb0 [ 419.310914][T16152] elevator_set_none+0x42/0xb0 [ 419.310929][T16152] blk_mq_update_nr_hw_queues+0x598/0x1aa0 [ 419.310954][T16152] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 419.310979][T16152] ? sysfs_add_file_mode_ns+0x259/0x300 [ 419.311006][T16152] nbd_start_device+0x17f/0xb10 [ 419.311025][T16152] ? device_create_file+0xf4/0x1c0 [ 419.311044][T16152] nbd_genl_connect+0x135b/0x18f0 [ 419.311062][T16152] ? __pfx_nbd_genl_connect+0x10/0x10 [ 419.311081][T16152] ? __nla_parse+0x40/0x60 [ 419.311099][T16152] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 419.311124][T16152] genl_family_rcv_msg_doit+0x212/0x300 [ 419.311149][T16152] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 419.311175][T16152] ? stack_trace_save+0x9c/0xe0 [ 419.311196][T16152] genl_rcv_msg+0x60e/0x790 [ 419.311219][T16152] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.311239][T16152] ? __pfx_nbd_genl_connect+0x10/0x10 [ 419.311258][T16152] netlink_rcv_skb+0x208/0x470 [ 419.311273][T16152] ? __lock_acquire+0xab9/0xd20 [ 419.311295][T16152] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.311315][T16152] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.311337][T16152] ? down_read+0x1ad/0x2e0 [ 419.311363][T16152] genl_rcv+0x28/0x40 [ 419.311381][T16152] netlink_unicast+0x82f/0x9e0 [ 419.311407][T16152] ? __pfx_netlink_unicast+0x10/0x10 [ 419.311431][T16152] ? netlink_sendmsg+0x642/0xb30 [ 419.311446][T16152] ? skb_put+0x11b/0x210 [ 419.311466][T16152] netlink_sendmsg+0x805/0xb30 [ 419.311485][T16152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.311503][T16152] ? aa_sock_msg_perm+0xf1/0x1d0 [ 419.311519][T16152] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.311536][T16152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.311552][T16152] __sock_sendmsg+0x21c/0x270 [ 419.311577][T16152] ____sys_sendmsg+0x505/0x830 [ 419.311599][T16152] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.311621][T16152] ? import_iovec+0x74/0xa0 [ 419.311643][T16152] ___sys_sendmsg+0x21f/0x2a0 [ 419.311662][T16152] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.311694][T16152] ? __fget_files+0x2a/0x420 [ 419.311706][T16152] ? __fget_files+0x3a0/0x420 [ 419.311723][T16152] __x64_sys_sendmsg+0x19b/0x260 [ 419.311743][T16152] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 419.311766][T16152] ? rcu_is_watching+0x15/0xb0 [ 419.311784][T16152] ? do_syscall_64+0xbe/0x3b0 [ 419.311802][T16152] do_syscall_64+0xfa/0x3b0 [ 419.311817][T16152] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.311833][T16152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.311848][T16152] ? clear_bhb_loop+0x60/0xb0 [ 419.311865][T16152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.311880][T16152] RIP: 0033:0x7fbeff78eba9 [ 419.311894][T16152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.311909][T16152] RSP: 002b:00007fbf00690038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.311926][T16152] RAX: ffffffffffffffda RBX: 00007fbeff9d5fa0 RCX: 00007fbeff78eba9 [ 419.311938][T16152] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000006 [ 419.311948][T16152] RBP: 00007fbeff811e19 R08: 0000000000000000 R09: 0000000000000000 [ 419.311958][T16152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.311968][T16152] R13: 00007fbeff9d6038 R14: 00007fbeff9d5fa0 R15: 00007ffff0f30098 [ 419.311984][T16152] [ 419.786135][T16165] __nla_validate_parse: 3 callbacks suppressed [ 419.786155][T16165] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2878'. [ 419.802036][ T5980] tipc: Node number set to 1165160222 [ 419.816553][ T78] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.828722][ T78] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.837696][T16168] netlink: 'syz.5.2879': attribute type 21 has an invalid length. [ 419.848920][T16168] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2879'. [ 419.863434][T16165] xfrm2: entered promiscuous mode [ 419.869331][T16165] xfrm2: entered allmulticast mode [ 419.884435][ T5871] block nbd5: Receive control failed (result -32) [ 419.891580][ T5869] block nbd5: Receive control failed (result -32) [ 419.903607][ T78] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.917036][ T78] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.925741][T16152] nbd5: detected capacity change from 0 to 127 [ 419.934423][T12690] block nbd5: Dead connection, failed to find a fallback [ 419.942603][T12690] block nbd5: shutting down sockets [ 419.950646][T12690] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 419.960297][T12690] Buffer I/O error on dev nbd5, logical block 0, async page read [ 419.969564][T12690] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 419.982124][T12690] Buffer I/O error on dev nbd5, logical block 1, async page read [ 419.991831][T12690] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 420.002008][T12690] Buffer I/O error on dev nbd5, logical block 2, async page read [ 420.010740][T12690] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 420.020699][T12690] Buffer I/O error on dev nbd5, logical block 3, async page read [ 420.030610][T12690] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 420.040711][T12690] Buffer I/O error on dev nbd5, logical block 0, async page read [ 420.049022][T12690] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 420.049971][ T78] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.058979][T12690] Buffer I/O error on dev nbd5, logical block 1, async page read [ 420.071884][ T78] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.077984][T12690] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 420.098136][T12690] Buffer I/O error on dev nbd5, logical block 2, async page read [ 420.106652][T12690] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 420.116733][T12690] Buffer I/O error on dev nbd5, logical block 3, async page read [ 420.124714][T12690] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 420.134388][T12690] Buffer I/O error on dev nbd5, logical block 0, async page read [ 420.143155][T12690] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 420.152799][T12690] Buffer I/O error on dev nbd5, logical block 1, async page read [ 420.162464][T12690] ldm_validate_partition_table(): Disk read failed. [ 420.170544][T12690] Dev nbd5: unable to read RDB block 0 [ 420.177479][ T78] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.177544][T12690] nbd5: unable to read partition table [ 420.190071][ T78] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.207870][T12690] ldm_validate_partition_table(): Disk read failed. [ 420.218333][T12690] Dev nbd5: unable to read RDB block 0 [ 420.224646][T12690] nbd5: unable to read partition table [ 420.278242][ T78] bridge_slave_1: left allmulticast mode [ 420.283968][ T78] bridge_slave_1: left promiscuous mode [ 420.290256][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.298706][ T78] bridge_slave_0: left allmulticast mode [ 420.304383][ T78] bridge_slave_0: left promiscuous mode [ 420.310473][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.389073][ T78] dvmrp1 (unregistering): left allmulticast mode [ 420.561978][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.572206][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.582039][ T78] bond0 (unregistering): Released all slaves [ 420.591100][ T78] bond1 (unregistering): Released all slaves [ 420.600897][ T78] bond2 (unregistering): Released all slaves [ 420.712440][ T78] bond3 (unregistering): Released all slaves [ 420.724278][ T78] bond4 (unregistering): (slave bond5): Releasing backup interface [ 420.732901][ T78] bond5 (unregistering): left promiscuous mode [ 420.740207][ T78] bond4 (unregistering): Released all slaves [ 420.861024][ T78] bond5 (unregistering): Released all slaves [ 420.987303][ T78] bond6 (unregistering): Released all slaves [ 421.267589][ T78] hsr_slave_0: left promiscuous mode [ 421.273359][ T78] hsr_slave_1: left promiscuous mode [ 421.279795][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.287298][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.303826][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.312033][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.322613][ T78] veth1_macvtap: left promiscuous mode [ 421.328430][ T78] veth0_macvtap: left promiscuous mode [ 421.333981][ T78] veth1_vlan: left promiscuous mode [ 421.339457][ T78] veth0_vlan: left promiscuous mode [ 421.478686][ T78] team0 (unregistering): Port device team_slave_1 removed [ 421.506633][ T78] team0 (unregistering): Port device team_slave_0 removed [ 421.665348][ T1101] block nbd4: Possible stuck request ffff8880257d0000: control (read@0,1024B). Runtime 30 seconds [ 421.677657][ T1101] block nbd4: Possible stuck request ffff8880257d01c0: control (read@1024,1024B). Runtime 30 seconds [ 421.690406][ T1101] block nbd4: Possible stuck request ffff8880257d0380: control (read@2048,1024B). Runtime 30 seconds [ 421.701647][ T1101] block nbd4: Possible stuck request ffff8880257d0540: control (read@3072,1024B). Runtime 30 seconds [ 421.841003][ T78] IPVS: stop unused estimator thread 0...